Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. 2026/08/15 02:20:50 parsed 1 programs 2026/08/15 02:20:50 serving rpc on tcp://41849 Setting up swapspace version 1, size = 127995904 bytes [ 102.612325][ T4496] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 105.027096][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.039579][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.049626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.070716][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.078587][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.087522][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.368906][ T4663] chnl_net:caif_netlink_parms(): no params data found [ 105.426362][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.433857][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.443299][ T4663] device bridge_slave_0 entered promiscuous mode [ 105.452511][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.460919][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.469095][ T4663] device bridge_slave_1 entered promiscuous mode [ 105.494125][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.507414][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.535494][ T4663] team0: Port device team_slave_0 added [ 105.544654][ T4663] team0: Port device team_slave_1 added [ 105.566624][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.577039][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.604375][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.617860][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.626181][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.653737][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.692429][ T4663] device hsr_slave_0 entered promiscuous mode [ 105.699441][ T4663] device hsr_slave_1 entered promiscuous mode [ 106.530933][ T4663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.541239][ T4663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.553137][ T4663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.563032][ T4663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.626421][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.641408][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.649192][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.661102][ T4663] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.671272][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.681088][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.690609][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.697697][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.714114][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.722927][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.731931][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.741660][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.748742][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.757316][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.781865][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.791316][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.801095][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.812962][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.823899][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.832998][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.841895][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.850897][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.859328][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.870511][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.902937][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.057653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.067635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.110903][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.130898][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.140669][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.177253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.187269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.197135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.206333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.216730][ T4663] device veth0_vlan entered promiscuous mode [ 107.255280][ T4663] device veth1_vlan entered promiscuous mode [ 107.281742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.291180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.299299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.309731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.320211][ T4663] device veth0_macvtap entered promiscuous mode [ 107.356529][ T4663] device veth1_macvtap entered promiscuous mode [ 107.376776][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.385620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.395864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.405450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.415810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.430231][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.442063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.451755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.462740][ T4663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.472080][ T4663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.483096][ T4663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.492329][ T4663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/15 02:21:02 executed programs: 0 [ 109.552901][ T4803] chnl_net:caif_netlink_parms(): no params data found [ 109.674269][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.701830][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.710452][ T4803] device bridge_slave_0 entered promiscuous mode [ 109.730856][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.759413][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.767569][ T4803] device bridge_slave_1 entered promiscuous mode [ 109.791840][ T4803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.803292][ T4803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.845169][ T4803] team0: Port device team_slave_0 added [ 109.858547][ T4803] team0: Port device team_slave_1 added [ 109.878520][ T4803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.885553][ T4803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.911935][ T4803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.930817][ T4803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.937884][ T4803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.966437][ T4803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.044654][ T4803] device hsr_slave_0 entered promiscuous mode [ 110.072641][ T4803] device hsr_slave_1 entered promiscuous mode [ 110.079602][ T4803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.087198][ T4803] Cannot create hsr debugfs directory [ 110.233716][ T1240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.409753][ T2290] Bluetooth: hci0: command 0x0409 tx timeout [ 112.175144][ T1240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.267916][ T1240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.336449][ T1240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.149536][ T4803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.176263][ T4803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.185965][ T4803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.196685][ T4803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.274558][ T4803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.304296][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.314555][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.325317][ T4803] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.335968][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.347140][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.357186][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.364332][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.400285][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.408401][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.419904][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.428425][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.435573][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.447750][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.459060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.479663][ T4754] Bluetooth: hci0: command 0x041b tx timeout [ 113.484661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.498396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.507776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.521804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.532275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.542601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.552773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.563023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.573183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.588359][ T1240] device hsr_slave_0 left promiscuous mode [ 113.595096][ T1240] device hsr_slave_1 left promiscuous mode [ 113.603315][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.612414][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.622059][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.630918][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.638695][ T1240] device bridge_slave_1 left promiscuous mode [ 113.646731][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.657197][ T1240] device bridge_slave_0 left promiscuous mode [ 113.666662][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.682737][ T1240] device veth1_macvtap left promiscuous mode [ 113.688794][ T1240] device veth0_macvtap left promiscuous mode [ 113.696595][ T1240] device veth1_vlan left promiscuous mode [ 113.703622][ T1240] device veth0_vlan left promiscuous mode [ 113.898227][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 113.912100][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 113.924822][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.937947][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.990709][ T1240] bond0 (unregistering): Released all slaves [ 114.095865][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.220767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.228246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.240966][ T4803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.256727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.265849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.288753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.297837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.308767][ T4803] device veth0_vlan entered promiscuous mode [ 114.316478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.324870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.338573][ T4803] device veth1_vlan entered promiscuous mode [ 114.361083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.369799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.379520][ T4803] device veth0_macvtap entered promiscuous mode [ 114.388327][ T4803] device veth1_macvtap entered promiscuous mode [ 114.408669][ T4803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.420313][ T4803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.427639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.436565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.446688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.457221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.467754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.476864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.490359][ T4803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.499065][ T4803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.508537][ T4803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.517537][ T4803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.584663][ T4658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.597688][ T4658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.622027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/15 02:21:07 executed programs: 2 [ 114.642998][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.657828][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.666924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.801673][ T5050] loop0: detected capacity change from 0 to 8192 [ 114.821897][ T5050] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 114.839959][ T5050] REISERFS (device loop0): using ordered data mode [ 114.846862][ T5050] reiserfs: using flush barriers [ 114.861617][ T5050] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.911384][ T5050] REISERFS (device loop0): checking transaction log (loop0) [ 114.950848][ T5050] REISERFS (device loop0): Using r5 hash to sort names [ 114.980684][ T5050] ================================================================== [ 114.989008][ T5050] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7cb/0x1140 [ 114.996589][ T5050] Read of size 18446744073709551594 at addr ffff88807a568fa4 by task syz.0.17/5050 [ 115.005888][ T5050] [ 115.008234][ T5050] CPU: 0 PID: 5050 Comm: syz.0.17 Not tainted syzkaller #0 [ 115.015477][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.025564][ T5050] Call Trace: [ 115.028868][ T5050] [ 115.031826][ T5050] dump_stack_lvl+0x188/0x250 [ 115.036541][ T5050] ? show_regs_print_info+0x20/0x20 [ 115.041766][ T5050] ? load_image+0x410/0x410 [ 115.046297][ T5050] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 115.051792][ T5050] ? __lock_acquire+0x13dc/0x7b50 [ 115.056846][ T5050] print_address_description+0x60/0x2d0 [ 115.062420][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.067729][ T5050] kasan_report+0xdf/0x130 [ 115.072181][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.077493][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.082798][ T5050] kasan_check_range+0x235/0x290 [ 115.087767][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.093081][ T5050] memmove+0x25/0x60 [ 115.097001][ T5050] leaf_paste_entries+0x7cb/0x1140 [ 115.102164][ T5050] balance_leaf+0xc14c/0x10ec0 [ 115.106978][ T5050] ? mark_lock+0x94/0x320 [ 115.111353][ T5050] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.117469][ T5050] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 115.123389][ T5050] ? do_balance+0x930/0x930 [ 115.127948][ T5050] ? _raw_spin_unlock+0x40/0x40 [ 115.132825][ T5050] ? stack_trace_snprint+0xe0/0xe0 [ 115.137954][ T5050] ? __lock_acquire+0x13dc/0x7b50 [ 115.143003][ T5050] ? stack_depot_save+0x41b/0x460 [ 115.148062][ T5050] ? __kasan_kmalloc+0xc6/0xe0 [ 115.152854][ T5050] ? __kasan_kmalloc+0xaf/0xe0 [ 115.157657][ T5050] ? fix_nodes+0x63f2/0x8720 [ 115.162280][ T5050] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 115.168055][ T5050] ? reiserfs_add_entry+0x9bd/0xd80 [ 115.173292][ T5050] ? reiserfs_mkdir+0x6be/0x920 [ 115.178170][ T5050] ? reiserfs_xattr_init+0x33a/0x720 [ 115.183481][ T5050] ? reiserfs_fill_super+0x1cd9/0x2120 [ 115.188972][ T5050] ? mount_bdev+0x28a/0x3c0 [ 115.193520][ T5050] ? legacy_get_tree+0xe6/0x180 [ 115.198404][ T5050] ? vfs_get_tree+0x88/0x270 [ 115.203048][ T5050] ? do_new_mount+0x247/0xa40 [ 115.207748][ T5050] ? __se_sys_mount+0x2e3/0x3d0 [ 115.212624][ T5050] ? do_syscall_64+0x4c/0xa0 [ 115.217237][ T5050] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.223350][ T5050] ? __wake_up_bit+0x120/0x120 [ 115.228144][ T5050] ? get_parents+0x3d9/0xcd0 [ 115.232753][ T5050] ? get_neighbors+0x98d/0x1000 [ 115.237628][ T5050] ? reiserfs_prepare_for_journal+0x269/0x280 [ 115.243727][ T5050] ? fix_nodes+0x7f2d/0x8720 [ 115.248374][ T5050] do_balance+0x318/0x930 [ 115.252757][ T5050] ? get_right_neighbor_position+0x210/0x210 [ 115.258795][ T5050] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 115.264548][ T5050] reiserfs_paste_into_item+0x744/0x7f0 [ 115.270141][ T5050] ? reiserfs_cut_from_item+0x1ff0/0x1ff0 [ 115.275964][ T5050] ? reiserfs_get_parent+0x2f0/0x2f0 [ 115.281294][ T5050] ? inode2sd_v1+0x50a/0x990 [ 115.285921][ T5050] ? _find_first_zero_bit+0x61/0xf0 [ 115.291153][ T5050] reiserfs_add_entry+0x9bd/0xd80 [ 115.296226][ T5050] ? drop_new_inode+0x60/0x60 [ 115.300960][ T5050] ? journal_begin+0x1f1/0x350 [ 115.305749][ T5050] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 115.312200][ T5050] reiserfs_mkdir+0x6be/0x920 [ 115.316930][ T5050] ? reiserfs_symlink+0x7a0/0x7a0 [ 115.321986][ T5050] ? rwsem_write_trylock+0x135/0x1c0 [ 115.327324][ T5050] ? clear_nonspinnable+0x60/0x60 [ 115.332373][ T5050] ? lookup_one_len+0x19d/0x2d0 [ 115.337245][ T5050] ? lookup_one_common+0x460/0x460 [ 115.342389][ T5050] reiserfs_xattr_init+0x33a/0x720 [ 115.347533][ T5050] reiserfs_fill_super+0x1cd9/0x2120 [ 115.352859][ T5050] ? reiserfs_kill_sb+0x140/0x140 [ 115.357905][ T5050] ? snprintf+0xe5/0x140 [ 115.362179][ T5050] ? vscnprintf+0x80/0x80 [ 115.366535][ T5050] ? up_write+0x1b6/0x410 [ 115.370885][ T5050] ? set_blocksize+0x1f1/0x360 [ 115.375681][ T5050] ? sb_set_blocksize+0xa5/0xe0 [ 115.380555][ T5050] mount_bdev+0x28a/0x3c0 [ 115.384930][ T5050] ? reiserfs_kill_sb+0x140/0x140 [ 115.390007][ T5050] legacy_get_tree+0xe6/0x180 [ 115.394717][ T5050] ? remove_save_link+0x3e0/0x3e0 [ 115.399801][ T5050] vfs_get_tree+0x88/0x270 [ 115.404262][ T5050] do_new_mount+0x247/0xa40 [ 115.408800][ T5050] __se_sys_mount+0x2e3/0x3d0 [ 115.413520][ T5050] ? __x64_sys_mount+0xc0/0xc0 [ 115.418335][ T5050] ? lockdep_hardirqs_on+0x94/0x140 [ 115.423563][ T5050] ? __x64_sys_mount+0x1c/0xc0 [ 115.428370][ T5050] do_syscall_64+0x4c/0xa0 [ 115.432819][ T5050] ? clear_bhb_loop+0x30/0x80 [ 115.437531][ T5050] ? clear_bhb_loop+0x30/0x80 [ 115.442287][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.448247][ T5050] RIP: 0033:0x7feec5cb60ca [ 115.452699][ T5050] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.472333][ T5050] RSP: 002b:00007feec5314e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.482730][ T5050] RAX: ffffffffffffffda RBX: 00007feec5314ee0 RCX: 00007feec5cb60ca [ 115.490730][ T5050] RDX: 0000200000000300 RSI: 0000200000000380 RDI: 00007feec5314ea0 [ 115.499056][ T5050] RBP: 0000200000000300 R08: 00007feec5314ee0 R09: 000000000200c002 [ 115.507068][ T5050] R10: 000000000200c002 R11: 0000000000000246 R12: 0000200000000380 [ 115.515082][ T5050] R13: 00007feec5314ea0 R14: 00000000000010ff R15: 0000200000000340 [ 115.523108][ T5050] [ 115.526178][ T5050] [ 115.528518][ T5050] The buggy address belongs to the page: [ 115.534178][ T5050] page:ffffea0001e95a00 refcount:2 mapcount:0 mapping:ffff8880170fcf38 index:0x213 pfn:0x7a568 [ 115.544533][ T5050] memcg:ffff88801f480000 [ 115.548814][ T5050] aops:def_blk_aops ino:700000 [ 115.553607][ T5050] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 115.563373][ T5050] raw: 00fff00000002032 ffffea0001b8bf48 ffff88801eebd030 ffff8880170fcf38 [ 115.563565][ T1326] Bluetooth: hci0: command 0x040f tx timeout [ 115.571987][ T5050] raw: 0000000000000213 ffff8880170a7828 00000002ffffffff ffff88801f480000 [ 115.572034][ T5050] page dumped because: kasan: bad access detected [ 115.572052][ T5050] page_owner tracks the page as allocated [ 115.572059][ T5050] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5050, ts 114950048099, free_ts 114939211776 [ 115.572088][ T5050] get_page_from_freelist+0x24f6/0x2670 [ 115.572114][ T5050] __alloc_pages+0x1ee/0x480 [ 115.572133][ T5050] __page_cache_alloc+0xce/0x440 [ 115.572149][ T5050] pagecache_get_page+0x9b8/0xf20 [ 115.572166][ T5050] __getblk_gfp+0x240/0xb20 [ 115.640818][ T5050] search_by_key+0x474/0x4400 [ 115.645527][ T5050] reiserfs_read_locked_inode+0x195/0x24c0 [ 115.651355][ T5050] reiserfs_fill_super+0x1126/0x2120 [ 115.656673][ T5050] mount_bdev+0x28a/0x3c0 [ 115.661028][ T5050] legacy_get_tree+0xe6/0x180 [ 115.665736][ T5050] vfs_get_tree+0x88/0x270 [ 115.670184][ T5050] do_new_mount+0x247/0xa40 [ 115.674711][ T5050] __se_sys_mount+0x2e3/0x3d0 [ 115.679412][ T5050] do_syscall_64+0x4c/0xa0 [ 115.683845][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.689760][ T5050] page last free stack trace: [ 115.694456][ T5050] free_unref_page_prepare+0x637/0x6c0 [ 115.699988][ T5050] free_unref_page_list+0x119/0x830 [ 115.705214][ T5050] release_pages+0x185f/0x1bd0 [ 115.710004][ T5050] tlb_finish_mmu+0x1b4/0x370 [ 115.714880][ T5050] unmap_region+0x344/0x3b0 [ 115.719424][ T5050] __do_munmap+0xa29/0xe10 [ 115.723888][ T5050] __vm_munmap+0x13f/0x240 [ 115.728345][ T5050] __x64_sys_munmap+0x67/0x70 [ 115.733051][ T5050] do_syscall_64+0x4c/0xa0 [ 115.737500][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.743424][ T5050] [ 115.745789][ T5050] Memory state around the buggy address: [ 115.751453][ T5050] ffff88807a568e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.759536][ T5050] ffff88807a568f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.767618][ T5050] >ffff88807a568f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.775704][ T5050] ^ [ 115.780849][ T5050] ffff88807a569000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.788942][ T5050] ffff88807a569080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.797161][ T5050] ================================================================== [ 115.805721][ T5050] Disabling lock debugging due to kernel taint [ 115.830480][ T5050] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.837747][ T5050] CPU: 0 PID: 5050 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 115.846359][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.856442][ T5050] Call Trace: [ 115.859761][ T5050] [ 115.862715][ T5050] dump_stack_lvl+0x188/0x250 [ 115.867432][ T5050] ? show_regs_print_info+0x20/0x20 [ 115.872664][ T5050] ? load_image+0x410/0x410 [ 115.877201][ T5050] panic+0x2f8/0x850 [ 115.881133][ T5050] ? bpf_jit_dump+0xd0/0xd0 [ 115.885669][ T5050] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 115.891675][ T5050] ? _raw_spin_unlock+0x40/0x40 [ 115.896547][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.901855][ T5050] check_panic_on_warn+0x80/0xa0 [ 115.906814][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.912126][ T5050] end_report+0x6d/0xf0 [ 115.916324][ T5050] kasan_report+0x102/0x130 [ 115.920854][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.926170][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.931484][ T5050] kasan_check_range+0x235/0x290 [ 115.936451][ T5050] ? leaf_paste_entries+0x7cb/0x1140 [ 115.941769][ T5050] memmove+0x25/0x60 [ 115.945692][ T5050] leaf_paste_entries+0x7cb/0x1140 [ 115.950834][ T5050] balance_leaf+0xc14c/0x10ec0 [ 115.955634][ T5050] ? mark_lock+0x94/0x320 [ 115.959991][ T5050] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.966011][ T5050] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 115.971931][ T5050] ? do_balance+0x930/0x930 [ 115.976465][ T5050] ? _raw_spin_unlock+0x40/0x40 [ 115.981339][ T5050] ? stack_trace_snprint+0xe0/0xe0 [ 115.986477][ T5050] ? __lock_acquire+0x13dc/0x7b50 [ 115.991525][ T5050] ? stack_depot_save+0x41b/0x460 [ 115.996576][ T5050] ? __kasan_kmalloc+0xc6/0xe0 [ 116.001361][ T5050] ? __kasan_kmalloc+0xaf/0xe0 [ 116.006154][ T5050] ? fix_nodes+0x63f2/0x8720 [ 116.010760][ T5050] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 116.016507][ T5050] ? reiserfs_add_entry+0x9bd/0xd80 [ 116.021720][ T5050] ? reiserfs_mkdir+0x6be/0x920 [ 116.026589][ T5050] ? reiserfs_xattr_init+0x33a/0x720 [ 116.031895][ T5050] ? reiserfs_fill_super+0x1cd9/0x2120 [ 116.037373][ T5050] ? mount_bdev+0x28a/0x3c0 [ 116.041900][ T5050] ? legacy_get_tree+0xe6/0x180 [ 116.046780][ T5050] ? vfs_get_tree+0x88/0x270 [ 116.051389][ T5050] ? do_new_mount+0x247/0xa40 [ 116.056091][ T5050] ? __se_sys_mount+0x2e3/0x3d0 [ 116.060968][ T5050] ? do_syscall_64+0x4c/0xa0 [ 116.065577][ T5050] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.071674][ T5050] ? __wake_up_bit+0x120/0x120 [ 116.076468][ T5050] ? get_parents+0x3d9/0xcd0 [ 116.081082][ T5050] ? get_neighbors+0x98d/0x1000 [ 116.086055][ T5050] ? reiserfs_prepare_for_journal+0x269/0x280 [ 116.092149][ T5050] ? fix_nodes+0x7f2d/0x8720 [ 116.096776][ T5050] do_balance+0x318/0x930 [ 116.101137][ T5050] ? get_right_neighbor_position+0x210/0x210 [ 116.107154][ T5050] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 116.112924][ T5050] reiserfs_paste_into_item+0x744/0x7f0 [ 116.118500][ T5050] ? reiserfs_cut_from_item+0x1ff0/0x1ff0 [ 116.124275][ T5050] ? reiserfs_get_parent+0x2f0/0x2f0 [ 116.129587][ T5050] ? inode2sd_v1+0x50a/0x990 [ 116.134198][ T5050] ? _find_first_zero_bit+0x61/0xf0 [ 116.139415][ T5050] reiserfs_add_entry+0x9bd/0xd80 [ 116.144469][ T5050] ? drop_new_inode+0x60/0x60 [ 116.149180][ T5050] ? journal_begin+0x1f1/0x350 [ 116.153962][ T5050] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 116.160399][ T5050] reiserfs_mkdir+0x6be/0x920 [ 116.165126][ T5050] ? reiserfs_symlink+0x7a0/0x7a0 [ 116.170177][ T5050] ? rwsem_write_trylock+0x135/0x1c0 [ 116.175487][ T5050] ? clear_nonspinnable+0x60/0x60 [ 116.180531][ T5050] ? lookup_one_len+0x19d/0x2d0 [ 116.185427][ T5050] ? lookup_one_common+0x460/0x460 [ 116.190579][ T5050] reiserfs_xattr_init+0x33a/0x720 [ 116.195719][ T5050] reiserfs_fill_super+0x1cd9/0x2120 [ 116.201038][ T5050] ? reiserfs_kill_sb+0x140/0x140 [ 116.206089][ T5050] ? snprintf+0xe5/0x140 [ 116.210364][ T5050] ? vscnprintf+0x80/0x80 [ 116.214716][ T5050] ? up_write+0x1b6/0x410 [ 116.219069][ T5050] ? set_blocksize+0x1f1/0x360 [ 116.223860][ T5050] ? sb_set_blocksize+0xa5/0xe0 [ 116.228734][ T5050] mount_bdev+0x28a/0x3c0 [ 116.233089][ T5050] ? reiserfs_kill_sb+0x140/0x140 [ 116.238139][ T5050] legacy_get_tree+0xe6/0x180 [ 116.242833][ T5050] ? remove_save_link+0x3e0/0x3e0 [ 116.247877][ T5050] vfs_get_tree+0x88/0x270 [ 116.252314][ T5050] do_new_mount+0x247/0xa40 [ 116.256865][ T5050] __se_sys_mount+0x2e3/0x3d0 [ 116.261570][ T5050] ? __x64_sys_mount+0xc0/0xc0 [ 116.266362][ T5050] ? lockdep_hardirqs_on+0x94/0x140 [ 116.271583][ T5050] ? __x64_sys_mount+0x1c/0xc0 [ 116.276379][ T5050] do_syscall_64+0x4c/0xa0 [ 116.280813][ T5050] ? clear_bhb_loop+0x30/0x80 [ 116.285510][ T5050] ? clear_bhb_loop+0x30/0x80 [ 116.290220][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.296131][ T5050] RIP: 0033:0x7feec5cb60ca [ 116.300580][ T5050] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.320231][ T5050] RSP: 002b:00007feec5314e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.328689][ T5050] RAX: ffffffffffffffda RBX: 00007feec5314ee0 RCX: 00007feec5cb60ca [ 116.336675][ T5050] RDX: 0000200000000300 RSI: 0000200000000380 RDI: 00007feec5314ea0 [ 116.344746][ T5050] RBP: 0000200000000300 R08: 00007feec5314ee0 R09: 000000000200c002 [ 116.352728][ T5050] R10: 000000000200c002 R11: 0000000000000246 R12: 0000200000000380 [ 116.360707][ T5050] R13: 00007feec5314ea0 R14: 00000000000010ff R15: 0000200000000340 [ 116.368695][ T5050] [ 116.372053][ T5050] Kernel Offset: disabled [ 116.376394][ T5050] Rebooting in 86400 seconds..