Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. 2026/09/09 21:18:41 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 106.777104][ T4517] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 110.576881][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.590773][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.602277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.623035][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.631427][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.639180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.956541][ T4704] chnl_net:caif_netlink_parms(): no params data found [ 111.001687][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.008904][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.016846][ T4704] device bridge_slave_0 entered promiscuous mode [ 111.026512][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.033734][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.042086][ T4704] device bridge_slave_1 entered promiscuous mode [ 111.063198][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.074815][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.097229][ T4704] team0: Port device team_slave_0 added [ 111.105229][ T4704] team0: Port device team_slave_1 added [ 111.122987][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.130112][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.156559][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.171454][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.178480][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.204682][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.235770][ T4704] device hsr_slave_0 entered promiscuous mode [ 111.242806][ T4704] device hsr_slave_1 entered promiscuous mode [ 111.817923][ T4704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.829230][ T4704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.871172][ T4704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.882910][ T4704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.018118][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.035596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.057431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.069230][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.104662][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.115801][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.124865][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.132017][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.155297][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.164947][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.174459][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.188188][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.195384][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.207557][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.217042][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.273195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.285341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.299193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.310289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.321728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.330600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.347588][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.359926][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.374674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.384799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.394928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.640421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.662266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.677316][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.725015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.741606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.775181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.792109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.803196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.811687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.823389][ T4704] device veth0_vlan entered promiscuous mode [ 112.837690][ T4704] device veth1_vlan entered promiscuous mode [ 112.869608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.878555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.888363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.898148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.911217][ T4704] device veth0_macvtap entered promiscuous mode [ 112.920710][ T4704] device veth1_macvtap entered promiscuous mode [ 112.943877][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.952257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.982162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.996384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.007634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.021286][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.028664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.053919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.074308][ T4704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.090733][ T4704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.102827][ T4704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.111927][ T4704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/09 21:18:53 executed programs: 0 [ 114.287812][ T4797] chnl_net:caif_netlink_parms(): no params data found [ 114.402261][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.409558][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.431754][ T4797] device bridge_slave_0 entered promiscuous mode [ 114.446086][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.463327][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.474594][ T4797] device bridge_slave_1 entered promiscuous mode [ 114.523326][ T4797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.538567][ T4797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.571749][ T4797] team0: Port device team_slave_0 added [ 114.580580][ T4797] team0: Port device team_slave_1 added [ 114.632718][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.639714][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.690508][ T4797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.714943][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.734468][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.767502][ T4797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.795923][ T1280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.844293][ T4797] device hsr_slave_0 entered promiscuous mode [ 114.852507][ T4797] device hsr_slave_1 entered promiscuous mode [ 114.859609][ T4797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.870171][ T4797] Cannot create hsr debugfs directory [ 116.111840][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 118.009543][ T1280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.110604][ T1280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.181447][ T1280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.192191][ T4705] Bluetooth: hci0: command 0x041b tx timeout [ 119.097907][ T4797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.110120][ T4797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.120552][ T4797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.131503][ T4797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.205835][ T4797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.228907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.236913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.248452][ T4797] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.258953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.269089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.278816][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.286061][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.304572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.312998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.326448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.335162][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.342393][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.350442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.362875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.393954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.404133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.413321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.423700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.433006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.442469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.450982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.459585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.468460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.478836][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.508241][ T1280] device hsr_slave_0 left promiscuous mode [ 119.514945][ T1280] device hsr_slave_1 left promiscuous mode [ 119.524333][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.532251][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.540323][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.551691][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.559530][ T1280] device bridge_slave_1 left promiscuous mode [ 119.568563][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.578396][ T1280] device bridge_slave_0 left promiscuous mode [ 119.588125][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.602260][ T1280] device veth1_macvtap left promiscuous mode [ 119.608444][ T1280] device veth0_macvtap left promiscuous mode [ 119.614851][ T1280] device veth1_vlan left promiscuous mode [ 119.620768][ T1280] device veth0_vlan left promiscuous mode [ 119.782516][ T1280] team0 (unregistering): Port device team_slave_1 removed [ 119.796764][ T1280] team0 (unregistering): Port device team_slave_0 removed [ 119.812452][ T1280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.829204][ T1280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.887377][ T1280] bond0 (unregistering): Released all slaves [ 119.987517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.995331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.007983][ T4797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.025677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.035944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.057401][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.066402][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.076718][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.087161][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.099678][ T4797] device veth0_vlan entered promiscuous mode [ 120.113161][ T4797] device veth1_vlan entered promiscuous mode [ 120.132909][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.144293][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.152634][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.162002][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.173456][ T4797] device veth0_macvtap entered promiscuous mode [ 120.189298][ T4797] device veth1_macvtap entered promiscuous mode [ 120.213878][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.224669][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.232721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.241025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.249296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.258811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.268055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.277166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.286014][ T4703] Bluetooth: hci0: command 0x040f tx timeout [ 120.294844][ T4797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.305176][ T4797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.314450][ T4797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.324226][ T4797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.380318][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.396783][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.409943][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/09/09 21:19:00 executed programs: 2 [ 120.435854][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.444847][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.455504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.578254][ T5073] loop0: detected capacity change from 0 to 8192 [ 120.600448][ T5073] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 120.623526][ T5073] REISERFS (device loop0): using ordered data mode [ 120.630186][ T5073] reiserfs: using flush barriers [ 120.653585][ T5073] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.672963][ T5073] REISERFS (device loop0): checking transaction log (loop0) [ 120.694770][ T5073] REISERFS (device loop0): Using tea hash to sort names [ 120.711670][ T5073] REISERFS (device loop0): using 3.5.x disk format [ 120.720205][ T5073] ================================================================== [ 120.728664][ T5073] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7cb/0x1140 [ 120.736271][ T5073] Read of size 18446744073709551592 at addr ffff8880608b3fa4 by task syz.0.17/5073 [ 120.745676][ T5073] [ 120.748051][ T5073] CPU: 1 PID: 5073 Comm: syz.0.17 Not tainted syzkaller #0 [ 120.755272][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.765405][ T5073] Call Trace: [ 120.768713][ T5073] [ 120.771672][ T5073] dump_stack_lvl+0x188/0x250 [ 120.776392][ T5073] ? show_regs_print_info+0x20/0x20 [ 120.781626][ T5073] ? load_image+0x410/0x410 [ 120.786159][ T5073] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 120.791660][ T5073] ? __lock_acquire+0x13dc/0x7b50 [ 120.796729][ T5073] print_address_description+0x60/0x2d0 [ 120.802312][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 120.807632][ T5073] kasan_report+0xdf/0x130 [ 120.812085][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 120.817494][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 120.822820][ T5073] kasan_check_range+0x235/0x290 [ 120.827839][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 120.833182][ T5073] memmove+0x25/0x60 [ 120.837120][ T5073] leaf_paste_entries+0x7cb/0x1140 [ 120.842294][ T5073] balance_leaf+0xc14c/0x10ec0 [ 120.847108][ T5073] ? mark_lock+0x94/0x320 [ 120.851475][ T5073] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.857515][ T5073] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 120.863440][ T5073] ? do_balance+0x930/0x930 [ 120.867981][ T5073] ? _raw_spin_unlock+0x40/0x40 [ 120.872862][ T5073] ? stack_trace_snprint+0xe0/0xe0 [ 120.878091][ T5073] ? __lock_acquire+0x13dc/0x7b50 [ 120.883163][ T5073] ? stack_depot_save+0x41b/0x460 [ 120.888232][ T5073] ? __kasan_kmalloc+0xc6/0xe0 [ 120.893175][ T5073] ? __kasan_kmalloc+0xaf/0xe0 [ 120.897975][ T5073] ? fix_nodes+0x63f2/0x8720 [ 120.902603][ T5073] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 120.908354][ T5073] ? reiserfs_add_entry+0x9bd/0xd80 [ 120.913684][ T5073] ? reiserfs_mkdir+0x6be/0x920 [ 120.918573][ T5073] ? reiserfs_xattr_init+0x33a/0x720 [ 120.923896][ T5073] ? reiserfs_fill_super+0x1cd9/0x2120 [ 120.929385][ T5073] ? mount_bdev+0x28a/0x3c0 [ 120.934003][ T5073] ? legacy_get_tree+0xe6/0x180 [ 120.938882][ T5073] ? vfs_get_tree+0x88/0x270 [ 120.943506][ T5073] ? do_new_mount+0x247/0xa40 [ 120.948235][ T5073] ? __se_sys_mount+0x2e3/0x3d0 [ 120.953203][ T5073] ? do_syscall_64+0x4c/0xa0 [ 120.957957][ T5073] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.964134][ T5073] ? __wake_up_bit+0x120/0x120 [ 120.968967][ T5073] ? get_parents+0x3d9/0xcd0 [ 120.973592][ T5073] ? get_neighbors+0x98d/0x1000 [ 120.978493][ T5073] ? reiserfs_prepare_for_journal+0x269/0x280 [ 120.984691][ T5073] ? fix_nodes+0x7f2d/0x8720 [ 120.989365][ T5073] do_balance+0x318/0x930 [ 120.993736][ T5073] ? get_right_neighbor_position+0x210/0x210 [ 120.999777][ T5073] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 121.005548][ T5073] reiserfs_paste_into_item+0x744/0x7f0 [ 121.011167][ T5073] ? reiserfs_cut_from_item+0x1ff0/0x1ff0 [ 121.017010][ T5073] ? reiserfs_get_parent+0x2f0/0x2f0 [ 121.022561][ T5073] ? _find_first_zero_bit+0x61/0xf0 [ 121.027811][ T5073] reiserfs_add_entry+0x9bd/0xd80 [ 121.032899][ T5073] ? drop_new_inode+0x60/0x60 [ 121.037652][ T5073] ? journal_begin+0x1f1/0x350 [ 121.042450][ T5073] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 121.048905][ T5073] reiserfs_mkdir+0x6be/0x920 [ 121.053629][ T5073] ? reiserfs_symlink+0x7a0/0x7a0 [ 121.058684][ T5073] ? rwsem_write_trylock+0x135/0x1c0 [ 121.064007][ T5073] ? clear_nonspinnable+0x60/0x60 [ 121.069069][ T5073] ? lookup_one_len+0x19d/0x2d0 [ 121.073965][ T5073] ? lookup_one_common+0x460/0x460 [ 121.079210][ T5073] reiserfs_xattr_init+0x33a/0x720 [ 121.084361][ T5073] reiserfs_fill_super+0x1cd9/0x2120 [ 121.089698][ T5073] ? reiserfs_kill_sb+0x140/0x140 [ 121.094753][ T5073] ? snprintf+0xe5/0x140 [ 121.099054][ T5073] ? vscnprintf+0x80/0x80 [ 121.103411][ T5073] ? up_write+0x1b6/0x410 [ 121.107775][ T5073] ? set_blocksize+0x1f1/0x360 [ 121.112575][ T5073] ? sb_set_blocksize+0xa5/0xe0 [ 121.117462][ T5073] mount_bdev+0x28a/0x3c0 [ 121.121823][ T5073] ? reiserfs_kill_sb+0x140/0x140 [ 121.126886][ T5073] legacy_get_tree+0xe6/0x180 [ 121.131617][ T5073] ? remove_save_link+0x3e0/0x3e0 [ 121.136686][ T5073] vfs_get_tree+0x88/0x270 [ 121.141264][ T5073] do_new_mount+0x247/0xa40 [ 121.145809][ T5073] __se_sys_mount+0x2e3/0x3d0 [ 121.150628][ T5073] ? __x64_sys_mount+0xc0/0xc0 [ 121.155515][ T5073] ? lockdep_hardirqs_on+0x94/0x140 [ 121.160946][ T5073] ? __x64_sys_mount+0x1c/0xc0 [ 121.165758][ T5073] do_syscall_64+0x4c/0xa0 [ 121.170294][ T5073] ? clear_bhb_loop+0x30/0x80 [ 121.175001][ T5073] ? clear_bhb_loop+0x30/0x80 [ 121.179706][ T5073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.185639][ T5073] RIP: 0033:0x7fba8324aa0a [ 121.190086][ T5073] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.209724][ T5073] RSP: 002b:00007fba828aae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.218189][ T5073] RAX: ffffffffffffffda RBX: 00007fba828aaee0 RCX: 00007fba8324aa0a [ 121.226210][ T5073] RDX: 00002000000002c0 RSI: 00002000000031c0 RDI: 00007fba828aaea0 [ 121.234237][ T5073] RBP: 00002000000002c0 R08: 00007fba828aaee0 R09: 0000000000000800 [ 121.242251][ T5073] R10: 0000000000000800 R11: 0000000000000246 R12: 00002000000031c0 [ 121.250258][ T5073] R13: 00007fba828aaea0 R14: 000000000000111e R15: 0000200000000300 [ 121.258287][ T5073] [ 121.261335][ T5073] [ 121.263677][ T5073] The buggy address belongs to the page: [ 121.269336][ T5073] page:ffffea0001822cc0 refcount:2 mapcount:0 mapping:ffff888140895af8 index:0x213 pfn:0x608b3 [ 121.279687][ T5073] memcg:ffff888078f28000 [ 121.283945][ T5073] aops:def_blk_aops ino:700000 [ 121.288733][ T5073] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 121.298524][ T5073] raw: 00fff00000002032 ffffea000177c188 ffffea00017782c8 ffff888140895af8 [ 121.307173][ T5073] raw: 0000000000000213 ffff88806fe9ee80 00000002ffffffff ffff888078f28000 [ 121.315792][ T5073] page dumped because: kasan: bad access detected [ 121.322275][ T5073] page_owner tracks the page as allocated [ 121.328101][ T5073] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5073, ts 120694080597, free_ts 120690100839 [ 121.345518][ T5073] get_page_from_freelist+0x24f6/0x2670 [ 121.351126][ T5073] __alloc_pages+0x1ee/0x480 [ 121.356789][ T5073] __page_cache_alloc+0xce/0x440 [ 121.361753][ T5073] pagecache_get_page+0x9b8/0xf20 [ 121.366821][ T5073] __getblk_gfp+0x240/0xb20 [ 121.371465][ T5073] search_by_key+0x474/0x4400 [ 121.376204][ T5073] reiserfs_read_locked_inode+0x195/0x24c0 [ 121.382134][ T5073] reiserfs_fill_super+0x1126/0x2120 [ 121.387447][ T5073] mount_bdev+0x28a/0x3c0 [ 121.391895][ T5073] legacy_get_tree+0xe6/0x180 [ 121.396605][ T5073] vfs_get_tree+0x88/0x270 [ 121.401059][ T5073] do_new_mount+0x247/0xa40 [ 121.405599][ T5073] __se_sys_mount+0x2e3/0x3d0 [ 121.410418][ T5073] do_syscall_64+0x4c/0xa0 [ 121.415058][ T5073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.421549][ T5073] page last free stack trace: [ 121.426246][ T5073] free_unref_page_prepare+0x637/0x6c0 [ 121.431741][ T5073] free_unref_page_list+0x119/0x830 [ 121.437067][ T5073] release_pages+0x185f/0x1bd0 [ 121.441879][ T5073] tlb_finish_mmu+0x1b4/0x370 [ 121.446615][ T5073] unmap_region+0x344/0x3b0 [ 121.451147][ T5073] __do_munmap+0xa29/0xe10 [ 121.455602][ T5073] __vm_munmap+0x13f/0x240 [ 121.460336][ T5073] __x64_sys_munmap+0x67/0x70 [ 121.465071][ T5073] do_syscall_64+0x4c/0xa0 [ 121.469622][ T5073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.475642][ T5073] [ 121.478010][ T5073] Memory state around the buggy address: [ 121.483907][ T5073] ffff8880608b3e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.492019][ T5073] ffff8880608b3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.500108][ T5073] >ffff8880608b3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.508365][ T5073] ^ [ 121.513503][ T5073] ffff8880608b4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.521602][ T5073] ffff8880608b4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.529772][ T5073] ================================================================== [ 121.537868][ T5073] Disabling lock debugging due to kernel taint [ 121.573172][ T5073] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 121.580626][ T5073] CPU: 1 PID: 5073 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 121.589345][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.599430][ T5073] Call Trace: [ 121.602892][ T5073] [ 121.605868][ T5073] dump_stack_lvl+0x188/0x250 [ 121.610594][ T5073] ? show_regs_print_info+0x20/0x20 [ 121.615834][ T5073] ? load_image+0x410/0x410 [ 121.620572][ T5073] panic+0x2f8/0x850 [ 121.624502][ T5073] ? bpf_jit_dump+0xd0/0xd0 [ 121.629211][ T5073] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 121.635235][ T5073] ? _raw_spin_unlock+0x40/0x40 [ 121.640136][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 121.645666][ T5073] check_panic_on_warn+0x80/0xa0 [ 121.650729][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 121.656046][ T5073] end_report+0x6d/0xf0 [ 121.660234][ T5073] kasan_report+0x102/0x130 [ 121.664804][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 121.670124][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 121.675611][ T5073] kasan_check_range+0x235/0x290 [ 121.680594][ T5073] ? leaf_paste_entries+0x7cb/0x1140 [ 121.686082][ T5073] memmove+0x25/0x60 [ 121.690156][ T5073] leaf_paste_entries+0x7cb/0x1140 [ 121.695397][ T5073] balance_leaf+0xc14c/0x10ec0 [ 121.700226][ T5073] ? mark_lock+0x94/0x320 [ 121.704620][ T5073] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.710643][ T5073] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 121.716695][ T5073] ? do_balance+0x930/0x930 [ 121.721253][ T5073] ? _raw_spin_unlock+0x40/0x40 [ 121.726169][ T5073] ? stack_trace_snprint+0xe0/0xe0 [ 121.731503][ T5073] ? __lock_acquire+0x13dc/0x7b50 [ 121.736664][ T5073] ? stack_depot_save+0x41b/0x460 [ 121.741728][ T5073] ? __kasan_kmalloc+0xc6/0xe0 [ 121.746637][ T5073] ? __kasan_kmalloc+0xaf/0xe0 [ 121.751455][ T5073] ? fix_nodes+0x63f2/0x8720 [ 121.756208][ T5073] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 121.761961][ T5073] ? reiserfs_add_entry+0x9bd/0xd80 [ 121.767190][ T5073] ? reiserfs_mkdir+0x6be/0x920 [ 121.772067][ T5073] ? reiserfs_xattr_init+0x33a/0x720 [ 121.777377][ T5073] ? reiserfs_fill_super+0x1cd9/0x2120 [ 121.782861][ T5073] ? mount_bdev+0x28a/0x3c0 [ 121.787571][ T5073] ? legacy_get_tree+0xe6/0x180 [ 121.792637][ T5073] ? vfs_get_tree+0x88/0x270 [ 121.797344][ T5073] ? do_new_mount+0x247/0xa40 [ 121.802050][ T5073] ? __se_sys_mount+0x2e3/0x3d0 [ 121.806923][ T5073] ? do_syscall_64+0x4c/0xa0 [ 121.811543][ T5073] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.817649][ T5073] ? __wake_up_bit+0x120/0x120 [ 121.822471][ T5073] ? get_parents+0x3d9/0xcd0 [ 121.827088][ T5073] ? get_neighbors+0x98d/0x1000 [ 121.831967][ T5073] ? reiserfs_prepare_for_journal+0x269/0x280 [ 121.838068][ T5073] ? fix_nodes+0x7f2d/0x8720 [ 121.842814][ T5073] do_balance+0x318/0x930 [ 121.847185][ T5073] ? get_right_neighbor_position+0x210/0x210 [ 121.853324][ T5073] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 121.859090][ T5073] reiserfs_paste_into_item+0x744/0x7f0 [ 121.864673][ T5073] ? reiserfs_cut_from_item+0x1ff0/0x1ff0 [ 121.870461][ T5073] ? reiserfs_get_parent+0x2f0/0x2f0 [ 121.875787][ T5073] ? _find_first_zero_bit+0x61/0xf0 [ 121.881066][ T5073] reiserfs_add_entry+0x9bd/0xd80 [ 121.886128][ T5073] ? drop_new_inode+0x60/0x60 [ 121.890909][ T5073] ? journal_begin+0x1f1/0x350 [ 121.895715][ T5073] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 121.902162][ T5073] reiserfs_mkdir+0x6be/0x920 [ 121.906981][ T5073] ? reiserfs_symlink+0x7a0/0x7a0 [ 121.912033][ T5073] ? rwsem_write_trylock+0x135/0x1c0 [ 121.917367][ T5073] ? clear_nonspinnable+0x60/0x60 [ 121.922427][ T5073] ? lookup_one_len+0x19d/0x2d0 [ 121.927399][ T5073] ? lookup_one_common+0x460/0x460 [ 121.932542][ T5073] reiserfs_xattr_init+0x33a/0x720 [ 121.937683][ T5073] reiserfs_fill_super+0x1cd9/0x2120 [ 121.943302][ T5073] ? reiserfs_kill_sb+0x140/0x140 [ 121.948352][ T5073] ? snprintf+0xe5/0x140 [ 121.952627][ T5073] ? vscnprintf+0x80/0x80 [ 121.957045][ T5073] ? up_write+0x1b6/0x410 [ 121.961522][ T5073] ? set_blocksize+0x1f1/0x360 [ 121.966504][ T5073] ? sb_set_blocksize+0xa5/0xe0 [ 121.971567][ T5073] mount_bdev+0x28a/0x3c0 [ 121.975926][ T5073] ? reiserfs_kill_sb+0x140/0x140 [ 121.981102][ T5073] legacy_get_tree+0xe6/0x180 [ 121.985826][ T5073] ? remove_save_link+0x3e0/0x3e0 [ 121.990893][ T5073] vfs_get_tree+0x88/0x270 [ 121.995343][ T5073] do_new_mount+0x247/0xa40 [ 122.000104][ T5073] __se_sys_mount+0x2e3/0x3d0 [ 122.004943][ T5073] ? __x64_sys_mount+0xc0/0xc0 [ 122.010085][ T5073] ? lockdep_hardirqs_on+0x94/0x140 [ 122.015330][ T5073] ? __x64_sys_mount+0x1c/0xc0 [ 122.020145][ T5073] do_syscall_64+0x4c/0xa0 [ 122.024592][ T5073] ? clear_bhb_loop+0x30/0x80 [ 122.029317][ T5073] ? clear_bhb_loop+0x30/0x80 [ 122.034025][ T5073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.039957][ T5073] RIP: 0033:0x7fba8324aa0a [ 122.044437][ T5073] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.064186][ T5073] RSP: 002b:00007fba828aae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.072822][ T5073] RAX: ffffffffffffffda RBX: 00007fba828aaee0 RCX: 00007fba8324aa0a [ 122.080828][ T5073] RDX: 00002000000002c0 RSI: 00002000000031c0 RDI: 00007fba828aaea0 [ 122.088830][ T5073] RBP: 00002000000002c0 R08: 00007fba828aaee0 R09: 0000000000000800 [ 122.097003][ T5073] R10: 0000000000000800 R11: 0000000000000246 R12: 00002000000031c0 [ 122.105027][ T5073] R13: 00007fba828aaea0 R14: 000000000000111e R15: 0000200000000300 [ 122.113069][ T5073] [ 122.117801][ T5073] Kernel Offset: disabled [ 122.122158][ T5073] Rebooting in 86400 seconds..