[ 71.912707][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 71.925408][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 71.936894][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 71.949990][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 71.992697][ T9] bond0 (unregistering): Released all slaves
[ 76.449880][ T3155] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
2026/09/09 20:23:02 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 81.557566][ T4494] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 83.213749][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.223679][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.232161][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.251237][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.262308][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.271546][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 84.239818][ T4565] chnl_net:caif_netlink_parms(): no params data found
[ 84.358773][ T4565] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.368946][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.380783][ T4565] device bridge_slave_0 entered promiscuous mode
[ 84.390623][ T4565] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.409130][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.423655][ T4565] device bridge_slave_1 entered promiscuous mode
[ 84.468885][ T4565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.500019][ T4565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.553575][ T4565] team0: Port device team_slave_0 added
[ 84.575017][ T4565] team0: Port device team_slave_1 added
[ 84.620282][ T4565] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.633322][ T4565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.662184][ T4565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.679006][ T4565] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.685983][ T4565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.714000][ T4565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.756780][ T4565] device hsr_slave_0 entered promiscuous mode
[ 84.763934][ T4565] device hsr_slave_1 entered promiscuous mode
[ 85.428855][ T4565] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.438207][ T4565] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.447517][ T4565] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.459110][ T4565] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.555476][ T4565] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.569430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 85.579823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.593149][ T4565] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.626322][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 85.636237][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.646625][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.653988][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.672594][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 85.682486][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 85.694395][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.704958][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.712112][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.722777][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.734264][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.778563][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.790102][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.798853][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.807594][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.816977][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.825730][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.834817][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.843614][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.852498][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.870599][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 86.021216][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 86.029954][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 86.042037][ T4565] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.083932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 86.094993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 86.145032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 86.155506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 86.166429][ T4565] device veth0_vlan entered promiscuous mode
[ 86.175050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 86.184418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 86.209238][ T4565] device veth1_vlan entered promiscuous mode
[ 86.257370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 86.266235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 86.290516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 86.308977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 86.329835][ T4565] device veth0_macvtap entered promiscuous mode
[ 86.341729][ T4565] device veth1_macvtap entered promiscuous mode
[ 86.380931][ T4565] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.398092][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 86.418345][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 86.429931][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 86.452631][ T4565] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.469021][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 86.487571][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 86.505070][ T4565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.529521][ T4565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.540401][ T4565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.557789][ T4565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.027620][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/09 20:23:12 executed programs: 0
[ 88.424776][ T4757] chnl_net:caif_netlink_parms(): no params data found
[ 88.485476][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.492804][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.500630][ T4757] device bridge_slave_0 entered promiscuous mode
[ 88.508593][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.515725][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.523671][ T4757] device bridge_slave_1 entered promiscuous mode
[ 88.551700][ T4757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.566496][ T4757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.602079][ T4757] team0: Port device team_slave_0 added
[ 88.612069][ T4757] team0: Port device team_slave_1 added
[ 88.636237][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.646252][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.675053][ T4757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.691370][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.698855][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.727996][ T4757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.769635][ T4757] device hsr_slave_0 entered promiscuous mode
[ 88.776692][ T4757] device hsr_slave_1 entered promiscuous mode
[ 88.785917][ T4757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.795876][ T4757] Cannot create hsr debugfs directory
[ 90.367987][ T4254] Bluetooth: hci0: command 0x0409 tx timeout
[ 91.482772][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.751409][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.823898][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.457934][ T4253] Bluetooth: hci0: command 0x041b tx timeout
[ 92.703015][ T4757] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.713643][ T4757] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.733954][ T4757] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.743617][ T4757] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.796982][ T4757] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.809387][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 92.817173][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 92.829453][ T4757] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.849423][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 92.858665][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 92.867009][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.874234][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.882009][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 92.901988][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 92.910920][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 92.919803][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.926843][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.935534][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 92.944485][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 92.953244][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 92.962125][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 92.970760][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 92.980511][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 93.002276][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 93.010539][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 93.020051][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 93.031029][ T4757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 93.042312][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 93.051378][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 93.060653][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 93.073102][ T9] device hsr_slave_0 left promiscuous mode
[ 93.080083][ T9] device hsr_slave_1 left promiscuous mode
[ 93.086501][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 93.094713][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 93.103004][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 93.111026][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.118827][ T9] device bridge_slave_1 left promiscuous mode
[ 93.125051][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.133440][ T9] device bridge_slave_0 left promiscuous mode
[ 93.140194][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.151645][ T9] device veth1_macvtap left promiscuous mode
[ 93.158599][ T9] device veth0_macvtap left promiscuous mode
[ 93.164853][ T9] device veth1_vlan left promiscuous mode
[ 93.170777][ T9] device veth0_vlan left promiscuous mode
[ 93.293976][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 93.309761][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 93.320708][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 93.332887][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 93.378996][ T9] bond0 (unregistering): Released all slaves
[ 93.496365][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 93.506013][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 93.515672][ T4757] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.530903][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 93.539996][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 93.569553][ T4757] device veth0_vlan entered promiscuous mode
[ 93.576426][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 93.585140][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 93.594405][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 93.603734][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 93.615467][ T4757] device veth1_vlan entered promiscuous mode
[ 93.635347][ T4757] device veth0_macvtap entered promiscuous mode
[ 93.647492][ T4757] device veth1_macvtap entered promiscuous mode
[ 93.664036][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 93.672454][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 93.680696][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 93.689608][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 93.699915][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 93.712925][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.720860][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 93.729359][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 93.739135][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 93.751688][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.760006][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 93.769669][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 93.780780][ T4757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.790455][ T4757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.800172][ T4757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.809401][ T4757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.877685][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.885649][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.905432][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/09/09 20:23:17 executed programs: 2
[ 93.933339][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.949163][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.956944][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 94.060444][ T4993] loop0: detected capacity change from 0 to 8192
[ 94.091803][ T4993] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 94.112991][ T4993] REISERFS (device loop0): using ordered data mode
[ 94.138948][ T4993] reiserfs: using flush barriers
[ 94.145614][ T4993] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 94.188365][ T4993] REISERFS (device loop0): checking transaction log (loop0)
[ 94.211460][ T4993] REISERFS (device loop0): Using tea hash to sort names
[ 94.229904][ T4993] ==================================================================
[ 94.238227][ T4993] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7cb/0x1140
[ 94.245788][ T4993] Read of size 18446744073709551584 at addr ffff88806016dfa4 by task syz.0.17/4993
[ 94.255111][ T4993]
[ 94.257445][ T4993] CPU: 0 PID: 4993 Comm: syz.0.17 Not tainted syzkaller #0
[ 94.264645][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 94.274720][ T4993] Call Trace:
[ 94.278003][ T4993]
[ 94.280929][ T4993] dump_stack_lvl+0x188/0x250
[ 94.285612][ T4993] ? show_regs_print_info+0x20/0x20
[ 94.290815][ T4993] ? load_image+0x410/0x410
[ 94.295325][ T4993] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 94.300786][ T4993] ? __lock_acquire+0x13dc/0x7b50
[ 94.305989][ T4993] print_address_description+0x60/0x2d0
[ 94.311538][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 94.316822][ T4993] kasan_report+0xdf/0x130
[ 94.321420][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 94.326788][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 94.332070][ T4993] kasan_check_range+0x235/0x290
[ 94.337007][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 94.342297][ T4993] memmove+0x25/0x60
[ 94.346190][ T4993] leaf_paste_entries+0x7cb/0x1140
[ 94.351310][ T4993] balance_leaf+0xc14c/0x10ec0
[ 94.356082][ T4993] ? mark_lock+0x94/0x320
[ 94.360412][ T4993] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 94.366524][ T4993] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 94.372424][ T4993] ? do_balance+0x930/0x930
[ 94.376952][ T4993] ? _raw_spin_unlock+0x40/0x40
[ 94.381899][ T4993] ? stack_trace_snprint+0xe0/0xe0
[ 94.387188][ T4993] ? stack_depot_save+0x41b/0x460
[ 94.392253][ T4993] ? __kasan_kmalloc+0xc6/0xe0
[ 94.397029][ T4993] ? __kasan_kmalloc+0xaf/0xe0
[ 94.401800][ T4993] ? fix_nodes+0x63f2/0x8720
[ 94.406390][ T4993] ? reiserfs_paste_into_item+0x60b/0x7f0
[ 94.412200][ T4993] ? reiserfs_add_entry+0x9bd/0xd80
[ 94.417408][ T4993] ? reiserfs_mkdir+0x6be/0x920
[ 94.422251][ T4993] ? reiserfs_xattr_init+0x33a/0x720
[ 94.427531][ T4993] ? reiserfs_fill_super+0x1cd9/0x2120
[ 94.432983][ T4993] ? mount_bdev+0x28a/0x3c0
[ 94.437487][ T4993] ? legacy_get_tree+0xe6/0x180
[ 94.442336][ T4993] ? vfs_get_tree+0x88/0x270
[ 94.446947][ T4993] ? do_new_mount+0x247/0xa40
[ 94.451768][ T4993] ? __se_sys_mount+0x2e3/0x3d0
[ 94.456631][ T4993] ? do_syscall_64+0x4c/0xa0
[ 94.461233][ T4993] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 94.467337][ T4993] ? __wake_up_bit+0x120/0x120
[ 94.472350][ T4993] ? get_parents+0x3d9/0xcd0
[ 94.476962][ T4993] ? get_neighbors+0x98d/0x1000
[ 94.481820][ T4993] ? reiserfs_prepare_for_journal+0x269/0x280
[ 94.488018][ T4993] ? fix_nodes+0x7f2d/0x8720
[ 94.492663][ T4993] do_balance+0x318/0x930
[ 94.497002][ T4993] ? get_right_neighbor_position+0x210/0x210
[ 94.503002][ T4993] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 94.508743][ T4993] reiserfs_paste_into_item+0x744/0x7f0
[ 94.514400][ T4993] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 94.520293][ T4993] ? reiserfs_get_parent+0x2f0/0x2f0
[ 94.525683][ T4993] ? _find_first_zero_bit+0x61/0xf0
[ 94.530903][ T4993] reiserfs_add_entry+0x9bd/0xd80
[ 94.536226][ T4993] ? drop_new_inode+0x60/0x60
[ 94.540955][ T4993] ? journal_begin+0x1f1/0x350
[ 94.546014][ T4993] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 94.552638][ T4993] reiserfs_mkdir+0x6be/0x920
[ 94.557733][ T4993] ? reiserfs_symlink+0x7a0/0x7a0
[ 94.562870][ T4993] ? rwsem_write_trylock+0x135/0x1c0
[ 94.568170][ T4993] ? clear_nonspinnable+0x60/0x60
[ 94.573551][ T4993] ? lookup_one_len+0x19d/0x2d0
[ 94.578933][ T4993] ? lookup_one_common+0x460/0x460
[ 94.584257][ T4993] reiserfs_xattr_init+0x33a/0x720
[ 94.589702][ T4993] reiserfs_fill_super+0x1cd9/0x2120
[ 94.595127][ T4993] ? reiserfs_kill_sb+0x140/0x140
[ 94.600256][ T4993] ? snprintf+0xe5/0x140
[ 94.604523][ T4993] ? vscnprintf+0x80/0x80
[ 94.608895][ T4993] ? up_write+0x1b6/0x410
[ 94.613280][ T4993] ? set_blocksize+0x1f1/0x360
[ 94.618073][ T4993] ? sb_set_blocksize+0xa5/0xe0
[ 94.623046][ T4993] mount_bdev+0x28a/0x3c0
[ 94.627584][ T4993] ? reiserfs_kill_sb+0x140/0x140
[ 94.633006][ T4993] legacy_get_tree+0xe6/0x180
[ 94.637839][ T4993] ? remove_save_link+0x3e0/0x3e0
[ 94.643113][ T4993] vfs_get_tree+0x88/0x270
[ 94.647925][ T4993] do_new_mount+0x247/0xa40
[ 94.652849][ T4993] __se_sys_mount+0x2e3/0x3d0
[ 94.657568][ T4993] ? __x64_sys_mount+0xc0/0xc0
[ 94.662608][ T4993] ? lockdep_hardirqs_on+0x94/0x140
[ 94.667820][ T4993] ? __x64_sys_mount+0x1c/0xc0
[ 94.672696][ T4993] do_syscall_64+0x4c/0xa0
[ 94.677196][ T4993] ? clear_bhb_loop+0x30/0x80
[ 94.681979][ T4993] ? clear_bhb_loop+0x30/0x80
[ 94.686691][ T4993] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 94.692698][ T4993] RIP: 0033:0x7f8583c6e18a
[ 94.697226][ T4993] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.717051][ T4993] RSP: 002b:00007f85832cfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 94.725921][ T4993] RAX: ffffffffffffffda RBX: 00007f85832cfee0 RCX: 00007f8583c6e18a
[ 94.734421][ T4993] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f85832cfea0
[ 94.743459][ T4993] RBP: 0000200000000040 R08: 00007f85832cfee0 R09: 000000000000800c
[ 94.751441][ T4993] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000000
[ 94.759437][ T4993] R13: 00007f85832cfea0 R14: 0000000000001122 R15: 0000200000000300
[ 94.767407][ T4993]
[ 94.770411][ T4993]
[ 94.772721][ T4993] The buggy address belongs to the page:
[ 94.778514][ T4993] page:ffffea0001805b40 refcount:2 mapcount:0 mapping:ffff88801709cf38 index:0x213 pfn:0x6016d
[ 94.788821][ T4993] memcg:ffff888076cf0000
[ 94.793041][ T4993] aops:def_blk_aops ino:700000
[ 94.797787][ T4993] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 94.807574][ T4993] raw: 00fff00000002032 ffffea0001805dc8 ffff88807f399030 ffff88801709cf38
[ 94.816141][ T4993] raw: 0000000000000213 ffff88806f886cb0 00000002ffffffff ffff888076cf0000
[ 94.824700][ T4993] page dumped because: kasan: bad access detected
[ 94.831106][ T4993] page_owner tracks the page as allocated
[ 94.836809][ T4993] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4993, ts 94210921247, free_ts 94203039324
[ 94.853902][ T4993] get_page_from_freelist+0x24f6/0x2670
[ 94.859435][ T4993] __alloc_pages+0x1ee/0x480
[ 94.864005][ T4993] __page_cache_alloc+0xce/0x440
[ 94.868920][ T4993] pagecache_get_page+0x9b8/0xf20
[ 94.873948][ T4993] __getblk_gfp+0x240/0xb20
[ 94.878447][ T4993] search_by_key+0x474/0x4400
[ 94.883212][ T4993] reiserfs_read_locked_inode+0x195/0x24c0
[ 94.888997][ T4993] reiserfs_fill_super+0x1126/0x2120
[ 94.894347][ T4993] mount_bdev+0x28a/0x3c0
[ 94.898748][ T4993] legacy_get_tree+0xe6/0x180
[ 94.903404][ T4993] vfs_get_tree+0x88/0x270
[ 94.908156][ T4993] do_new_mount+0x247/0xa40
[ 94.912640][ T4993] __se_sys_mount+0x2e3/0x3d0
[ 94.917307][ T4993] do_syscall_64+0x4c/0xa0
[ 94.921705][ T4993] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 94.927580][ T4993] page last free stack trace:
[ 94.932227][ T4993] free_unref_page_prepare+0x637/0x6c0
[ 94.937750][ T4993] free_unref_page_list+0x119/0x830
[ 94.942928][ T4993] release_pages+0x185f/0x1bd0
[ 94.947674][ T4993] tlb_finish_mmu+0x1b4/0x370
[ 94.952335][ T4993] unmap_region+0x344/0x3b0
[ 94.956817][ T4993] __do_munmap+0xa29/0xe10
[ 94.961212][ T4993] __vm_munmap+0x13f/0x240
[ 94.965609][ T4993] __x64_sys_munmap+0x67/0x70
[ 94.970264][ T4993] do_syscall_64+0x4c/0xa0
[ 94.974670][ T4993] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 94.980551][ T4993]
[ 94.982879][ T4993] Memory state around the buggy address:
[ 94.988503][ T4993] ffff88806016de80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 94.996554][ T4993] ffff88806016df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 95.004682][ T4993] >ffff88806016df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 95.012735][ T4993] ^
[ 95.017822][ T4993] ffff88806016e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 95.025858][ T4993] ffff88806016e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 95.033895][ T4993] ==================================================================
[ 95.041931][ T4993] Disabling lock debugging due to kernel taint
[ 95.050398][ T4253] Bluetooth: hci0: command 0x040f tx timeout
[ 95.057441][ T4993] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 95.064649][ T4993] CPU: 1 PID: 4993 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 95.073319][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 95.083389][ T4993] Call Trace:
[ 95.086673][ T4993]
[ 95.089618][ T4993] dump_stack_lvl+0x188/0x250
[ 95.094300][ T4993] ? show_regs_print_info+0x20/0x20
[ 95.099534][ T4993] ? load_image+0x410/0x410
[ 95.104034][ T4993] panic+0x2f8/0x850
[ 95.108114][ T4993] ? bpf_jit_dump+0xd0/0xd0
[ 95.112623][ T4993] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 95.118601][ T4993] ? _raw_spin_unlock+0x40/0x40
[ 95.123797][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 95.129070][ T4993] check_panic_on_warn+0x80/0xa0
[ 95.134004][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 95.139350][ T4993] end_report+0x6d/0xf0
[ 95.143629][ T4993] kasan_report+0x102/0x130
[ 95.148127][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 95.153424][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 95.158807][ T4993] kasan_check_range+0x235/0x290
[ 95.163735][ T4993] ? leaf_paste_entries+0x7cb/0x1140
[ 95.169105][ T4993] memmove+0x25/0x60
[ 95.172985][ T4993] leaf_paste_entries+0x7cb/0x1140
[ 95.178086][ T4993] balance_leaf+0xc14c/0x10ec0
[ 95.183023][ T4993] ? mark_lock+0x94/0x320
[ 95.187349][ T4993] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 95.193318][ T4993] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 95.199206][ T4993] ? do_balance+0x930/0x930
[ 95.203710][ T4993] ? _raw_spin_unlock+0x40/0x40
[ 95.208625][ T4993] ? stack_trace_snprint+0xe0/0xe0
[ 95.213737][ T4993] ? stack_depot_save+0x41b/0x460
[ 95.218924][ T4993] ? __kasan_kmalloc+0xc6/0xe0
[ 95.223709][ T4993] ? __kasan_kmalloc+0xaf/0xe0
[ 95.228481][ T4993] ? fix_nodes+0x63f2/0x8720
[ 95.233151][ T4993] ? reiserfs_paste_into_item+0x60b/0x7f0
[ 95.239118][ T4993] ? reiserfs_add_entry+0x9bd/0xd80
[ 95.244480][ T4993] ? reiserfs_mkdir+0x6be/0x920
[ 95.249353][ T4993] ? reiserfs_xattr_init+0x33a/0x720
[ 95.254734][ T4993] ? reiserfs_fill_super+0x1cd9/0x2120
[ 95.260172][ T4993] ? mount_bdev+0x28a/0x3c0
[ 95.264789][ T4993] ? legacy_get_tree+0xe6/0x180
[ 95.269631][ T4993] ? vfs_get_tree+0x88/0x270
[ 95.274206][ T4993] ? do_new_mount+0x247/0xa40
[ 95.278872][ T4993] ? __se_sys_mount+0x2e3/0x3d0
[ 95.283788][ T4993] ? do_syscall_64+0x4c/0xa0
[ 95.288370][ T4993] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 95.294502][ T4993] ? __wake_up_bit+0x120/0x120
[ 95.299257][ T4993] ? get_parents+0x3d9/0xcd0
[ 95.303830][ T4993] ? get_neighbors+0x98d/0x1000
[ 95.308744][ T4993] ? reiserfs_prepare_for_journal+0x269/0x280
[ 95.314938][ T4993] ? fix_nodes+0x7f2d/0x8720
[ 95.319701][ T4993] do_balance+0x318/0x930
[ 95.324134][ T4993] ? get_right_neighbor_position+0x210/0x210
[ 95.330240][ T4993] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 95.336044][ T4993] reiserfs_paste_into_item+0x744/0x7f0
[ 95.342382][ T4993] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 95.348348][ T4993] ? reiserfs_get_parent+0x2f0/0x2f0
[ 95.353742][ T4993] ? _find_first_zero_bit+0x61/0xf0
[ 95.359113][ T4993] reiserfs_add_entry+0x9bd/0xd80
[ 95.364224][ T4993] ? drop_new_inode+0x60/0x60
[ 95.368887][ T4993] ? journal_begin+0x1f1/0x350
[ 95.373634][ T4993] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 95.380036][ T4993] reiserfs_mkdir+0x6be/0x920
[ 95.384713][ T4993] ? reiserfs_symlink+0x7a0/0x7a0
[ 95.389720][ T4993] ? rwsem_write_trylock+0x135/0x1c0
[ 95.394987][ T4993] ? clear_nonspinnable+0x60/0x60
[ 95.400096][ T4993] ? lookup_one_len+0x19d/0x2d0
[ 95.405194][ T4993] ? lookup_one_common+0x460/0x460
[ 95.410777][ T4993] reiserfs_xattr_init+0x33a/0x720
[ 95.415896][ T4993] reiserfs_fill_super+0x1cd9/0x2120
[ 95.421178][ T4993] ? reiserfs_kill_sb+0x140/0x140
[ 95.426193][ T4993] ? snprintf+0xe5/0x140
[ 95.430425][ T4993] ? vscnprintf+0x80/0x80
[ 95.434915][ T4993] ? up_write+0x1b6/0x410
[ 95.439240][ T4993] ? set_blocksize+0x1f1/0x360
[ 95.444000][ T4993] ? sb_set_blocksize+0xa5/0xe0
[ 95.448848][ T4993] mount_bdev+0x28a/0x3c0
[ 95.453348][ T4993] ? reiserfs_kill_sb+0x140/0x140
[ 95.458383][ T4993] legacy_get_tree+0xe6/0x180
[ 95.463134][ T4993] ? remove_save_link+0x3e0/0x3e0
[ 95.468139][ T4993] vfs_get_tree+0x88/0x270
[ 95.472538][ T4993] do_new_mount+0x247/0xa40
[ 95.477023][ T4993] __se_sys_mount+0x2e3/0x3d0
[ 95.481731][ T4993] ? __x64_sys_mount+0xc0/0xc0
[ 95.486559][ T4993] ? lockdep_hardirqs_on+0x94/0x140
[ 95.491766][ T4993] ? __x64_sys_mount+0x1c/0xc0
[ 95.496545][ T4993] do_syscall_64+0x4c/0xa0
[ 95.501618][ T4993] ? clear_bhb_loop+0x30/0x80
[ 95.506322][ T4993] ? clear_bhb_loop+0x30/0x80
[ 95.510993][ T4993] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 95.517071][ T4993] RIP: 0033:0x7f8583c6e18a
[ 95.521564][ T4993] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.541337][ T4993] RSP: 002b:00007f85832cfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 95.549752][ T4993] RAX: ffffffffffffffda RBX: 00007f85832cfee0 RCX: 00007f8583c6e18a
[ 95.557905][ T4993] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f85832cfea0
[ 95.566020][ T4993] RBP: 0000200000000040 R08: 00007f85832cfee0 R09: 000000000000800c
[ 95.574112][ T4993] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000000
[ 95.582368][ T4993] R13: 00007f85832cfea0 R14: 0000000000001122 R15: 0000200000000300
[ 95.590635][ T4993]
[ 95.594022][ T4993] Kernel Offset: disabled
[ 95.598442][ T4993] Rebooting in 86400 seconds..