Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://39645 syzkaller login: [ 31.438777][ T4341] cgroup: Unknown subsys name 'net' [ 31.707993][ T4341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.993668][ T4341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.852723][ T4364] chnl_net:caif_netlink_parms(): no params data found [ 39.869502][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.870822][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.872523][ T4364] device bridge_slave_0 entered promiscuous mode [ 39.875170][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.876501][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.878106][ T4364] device bridge_slave_1 entered promiscuous mode [ 39.888149][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.890729][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.897010][ T4364] team0: Port device team_slave_0 added [ 39.898768][ T4364] team0: Port device team_slave_1 added [ 39.904223][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.905875][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.910353][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.913211][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.914407][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.919594][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.965978][ T4364] device hsr_slave_0 entered promiscuous mode [ 40.015067][ T4364] device hsr_slave_1 entered promiscuous mode [ 40.097880][ T4364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.127199][ T4364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.187377][ T4364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.237921][ T4364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.272234][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.273626][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.275164][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.276354][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.294762][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.298873][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.301323][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.303262][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.306369][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.310529][ T4364] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.313940][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.317834][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.319080][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.321804][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.323429][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.324767][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.331528][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.333076][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.336459][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.339778][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.342554][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.345208][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.394236][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.396234][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.399753][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.405776][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.411489][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.413270][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.414801][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.417854][ T4364] device veth0_vlan entered promiscuous mode [ 40.422419][ T4364] device veth1_vlan entered promiscuous mode [ 40.429913][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.431496][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.433164][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.435852][ T4364] device veth0_macvtap entered promiscuous mode [ 40.438390][ T4364] device veth1_macvtap entered promiscuous mode [ 40.443367][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.444747][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.447703][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.451195][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.452647][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.485991][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.487561][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.489016][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.490449][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.866615][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.208629][ T4402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.210292][ T4402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.211711][ T4402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.213385][ T4402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.216060][ T4402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.217471][ T4402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.360115][ T562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.361577][ T562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.363402][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.372141][ T562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.373518][ T562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.374990][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:41 executed programs: 0 [ 42.012559][ T4402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.014195][ T4402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.016028][ T4402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.017682][ T4402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.019179][ T4402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.020549][ T4402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.063348][ T4433] chnl_net:caif_netlink_parms(): no params data found [ 42.079840][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.081213][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.082822][ T4433] device bridge_slave_0 entered promiscuous mode [ 42.084862][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.086480][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.088359][ T4433] device bridge_slave_1 entered promiscuous mode [ 42.094706][ T4433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.097995][ T4433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.104132][ T4433] team0: Port device team_slave_0 added [ 42.106450][ T4433] team0: Port device team_slave_1 added [ 42.111431][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.112632][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.117238][ T4433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.119736][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.120901][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.125279][ T4433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.176065][ T4433] device hsr_slave_0 entered promiscuous mode [ 42.215112][ T4433] device hsr_slave_1 entered promiscuous mode [ 42.255042][ T4433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.256541][ T4433] Cannot create hsr debugfs directory [ 43.715920][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.075416][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 46.156425][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.165038][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 46.236588][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.177289][ T4433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.257490][ T4433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.337299][ T4433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.376097][ T4433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.515600][ T4433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.519739][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.521352][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.524138][ T4433] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.588713][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.590488][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.592267][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.593588][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.595586][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.598419][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.600024][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.601740][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.602992][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.606248][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.609044][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.611839][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.613678][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.615555][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.618229][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.619945][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.622797][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.624526][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.628782][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.630454][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.632794][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.701803][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.703319][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.707593][ T4433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.713094][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.715991][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.752534][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.754282][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.756611][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.758143][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.760435][ T4433] device veth0_vlan entered promiscuous mode [ 47.763624][ T4433] device veth1_vlan entered promiscuous mode [ 47.769952][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.771710][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.773203][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.775411][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.819191][ T4433] device veth0_macvtap entered promiscuous mode [ 47.821657][ T4433] device veth1_macvtap entered promiscuous mode [ 47.826233][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.828082][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.830135][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.831430][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.833115][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.834705][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.837533][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.839930][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.841672][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.843836][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.845331][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.847120][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.849655][ T4433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.851166][ T4433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.852624][ T4433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.854173][ T4433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.872378][ T1576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.874853][ T1576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.948272][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.954612][ T1576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.956580][ T1576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.957941][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.978046][ T11] device hsr_slave_0 left promiscuous mode 1970/01/01 00:00:47 executed programs: 2 [ 48.007122][ T11] device hsr_slave_1 left promiscuous mode [ 48.024329][ T4483] loop0: detected capacity change from 0 to 8192 [ 48.047915][ T4483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.050068][ T4483] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.051575][ T4483] REISERFS (device loop0): using ordered data mode [ 48.052650][ T4483] reiserfs: using flush barriers [ 48.060594][ T4483] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.063482][ T4483] REISERFS (device loop0): checking transaction log (loop0) [ 48.085027][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.086420][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.088569][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.089849][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.093613][ T11] device bridge_slave_1 left promiscuous mode [ 48.095009][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.109091][ T4483] REISERFS (device loop0): Using tea hash to sort names [ 48.110818][ T4483] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 48.115459][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.118148][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.120580][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.122945][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.125500][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.127945][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.130550][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.133095][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.135765][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.138252][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.140751][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.143363][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.147087][ T11] device bridge_slave_0 left promiscuous mode [ 48.148332][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.149876][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.152242][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.155380][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.158528][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.160936][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.163359][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.166145][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.168701][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.171024][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.173428][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.175779][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.178337][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.180633][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.183072][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.185766][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.188455][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.190751][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.205049][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.235125][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 48.291299][ T4485] loop0: detected capacity change from 0 to 8192 [ 48.293473][ T4485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.296105][ T11] device veth1_macvtap left promiscuous mode [ 48.296494][ T4485] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.297281][ T11] device veth0_macvtap left promiscuous mode [ 48.298874][ T4485] REISERFS (device loop0): using ordered data mode [ 48.300194][ T11] device veth1_vlan left promiscuous mode [ 48.300969][ T4485] reiserfs: using flush barriers [ 48.301987][ T11] device veth0_vlan left promiscuous mode [ 48.304241][ T4485] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.309226][ T4485] REISERFS (device loop0): checking transaction log (loop0) [ 48.340538][ T4485] REISERFS (device loop0): Using tea hash to sort names [ 48.341903][ T4485] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 48.345323][ T4485] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 48.348010][ T4485] ================================================================== [ 48.349369][ T4485] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x1dc/0xa40 [ 48.350666][ T4485] Write of size 3936 at addr ffff0000ea021140 by task syz.0.18/4485 [ 48.351996][ T4485] [ 48.352357][ T4485] CPU: 1 PID: 4485 Comm: syz.0.18 Not tainted syzkaller #0 [ 48.353529][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.355174][ T4485] Call trace: [ 48.355740][ T4485] dump_backtrace+0x1c4/0x1f0 [ 48.356560][ T4485] show_stack+0x2c/0x3c [ 48.357277][ T4485] __dump_stack+0x30/0x40 [ 48.358028][ T4485] dump_stack_lvl+0xf4/0x15c [ 48.358808][ T4485] print_address_description+0x88/0x218 [ 48.359788][ T4485] print_report+0x50/0x68 [ 48.360563][ T4485] kasan_report+0xa8/0xfc [ 48.361339][ T4485] kasan_check_range+0x258/0x290 [ 48.362211][ T4485] memmove+0x60/0x90 [ 48.362869][ T4485] leaf_paste_in_buffer+0x1dc/0xa40 [ 48.363756][ T4485] leaf_copy_boundary_item+0x928/0x19f4 [ 48.364718][ T4485] leaf_move_items+0x6c8/0xbd8 [ 48.365566][ T4485] leaf_shift_left+0xc4/0x3ac [ 48.366401][ T4485] balance_leaf+0x3db8/0xdee0 [ 48.367266][ T4485] do_balance+0x270/0x794 [ 48.368069][ T4485] reiserfs_paste_into_item+0x640/0x6e8 [ 48.369085][ T4485] reiserfs_get_block+0x1538/0x3860 [ 48.369995][ T4485] __block_write_begin_int+0x3d8/0x13c0 [ 48.371010][ T4485] __block_write_begin+0x7c/0xa0 [ 48.371880][ T4485] reiserfs_write_begin+0x328/0x718 [ 48.372834][ T4485] generic_perform_write+0x240/0x508 [ 48.373797][ T4485] __generic_file_write_iter+0x130/0x250 [ 48.374838][ T4485] generic_file_write_iter+0xb4/0x2b0 [ 48.375796][ T4485] vfs_write+0x3c8/0x7c8 [ 48.376604][ T4485] __arm64_sys_pwrite64+0x178/0x210 [ 48.377581][ T4485] invoke_syscall+0x98/0x290 [ 48.378437][ T4485] el0_svc_common+0x13c/0x258 [ 48.379458][ T4485] do_el0_svc+0x5c/0x134 [ 48.380392][ T4485] el0_svc+0x58/0x128 [ 48.381264][ T4485] el0t_64_sync_handler+0x84/0xf0 [ 48.382345][ T4485] el0t_64_sync+0x18c/0x190 [ 48.383310][ T4485] [ 48.383740][ T4485] The buggy address belongs to the physical page: [ 48.384920][ T4485] page:0000000036087d8a refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12a021 [ 48.386837][ T4485] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 48.388188][ T4485] raw: 05ffc00000000000 fffffc0003b427c8 fffffc0003a90248 0000000000000000 [ 48.389823][ T4485] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 48.391381][ T4485] page dumped because: kasan: bad access detected [ 48.392562][ T4485] [ 48.392996][ T4485] Memory state around the buggy address: [ 48.394098][ T4485] ffff0000ea021000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.395580][ T4485] ffff0000ea021080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.397044][ T4485] >ffff0000ea021100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.398561][ T4485] ^ [ 48.399671][ T4485] ffff0000ea021180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.401086][ T4485] ffff0000ea021200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.402477][ T4485] ================================================================== [ 48.405120][ T4485] Disabling lock debugging due to kernel taint [ 48.407464][ T11] Unable to handle kernel paging request at virtual address 001fc07ffaa064c8 [ 48.409079][ T11] Mem abort info: [ 48.409710][ T11] ESR = 0x0000000096000004 [ 48.410549][ T11] EC = 0x25: DABT (current EL), IL = 32 bits [ 48.411641][ T11] SET = 0, FnV = 0 [ 48.412315][ T11] EA = 0, S1PTW = 0 [ 48.412993][ T11] FSC = 0x04: level 0 translation fault [ 48.413985][ T11] Data abort info: [ 48.414672][ T11] ISV = 0, ISS = 0x00000004 [ 48.414919][ C1] ================================================================================ [ 48.415494][ T11] CM = 0, WnR = 0 [ 48.417001][ C1] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 48.417618][ T11] [001fc07ffaa064c8] address between user and kernel address ranges [ 48.418964][ C1] index 15386 is out of range for type 'unsigned long[8]' [ 48.420274][ T11] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 48.421621][ C1] CPU: 1 PID: 4485 Comm: syz.0.18 Tainted: G B syzkaller #0 [ 48.422750][ T11] Modules linked in: [ 48.424310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.424924][ T11] [ 48.426714][ C1] Call trace: [ 48.427099][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G B syzkaller #0 [ 48.427696][ C1] dump_backtrace+0x1c4/0x1f0 [ 48.429222][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.430076][ C1] show_stack+0x2c/0x3c [ 48.431832][ T11] Workqueue: netns cleanup_net [ 48.432574][ C1] __dump_stack+0x30/0x40 [ 48.433432][ T11] [ 48.434195][ C1] dump_stack_lvl+0xf4/0x15c [ 48.434591][ T11] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 48.435442][ C1] dump_stack+0x1c/0x5c [ 48.436815][ T11] pc : neigh_flush_dev+0x220/0x7f8 [ 48.437543][ C1] ubsan_epilogue+0x14/0x48 [ 48.438445][ T11] lr : neigh_flush_dev+0x1ec/0x7f8 [ 48.439237][ C1] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 48.440152][ T11] sp : ffff80001cb774e0 [ 48.441154][ C1] queued_spin_lock_slowpath+0x8a8/0xc14 [ 48.441894][ T11] x29: ffff80001cb77550 [ 48.442873][ C1] do_raw_spin_lock+0x2f4/0x2f8 [ 48.443593][ T11] x28: dfff800000000000 [ 48.444396][ C1] _raw_spin_lock_irqsave+0x74/0xb0 [ 48.445171][ T11] x27: ffff0000d98d5a00 [ 48.446060][ C1] ref_tracker_free+0x114/0x6c0 [ 48.446800][ T11] [ 48.446805][ T11] x26: ffff800017b28540 [ 48.447608][ C1] dst_destroy+0xf4/0x314 [ 48.448001][ T11] x25: d10203ffd503233f [ 48.448663][ C1] dst_destroy_rcu+0x20/0x30 [ 48.449423][ T11] x24: ffff0000dcc3e000 [ 48.450132][ C1] rcu_core+0x848/0x18e8 [ 48.450953][ T11] [ 48.450959][ T11] x23: 0000000000000000 [ 48.451690][ C1] rcu_core_si+0x10/0x1c [ 48.452434][ T11] x22: ffff800017d7d000 [ 48.452816][ C1] handle_softirqs+0x318/0xc90 [ 48.453570][ T11] x21: 0000000000000000 [ 48.454308][ C1] __do_softirq+0x14/0x20 [ 48.455038][ T11] [ 48.455856][ C1] ____do_softirq+0x14/0x20 [ 48.456603][ T11] x20: 000000000000001b [ 48.457312][ C1] call_on_irq_stack+0x30/0x48 [ 48.457711][ T11] x19: d10203ffd5032647 [ 48.458499][ C1] do_softirq_own_stack+0x20/0x2c [ 48.459229][ T11] x18: 1fffe00033e6df7e [ 48.460073][ C1] __irq_exit_rcu+0x23c/0x430 [ 48.460827][ T11] [ 48.461657][ C1] irq_exit_rcu+0x14/0x84 [ 48.462414][ T11] x17: ffff80001539d000 [ 48.463229][ C1] el1_interrupt+0x38/0x54 [ 48.463657][ T11] x16: ffff8000082f32e8 [ 48.464379][ C1] el1h_64_irq_handler+0x18/0x24 [ 48.465122][ T11] x15: 0000000000000000 [ 48.465889][ C1] el1h_64_irq+0x64/0x68 [ 48.466638][ T11] [ 48.466643][ T11] x14: ffff70000396ee9c [ 48.467534][ C1] __memcpy+0x160/0x250 [ 48.468325][ T11] x13: 1ffff0000396ee9c [ 48.469058][ C1] leaf_paste_in_buffer+0x1dc/0xa40 [ 48.469455][ T11] x12: 0000000000000004 [ 48.470163][ C1] balance_leaf+0x4878/0xdee0 [ 48.470915][ T11] [ 48.471644][ C1] do_balance+0x270/0x794 [ 48.472610][ T11] x11: ff0080000ff38e00 [ 48.473332][ C1] reiserfs_paste_into_item+0x640/0x6e8 [ 48.474203][ T11] x10: 0000000000000000 [ 48.474605][ C1] reiserfs_get_block+0x1538/0x3860 [ 48.475370][ T11] x9 : ffff80000ff38e00 [ 48.476093][ C1] __block_write_begin_int+0x3d8/0x13c0 [ 48.477099][ T11] [ 48.477820][ C1] __block_write_begin+0x7c/0xa0 [ 48.478722][ T11] x8 : 1a20407ffaa064c8 [ 48.479433][ C1] reiserfs_write_begin+0x328/0x718 [ 48.480430][ T11] x7 : 0000000000000000 [ 48.480805][ C1] generic_perform_write+0x240/0x508 [ 48.481709][ T11] x6 : ffff80000ff39490 [ 48.482398][ C1] __generic_file_write_iter+0x130/0x250 [ 48.483362][ T11] [ 48.483368][ T11] x5 : 0000000000000000 [ 48.484062][ C1] generic_file_write_iter+0xb4/0x2b0 [ 48.485044][ T11] x4 : 0000000000000001 [ 48.485766][ C1] vfs_write+0x3c8/0x7c8 [ 48.486796][ T11] x3 : ffff80000ff38e44 [ 48.487266][ C1] __arm64_sys_pwrite64+0x178/0x210 [ 48.488036][ T11] [ 48.488984][ C1] invoke_syscall+0x98/0x290 [ 48.489752][ T11] x2 : 0000000000000000 [ 48.490521][ C1] el0_svc_common+0x13c/0x258 [ 48.491283][ T11] x1 : 0000000000000000 [ 48.492232][ C1] do_el0_svc+0x5c/0x134 [ 48.492625][ T11] x0 : 0000000000000000 [ 48.493458][ C1] el0_svc+0x58/0x128 [ 48.494215][ T11] [ 48.495064][ C1] el0t_64_sync_handler+0x84/0xf0 [ 48.495853][ T11] Call trace: [ 48.496608][ C1] el0t_64_sync+0x18c/0x190 [ 48.497349][ T11] neigh_flush_dev+0x220/0x7f8 [ 48.498054][ C1] ================================================================================ [ 48.498527][ T11] __neigh_ifdown+0x54/0x3d8 [ 48.499441][ C1] Unable to handle kernel paging request at virtual address 002502c17e1eff21 [ 48.500111][ T11] neigh_ifdown+0x2c/0x40 [ 48.500957][ C1] Mem abort info: [ 48.501909][ T11] ndisc_netdev_event+0xcc/0x4a0 [ 48.503602][ C1] ESR = 0x0000000096000004 [ 48.504493][ T11] raw_notifier_call_chain+0xd8/0x168 [ 48.506061][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 48.506886][ T11] dev_close_many+0x2d4/0x448 [ 48.507506][ C1] SET = 0, FnV = 0 [ 48.508468][ T11] unregister_netdevice_many_notify+0x3f4/0x1900 [ 48.509292][ C1] EA = 0, S1PTW = 0 [ 48.510312][ T11] default_device_exit_batch+0x9d4/0xa70 [ 48.511609][ C1] FSC = 0x04: level 0 translation fault [ 48.512503][ T11] cleanup_net+0x650/0xa90 [ 48.513317][ C1] Data abort info: [ 48.514512][ T11] process_one_work+0x7e4/0x13bc [ 48.515285][ C1] ISV = 0, ISS = 0x00000004 [ 48.516359][ T11] worker_thread+0x8cc/0xfe8 [ 48.517489][ C1] CM = 0, WnR = 0 [ 48.518242][ T11] kthread+0x254/0x2e0 [ 48.518951][ C1] [002502c17e1eff21] address between user and kernel address ranges [ 48.519809][ T11] ret_from_fork+0x10/0x20 [ 48.525470][ T11] Code: b4fff6d9 b40002f8 910c2333 d343fe68 (387c6908) [ 48.526753][ T11] ---[ end trace 0000000000000000 ]--- [ 48.776755][ T11] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 48.778104][ T11] SMP: stopping secondary CPUs [ 49.870607][ T11] SMP: failed to stop secondary CPUs 0-1 [ 49.871605][ T11] Kernel Offset: disabled [ 49.872379][ T11] CPU features: 0x0a0000,000f0097,a65bfea7 [ 49.873393][ T11] Memory Limit: none [ 50.124477][ T11] Rebooting in 86400 seconds..