Warning: Permanently added '10.128.1.65' (ED25519) to the list of known hosts. [ 36.768269][ T4221] chnl_net:caif_netlink_parms(): no params data found [ 36.800157][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.802240][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.804472][ T4221] device bridge_slave_0 entered promiscuous mode [ 36.808434][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.810151][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.812526][ T4221] device bridge_slave_1 entered promiscuous mode [ 36.825647][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.830236][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.844181][ T4221] team0: Port device team_slave_0 added [ 36.847147][ T4221] team0: Port device team_slave_1 added [ 36.859212][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.860838][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.867547][ T4221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.871818][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.873580][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.879824][ T4221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.933028][ T4221] device hsr_slave_0 entered promiscuous mode [ 36.971292][ T4221] device hsr_slave_1 entered promiscuous mode [ 37.083914][ T4221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.133421][ T4221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.172725][ T4221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.213688][ T4221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.277701][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.279580][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.281687][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.283481][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.319217][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.326459][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.330291][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.334204][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.336867][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.344509][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.353271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.355505][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.357160][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.359191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.361991][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.363703][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.375033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.377589][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.389295][ T4221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.394974][ T4221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.399878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.402746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.405364][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.408011][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.418237][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.420248][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.426992][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.438231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.450563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.453765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.455935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.459495][ T4221] device veth0_vlan entered promiscuous mode [ 37.465828][ T4221] device veth1_vlan entered promiscuous mode [ 37.477878][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.481485][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.483994][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.488133][ T4221] device veth0_macvtap entered promiscuous mode [ 37.492774][ T4221] device veth1_macvtap entered promiscuous mode [ 37.501965][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.504283][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.507076][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.511959][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.515383][ T4221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.517530][ T4221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.519592][ T4221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.523023][ T4221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.526816][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 37.597749][ T4221] loop0: detected capacity change from 0 to 8192 [ 37.602080][ T4221] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 37.605342][ T4221] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 37.607781][ T4221] REISERFS (device loop0): using ordered data mode [ 37.609440][ T4221] reiserfs: using flush barriers [ 37.611992][ T4221] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.616098][ T4221] REISERFS (device loop0): checking transaction log (loop0) [ 37.619699][ T4221] REISERFS (device loop0): Using r5 hash to sort names [ 37.622267][ T4221] ================================================================== [ 37.624265][ T4221] BUG: KASAN: use-after-free in search_by_entry_key+0x45c/0xe88 [ 37.626079][ T4221] Read of size 4 at addr ffff0000e0892754 by task syz-executor426/4221 [ 37.627998][ T4221] [ 37.628544][ T4221] CPU: 1 PID: 4221 Comm: syz-executor426 Not tainted 6.1.54-syzkaller #0 [ 37.630571][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 37.633101][ T4221] Call trace: [ 37.633942][ T4221] dump_backtrace+0x1c8/0x1f4 [ 37.635146][ T4221] show_stack+0x2c/0x3c [ 37.636182][ T4221] dump_stack_lvl+0x108/0x170 [ 37.637368][ T4221] print_report+0x174/0x4c0 [ 37.638565][ T4221] kasan_report+0xd4/0x130 [ 37.639651][ T4221] __asan_report_load_n_noabort+0x28/0x34 [ 37.641149][ T4221] search_by_entry_key+0x45c/0xe88 [ 37.642452][ T4221] reiserfs_find_entry+0x288/0x149c [ 37.643762][ T4221] reiserfs_lookup+0x184/0x3c4 [ 37.644932][ T4221] __lookup_slow+0x250/0x374 [ 37.646148][ T4221] lookup_one_len+0x178/0x28c [ 37.647280][ T4221] reiserfs_lookup_privroot+0x8c/0x204 [ 37.648610][ T4221] reiserfs_fill_super+0x15b4/0x2028 [ 37.649926][ T4221] mount_bdev+0x274/0x370 [ 37.650983][ T4221] get_super_block+0x44/0x58 [ 37.652108][ T4221] legacy_get_tree+0xd4/0x16c [ 37.653308][ T4221] vfs_get_tree+0x90/0x274 [ 37.654418][ T4221] do_new_mount+0x25c/0x8c4 [ 37.655626][ T4221] path_mount+0x590/0xe58 [ 37.656748][ T4221] __arm64_sys_mount+0x45c/0x594 [ 37.657998][ T4221] invoke_syscall+0x98/0x2c0 [ 37.659153][ T4221] el0_svc_common+0x138/0x258 [ 37.660399][ T4221] do_el0_svc+0x64/0x218 [ 37.661471][ T4221] el0_svc+0x58/0x168 [ 37.662424][ T4221] el0t_64_sync_handler+0x84/0xf0 [ 37.663657][ T4221] el0t_64_sync+0x18c/0x190 [ 37.664754][ T4221] [ 37.665295][ T4221] The buggy address belongs to the physical page: [ 37.666972][ T4221] page:000000000986eae4 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x120892 [ 37.669571][ T4221] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 37.671361][ T4221] raw: 05ffc00000000000 fffffc00038224c8 ffff0001b4588260 0000000000000000 [ 37.673449][ T4221] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 37.675519][ T4221] page dumped because: kasan: bad access detected [ 37.677125][ T4221] [ 37.677730][ T4221] Memory state around the buggy address: [ 37.679121][ T4221] ffff0000e0892600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.681206][ T4221] ffff0000e0892680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.683259][ T4221] >ffff0000e0892700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.685349][ T4221] ^ [ 37.687031][ T4221] ffff0000e0892780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.689096][ T4221] ffff0000e0892800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 37.691193][ T4221] ================================================================== [ 37.694073][ T4221] Disabling lock debugging due to kernel taint