Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts.
2025/07/07 08:58:06 ignoring optional flag "sandboxArg"="0"
2025/07/07 08:58:07 parsed 1 programs
syzkaller login: [ 55.724470][ T4187] cgroup: Unknown subsys name 'net'
[ 55.856174][ T4187] cgroup: Unknown subsys name 'rlimit'
[ 57.052758][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 58.691790][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.699799][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.714136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 58.734779][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.742874][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.751760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 60.421346][ T4269] chnl_net:caif_netlink_parms(): no params data found
[ 60.460853][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.468408][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.476228][ T4269] device bridge_slave_0 entered promiscuous mode
[ 60.484858][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.492006][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.499665][ T4269] device bridge_slave_1 entered promiscuous mode
[ 60.518944][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.529791][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.551379][ T4269] team0: Port device team_slave_0 added
[ 60.558328][ T4269] team0: Port device team_slave_1 added
[ 60.574732][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.581705][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.607883][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.620879][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.627827][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.654132][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.696719][ T4269] device hsr_slave_0 entered promiscuous mode
[ 60.704710][ T4269] device hsr_slave_1 entered promiscuous mode
[ 60.822841][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 60.833387][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 60.842595][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 60.852155][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 60.892324][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.899465][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.907476][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.914568][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.965009][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[ 60.977806][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 60.988044][ T517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.996345][ T517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 61.010148][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[ 61.037159][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 61.045563][ T517] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.052648][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 61.072385][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 61.081526][ T517] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.088566][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 61.097857][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 61.108100][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 61.117020][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 61.129056][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 61.142618][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 61.167661][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 61.260618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 61.268136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 61.279695][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 61.311759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 61.328697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 61.337481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 61.346907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 61.357192][ T4269] device veth0_vlan entered promiscuous mode
[ 61.375414][ T4269] device veth1_vlan entered promiscuous mode
[ 61.401359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 61.409863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 61.420161][ T4269] device veth0_macvtap entered promiscuous mode
[ 61.430790][ T4269] device veth1_macvtap entered promiscuous mode
[ 61.452895][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 61.460637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 61.468646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 61.477045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 61.485665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 61.519133][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 61.528352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 61.537253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 61.548939][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.558365][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.567137][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.576234][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.707115][ T4269] syz-executor (4269) used greatest stack depth: 20896 bytes left
2025/07/07 08:58:15 executed programs: 0
[ 62.349443][ T4293] chnl_net:caif_netlink_parms(): no params data found
[ 62.412273][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.419409][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.427558][ T4293] device bridge_slave_0 entered promiscuous mode
[ 62.436182][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.444513][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.452787][ T4293] device bridge_slave_1 entered promiscuous mode
[ 62.483820][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.496204][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.524575][ T4293] team0: Port device team_slave_0 added
[ 62.532642][ T4293] team0: Port device team_slave_1 added
[ 62.564128][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.571219][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.597381][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.610040][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.617302][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.645540][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.684513][ T4293] device hsr_slave_0 entered promiscuous mode
[ 62.691273][ T4293] device hsr_slave_1 entered promiscuous mode
[ 62.697795][ T4293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 62.706074][ T4293] Cannot create hsr debugfs directory
[ 62.792007][ T4293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.310863][ T4263] Bluetooth: hci0: command 0x0409 tx timeout
[ 65.906588][ T4293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.381082][ T4265] Bluetooth: hci0: command 0x041b tx timeout
[ 67.044749][ T4293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 67.106935][ T4293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 67.242003][ T4293] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 67.250604][ T4293] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 67.259338][ T4293] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 67.269025][ T4293] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 67.312234][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.328684][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 67.336564][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 67.347161][ T4293] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.358067][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 67.366972][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 67.376078][ T517] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.383154][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.392903][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 67.412759][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 67.421492][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 67.429777][ T517] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.436869][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.450802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 67.459370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 67.477108][ T4293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 67.488620][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 67.513490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 67.522996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 67.531704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 67.542146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 67.550686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 67.558974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 67.567718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 67.576898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 67.585456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 67.593763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 67.683279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 67.691266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 67.702829][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 67.715199][ T154] device hsr_slave_0 left promiscuous mode
[ 67.721932][ T154] device hsr_slave_1 left promiscuous mode
[ 67.728179][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 67.735694][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 67.744186][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 67.752835][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 67.760590][ T154] device bridge_slave_1 left promiscuous mode
[ 67.767335][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.780073][ T154] device bridge_slave_0 left promiscuous mode
[ 67.787162][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.803081][ T154] device veth1_macvtap left promiscuous mode
[ 67.809216][ T154] device veth0_macvtap left promiscuous mode
[ 67.815405][ T154] device veth1_vlan left promiscuous mode
[ 67.821818][ T154] device veth0_vlan left promiscuous mode
[ 67.938594][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 67.953418][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 67.967598][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 67.980609][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 68.027790][ T154] bond0 (unregistering): Released all slaves
[ 68.116092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 68.124664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 68.139587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 68.148039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 68.156327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 68.164693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 68.179093][ T4293] device veth0_vlan entered promiscuous mode
[ 68.196083][ T4293] device veth1_vlan entered promiscuous mode
[ 68.214364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 68.223354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 68.232132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 68.241179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 68.252334][ T4293] device veth0_macvtap entered promiscuous mode
[ 68.265882][ T4293] device veth1_macvtap entered promiscuous mode
[ 68.279591][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 68.287059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 68.295431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 68.304154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 68.312791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 68.325286][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 68.332854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 68.344026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 68.355087][ T4293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.364143][ T4293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.373091][ T4293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.381904][ T4293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.430648][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.438571][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.455581][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.457325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 68.471531][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[ 68.477581][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.494014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 68.605574][ T4312] loop0: detected capacity change from 0 to 8192
[ 68.633398][ T4312] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 68.652748][ T4312] REISERFS (device loop0): using ordered data mode
[ 68.659269][ T4312] reiserfs: using flush barriers
[ 68.683066][ T4312] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 68.711296][ T4312] REISERFS (device loop0): checking transaction log (loop0)
[ 68.722128][ T4312] REISERFS (device loop0): Using tea hash to sort names
[ 68.731567][ T4312] ==================================================================
[ 68.739759][ T4312] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x73c/0x10c0
[ 68.747307][ T4312] Read of size 18446744073709551584 at addr ffff88806a13ffa4 by task syz.0.16/4312
[ 68.756578][ T4312]
[ 68.758900][ T4312] CPU: 0 PID: 4312 Comm: syz.0.16 Not tainted 5.15.186-syzkaller #0
[ 68.766867][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 68.776920][ T4312] Call Trace:
[ 68.780195][ T4312]
[ 68.783115][ T4312] dump_stack_lvl+0x168/0x230
[ 68.787798][ T4312] ? show_regs_print_info+0x20/0x20
[ 68.792996][ T4312] ? _printk+0xcc/0x110
[ 68.797155][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 68.802441][ T4312] ? load_image+0x3b0/0x3b0
[ 68.806936][ T4312] ? __lock_acquire+0x13ad/0x7c60
[ 68.811961][ T4312] print_address_description+0x60/0x2d0
[ 68.817497][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 68.822777][ T4312] kasan_report+0xdf/0x130
[ 68.827191][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 68.832465][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 68.837747][ T4312] kasan_check_range+0x27b/0x290
[ 68.842682][ T4312] memmove+0x25/0x60
[ 68.846580][ T4312] leaf_paste_entries+0x73c/0x10c0
[ 68.851699][ T4312] balance_leaf+0xacec/0x10e60
[ 68.856477][ T4312] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 68.862458][ T4312] ? lock_chain_count+0x20/0x20
[ 68.867304][ T4312] ? _raw_spin_lock_irqsave+0x7f/0xf0
[ 68.872672][ T4312] ? _raw_spin_unlock_irqrestore+0x82/0x100
[ 68.878565][ T4312] ? do_balance+0x930/0x930
[ 68.883064][ T4312] ? _raw_spin_unlock+0x40/0x40
[ 68.887908][ T4312] ? stack_trace_snprint+0xf0/0xf0
[ 68.893014][ T4312] ? stack_depot_save+0x404/0x440
[ 68.898043][ T4312] ? __kasan_kmalloc+0xcc/0xf0
[ 68.902802][ T4312] ? __kasan_kmalloc+0xb5/0xf0
[ 68.907556][ T4312] ? fix_nodes+0x6044/0x82d0
[ 68.912139][ T4312] ? reiserfs_paste_into_item+0x5c8/0x7e0
[ 68.917848][ T4312] ? reiserfs_add_entry+0x975/0xd40
[ 68.923033][ T4312] ? reiserfs_mkdir+0x68f/0x970
[ 68.927875][ T4312] ? reiserfs_xattr_init+0x331/0x720
[ 68.933152][ T4312] ? reiserfs_fill_super+0x1fa6/0x23e0
[ 68.938598][ T4312] ? mount_bdev+0x287/0x3c0
[ 68.943094][ T4312] ? legacy_get_tree+0xe6/0x180
[ 68.947940][ T4312] ? vfs_get_tree+0x88/0x270
[ 68.952524][ T4312] ? do_new_mount+0x24a/0xa40
[ 68.957194][ T4312] ? __se_sys_mount+0x2d6/0x3c0
[ 68.962036][ T4312] ? do_syscall_64+0x4c/0xa0
[ 68.966620][ T4312] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.972714][ T4312] ? __wake_up_bit+0x100/0x100
[ 68.977487][ T4312] ? get_parents+0x400/0xd20
[ 68.982083][ T4312] ? get_neighbors+0x9ba/0x1030
[ 68.986939][ T4312] ? reiserfs_prepare_for_journal+0x269/0x280
[ 68.993014][ T4312] ? fix_nodes+0x7b26/0x82d0
[ 68.997636][ T4312] do_balance+0x2fa/0x930
[ 69.001976][ T4312] ? get_right_neighbor_position+0x210/0x210
[ 69.007967][ T4312] reiserfs_paste_into_item+0x69b/0x7e0
[ 69.013521][ T4312] ? reiserfs_cut_from_item+0x1ef0/0x1ef0
[ 69.019312][ T4312] ? reiserfs_get_parent+0x270/0x270
[ 69.024594][ T4312] ? inode_get_bytes+0x73/0xa0
[ 69.029361][ T4312] ? memset+0x1e/0x40
[ 69.033495][ T4312] ? _find_first_zero_bit+0x60/0xf0
[ 69.038699][ T4312] reiserfs_add_entry+0x975/0xd40
[ 69.043744][ T4312] ? drop_new_inode+0x60/0x60
[ 69.048463][ T4312] ? journal_begin+0x1f1/0x350
[ 69.053230][ T4312] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 69.059656][ T4312] reiserfs_mkdir+0x68f/0x970
[ 69.064350][ T4312] ? reiserfs_symlink+0x770/0x770
[ 69.069379][ T4312] ? preempt_count_add+0x8d/0x190
[ 69.074402][ T4312] ? rwsem_write_trylock+0x12f/0x1b0
[ 69.079688][ T4312] ? lookup_one_len+0x18e/0x2c0
[ 69.084540][ T4312] ? lookup_one_common+0x460/0x460
[ 69.089664][ T4312] reiserfs_xattr_init+0x331/0x720
[ 69.094786][ T4312] reiserfs_fill_super+0x1fa6/0x23e0
[ 69.100090][ T4312] ? reiserfs_kill_sb+0x140/0x140
[ 69.105105][ T4312] ? snprintf+0xd7/0x120
[ 69.109352][ T4312] ? vscnprintf+0x80/0x80
[ 69.113681][ T4312] ? set_blocksize+0x1f1/0x370
[ 69.118447][ T4312] ? sb_set_blocksize+0xa5/0xe0
[ 69.123294][ T4312] mount_bdev+0x287/0x3c0
[ 69.127623][ T4312] ? reiserfs_kill_sb+0x140/0x140
[ 69.132650][ T4312] legacy_get_tree+0xe6/0x180
[ 69.137325][ T4312] ? remove_save_link+0x3c0/0x3c0
[ 69.142350][ T4312] vfs_get_tree+0x88/0x270
[ 69.146773][ T4312] do_new_mount+0x24a/0xa40
[ 69.151288][ T4312] __se_sys_mount+0x2d6/0x3c0
[ 69.155969][ T4312] ? __x64_sys_mount+0xc0/0xc0
[ 69.160825][ T4312] ? lockdep_hardirqs_on+0x94/0x140
[ 69.166035][ T4312] ? __x64_sys_mount+0x1c/0xc0
[ 69.170806][ T4312] do_syscall_64+0x4c/0xa0
[ 69.175221][ T4312] ? clear_bhb_loop+0x30/0x80
[ 69.179893][ T4312] ? clear_bhb_loop+0x30/0x80
[ 69.184572][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.190471][ T4312] RIP: 0033:0x7efdb3d570ca
[ 69.190509][ T4312] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.190523][ T4312] RSP: 002b:00007ffcd8727568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 69.223035][ T4312] RAX: ffffffffffffffda RBX: 00007ffcd87275f0 RCX: 00007efdb3d570ca
[ 69.231004][ T4312] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007ffcd87275b0
[ 69.238971][ T4312] RBP: 0000200000000080 R08: 00007ffcd87275f0 R09: 000000000000800c
[ 69.246939][ T4312] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040
[ 69.254910][ T4312] R13: 00007ffcd87275b0 R14: 0000000000001118 R15: 0000200000001380
[ 69.262904][ T4312]
[ 69.265923][ T4312]
[ 69.268235][ T4312] The buggy address belongs to the page:
[ 69.273859][ T4312] page:ffffea0001a84fc0 refcount:3 mapcount:0 mapping:ffff8881408ccf30 index:0x213 pfn:0x6a13f
[ 69.284187][ T4312] memcg:ffff88807e42c000
[ 69.288417][ T4312] aops:def_blk_aops ino:700000
[ 69.293178][ T4312] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 69.302557][ T4312] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff8881408ccf30
[ 69.311137][ T4312] raw: 0000000000000213 ffff88806eafc2b8 00000003ffffffff ffff88807e42c000
[ 69.319705][ T4312] page dumped because: kasan: bad access detected
[ 69.326112][ T4312] page_owner tracks the page as allocated
[ 69.331818][ T4312] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4312, ts 68721631979, free_ts 67664779379
[ 69.348923][ T4312] get_page_from_freelist+0x1b77/0x1c60
[ 69.354469][ T4312] __alloc_pages+0x1e1/0x470
[ 69.359050][ T4312] __page_cache_alloc+0xd2/0x3f0
[ 69.363976][ T4312] pagecache_get_page+0x986/0xef0
[ 69.368992][ T4312] __getblk_gfp+0x249/0xb70
[ 69.373484][ T4312] search_by_key+0x424/0x4390
[ 69.378159][ T4312] reiserfs_read_locked_inode+0x154/0x2620
[ 69.383959][ T4312] reiserfs_fill_super+0x124b/0x23e0
[ 69.389227][ T4312] mount_bdev+0x287/0x3c0
[ 69.393537][ T4312] legacy_get_tree+0xe6/0x180
[ 69.398193][ T4312] vfs_get_tree+0x88/0x270
[ 69.402588][ T4312] do_new_mount+0x24a/0xa40
[ 69.407080][ T4312] __se_sys_mount+0x2d6/0x3c0
[ 69.411734][ T4312] do_syscall_64+0x4c/0xa0
[ 69.416132][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.422010][ T4312] page last free stack trace:
[ 69.426659][ T4312] free_unref_page_prepare+0x637/0x6c0
[ 69.432111][ T4312] free_unref_page_list+0x122/0x7e0
[ 69.437289][ T4312] release_pages+0x184b/0x1bb0
[ 69.442205][ T4312] tlb_finish_mmu+0x164/0x2e0
[ 69.446945][ T4312] exit_mmap+0x3a6/0x5f0
[ 69.451166][ T4312] __mmput+0x115/0x3b0
[ 69.455225][ T4312] exit_mm+0x567/0x6c0
[ 69.459274][ T4312] do_exit+0x5a1/0x20a0
[ 69.463409][ T4312] do_group_exit+0x12e/0x300
[ 69.467977][ T4312] __x64_sys_exit_group+0x3b/0x40
[ 69.472992][ T4312] do_syscall_64+0x4c/0xa0
[ 69.477392][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.483264][ T4312]
[ 69.485568][ T4312] Memory state around the buggy address:
[ 69.491176][ T4312] ffff88806a13fe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.499221][ T4312] ffff88806a13ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.507257][ T4312] >ffff88806a13ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 69.515291][ T4312] ^
[ 69.520381][ T4312] ffff88806a140000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 69.528420][ T4312] ffff88806a140080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 69.536457][ T4312] ==================================================================
[ 69.544489][ T4312] Disabling lock debugging due to kernel taint
[ 69.568459][ T4312] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.575676][ T4312] CPU: 1 PID: 4312 Comm: syz.0.16 Tainted: G B 5.15.186-syzkaller #0
[ 69.585042][ T4312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 69.595074][ T4312] Call Trace:
[ 69.598334][ T4312]
[ 69.601244][ T4312] dump_stack_lvl+0x168/0x230
[ 69.605905][ T4312] ? show_regs_print_info+0x20/0x20
[ 69.611195][ T4312] ? load_image+0x3b0/0x3b0
[ 69.615808][ T4312] panic+0x2c9/0x7f0
[ 69.619690][ T4312] ? bpf_jit_dump+0xd0/0xd0
[ 69.624174][ T4312] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 69.630048][ T4312] ? _raw_spin_unlock+0x40/0x40
[ 69.634878][ T4312] ? print_memory_metadata+0x314/0x400
[ 69.640324][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 69.645625][ T4312] check_panic_on_warn+0x80/0xa0
[ 69.650549][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 69.655821][ T4312] end_report+0x6d/0xf0
[ 69.660115][ T4312] kasan_report+0x102/0x130
[ 69.664608][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 69.669882][ T4312] ? leaf_paste_entries+0x73c/0x10c0
[ 69.675151][ T4312] kasan_check_range+0x27b/0x290
[ 69.680071][ T4312] memmove+0x25/0x60
[ 69.683942][ T4312] leaf_paste_entries+0x73c/0x10c0
[ 69.689037][ T4312] balance_leaf+0xacec/0x10e60
[ 69.693779][ T4312] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 69.699739][ T4312] ? lock_chain_count+0x20/0x20
[ 69.704567][ T4312] ? _raw_spin_lock_irqsave+0x7f/0xf0
[ 69.709915][ T4312] ? _raw_spin_unlock_irqrestore+0x82/0x100
[ 69.715803][ T4312] ? do_balance+0x930/0x930
[ 69.720284][ T4312] ? _raw_spin_unlock+0x40/0x40
[ 69.725132][ T4312] ? stack_trace_snprint+0xf0/0xf0
[ 69.730226][ T4312] ? stack_depot_save+0x404/0x440
[ 69.735239][ T4312] ? __kasan_kmalloc+0xcc/0xf0
[ 69.739978][ T4312] ? __kasan_kmalloc+0xb5/0xf0
[ 69.744715][ T4312] ? fix_nodes+0x6044/0x82d0
[ 69.749285][ T4312] ? reiserfs_paste_into_item+0x5c8/0x7e0
[ 69.754980][ T4312] ? reiserfs_add_entry+0x975/0xd40
[ 69.760152][ T4312] ? reiserfs_mkdir+0x68f/0x970
[ 69.764978][ T4312] ? reiserfs_xattr_init+0x331/0x720
[ 69.770246][ T4312] ? reiserfs_fill_super+0x1fa6/0x23e0
[ 69.775690][ T4312] ? mount_bdev+0x287/0x3c0
[ 69.780169][ T4312] ? legacy_get_tree+0xe6/0x180
[ 69.784990][ T4312] ? vfs_get_tree+0x88/0x270
[ 69.789556][ T4312] ? do_new_mount+0x24a/0xa40
[ 69.794207][ T4312] ? __se_sys_mount+0x2d6/0x3c0
[ 69.799035][ T4312] ? do_syscall_64+0x4c/0xa0
[ 69.803603][ T4312] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.809678][ T4312] ? __wake_up_bit+0x100/0x100
[ 69.814421][ T4312] ? get_parents+0x400/0xd20
[ 69.818987][ T4312] ? get_neighbors+0x9ba/0x1030
[ 69.823813][ T4312] ? reiserfs_prepare_for_journal+0x269/0x280
[ 69.829858][ T4312] ? fix_nodes+0x7b26/0x82d0
[ 69.834434][ T4312] do_balance+0x2fa/0x930
[ 69.838755][ T4312] ? get_right_neighbor_position+0x210/0x210
[ 69.844717][ T4312] reiserfs_paste_into_item+0x69b/0x7e0
[ 69.850253][ T4312] ? reiserfs_cut_from_item+0x1ef0/0x1ef0
[ 69.855969][ T4312] ? reiserfs_get_parent+0x270/0x270
[ 69.861405][ T4312] ? inode_get_bytes+0x73/0xa0
[ 69.866148][ T4312] ? memset+0x1e/0x40
[ 69.870288][ T4312] ? _find_first_zero_bit+0x60/0xf0
[ 69.875472][ T4312] reiserfs_add_entry+0x975/0xd40
[ 69.880481][ T4312] ? drop_new_inode+0x60/0x60
[ 69.885150][ T4312] ? journal_begin+0x1f1/0x350
[ 69.889890][ T4312] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 69.896282][ T4312] reiserfs_mkdir+0x68f/0x970
[ 69.901114][ T4312] ? reiserfs_symlink+0x770/0x770
[ 69.906129][ T4312] ? preempt_count_add+0x8d/0x190
[ 69.911216][ T4312] ? rwsem_write_trylock+0x12f/0x1b0
[ 69.916479][ T4312] ? lookup_one_len+0x18e/0x2c0
[ 69.921307][ T4312] ? lookup_one_common+0x460/0x460
[ 69.926396][ T4312] reiserfs_xattr_init+0x331/0x720
[ 69.931487][ T4312] reiserfs_fill_super+0x1fa6/0x23e0
[ 69.936751][ T4312] ? reiserfs_kill_sb+0x140/0x140
[ 69.941750][ T4312] ? snprintf+0xd7/0x120
[ 69.945968][ T4312] ? vscnprintf+0x80/0x80
[ 69.950531][ T4312] ? set_blocksize+0x1f1/0x370
[ 69.955269][ T4312] ? sb_set_blocksize+0xa5/0xe0
[ 69.960092][ T4312] mount_bdev+0x287/0x3c0
[ 69.964397][ T4312] ? reiserfs_kill_sb+0x140/0x140
[ 69.969399][ T4312] legacy_get_tree+0xe6/0x180
[ 69.974051][ T4312] ? remove_save_link+0x3c0/0x3c0
[ 69.979053][ T4312] vfs_get_tree+0x88/0x270
[ 69.983448][ T4312] do_new_mount+0x24a/0xa40
[ 69.987930][ T4312] __se_sys_mount+0x2d6/0x3c0
[ 69.992597][ T4312] ? __x64_sys_mount+0xc0/0xc0
[ 69.997365][ T4312] ? lockdep_hardirqs_on+0x94/0x140
[ 70.002546][ T4312] ? __x64_sys_mount+0x1c/0xc0
[ 70.007290][ T4312] do_syscall_64+0x4c/0xa0
[ 70.011687][ T4312] ? clear_bhb_loop+0x30/0x80
[ 70.016343][ T4312] ? clear_bhb_loop+0x30/0x80
[ 70.021000][ T4312] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.026873][ T4312] RIP: 0033:0x7efdb3d570ca
[ 70.031265][ T4312] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 70.050850][ T4312] RSP: 002b:00007ffcd8727568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 70.059250][ T4312] RAX: ffffffffffffffda RBX: 00007ffcd87275f0 RCX: 00007efdb3d570ca
[ 70.067204][ T4312] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007ffcd87275b0
[ 70.075159][ T4312] RBP: 0000200000000080 R08: 00007ffcd87275f0 R09: 000000000000800c
[ 70.083216][ T4312] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040
[ 70.091169][ T4312] R13: 00007ffcd87275b0 R14: 0000000000001118 R15: 0000200000001380
[ 70.099125][ T4312]
[ 70.102323][ T4312] Kernel Offset: disabled
[ 70.106658][ T4312] Rebooting in 86400 seconds..