Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. 1970/01/01 00:01:06 parsed 1 programs [ 68.172062][ T4398] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.623517][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.624730][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.633451][ T1541] cfg80211: failed to load regulatory.db [ 69.943612][ T4542] chnl_net:caif_netlink_parms(): no params data found [ 69.984904][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.002122][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.003782][ T4542] device bridge_slave_0 entered promiscuous mode [ 70.006637][ T4542] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.007782][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.009308][ T4542] device bridge_slave_1 entered promiscuous mode [ 70.018785][ T4542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.021377][ T4542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.029554][ T4542] team0: Port device team_slave_0 added [ 70.032176][ T4542] team0: Port device team_slave_1 added [ 70.039619][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.040729][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.045324][ T4542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.047579][ T4542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.048633][ T4542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.053518][ T4542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.093544][ T4542] device hsr_slave_0 entered promiscuous mode [ 70.123231][ T4542] device hsr_slave_1 entered promiscuous mode [ 70.853832][ T4542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.873244][ T4542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.903418][ T4542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.924229][ T4542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.993652][ T4542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.997374][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.998926][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.001275][ T4542] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.003783][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.005516][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.007052][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.008269][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.009770][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.019327][ T4542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.021084][ T4542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.025271][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.026809][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.028377][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.029463][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.030897][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.033536][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.035223][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.037140][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.038754][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.040472][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.042821][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.044518][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.046162][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.047554][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.049225][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.050681][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.087104][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.088368][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.093317][ T4542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.099217][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.100926][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.109952][ T4542] device veth0_vlan entered promiscuous mode [ 71.113516][ T4542] device veth1_vlan entered promiscuous mode [ 71.114935][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.116715][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.118523][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.120098][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.121559][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.132176][ T4542] device veth0_macvtap entered promiscuous mode [ 71.134632][ T4542] device veth1_macvtap entered promiscuous mode [ 71.139272][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.141700][ T4542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.144809][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.146356][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.147925][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.149457][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.150861][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.153192][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.154719][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.156316][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.159730][ T4542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.161174][ T4542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.163673][ T4542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.165076][ T4542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.167900][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.380994][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.382640][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.388839][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.393673][ T290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.394956][ T290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.396263][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:11 executed programs: 0 [ 71.793618][ T4754] chnl_net:caif_netlink_parms(): no params data found [ 71.811950][ T4754] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.813958][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.815502][ T4754] device bridge_slave_0 entered promiscuous mode [ 71.817748][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.820367][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.821969][ T4754] device bridge_slave_1 entered promiscuous mode [ 71.831491][ T4754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.835137][ T4754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.843905][ T4754] team0: Port device team_slave_0 added [ 71.858787][ T4754] team0: Port device team_slave_1 added [ 71.866739][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.867852][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.872681][ T4754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.875139][ T4754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.876220][ T4754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.880624][ T4754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.963506][ T4754] device hsr_slave_0 entered promiscuous mode [ 71.982436][ T4754] device hsr_slave_1 entered promiscuous mode [ 72.022556][ T4754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.023843][ T4754] Cannot create hsr debugfs directory [ 72.063281][ T4754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.782253][ T4644] Bluetooth: hci0: command 0x0409 tx timeout [ 74.435721][ T4754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.862633][ T4640] Bluetooth: hci0: command 0x041b tx timeout [ 76.805510][ T4754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.874077][ T4754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.067749][ T4754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.093753][ T4754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.128258][ T4754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.173513][ T4754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.234011][ T4754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.237702][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.239242][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.241726][ T4754] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.244401][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.245958][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.247406][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.248486][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.249975][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.253014][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.254501][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.255919][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.257133][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.259639][ T290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.263534][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.266393][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.268270][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.269851][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.273560][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.275225][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.277689][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.279160][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.281653][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.283801][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.286308][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.332936][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.334528][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.337979][ T4754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.344159][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.345889][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.351493][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.353855][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.355446][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.356868][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.359364][ T4754] device veth0_vlan entered promiscuous mode [ 77.363314][ T4754] device veth1_vlan entered promiscuous mode [ 77.369833][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.371323][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.373308][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.374920][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.377563][ T4754] device veth0_macvtap entered promiscuous mode [ 77.379838][ T4754] device veth1_macvtap entered promiscuous mode [ 77.385316][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.387032][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.389183][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.390392][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.391819][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.394014][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.395648][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.397960][ T4754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.399619][ T4754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.401650][ T4754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.404228][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.405933][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.408481][ T4754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.409849][ T4754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.411309][ T4754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.413275][ T4754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.441196][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.442688][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.444575][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.449956][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.451308][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.452870][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:17 executed programs: 2 [ 77.497550][ T4950] loop0: detected capacity change from 0 to 8192 [ 77.504191][ T4950] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 77.505897][ T4950] REISERFS (device loop0): using ordered data mode [ 77.506891][ T4950] reiserfs: using flush barriers [ 77.508420][ T4950] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.511087][ T4950] REISERFS (device loop0): checking transaction log (loop0) [ 77.514243][ T4950] REISERFS (device loop0): Using r5 hash to sort names [ 77.515852][ T4950] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 77.519444][ T4950] ================================================================== [ 77.520777][ T4950] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x198/0xa0c [ 77.522068][ T4950] Read of size 18446744073709551365 at addr ffff0000ddf91000 by task syz.0.16/4950 [ 77.523678][ T4950] [ 77.524090][ T4950] CPU: 0 PID: 4950 Comm: syz.0.16 Not tainted syzkaller #0 [ 77.525301][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.526997][ T4950] Call trace: [ 77.527521][ T4950] dump_backtrace+0x0/0x458 [ 77.528284][ T4950] show_stack+0x2c/0x3c [ 77.529004][ T4950] __dump_stack+0x30/0x40 [ 77.529685][ T4950] dump_stack_lvl+0xf4/0x15c [ 77.530469][ T4950] print_address_description+0x78/0x30c [ 77.531355][ T4950] kasan_report+0xec/0x158 [ 77.532100][ T4950] kasan_check_range+0x268/0x2a0 [ 77.532869][ T4950] memmove+0x90/0xe8 [ 77.533548][ T4950] leaf_paste_in_buffer+0x198/0xa0c [ 77.534409][ T4950] balance_leaf+0x4744/0xd92c [ 77.535146][ T4950] do_balance+0x270/0x790 [ 77.535930][ T4950] reiserfs_paste_into_item+0x5d0/0x6e0 [ 77.536879][ T4950] reiserfs_get_block+0x14bc/0x3654 [ 77.537790][ T4950] __block_write_begin_int+0x3d8/0x1530 [ 77.538803][ T4950] __block_write_begin+0x40/0x54 [ 77.539649][ T4950] reiserfs_write_begin+0x3c8/0x654 [ 77.540557][ T4950] generic_perform_write+0x208/0x488 [ 77.541480][ T4950] __generic_file_write_iter+0x23c/0x454 [ 77.542490][ T4950] generic_file_write_iter+0xb0/0x1b4 [ 77.543427][ T4950] vfs_write+0x590/0xa60 [ 77.544092][ T4950] __arm64_sys_pwrite64+0x174/0x20c [ 77.544945][ T4950] invoke_syscall+0x98/0x2b0 [ 77.545741][ T4950] el0_svc_common+0x138/0x258 [ 77.546539][ T4950] do_el0_svc+0x58/0x13c [ 77.547221][ T4950] el0_svc+0x78/0x1d0 [ 77.547891][ T4950] el0t_64_sync_handler+0xcc/0xe4 [ 77.548702][ T4950] el0t_64_sync+0x1a0/0x1a4 [ 77.549402][ T4950] [ 77.549791][ T4950] The buggy address belongs to the page: [ 77.550744][ T4950] page:00000000c203e942 refcount:3 mapcount:1 mapping:0000000045260d9e index:0x375 pfn:0x11df91 [ 77.552556][ T4950] memcg:ffff0000c08a4000 [ 77.553303][ T4950] aops:ext4_da_aops ino:74c dentry name:"syz-execprog" [ 77.554467][ T4950] flags: 0x5ffc0000000281e(referenced|uptodate|dirty|lru|arch_1|private|node=0|zone=2|lastcpupid=0x7ff) [ 77.556357][ T4950] raw: 05ffc0000000281e fffffc000379e448 fffffc000379e388 ffff0000d05fca90 [ 77.557859][ T4950] raw: 0000000000000375 ffff0000de87e0e8 0000000300000000 ffff0000c08a4000 [ 77.559329][ T4950] page dumped because: kasan: bad access detected [ 77.560449][ T4950] [ 77.560834][ T4950] Memory state around the buggy address: [ 77.561825][ T4950] ffff0000ddf90f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.563191][ T4950] ffff0000ddf90f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.564584][ T4950] >ffff0000ddf91000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.565993][ T4950] ^ [ 77.566738][ T4950] ffff0000ddf91080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.568172][ T4950] ffff0000ddf91100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.569650][ T4950] ================================================================== [ 77.571062][ T4950] Disabling lock debugging due to kernel taint [ 77.573625][ T4950] REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one 1 [ 77.575415][ T4950] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 77.577191][ T4950] REISERFS (device loop0): Remounting filesystem read-only [ 77.700001][ T4953] loop0: detected capacity change from 0 to 8192 [ 77.735897][ T4953] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 77.737507][ T4953] REISERFS (device loop0): using ordered data mode [ 77.738593][ T4953] reiserfs: using flush barriers [ 77.739796][ T4953] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.743132][ T4953] REISERFS (device loop0): checking transaction log (loop0) [ 77.744766][ T4953] REISERFS (device loop0): Using r5 hash to sort names [ 77.746055][ T4953] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 77.757739][ T4754] list_del corruption, ffff0000e21aa698->next is NULL [ 77.758904][ T4754] ------------[ cut here ]------------ [ 77.759701][ T4754] kernel BUG at lib/list_debug.c:50! [ 77.760550][ T4754] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 77.761884][ T4754] Modules linked in: [ 77.762369][ C0] Unable to handle kernel paging request at virtual address dfff800000000000 [ 77.762567][ T4754] CPU: 1 PID: 4754 Comm: syz-executor Tainted: G B syzkaller #0 [ 77.763968][ C0] Mem abort info: [ 77.765389][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.766003][ C0] ESR = 0x0000000096000006 [ 77.767566][ T4754] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.768253][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 77.769470][ T4754] pc : __list_del_entry_valid+0xe0/0x150 [ 77.770512][ C0] SET = 0, FnV = 0 [ 77.771340][ T4754] lr : __list_del_entry_valid+0xe0/0x150 [ 77.772035][ C0] EA = 0, S1PTW = 0 [ 77.772832][ T4754] sp : ffff80001f2f6650 [ 77.773512][ C0] FSC = 0x06: level 2 translation fault [ 77.774146][ T4754] x29: ffff80001f2f6650 [ 77.775161][ C0] Data abort info: [ 77.775163][ T4754] x28: 0000000004000021 x27: ffff0000c25b4100 [ 77.775815][ C0] ISV = 0, ISS = 0x00000006 [ 77.776330][ T4754] [ 77.776334][ T4754] x26: ffff0000ca6a1f00 [ 77.777386][ C0] CM = 0, WnR = 0 [ 77.778102][ T4754] x25: 1fffe0001c4354d3 [ 77.778462][ C0] [dfff800000000000] address between user and kernel address ranges [ 77.779119][ T4754] x24: 0000000000000000 [ 77.782694][ T4754] x23: dfff800000000000 x22: 0000000000000000 x21: dfff800000000000 [ 77.784067][ T4754] x20: 0000000000000000 x19: ffff0000e21aa698 x18: 0000000000000003 [ 77.785443][ T4754] x17: 0000000000000000 x16: ffff80001125f0fc x15: 00000000ffffffff [ 77.786743][ T4754] x14: 0000000000000001 x13: 1fffe000341f5ed7 x12: 0000000000ff0100 [ 77.788070][ T4754] x11: 0000000000000002 x10: 0000000000000000 x9 : 795be17dd3312700 [ 77.789370][ T4754] x8 : 795be17dd3312700 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.790757][ T4754] x5 : ffff80001f2f5f58 x4 : ffff80001437f3e0 x3 : ffff80000a75f10c [ 77.792085][ T4754] x2 : ffff0001a0fa3d50 x1 : 0000000100000002 x0 : 0000000000000033 [ 77.793366][ T4754] Call trace: [ 77.793900][ T4754] __list_del_entry_valid+0xe0/0x150 [ 77.794786][ T4754] list_lru_del+0x210/0x3c4 [ 77.795489][ T4754] workingset_update_node+0x100/0x190 [ 77.796361][ T4754] xas_create+0x8f4/0x12f8 [ 77.797053][ T4754] xas_store+0x8c/0x1508 [ 77.797690][ T4754] __add_to_page_cache_locked+0x5fc/0xc54 [ 77.798591][ T4754] add_to_page_cache_lru+0x13c/0x430 [ 77.799405][ T4754] page_cache_ra_unbounded+0x328/0x5e0 [ 77.800279][ T4754] do_page_cache_ra+0xfc/0x114 [ 77.801051][ T4754] do_sync_mmap_readahead+0x498/0x620 [ 77.801970][ T4754] filemap_fault+0x528/0xe84 [ 77.802692][ T4754] __do_fault+0x120/0x5d0 [ 77.803322][ T4754] handle_mm_fault+0x1bb0/0x2a28 [ 77.804122][ T4754] __get_user_pages+0x404/0x9c0 [ 77.804905][ T4754] get_dump_page+0x148/0x5c4 [ 77.805609][ T4754] dump_user_range+0x74/0x348 [ 77.806346][ T4754] elf_core_dump+0x2808/0x2cf8 [ 77.807133][ T4754] do_coredump+0xf24/0x2268 [ 77.807867][ T4754] get_signal+0x4f4/0x1334 [ 77.808587][ T4754] do_notify_resume+0x298/0x309c [ 77.809425][ T4754] el0_fpac+0xfc/0x1dc [ 77.810087][ T4754] el0t_64_sync_handler+0x78/0xe4 [ 77.810954][ T4754] el0t_64_sync+0x1a0/0x1a4 [ 77.811690][ T4754] Code: d0038600 912b0000 aa1303e1 95a7a05a (d4210000) [ 77.812842][ T4754] ---[ end trace 0ed8fa446efb9526 ]--- [ 78.021832][ T4754] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 78.022858][ T4754] SMP: stopping secondary CPUs [ 79.095093][ T4754] SMP: failed to stop secondary CPUs 0-1 [ 79.095936][ T4754] Kernel Offset: disabled [ 79.096596][ T4754] CPU features: 0x8,000003c1,7d33ffd9 [ 79.097358][ T4754] Memory Limit: none [ 79.318236][ T4754] Rebooting in 86400 seconds..