Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. 2025/11/30 00:16:37 parsed 1 programs [ 79.990776][ T4270] cgroup: Unknown subsys name 'net' [ 80.152678][ T4270] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.757292][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.431096][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.439316][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.455054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.469445][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.478402][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.487255][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.054829][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 85.109282][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.117357][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.125311][ T4315] device bridge_slave_0 entered promiscuous mode [ 85.135307][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.142978][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.151404][ T4315] device bridge_slave_1 entered promiscuous mode [ 85.192514][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.206232][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.268791][ T4315] team0: Port device team_slave_0 added [ 85.276788][ T4315] team0: Port device team_slave_1 added [ 85.296895][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.303881][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.330175][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.343189][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.350225][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.376279][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.409501][ T4315] device hsr_slave_0 entered promiscuous mode [ 85.416374][ T4315] device hsr_slave_1 entered promiscuous mode [ 85.530301][ T4315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.540745][ T4315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.561945][ T4315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.571197][ T4315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.648910][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.671516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.680488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.692037][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.705427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.715413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.725631][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.733011][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.753326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.761575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.770856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.779592][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.786773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.808175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.819647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.832691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.842183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.864288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.875136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.884142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.895657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.904625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.915827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.925242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.946048][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.168525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.177109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.192931][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.223366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.232743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.251276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.263331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.273797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.282204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.292367][ T4315] device veth0_vlan entered promiscuous mode [ 86.303532][ T4315] device veth1_vlan entered promiscuous mode [ 86.323919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.332920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.341626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.353353][ T4315] device veth0_macvtap entered promiscuous mode [ 86.364025][ T4315] device veth1_macvtap entered promiscuous mode [ 86.384297][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.391976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.400403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.410109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.423134][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.432442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.441170][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.452586][ T4315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.461612][ T4315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.470518][ T4315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.479291][ T4315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.600482][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.738093][ T952] cfg80211: failed to load regulatory.db [ 87.068753][ T4348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.078640][ T4348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.086907][ T4348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.094746][ T4348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.104059][ T4348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.111942][ T4348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/30 00:16:48 executed programs: 0 [ 88.270792][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.280828][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.288793][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.297884][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.305453][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.313096][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.451343][ T4369] chnl_net:caif_netlink_parms(): no params data found [ 88.501330][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.508793][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.517465][ T4369] device bridge_slave_0 entered promiscuous mode [ 88.525672][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.533106][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.541416][ T4369] device bridge_slave_1 entered promiscuous mode [ 88.565728][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.578214][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.604330][ T4369] team0: Port device team_slave_0 added [ 88.612230][ T4369] team0: Port device team_slave_1 added [ 88.634850][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.641927][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.668093][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.680601][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.687796][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.713910][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.747153][ T4369] device hsr_slave_0 entered promiscuous mode [ 88.755283][ T4369] device hsr_slave_1 entered promiscuous mode [ 88.762616][ T4369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.770711][ T4369] Cannot create hsr debugfs directory [ 89.009001][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.336749][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 91.256423][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.318326][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.158433][ T4369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.169644][ T4369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.200590][ T4369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.211965][ T4369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.304709][ T11] device hsr_slave_0 left promiscuous mode [ 92.312059][ T11] device hsr_slave_1 left promiscuous mode [ 92.319308][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.327671][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.345152][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.352738][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.362188][ T11] device bridge_slave_1 left promiscuous mode [ 92.369691][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.382211][ T11] device bridge_slave_0 left promiscuous mode [ 92.389841][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.416570][ T4348] Bluetooth: hci0: command 0x041b tx timeout [ 92.424799][ T11] device veth1_macvtap left promiscuous mode [ 92.432248][ T11] device veth0_macvtap left promiscuous mode [ 92.438852][ T11] device veth1_vlan left promiscuous mode [ 92.444942][ T11] device veth0_vlan left promiscuous mode [ 92.798717][ T11] team0 (unregistering): Port device team_slave_1 removed [ 92.829940][ T11] team0 (unregistering): Port device team_slave_0 removed [ 92.859395][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.891918][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.170709][ T11] bond0 (unregistering): Released all slaves [ 93.258461][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.270865][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.283677][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.295834][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.313437][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.323577][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.332612][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.339809][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.349169][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.380208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.389785][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.399257][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.406517][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.414329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.423555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.436907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.446248][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.455095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.478738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.488445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.497607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.506310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.517435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.526232][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.540775][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.784113][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.793614][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.809402][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.830054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.842565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.880593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.892236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.909424][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.917610][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.938543][ T4369] device veth0_vlan entered promiscuous mode [ 93.951635][ T4369] device veth1_vlan entered promiscuous mode [ 93.985442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.995691][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.006133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.017448][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.028898][ T4369] device veth0_macvtap entered promiscuous mode [ 94.049009][ T4369] device veth1_macvtap entered promiscuous mode [ 94.070173][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.079070][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.088280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.097308][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.107646][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.119318][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.128365][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.147559][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.160386][ T4369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.170043][ T4369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.179473][ T4369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188459][ T4369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286898][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.295700][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.328202][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.354784][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.363750][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.387729][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.487495][ T4431] loop0: detected capacity change from 0 to 8192 [ 94.496087][ T4348] Bluetooth: hci0: command 0x040f tx timeout [ 94.509891][ T4431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.523301][ T4431] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 94.536319][ T4431] REISERFS (device loop0): using ordered data mode [ 94.543671][ T4431] reiserfs: using flush barriers [ 94.551479][ T4431] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.571420][ T4431] REISERFS (device loop0): checking transaction log (loop0) [ 94.590901][ T4431] REISERFS (device loop0): Using tea hash to sort names [ 94.618336][ T4431] ================================================================== [ 94.626579][ T4431] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7a5/0x1110 [ 94.634194][ T4431] Read of size 18446744073709551584 at addr ffff88805bbeafa4 by task syz.0.17/4431 [ 94.643505][ T4431] [ 94.645867][ T4431] CPU: 0 PID: 4431 Comm: syz.0.17 Not tainted syzkaller #0 [ 94.653089][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.663274][ T4431] Call Trace: [ 94.666574][ T4431] [ 94.669534][ T4431] dump_stack_lvl+0x168/0x22e [ 94.674262][ T4431] ? __lock_acquire+0x7c50/0x7c50 [ 94.679329][ T4431] ? show_regs_print_info+0x12/0x12 [ 94.684658][ T4431] ? load_image+0x3b0/0x3b0 [ 94.689214][ T4431] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 94.694637][ T4431] ? __virt_addr_valid+0x188/0x540 [ 94.699801][ T4431] ? __virt_addr_valid+0x465/0x540 [ 94.705045][ T4431] ? leaf_paste_entries+0x7a5/0x1110 [ 94.710370][ T4431] print_report+0xa8/0x210 [ 94.714819][ T4431] kasan_report+0x10b/0x140 [ 94.719375][ T4431] ? leaf_paste_entries+0x7a5/0x1110 [ 94.724701][ T4431] ? leaf_paste_entries+0x7a5/0x1110 [ 94.730033][ T4431] kasan_check_range+0x27b/0x290 [ 94.735031][ T4431] memmove+0x25/0x60 [ 94.738971][ T4431] leaf_paste_entries+0x7a5/0x1110 [ 94.744132][ T4431] balance_leaf+0xacec/0x10e60 [ 94.748946][ T4431] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 94.754888][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 94.760127][ T4431] ? _raw_spin_unlock+0x40/0x40 [ 94.765022][ T4431] ? do_balance+0x930/0x930 [ 94.769558][ T4431] ? stack_trace_save+0x98/0xe0 [ 94.774442][ T4431] ? __stack_depot_save+0x421/0x460 [ 94.779690][ T4431] ? kasan_set_track+0x60/0x70 [ 94.784498][ T4431] ? kasan_set_track+0x4b/0x70 [ 94.789301][ T4431] ? __kasan_kmalloc+0x8e/0xa0 [ 94.794101][ T4431] ? __kmalloc+0xb0/0x240 [ 94.798467][ T4431] ? fix_nodes+0x6044/0x82d0 [ 94.803088][ T4431] ? reiserfs_paste_into_item+0x5c8/0x7e0 [ 94.808815][ T4431] ? reiserfs_add_entry+0x975/0xd40 [ 94.814014][ T4431] ? reiserfs_mkdir+0x68f/0x970 [ 94.818887][ T4431] ? reiserfs_xattr_init+0x331/0x720 [ 94.824191][ T4431] ? reiserfs_fill_super+0x1f81/0x2340 [ 94.829663][ T4431] ? mount_bdev+0x287/0x3c0 [ 94.834173][ T4431] ? legacy_get_tree+0xe6/0x180 [ 94.839122][ T4431] ? vfs_get_tree+0x88/0x270 [ 94.843715][ T4431] ? do_new_mount+0x24a/0xa40 [ 94.848391][ T4431] ? __se_sys_mount+0x2d6/0x3c0 [ 94.853239][ T4431] ? do_syscall_64+0x4c/0xa0 [ 94.857843][ T4431] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.863920][ T4431] ? __wake_up+0x190/0x190 [ 94.868374][ T4431] ? get_parents+0x400/0xd20 [ 94.872968][ T4431] ? get_neighbors+0x9ba/0x1030 [ 94.877851][ T4431] ? reiserfs_prepare_for_journal+0x267/0x280 [ 94.883960][ T4431] ? fix_nodes+0x7b26/0x82d0 [ 94.888600][ T4431] do_balance+0x2fa/0x930 [ 94.892939][ T4431] ? get_right_neighbor_position+0x210/0x210 [ 94.898942][ T4431] reiserfs_paste_into_item+0x69b/0x7e0 [ 94.904500][ T4431] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 94.910269][ T4431] ? reiserfs_get_parent+0x270/0x270 [ 94.915574][ T4431] ? inode_get_bytes+0x73/0xa0 [ 94.920342][ T4431] ? _find_first_zero_bit+0x61/0x100 [ 94.925640][ T4431] reiserfs_add_entry+0x975/0xd40 [ 94.930696][ T4431] ? drop_new_inode+0x60/0x60 [ 94.935407][ T4431] ? journal_begin+0x1f1/0x350 [ 94.940176][ T4431] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 94.946696][ T4431] reiserfs_mkdir+0x68f/0x970 [ 94.951403][ T4431] ? reiserfs_symlink+0x770/0x770 [ 94.956447][ T4431] ? preempt_count_add+0x8d/0x190 [ 94.961481][ T4431] ? rwsem_write_trylock+0x12f/0x1b0 [ 94.966776][ T4431] ? lookup_one_len+0x18e/0x2c0 [ 94.971640][ T4431] ? lookup_one_common+0x450/0x450 [ 94.976773][ T4431] reiserfs_xattr_init+0x331/0x720 [ 94.981919][ T4431] reiserfs_fill_super+0x1f81/0x2340 [ 94.987233][ T4431] ? reiserfs_kill_sb+0x140/0x140 [ 94.992275][ T4431] ? snprintf+0xd7/0x120 [ 94.996530][ T4431] ? vscnprintf+0x80/0x80 [ 95.000871][ T4431] ? set_blocksize+0x1d3/0x350 [ 95.005647][ T4431] ? sb_set_blocksize+0xa5/0xe0 [ 95.010505][ T4431] mount_bdev+0x287/0x3c0 [ 95.014842][ T4431] ? reiserfs_kill_sb+0x140/0x140 [ 95.019894][ T4431] legacy_get_tree+0xe6/0x180 [ 95.024588][ T4431] ? remove_save_link+0x3c0/0x3c0 [ 95.029724][ T4431] vfs_get_tree+0x88/0x270 [ 95.034154][ T4431] do_new_mount+0x24a/0xa40 [ 95.038671][ T4431] __se_sys_mount+0x2d6/0x3c0 [ 95.043359][ T4431] ? __x64_sys_mount+0xc0/0xc0 [ 95.048130][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 95.053335][ T4431] ? __x64_sys_mount+0x1c/0xc0 [ 95.058188][ T4431] do_syscall_64+0x4c/0xa0 [ 95.062696][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 95.067383][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 95.072079][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.077996][ T4431] RIP: 0033:0x7fc076990eea [ 95.082435][ T4431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.102508][ T4431] RSP: 002b:00007ffc9bb447d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.110931][ T4431] RAX: ffffffffffffffda RBX: 00007ffc9bb44860 RCX: 00007fc076990eea [ 95.118933][ T4431] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007ffc9bb44820 [ 95.126917][ T4431] RBP: 0000200000000080 R08: 00007ffc9bb44860 R09: 000000000000800c [ 95.134905][ T4431] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040 [ 95.142890][ T4431] R13: 00007ffc9bb44820 R14: 0000000000001118 R15: 0000200000001380 [ 95.150877][ T4431] [ 95.153897][ T4431] [ 95.156312][ T4431] The buggy address belongs to the physical page: [ 95.162739][ T4431] page:ffffea00016efa80 refcount:3 mapcount:0 mapping:ffff888148de92f8 index:0x213 pfn:0x5bbea [ 95.173072][ T4431] memcg:ffff888024fb4000 [ 95.177321][ T4431] aops:def_blk_aops ino:700000 [ 95.182103][ T4431] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 95.191828][ T4431] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888148de92f8 [ 95.200497][ T4431] raw: 0000000000000213 ffff88806981fbc8 00000003ffffffff ffff888024fb4000 [ 95.209180][ T4431] page dumped because: kasan: bad access detected [ 95.215701][ T4431] page_owner tracks the page as allocated [ 95.221415][ T4431] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 4431, tgid 4431 (syz.0.17), ts 94590088160, free_ts 22827295286 [ 95.241448][ T4431] post_alloc_hook+0x173/0x1a0 [ 95.246250][ T4431] get_page_from_freelist+0x1a26/0x1ac0 [ 95.251871][ T4431] __alloc_pages+0x1df/0x4e0 [ 95.256470][ T4431] folio_alloc+0x1c/0x60 [ 95.260717][ T4431] filemap_alloc_folio+0xdb/0x460 [ 95.265743][ T4431] __filemap_get_folio+0x697/0xdd0 [ 95.270947][ T4431] pagecache_get_page+0x26/0x250 [ 95.275890][ T4431] __getblk_gfp+0x2d8/0xb20 [ 95.280435][ T4431] search_by_key+0x413/0x45e0 [ 95.285114][ T4431] reiserfs_read_locked_inode+0x154/0x2620 [ 95.290952][ T4431] reiserfs_fill_super+0x11ec/0x2340 [ 95.296266][ T4431] mount_bdev+0x287/0x3c0 [ 95.300607][ T4431] legacy_get_tree+0xe6/0x180 [ 95.305294][ T4431] vfs_get_tree+0x88/0x270 [ 95.309739][ T4431] do_new_mount+0x24a/0xa40 [ 95.314241][ T4431] __se_sys_mount+0x2d6/0x3c0 [ 95.318943][ T4431] page last free stack trace: [ 95.323715][ T4431] free_unref_page_prepare+0x8b4/0x9a0 [ 95.329182][ T4431] free_unref_page+0x2e/0x3f0 [ 95.333953][ T4431] free_contig_range+0x9d/0x150 [ 95.338811][ T4431] destroy_args+0x100/0xa31 [ 95.343316][ T4431] debug_vm_pgtable+0x32a/0x37e [ 95.348168][ T4431] do_one_initcall+0x214/0x7a0 [ 95.352933][ T4431] do_initcall_level+0x137/0x1e4 [ 95.357875][ T4431] do_initcalls+0x4b/0x8a [ 95.362208][ T4431] kernel_init_freeable+0x3fa/0x5ac [ 95.367411][ T4431] kernel_init+0x19/0x1b0 [ 95.371749][ T4431] ret_from_fork+0x1f/0x30 [ 95.376177][ T4431] [ 95.378512][ T4431] Memory state around the buggy address: [ 95.384308][ T4431] ffff88805bbeae80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.392387][ T4431] ffff88805bbeaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.400447][ T4431] >ffff88805bbeaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.408526][ T4431] ^ [ 95.413635][ T4431] ffff88805bbeb000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 95.421870][ T4431] ffff88805bbeb080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 95.429931][ T4431] ================================================================== [ 95.441423][ T4431] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.448652][ T4431] CPU: 0 PID: 4431 Comm: syz.0.17 Not tainted syzkaller #0 [ 95.455952][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.466015][ T4431] Call Trace: [ 95.469299][ T4431] [ 95.472233][ T4431] dump_stack_lvl+0x168/0x22e [ 95.476925][ T4431] ? memcpy+0x3c/0x60 [ 95.480931][ T4431] ? show_regs_print_info+0x12/0x12 [ 95.486151][ T4431] ? load_image+0x3b0/0x3b0 [ 95.490673][ T4431] panic+0x2c9/0x710 [ 95.494591][ T4431] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 95.500757][ T4431] ? bpf_jit_dump+0xd0/0xd0 [ 95.505274][ T4431] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 95.511185][ T4431] ? _raw_spin_unlock+0x40/0x40 [ 95.516054][ T4431] check_panic_on_warn+0x80/0xa0 [ 95.521003][ T4431] ? leaf_paste_entries+0x7a5/0x1110 [ 95.526291][ T4431] end_report+0x66/0x110 [ 95.530547][ T4431] kasan_report+0x118/0x140 [ 95.535066][ T4431] ? leaf_paste_entries+0x7a5/0x1110 [ 95.540377][ T4431] ? leaf_paste_entries+0x7a5/0x1110 [ 95.545666][ T4431] kasan_check_range+0x27b/0x290 [ 95.550626][ T4431] memmove+0x25/0x60 [ 95.554539][ T4431] leaf_paste_entries+0x7a5/0x1110 [ 95.559748][ T4431] balance_leaf+0xacec/0x10e60 [ 95.564531][ T4431] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 95.570441][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 95.575652][ T4431] ? _raw_spin_unlock+0x40/0x40 [ 95.580541][ T4431] ? do_balance+0x930/0x930 [ 95.585080][ T4431] ? stack_trace_save+0x98/0xe0 [ 95.589950][ T4431] ? __stack_depot_save+0x421/0x460 [ 95.595211][ T4431] ? kasan_set_track+0x60/0x70 [ 95.599988][ T4431] ? kasan_set_track+0x4b/0x70 [ 95.604760][ T4431] ? __kasan_kmalloc+0x8e/0xa0 [ 95.609640][ T4431] ? __kmalloc+0xb0/0x240 [ 95.613992][ T4431] ? fix_nodes+0x6044/0x82d0 [ 95.618594][ T4431] ? reiserfs_paste_into_item+0x5c8/0x7e0 [ 95.624320][ T4431] ? reiserfs_add_entry+0x975/0xd40 [ 95.629542][ T4431] ? reiserfs_mkdir+0x68f/0x970 [ 95.634404][ T4431] ? reiserfs_xattr_init+0x331/0x720 [ 95.639706][ T4431] ? reiserfs_fill_super+0x1f81/0x2340 [ 95.645182][ T4431] ? mount_bdev+0x287/0x3c0 [ 95.649696][ T4431] ? legacy_get_tree+0xe6/0x180 [ 95.654558][ T4431] ? vfs_get_tree+0x88/0x270 [ 95.659152][ T4431] ? do_new_mount+0x24a/0xa40 [ 95.663833][ T4431] ? __se_sys_mount+0x2d6/0x3c0 [ 95.668694][ T4431] ? do_syscall_64+0x4c/0xa0 [ 95.673303][ T4431] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.679385][ T4431] ? __wake_up+0x190/0x190 [ 95.683817][ T4431] ? get_parents+0x400/0xd20 [ 95.688421][ T4431] ? get_neighbors+0x9ba/0x1030 [ 95.693286][ T4431] ? reiserfs_prepare_for_journal+0x267/0x280 [ 95.699386][ T4431] ? fix_nodes+0x7b26/0x82d0 [ 95.704004][ T4431] do_balance+0x2fa/0x930 [ 95.708351][ T4431] ? get_right_neighbor_position+0x210/0x210 [ 95.714351][ T4431] reiserfs_paste_into_item+0x69b/0x7e0 [ 95.719907][ T4431] ? reiserfs_cut_from_item+0x1ef0/0x1ef0 [ 95.725663][ T4431] ? reiserfs_get_parent+0x270/0x270 [ 95.730967][ T4431] ? inode_get_bytes+0x73/0xa0 [ 95.735853][ T4431] ? _find_first_zero_bit+0x61/0x100 [ 95.741177][ T4431] reiserfs_add_entry+0x975/0xd40 [ 95.746233][ T4431] ? drop_new_inode+0x60/0x60 [ 95.750940][ T4431] ? journal_begin+0x1f1/0x350 [ 95.755716][ T4431] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 95.762145][ T4431] reiserfs_mkdir+0x68f/0x970 [ 95.766839][ T4431] ? reiserfs_symlink+0x770/0x770 [ 95.771878][ T4431] ? preempt_count_add+0x8d/0x190 [ 95.776914][ T4431] ? rwsem_write_trylock+0x12f/0x1b0 [ 95.782230][ T4431] ? lookup_one_len+0x18e/0x2c0 [ 95.787107][ T4431] ? lookup_one_common+0x450/0x450 [ 95.792248][ T4431] reiserfs_xattr_init+0x331/0x720 [ 95.797381][ T4431] reiserfs_fill_super+0x1f81/0x2340 [ 95.802697][ T4431] ? reiserfs_kill_sb+0x140/0x140 [ 95.807754][ T4431] ? snprintf+0xd7/0x120 [ 95.812112][ T4431] ? vscnprintf+0x80/0x80 [ 95.816456][ T4431] ? set_blocksize+0x1d3/0x350 [ 95.821237][ T4431] ? sb_set_blocksize+0xa5/0xe0 [ 95.826107][ T4431] mount_bdev+0x287/0x3c0 [ 95.830449][ T4431] ? reiserfs_kill_sb+0x140/0x140 [ 95.835493][ T4431] legacy_get_tree+0xe6/0x180 [ 95.840191][ T4431] ? remove_save_link+0x3c0/0x3c0 [ 95.845233][ T4431] vfs_get_tree+0x88/0x270 [ 95.849659][ T4431] do_new_mount+0x24a/0xa40 [ 95.854173][ T4431] __se_sys_mount+0x2d6/0x3c0 [ 95.858860][ T4431] ? __x64_sys_mount+0xc0/0xc0 [ 95.863641][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 95.868894][ T4431] ? __x64_sys_mount+0x1c/0xc0 [ 95.873680][ T4431] do_syscall_64+0x4c/0xa0 [ 95.878121][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 95.883074][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 95.887854][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.893784][ T4431] RIP: 0033:0x7fc076990eea [ 95.898211][ T4431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.917832][ T4431] RSP: 002b:00007ffc9bb447d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.926261][ T4431] RAX: ffffffffffffffda RBX: 00007ffc9bb44860 RCX: 00007fc076990eea [ 95.934241][ T4431] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007ffc9bb44820 [ 95.942224][ T4431] RBP: 0000200000000080 R08: 00007ffc9bb44860 R09: 000000000000800c [ 95.950382][ T4431] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040 [ 95.958360][ T4431] R13: 00007ffc9bb44820 R14: 0000000000001118 R15: 0000200000001380 [ 95.966349][ T4431] [ 95.969695][ T4431] Kernel Offset: disabled [ 95.974029][ T4431] Rebooting in 86400 seconds..