Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. 2026/03/20 22:48:16 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 105.577722][ T4602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 107.871720][ T4636] chnl_net:caif_netlink_parms(): no params data found [ 107.957036][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.964747][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.975067][ T4636] device bridge_slave_0 entered promiscuous mode [ 107.984455][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.994527][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.006798][ T4636] device bridge_slave_1 entered promiscuous mode [ 108.051809][ T4636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.073133][ T4636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.113501][ T4636] team0: Port device team_slave_0 added [ 108.123624][ T4636] team0: Port device team_slave_1 added [ 108.155139][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.163740][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.198279][ T4636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.213942][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.222639][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.257408][ T4636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.303528][ T4636] device hsr_slave_0 entered promiscuous mode [ 108.313305][ T4636] device hsr_slave_1 entered promiscuous mode [ 109.119265][ T4636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.132622][ T4636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.143838][ T4636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.156317][ T4636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.274865][ T4636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.308717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.321248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.337595][ T4636] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.374140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.407732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.467476][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.475530][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.516957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.531449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.568586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.579330][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.588927][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.601983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.622287][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.636329][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.648977][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.663149][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.677021][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.688963][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.709277][ T4636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.725619][ T4636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.755659][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.766838][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.778602][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.790724][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.824729][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.975839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.992939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.022273][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.046512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.058759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.095318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.105437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.132290][ T4636] device veth0_vlan entered promiscuous mode [ 110.139135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.148837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.164383][ T4636] device veth1_vlan entered promiscuous mode [ 110.204937][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.215913][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.226044][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.236068][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.248917][ T4636] device veth0_macvtap entered promiscuous mode [ 110.272434][ T4636] device veth1_macvtap entered promiscuous mode [ 110.295435][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.305894][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.318150][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.327972][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.339275][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.356716][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.365468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.377302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.393380][ T4636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.403562][ T4636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.414277][ T4636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.424849][ T4636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.077821][ T420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.099351][ T420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.126435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.148714][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.159413][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.167897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.088764][ T3019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/20 22:48:28 executed programs: 0 [ 113.653238][ T4832] chnl_net:caif_netlink_parms(): no params data found [ 113.723447][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.732977][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.743644][ T4832] device bridge_slave_0 entered promiscuous mode [ 113.755048][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.765568][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.775828][ T4832] device bridge_slave_1 entered promiscuous mode [ 113.808624][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.824193][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.857284][ T4832] team0: Port device team_slave_0 added [ 113.868941][ T4832] team0: Port device team_slave_1 added [ 113.895589][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.905959][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.936779][ T4832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.953328][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.960404][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.990464][ T4832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.034640][ T4832] device hsr_slave_0 entered promiscuous mode [ 114.043605][ T4832] device hsr_slave_1 entered promiscuous mode [ 114.052222][ T4832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.061602][ T4832] Cannot create hsr debugfs directory [ 115.579757][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 115.593956][ T3019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.658548][ T3019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.717944][ T3019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.527960][ T4832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.578561][ T4832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.588923][ T4832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.600846][ T4832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.713143][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.765681][ T4832] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.776717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.786734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.840480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.851563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.863051][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.870486][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.879646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.888512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.897872][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.905855][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.913755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.938744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.947657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.956927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.966996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.975690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.985237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.994730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.026704][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.037295][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.047064][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.056443][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.069331][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.223850][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.232019][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.247331][ T4832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.283807][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.293671][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.322311][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.331586][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.343258][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.351934][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.366403][ T4832] device veth0_vlan entered promiscuous mode [ 117.386960][ T4832] device veth1_vlan entered promiscuous mode [ 117.406655][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.415684][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.424639][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.434322][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.446040][ T4832] device veth0_macvtap entered promiscuous mode [ 117.462386][ T4832] device veth1_macvtap entered promiscuous mode [ 117.474581][ T3019] device hsr_slave_0 left promiscuous mode [ 117.482267][ T3019] device hsr_slave_1 left promiscuous mode [ 117.489077][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.497056][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.505348][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.513938][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.522491][ T3019] device bridge_slave_1 left promiscuous mode [ 117.529295][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.538642][ T3019] device bridge_slave_0 left promiscuous mode [ 117.545997][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.556991][ T3019] device veth1_macvtap left promiscuous mode [ 117.563763][ T3019] device veth0_macvtap left promiscuous mode [ 117.569990][ T3019] device veth1_vlan left promiscuous mode [ 117.576007][ T3019] device veth0_vlan left promiscuous mode [ 117.659949][ T4997] Bluetooth: hci0: command 0x041b tx timeout [ 117.723282][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 117.736852][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 117.756434][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.770457][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.823637][ T3019] bond0 (unregistering): Released all slaves [ 117.874209][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.883496][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.895756][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.907226][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.915510][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.924689][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.934268][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.943642][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.957779][ T4832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.967851][ T4832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.976640][ T4832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.986499][ T4832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.050570][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.058863][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.067660][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.106858][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.116082][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.124342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.228436][ T5043] loop0: detected capacity change from 0 to 8192 [ 118.290013][ T5043] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 118.307626][ T5043] REISERFS (device loop0): using ordered data mode [ 118.315220][ T5043] reiserfs: using flush barriers [ 118.324965][ T5043] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.344835][ T5043] REISERFS (device loop0): checking transaction log (loop0) [ 118.360717][ T5043] REISERFS (device loop0): Using tea hash to sort names [ 118.369144][ T5043] REISERFS (device loop0): using 3.5.x disk format [ 118.382116][ T5043] ================================================================== [ 118.391711][ T5043] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x794/0x1130 [ 118.399570][ T5043] Read of size 18446744073709551592 at addr ffff888060746fa4 by task syz.0.17/5043 [ 118.409334][ T5043] [ 118.411868][ T5043] CPU: 1 PID: 5043 Comm: syz.0.17 Not tainted syzkaller #0 [ 118.420697][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.433282][ T5043] Call Trace: [ 118.436866][ T5043] [ 118.439995][ T5043] dump_stack_lvl+0x188/0x250 [ 118.444983][ T5043] ? show_regs_print_info+0x20/0x20 [ 118.451253][ T5043] ? load_image+0x400/0x400 [ 118.456455][ T5043] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 118.462706][ T5043] ? __lock_acquire+0x13bc/0x7d10 [ 118.468037][ T5043] ? verify_lock_unused+0x140/0x140 [ 118.473800][ T5043] print_address_description+0x60/0x2d0 [ 118.480028][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 118.487009][ T5043] kasan_report+0xdf/0x130 [ 118.492652][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 118.498869][ T5043] ? journal_mark_dirty+0x21d/0xdf0 [ 118.505336][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 118.511639][ T5043] kasan_check_range+0x235/0x290 [ 118.518011][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 118.524428][ T5043] memmove+0x25/0x60 [ 118.529753][ T5043] leaf_paste_entries+0x794/0x1130 [ 118.535862][ T5043] balance_leaf+0xb2e5/0x10ec0 [ 118.541827][ T5043] ? mark_lock+0x94/0x320 [ 118.546498][ T5043] ? lock_chain_count+0x20/0x20 [ 118.551762][ T5043] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 118.558503][ T5043] ? do_balance+0x930/0x930 [ 118.563811][ T5043] ? _raw_spin_unlock+0x40/0x40 [ 118.569211][ T5043] ? stack_trace_snprint+0xf0/0xf0 [ 118.574922][ T5043] ? stack_depot_save+0x404/0x440 [ 118.580969][ T5043] ? __kasan_kmalloc+0xcc/0xf0 [ 118.586193][ T5043] ? __kasan_kmalloc+0xb5/0xf0 [ 118.591425][ T5043] ? fix_nodes+0x60a2/0x8340 [ 118.596602][ T5043] ? reiserfs_paste_into_item+0x60b/0x810 [ 118.602625][ T5043] ? reiserfs_add_entry+0xa42/0xe10 [ 118.608836][ T5043] ? reiserfs_mkdir+0x6bc/0x920 [ 118.614224][ T5043] ? reiserfs_xattr_init+0x331/0x720 [ 118.620356][ T5043] ? reiserfs_fill_super+0x1fe6/0x2440 [ 118.626515][ T5043] ? mount_bdev+0x287/0x3c0 [ 118.631667][ T5043] ? legacy_get_tree+0xe6/0x180 [ 118.637468][ T5043] ? vfs_get_tree+0x88/0x270 [ 118.642453][ T5043] ? do_new_mount+0x24a/0xa40 [ 118.647373][ T5043] ? __se_sys_mount+0x2e3/0x3d0 [ 118.652620][ T5043] ? do_syscall_64+0x4c/0xa0 [ 118.657326][ T5043] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.663894][ T5043] ? __wake_up_bit+0x120/0x120 [ 118.669055][ T5043] ? get_parents+0x400/0xd20 [ 118.673864][ T5043] ? get_neighbors+0x9ba/0x1030 [ 118.679115][ T5043] ? reiserfs_prepare_for_journal+0x269/0x280 [ 118.685477][ T5043] ? fix_nodes+0x7bc3/0x8340 [ 118.690406][ T5043] do_balance+0x318/0x930 [ 118.696631][ T5043] ? get_right_neighbor_position+0x210/0x210 [ 118.704164][ T5043] ? reiserfs_paste_into_item+0x3b0/0x810 [ 118.710952][ T5043] reiserfs_paste_into_item+0x6dd/0x810 [ 118.718804][ T5043] ? reiserfs_cut_from_item+0x1fa0/0x1fa0 [ 118.726350][ T5043] ? reiserfs_get_parent+0x2f0/0x2f0 [ 118.732862][ T5043] ? inode_get_bytes+0x73/0xa0 [ 118.739020][ T5043] ? _find_first_zero_bit+0x60/0xf0 [ 118.745037][ T5043] reiserfs_add_entry+0xa42/0xe10 [ 118.750308][ T5043] ? drop_new_inode+0x60/0x60 [ 118.755768][ T5043] ? journal_begin+0x1f1/0x350 [ 118.761119][ T5043] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 118.767973][ T5043] reiserfs_mkdir+0x6bc/0x920 [ 118.773133][ T5043] ? reiserfs_symlink+0x790/0x790 [ 118.778769][ T5043] ? rwsem_write_trylock+0x135/0x1c0 [ 118.785009][ T5043] ? lookup_one_len+0x19d/0x2d0 [ 118.791236][ T5043] ? lookup_one_common+0x460/0x460 [ 118.797144][ T5043] reiserfs_xattr_init+0x331/0x720 [ 118.803519][ T5043] reiserfs_fill_super+0x1fe6/0x2440 [ 118.809747][ T5043] ? reiserfs_kill_sb+0x140/0x140 [ 118.815183][ T5043] ? snprintf+0xe5/0x140 [ 118.819819][ T5043] ? vscnprintf+0x80/0x80 [ 118.824563][ T5043] ? set_blocksize+0x1f3/0x370 [ 118.830209][ T5043] ? sb_set_blocksize+0xa5/0xe0 [ 118.835668][ T5043] mount_bdev+0x287/0x3c0 [ 118.840478][ T5043] ? reiserfs_kill_sb+0x140/0x140 [ 118.845901][ T5043] legacy_get_tree+0xe6/0x180 [ 118.851373][ T5043] ? remove_save_link+0x3e0/0x3e0 [ 118.857181][ T5043] vfs_get_tree+0x88/0x270 [ 118.862161][ T5043] do_new_mount+0x24a/0xa40 [ 118.867055][ T5043] __se_sys_mount+0x2e3/0x3d0 [ 118.871958][ T5043] ? __x64_sys_mount+0xc0/0xc0 [ 118.876839][ T5043] ? lockdep_hardirqs_on+0x94/0x140 [ 118.882250][ T5043] ? __x64_sys_mount+0x1c/0xc0 [ 118.887636][ T5043] do_syscall_64+0x4c/0xa0 [ 118.892568][ T5043] ? clear_bhb_loop+0x30/0x80 [ 118.897987][ T5043] ? clear_bhb_loop+0x30/0x80 [ 118.902898][ T5043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.909425][ T5043] RIP: 0033:0x7f4e60e1ea0a [ 118.914585][ T5043] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.937648][ T5043] RSP: 002b:00007f4e6047ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.946731][ T5043] RAX: ffffffffffffffda RBX: 00007f4e6047eee0 RCX: 00007f4e60e1ea0a [ 118.955572][ T5043] RDX: 00002000000002c0 RSI: 00002000000031c0 RDI: 00007f4e6047eea0 [ 118.964317][ T5043] RBP: 00002000000002c0 R08: 00007f4e6047eee0 R09: 0000000000000800 [ 118.973386][ T5043] R10: 0000000000000800 R11: 0000000000000246 R12: 00002000000031c0 [ 118.982448][ T5043] R13: 00007f4e6047eea0 R14: 000000000000111e R15: 0000200000000300 [ 118.991715][ T5043] [ 118.994976][ T5043] [ 118.997749][ T5043] The buggy address belongs to the page: [ 119.004194][ T5043] page:ffffea000181d180 refcount:3 mapcount:0 mapping:ffff88814090cf30 index:0x213 pfn:0x60746 [ 119.015450][ T5043] memcg:ffff8880248a8000 [ 119.020881][ T5043] aops:def_blk_aops ino:700000 [ 119.026476][ T5043] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 119.037448][ T5043] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff88814090cf30 [ 119.047884][ T5043] raw: 0000000000000213 ffff888072ad7cb0 00000003ffffffff ffff8880248a8000 [ 119.057270][ T5043] page dumped because: kasan: bad access detected [ 119.064498][ T5043] page_owner tracks the page as allocated [ 119.071121][ T5043] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5043, ts 118360073579, free_ts 113467513318 [ 119.090227][ T5043] get_page_from_freelist+0x1bbd/0x1ca0 [ 119.096465][ T5043] __alloc_pages+0x1ee/0x480 [ 119.101556][ T5043] __page_cache_alloc+0xce/0x440 [ 119.107049][ T5043] pagecache_get_page+0x9b6/0xf10 [ 119.114224][ T5043] __getblk_gfp+0x247/0xb60 [ 119.119187][ T5043] search_by_key+0x46c/0x4470 [ 119.124357][ T5043] reiserfs_read_locked_inode+0x195/0x26b0 [ 119.130526][ T5043] reiserfs_fill_super+0x12af/0x2440 [ 119.135960][ T5043] mount_bdev+0x287/0x3c0 [ 119.140894][ T5043] legacy_get_tree+0xe6/0x180 [ 119.145623][ T5043] vfs_get_tree+0x88/0x270 [ 119.150174][ T5043] do_new_mount+0x24a/0xa40 [ 119.154801][ T5043] __se_sys_mount+0x2e3/0x3d0 [ 119.159712][ T5043] do_syscall_64+0x4c/0xa0 [ 119.164335][ T5043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.170435][ T5043] page last free stack trace: [ 119.175312][ T5043] free_unref_page_prepare+0x637/0x6c0 [ 119.180795][ T5043] free_unref_page_list+0x119/0x820 [ 119.186541][ T5043] release_pages+0x186c/0x1be0 [ 119.191513][ T5043] tlb_finish_mmu+0x176/0x300 [ 119.196241][ T5043] exit_mmap+0x3d0/0x640 [ 119.200612][ T5043] __mmput+0x115/0x3b0 [ 119.204731][ T5043] exit_mm+0x588/0x6e0 [ 119.208996][ T5043] do_exit+0x5a9/0x20c0 [ 119.213285][ T5043] do_group_exit+0x12e/0x300 [ 119.218203][ T5043] get_signal+0x6ca/0x12c0 [ 119.223284][ T5043] arch_do_signal_or_restart+0xe7/0x12c0 [ 119.229411][ T5043] exit_to_user_mode_loop+0x9e/0x130 [ 119.236286][ T5043] exit_to_user_mode_prepare+0xee/0x180 [ 119.242561][ T5043] syscall_exit_to_user_mode+0x16/0x40 [ 119.249807][ T5043] do_syscall_64+0x58/0xa0 [ 119.255120][ T5043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.261551][ T5043] [ 119.264265][ T5043] Memory state around the buggy address: [ 119.270397][ T5043] ffff888060746e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.279408][ T5043] ffff888060746f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.289084][ T5043] >ffff888060746f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.298856][ T5043] ^ [ 119.304834][ T5043] ffff888060747000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.314182][ T5043] ffff888060747080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.323279][ T5043] ================================================================== [ 119.332075][ T5043] Disabling lock debugging due to kernel taint [ 119.351644][ T5043] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.359703][ T5043] CPU: 0 PID: 5043 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 119.369015][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.379519][ T5043] Call Trace: [ 119.383208][ T5043] [ 119.386155][ T5043] dump_stack_lvl+0x188/0x250 [ 119.390880][ T5043] ? show_regs_print_info+0x20/0x20 [ 119.396556][ T5043] ? load_image+0x400/0x400 [ 119.401597][ T5043] panic+0x2e5/0x810 [ 119.405676][ T5043] ? bpf_jit_dump+0xd0/0xd0 [ 119.410400][ T5043] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 119.416468][ T5043] ? _raw_spin_unlock+0x40/0x40 [ 119.421548][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 119.427131][ T5043] check_panic_on_warn+0x80/0xa0 [ 119.437168][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 119.443246][ T5043] end_report+0x6d/0xf0 [ 119.448437][ T5043] kasan_report+0x102/0x130 [ 119.453761][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 119.460424][ T5043] ? journal_mark_dirty+0x21d/0xdf0 [ 119.466569][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 119.472842][ T5043] kasan_check_range+0x235/0x290 [ 119.477985][ T5043] ? leaf_paste_entries+0x794/0x1130 [ 119.484392][ T5043] memmove+0x25/0x60 [ 119.488685][ T5043] leaf_paste_entries+0x794/0x1130 [ 119.494825][ T5043] balance_leaf+0xb2e5/0x10ec0 [ 119.500389][ T5043] ? mark_lock+0x94/0x320 [ 119.505524][ T5043] ? lock_chain_count+0x20/0x20 [ 119.511258][ T5043] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 119.518765][ T5043] ? do_balance+0x930/0x930 [ 119.524203][ T5043] ? _raw_spin_unlock+0x40/0x40 [ 119.530992][ T5043] ? stack_trace_snprint+0xf0/0xf0 [ 119.537072][ T5043] ? stack_depot_save+0x404/0x440 [ 119.543040][ T5043] ? __kasan_kmalloc+0xcc/0xf0 [ 119.548802][ T5043] ? __kasan_kmalloc+0xb5/0xf0 [ 119.554399][ T5043] ? fix_nodes+0x60a2/0x8340 [ 119.559473][ T5043] ? reiserfs_paste_into_item+0x60b/0x810 [ 119.565401][ T5043] ? reiserfs_add_entry+0xa42/0xe10 [ 119.571126][ T5043] ? reiserfs_mkdir+0x6bc/0x920 [ 119.576172][ T5043] ? reiserfs_xattr_init+0x331/0x720 [ 119.582108][ T5043] ? reiserfs_fill_super+0x1fe6/0x2440 [ 119.588027][ T5043] ? mount_bdev+0x287/0x3c0 [ 119.592792][ T5043] ? legacy_get_tree+0xe6/0x180 [ 119.598106][ T5043] ? vfs_get_tree+0x88/0x270 [ 119.602791][ T5043] ? do_new_mount+0x24a/0xa40 [ 119.607824][ T5043] ? __se_sys_mount+0x2e3/0x3d0 [ 119.612934][ T5043] ? do_syscall_64+0x4c/0xa0 [ 119.617968][ T5043] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.624392][ T5043] ? __wake_up_bit+0x120/0x120 [ 119.629334][ T5043] ? get_parents+0x400/0xd20 [ 119.634305][ T5043] ? get_neighbors+0x9ba/0x1030 [ 119.639530][ T5043] ? reiserfs_prepare_for_journal+0x269/0x280 [ 119.646176][ T5043] ? fix_nodes+0x7bc3/0x8340 [ 119.651238][ T5043] do_balance+0x318/0x930 [ 119.655759][ T5043] ? get_right_neighbor_position+0x210/0x210 [ 119.662306][ T5043] ? reiserfs_paste_into_item+0x3b0/0x810 [ 119.668741][ T5043] reiserfs_paste_into_item+0x6dd/0x810 [ 119.674742][ T5043] ? reiserfs_cut_from_item+0x1fa0/0x1fa0 [ 119.680750][ T5043] ? reiserfs_get_parent+0x2f0/0x2f0 [ 119.686255][ T5043] ? inode_get_bytes+0x73/0xa0 [ 119.691664][ T5043] ? _find_first_zero_bit+0x60/0xf0 [ 119.697147][ T5043] reiserfs_add_entry+0xa42/0xe10 [ 119.702461][ T5043] ? drop_new_inode+0x60/0x60 [ 119.707504][ T5043] ? journal_begin+0x1f1/0x350 [ 119.712544][ T5043] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 119.719567][ T5043] reiserfs_mkdir+0x6bc/0x920 [ 119.724609][ T5043] ? reiserfs_symlink+0x790/0x790 [ 119.729995][ T5043] ? rwsem_write_trylock+0x135/0x1c0 [ 119.735989][ T5043] ? lookup_one_len+0x19d/0x2d0 [ 119.741288][ T5043] ? lookup_one_common+0x460/0x460 [ 119.746791][ T5043] reiserfs_xattr_init+0x331/0x720 [ 119.752285][ T5043] reiserfs_fill_super+0x1fe6/0x2440 [ 119.757926][ T5043] ? reiserfs_kill_sb+0x140/0x140 [ 119.763550][ T5043] ? snprintf+0xe5/0x140 [ 119.767841][ T5043] ? vscnprintf+0x80/0x80 [ 119.772455][ T5043] ? set_blocksize+0x1f3/0x370 [ 119.777639][ T5043] ? sb_set_blocksize+0xa5/0xe0 [ 119.783114][ T5043] mount_bdev+0x287/0x3c0 [ 119.787836][ T5043] ? reiserfs_kill_sb+0x140/0x140 [ 119.793745][ T5043] legacy_get_tree+0xe6/0x180 [ 119.799229][ T5043] ? remove_save_link+0x3e0/0x3e0 [ 119.805524][ T5043] vfs_get_tree+0x88/0x270 [ 119.810304][ T5043] do_new_mount+0x24a/0xa40 [ 119.815135][ T5043] __se_sys_mount+0x2e3/0x3d0 [ 119.820024][ T5043] ? __x64_sys_mount+0xc0/0xc0 [ 119.825120][ T5043] ? lockdep_hardirqs_on+0x94/0x140 [ 119.830696][ T5043] ? __x64_sys_mount+0x1c/0xc0 [ 119.836299][ T5043] do_syscall_64+0x4c/0xa0 [ 119.841367][ T5043] ? clear_bhb_loop+0x30/0x80 [ 119.846697][ T5043] ? clear_bhb_loop+0x30/0x80 [ 119.851730][ T5043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.858254][ T5043] RIP: 0033:0x7f4e60e1ea0a [ 119.863206][ T5043] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.885606][ T5043] RSP: 002b:00007f4e6047ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.894647][ T5043] RAX: ffffffffffffffda RBX: 00007f4e6047eee0 RCX: 00007f4e60e1ea0a [ 119.903362][ T5043] RDX: 00002000000002c0 RSI: 00002000000031c0 RDI: 00007f4e6047eea0 [ 119.912234][ T5043] RBP: 00002000000002c0 R08: 00007f4e6047eee0 R09: 0000000000000800 [ 119.921294][ T5043] R10: 0000000000000800 R11: 0000000000000246 R12: 00002000000031c0 [ 119.930292][ T5043] R13: 00007f4e6047eea0 R14: 000000000000111e R15: 0000200000000300 [ 119.939386][ T5043] [ 119.943575][ T5043] Kernel Offset: disabled [ 119.948601][ T5043] Rebooting in 86400 seconds..