Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. 1970/01/01 00:01:03 ignoring optional flag "type"="gce" 1970/01/01 00:01:03 parsed 1 programs [ 65.128683][ T4440] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 67.419712][ T4569] chnl_net:caif_netlink_parms(): no params data found [ 67.439716][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.440873][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.442402][ T4569] device bridge_slave_0 entered promiscuous mode [ 67.444342][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.445459][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.447292][ T4569] device bridge_slave_1 entered promiscuous mode [ 67.456395][ T4569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.459132][ T4569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.468032][ T4569] team0: Port device team_slave_0 added [ 67.469973][ T4569] team0: Port device team_slave_1 added [ 67.477857][ T4569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.479029][ T4569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.483332][ T4569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.485842][ T4569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.487606][ T4569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.491421][ T4569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.527157][ T4569] device hsr_slave_0 entered promiscuous mode [ 67.576161][ T4569] device hsr_slave_1 entered promiscuous mode [ 68.221441][ T4569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.247996][ T4569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.277211][ T4569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.308896][ T4569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.335388][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.336695][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.338013][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.339097][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.365735][ T4569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.371303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.373290][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.374870][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.381792][ T4569] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.384362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.393013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.394638][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.395848][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.406336][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.408241][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.409573][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.410674][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.412046][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.413643][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.415196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.418919][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.420512][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.422057][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.423662][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.425169][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.430212][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.432581][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.434053][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.448274][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.495168][ T4569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.511398][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.512736][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.520665][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.522311][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.529597][ T4569] device veth0_vlan entered promiscuous mode [ 68.532902][ T4569] device veth1_vlan entered promiscuous mode [ 68.537585][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.539231][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.540806][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.542924][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.544461][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.545821][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.553647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.555262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.559938][ T4569] device veth0_macvtap entered promiscuous mode [ 68.562595][ T4569] device veth1_macvtap entered promiscuous mode [ 68.569100][ T4569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.570250][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.571996][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.573613][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.575852][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.580700][ T4569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.582506][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.584126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.587002][ T4569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.588449][ T4569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.589875][ T4569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.591216][ T4569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.680660][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.681954][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.683803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.695808][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.697809][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.699475][ T1722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:08 executed programs: 0 [ 68.812664][ T4701] chnl_net:caif_netlink_parms(): no params data found [ 68.833060][ T4701] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.834293][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.835736][ T4701] device bridge_slave_0 entered promiscuous mode [ 68.839834][ T4701] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.841027][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.842551][ T4701] device bridge_slave_1 entered promiscuous mode [ 68.851403][ T4701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.853973][ T4701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.863332][ T4701] team0: Port device team_slave_0 added [ 68.865244][ T4701] team0: Port device team_slave_1 added [ 68.872886][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.873943][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.878057][ T4701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.880834][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.881955][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.885882][ T4701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.918252][ T4701] device hsr_slave_0 entered promiscuous mode [ 68.966339][ T4701] device hsr_slave_1 entered promiscuous mode [ 68.986052][ T4701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.987297][ T4701] Cannot create hsr debugfs directory [ 69.037833][ T4701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.637199][ T3342] cfg80211: failed to load regulatory.db [ 69.637480][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.639257][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.835980][ T4113] Bluetooth: hci0: command 0x0409 tx timeout [ 71.510200][ T4701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.905976][ T4113] Bluetooth: hci0: command 0x041b tx timeout [ 74.181832][ T4701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.229071][ T4701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.420088][ T4701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.468377][ T4701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.521696][ T4701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.582529][ T4701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.645799][ T4701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.650339][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.651891][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.655255][ T4701] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.661676][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.663400][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.664778][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.665820][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.667429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.670352][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.671931][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.673335][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.674423][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.680756][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.682510][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.684149][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.689304][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.695739][ T4701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.698045][ T4701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.704056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.705517][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.707150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.708650][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.710043][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.711583][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.713012][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.716683][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.753343][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.754458][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.758796][ T4701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.764962][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.766712][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.772759][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.774282][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.775769][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.777392][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.780040][ T4701] device veth0_vlan entered promiscuous mode [ 74.783856][ T4701] device veth1_vlan entered promiscuous mode [ 74.792209][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.793647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.795041][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.796936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.799564][ T4701] device veth0_macvtap entered promiscuous mode [ 74.802100][ T4701] device veth1_macvtap entered promiscuous mode [ 74.813229][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.814852][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.816970][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.818659][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.820181][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.821685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.823151][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.825322][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.828323][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.831045][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.832675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.834300][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.837366][ T4701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838719][ T4701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.840022][ T4701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.841314][ T4701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863189][ T1722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.864597][ T1722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.867982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.878094][ T1722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.879316][ T1722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.881176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:14 executed programs: 2 [ 74.933263][ T4955] loop0: detected capacity change from 0 to 8192 [ 74.984745][ T4955] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.987440][ T4165] Bluetooth: hci0: command 0x040f tx timeout [ 74.988568][ T4955] REISERFS (device loop0): using ordered data mode [ 74.989614][ T4955] reiserfs: using flush barriers [ 74.990959][ T4955] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.993478][ T4955] REISERFS (device loop0): checking transaction log (loop0) [ 74.996042][ T4955] REISERFS (device loop0): Using tea hash to sort names [ 74.997709][ T4955] ================================================================== [ 74.998961][ T4955] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x4d8/0x924 [ 75.000099][ T4955] Read of size 18446744073709551584 at addr ffff0000d7253fa4 by task syz.0.15/4955 [ 75.001441][ T4955] [ 75.001770][ T4955] CPU: 1 PID: 4955 Comm: syz.0.15 Not tainted syzkaller #0 [ 75.002910][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.004473][ T4955] Call trace: [ 75.005004][ T4955] dump_backtrace+0x0/0x43c [ 75.005757][ T4955] show_stack+0x2c/0x3c [ 75.006404][ T4955] __dump_stack+0x30/0x40 [ 75.007133][ T4955] dump_stack_lvl+0xf8/0x160 [ 75.007844][ T4955] print_address_description+0x78/0x30c [ 75.008687][ T4955] kasan_report+0xec/0x15c [ 75.009344][ T4955] kasan_check_range+0x270/0x2b0 [ 75.010126][ T4955] memmove+0x90/0xe8 [ 75.010756][ T4955] leaf_paste_entries+0x4d8/0x924 [ 75.011530][ T4955] balance_leaf+0x81d0/0xd2f4 [ 75.012214][ T4955] do_balance+0x260/0x778 [ 75.012853][ T4955] reiserfs_paste_into_item+0x5b4/0x6d0 [ 75.013734][ T4955] reiserfs_add_entry+0x828/0xbe4 [ 75.014526][ T4955] reiserfs_mkdir+0x588/0x788 [ 75.015328][ T4955] reiserfs_xattr_init+0x2b0/0x6dc [ 75.016165][ T4955] reiserfs_fill_super+0x17ec/0x1bb4 [ 75.017009][ T4955] mount_bdev+0x264/0x358 [ 75.017729][ T4955] get_super_block+0x44/0x58 [ 75.018482][ T4955] legacy_get_tree+0xd4/0x16c [ 75.019232][ T4955] vfs_get_tree+0x90/0x274 [ 75.019940][ T4955] do_new_mount+0x228/0x810 [ 75.020695][ T4955] path_mount+0x5b4/0x1000 [ 75.021390][ T4955] __arm64_sys_mount+0x514/0x5e4 [ 75.022168][ T4955] invoke_syscall+0x98/0x2b8 [ 75.022875][ T4955] el0_svc_common+0x138/0x258 [ 75.023625][ T4955] do_el0_svc+0x58/0x14c [ 75.024338][ T4955] el0_svc+0x78/0x1e0 [ 75.024997][ T4955] el0t_64_sync_handler+0xcc/0xe4 [ 75.025803][ T4955] el0t_64_sync+0x1a0/0x1a4 [ 75.026582][ T4955] [ 75.026973][ T4955] The buggy address belongs to the page: [ 75.027857][ T4955] page:00000000c15e926f refcount:3 mapcount:0 mapping:000000002d1718dc index:0x213 pfn:0x117253 [ 75.029523][ T4955] memcg:ffff0000cabb0000 [ 75.030210][ T4955] aops:def_blk_aops ino:700000 [ 75.031003][ T4955] flags: 0x5ffc00000002022(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 75.032603][ T4955] raw: 05ffc00000002022 0000000000000000 dead000000000122 ffff0000c058c388 [ 75.033972][ T4955] raw: 0000000000000213 ffff0000debdf910 00000003ffffffff ffff0000cabb0000 [ 75.035218][ T4955] page dumped because: kasan: bad access detected [ 75.036275][ T4955] [ 75.036658][ T4955] Memory state around the buggy address: [ 75.037547][ T4955] ffff0000d7253e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.038835][ T4955] ffff0000d7253f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.040095][ T4955] >ffff0000d7253f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.041386][ T4955] ^ [ 75.042134][ T4955] ffff0000d7254000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.043350][ T4955] ffff0000d7254080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.044665][ T4955] ================================================================== [ 75.045905][ T4955] Disabling lock debugging due to kernel taint [ 75.047260][ T4955] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 75.050164][ T4955] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 75.051855][ T4955] REISERFS (device loop0): Remounting filesystem read-only [ 75.052979][ T4955] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 75.055092][ T4955] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 75.057861][ T4955] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 29662, item_location 2, free_space(entry_count) 37376 [ 75.060867][ T4955] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 75.062495][ T4955] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 75.224057][ T4959] loop0: detected capacity change from 0 to 8192 [ 75.247672][ T4959] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 75.249283][ T4959] REISERFS (device loop0): using ordered data mode [ 75.250368][ T4959] reiserfs: using flush barriers [ 75.251444][ T4959] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.254226][ T4959] REISERFS (device loop0): checking transaction log (loop0) [ 75.256799][ T4959] REISERFS (device loop0): Using tea hash to sort names [ 75.260535][ T3663] [3663]: worker [4940] is unknown, ignoring [ 75.260746][ T4440] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 75.262924][ T4440] Modules linked in: [ 75.263465][ T4440] CPU: 0 PID: 4440 Comm: syz-executor Tainted: G B syzkaller #0 [ 75.264867][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.266047][ C1] Unable to handle kernel execute from non-executable memory at virtual address ffff0000e2708298 [ 75.266398][ T4440] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 75.268013][ C1] Mem abort info: [ 75.269244][ T4440] pc : exit_robust_list+0x414/0x5f0 [ 75.269740][ C1] ESR = 0x000000008600000f [ 75.270514][ T4440] lr : exit_robust_list+0x3f0/0x5f0 [ 75.271166][ C1] EC = 0x21: IABT (current EL), IL = 32 bits [ 75.272008][ T4440] sp : ffff80001f587750 [ 75.272975][ C1] SET = 0, FnV = 0 [ 75.273559][ T4440] x29: ffff80001f587790 x28: dfff800000000000 [ 75.274188][ C1] EA = 0, S1PTW = 0 [ 75.275179][ T4440] x27: 00000000fffffff2 [ 75.275832][ C1] FSC = 0x0f: level 3 permission fault [ 75.276501][ T4440] x26: 0000000000000000 x25: 1fffe00019f6aa3c x24: 0000aaaac4a260e0 [ 75.277411][ C1] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000002113cf000 [ 75.278685][ T4440] x23: 0000000000000000 x22: 0000000000001158 x21: ffff0000cfb551e4 [ 75.279771][ C1] [ffff0000e2708298] pgd=180000023fff7003 [ 75.279777][ T4440] [ 75.281148][ T4440] x20: ffff0000cfb551c0 [ 75.281951][ C1] , p4d=180000023fff7003 [ 75.282309][ T4440] x19: ffff0000cfb551c0 [ 75.282855][ C1] , pud=180000023f613003 [ 75.283519][ T4440] x18: 0000000000000000 [ 75.284149][ C1] , pmd=180000023f4ff003 [ 75.284795][ T4440] [ 75.284800][ T4440] x17: ffff8000111c8188 [ 75.285398][ C1] , pte=0068000122708707 [ 75.286064][ T4440] x16: ffff8000083c5110 x15: ffff8000081c24a0 [ 75.286399][ C1] [ 75.287100][ T4440] [ 75.287105][ T4440] x14: ffff800008a7d5e0 x13: ffff800008023610 x12: 0000000000ff0100 [ 75.290916][ T4440] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 0000000000001158 [ 75.292390][ T4440] x8 : 0000000000001158 x7 : 0000000000000000 x6 : ffff800008750ff8 [ 75.293725][ T4440] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 75.294972][ T4440] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 75.296304][ T4440] Call trace: [ 75.296803][ T4440] exit_robust_list+0x414/0x5f0 [ 75.297543][ T4440] futex_exit_release+0x124/0x1ac [ 75.298302][ T4440] exit_mm_release+0x24/0x40 [ 75.298979][ T4440] exit_mm+0xa4/0x684 [ 75.299566][ T4440] do_exit+0x4ec/0x1f58 [ 75.300276][ T4440] do_group_exit+0x100/0x268 [ 75.300941][ T4440] get_signal+0x73c/0x1340 [ 75.301581][ T4440] do_notify_resume+0x29c/0x3128 [ 75.302319][ T4440] el0_ia+0x158/0x2d0 [ 75.302939][ T4440] el0t_64_sync_handler+0xc0/0xe4 [ 75.303705][ T4440] el0t_64_sync+0x1a0/0x1a4 [ 75.304346][ T4440] Code: d503229f 2a1703fb 2a1703e0 f840093a (2a1b03e1) [ 75.305410][ T4440] ---[ end trace d0081cb29db2da43 ]--- [ 75.511831][ T4440] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 75.512937][ T4440] SMP: stopping secondary CPUs [ 76.585087][ T4440] SMP: failed to stop secondary CPUs 0-1 [ 76.585902][ T4440] Kernel Offset: disabled [ 76.586520][ T4440] CPU features: 0x8,000003c1,7d33ffd9 [ 76.587327][ T4440] Memory Limit: none [ 76.784895][ T4440] Rebooting in 86400 seconds..