Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. 1970/01/01 00:01:07 ignoring optional flag "type"="gce" 1970/01/01 00:01:07 parsed 1 programs [ 69.043504][ T4422] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.615333][ T13] cfg80211: failed to load regulatory.db [ 69.619905][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.621036][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.366824][ T4541] chnl_net:caif_netlink_parms(): no params data found [ 70.382480][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.383645][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.385243][ T4541] device bridge_slave_0 entered promiscuous mode [ 70.387450][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.388593][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.389912][ T4541] device bridge_slave_1 entered promiscuous mode [ 70.396810][ T4541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.399136][ T4541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.408217][ T4541] team0: Port device team_slave_0 added [ 70.409898][ T4541] team0: Port device team_slave_1 added [ 70.416068][ T4541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.417214][ T4541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.421264][ T4541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.423451][ T4541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.424754][ T4541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.428734][ T4541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.484843][ T4541] device hsr_slave_0 entered promiscuous mode [ 70.534055][ T4541] device hsr_slave_1 entered promiscuous mode [ 71.106280][ T4541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.144841][ T4541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.156963][ T4541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.225629][ T4541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.284247][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.285422][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.286629][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.287808][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.305553][ T4541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.309385][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.310988][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.312366][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.315554][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.335355][ T4541] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.338308][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.339933][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.340997][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.343928][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.345418][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.346518][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.350305][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.351987][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.359257][ T4541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.360829][ T4541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.366511][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.368212][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.369743][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.371280][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.372830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.389363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.394494][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.401073][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.402576][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.404574][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.436101][ T4541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.444827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.446128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.447353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.448952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.451485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.453052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.462406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.464643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.467314][ T4541] device veth0_vlan entered promiscuous mode [ 71.470515][ T4541] device veth1_vlan entered promiscuous mode [ 71.481795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.483218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.485244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.486757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.489422][ T4541] device veth0_macvtap entered promiscuous mode [ 71.491742][ T4541] device veth1_macvtap entered promiscuous mode [ 71.497538][ T4541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.498780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.500474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.501929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.503334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.508655][ T4541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.510143][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.511819][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.515406][ T4541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.516893][ T4541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.518288][ T4541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.519665][ T4541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.798050][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.799316][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.800678][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.809512][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.810776][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.812223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.330408][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.386531][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.896572][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.937072][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:17 executed programs: 0 [ 77.344624][ T4975] chnl_net:caif_netlink_parms(): no params data found [ 77.361685][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.362827][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.364819][ T4975] device bridge_slave_0 entered promiscuous mode [ 77.366704][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.367795][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.369143][ T4975] device bridge_slave_1 entered promiscuous mode [ 77.377568][ T4975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.379967][ T4975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.387635][ T4975] team0: Port device team_slave_0 added [ 77.389565][ T4975] team0: Port device team_slave_1 added [ 77.406121][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.407216][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.410990][ T4975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.413121][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.414742][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.418581][ T4975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.474838][ T4975] device hsr_slave_0 entered promiscuous mode [ 77.514245][ T4975] device hsr_slave_1 entered promiscuous mode [ 77.554580][ T4975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.555821][ T4975] Cannot create hsr debugfs directory [ 78.039954][ T4975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.074965][ T4975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.116168][ T4975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.145240][ T4975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.191455][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.192619][ T4975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.193933][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.195189][ T4975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.211925][ T4975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.216012][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.217759][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.219234][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.221016][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 78.226672][ T4975] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.233427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.235351][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.236484][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.238000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.239475][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.240424][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.246133][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.248107][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.251657][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.269052][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.271589][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.274680][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.310681][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.311980][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.326474][ T4975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.332983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.339057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.340686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.342192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.343641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.346869][ T4975] device veth0_vlan entered promiscuous mode [ 78.350362][ T4975] device veth1_vlan entered promiscuous mode [ 78.357373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.358899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.360294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.361846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.364904][ T4975] device veth0_macvtap entered promiscuous mode [ 78.368535][ T4975] device veth1_macvtap entered promiscuous mode [ 78.376978][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.378680][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.380889][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.382035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.383553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.385406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.386826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.389235][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.390725][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.392619][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.393763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.396373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.407888][ T4975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.409224][ T4975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.410498][ T4975] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.411758][ T4975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.429296][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.433544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.435788][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.437871][ T360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.439094][ T360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.440576][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.480089][ T5085] loop0: detected capacity change from 0 to 8192 [ 78.488323][ T5085] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 78.489928][ T5085] REISERFS (device loop0): using ordered data mode [ 78.490918][ T5085] reiserfs: using flush barriers [ 78.492310][ T5085] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.495915][ T5085] REISERFS (device loop0): checking transaction log (loop0) [ 78.498853][ T5085] REISERFS (device loop0): Using tea hash to sort names [ 78.500095][ T5085] REISERFS (device loop0): using 3.5.x disk format [ 78.501512][ T5085] ================================================================== [ 78.502856][ T5085] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x4d8/0x924 [ 78.504111][ T5085] Read of size 18446744073709551584 at addr ffff0000e6f85fa4 by task syz.0.15/5085 [ 78.505630][ T5085] [ 78.505997][ T5085] CPU: 1 PID: 5085 Comm: syz.0.15 Not tainted syzkaller #0 [ 78.507151][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.508714][ T5085] Call trace: [ 78.509267][ T5085] dump_backtrace+0x0/0x43c [ 78.510036][ T5085] show_stack+0x2c/0x3c [ 78.510760][ T5085] __dump_stack+0x30/0x40 [ 78.511441][ T5085] dump_stack_lvl+0xf8/0x160 [ 78.512262][ T5085] print_address_description+0x78/0x30c [ 78.513183][ T5085] kasan_report+0xec/0x15c [ 78.513924][ T5085] kasan_check_range+0x270/0x2b0 [ 78.514731][ T5085] memmove+0x90/0xe8 [ 78.515284][ T5085] leaf_paste_entries+0x4d8/0x924 [ 78.516089][ T5085] balance_leaf+0x81d0/0xd2f4 [ 78.516856][ T5085] do_balance+0x260/0x778 [ 78.517539][ T5085] reiserfs_paste_into_item+0x5b4/0x6d0 [ 78.518432][ T5085] reiserfs_add_entry+0x828/0xbe4 [ 78.519256][ T5085] reiserfs_mkdir+0x588/0x788 [ 78.520058][ T5085] reiserfs_xattr_init+0x2b0/0x6dc [ 78.520889][ T5085] reiserfs_fill_super+0x17ec/0x1bb4 [ 78.521769][ T5085] mount_bdev+0x264/0x358 [ 78.522456][ T5085] get_super_block+0x44/0x58 [ 78.523175][ T5085] legacy_get_tree+0xd4/0x16c [ 78.523931][ T5085] vfs_get_tree+0x90/0x274 [ 78.524574][ T5085] do_new_mount+0x228/0x810 [ 78.525318][ T5085] path_mount+0x5b4/0x1000 [ 78.526052][ T5085] __arm64_sys_mount+0x514/0x5e4 [ 78.526864][ T5085] invoke_syscall+0x98/0x2b8 [ 78.527627][ T5085] el0_svc_common+0x138/0x258 [ 78.528420][ T5085] do_el0_svc+0x58/0x14c [ 78.529118][ T5085] el0_svc+0x78/0x1e0 [ 78.529779][ T5085] el0t_64_sync_handler+0xcc/0xe4 [ 78.530583][ T5085] el0t_64_sync+0x1a0/0x1a4 [ 78.531327][ T5085] [ 78.531715][ T5085] The buggy address belongs to the page: [ 78.532678][ T5085] page:0000000097208eac refcount:3 mapcount:0 mapping:00000000e3fca868 index:0x213 pfn:0x126f85 [ 78.534271][ T5085] memcg:ffff0000c9dec000 [ 78.534901][ T5085] aops:def_blk_aops ino:700000 [ 78.535645][ T5085] flags: 0x5ffc00000002022(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 78.537121][ T5085] raw: 05ffc00000002022 0000000000000000 dead000000000122 ffff0000c51e4f48 [ 78.538510][ T5085] raw: 0000000000000213 ffff0000de336ae0 00000003ffffffff ffff0000c9dec000 [ 78.539919][ T5085] page dumped because: kasan: bad access detected [ 78.540888][ T5085] [ 78.541271][ T5085] Memory state around the buggy address: [ 78.542141][ T5085] ffff0000e6f85e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.543358][ T5085] ffff0000e6f85f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.544532][ T5085] >ffff0000e6f85f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.545705][ T5085] ^ [ 78.546532][ T5085] ffff0000e6f86000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.547877][ T5085] ffff0000e6f86080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.549178][ T5085] ================================================================== [ 78.550444][ T5085] Disabling lock debugging due to kernel taint [ 78.552732][ T5085] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 78.556984][ T5085] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 78.558665][ T5085] REISERFS (device loop0): Remounting filesystem read-only [ 78.559871][ T5085] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 78.562061][ T5085] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 78.564911][ T5085] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 78.568185][ T5085] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 78.569947][ T5085] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 78.732979][ T5088] loop0: detected capacity change from 0 to 8192 [ 78.805063][ T5088] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 78.806519][ T5088] REISERFS (device loop0): using ordered data mode [ 78.807688][ T5088] reiserfs: using flush barriers [ 78.808904][ T5088] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.811540][ T5088] REISERFS (device loop0): checking transaction log (loop0) [ 78.813074][ T5088] REISERFS (device loop0): Using tea hash to sort names [ 78.814722][ T5088] REISERFS (device loop0): using 3.5.x disk format [ 78.817763][ T4935] Unable to handle kernel paging request at virtual address dfff8000e0000005 [ 78.819211][ T4935] Mem abort info: [ 78.819820][ T4935] ESR = 0x0000000096000005 [ 78.820589][ T4935] EC = 0x25: DABT (current EL), IL = 32 bits [ 78.821620][ T4935] SET = 0, FnV = 0 [ 78.822251][ T4935] EA = 0, S1PTW = 0 [ 78.822922][ T4935] FSC = 0x05: level 1 translation fault [ 78.823129][ T5088] Unable to handle kernel write to read-only memory at virtual address ffff0000da1a1ff0 [ 78.823959][ C0] Unable to handle kernel write to read-only memory at virtual address ffff800012dd9008 [ 78.823966][ C0] Mem abort info: [ 78.823968][ C0] ESR = 0x000000009600004e [ 78.823971][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 78.823975][ C0] SET = 0, FnV = 0 [ 78.823977][ C0] EA = 0, S1PTW = 0 [ 78.823980][ C0] FSC = 0x0e: level 2 permission fault [ 78.823982][ C0] Data abort info: [ 78.823984][ C0] ISV = 0, ISS = 0x0000004e [ 78.823986][ C0] CM = 0, WnR = 1 [ 78.823988][ C0] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000002113cf000 [ 78.823993][ C0] [ffff800012dd9008] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=0060000210200781 [ 78.824007][ C0] Internal error: Oops: 000000009600004e [#1] PREEMPT SMP [ 78.824013][ C0] Modules linked in: [ 78.824018][ C0] CPU: 0 PID: 5088 Comm: syz.0.16 Tainted: G B syzkaller #0 [ 78.824024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.824028][ C0] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.824035][ C0] pc : detach_timer+0x148/0x3c8 [ 78.824049][ C0] lr : detach_timer+0x130/0x3c8 [ 78.824053][ C0] sp : ffff800008007c10 [ 78.824055][ C0] x29: ffff800008007c10 x28: ffff800008007d00 x27: 1fffe000342168a0 [ 78.824064][ C0] x26: 1fffe0001b80e83e x25: 1fffe0001b80e83d x24: dfff800000000000 [ 78.824071][ C0] x23: ffff800012dd9008 x22: ffff800008007d00 x21: ffff0000dc0741f0 [ 78.824079][ C0] x20: 0000000000000001 x19: ffff0000dc0741e8 x18: 0000000000010001 [ 78.824087][ C0] x17: 0000000000010001 x16: ffff8000111cbe1c x15: 0000000000000003 [ 78.824094][ C0] x14: 0000000008303570 x13: 0f6ab60214e3b000 x12: 0000000000ff0100 [ 78.824102][ C0] x11: 0000000000000102 x10: 0000000000000000 x9 : ffff80000837efc4 [ 78.824109][ C0] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff80000837f700 [ 78.824117][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d60cc [ 78.824124][ C0] x2 : 0000000000000001 x1 : ffff8000117d8f20 x0 : 0000000000000001 [ 78.824131][ C0] Call trace: [ 78.824134][ C0] detach_timer+0x148/0x3c8 [ 78.824139][ C0] __run_timers+0x414/0x6c4 [ 78.824143][ C0] run_timer_softirq+0x7c/0x114 [ 78.824148][ C0] handle_softirqs+0x344/0xbf0 [ 78.824154][ C0] __irq_exit_rcu+0x240/0x440 [ 78.824159][ C0] irq_exit+0x14/0x88 [ 78.824164][ C0] handle_domain_irq+0x14c/0x1fc [ 78.824169][ C0] gic_handle_irq+0x78/0x1c8 [ 78.824174][ C0] call_on_irq_stack+0x30/0x48 [ 78.824179][ C0] do_interrupt_handler+0x6c/0x88 [ 78.824183][ C0] el1_interrupt+0x30/0x58 [ 78.824189][ C0] el1h_64_irq_handler+0x18/0x24 [ 78.824193][ C0] el1h_64_irq+0x78/0x7c [ 78.824197][ C0] console_trylock_spinning+0x1f4/0x268 [ 78.824202][ C0] vprintk_emit+0x120/0x218 [ 78.824207][ C0] vprintk_default+0x54/0x80 [ 78.824212][ C0] vprintk+0x1e8/0x284 [ 78.824216][ C0] _printk+0xd0/0x118 [ 78.824222][ C0] die_kernel_fault+0x40/0x78 [ 78.824227][ C0] __do_kernel_fault+0x39c/0x404 [ 78.824232][ C0] do_page_fault+0x13c/0xad4 [ 78.824237][ C0] do_mem_abort+0x6c/0x1ac [ 78.824242][ C0] el1_abort+0x3c/0x5c [ 78.824247][ C0] el1h_64_sync_handler+0x80/0xcc [ 78.824252][ C0] el1h_64_sync+0x78/0x7c [ 78.824256][ C0] __memcpy+0x1d8/0x250 [ 78.824262][ C0] leaf_paste_entries+0x4d8/0x924 [ 78.824267][ C0] balance_leaf+0x81d0/0xd2f4 [ 78.824271][ C0] do_balance+0x260/0x778 [ 78.824275][ C0] reiserfs_paste_into_item+0x5b4/0x6d0 [ 78.824280][ C0] reiserfs_add_entry+0x828/0xbe4 [ 78.824285][ C0] reiserfs_mkdir+0x588/0x788 [ 78.824289][ C0] reiserfs_xattr_init+0x2b0/0x6dc [ 78.824293][ C0] reiserfs_fill_super+0x17ec/0x1bb4 [ 78.824298][ C0] mount_bdev+0x264/0x358 [ 78.824302][ C0] get_super_block+0x44/0x58 [ 78.824307][ C0] legacy_get_tree+0xd4/0x16c [ 78.824311][ C0] vfs_get_tree+0x90/0x274 [ 78.824316][ C0] do_new_mount+0x228/0x810 [ 78.824320][ C0] path_mount+0x5b4/0x1000 [ 78.824324][ C0] __arm64_sys_mount+0x514/0x5e4 [ 78.824328][ C0] invoke_syscall+0x98/0x2b8 [ 78.824333][ C0] el0_svc_common+0x138/0x258 [ 78.824338][ C0] do_el0_svc+0x58/0x14c [ 78.824343][ C0] el0_svc+0x78/0x1e0 [ 78.824346][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 78.824351][ C0] el0t_64_sync+0x1a0/0x1a4 [ 78.824358][ C0] Code: 38786908 34000068 aa1703e0 9412f841 (f90002f6) [ 78.824363][ C0] ---[ end trace a268b9dab43b110d ]--- [ 79.037713][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 79.037722][ C0] SMP: stopping secondary CPUs [ 80.113153][ C0] SMP: failed to stop secondary CPUs 0-1 [ 80.113164][ C0] Kernel Offset: disabled [ 80.113168][ C0] CPU features: 0x8,000003c1,7d33ffd9 [ 80.113174][ C0] Memory Limit: none [ 80.386856][ C0] Rebooting in 86400 seconds..