Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. 2026/05/28 23:21:49 parsed 1 programs [ 62.837324][ T4284] cgroup: Unknown subsys name 'net' [ 62.976761][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.230397][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.454506][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 65.495574][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.503504][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.511929][ T4294] device bridge_slave_0 entered promiscuous mode [ 65.520670][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.527992][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.535792][ T4294] device bridge_slave_1 entered promiscuous mode [ 65.553894][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.564635][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.585305][ T4294] team0: Port device team_slave_0 added [ 65.592813][ T4294] team0: Port device team_slave_1 added [ 65.608117][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.615114][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.641023][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.653547][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.660498][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.686415][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.715028][ T4294] device hsr_slave_0 entered promiscuous mode [ 65.722622][ T4294] device hsr_slave_1 entered promiscuous mode [ 65.803937][ T4294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.814217][ T4294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.823875][ T4294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.833318][ T4294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.854829][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.862049][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.869810][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.876929][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.916652][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.931897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.943098][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.951752][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.959787][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.973111][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.985539][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.994447][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.001663][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.020032][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.029647][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.036808][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.054892][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.064054][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.075844][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.087188][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.098945][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.111784][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.245102][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.253388][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.268737][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.286554][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.304427][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.313522][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.321783][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.331944][ T4294] device veth0_vlan entered promiscuous mode [ 66.342508][ T4294] device veth1_vlan entered promiscuous mode [ 66.360802][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.369576][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.379915][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.390340][ T4294] device veth0_macvtap entered promiscuous mode [ 66.400742][ T4294] device veth1_macvtap entered promiscuous mode [ 66.416009][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.424570][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.434603][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.446217][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.454812][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.463749][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.474817][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.484504][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.494129][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.503238][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.650101][ T2948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.257247][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.266044][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.274301][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.284138][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.292860][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.300110][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.349005][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.359964][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.369763][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.389152][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.397064][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.405551][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/28 23:21:56 executed programs: 0 [ 68.904653][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.912931][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.920652][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.929582][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.938619][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.946049][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.042238][ T4373] chnl_net:caif_netlink_parms(): no params data found [ 69.080440][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.087673][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.095560][ T4373] device bridge_slave_0 entered promiscuous mode [ 69.104258][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.111601][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.119277][ T4373] device bridge_slave_1 entered promiscuous mode [ 69.140401][ T4373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.152842][ T4373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.173344][ T4373] team0: Port device team_slave_0 added [ 69.180403][ T4373] team0: Port device team_slave_1 added [ 69.196264][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.203341][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.229309][ T4373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.241731][ T4373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.248688][ T4373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.274686][ T4373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.302433][ T4373] device hsr_slave_0 entered promiscuous mode [ 69.309029][ T4373] device hsr_slave_1 entered promiscuous mode [ 69.315892][ T4373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.323826][ T4373] Cannot create hsr debugfs directory [ 69.510376][ T2948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.962239][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 71.284125][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290609][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.619654][ T2948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.694963][ T2948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.468390][ T2948] device hsr_slave_0 left promiscuous mode [ 72.477377][ T2948] device hsr_slave_1 left promiscuous mode [ 72.484404][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.494731][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.503696][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.511316][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.519135][ T2948] device bridge_slave_1 left promiscuous mode [ 72.526518][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.538249][ T2948] device bridge_slave_0 left promiscuous mode [ 72.545880][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.584755][ T2948] device veth1_macvtap left promiscuous mode [ 72.591652][ T2948] device veth0_macvtap left promiscuous mode [ 72.597778][ T2948] device veth1_vlan left promiscuous mode [ 72.604053][ T2948] device veth0_vlan left promiscuous mode [ 72.926983][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 72.955129][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 72.981708][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.009206][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.042462][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 73.187008][ T2948] bond0 (unregistering): Released all slaves [ 73.291625][ T4373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.300251][ T4373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.312969][ T4373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.322345][ T4373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.379809][ T4373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.407381][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.415669][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.426779][ T4373] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.436193][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.445738][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.454725][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.461864][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.469898][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.487999][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.498155][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.507350][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.514685][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.534211][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.548177][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.557375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.566278][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.574909][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.585254][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.595334][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.604007][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.613036][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.625596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.635566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.645564][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.847501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.855344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.872204][ T4373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.908542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.918717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.943070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.956343][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.974621][ T4373] device veth0_vlan entered promiscuous mode [ 73.980983][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.995483][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.009134][ T4373] device veth1_vlan entered promiscuous mode [ 74.036409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.045368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.053895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.062577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.094534][ T4373] device veth0_macvtap entered promiscuous mode [ 74.110032][ T4373] device veth1_macvtap entered promiscuous mode [ 74.140209][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.148006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.157972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.166264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.176257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.190884][ T4373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.199103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.207972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.221713][ T4373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.230438][ T4373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.239906][ T4373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.249291][ T4373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.299707][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.314860][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.324403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.342810][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.350657][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.359042][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.442965][ T4438] loop0: detected capacity change from 0 to 8192 [ 74.460972][ T4438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 74.474659][ T4438] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.484660][ T4438] REISERFS (device loop0): using ordered data mode [ 74.491249][ T4438] reiserfs: using flush barriers [ 74.498003][ T4438] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.515267][ T4438] REISERFS (device loop0): checking transaction log (loop0) [ 74.543961][ T4438] REISERFS (device loop0): Using tea hash to sort names [ 74.553124][ T4438] ================================================================== [ 74.561210][ T4438] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x769/0x10e0 [ 74.568785][ T4438] Read of size 18446744073709551584 at addr ffff88806b517fa4 by task syz.0.17/4438 [ 74.578057][ T4438] [ 74.580386][ T4438] CPU: 0 PID: 4438 Comm: syz.0.17 Not tainted syzkaller #0 [ 74.587566][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.597610][ T4438] Call Trace: [ 74.600880][ T4438] [ 74.603800][ T4438] dump_stack_lvl+0x188/0x24e [ 74.608471][ T4438] ? __lock_acquire+0x7d10/0x7d10 [ 74.613485][ T4438] ? show_regs_print_info+0x12/0x12 [ 74.618669][ T4438] ? load_image+0x400/0x400 [ 74.623164][ T4438] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 74.628628][ T4438] ? __virt_addr_valid+0x188/0x540 [ 74.633734][ T4438] ? __virt_addr_valid+0x465/0x540 [ 74.638838][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 74.644113][ T4438] print_report+0xa8/0x210 [ 74.648522][ T4438] kasan_report+0x10b/0x140 [ 74.653020][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 74.658296][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 74.663570][ T4438] kasan_check_range+0x235/0x290 [ 74.668504][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 74.673776][ T4438] memmove+0x25/0x60 [ 74.677662][ T4438] leaf_paste_entries+0x769/0x10e0 [ 74.682766][ T4438] balance_leaf+0xb2e5/0x10ec0 [ 74.687524][ T4438] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 74.693500][ T4438] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 74.699381][ T4438] ? lockdep_hardirqs_on+0x94/0x140 [ 74.704571][ T4438] ? _raw_spin_unlock+0x40/0x40 [ 74.709416][ T4438] ? do_balance+0x930/0x930 [ 74.713910][ T4438] ? stack_trace_save+0xa6/0xf0 [ 74.718749][ T4438] ? __stack_depot_save+0x421/0x460 [ 74.723944][ T4438] ? kasan_set_track+0x60/0x70 [ 74.728696][ T4438] ? kasan_set_track+0x4b/0x70 [ 74.733453][ T4438] ? __kasan_kmalloc+0x8e/0xa0 [ 74.738208][ T4438] ? __kmalloc+0xb0/0x240 [ 74.742529][ T4438] ? fix_nodes+0x60a2/0x8340 [ 74.747107][ T4438] ? reiserfs_paste_into_item+0x60b/0x810 [ 74.752814][ T4438] ? reiserfs_add_entry+0xa42/0xe10 [ 74.758005][ T4438] ? reiserfs_mkdir+0x6bc/0x920 [ 74.762847][ T4438] ? reiserfs_xattr_init+0x331/0x720 [ 74.768121][ T4438] ? reiserfs_fill_super+0x1fee/0x23b0 [ 74.773584][ T4438] ? mount_bdev+0x287/0x3c0 [ 74.778081][ T4438] ? legacy_get_tree+0xe6/0x180 [ 74.782919][ T4438] ? vfs_get_tree+0x88/0x270 [ 74.787497][ T4438] ? do_new_mount+0x24a/0xa40 [ 74.792160][ T4438] ? __se_sys_mount+0x2e3/0x3d0 [ 74.797001][ T4438] ? do_syscall_64+0x4c/0xa0 [ 74.801576][ T4438] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.807637][ T4438] ? __wake_up+0x1a0/0x1a0 [ 74.812049][ T4438] ? get_parents+0x400/0xd20 [ 74.816632][ T4438] ? get_neighbors+0x9ba/0x1030 [ 74.821494][ T4438] ? reiserfs_prepare_for_journal+0x267/0x280 [ 74.827550][ T4438] ? fix_nodes+0x7bc3/0x8340 [ 74.832141][ T4438] do_balance+0x318/0x930 [ 74.836462][ T4438] ? get_right_neighbor_position+0x210/0x210 [ 74.842436][ T4438] ? reiserfs_paste_into_item+0x3b0/0x810 [ 74.848144][ T4438] reiserfs_paste_into_item+0x6dd/0x810 [ 74.853682][ T4438] ? reiserfs_cut_from_item+0x1fc0/0x1fc0 [ 74.859409][ T4438] ? reiserfs_get_parent+0x2f0/0x2f0 [ 74.864701][ T4438] ? inode_get_bytes+0x73/0xa0 [ 74.869470][ T4438] ? _find_first_zero_bit+0x61/0x100 [ 74.874756][ T4438] reiserfs_add_entry+0xa42/0xe10 [ 74.879791][ T4438] ? drop_new_inode+0x60/0x60 [ 74.884536][ T4438] ? journal_begin+0x1f1/0x350 [ 74.889289][ T4438] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 74.895693][ T4438] reiserfs_mkdir+0x6bc/0x920 [ 74.900366][ T4438] ? reiserfs_symlink+0x790/0x790 [ 74.905381][ T4438] ? rwsem_write_trylock+0x135/0x1c0 [ 74.910654][ T4438] ? lookup_one_len+0x19d/0x2d0 [ 74.915491][ T4438] ? lookup_one_common+0x450/0x450 [ 74.920591][ T4438] reiserfs_xattr_init+0x331/0x720 [ 74.925696][ T4438] reiserfs_fill_super+0x1fee/0x23b0 [ 74.930992][ T4438] ? reiserfs_kill_sb+0x140/0x140 [ 74.936028][ T4438] ? snprintf+0xe5/0x140 [ 74.940279][ T4438] ? vscnprintf+0x80/0x80 [ 74.944604][ T4438] ? set_blocksize+0x1d0/0x470 [ 74.949363][ T4438] ? sb_set_blocksize+0xa5/0xe0 [ 74.954205][ T4438] mount_bdev+0x287/0x3c0 [ 74.958523][ T4438] ? reiserfs_kill_sb+0x140/0x140 [ 74.963541][ T4438] legacy_get_tree+0xe6/0x180 [ 74.968207][ T4438] ? remove_save_link+0x3e0/0x3e0 [ 74.973224][ T4438] vfs_get_tree+0x88/0x270 [ 74.977629][ T4438] do_new_mount+0x24a/0xa40 [ 74.982125][ T4438] __se_sys_mount+0x2e3/0x3d0 [ 74.986792][ T4438] ? __x64_sys_mount+0xc0/0xc0 [ 74.991544][ T4438] ? lockdep_hardirqs_on+0x94/0x140 [ 74.996729][ T4438] ? __x64_sys_mount+0x1c/0xc0 [ 75.001484][ T4438] do_syscall_64+0x4c/0xa0 [ 75.005887][ T4438] ? clear_bhb_loop+0x60/0xb0 [ 75.010555][ T4438] ? clear_bhb_loop+0x60/0xb0 [ 75.015221][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.021105][ T4438] RIP: 0033:0x7f3c5899e0ca [ 75.025523][ T4438] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.045114][ T4438] RSP: 002b:00007fffd0dd01a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.053518][ T4438] RAX: ffffffffffffffda RBX: 00007fffd0dd0230 RCX: 00007f3c5899e0ca [ 75.061482][ T4438] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fffd0dd01f0 [ 75.069438][ T4438] RBP: 0000200000000040 R08: 00007fffd0dd0230 R09: 000000000000800c [ 75.077398][ T4438] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000000 [ 75.085358][ T4438] R13: 00007fffd0dd01f0 R14: 0000000000001122 R15: 0000200000000300 [ 75.093318][ T4438] [ 75.096325][ T4438] [ 75.098631][ T4438] The buggy address belongs to the physical page: [ 75.105038][ T4438] page:ffffea0001ad45c0 refcount:3 mapcount:0 mapping:ffff888140cebef8 index:0x213 pfn:0x6b517 [ 75.115349][ T4438] memcg:ffff888028822000 [ 75.119580][ T4438] aops:def_blk_aops ino:700000 [ 75.124337][ T4438] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 75.134054][ T4438] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff888140cebef8 [ 75.142622][ T4438] raw: 0000000000000213 ffff888072453d98 00000003ffffffff ffff888028822000 [ 75.151189][ T4438] page dumped because: kasan: bad access detected [ 75.157593][ T4438] page_owner tracks the page as allocated [ 75.163290][ T4438] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 4438, tgid 4438 (syz.0.17), ts 74542261077, free_ts 74539815093 [ 75.183246][ T4438] post_alloc_hook+0x173/0x1a0 [ 75.188004][ T4438] get_page_from_freelist+0x1a1e/0x1ab0 [ 75.193567][ T4438] __alloc_pages+0x1ec/0x4f0 [ 75.198176][ T4438] folio_alloc+0x1c/0x60 [ 75.202409][ T4438] filemap_alloc_folio+0xdb/0x480 [ 75.207437][ T4438] __filemap_get_folio+0x6ab/0xdb0 [ 75.212554][ T4438] pagecache_get_page+0x26/0x250 [ 75.217487][ T4438] __getblk_gfp+0x2d8/0xb20 [ 75.221984][ T4438] search_by_key+0x45a/0x4600 [ 75.226651][ T4438] reiserfs_read_locked_inode+0x195/0x26b0 [ 75.232447][ T4438] reiserfs_fill_super+0x1255/0x23b0 [ 75.237723][ T4438] mount_bdev+0x287/0x3c0 [ 75.242041][ T4438] legacy_get_tree+0xe6/0x180 [ 75.246702][ T4438] vfs_get_tree+0x88/0x270 [ 75.251103][ T4438] do_new_mount+0x24a/0xa40 [ 75.255596][ T4438] __se_sys_mount+0x2e3/0x3d0 [ 75.260263][ T4438] page last free stack trace: [ 75.264918][ T4438] free_unref_page_prepare+0x8b4/0x9a0 [ 75.270368][ T4438] free_unref_page_list+0xbb/0x8e0 [ 75.275467][ T4438] release_pages+0x1fa6/0x2220 [ 75.280219][ T4438] tlb_flush_mmu+0x105/0x220 [ 75.284801][ T4438] tlb_finish_mmu+0xf5/0x220 [ 75.289381][ T4438] unmap_region+0x29c/0x300 [ 75.293877][ T4438] do_mas_align_munmap+0xcc2/0x12b0 [ 75.299064][ T4438] do_mas_munmap+0x240/0x2b0 [ 75.303642][ T4438] __vm_munmap+0x1ac/0x2d0 [ 75.308047][ T4438] __x64_sys_munmap+0x5c/0x70 [ 75.312711][ T4438] do_syscall_64+0x4c/0xa0 [ 75.317113][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.322995][ T4438] [ 75.325308][ T4438] Memory state around the buggy address: [ 75.330922][ T4438] ffff88806b517e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.338966][ T4438] ffff88806b517f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.347011][ T4438] >ffff88806b517f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.355056][ T4438] ^ [ 75.360145][ T4438] ffff88806b518000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.368186][ T4438] ffff88806b518080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.376226][ T4438] ================================================================== [ 75.386888][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 75.408535][ T4438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.415765][ T4438] CPU: 1 PID: 4438 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.422969][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.433029][ T4438] Call Trace: [ 75.436309][ T4438] [ 75.439240][ T4438] dump_stack_lvl+0x188/0x24e [ 75.443924][ T4438] ? memcpy+0x3c/0x60 [ 75.447910][ T4438] ? show_regs_print_info+0x12/0x12 [ 75.453119][ T4438] ? load_image+0x400/0x400 [ 75.457637][ T4438] panic+0x2e5/0x730 [ 75.461547][ T4438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.467713][ T4438] ? bpf_jit_dump+0xd0/0xd0 [ 75.472229][ T4438] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 75.478204][ T4438] ? _raw_spin_unlock+0x40/0x40 [ 75.483043][ T4438] check_panic_on_warn+0x80/0xa0 [ 75.487970][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 75.493242][ T4438] end_report+0x66/0x110 [ 75.497475][ T4438] kasan_report+0x118/0x140 [ 75.501968][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 75.507240][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 75.512510][ T4438] kasan_check_range+0x235/0x290 [ 75.517437][ T4438] ? leaf_paste_entries+0x769/0x10e0 [ 75.522707][ T4438] memmove+0x25/0x60 [ 75.526588][ T4438] leaf_paste_entries+0x769/0x10e0 [ 75.531689][ T4438] balance_leaf+0xb2e5/0x10ec0 [ 75.536444][ T4438] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 75.542414][ T4438] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 75.548296][ T4438] ? lockdep_hardirqs_on+0x94/0x140 [ 75.553484][ T4438] ? _raw_spin_unlock+0x40/0x40 [ 75.558325][ T4438] ? do_balance+0x930/0x930 [ 75.562822][ T4438] ? stack_trace_save+0xa6/0xf0 [ 75.567664][ T4438] ? __stack_depot_save+0x421/0x460 [ 75.572854][ T4438] ? kasan_set_track+0x60/0x70 [ 75.577606][ T4438] ? kasan_set_track+0x4b/0x70 [ 75.582359][ T4438] ? __kasan_kmalloc+0x8e/0xa0 [ 75.587112][ T4438] ? __kmalloc+0xb0/0x240 [ 75.591432][ T4438] ? fix_nodes+0x60a2/0x8340 [ 75.596011][ T4438] ? reiserfs_paste_into_item+0x60b/0x810 [ 75.601717][ T4438] ? reiserfs_add_entry+0xa42/0xe10 [ 75.606904][ T4438] ? reiserfs_mkdir+0x6bc/0x920 [ 75.611740][ T4438] ? reiserfs_xattr_init+0x331/0x720 [ 75.617020][ T4438] ? reiserfs_fill_super+0x1fee/0x23b0 [ 75.622468][ T4438] ? mount_bdev+0x287/0x3c0 [ 75.626958][ T4438] ? legacy_get_tree+0xe6/0x180 [ 75.631798][ T4438] ? vfs_get_tree+0x88/0x270 [ 75.636372][ T4438] ? do_new_mount+0x24a/0xa40 [ 75.641033][ T4438] ? __se_sys_mount+0x2e3/0x3d0 [ 75.645870][ T4438] ? do_syscall_64+0x4c/0xa0 [ 75.650442][ T4438] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.656504][ T4438] ? __wake_up+0x1a0/0x1a0 [ 75.660913][ T4438] ? get_parents+0x400/0xd20 [ 75.665494][ T4438] ? get_neighbors+0x9ba/0x1030 [ 75.670337][ T4438] ? reiserfs_prepare_for_journal+0x267/0x280 [ 75.676390][ T4438] ? fix_nodes+0x7bc3/0x8340 [ 75.680980][ T4438] do_balance+0x318/0x930 [ 75.685304][ T4438] ? get_right_neighbor_position+0x210/0x210 [ 75.691275][ T4438] ? reiserfs_paste_into_item+0x3b0/0x810 [ 75.696980][ T4438] reiserfs_paste_into_item+0x6dd/0x810 [ 75.702517][ T4438] ? reiserfs_cut_from_item+0x1fc0/0x1fc0 [ 75.708242][ T4438] ? reiserfs_get_parent+0x2f0/0x2f0 [ 75.713513][ T4438] ? inode_get_bytes+0x73/0xa0 [ 75.718268][ T4438] ? _find_first_zero_bit+0x61/0x100 [ 75.723540][ T4438] reiserfs_add_entry+0xa42/0xe10 [ 75.728559][ T4438] ? drop_new_inode+0x60/0x60 [ 75.733231][ T4438] ? journal_begin+0x1f1/0x350 [ 75.737982][ T4438] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 75.744386][ T4438] reiserfs_mkdir+0x6bc/0x920 [ 75.749053][ T4438] ? reiserfs_symlink+0x790/0x790 [ 75.754066][ T4438] ? rwsem_write_trylock+0x135/0x1c0 [ 75.759356][ T4438] ? lookup_one_len+0x19d/0x2d0 [ 75.764203][ T4438] ? lookup_one_common+0x450/0x450 [ 75.769311][ T4438] reiserfs_xattr_init+0x331/0x720 [ 75.774427][ T4438] reiserfs_fill_super+0x1fee/0x23b0 [ 75.779715][ T4438] ? reiserfs_kill_sb+0x140/0x140 [ 75.784734][ T4438] ? snprintf+0xe5/0x140 [ 75.788968][ T4438] ? vscnprintf+0x80/0x80 [ 75.793284][ T4438] ? set_blocksize+0x1d0/0x470 [ 75.798039][ T4438] ? sb_set_blocksize+0xa5/0xe0 [ 75.802877][ T4438] mount_bdev+0x287/0x3c0 [ 75.807197][ T4438] ? reiserfs_kill_sb+0x140/0x140 [ 75.812214][ T4438] legacy_get_tree+0xe6/0x180 [ 75.816879][ T4438] ? remove_save_link+0x3e0/0x3e0 [ 75.821895][ T4438] vfs_get_tree+0x88/0x270 [ 75.826298][ T4438] do_new_mount+0x24a/0xa40 [ 75.830789][ T4438] __se_sys_mount+0x2e3/0x3d0 [ 75.835454][ T4438] ? __x64_sys_mount+0xc0/0xc0 [ 75.840205][ T4438] ? lockdep_hardirqs_on+0x94/0x140 [ 75.845389][ T4438] ? __x64_sys_mount+0x1c/0xc0 [ 75.850139][ T4438] do_syscall_64+0x4c/0xa0 [ 75.854539][ T4438] ? clear_bhb_loop+0x60/0xb0 [ 75.859207][ T4438] ? clear_bhb_loop+0x60/0xb0 [ 75.863872][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.869760][ T4438] RIP: 0033:0x7f3c5899e0ca [ 75.874160][ T4438] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.893757][ T4438] RSP: 002b:00007fffd0dd01a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.902157][ T4438] RAX: ffffffffffffffda RBX: 00007fffd0dd0230 RCX: 00007f3c5899e0ca [ 75.910116][ T4438] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fffd0dd01f0 [ 75.918075][ T4438] RBP: 0000200000000040 R08: 00007fffd0dd0230 R09: 000000000000800c [ 75.926033][ T4438] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000000 [ 75.933989][ T4438] R13: 00007fffd0dd01f0 R14: 0000000000001122 R15: 0000200000000300 [ 75.941953][ T4438] [ 75.945290][ T4438] Kernel Offset: disabled [ 75.949602][ T4438] Rebooting in 86400 seconds..