Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. 2025/12/14 09:35:10 parsed 1 programs [ 58.328830][ T4189] cgroup: Unknown subsys name 'net' [ 58.475321][ T4189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.737136][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.924010][ T4230] chnl_net:caif_netlink_parms(): no params data found [ 61.983450][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.992155][ T4230] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.000333][ T4230] device bridge_slave_0 entered promiscuous mode [ 62.009497][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.017734][ T4230] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.025935][ T4230] device bridge_slave_1 entered promiscuous mode [ 62.054234][ T4230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.065561][ T4230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.095449][ T4230] team0: Port device team_slave_0 added [ 62.103094][ T4230] team0: Port device team_slave_1 added [ 62.125300][ T4230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.132371][ T4230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.158298][ T4230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.171145][ T4230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.178084][ T4230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.204076][ T4230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.240268][ T4230] device hsr_slave_0 entered promiscuous mode [ 62.247014][ T4230] device hsr_slave_1 entered promiscuous mode [ 62.367385][ T4230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.378214][ T4230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.388387][ T4230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.398379][ T4230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.469021][ T4230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.482392][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.493502][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.504765][ T4230] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.515202][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.524243][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.535624][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.542858][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.556954][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.567502][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.576464][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.585474][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.592559][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.613515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.622352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.631527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.641349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.649814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.659262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.669051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.681336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.689878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.703981][ T4230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.719200][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.729071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.737473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.842166][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.849583][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.861312][ T4230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.879794][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.889120][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.911995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.928948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.938964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.947418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.958773][ T4230] device veth0_vlan entered promiscuous mode [ 62.982376][ T4230] device veth1_vlan entered promiscuous mode [ 63.014953][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.027517][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.036095][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.045043][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.059021][ T4230] device veth0_macvtap entered promiscuous mode [ 63.068222][ T4230] device veth1_macvtap entered promiscuous mode [ 63.082833][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.091447][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.099413][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.107718][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.116331][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.126365][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.134102][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.143041][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.153846][ T4230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.163582][ T4230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.172382][ T4230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.181346][ T4230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.593159][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.602316][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.626271][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.639936][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.648194][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.657181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/14 09:35:18 executed programs: 0 [ 64.909907][ T4293] chnl_net:caif_netlink_parms(): no params data found [ 64.961968][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.969094][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.977081][ T4293] device bridge_slave_0 entered promiscuous mode [ 64.985306][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.992894][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.001471][ T4293] device bridge_slave_1 entered promiscuous mode [ 65.021954][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.032816][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.057631][ T4293] team0: Port device team_slave_0 added [ 65.065277][ T4293] team0: Port device team_slave_1 added [ 65.088778][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.095852][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.121952][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.134040][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.141199][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.167187][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.205747][ T4293] device hsr_slave_0 entered promiscuous mode [ 65.212615][ T4293] device hsr_slave_1 entered promiscuous mode [ 65.219629][ T4293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.227692][ T4293] Cannot create hsr debugfs directory [ 65.301527][ T4293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.831031][ T4253] Bluetooth: hci0: command 0x0409 tx timeout [ 68.266630][ T4293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.315932][ T4293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.355846][ T4293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.552481][ T4293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.562225][ T4293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.570895][ T4293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.580284][ T4293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.638507][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.652882][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.662267][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.683509][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.693112][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.702025][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.710509][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.717547][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.725943][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.741065][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.749715][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.758728][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.765809][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.791573][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.802517][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.812968][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.823056][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.832688][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.850032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.861300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.878566][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.887204][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.898215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.906961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.910188][ T26] Bluetooth: hci0: command 0x041b tx timeout [ 68.927703][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.943407][ T144] device hsr_slave_0 left promiscuous mode [ 68.949906][ T144] device hsr_slave_1 left promiscuous mode [ 68.957287][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.965339][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.974341][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.982850][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.990629][ T144] device bridge_slave_1 left promiscuous mode [ 68.997398][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.010462][ T144] device bridge_slave_0 left promiscuous mode [ 69.016619][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.032031][ T144] device veth1_macvtap left promiscuous mode [ 69.038168][ T144] device veth0_macvtap left promiscuous mode [ 69.044384][ T144] device veth1_vlan left promiscuous mode [ 69.050918][ T144] device veth0_vlan left promiscuous mode [ 69.175999][ T144] team0 (unregistering): Port device team_slave_1 removed [ 69.187313][ T144] team0 (unregistering): Port device team_slave_0 removed [ 69.202007][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.216568][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.268415][ T144] bond0 (unregistering): Released all slaves [ 69.396444][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.404235][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.417336][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.440959][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.449530][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.466149][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.474433][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.483803][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.492195][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.501714][ T4293] device veth0_vlan entered promiscuous mode [ 69.511760][ T4293] device veth1_vlan entered promiscuous mode [ 69.534749][ T4293] device veth0_macvtap entered promiscuous mode [ 69.545246][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.553895][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.561911][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.570607][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.578956][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.589378][ T4293] device veth1_macvtap entered promiscuous mode [ 69.606098][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.613655][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.621549][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.629871][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.642191][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.649453][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.659146][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.670618][ T4293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.679317][ T4293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.688622][ T4293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.697346][ T4293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.758148][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.772062][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.793589][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.805750][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.814449][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.823969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.913847][ T4311] loop0: detected capacity change from 0 to 8192 [ 70.028061][ T4311] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 70.045781][ T4311] REISERFS (device loop0): using ordered data mode [ 70.060355][ T4311] reiserfs: using flush barriers [ 70.080735][ T4311] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.099063][ T4311] REISERFS (device loop0): checking transaction log (loop0) [ 70.112359][ T4311] REISERFS (device loop0): Using r5 hash to sort names [ 70.119708][ T4311] REISERFS (device loop0): using 3.5.x disk format [ 70.128471][ T4311] ================================================================== [ 70.136673][ T4311] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x73c/0x10c0 [ 70.144237][ T4311] Read of size 18446744073709551584 at addr ffff8880695cefa4 by task syz.0.17/4311 [ 70.153514][ T4311] [ 70.155841][ T4311] CPU: 0 PID: 4311 Comm: syz.0.17 Not tainted syzkaller #0 [ 70.163031][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.173092][ T4311] Call Trace: [ 70.176368][ T4311] [ 70.179294][ T4311] dump_stack_lvl+0x168/0x230 [ 70.183976][ T4311] ? show_regs_print_info+0x20/0x20 [ 70.189170][ T4311] ? _printk+0xcc/0x110 [ 70.193323][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 70.198616][ T4311] ? load_image+0x3b0/0x3b0 [ 70.203119][ T4311] ? __lock_acquire+0x13ad/0x7c60 [ 70.208152][ T4311] print_address_description+0x60/0x2d0 [ 70.213696][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 70.218980][ T4311] kasan_report+0xdf/0x130 [ 70.223394][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 70.228670][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 70.233950][ T4311] kasan_check_range+0x27b/0x290 [ 70.238886][ T4311] memmove+0x25/0x60 [ 70.242778][ T4311] leaf_paste_entries+0x73c/0x10c0 [ 70.247901][ T4311] balance_leaf+0xacec/0x10e60 [ 70.252680][ T4311] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 70.258661][ T4311] ? lock_chain_count+0x20/0x20 [ 70.263512][ T4311] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 70.268875][ T4311] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 70.274763][ T4311] ? do_balance+0x930/0x930 [ 70.279269][ T4311] ? _raw_spin_unlock+0x40/0x40 [ 70.284115][ T4311] ? stack_trace_snprint+0xf0/0xf0 [ 70.289225][ T4311] ? stack_depot_save+0x404/0x440 [ 70.294248][ T4311] ? __kasan_kmalloc+0xcc/0xf0 [ 70.299003][ T4311] ? __kasan_kmalloc+0xb5/0xf0 [ 70.303758][ T4311] ? fix_nodes+0x6044/0x82d0 [ 70.308339][ T4311] ? reiserfs_paste_into_item+0x5c8/0x7e0 [ 70.314050][ T4311] ? reiserfs_add_entry+0x975/0xd40 [ 70.319245][ T4311] ? reiserfs_mkdir+0x68f/0x970 [ 70.324086][ T4311] ? reiserfs_xattr_init+0x331/0x720 [ 70.329363][ T4311] ? reiserfs_fill_super+0x1fa6/0x23e0 [ 70.334811][ T4311] ? mount_bdev+0x287/0x3c0 [ 70.339310][ T4311] ? legacy_get_tree+0xe6/0x180 [ 70.344150][ T4311] ? vfs_get_tree+0x88/0x270 [ 70.348734][ T4311] ? do_new_mount+0x24a/0xa40 [ 70.353405][ T4311] ? __se_sys_mount+0x2d6/0x3c0 [ 70.358258][ T4311] ? do_syscall_64+0x4c/0xa0 [ 70.362842][ T4311] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.368926][ T4311] ? __wake_up_bit+0x100/0x100 [ 70.373685][ T4311] ? get_parents+0x400/0xd20 [ 70.378263][ T4311] ? get_neighbors+0x9ba/0x1030 [ 70.383115][ T4311] ? reiserfs_prepare_for_journal+0x269/0x280 [ 70.389181][ T4311] ? fix_nodes+0x7b26/0x82d0 [ 70.393800][ T4311] do_balance+0x2fa/0x930 [ 70.398133][ T4311] ? get_right_neighbor_position+0x210/0x210 [ 70.404131][ T4311] reiserfs_paste_into_item+0x69b/0x7e0 [ 70.409682][ T4311] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 70.415470][ T4311] ? reiserfs_get_parent+0x270/0x270 [ 70.420749][ T4311] ? inode_get_bytes+0x73/0xa0 [ 70.425514][ T4311] ? memset+0x1e/0x40 [ 70.429487][ T4311] ? _find_first_zero_bit+0x60/0xf0 [ 70.434686][ T4311] reiserfs_add_entry+0x975/0xd40 [ 70.439734][ T4311] ? drop_new_inode+0x60/0x60 [ 70.444456][ T4311] ? journal_begin+0x1f1/0x350 [ 70.449213][ T4311] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 70.455626][ T4311] reiserfs_mkdir+0x68f/0x970 [ 70.460308][ T4311] ? reiserfs_symlink+0x770/0x770 [ 70.465329][ T4311] ? preempt_count_add+0x8d/0x190 [ 70.470349][ T4311] ? rwsem_write_trylock+0x12f/0x1b0 [ 70.475631][ T4311] ? lookup_one_len+0x18e/0x2c0 [ 70.480487][ T4311] ? lookup_one_common+0x460/0x460 [ 70.485595][ T4311] reiserfs_xattr_init+0x331/0x720 [ 70.490715][ T4311] reiserfs_fill_super+0x1fa6/0x23e0 [ 70.496029][ T4311] ? reiserfs_kill_sb+0x140/0x140 [ 70.501056][ T4311] ? snprintf+0xd7/0x120 [ 70.505306][ T4311] ? vscnprintf+0x80/0x80 [ 70.509638][ T4311] ? set_blocksize+0x1f1/0x370 [ 70.514406][ T4311] ? sb_set_blocksize+0xa5/0xe0 [ 70.519266][ T4311] mount_bdev+0x287/0x3c0 [ 70.523592][ T4311] ? reiserfs_kill_sb+0x140/0x140 [ 70.528613][ T4311] legacy_get_tree+0xe6/0x180 [ 70.533285][ T4311] ? remove_save_link+0x3c0/0x3c0 [ 70.538305][ T4311] vfs_get_tree+0x88/0x270 [ 70.542721][ T4311] do_new_mount+0x24a/0xa40 [ 70.547228][ T4311] __se_sys_mount+0x2d6/0x3c0 [ 70.551906][ T4311] ? __x64_sys_mount+0xc0/0xc0 [ 70.556674][ T4311] ? lockdep_hardirqs_on+0x94/0x140 [ 70.561868][ T4311] ? __x64_sys_mount+0x1c/0xc0 [ 70.566625][ T4311] do_syscall_64+0x4c/0xa0 [ 70.571033][ T4311] ? clear_bhb_loop+0x30/0x80 [ 70.575702][ T4311] ? clear_bhb_loop+0x30/0x80 [ 70.580373][ T4311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.586266][ T4311] RIP: 0033:0x7f32ba7eaeea [ 70.590678][ T4311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.610283][ T4311] RSP: 002b:00007ffd3f8064f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.618699][ T4311] RAX: ffffffffffffffda RBX: 00007ffd3f806580 RCX: 00007f32ba7eaeea [ 70.626654][ T4311] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 00007ffd3f806540 [ 70.634619][ T4311] RBP: 00002000000000c0 R08: 00007ffd3f806580 R09: 0000000000000000 [ 70.642569][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 70.650522][ T4311] R13: 00007ffd3f806540 R14: 0000000000001117 R15: 00002000000001c0 [ 70.658488][ T4311] [ 70.661487][ T4311] [ 70.663793][ T4311] The buggy address belongs to the page: [ 70.669404][ T4311] page:ffffea0001a57380 refcount:3 mapcount:0 mapping:ffff888145cdc370 index:0x213 pfn:0x695ce [ 70.679704][ T4311] memcg:ffff88807eed0000 [ 70.683933][ T4311] aops:def_blk_aops ino:700000 [ 70.688675][ T4311] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 70.698032][ T4311] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff888145cdc370 [ 70.706591][ T4311] raw: 0000000000000213 ffff88805d8a82b8 00000003ffffffff ffff88807eed0000 [ 70.715147][ T4311] page dumped because: kasan: bad access detected [ 70.721541][ T4311] page_owner tracks the page as allocated [ 70.727234][ T4311] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4311, ts 70109669362, free_ts 70079604942 [ 70.744308][ T4311] get_page_from_freelist+0x1b77/0x1c60 [ 70.749837][ T4311] __alloc_pages+0x1e1/0x470 [ 70.754406][ T4311] __page_cache_alloc+0xd2/0x3f0 [ 70.759325][ T4311] pagecache_get_page+0x986/0xef0 [ 70.764324][ T4311] __getblk_gfp+0x249/0xb70 [ 70.768802][ T4311] search_by_key+0x424/0x4390 [ 70.773457][ T4311] reiserfs_read_locked_inode+0x154/0x2620 [ 70.779242][ T4311] reiserfs_fill_super+0x124b/0x23e0 [ 70.784502][ T4311] mount_bdev+0x287/0x3c0 [ 70.788819][ T4311] legacy_get_tree+0xe6/0x180 [ 70.793483][ T4311] vfs_get_tree+0x88/0x270 [ 70.797891][ T4311] do_new_mount+0x24a/0xa40 [ 70.802377][ T4311] __se_sys_mount+0x2d6/0x3c0 [ 70.807038][ T4311] do_syscall_64+0x4c/0xa0 [ 70.811444][ T4311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.817324][ T4311] page last free stack trace: [ 70.821976][ T4311] free_unref_page_prepare+0x637/0x6c0 [ 70.827421][ T4311] free_unref_page_list+0x122/0x7e0 [ 70.832598][ T4311] release_pages+0x184b/0x1bb0 [ 70.837338][ T4311] tlb_finish_mmu+0x164/0x2e0 [ 70.841996][ T4311] unmap_region+0x315/0x360 [ 70.846477][ T4311] __do_munmap+0x9d3/0xdc0 [ 70.850870][ T4311] __vm_munmap+0x137/0x230 [ 70.855276][ T4311] __x64_sys_munmap+0x67/0x70 [ 70.859929][ T4311] do_syscall_64+0x4c/0xa0 [ 70.864329][ T4311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.870202][ T4311] [ 70.872504][ T4311] Memory state around the buggy address: [ 70.878110][ T4311] ffff8880695cee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.886153][ T4311] ffff8880695cef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.894189][ T4311] >ffff8880695cef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.902232][ T4311] ^ [ 70.907317][ T4311] ffff8880695cf000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.915351][ T4311] ffff8880695cf080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.923385][ T4311] ================================================================== [ 70.931418][ T4311] Disabling lock debugging due to kernel taint [ 70.944585][ T4311] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.951838][ T4311] CPU: 1 PID: 4311 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 70.960422][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.970472][ T4311] Call Trace: [ 70.973742][ T4311] [ 70.976663][ T4311] dump_stack_lvl+0x168/0x230 [ 70.981338][ T4311] ? show_regs_print_info+0x20/0x20 [ 70.986529][ T4311] ? load_image+0x3b0/0x3b0 [ 70.991022][ T4311] panic+0x2c9/0x7f0 [ 70.994894][ T4311] ? bpf_jit_dump+0xd0/0xd0 [ 70.999373][ T4311] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 71.005235][ T4311] ? _raw_spin_unlock+0x40/0x40 [ 71.010063][ T4311] ? print_memory_metadata+0x314/0x400 [ 71.015503][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 71.020760][ T4311] check_panic_on_warn+0x80/0xa0 [ 71.025678][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 71.030935][ T4311] end_report+0x6d/0xf0 [ 71.035063][ T4311] kasan_report+0x102/0x130 [ 71.039537][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 71.044793][ T4311] ? leaf_paste_entries+0x73c/0x10c0 [ 71.050053][ T4311] kasan_check_range+0x27b/0x290 [ 71.054975][ T4311] memmove+0x25/0x60 [ 71.058844][ T4311] leaf_paste_entries+0x73c/0x10c0 [ 71.063931][ T4311] balance_leaf+0xacec/0x10e60 [ 71.068670][ T4311] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 71.074622][ T4311] ? lock_chain_count+0x20/0x20 [ 71.079451][ T4311] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 71.084794][ T4311] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 71.090663][ T4311] ? do_balance+0x930/0x930 [ 71.095156][ T4311] ? _raw_spin_unlock+0x40/0x40 [ 71.099980][ T4311] ? stack_trace_snprint+0xf0/0xf0 [ 71.105062][ T4311] ? stack_depot_save+0x404/0x440 [ 71.110065][ T4311] ? __kasan_kmalloc+0xcc/0xf0 [ 71.114810][ T4311] ? __kasan_kmalloc+0xb5/0xf0 [ 71.119546][ T4311] ? fix_nodes+0x6044/0x82d0 [ 71.124104][ T4311] ? reiserfs_paste_into_item+0x5c8/0x7e0 [ 71.129795][ T4311] ? reiserfs_add_entry+0x975/0xd40 [ 71.134967][ T4311] ? reiserfs_mkdir+0x68f/0x970 [ 71.139788][ T4311] ? reiserfs_xattr_init+0x331/0x720 [ 71.145043][ T4311] ? reiserfs_fill_super+0x1fa6/0x23e0 [ 71.150476][ T4311] ? mount_bdev+0x287/0x3c0 [ 71.154952][ T4311] ? legacy_get_tree+0xe6/0x180 [ 71.159776][ T4311] ? vfs_get_tree+0x88/0x270 [ 71.164336][ T4311] ? do_new_mount+0x24a/0xa40 [ 71.168984][ T4311] ? __se_sys_mount+0x2d6/0x3c0 [ 71.173806][ T4311] ? do_syscall_64+0x4c/0xa0 [ 71.178366][ T4311] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.184407][ T4311] ? __wake_up_bit+0x100/0x100 [ 71.189141][ T4311] ? get_parents+0x400/0xd20 [ 71.193704][ T4311] ? get_neighbors+0x9ba/0x1030 [ 71.198547][ T4311] ? reiserfs_prepare_for_journal+0x269/0x280 [ 71.204605][ T4311] ? fix_nodes+0x7b26/0x82d0 [ 71.209193][ T4311] do_balance+0x2fa/0x930 [ 71.213518][ T4311] ? get_right_neighbor_position+0x210/0x210 [ 71.219495][ T4311] reiserfs_paste_into_item+0x69b/0x7e0 [ 71.225036][ T4311] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 71.230770][ T4311] ? reiserfs_get_parent+0x270/0x270 [ 71.236052][ T4311] ? inode_get_bytes+0x73/0xa0 [ 71.240808][ T4311] ? memset+0x1e/0x40 [ 71.244786][ T4311] ? _find_first_zero_bit+0x60/0xf0 [ 71.249973][ T4311] reiserfs_add_entry+0x975/0xd40 [ 71.254997][ T4311] ? drop_new_inode+0x60/0x60 [ 71.259679][ T4311] ? journal_begin+0x1f1/0x350 [ 71.264437][ T4311] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 71.270864][ T4311] reiserfs_mkdir+0x68f/0x970 [ 71.275534][ T4311] ? reiserfs_symlink+0x770/0x770 [ 71.280548][ T4311] ? preempt_count_add+0x8d/0x190 [ 71.285558][ T4311] ? rwsem_write_trylock+0x12f/0x1b0 [ 71.290893][ T4311] ? lookup_one_len+0x18e/0x2c0 [ 71.295740][ T4311] ? lookup_one_common+0x460/0x460 [ 71.300852][ T4311] reiserfs_xattr_init+0x331/0x720 [ 71.305954][ T4311] reiserfs_fill_super+0x1fa6/0x23e0 [ 71.311235][ T4311] ? reiserfs_kill_sb+0x140/0x140 [ 71.316243][ T4311] ? snprintf+0xd7/0x120 [ 71.320721][ T4311] ? vscnprintf+0x80/0x80 [ 71.325025][ T4311] ? set_blocksize+0x1f1/0x370 [ 71.329761][ T4311] ? sb_set_blocksize+0xa5/0xe0 [ 71.334581][ T4311] mount_bdev+0x287/0x3c0 [ 71.338886][ T4311] ? reiserfs_kill_sb+0x140/0x140 [ 71.343881][ T4311] legacy_get_tree+0xe6/0x180 [ 71.348533][ T4311] ? remove_save_link+0x3c0/0x3c0 [ 71.353527][ T4311] vfs_get_tree+0x88/0x270 [ 71.357920][ T4311] do_new_mount+0x24a/0xa40 [ 71.362398][ T4311] __se_sys_mount+0x2d6/0x3c0 [ 71.367051][ T4311] ? __x64_sys_mount+0xc0/0xc0 [ 71.371785][ T4311] ? lockdep_hardirqs_on+0x94/0x140 [ 71.376956][ T4311] ? __x64_sys_mount+0x1c/0xc0 [ 71.381689][ T4311] do_syscall_64+0x4c/0xa0 [ 71.386079][ T4311] ? clear_bhb_loop+0x30/0x80 [ 71.390749][ T4311] ? clear_bhb_loop+0x30/0x80 [ 71.395417][ T4311] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.401290][ T4311] RIP: 0033:0x7f32ba7eaeea [ 71.405681][ T4311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.425259][ T4311] RSP: 002b:00007ffd3f8064f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.433647][ T4311] RAX: ffffffffffffffda RBX: 00007ffd3f806580 RCX: 00007f32ba7eaeea [ 71.441596][ T4311] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 00007ffd3f806540 [ 71.449543][ T4311] RBP: 00002000000000c0 R08: 00007ffd3f806580 R09: 0000000000000000 [ 71.457594][ T4311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 71.465551][ T4311] R13: 00007ffd3f806540 R14: 0000000000001117 R15: 00002000000001c0 [ 71.473542][ T4311] [ 71.476867][ T4311] Kernel Offset: disabled [ 71.481188][ T4311] Rebooting in 86400 seconds..