Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. 2026/03/27 00:43:03 parsed 1 programs [ 71.002030][ T4189] cgroup: Unknown subsys name 'net' [ 71.128120][ T4189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.674238][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.681035][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.728643][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.719876][ T4208] chnl_net:caif_netlink_parms(): no params data found [ 74.782765][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.790085][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.799270][ T4208] device bridge_slave_0 entered promiscuous mode [ 74.809982][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.818133][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.827607][ T4208] device bridge_slave_1 entered promiscuous mode [ 74.852816][ T4208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.865670][ T4208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.892872][ T4208] team0: Port device team_slave_0 added [ 74.901528][ T4208] team0: Port device team_slave_1 added [ 74.920566][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.928041][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.956678][ T4208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.972992][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.980552][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.009491][ T4208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.052218][ T4208] device hsr_slave_0 entered promiscuous mode [ 75.060135][ T4208] device hsr_slave_1 entered promiscuous mode [ 75.215050][ T4208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.233079][ T4208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.245446][ T4208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.256001][ T4208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.293018][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.300974][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.309454][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.317681][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.388454][ T4208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.406640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.418719][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.429731][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.438867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.456097][ T4208] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.469787][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.479424][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.486813][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.511527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.520724][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.528088][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.566758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.579511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.590332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.607035][ T4208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.620044][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.632640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.644132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.798833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.809883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.828677][ T4208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.859382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.870286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.898559][ T4208] device veth0_vlan entered promiscuous mode [ 75.907228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.917435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.927473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.937020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.950805][ T4208] device veth1_vlan entered promiscuous mode [ 75.979117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.988190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.998280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.009985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.024248][ T4208] device veth0_macvtap entered promiscuous mode [ 76.036567][ T4208] device veth1_macvtap entered promiscuous mode [ 76.056233][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.066728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.077559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.087950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.098760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.112235][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.119893][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.129244][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.142876][ T4208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.154149][ T4208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.164517][ T4208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.174841][ T4208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.773698][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.268652][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.226576][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.308197][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.394776][ T155] device hsr_slave_0 left promiscuous mode [ 82.424010][ T155] device hsr_slave_1 left promiscuous mode [ 82.431984][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.439818][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.449215][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.456741][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.465798][ T155] device bridge_slave_1 left promiscuous mode [ 82.473373][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.490032][ T155] device bridge_slave_0 left promiscuous mode [ 82.498280][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.523490][ T155] device veth1_macvtap left promiscuous mode [ 82.530460][ T155] device veth0_macvtap left promiscuous mode [ 82.537674][ T155] device veth1_vlan left promiscuous mode [ 82.544322][ T155] device veth0_vlan left promiscuous mode [ 82.790111][ T155] team0 (unregistering): Port device team_slave_1 removed [ 82.807501][ T155] team0 (unregistering): Port device team_slave_0 removed [ 82.825031][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.843160][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.906192][ T155] bond0 (unregistering): Released all slaves [ 83.275134][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.296040][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.325763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.342356][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.351537][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.359385][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/03/27 00:43:18 executed programs: 0 [ 84.589745][ T4352] chnl_net:caif_netlink_parms(): no params data found [ 84.701653][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.712997][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.733012][ T4352] device bridge_slave_0 entered promiscuous mode [ 84.750609][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.759625][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.769010][ T4352] device bridge_slave_1 entered promiscuous mode [ 84.800587][ T4352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.824435][ T4352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.893518][ T4352] team0: Port device team_slave_0 added [ 84.902228][ T4352] team0: Port device team_slave_1 added [ 84.947882][ T4352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.970906][ T4352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.020834][ T4352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.043038][ T4352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.050731][ T4352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.078891][ T4352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.155363][ T4352] device hsr_slave_0 entered promiscuous mode [ 85.171725][ T4352] device hsr_slave_1 entered promiscuous mode [ 85.988531][ T4352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.999894][ T4352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.012663][ T4352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.023320][ T4352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.096529][ T4352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.112061][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.120084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.133105][ T4352] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.145641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.155708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.166845][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.174413][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.185637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.197908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.209075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.218304][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.225628][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.246558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.257694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.331452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.344554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.370045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.382093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.399353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.401203][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 86.414307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.425247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.434692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.445299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.460610][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.819864][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.832333][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.846093][ T4352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.946445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.981978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.044689][ T23] cfg80211: failed to load regulatory.db [ 87.093382][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.113699][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.139999][ T4352] device veth0_vlan entered promiscuous mode [ 87.161502][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.170058][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.202491][ T4352] device veth1_vlan entered promiscuous mode [ 87.288173][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.312641][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.321018][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.345011][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.357458][ T4352] device veth0_macvtap entered promiscuous mode [ 87.384977][ T4352] device veth1_macvtap entered promiscuous mode [ 87.460240][ T4352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.481298][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.489538][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.521498][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.530062][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.554742][ T4352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.574510][ T4352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.600921][ T4352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.609832][ T4352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.640909][ T4352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.664712][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.674965][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.887980][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.906598][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.925055][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.984948][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.998321][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.008260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.140129][ T4472] loop0: detected capacity change from 0 to 8192 [ 88.206876][ T4472] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 88.221102][ T4472] REISERFS (device loop0): using ordered data mode [ 88.228461][ T4472] reiserfs: using flush barriers [ 88.244509][ T4472] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.263237][ T4472] REISERFS (device loop0): checking transaction log (loop0) [ 88.277363][ T4472] REISERFS (device loop0): Using tea hash to sort names [ 88.295485][ T4472] ================================================================== [ 88.304111][ T4472] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x794/0x1130 [ 88.311900][ T4472] Read of size 18446744073709551584 at addr ffff888061672fa4 by task syz.0.17/4472 [ 88.321920][ T4472] [ 88.324573][ T4472] CPU: 1 PID: 4472 Comm: syz.0.17 Not tainted syzkaller #0 [ 88.332093][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.342549][ T4472] Call Trace: [ 88.345915][ T4472] [ 88.349007][ T4472] dump_stack_lvl+0x188/0x250 [ 88.354101][ T4472] ? show_regs_print_info+0x20/0x20 [ 88.359748][ T4472] ? load_image+0x400/0x400 [ 88.364933][ T4472] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 88.370683][ T4472] ? __lock_acquire+0x13bc/0x7d10 [ 88.375954][ T4472] ? verify_lock_unused+0x140/0x140 [ 88.381325][ T4472] print_address_description+0x60/0x2d0 [ 88.387363][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 88.392897][ T4472] kasan_report+0xdf/0x130 [ 88.397420][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 88.402936][ T4472] ? journal_mark_dirty+0x21d/0xdf0 [ 88.408469][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 88.414244][ T4472] kasan_check_range+0x235/0x290 [ 88.420083][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 88.426092][ T4472] memmove+0x25/0x60 [ 88.430657][ T4472] leaf_paste_entries+0x794/0x1130 [ 88.436176][ T4472] balance_leaf+0xb2e5/0x10ec0 [ 88.441273][ T4472] ? mark_lock+0x94/0x320 [ 88.445953][ T4472] ? lock_chain_count+0x20/0x20 [ 88.450861][ T4472] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 88.456972][ T4472] ? do_balance+0x930/0x930 [ 88.461708][ T4472] ? _raw_spin_unlock+0x40/0x40 [ 88.466867][ T4472] ? stack_trace_snprint+0xf0/0xf0 [ 88.472237][ T4472] ? stack_depot_save+0x404/0x440 [ 88.477408][ T4472] ? __kasan_kmalloc+0xcc/0xf0 [ 88.482305][ T4472] ? __kasan_kmalloc+0xb5/0xf0 [ 88.487113][ T4472] ? fix_nodes+0x60a2/0x8340 [ 88.491804][ T4472] ? reiserfs_paste_into_item+0x60b/0x810 [ 88.498250][ T4472] ? reiserfs_add_entry+0xa42/0xe10 [ 88.503600][ T4472] ? reiserfs_mkdir+0x6bc/0x920 [ 88.508503][ T4472] ? reiserfs_xattr_init+0x331/0x720 [ 88.513939][ T4472] ? reiserfs_fill_super+0x1fe6/0x2440 [ 88.519445][ T4472] ? mount_bdev+0x287/0x3c0 [ 88.524095][ T4472] ? legacy_get_tree+0xe6/0x180 [ 88.529204][ T4472] ? vfs_get_tree+0x88/0x270 [ 88.533931][ T4472] ? do_new_mount+0x24a/0xa40 [ 88.538741][ T4472] ? __se_sys_mount+0x2e3/0x3d0 [ 88.543640][ T4472] ? do_syscall_64+0x4c/0xa0 [ 88.548458][ T4472] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.554959][ T4472] ? __wake_up_bit+0x120/0x120 [ 88.560059][ T4472] ? get_parents+0x400/0xd20 [ 88.564955][ T4472] ? get_neighbors+0x9ba/0x1030 [ 88.570221][ T4472] ? reiserfs_prepare_for_journal+0x269/0x280 [ 88.576773][ T4472] ? fix_nodes+0x7bc3/0x8340 [ 88.581635][ T4472] do_balance+0x318/0x930 [ 88.586144][ T4472] ? get_right_neighbor_position+0x210/0x210 [ 88.592286][ T4472] ? reiserfs_paste_into_item+0x3b0/0x810 [ 88.598965][ T4472] reiserfs_paste_into_item+0x6dd/0x810 [ 88.604819][ T4472] ? reiserfs_cut_from_item+0x1fa0/0x1fa0 [ 88.610675][ T4472] ? reiserfs_get_parent+0x2f0/0x2f0 [ 88.616206][ T4472] ? _find_first_zero_bit+0x60/0xf0 [ 88.622728][ T4472] reiserfs_add_entry+0xa42/0xe10 [ 88.628387][ T4472] ? drop_new_inode+0x60/0x60 [ 88.633674][ T4472] ? journal_begin+0x1f1/0x350 [ 88.638708][ T4472] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 88.645736][ T4472] reiserfs_mkdir+0x6bc/0x920 [ 88.651194][ T4472] ? reiserfs_symlink+0x790/0x790 [ 88.656577][ T4472] ? rwsem_write_trylock+0x135/0x1c0 [ 88.662011][ T4472] ? lookup_one_len+0x19d/0x2d0 [ 88.667278][ T4472] ? lookup_one_common+0x460/0x460 [ 88.672730][ T4472] reiserfs_xattr_init+0x331/0x720 [ 88.678225][ T4472] reiserfs_fill_super+0x1fe6/0x2440 [ 88.684031][ T4472] ? reiserfs_kill_sb+0x140/0x140 [ 88.689510][ T4472] ? snprintf+0xe5/0x140 [ 88.693920][ T4472] ? vscnprintf+0x80/0x80 [ 88.698416][ T4472] ? set_blocksize+0x1f3/0x370 [ 88.703228][ T4472] ? sb_set_blocksize+0xa5/0xe0 [ 88.708119][ T4472] mount_bdev+0x287/0x3c0 [ 88.712488][ T4472] ? reiserfs_kill_sb+0x140/0x140 [ 88.717730][ T4472] legacy_get_tree+0xe6/0x180 [ 88.722549][ T4472] ? remove_save_link+0x3e0/0x3e0 [ 88.727989][ T4472] vfs_get_tree+0x88/0x270 [ 88.732478][ T4472] do_new_mount+0x24a/0xa40 [ 88.737041][ T4472] __se_sys_mount+0x2e3/0x3d0 [ 88.741774][ T4472] ? __x64_sys_mount+0xc0/0xc0 [ 88.746793][ T4472] ? lockdep_hardirqs_on+0x94/0x140 [ 88.752378][ T4472] ? __x64_sys_mount+0x1c/0xc0 [ 88.757421][ T4472] do_syscall_64+0x4c/0xa0 [ 88.761993][ T4472] ? clear_bhb_loop+0x30/0x80 [ 88.766800][ T4472] ? clear_bhb_loop+0x30/0x80 [ 88.771706][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.777763][ T4472] RIP: 0033:0x7f158fdf9a0a [ 88.782409][ T4472] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.804030][ T4472] RSP: 002b:00007fff8fbed358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.814026][ T4472] RAX: ffffffffffffffda RBX: 00007fff8fbed3e0 RCX: 00007f158fdf9a0a [ 88.822345][ T4472] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fff8fbed3a0 [ 88.830671][ T4472] RBP: 0000200000000080 R08: 00007fff8fbed3e0 R09: 000000000020800c [ 88.838873][ T4472] R10: 000000000020800c R11: 0000000000000246 R12: 0000200000000040 [ 88.847090][ T4472] R13: 00007fff8fbed3a0 R14: 0000000000001119 R15: 0000200000000300 [ 88.855123][ T4472] [ 88.858394][ T4472] [ 88.860918][ T4472] The buggy address belongs to the page: [ 88.866592][ T4472] page:ffffea0001859c80 refcount:2 mapcount:0 mapping:ffff888017094f30 index:0x213 pfn:0x61672 [ 88.877294][ T4472] memcg:ffff8880195b8000 [ 88.881663][ T4472] aops:def_blk_aops ino:700000 [ 88.886560][ T4472] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 88.897043][ T4472] raw: 00fff00000002032 ffffea0001a41f08 ffff888078dbd030 ffff888017094f30 [ 88.906235][ T4472] raw: 0000000000000213 ffff88807225f488 00000002ffffffff ffff8880195b8000 [ 88.915654][ T4472] page dumped because: kasan: bad access detected [ 88.923259][ T4472] page_owner tracks the page as allocated [ 88.929379][ T4472] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4472, ts 88276714313, free_ts 88104653148 [ 88.947310][ T4472] get_page_from_freelist+0x1bbd/0x1ca0 [ 88.953218][ T4472] __alloc_pages+0x1ee/0x480 [ 88.958041][ T4472] __page_cache_alloc+0xce/0x440 [ 88.963037][ T4472] pagecache_get_page+0x9b6/0xf10 [ 88.968114][ T4472] __getblk_gfp+0x247/0xb60 [ 88.972768][ T4472] search_by_key+0x46c/0x4470 [ 88.977816][ T4472] reiserfs_read_locked_inode+0x195/0x26b0 [ 88.983874][ T4472] reiserfs_fill_super+0x12af/0x2440 [ 88.989754][ T4472] mount_bdev+0x287/0x3c0 [ 88.994289][ T4472] legacy_get_tree+0xe6/0x180 [ 88.999211][ T4472] vfs_get_tree+0x88/0x270 [ 89.003812][ T4472] do_new_mount+0x24a/0xa40 [ 89.008509][ T4472] __se_sys_mount+0x2e3/0x3d0 [ 89.013572][ T4472] do_syscall_64+0x4c/0xa0 [ 89.019016][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.024972][ T4472] page last free stack trace: [ 89.029878][ T4472] free_unref_page_prepare+0x637/0x6c0 [ 89.035649][ T4472] free_unref_page_list+0x119/0x820 [ 89.041109][ T4472] release_pages+0x186c/0x1be0 [ 89.046040][ T4472] tlb_finish_mmu+0x176/0x300 [ 89.050839][ T4472] exit_mmap+0x3d0/0x640 [ 89.055256][ T4472] __mmput+0x115/0x3b0 [ 89.059520][ T4472] exit_mm+0x588/0x6e0 [ 89.063875][ T4472] do_exit+0x5a9/0x20c0 [ 89.068455][ T4472] do_group_exit+0x12e/0x300 [ 89.073474][ T4472] __x64_sys_exit_group+0x3b/0x40 [ 89.078934][ T4472] do_syscall_64+0x4c/0xa0 [ 89.083752][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.090165][ T4472] [ 89.092891][ T4472] Memory state around the buggy address: [ 89.098741][ T4472] ffff888061672e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.107177][ T4472] ffff888061672f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.115726][ T4472] >ffff888061672f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.125025][ T4472] ^ [ 89.130178][ T4472] ffff888061673000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.138455][ T4472] ffff888061673080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.146651][ T4472] ================================================================== [ 89.155757][ T4472] Disabling lock debugging due to kernel taint [ 89.164850][ T2286] Bluetooth: hci0: command 0x041b tx timeout [ 89.191317][ T4472] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.198833][ T4472] CPU: 1 PID: 4472 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 89.207459][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.217553][ T4472] Call Trace: [ 89.220863][ T4472] [ 89.223928][ T4472] dump_stack_lvl+0x188/0x250 [ 89.228650][ T4472] ? show_regs_print_info+0x20/0x20 [ 89.233943][ T4472] ? load_image+0x400/0x400 [ 89.238667][ T4472] panic+0x2e5/0x810 [ 89.242782][ T4472] ? bpf_jit_dump+0xd0/0xd0 [ 89.248146][ T4472] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 89.254701][ T4472] ? _raw_spin_unlock+0x40/0x40 [ 89.259776][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 89.265364][ T4472] check_panic_on_warn+0x80/0xa0 [ 89.270704][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 89.276353][ T4472] end_report+0x6d/0xf0 [ 89.280555][ T4472] kasan_report+0x102/0x130 [ 89.285119][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 89.290622][ T4472] ? journal_mark_dirty+0x21d/0xdf0 [ 89.295871][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 89.301401][ T4472] kasan_check_range+0x235/0x290 [ 89.307186][ T4472] ? leaf_paste_entries+0x794/0x1130 [ 89.312819][ T4472] memmove+0x25/0x60 [ 89.317140][ T4472] leaf_paste_entries+0x794/0x1130 [ 89.323037][ T4472] balance_leaf+0xb2e5/0x10ec0 [ 89.328401][ T4472] ? mark_lock+0x94/0x320 [ 89.333368][ T4472] ? lock_chain_count+0x20/0x20 [ 89.338312][ T4472] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.344424][ T4472] ? do_balance+0x930/0x930 [ 89.349147][ T4472] ? _raw_spin_unlock+0x40/0x40 [ 89.354037][ T4472] ? stack_trace_snprint+0xf0/0xf0 [ 89.359537][ T4472] ? stack_depot_save+0x404/0x440 [ 89.364663][ T4472] ? __kasan_kmalloc+0xcc/0xf0 [ 89.369972][ T4472] ? __kasan_kmalloc+0xb5/0xf0 [ 89.374929][ T4472] ? fix_nodes+0x60a2/0x8340 [ 89.379761][ T4472] ? reiserfs_paste_into_item+0x60b/0x810 [ 89.386263][ T4472] ? reiserfs_add_entry+0xa42/0xe10 [ 89.391816][ T4472] ? reiserfs_mkdir+0x6bc/0x920 [ 89.396980][ T4472] ? reiserfs_xattr_init+0x331/0x720 [ 89.402399][ T4472] ? reiserfs_fill_super+0x1fe6/0x2440 [ 89.407903][ T4472] ? mount_bdev+0x287/0x3c0 [ 89.412718][ T4472] ? legacy_get_tree+0xe6/0x180 [ 89.417615][ T4472] ? vfs_get_tree+0x88/0x270 [ 89.422565][ T4472] ? do_new_mount+0x24a/0xa40 [ 89.427379][ T4472] ? __se_sys_mount+0x2e3/0x3d0 [ 89.432386][ T4472] ? do_syscall_64+0x4c/0xa0 [ 89.437301][ T4472] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.443531][ T4472] ? __wake_up_bit+0x120/0x120 [ 89.448556][ T4472] ? get_parents+0x400/0xd20 [ 89.453294][ T4472] ? get_neighbors+0x9ba/0x1030 [ 89.458623][ T4472] ? reiserfs_prepare_for_journal+0x269/0x280 [ 89.465124][ T4472] ? fix_nodes+0x7bc3/0x8340 [ 89.469901][ T4472] do_balance+0x318/0x930 [ 89.475106][ T4472] ? get_right_neighbor_position+0x210/0x210 [ 89.481235][ T4472] ? reiserfs_paste_into_item+0x3b0/0x810 [ 89.487604][ T4472] reiserfs_paste_into_item+0x6dd/0x810 [ 89.493485][ T4472] ? reiserfs_cut_from_item+0x1fa0/0x1fa0 [ 89.499834][ T4472] ? reiserfs_get_parent+0x2f0/0x2f0 [ 89.505897][ T4472] ? _find_first_zero_bit+0x60/0xf0 [ 89.511292][ T4472] reiserfs_add_entry+0xa42/0xe10 [ 89.516553][ T4472] ? drop_new_inode+0x60/0x60 [ 89.521543][ T4472] ? journal_begin+0x1f1/0x350 [ 89.526646][ T4472] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 89.533250][ T4472] reiserfs_mkdir+0x6bc/0x920 [ 89.538600][ T4472] ? reiserfs_symlink+0x790/0x790 [ 89.544236][ T4472] ? rwsem_write_trylock+0x135/0x1c0 [ 89.550223][ T4472] ? lookup_one_len+0x19d/0x2d0 [ 89.555672][ T4472] ? lookup_one_common+0x460/0x460 [ 89.560986][ T4472] reiserfs_xattr_init+0x331/0x720 [ 89.566534][ T4472] reiserfs_fill_super+0x1fe6/0x2440 [ 89.572420][ T4472] ? reiserfs_kill_sb+0x140/0x140 [ 89.578147][ T4472] ? snprintf+0xe5/0x140 [ 89.583058][ T4472] ? vscnprintf+0x80/0x80 [ 89.587530][ T4472] ? set_blocksize+0x1f3/0x370 [ 89.592423][ T4472] ? sb_set_blocksize+0xa5/0xe0 [ 89.597899][ T4472] mount_bdev+0x287/0x3c0 [ 89.602779][ T4472] ? reiserfs_kill_sb+0x140/0x140 [ 89.608154][ T4472] legacy_get_tree+0xe6/0x180 [ 89.613515][ T4472] ? remove_save_link+0x3e0/0x3e0 [ 89.618942][ T4472] vfs_get_tree+0x88/0x270 [ 89.623686][ T4472] do_new_mount+0x24a/0xa40 [ 89.628795][ T4472] __se_sys_mount+0x2e3/0x3d0 [ 89.633675][ T4472] ? __x64_sys_mount+0xc0/0xc0 [ 89.638671][ T4472] ? lockdep_hardirqs_on+0x94/0x140 [ 89.644577][ T4472] ? __x64_sys_mount+0x1c/0xc0 [ 89.649671][ T4472] do_syscall_64+0x4c/0xa0 [ 89.654314][ T4472] ? clear_bhb_loop+0x30/0x80 [ 89.659525][ T4472] ? clear_bhb_loop+0x30/0x80 [ 89.664428][ T4472] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.670739][ T4472] RIP: 0033:0x7f158fdf9a0a [ 89.675343][ T4472] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.695759][ T4472] RSP: 002b:00007fff8fbed358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.704305][ T4472] RAX: ffffffffffffffda RBX: 00007fff8fbed3e0 RCX: 00007f158fdf9a0a [ 89.712669][ T4472] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fff8fbed3a0 [ 89.721368][ T4472] RBP: 0000200000000080 R08: 00007fff8fbed3e0 R09: 000000000020800c [ 89.730549][ T4472] R10: 000000000020800c R11: 0000000000000246 R12: 0000200000000040 [ 89.739295][ T4472] R13: 00007fff8fbed3a0 R14: 0000000000001119 R15: 0000200000000300 [ 89.747686][ T4472] [ 89.751179][ T4472] Kernel Offset: disabled [ 89.755697][ T4472] Rebooting in 86400 seconds..