Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://35651 [ 32.694558][ T4342] cgroup: Unknown subsys name 'net' [ 33.020098][ T4342] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.312288][ T4342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.730377][ T4357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.732138][ T4357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.733627][ T4357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.735293][ T4357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.736872][ T4357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.739734][ T4357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.563794][ T4399] chnl_net:caif_netlink_parms(): no params data found [ 39.585518][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.586891][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.588901][ T4399] device bridge_slave_0 entered promiscuous mode [ 39.591200][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.592492][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.593976][ T4399] device bridge_slave_1 entered promiscuous mode [ 39.600782][ T4399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.608119][ T4399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.614329][ T4399] team0: Port device team_slave_0 added [ 39.616331][ T4399] team0: Port device team_slave_1 added [ 39.622390][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.623694][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.628613][ T4399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.631363][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.632622][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.637123][ T4399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.698873][ T4399] device hsr_slave_0 entered promiscuous mode [ 39.737760][ T4399] device hsr_slave_1 entered promiscuous mode [ 39.801809][ T4399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.847234][ T4399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.907557][ T4399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.967334][ T4399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.022728][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.024117][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.025620][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.026793][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.043654][ T4399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.047666][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.050474][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.052661][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.057044][ T4399] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.061313][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.063004][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.064275][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.069095][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.070695][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.071987][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.084209][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.085887][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.090130][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.093372][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.096087][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.099664][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.150162][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.151598][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.154700][ T4399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.161818][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.168784][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.170536][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.172184][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.174265][ T4399] device veth0_vlan entered promiscuous mode [ 40.177331][ T4399] device veth1_vlan entered promiscuous mode [ 40.184553][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.186135][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.187920][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.190417][ T4399] device veth0_macvtap entered promiscuous mode [ 40.192863][ T4399] device veth1_macvtap entered promiscuous mode [ 40.199037][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.209660][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.211884][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.215263][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.216769][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.220776][ T4399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.222384][ T4399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.223948][ T4399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.225519][ T4399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.629667][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.631150][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.720578][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.731134][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.732549][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.733995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.169782][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:41 executed programs: 0 [ 41.311486][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.313265][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.314764][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.316357][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.318484][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.319998][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.365194][ T4449] chnl_net:caif_netlink_parms(): no params data found [ 41.381524][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.382925][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.384672][ T4449] device bridge_slave_0 entered promiscuous mode [ 41.386970][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.389035][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.390736][ T4449] device bridge_slave_1 entered promiscuous mode [ 41.396685][ T4449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.399764][ T4449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.405779][ T4449] team0: Port device team_slave_0 added [ 41.407676][ T4449] team0: Port device team_slave_1 added [ 41.412581][ T4449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.413852][ T4449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.418988][ T4449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.421510][ T4449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.422707][ T4449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.427772][ T4449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.468686][ T4449] device hsr_slave_0 entered promiscuous mode [ 41.508715][ T4449] device hsr_slave_1 entered promiscuous mode [ 41.547710][ T4449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.549159][ T4449] Cannot create hsr debugfs directory [ 43.357864][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 43.378836][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.447975][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 45.659089][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.739952][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.660436][ T4449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.779693][ T4449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.860746][ T4449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.898748][ T4449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.008399][ T4449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.012031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.013694][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.016141][ T4449] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.052004][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.054171][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.055730][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.057019][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.059009][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.062406][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.063987][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.065669][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.067019][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.070066][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.072849][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.075666][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.077764][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.079627][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.082440][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.084148][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.087057][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.089402][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.092428][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.094189][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.096538][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.174523][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.175998][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.180418][ T4449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.185795][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.188915][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.224170][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.226207][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.228106][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.229665][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.231950][ T4449] device veth0_vlan entered promiscuous mode [ 47.235074][ T4449] device veth1_vlan entered promiscuous mode [ 47.241302][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.242870][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.244458][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.246211][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.249605][ T4449] device veth0_macvtap entered promiscuous mode [ 47.251929][ T4449] device veth1_macvtap entered promiscuous mode [ 47.256649][ T4449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.258953][ T4449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.261205][ T4449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.262431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.264123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.265728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.267379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.270473][ T4449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.272366][ T4449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.274562][ T4449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.275964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.278524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.281719][ T4449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.283238][ T4449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.284777][ T4449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.286339][ T4449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.304378][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.307517][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.517633][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 47.650767][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.659411][ T1618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.660865][ T1618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.662387][ T1618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.744720][ T4512] loop0: detected capacity change from 0 to 8192 [ 47.754237][ T4512] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.756448][ T4512] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.758247][ T4512] REISERFS (device loop0): using ordered data mode [ 47.759390][ T4512] reiserfs: using flush barriers [ 47.760705][ T4512] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.763644][ T4512] REISERFS (device loop0): checking transaction log (loop0) [ 47.783759][ T4512] REISERFS (device loop0): Using tea hash to sort names [ 47.785508][ T4512] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.819290][ T4512] ================================================================== [ 47.820724][ T4512] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x5d0/0xa40 [ 47.821987][ T4512] Read of size 48 at addr ffff0000ea686ff0 by task syz.0.17/4512 [ 47.823309][ T4512] [ 47.823712][ T4512] CPU: 0 PID: 4512 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.824858][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.826588][ T4512] Call trace: [ 47.827161][ T4512] dump_backtrace+0x1c4/0x1f0 [ 47.828021][ T4512] show_stack+0x2c/0x3c [ 47.828810][ T4512] __dump_stack+0x30/0x40 [ 47.829627][ T4512] dump_stack_lvl+0xf4/0x15c [ 47.830508][ T4512] print_address_description+0x88/0x218 [ 47.831541][ T4512] print_report+0x50/0x68 [ 47.832338][ T4512] kasan_report+0xa8/0xfc [ 47.833158][ T4512] kasan_check_range+0x258/0x290 [ 47.834039][ T4512] memcpy+0x48/0x90 [ 47.834760][ T4512] leaf_paste_in_buffer+0x5d0/0xa40 [ 47.835732][ T4512] leaf_copy_dir_entries+0x444/0x780 [ 47.836711][ T4512] leaf_copy_boundary_item+0x87c/0x19f4 [ 47.837742][ T4512] leaf_move_items+0x6c8/0xbd8 [ 47.838632][ T4512] leaf_shift_left+0xc4/0x3ac [ 47.839473][ T4512] balance_leaf+0xeb4/0xdee0 [ 47.840333][ T4512] do_balance+0x270/0x794 [ 47.841099][ T4512] reiserfs_delete_item+0x914/0xcb4 [ 47.842069][ T4512] direct2indirect+0x7e0/0xed8 [ 47.842942][ T4512] reiserfs_get_block+0x336c/0x3860 [ 47.843905][ T4512] __block_write_begin_int+0x3d8/0x13c0 [ 47.844924][ T4512] __block_write_begin+0x7c/0xa0 [ 47.845850][ T4512] reiserfs_write_begin+0x328/0x718 [ 47.846812][ T4512] generic_perform_write+0x240/0x508 [ 47.847781][ T4512] __generic_file_write_iter+0x130/0x250 [ 47.848834][ T4512] generic_file_write_iter+0xb4/0x2b0 [ 47.849852][ T4512] vfs_write+0x3c8/0x7c8 [ 47.850774][ T4512] ksys_write+0x12c/0x228 [ 47.851698][ T4512] __arm64_sys_write+0x7c/0x90 [ 47.852715][ T4512] invoke_syscall+0x98/0x290 [ 47.853651][ T4512] el0_svc_common+0x13c/0x258 [ 47.854607][ T4512] do_el0_svc+0x5c/0x134 [ 47.855480][ T4512] el0_svc+0x58/0x128 [ 47.856288][ T4512] el0t_64_sync_handler+0x84/0xf0 [ 47.857323][ T4512] el0t_64_sync+0x18c/0x190 [ 47.858265][ T4512] [ 47.858730][ T4512] The buggy address belongs to the physical page: [ 47.860009][ T4512] page:000000007d57d9c1 refcount:3 mapcount:0 mapping:00000000658121bc index:0x214 pfn:0x12a686 [ 47.862084][ T4512] memcg:ffff0000dbc3e000 [ 47.862929][ T4512] aops:def_blk_aops ino:700000 [ 47.863895][ T4512] flags: 0x5ffc40000002042(referenced|workingset|private|node=0|zone=2|lastcpupid=0x7ff) [ 47.865894][ T4512] raw: 05ffc40000002042 0000000000000000 dead000000000122 ffff0000c56bbf18 [ 47.867616][ T4512] raw: 0000000000000214 ffff0000d7db6570 00000003ffffffff ffff0000dbc3e000 [ 47.869330][ T4512] page dumped because: kasan: bad access detected [ 47.870587][ T4512] [ 47.871046][ T4512] Memory state around the buggy address: [ 47.872141][ T4512] ffff0000ea686f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.873701][ T4512] ffff0000ea686f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.875156][ T4512] >ffff0000ea687000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.876607][ T4512] ^ [ 47.877357][ T4512] ffff0000ea687080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.878864][ T4512] ffff0000ea687100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.880344][ T4512] ================================================================== [ 47.882825][ T4512] Disabling lock debugging due to kernel taint [ 47.883926][ T4512] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024) [ 47.885689][ T4512] REISERFS (device loop0): Remounting filesystem read-only [ 47.887019][ T4512] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 262180 (1024) [ 47.888867][ T4512] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 589868 (1024) [ 47.890593][ T4512] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared [ 47.892345][ T4512] ------------[ cut here ]------------ [ 47.893304][ T4512] WARNING: CPU: 0 PID: 4512 at fs/reiserfs/journal.c:3397 journal_end+0x1ac/0x26c [ 47.894840][ T4512] Modules linked in: [ 47.895505][ T4512] CPU: 0 PID: 4512 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 47.897046][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.898921][ T4512] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.900350][ T4512] pc : journal_end+0x1ac/0x26c [ 47.901240][ T4512] lr : journal_end+0x1ac/0x26c [ 47.902153][ T4512] sp : ffff800020d57670 [ 47.902953][ T4512] x29: ffff800020d57670 x28: 1fffe0001c9dd2b3 x27: dfff800000000000 [ 47.904491][ T4512] x26: 1ffff000041aaee6 x25: 1ffff000041aaee4 x24: 1fffe0001a45a240 [ 47.906005][ T4512] x23: dfff800000000000 x22: 0000000000000000 x21: ffff800020d57734 [ 47.907564][ T4512] x20: ffff0000d22d1200 x19: ffff800020d57720 x18: 1fffe00033e7037e [ 47.909034][ T4512] x17: 6f6c62203a6b636f x16: ffff800011b9ea98 x15: 0000000000000000 [ 47.910501][ T4512] x14: 0000000000000006 x13: 1ffff000041aaee5 x12: 0000000000000000 [ 47.911974][ T4512] x11: ff00800008cfc8d4 x10: 0000000000000000 x9 : ffff800008cfc8d4 [ 47.913448][ T4512] x8 : ffff0000d22d0000 x7 : 0000000000000000 x6 : ffff800008d15338 [ 47.914996][ T4512] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000020 [ 47.916543][ T4512] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.918009][ T4512] Call trace: [ 47.918597][ T4512] journal_end+0x1ac/0x26c [ 47.919377][ T4512] reiserfs_truncate_file+0x3b0/0xb04 [ 47.920448][ T4512] reiserfs_write_end+0x67c/0x820 [ 47.921423][ T4512] generic_perform_write+0x30c/0x508 [ 47.922431][ T4512] __generic_file_write_iter+0x130/0x250 [ 47.923483][ T4512] generic_file_write_iter+0xb4/0x2b0 [ 47.924502][ T4512] vfs_write+0x3c8/0x7c8 [ 47.925322][ T4512] ksys_write+0x12c/0x228 [ 47.926133][ T4512] __arm64_sys_write+0x7c/0x90 [ 47.927031][ T4512] invoke_syscall+0x98/0x290 [ 47.927934][ T4512] el0_svc_common+0x13c/0x258 [ 47.928832][ T4512] do_el0_svc+0x5c/0x134 [ 47.929650][ T4512] el0_svc+0x58/0x128 [ 47.930362][ T4512] el0t_64_sync_handler+0x84/0xf0 [ 47.931302][ T4512] el0t_64_sync+0x18c/0x190 [ 47.932139][ T4512] irq event stamp: 41369 [ 47.932912][ T4512] hardirqs last enabled at (41369): [] finish_lock_switch+0xb0/0x1c8 [ 47.934686][ T4512] hardirqs last disabled at (41368): [] __schedule+0x294/0x1a6c [ 47.936680][ T4512] softirqs last enabled at (40974): [] local_bh_enable+0x10/0x34 [ 47.938594][ T4512] softirqs last disabled at (40972): [] local_bh_disable+0x10/0x34 [ 47.940465][ T4512] ---[ end trace 0000000000000000 ]---