Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2026/01/30 21:24:48 parsed 1 programs [ 89.880024][ T4599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 91.842039][ T4637] chnl_net:caif_netlink_parms(): no params data found [ 91.897639][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.904794][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.914410][ T4637] device bridge_slave_0 entered promiscuous mode [ 91.923475][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.931695][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.939943][ T4637] device bridge_slave_1 entered promiscuous mode [ 91.968795][ T4637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.980350][ T4637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.011300][ T4637] team0: Port device team_slave_0 added [ 92.019358][ T4637] team0: Port device team_slave_1 added [ 92.042872][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.049969][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.077444][ T4637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.090117][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.098112][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.125252][ T4637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.162953][ T4637] device hsr_slave_0 entered promiscuous mode [ 92.170885][ T4637] device hsr_slave_1 entered promiscuous mode [ 92.792190][ T4637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.812451][ T4637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.826712][ T4637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.842780][ T4637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.982326][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.997851][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.006306][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.042766][ T4637] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.072251][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.089442][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.106178][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.113332][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.122391][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.131209][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.140757][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.147885][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.155537][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.166053][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.186726][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.195413][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.209801][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.219388][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.230226][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.239930][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.248637][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.263380][ T4637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.274959][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.285611][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.295637][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.305372][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.448690][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.456159][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.469554][ T4637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.488534][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.497880][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.529398][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.538652][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.547073][ T4637] device veth0_vlan entered promiscuous mode [ 93.555537][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.565035][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.576388][ T4637] device veth1_vlan entered promiscuous mode [ 93.608443][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.617627][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.628372][ T4637] device veth0_macvtap entered promiscuous mode [ 93.639269][ T4637] device veth1_macvtap entered promiscuous mode [ 93.659001][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.667147][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.679128][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.690118][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.700350][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.711677][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.734886][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.743802][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.756016][ T4637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.766078][ T4637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.776018][ T4637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.785185][ T4637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.730726][ T502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.760549][ T502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.791123][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.807905][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.816011][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.828590][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.127941][ T151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/30 21:24:57 executed programs: 0 [ 96.614192][ T4853] chnl_net:caif_netlink_parms(): no params data found [ 96.670863][ T4853] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.679142][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.688588][ T4853] device bridge_slave_0 entered promiscuous mode [ 96.698108][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.705255][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.714992][ T4853] device bridge_slave_1 entered promiscuous mode [ 96.745026][ T4853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.758992][ T4853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.792457][ T4853] team0: Port device team_slave_0 added [ 96.801603][ T4853] team0: Port device team_slave_1 added [ 96.826293][ T4853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.833403][ T4853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.859714][ T4853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.872104][ T4853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.879312][ T4853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.905445][ T4853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.943945][ T4853] device hsr_slave_0 entered promiscuous mode [ 96.951157][ T4853] device hsr_slave_1 entered promiscuous mode [ 96.958197][ T4853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.965784][ T4853] Cannot create hsr debugfs directory [ 98.529862][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 98.991151][ T151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.050061][ T151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.121710][ T151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.890635][ T4853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.901157][ T4853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.911613][ T4853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.935788][ T4853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.001676][ T4853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.013389][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.021671][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.033049][ T4853] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.045996][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.056340][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.065688][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.072907][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.081954][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.104757][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.114025][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.122696][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.130057][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.149113][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.158059][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.167878][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.177609][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.186100][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.221448][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.230610][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.239566][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.249966][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.260290][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.268804][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.278016][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.376098][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.383864][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.395959][ T4853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.425281][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.434304][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.461350][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.470153][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.479406][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.488193][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.498388][ T4853] device veth0_vlan entered promiscuous mode [ 100.532677][ T4853] device veth1_vlan entered promiscuous mode [ 100.556207][ T4853] device veth0_macvtap entered promiscuous mode [ 100.568404][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.577352][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.586239][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.595393][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.598769][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 100.604627][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.620420][ T4853] device veth1_macvtap entered promiscuous mode [ 100.632314][ T151] device hsr_slave_0 left promiscuous mode [ 100.639186][ T151] device hsr_slave_1 left promiscuous mode [ 100.645800][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.654078][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.662034][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.671610][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.679596][ T151] device bridge_slave_1 left promiscuous mode [ 100.685748][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.694735][ T151] device bridge_slave_0 left promiscuous mode [ 100.701254][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.713336][ T151] device veth1_macvtap left promiscuous mode [ 100.720730][ T151] device veth0_macvtap left promiscuous mode [ 100.728023][ T151] device veth1_vlan left promiscuous mode [ 100.734009][ T151] device veth0_vlan left promiscuous mode [ 100.865187][ T151] team0 (unregistering): Port device team_slave_1 removed [ 100.881326][ T151] team0 (unregistering): Port device team_slave_0 removed [ 100.893219][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.906474][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.955243][ T151] bond0 (unregistering): Released all slaves [ 101.025911][ T4853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.037013][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.045054][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.054246][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.067349][ T4853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.078834][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.088738][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.100595][ T4853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.109687][ T4853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.118985][ T4853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.127795][ T4853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.184551][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.195338][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.220429][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.233601][ T502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.242742][ T502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.254441][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.340997][ T5088] loop0: detected capacity change from 0 to 8192 [ 101.360865][ T5088] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 101.371504][ T5088] REISERFS (device loop0): using ordered data mode [ 101.378298][ T5088] reiserfs: using flush barriers [ 101.385221][ T5088] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.403353][ T5088] REISERFS (device loop0): checking transaction log (loop0) [ 101.414786][ T5088] REISERFS (device loop0): Using r5 hash to sort names [ 101.429106][ T5088] REISERFS (device loop0): using 3.5.x disk format [ 101.438338][ T5088] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.492074][ T5088] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 101.511690][ T5088] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 101.522335][ T5088] REISERFS (device loop0): Remounting filesystem read-only [ 101.530769][ T5088] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 101.545873][ T5088] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 101.562721][ T5087] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 101.580654][ T5087] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 101.591307][ T5087] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data 2026/01/30 21:25:03 executed programs: 3 [ 101.805831][ T5091] loop0: detected capacity change from 0 to 8192 [ 101.880164][ T5091] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 101.890141][ T5091] REISERFS (device loop0): using ordered data mode [ 101.896775][ T5091] reiserfs: using flush barriers [ 101.904006][ T5091] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.937002][ T5091] REISERFS (device loop0): checking transaction log (loop0) [ 101.947745][ T5091] REISERFS (device loop0): Using r5 hash to sort names [ 101.954640][ T5091] REISERFS (device loop0): using 3.5.x disk format [ 101.968107][ T5091] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 101.988674][ T5091] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 102.017437][ T5091] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 102.028711][ T5091] REISERFS (device loop0): Remounting filesystem read-only [ 102.036128][ T5091] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 102.056536][ T5091] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 102.070634][ T5090] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 102.087416][ T5090] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 102.099323][ T5090] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data [ 102.303542][ T5094] loop0: detected capacity change from 0 to 8192 [ 102.321492][ T5094] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 102.330886][ T5094] REISERFS (device loop0): using ordered data mode [ 102.337808][ T5094] reiserfs: using flush barriers [ 102.344378][ T5094] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.363602][ T5094] REISERFS (device loop0): checking transaction log (loop0) [ 102.372327][ T5094] REISERFS (device loop0): Using r5 hash to sort names [ 102.387981][ T5094] REISERFS (device loop0): using 3.5.x disk format [ 102.394935][ T5094] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.422986][ T5094] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 102.441776][ T5094] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 102.452892][ T5094] REISERFS (device loop0): Remounting filesystem read-only [ 102.462233][ T5094] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 102.477868][ T5094] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 102.490812][ T5093] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 102.508457][ T5093] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 102.520014][ T5093] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data [ 102.666559][ T5097] loop0: detected capacity change from 0 to 8192 [ 102.678119][ T4296] Bluetooth: hci0: command 0x040f tx timeout [ 102.726250][ T5097] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 102.735760][ T5097] REISERFS (device loop0): using ordered data mode [ 102.746429][ T5097] reiserfs: using flush barriers [ 102.753321][ T5097] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.771230][ T5097] REISERFS (device loop0): checking transaction log (loop0) [ 102.781888][ T5097] REISERFS (device loop0): Using r5 hash to sort names [ 102.790343][ T5097] REISERFS (device loop0): using 3.5.x disk format [ 102.797622][ T5097] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.816444][ T5097] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 102.833974][ T5097] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 102.844708][ T5097] REISERFS (device loop0): Remounting filesystem read-only [ 102.852242][ T5097] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 102.866548][ T5097] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 102.879759][ T5096] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 102.896659][ T5096] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 102.907530][ T5096] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data [ 103.032220][ T5100] loop0: detected capacity change from 0 to 8192 [ 103.089156][ T5100] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 103.098835][ T5100] REISERFS (device loop0): using ordered data mode [ 103.105351][ T5100] reiserfs: using flush barriers [ 103.111720][ T5100] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.129509][ T5100] REISERFS (device loop0): checking transaction log (loop0) [ 103.138734][ T5100] REISERFS (device loop0): Using r5 hash to sort names [ 103.145715][ T5100] REISERFS (device loop0): using 3.5.x disk format [ 103.153914][ T5100] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 103.187794][ T5100] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 103.204744][ T5100] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 103.215379][ T5100] REISERFS (device loop0): Remounting filesystem read-only [ 103.222650][ T5100] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 103.236443][ T5100] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 103.249958][ T5099] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 103.266255][ T5099] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 103.277066][ T5099] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data [ 103.427266][ T5103] loop0: detected capacity change from 0 to 8192 [ 103.477290][ T5103] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 103.486826][ T5103] REISERFS (device loop0): using ordered data mode [ 103.493354][ T5103] reiserfs: using flush barriers [ 103.514228][ T5103] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.558203][ T5103] REISERFS (device loop0): checking transaction log (loop0) [ 103.569956][ T5103] REISERFS (device loop0): Using r5 hash to sort names [ 103.598521][ T5103] REISERFS (device loop0): using 3.5.x disk format [ 103.606230][ T5103] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 103.634860][ T5103] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 103.663325][ T5103] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 103.675662][ T5103] REISERFS (device loop0): Remounting filesystem read-only [ 103.683624][ T5103] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 103.698818][ T5103] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 103.712593][ T5102] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 103.730051][ T5102] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 103.740901][ T5102] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data [ 103.899082][ T5106] loop0: detected capacity change from 0 to 8192 [ 103.919394][ T5106] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 103.928898][ T5106] REISERFS (device loop0): using ordered data mode [ 103.935614][ T5106] reiserfs: using flush barriers [ 103.941885][ T5106] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 103.958538][ T5106] REISERFS (device loop0): checking transaction log (loop0) [ 103.977673][ T5106] REISERFS (device loop0): Using r5 hash to sort names [ 103.984699][ T5106] REISERFS (device loop0): using 3.5.x disk format [ 103.992289][ T5106] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 104.018128][ T5106] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 104.034139][ T5106] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 104.044926][ T5106] REISERFS (device loop0): Remounting filesystem read-only [ 104.052334][ T5106] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 4194306 0xffffffff DIRECT] [ 104.066523][ T5106] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 4194306 on readonly FS [ 104.079300][ T5105] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4194305 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 104.095576][ T5105] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 104.106254][ T5105] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4194306 0x0 SD] stat data [ 104.248663][ T5109] loop0: detected capacity change from 0 to 8192 [ 104.297330][ T5109] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 104.307510][ T5109] REISERFS (device loop0): using ordered data mode [ 104.314123][ T5109] reiserfs: using flush barriers [ 104.320184][ T5109] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.338134][ T5109] REISERFS (device loop0): checking transaction log (loop0) [ 104.346465][ T5109] REISERFS (device loop0): Using r5 hash to sort names [ 104.353954][ T5109] REISERFS (device loop0): using 3.5.x disk format [ 104.362634][ T5109] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 104.379372][ T5109] ================================================================== [ 104.387633][ T5109] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x615/0xab0 [ 104.395373][ T5109] Read of size 48 at addr ffff88805f6f5ff0 by task syz.0.23/5109 [ 104.403074][ T5109] [ 104.405396][ T5109] CPU: 0 PID: 5109 Comm: syz.0.23 Not tainted syzkaller #0 [ 104.412578][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.422670][ T5109] Call Trace: [ 104.425977][ T5109] [ 104.428911][ T5109] dump_stack_lvl+0x188/0x250 [ 104.433598][ T5109] ? show_regs_print_info+0x20/0x20 [ 104.438819][ T5109] ? load_image+0x400/0x400 [ 104.443314][ T5109] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 104.448768][ T5109] ? __lock_acquire+0x12e8/0x7d10 [ 104.453789][ T5109] print_address_description+0x60/0x2d0 [ 104.459336][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 104.464789][ T5109] kasan_report+0xdf/0x130 [ 104.469203][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 104.474661][ T5109] kasan_check_range+0x235/0x290 [ 104.479599][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 104.484981][ T5109] memcpy+0x25/0x60 [ 104.488782][ T5109] leaf_paste_in_buffer+0x615/0xab0 [ 104.493979][ T5109] leaf_copy_dir_entries+0x56c/0x8f0 [ 104.499268][ T5109] leaf_copy_boundary_item+0xb8c/0x2190 [ 104.504859][ T5109] leaf_move_items+0x85f/0xe00 [ 104.509719][ T5109] ? reiserfs_convert_objectid_map_v1+0x4f0/0x4f0 [ 104.516135][ T5109] leaf_shift_left+0xb9/0x450 [ 104.520815][ T5109] balance_leaf+0x18fd/0x10ec0 [ 104.525589][ T5109] ? do_balance+0x930/0x930 [ 104.530085][ T5109] ? __mutex_trylock_common+0x155/0x260 [ 104.535634][ T5109] ? rcu_lock_release+0x20/0x20 [ 104.540470][ T5109] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 104.546261][ T5109] ? __mutex_lock_common+0x465/0x2400 [ 104.551635][ T5109] ? __might_sleep+0xf0/0xf0 [ 104.556217][ T5109] ? add_save_link+0x39e/0x600 [ 104.561589][ T5109] ? reiserfs_truncate_file+0x645/0xe40 [ 104.567139][ T5109] ? reiserfs_setattr+0xab3/0x1090 [ 104.572263][ T5109] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 104.577917][ T5109] ? mutex_lock_io_nested+0x60/0x60 [ 104.583126][ T5109] ? get_empty_nodes+0x48a/0x920 [ 104.588068][ T5109] ? get_neighbors+0x1030/0x1030 [ 104.593118][ T5109] ? __wake_up_bit+0x120/0x120 [ 104.597954][ T5109] ? mutex_lock_nested+0x17/0x20 [ 104.602936][ T5109] ? reiserfs_prepare_for_journal+0x269/0x280 [ 104.609021][ T5109] ? fix_nodes+0x7bc3/0x8340 [ 104.613622][ T5109] do_balance+0x318/0x930 [ 104.617951][ T5109] ? get_right_neighbor_position+0x210/0x210 [ 104.624056][ T5109] ? reiserfs_insert_item+0x5b9/0xbe0 [ 104.629448][ T5109] reiserfs_insert_item+0xa7b/0xbe0 [ 104.634680][ T5109] ? reiserfs_paste_into_item+0x810/0x810 [ 104.640549][ T5109] ? __mutex_trylock_common+0x155/0x260 [ 104.646105][ T5109] ? mutex_lock_nested+0x17/0x20 [ 104.651027][ T5109] ? make_le_item_head+0x1ce/0x510 [ 104.656126][ T5109] add_save_link+0x39e/0x600 [ 104.660793][ T5109] ? reiserfs_cancel_old_flush+0xb0/0xb0 [ 104.666550][ T5109] ? journal_join_abort+0xe0/0xe0 [ 104.671582][ T5109] ? journal_begin+0x1f1/0x350 [ 104.676334][ T5109] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 104.682736][ T5109] reiserfs_truncate_file+0x645/0xe40 [ 104.688101][ T5109] ? reiserfs_new_symlink+0x580/0x580 [ 104.693470][ T5109] reiserfs_setattr+0xab3/0x1090 [ 104.698402][ T5109] ? reiserfs_commit_write+0x620/0x620 [ 104.703844][ T5109] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 104.709736][ T5109] ? current_time+0x1d8/0x2c0 [ 104.714420][ T5109] ? atime_needs_update+0x780/0x780 [ 104.719610][ T5109] ? bpf_lsm_inode_setattr+0x5/0x10 [ 104.724854][ T5109] ? try_break_deleg+0x79/0x120 [ 104.729690][ T5109] ? reiserfs_commit_write+0x620/0x620 [ 104.735225][ T5109] notify_change+0xbcd/0xee0 [ 104.739817][ T5109] do_truncate+0x1ac/0x240 [ 104.744242][ T5109] ? rcu_lock_release+0x20/0x20 [ 104.749082][ T5109] ? ima_bprm_check+0x200/0x200 [ 104.753965][ T5109] ? bpf_lsm_path_truncate+0x5/0x10 [ 104.759170][ T5109] path_openat+0x2922/0x2fa0 [ 104.763947][ T5109] ? verify_lock_unused+0x140/0x140 [ 104.769145][ T5109] ? slab_post_alloc_hook+0x4c/0x380 [ 104.774427][ T5109] ? do_filp_open+0x410/0x410 [ 104.779146][ T5109] do_filp_open+0x1e2/0x410 [ 104.783728][ T5109] ? vfs_tmpfile+0x300/0x300 [ 104.788350][ T5109] ? _raw_spin_unlock+0x24/0x40 [ 104.793214][ T5109] ? alloc_fd+0x598/0x630 [ 104.797534][ T5109] do_sys_openat2+0x150/0x4b0 [ 104.802235][ T5109] ? __lock_acquire+0x7d10/0x7d10 [ 104.807248][ T5109] ? do_sys_open+0xe0/0xe0 [ 104.811675][ T5109] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 104.817647][ T5109] ? lock_chain_count+0x20/0x20 [ 104.822479][ T5109] ? vtime_user_exit+0x2c8/0x3e0 [ 104.827411][ T5109] __x64_sys_openat+0x135/0x160 [ 104.832248][ T5109] do_syscall_64+0x4c/0xa0 [ 104.836652][ T5109] ? clear_bhb_loop+0x30/0x80 [ 104.841325][ T5109] ? clear_bhb_loop+0x30/0x80 [ 104.846034][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.852005][ T5109] RIP: 0033:0x7f3f35aae0b9 [ 104.856405][ T5109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.876086][ T5109] RSP: 002b:00007f3f34d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.884494][ T5109] RAX: ffffffffffffffda RBX: 00007f3f35cdafa0 RCX: 00007f3f35aae0b9 [ 104.892474][ T5109] RDX: 000000000000275a RSI: 0000200000000200 RDI: 0000000000000004 [ 104.900507][ T5109] RBP: 00007f3f35b409c4 R08: 0000000000000000 R09: 0000000000000000 [ 104.908463][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.916429][ T5109] R13: 0000000000000000 R14: 00007f3f35cdafa0 R15: 00007ffdea2f7f78 [ 104.924479][ T5109] [ 104.927477][ T5109] [ 104.929778][ T5109] The buggy address belongs to the page: [ 104.935398][ T5109] page:ffffea00017dbd40 refcount:2 mapcount:0 mapping:ffff888140855af0 index:0x214 pfn:0x5f6f5 [ 104.945877][ T5109] memcg:ffff8880181b4000 [ 104.950099][ T5109] aops:def_blk_aops ino:700000 [ 104.954851][ T5109] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 104.964552][ T5109] raw: 00fff00000002032 ffffea0001aa2908 ffffea0001b17688 ffff888140855af0 [ 104.973204][ T5109] raw: 0000000000000214 ffff888070878488 00000002ffffffff ffff8880181b4000 [ 104.981765][ T5109] page dumped because: kasan: bad access detected [ 104.988167][ T5109] page_owner tracks the page as allocated [ 104.993860][ T5109] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5109, ts 104378281241, free_ts 104378109244 [ 105.011135][ T5109] get_page_from_freelist+0x1bbd/0x1ca0 [ 105.016694][ T5109] __alloc_pages+0x1ee/0x480 [ 105.021284][ T5109] __page_cache_alloc+0xce/0x440 [ 105.026298][ T5109] pagecache_get_page+0x9b6/0xf10 [ 105.031324][ T5109] __getblk_gfp+0x247/0xb60 [ 105.035813][ T5109] get_empty_nodes+0x56a/0x920 [ 105.040673][ T5109] fix_nodes+0x1ebc/0x8340 [ 105.045082][ T5109] reiserfs_insert_item+0x9a7/0xbe0 [ 105.050269][ T5109] indirect2direct+0x5ab/0x9f0 [ 105.055185][ T5109] reiserfs_cut_from_item+0x9cf/0x1fa0 [ 105.060623][ T5109] reiserfs_do_truncate+0xa09/0x1390 [ 105.065896][ T5109] reiserfs_truncate_file+0x666/0xe40 [ 105.071251][ T5109] reiserfs_setattr+0xab3/0x1090 [ 105.076194][ T5109] notify_change+0xbcd/0xee0 [ 105.080787][ T5109] do_truncate+0x1ac/0x240 [ 105.085196][ T5109] do_sys_ftruncate+0x31b/0x3d0 [ 105.090069][ T5109] page last free stack trace: [ 105.094836][ T5109] free_unref_page_prepare+0x637/0x6c0 [ 105.100286][ T5109] free_unref_page_list+0x119/0x820 [ 105.105732][ T5109] release_pages+0x186c/0x1be0 [ 105.110478][ T5109] __pagevec_release+0x6d/0xe0 [ 105.115223][ T5109] truncate_inode_pages_range+0x362/0xfe0 [ 105.120926][ T5109] truncate_setsize+0xb9/0xe0 [ 105.125593][ T5109] reiserfs_setattr+0xaa6/0x1090 [ 105.130531][ T5109] notify_change+0xbcd/0xee0 [ 105.135189][ T5109] do_truncate+0x1ac/0x240 [ 105.139677][ T5109] do_sys_ftruncate+0x31b/0x3d0 [ 105.144514][ T5109] do_syscall_64+0x4c/0xa0 [ 105.148918][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.154793][ T5109] [ 105.157093][ T5109] Memory state around the buggy address: [ 105.162780][ T5109] ffff88805f6f5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.170820][ T5109] ffff88805f6f5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.178861][ T5109] >ffff88805f6f6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.186903][ T5109] ^ [ 105.190957][ T5109] ffff88805f6f6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.199170][ T5109] ffff88805f6f6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.207225][ T5109] ================================================================== [ 105.215262][ T5109] Disabling lock debugging due to kernel taint [ 105.222568][ T4239] Bluetooth: hci0: command 0x0419 tx timeout [ 105.229648][ T5109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.236846][ T5109] CPU: 0 PID: 5109 Comm: syz.0.23 Tainted: G B syzkaller #0 [ 105.245432][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.255458][ T5109] Call Trace: [ 105.258717][ T5109] [ 105.261622][ T5109] dump_stack_lvl+0x188/0x250 [ 105.266291][ T5109] ? show_regs_print_info+0x20/0x20 [ 105.271483][ T5109] ? load_image+0x400/0x400 [ 105.275970][ T5109] panic+0x2e5/0x810 [ 105.279846][ T5109] ? bpf_jit_dump+0xd0/0xd0 [ 105.284327][ T5109] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 105.290312][ T5109] ? _raw_spin_unlock+0x40/0x40 [ 105.295153][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 105.300503][ T5109] check_panic_on_warn+0x80/0xa0 [ 105.305420][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 105.310787][ T5109] end_report+0x6d/0xf0 [ 105.314922][ T5109] kasan_report+0x102/0x130 [ 105.319400][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 105.324771][ T5109] kasan_check_range+0x235/0x290 [ 105.329717][ T5109] ? leaf_paste_in_buffer+0x615/0xab0 [ 105.335068][ T5109] memcpy+0x25/0x60 [ 105.338862][ T5109] leaf_paste_in_buffer+0x615/0xab0 [ 105.344047][ T5109] leaf_copy_dir_entries+0x56c/0x8f0 [ 105.349317][ T5109] leaf_copy_boundary_item+0xb8c/0x2190 [ 105.354853][ T5109] leaf_move_items+0x85f/0xe00 [ 105.359608][ T5109] ? reiserfs_convert_objectid_map_v1+0x4f0/0x4f0 [ 105.366033][ T5109] leaf_shift_left+0xb9/0x450 [ 105.370701][ T5109] balance_leaf+0x18fd/0x10ec0 [ 105.375457][ T5109] ? do_balance+0x930/0x930 [ 105.379940][ T5109] ? __mutex_trylock_common+0x155/0x260 [ 105.385468][ T5109] ? rcu_lock_release+0x20/0x20 [ 105.390298][ T5109] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 105.396003][ T5109] ? __mutex_lock_common+0x465/0x2400 [ 105.401357][ T5109] ? __might_sleep+0xf0/0xf0 [ 105.405949][ T5109] ? add_save_link+0x39e/0x600 [ 105.410687][ T5109] ? reiserfs_truncate_file+0x645/0xe40 [ 105.416228][ T5109] ? reiserfs_setattr+0xab3/0x1090 [ 105.421312][ T5109] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 105.427189][ T5109] ? mutex_lock_io_nested+0x60/0x60 [ 105.432389][ T5109] ? get_empty_nodes+0x48a/0x920 [ 105.437326][ T5109] ? get_neighbors+0x1030/0x1030 [ 105.442248][ T5109] ? __wake_up_bit+0x120/0x120 [ 105.446993][ T5109] ? mutex_lock_nested+0x17/0x20 [ 105.451912][ T5109] ? reiserfs_prepare_for_journal+0x269/0x280 [ 105.457981][ T5109] ? fix_nodes+0x7bc3/0x8340 [ 105.462552][ T5109] do_balance+0x318/0x930 [ 105.466946][ T5109] ? get_right_neighbor_position+0x210/0x210 [ 105.472923][ T5109] ? reiserfs_insert_item+0x5b9/0xbe0 [ 105.478270][ T5109] reiserfs_insert_item+0xa7b/0xbe0 [ 105.483444][ T5109] ? reiserfs_paste_into_item+0x810/0x810 [ 105.489165][ T5109] ? __mutex_trylock_common+0x155/0x260 [ 105.494710][ T5109] ? mutex_lock_nested+0x17/0x20 [ 105.499633][ T5109] ? make_le_item_head+0x1ce/0x510 [ 105.504724][ T5109] add_save_link+0x39e/0x600 [ 105.509294][ T5109] ? reiserfs_cancel_old_flush+0xb0/0xb0 [ 105.514929][ T5109] ? journal_join_abort+0xe0/0xe0 [ 105.520028][ T5109] ? journal_begin+0x1f1/0x350 [ 105.524768][ T5109] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 105.531172][ T5109] reiserfs_truncate_file+0x645/0xe40 [ 105.536536][ T5109] ? reiserfs_new_symlink+0x580/0x580 [ 105.541894][ T5109] reiserfs_setattr+0xab3/0x1090 [ 105.546816][ T5109] ? reiserfs_commit_write+0x620/0x620 [ 105.552253][ T5109] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 105.558124][ T5109] ? current_time+0x1d8/0x2c0 [ 105.562897][ T5109] ? atime_needs_update+0x780/0x780 [ 105.568270][ T5109] ? bpf_lsm_inode_setattr+0x5/0x10 [ 105.573632][ T5109] ? try_break_deleg+0x79/0x120 [ 105.578466][ T5109] ? reiserfs_commit_write+0x620/0x620 [ 105.583934][ T5109] notify_change+0xbcd/0xee0 [ 105.588726][ T5109] do_truncate+0x1ac/0x240 [ 105.593296][ T5109] ? rcu_lock_release+0x20/0x20 [ 105.598127][ T5109] ? ima_bprm_check+0x200/0x200 [ 105.603075][ T5109] ? bpf_lsm_path_truncate+0x5/0x10 [ 105.608295][ T5109] path_openat+0x2922/0x2fa0 [ 105.612889][ T5109] ? verify_lock_unused+0x140/0x140 [ 105.618066][ T5109] ? slab_post_alloc_hook+0x4c/0x380 [ 105.623325][ T5109] ? do_filp_open+0x410/0x410 [ 105.627978][ T5109] do_filp_open+0x1e2/0x410 [ 105.632491][ T5109] ? vfs_tmpfile+0x300/0x300 [ 105.637084][ T5109] ? _raw_spin_unlock+0x24/0x40 [ 105.641932][ T5109] ? alloc_fd+0x598/0x630 [ 105.646244][ T5109] do_sys_openat2+0x150/0x4b0 [ 105.650894][ T5109] ? __lock_acquire+0x7d10/0x7d10 [ 105.655907][ T5109] ? do_sys_open+0xe0/0xe0 [ 105.660390][ T5109] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 105.666387][ T5109] ? lock_chain_count+0x20/0x20 [ 105.671287][ T5109] ? vtime_user_exit+0x2c8/0x3e0 [ 105.676222][ T5109] __x64_sys_openat+0x135/0x160 [ 105.681144][ T5109] do_syscall_64+0x4c/0xa0 [ 105.685540][ T5109] ? clear_bhb_loop+0x30/0x80 [ 105.690194][ T5109] ? clear_bhb_loop+0x30/0x80 [ 105.694867][ T5109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.700872][ T5109] RIP: 0033:0x7f3f35aae0b9 [ 105.705275][ T5109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.724867][ T5109] RSP: 002b:00007f3f34d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.733270][ T5109] RAX: ffffffffffffffda RBX: 00007f3f35cdafa0 RCX: 00007f3f35aae0b9 [ 105.741225][ T5109] RDX: 000000000000275a RSI: 0000200000000200 RDI: 0000000000000004 [ 105.749175][ T5109] RBP: 00007f3f35b409c4 R08: 0000000000000000 R09: 0000000000000000 [ 105.757125][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.765156][ T5109] R13: 0000000000000000 R14: 00007f3f35cdafa0 R15: 00007ffdea2f7f78 [ 105.773110][ T5109] [ 105.776647][ T5109] Kernel Offset: disabled [ 105.780984][ T5109] Rebooting in 86400 seconds..