Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. 1970/01/01 00:00:56 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:56 ignoring optional flag "type"="gce" 1970/01/01 00:00:56 parsed 1 programs 1970/01/01 00:00:56 executed programs: 0 [ 56.713965][ T4293] chnl_net:caif_netlink_parms(): no params data found [ 56.744470][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.746485][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.749010][ T4293] device bridge_slave_0 entered promiscuous mode [ 56.752539][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.754475][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.756933][ T4293] device bridge_slave_1 entered promiscuous mode [ 56.771257][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.775450][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.788922][ T4293] team0: Port device team_slave_0 added [ 56.792071][ T4293] team0: Port device team_slave_1 added [ 56.804340][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.806226][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.813360][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.817434][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.819255][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.826417][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.881591][ T4293] device hsr_slave_0 entered promiscuous mode [ 56.940093][ T4293] device hsr_slave_1 entered promiscuous mode [ 57.596922][ T4293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.621540][ T4293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.662862][ T4293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.711766][ T4293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.803264][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.811981][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.814478][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.821479][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.826025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.828716][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.832331][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.834206][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.846764][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.849442][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.852915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.855524][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.857448][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.863549][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.876003][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.878852][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.884444][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.887296][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.891918][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.894616][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.897171][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.902826][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.906184][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.913436][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.916061][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.919018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.989286][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.992864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.995024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.007427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.011333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.025269][ T4293] device veth0_vlan entered promiscuous mode [ 58.030514][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.033193][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.036431][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.038911][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.045386][ T4293] device veth1_vlan entered promiscuous mode [ 58.061700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.064310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.066818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.069569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.074241][ T4293] device veth0_macvtap entered promiscuous mode [ 58.078274][ T4293] device veth1_macvtap entered promiscuous mode [ 58.093593][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.098418][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.101645][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.104275][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.106874][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.112470][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.115050][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.117808][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.128395][ T4293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.132738][ T4293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.135031][ T4293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.137316][ T4293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.172139][ T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.174325][ T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.176844][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.194932][ T493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.197204][ T493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.200983][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.289340][ T4400] loop0: detected capacity change from 0 to 8192 [ 58.296717][ T4400] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 58.299246][ T4400] REISERFS (device loop0): using ordered data mode [ 58.301814][ T4400] reiserfs: using flush barriers [ 58.304539][ T4400] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.309218][ T4400] REISERFS (device loop0): checking transaction log (loop0) [ 58.316275][ T4400] REISERFS (device loop0): Using r5 hash to sort names [ 58.318266][ T4400] REISERFS (device loop0): using 3.5.x disk format [ 58.321673][ T4400] ================================================================== [ 58.323887][ T4400] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x504/0x944 [ 58.325824][ T4400] Read of size 18446744073709551584 at addr ffff0000e1567fa4 by task syz-executor.0/4400 [ 58.328339][ T4400] [ 58.328938][ T4400] CPU: 1 PID: 4400 Comm: syz-executor.0 Not tainted 5.15.167-syzkaller #0 [ 58.331179][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.333876][ T4400] Call trace: [ 58.334760][ T4400] dump_backtrace+0x0/0x530 [ 58.335806][ T4400] show_stack+0x2c/0x3c [ 58.336786][ T4400] dump_stack_lvl+0x108/0x170 [ 58.338139][ T4400] print_address_description+0x7c/0x3f0 [ 58.339660][ T4400] kasan_report+0x174/0x1e4 [ 58.340833][ T4400] kasan_check_range+0x274/0x2b4 [ 58.342053][ T4400] memmove+0x90/0xe8 [ 58.343023][ T4400] leaf_paste_entries+0x504/0x944 [ 58.344357][ T4400] balance_leaf+0xa0d4/0xe860 [ 58.345597][ T4400] do_balance+0x27c/0x790 [ 58.346851][ T4400] reiserfs_paste_into_item+0x630/0x744 [ 58.348359][ T4400] reiserfs_add_entry+0x8c0/0xc8c [ 58.349730][ T4400] reiserfs_mkdir+0x588/0x77c [ 58.351007][ T4400] reiserfs_xattr_init+0x2b0/0x6dc [ 58.352422][ T4400] reiserfs_fill_super+0x1b28/0x1e8c [ 58.353849][ T4400] mount_bdev+0x274/0x370 [ 58.354933][ T4400] get_super_block+0x44/0x58 [ 58.356185][ T4400] legacy_get_tree+0xd4/0x16c [ 58.357434][ T4400] vfs_get_tree+0x90/0x274 [ 58.358597][ T4400] do_new_mount+0x278/0x8fc [ 58.359783][ T4400] path_mount+0x594/0x101c [ 58.361014][ T4400] __arm64_sys_mount+0x510/0x5e0 [ 58.362248][ T4400] invoke_syscall+0x98/0x2b8 [ 58.363498][ T4400] el0_svc_common+0x138/0x258 [ 58.364766][ T4400] do_el0_svc+0x58/0x14c [ 58.365903][ T4400] el0_svc+0x7c/0x1f0 [ 58.366980][ T4400] el0t_64_sync_handler+0x84/0xe4 [ 58.368336][ T4400] el0t_64_sync+0x1a0/0x1a4 [ 58.369478][ T4400] [ 58.370035][ T4400] The buggy address belongs to the page: [ 58.371446][ T4400] page:000000006564e54b refcount:3 mapcount:0 mapping:0000000071f7f391 index:0x213 pfn:0x121567 [ 58.374239][ T4400] memcg:ffff0000cdd94000 [ 58.375409][ T4400] aops:def_blk_aops ino:700000 [ 58.376680][ T4400] flags: 0x5ffc00000002022(referenced|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 58.379111][ T4400] raw: 05ffc00000002022 0000000000000000 dead000000000122 ffff0000c0544f48 [ 58.381428][ T4400] raw: 0000000000000213 ffff0000dd549828 00000003ffffffff ffff0000cdd94000 [ 58.383688][ T4400] page dumped because: kasan: bad access detected [ 58.385284][ T4400] [ 58.385890][ T4400] Memory state around the buggy address: [ 58.387434][ T4400] ffff0000e1567e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.389503][ T4400] ffff0000e1567f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.391543][ T4400] >ffff0000e1567f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.393555][ T4400] ^ [ 58.394858][ T4400] ffff0000e1568000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.396998][ T4400] ffff0000e1568080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.399142][ T4400] ================================================================== [ 58.401267][ T4400] Disabling lock debugging due to kernel taint [ 58.409467][ T4400] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 58.415181][ T4400] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 58.418081][ T4400] REISERFS (device loop0): Remounting filesystem read-only [ 58.421676][ T4400] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 58.425096][ T4400] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 58.428725][ T4400] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 16872, item_location 2, free_space(entry_count) 21376 [ 58.434392][ T4400] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 58.437219][ T4400] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 58.612456][ T4432] loop0: detected capacity change from 0 to 8192 [ 58.615371][ T4432] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 58.617805][ T4432] REISERFS (device loop0): using ordered data mode [ 58.619478][ T4432] reiserfs: using flush barriers [ 58.622298][ T4432] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 58.626637][ T4432] REISERFS (device loop0): checking transaction log (loop0) [ 58.629259][ T4432] REISERFS (device loop0): Using r5 hash to sort names [ 58.631263][ T4432] REISERFS (device loop0): using 3.5.x disk format [ 58.634902][ T4435] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 58.637322][ T4435] CPU: 1 PID: 4435 Comm: dhcpcd-run-hook Tainted: G B 5.15.167-syzkaller #0 [ 58.639339][ T4432] Unable to handle kernel write to read-only memory at virtual address ffff0000dcf77ff0 [ 58.639922][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.639935][ T4435] Call trace: [ 58.639938][ T4435] dump_backtrace+0x0/0x530 [ 58.639954][ T4435] show_stack+0x2c/0x3c [ 58.639962][ T4435] dump_stack_lvl+0x108/0x170 [ 58.639972][ T4435] dump_stack+0x1c/0x58 [ 58.639980][ T4435] panic+0x304/0x8bc [ 58.639991][ T4435] __schedule+0x144c/0x1e48 [ 58.642499][ T4432] Mem abort info: [ 58.645178][ T4435] 0xdb00b962bb208800 [ 58.646007][ T4432] ESR = 0x000000009600004f [ 58.647251][ T4435] SMP: stopping secondary CPUs [ 58.648359][ T4432] EC = 0x25: DABT (current EL), IL = 32 bits [ 58.650678][ T4435] Kernel Offset: disabled [ 58.650685][ T4435] CPU features: 0x8,000081c1,21302e40 [ 58.650693][ T4435] Memory Limit: none [ 59.035950][ T4435] Rebooting in 86400 seconds..