Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. 2025/10/31 18:34:02 parsed 1 programs [ 52.246679][ T4188] cgroup: Unknown subsys name 'net' [ 52.377953][ T4188] cgroup: Unknown subsys name 'rlimit' [ 53.629875][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.667041][ T4220] chnl_net:caif_netlink_parms(): no params data found [ 55.725149][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.732747][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.742002][ T4220] device bridge_slave_0 entered promiscuous mode [ 55.751318][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.758420][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.767664][ T4220] device bridge_slave_1 entered promiscuous mode [ 55.795011][ T4220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.806183][ T4220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.836970][ T4220] team0: Port device team_slave_0 added [ 55.845094][ T4220] team0: Port device team_slave_1 added [ 55.873995][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.881011][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.908348][ T4220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.922664][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.929598][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.957988][ T4220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.995873][ T4220] device hsr_slave_0 entered promiscuous mode [ 56.004214][ T4220] device hsr_slave_1 entered promiscuous mode [ 56.126277][ T4220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.139171][ T4220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.149061][ T4220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.160702][ T4220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.187902][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.195096][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.202824][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.209911][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.266453][ T4220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.279698][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.289961][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.299760][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.307550][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 56.320073][ T4220] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.331675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.342030][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.349079][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.359656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.371097][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.378235][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.398465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.408068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.423550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.434823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.446845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.458672][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.557198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.564959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.579804][ T4220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.599671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.629360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.643932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.651940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.667644][ T4220] device veth0_vlan entered promiscuous mode [ 56.698183][ T4220] device veth1_vlan entered promiscuous mode [ 56.715462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.724124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.733968][ T4220] device veth0_macvtap entered promiscuous mode [ 56.748078][ T4220] device veth1_macvtap entered promiscuous mode [ 56.760966][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.768355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.776488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.785370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.794120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.806400][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.814861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.823472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.834773][ T4220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.844298][ T4220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.853167][ T4220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.862099][ T4220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.286598][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.296733][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.307510][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.334963][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.343641][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.352627][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/10/31 18:34:10 executed programs: 0 [ 58.735650][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 58.794994][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.802290][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.809911][ T4289] device bridge_slave_0 entered promiscuous mode [ 58.818173][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.825582][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.833814][ T4289] device bridge_slave_1 entered promiscuous mode [ 58.854014][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.865940][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.896044][ T4289] team0: Port device team_slave_0 added [ 58.904888][ T4289] team0: Port device team_slave_1 added [ 58.923278][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.930346][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.956375][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.968702][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.975809][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.003093][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.036897][ T4289] device hsr_slave_0 entered promiscuous mode [ 59.044320][ T4289] device hsr_slave_1 entered promiscuous mode [ 59.050992][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.058801][ T4289] Cannot create hsr debugfs directory [ 59.141346][ T4289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.660983][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 62.396778][ T4289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.444871][ T4289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.517874][ T4289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.651626][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.660037][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.670000][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.678602][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.733819][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.740750][ T4299] Bluetooth: hci0: command 0x041b tx timeout [ 62.748762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.756790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.767606][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.794376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.802947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.812168][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.819206][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.830234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.838108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.846700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.855517][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.862617][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.894456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.905150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.915902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.924484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.933223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.944810][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.953294][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.978483][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.987295][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.999839][ T4289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.011429][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.019271][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.028380][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.117937][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.125813][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.136641][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.164428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.173792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.194646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.203401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.212044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.221361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.229550][ T4289] device veth0_vlan entered promiscuous mode [ 63.244232][ T4289] device veth1_vlan entered promiscuous mode [ 63.260916][ T376] device hsr_slave_0 left promiscuous mode [ 63.267191][ T376] device hsr_slave_1 left promiscuous mode [ 63.273911][ T376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.281563][ T376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.289393][ T376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.297061][ T376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.304778][ T376] device bridge_slave_1 left promiscuous mode [ 63.311889][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.323841][ T376] device bridge_slave_0 left promiscuous mode [ 63.329969][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.345718][ T376] device veth1_macvtap left promiscuous mode [ 63.352332][ T376] device veth0_macvtap left promiscuous mode [ 63.358348][ T376] device veth1_vlan left promiscuous mode [ 63.364367][ T376] device veth0_vlan left promiscuous mode [ 63.492058][ T376] team0 (unregistering): Port device team_slave_1 removed [ 63.506089][ T376] team0 (unregistering): Port device team_slave_0 removed [ 63.517583][ T376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.531599][ T376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.582926][ T376] bond0 (unregistering): Released all slaves [ 63.619962][ T4289] device veth0_macvtap entered promiscuous mode [ 63.630741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.638904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.646913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.655949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.665349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.675210][ T4289] device veth1_macvtap entered promiscuous mode [ 63.692640][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.699951][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.708726][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.718004][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.728648][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.736265][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.745691][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.757470][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.766510][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.775757][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.785373][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.837210][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.853393][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.877702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.886606][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.894941][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.905706][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.997949][ T4313] loop0: detected capacity change from 0 to 8192 [ 64.134544][ T4313] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 64.158291][ T4313] REISERFS (device loop0): using ordered data mode [ 64.186411][ T4313] reiserfs: using flush barriers [ 64.201256][ T4313] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.220970][ T4313] REISERFS (device loop0): checking transaction log (loop0) [ 64.238908][ T4313] REISERFS (device loop0): Using tea hash to sort names [ 64.250616][ T4313] REISERFS (device loop0): using 3.5.x disk format [ 64.258616][ T4313] ================================================================== [ 64.266832][ T4313] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x73c/0x10c0 [ 64.274389][ T4313] Read of size 18446744073709551585 at addr ffff888069510fa4 by task syz.0.17/4313 [ 64.283662][ T4313] [ 64.285991][ T4313] CPU: 1 PID: 4313 Comm: syz.0.17 Not tainted syzkaller #0 [ 64.293181][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.303258][ T4313] Call Trace: [ 64.306528][ T4313] [ 64.309454][ T4313] dump_stack_lvl+0x168/0x230 [ 64.314143][ T4313] ? show_regs_print_info+0x20/0x20 [ 64.319348][ T4313] ? _printk+0xcc/0x110 [ 64.323495][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 64.328783][ T4313] ? load_image+0x3b0/0x3b0 [ 64.333284][ T4313] ? __lock_acquire+0x13ad/0x7c60 [ 64.338314][ T4313] print_address_description+0x60/0x2d0 [ 64.343862][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 64.349143][ T4313] kasan_report+0xdf/0x130 [ 64.353555][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 64.358863][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 64.364145][ T4313] kasan_check_range+0x27b/0x290 [ 64.369090][ T4313] memmove+0x25/0x60 [ 64.372986][ T4313] leaf_paste_entries+0x73c/0x10c0 [ 64.378102][ T4313] balance_leaf+0xacec/0x10e60 [ 64.382876][ T4313] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 64.388862][ T4313] ? lock_chain_count+0x20/0x20 [ 64.393726][ T4313] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 64.399101][ T4313] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 64.405013][ T4313] ? do_balance+0x930/0x930 [ 64.409531][ T4313] ? _raw_spin_unlock+0x40/0x40 [ 64.414381][ T4313] ? stack_trace_snprint+0xf0/0xf0 [ 64.419498][ T4313] ? stack_depot_save+0x404/0x440 [ 64.424525][ T4313] ? __kasan_kmalloc+0xcc/0xf0 [ 64.429282][ T4313] ? __kasan_kmalloc+0xb5/0xf0 [ 64.434038][ T4313] ? fix_nodes+0x6044/0x82d0 [ 64.438621][ T4313] ? reiserfs_paste_into_item+0x5c8/0x7e0 [ 64.444334][ T4313] ? reiserfs_add_entry+0x975/0xd40 [ 64.449531][ T4313] ? reiserfs_mkdir+0x68f/0x970 [ 64.454460][ T4313] ? reiserfs_xattr_init+0x331/0x720 [ 64.459735][ T4313] ? reiserfs_fill_super+0x1fa6/0x23e0 [ 64.465184][ T4313] ? mount_bdev+0x287/0x3c0 [ 64.469678][ T4313] ? legacy_get_tree+0xe6/0x180 [ 64.474517][ T4313] ? vfs_get_tree+0x88/0x270 [ 64.479098][ T4313] ? do_new_mount+0x24a/0xa40 [ 64.483773][ T4313] ? __se_sys_mount+0x2d6/0x3c0 [ 64.488614][ T4313] ? do_syscall_64+0x4c/0xa0 [ 64.493194][ T4313] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.499283][ T4313] ? __wake_up_bit+0x100/0x100 [ 64.504045][ T4313] ? get_parents+0x400/0xd20 [ 64.508624][ T4313] ? get_neighbors+0x9ba/0x1030 [ 64.513476][ T4313] ? reiserfs_prepare_for_journal+0x269/0x280 [ 64.519543][ T4313] ? fix_nodes+0x7b26/0x82d0 [ 64.524170][ T4313] do_balance+0x2fa/0x930 [ 64.528502][ T4313] ? get_right_neighbor_position+0x210/0x210 [ 64.534492][ T4313] reiserfs_paste_into_item+0x69b/0x7e0 [ 64.540042][ T4313] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 64.545825][ T4313] ? reiserfs_get_parent+0x270/0x270 [ 64.551104][ T4313] ? inode_get_bytes+0x73/0xa0 [ 64.555873][ T4313] ? memset+0x1e/0x40 [ 64.559846][ T4313] ? _find_first_zero_bit+0x60/0xf0 [ 64.565053][ T4313] reiserfs_add_entry+0x975/0xd40 [ 64.570100][ T4313] ? drop_new_inode+0x60/0x60 [ 64.574805][ T4313] ? journal_begin+0x1f1/0x350 [ 64.579564][ T4313] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 64.585978][ T4313] reiserfs_mkdir+0x68f/0x970 [ 64.590656][ T4313] ? reiserfs_symlink+0x770/0x770 [ 64.595682][ T4313] ? preempt_count_add+0x8d/0x190 [ 64.600710][ T4313] ? rwsem_write_trylock+0x12f/0x1b0 [ 64.605986][ T4313] ? lookup_one_len+0x18e/0x2c0 [ 64.610832][ T4313] ? lookup_one_common+0x460/0x460 [ 64.615945][ T4313] reiserfs_xattr_init+0x331/0x720 [ 64.621080][ T4313] reiserfs_fill_super+0x1fa6/0x23e0 [ 64.626382][ T4313] ? reiserfs_kill_sb+0x140/0x140 [ 64.631393][ T4313] ? snprintf+0xd7/0x120 [ 64.635634][ T4313] ? vscnprintf+0x80/0x80 [ 64.639960][ T4313] ? set_blocksize+0x1f1/0x370 [ 64.644726][ T4313] ? sb_set_blocksize+0xa5/0xe0 [ 64.649578][ T4313] mount_bdev+0x287/0x3c0 [ 64.653904][ T4313] ? reiserfs_kill_sb+0x140/0x140 [ 64.658925][ T4313] legacy_get_tree+0xe6/0x180 [ 64.663597][ T4313] ? remove_save_link+0x3c0/0x3c0 [ 64.668630][ T4313] vfs_get_tree+0x88/0x270 [ 64.673051][ T4313] do_new_mount+0x24a/0xa40 [ 64.677559][ T4313] __se_sys_mount+0x2d6/0x3c0 [ 64.682237][ T4313] ? __x64_sys_mount+0xc0/0xc0 [ 64.687005][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 64.692200][ T4313] ? __x64_sys_mount+0x1c/0xc0 [ 64.696960][ T4313] do_syscall_64+0x4c/0xa0 [ 64.701368][ T4313] ? clear_bhb_loop+0x30/0x80 [ 64.706039][ T4313] ? clear_bhb_loop+0x30/0x80 [ 64.710720][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.716621][ T4313] RIP: 0033:0x7f87722f376a [ 64.721031][ T4313] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.741075][ T4313] RSP: 002b:00007ffdb686d1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.749488][ T4313] RAX: ffffffffffffffda RBX: 00007ffdb686d280 RCX: 00007f87722f376a [ 64.757457][ T4313] RDX: 00002000000002c0 RSI: 00002000000031c0 RDI: 00007ffdb686d240 [ 64.765432][ T4313] RBP: 00002000000002c0 R08: 00007ffdb686d280 R09: 0000000000000800 [ 64.773403][ T4313] R10: 0000000000000800 R11: 0000000000000246 R12: 00002000000031c0 [ 64.781377][ T4313] R13: 00007ffdb686d240 R14: 000000000000111f R15: 0000200000000300 [ 64.789367][ T4313] [ 64.792381][ T4313] [ 64.794693][ T4313] The buggy address belongs to the page: [ 64.800316][ T4313] page:ffffea0001a54400 refcount:2 mapcount:0 mapping:ffff888016d14f30 index:0x213 pfn:0x69510 [ 64.810630][ T4313] memcg:ffff888078cd4000 [ 64.814858][ T4313] aops:def_blk_aops ino:700000 [ 64.819614][ T4313] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 64.829335][ T4313] raw: 00fff00000002032 ffffea0001a54448 ffff88807433b030 ffff888016d14f30 [ 64.837929][ T4313] raw: 0000000000000213 ffff88806e692828 00000002ffffffff ffff888078cd4000 [ 64.846506][ T4313] page dumped because: kasan: bad access detected [ 64.852915][ T4313] page_owner tracks the page as allocated [ 64.858620][ T4313] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4313, ts 64238191255, free_ts 64234773517 [ 64.861152][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 64.875716][ T4313] get_page_from_freelist+0x1b77/0x1c60 [ 64.875750][ T4313] __alloc_pages+0x1e1/0x470 [ 64.891802][ T4313] __page_cache_alloc+0xd2/0x3f0 [ 64.896751][ T4313] pagecache_get_page+0x986/0xef0 [ 64.901768][ T4313] __getblk_gfp+0x249/0xb70 [ 64.906263][ T4313] search_by_key+0x424/0x4390 [ 64.910925][ T4313] reiserfs_read_locked_inode+0x154/0x2620 [ 64.916732][ T4313] reiserfs_fill_super+0x124b/0x23e0 [ 64.922018][ T4313] mount_bdev+0x287/0x3c0 [ 64.926325][ T4313] legacy_get_tree+0xe6/0x180 [ 64.930975][ T4313] vfs_get_tree+0x88/0x270 [ 64.935365][ T4313] do_new_mount+0x24a/0xa40 [ 64.939842][ T4313] __se_sys_mount+0x2d6/0x3c0 [ 64.944491][ T4313] do_syscall_64+0x4c/0xa0 [ 64.948880][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.954749][ T4313] page last free stack trace: [ 64.959405][ T4313] free_unref_page_prepare+0x637/0x6c0 [ 64.964843][ T4313] free_unref_page_list+0x122/0x7e0 [ 64.970018][ T4313] release_pages+0x184b/0x1bb0 [ 64.974755][ T4313] __pagevec_release+0x6d/0xe0 [ 64.979492][ T4313] shmem_undo_range+0x5cb/0x1880 [ 64.984402][ T4313] shmem_evict_inode+0x20d/0xa00 [ 64.989314][ T4313] evict+0x485/0x870 [ 64.993183][ T4313] __dentry_kill+0x431/0x650 [ 64.997749][ T4313] dentry_kill+0xb8/0x290 [ 65.002049][ T4313] dput+0xd8/0x1a0 [ 65.005747][ T4313] do_renameat2+0x704/0xf70 [ 65.010224][ T4313] __x64_sys_rename+0x82/0x90 [ 65.014891][ T4313] do_syscall_64+0x4c/0xa0 [ 65.019283][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.025153][ T4313] [ 65.027453][ T4313] Memory state around the buggy address: [ 65.033054][ T4313] ffff888069510e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.041092][ T4313] ffff888069510f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.049150][ T4313] >ffff888069510f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.057187][ T4313] ^ [ 65.062289][ T4313] ffff888069511000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.070344][ T4313] ffff888069511080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.078392][ T4313] ================================================================== [ 65.086424][ T4313] Disabling lock debugging due to kernel taint [ 65.099323][ T4313] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.106530][ T4313] CPU: 1 PID: 4313 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 65.115111][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.125159][ T4313] Call Trace: [ 65.128436][ T4313] [ 65.131357][ T4313] dump_stack_lvl+0x168/0x230 [ 65.136036][ T4313] ? show_regs_print_info+0x20/0x20 [ 65.141235][ T4313] ? load_image+0x3b0/0x3b0 [ 65.145722][ T4313] panic+0x2c9/0x7f0 [ 65.149592][ T4313] ? bpf_jit_dump+0xd0/0xd0 [ 65.154079][ T4313] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 65.159951][ T4313] ? _raw_spin_unlock+0x40/0x40 [ 65.164777][ T4313] ? print_memory_metadata+0x314/0x400 [ 65.170212][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 65.175472][ T4313] check_panic_on_warn+0x80/0xa0 [ 65.180383][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 65.185638][ T4313] end_report+0x6d/0xf0 [ 65.189769][ T4313] kasan_report+0x102/0x130 [ 65.194242][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 65.199498][ T4313] ? leaf_paste_entries+0x73c/0x10c0 [ 65.204757][ T4313] kasan_check_range+0x27b/0x290 [ 65.209668][ T4313] memmove+0x25/0x60 [ 65.213534][ T4313] leaf_paste_entries+0x73c/0x10c0 [ 65.218620][ T4313] balance_leaf+0xacec/0x10e60 [ 65.223364][ T4313] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 65.229321][ T4313] ? lock_chain_count+0x20/0x20 [ 65.234145][ T4313] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 65.239490][ T4313] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 65.245353][ T4313] ? do_balance+0x930/0x930 [ 65.249831][ T4313] ? _raw_spin_unlock+0x40/0x40 [ 65.254659][ T4313] ? stack_trace_snprint+0xf0/0xf0 [ 65.259752][ T4313] ? stack_depot_save+0x404/0x440 [ 65.264756][ T4313] ? __kasan_kmalloc+0xcc/0xf0 [ 65.269504][ T4313] ? __kasan_kmalloc+0xb5/0xf0 [ 65.274249][ T4313] ? fix_nodes+0x6044/0x82d0 [ 65.278823][ T4313] ? reiserfs_paste_into_item+0x5c8/0x7e0 [ 65.284521][ T4313] ? reiserfs_add_entry+0x975/0xd40 [ 65.289698][ T4313] ? reiserfs_mkdir+0x68f/0x970 [ 65.294525][ T4313] ? reiserfs_xattr_init+0x331/0x720 [ 65.299788][ T4313] ? reiserfs_fill_super+0x1fa6/0x23e0 [ 65.305229][ T4313] ? mount_bdev+0x287/0x3c0 [ 65.309717][ T4313] ? legacy_get_tree+0xe6/0x180 [ 65.314545][ T4313] ? vfs_get_tree+0x88/0x270 [ 65.319112][ T4313] ? do_new_mount+0x24a/0xa40 [ 65.323761][ T4313] ? __se_sys_mount+0x2d6/0x3c0 [ 65.328584][ T4313] ? do_syscall_64+0x4c/0xa0 [ 65.333146][ T4313] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.339191][ T4313] ? __wake_up_bit+0x100/0x100 [ 65.343931][ T4313] ? get_parents+0x400/0xd20 [ 65.348503][ T4313] ? get_neighbors+0x9ba/0x1030 [ 65.353342][ T4313] ? reiserfs_prepare_for_journal+0x269/0x280 [ 65.359389][ T4313] ? fix_nodes+0x7b26/0x82d0 [ 65.363958][ T4313] do_balance+0x2fa/0x930 [ 65.368271][ T4313] ? get_right_neighbor_position+0x210/0x210 [ 65.374233][ T4313] reiserfs_paste_into_item+0x69b/0x7e0 [ 65.379757][ T4313] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 65.385470][ T4313] ? reiserfs_get_parent+0x270/0x270 [ 65.390732][ T4313] ? inode_get_bytes+0x73/0xa0 [ 65.395471][ T4313] ? memset+0x1e/0x40 [ 65.399426][ T4313] ? _find_first_zero_bit+0x60/0xf0 [ 65.404603][ T4313] reiserfs_add_entry+0x975/0xd40 [ 65.409615][ T4313] ? drop_new_inode+0x60/0x60 [ 65.414282][ T4313] ? journal_begin+0x1f1/0x350 [ 65.419033][ T4313] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 65.425427][ T4313] reiserfs_mkdir+0x68f/0x970 [ 65.430090][ T4313] ? reiserfs_symlink+0x770/0x770 [ 65.435103][ T4313] ? preempt_count_add+0x8d/0x190 [ 65.440111][ T4313] ? rwsem_write_trylock+0x12f/0x1b0 [ 65.445388][ T4313] ? lookup_one_len+0x18e/0x2c0 [ 65.450219][ T4313] ? lookup_one_common+0x460/0x460 [ 65.455319][ T4313] reiserfs_xattr_init+0x331/0x720 [ 65.460410][ T4313] reiserfs_fill_super+0x1fa6/0x23e0 [ 65.465673][ T4313] ? reiserfs_kill_sb+0x140/0x140 [ 65.470673][ T4313] ? snprintf+0xd7/0x120 [ 65.474898][ T4313] ? vscnprintf+0x80/0x80 [ 65.479203][ T4313] ? set_blocksize+0x1f1/0x370 [ 65.483954][ T4313] ? sb_set_blocksize+0xa5/0xe0 [ 65.488791][ T4313] mount_bdev+0x287/0x3c0 [ 65.493101][ T4313] ? reiserfs_kill_sb+0x140/0x140 [ 65.498105][ T4313] legacy_get_tree+0xe6/0x180 [ 65.502861][ T4313] ? remove_save_link+0x3c0/0x3c0 [ 65.507871][ T4313] vfs_get_tree+0x88/0x270 [ 65.512267][ T4313] do_new_mount+0x24a/0xa40 [ 65.516748][ T4313] __se_sys_mount+0x2d6/0x3c0 [ 65.521398][ T4313] ? __x64_sys_mount+0xc0/0xc0 [ 65.526138][ T4313] ? lockdep_hardirqs_on+0x94/0x140 [ 65.531313][ T4313] ? __x64_sys_mount+0x1c/0xc0 [ 65.536054][ T4313] do_syscall_64+0x4c/0xa0 [ 65.540453][ T4313] ? clear_bhb_loop+0x30/0x80 [ 65.545106][ T4313] ? clear_bhb_loop+0x30/0x80 [ 65.549757][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.555624][ T4313] RIP: 0033:0x7f87722f376a [ 65.560022][ T4313] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.579603][ T4313] RSP: 002b:00007ffdb686d1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.587993][ T4313] RAX: ffffffffffffffda RBX: 00007ffdb686d280 RCX: 00007f87722f376a [ 65.595938][ T4313] RDX: 00002000000002c0 RSI: 00002000000031c0 RDI: 00007ffdb686d240 [ 65.603884][ T4313] RBP: 00002000000002c0 R08: 00007ffdb686d280 R09: 0000000000000800 [ 65.611830][ T4313] R10: 0000000000000800 R11: 0000000000000246 R12: 00002000000031c0 [ 65.619774][ T4313] R13: 00007ffdb686d240 R14: 000000000000111f R15: 0000200000000300 [ 65.627722][ T4313] [ 65.630922][ T4313] Kernel Offset: disabled [ 65.635238][ T4313] Rebooting in 86400 seconds..