[ 81.840510][ T1106] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
2026/06/30 07:32:50 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 89.673997][ T4626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 91.480536][ T4689] chnl_net:caif_netlink_parms(): no params data found
[ 91.540624][ T4689] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.548198][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.557171][ T4689] device bridge_slave_0 entered promiscuous mode
[ 91.566116][ T4689] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.573621][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.582088][ T4689] device bridge_slave_1 entered promiscuous mode
[ 91.604677][ T4689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.617672][ T4689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.650690][ T4689] team0: Port device team_slave_0 added
[ 91.661626][ T4689] team0: Port device team_slave_1 added
[ 91.683155][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.691850][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 91.718886][ T4689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.734833][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.742292][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 91.769264][ T4689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.838385][ T4689] device hsr_slave_0 entered promiscuous mode
[ 91.856158][ T4689] device hsr_slave_1 entered promiscuous mode
[ 92.490448][ T4689] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.509220][ T4689] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.528900][ T4689] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.549449][ T4689] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.688146][ T4689] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.709056][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 92.717786][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 92.749238][ T4689] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.760557][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 92.771537][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 92.796747][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.809063][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.878041][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 92.896294][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 92.920345][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 92.931180][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.938370][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.947873][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 92.956945][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 92.968066][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 92.986835][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 93.015028][ T4689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 93.027275][ T4689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 93.040028][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 93.049954][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 93.059154][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 93.068911][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 93.087164][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 93.099684][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 93.109520][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 93.126178][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 93.297716][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 93.315936][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 93.330828][ T4689] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.378400][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 93.388278][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 93.419542][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 93.429767][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 93.441446][ T4689] device veth0_vlan entered promiscuous mode
[ 93.450524][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 93.459038][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 93.473089][ T4689] device veth1_vlan entered promiscuous mode
[ 93.534432][ T4689] device veth0_macvtap entered promiscuous mode
[ 93.543461][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 93.554294][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 93.565811][ T4689] device veth1_macvtap entered promiscuous mode
[ 93.574052][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 93.582758][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 93.602854][ T4689] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.618232][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 93.628846][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 93.642489][ T4689] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.660700][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 93.687111][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 93.699391][ T4689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.708843][ T4689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.719058][ T4689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.730080][ T4689] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.136902][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.148583][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.167468][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.184653][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.194376][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.203392][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 95.959919][ T4231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.931161][ T4231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.983329][ T4231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.056445][ T4231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/30 07:33:03 executed programs: 0
[ 99.798809][ T5122] chnl_net:caif_netlink_parms(): no params data found
[ 99.878126][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.885440][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.893402][ T5122] device bridge_slave_0 entered promiscuous mode
[ 99.902588][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.909890][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.918036][ T5122] device bridge_slave_1 entered promiscuous mode
[ 99.948794][ T4231] device hsr_slave_0 left promiscuous mode
[ 99.958294][ T4231] device hsr_slave_1 left promiscuous mode
[ 99.965969][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.974692][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.986913][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.994723][ T4231] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.003114][ T4231] device bridge_slave_1 left promiscuous mode
[ 100.009874][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.020247][ T4231] device bridge_slave_0 left promiscuous mode
[ 100.027709][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.041113][ T4231] device veth1_macvtap left promiscuous mode
[ 100.047851][ T4231] device veth0_macvtap left promiscuous mode
[ 100.054286][ T4231] device veth1_vlan left promiscuous mode
[ 100.060194][ T4231] device veth0_vlan left promiscuous mode
[ 100.277887][ T4231] team0 (unregistering): Port device team_slave_1 removed
[ 100.290092][ T4231] team0 (unregistering): Port device team_slave_0 removed
[ 100.301734][ T4231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.319440][ T4231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.367500][ T4231] bond0 (unregistering): Released all slaves
[ 100.440281][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.451451][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.477400][ T5122] team0: Port device team_slave_0 added
[ 100.485381][ T5122] team0: Port device team_slave_1 added
[ 100.502681][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.510046][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.536532][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.549858][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.557406][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.584668][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.638747][ T5122] device hsr_slave_0 entered promiscuous mode
[ 100.646445][ T5122] device hsr_slave_1 entered promiscuous mode
[ 101.190579][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.218866][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.238888][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.258893][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.352042][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.368238][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 101.385941][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 101.396396][ T5122] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.408269][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 101.418735][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 101.428718][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.436033][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.457827][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 101.466525][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 101.477001][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 101.491926][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.499062][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.509336][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 101.519562][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 101.530142][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 101.540423][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 101.563666][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 101.573288][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 101.582675][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 101.599885][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 101.611129][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 101.620215][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 101.630216][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 101.640650][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 101.686161][ T5067] Bluetooth: hci0: command 0x0409 tx timeout
[ 101.794934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 101.811518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 101.842086][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.881774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 101.907545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 101.945675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 101.965670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 101.977313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 101.992697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 102.010629][ T5122] device veth0_vlan entered promiscuous mode
[ 102.032203][ T5122] device veth1_vlan entered promiscuous mode
[ 102.081528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 102.097718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 102.114066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 102.127554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 102.141904][ T5122] device veth0_macvtap entered promiscuous mode
[ 102.159281][ T5122] device veth1_macvtap entered promiscuous mode
[ 102.194888][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.207065][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 102.221051][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 102.229810][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 102.239730][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 102.252305][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.261547][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 102.271170][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 102.287236][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.297765][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.308193][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.319486][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.426971][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.434959][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.479568][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 102.496838][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.504776][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.521265][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 102.678602][ T5217] loop0: detected capacity change from 0 to 8192
[ 102.761194][ T5217] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 102.814383][ T5217] REISERFS (device loop0): using ordered data mode
[ 102.835267][ T5217] reiserfs: using flush barriers
[ 102.869732][ T5217] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 102.906077][ T5217] REISERFS (device loop0): checking transaction log (loop0)
[ 102.947260][ T5217] REISERFS (device loop0): Using tea hash to sort names
[ 102.954789][ T5217] REISERFS (device loop0): using 3.5.x disk format
[ 102.973857][ T5217] ==================================================================
[ 102.982146][ T5217] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7cb/0x1140
[ 102.991048][ T5217] Read of size 18446744073709551584 at addr ffff888060408fa4 by task syz.0.17/5217
[ 103.001040][ T5217]
[ 103.003665][ T5217] CPU: 1 PID: 5217 Comm: syz.0.17 Not tainted syzkaller #0
[ 103.011308][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 103.022003][ T5217] Call Trace:
[ 103.025387][ T5217]
[ 103.029482][ T5217] dump_stack_lvl+0x188/0x250
[ 103.034648][ T5217] ? show_regs_print_info+0x20/0x20
[ 103.040568][ T5217] ? load_image+0x410/0x410
[ 103.045103][ T5217] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 103.050696][ T5217] ? __lock_acquire+0x13dc/0x7b50
[ 103.056981][ T5217] print_address_description+0x60/0x2d0
[ 103.062653][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.069709][ T5217] kasan_report+0xdf/0x130
[ 103.074364][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.079686][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.085347][ T5217] kasan_check_range+0x235/0x290
[ 103.090588][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.096436][ T5217] memmove+0x25/0x60
[ 103.100377][ T5217] leaf_paste_entries+0x7cb/0x1140
[ 103.105993][ T5217] balance_leaf+0xc14c/0x10ec0
[ 103.111336][ T5217] ? mark_lock+0x94/0x320
[ 103.115873][ T5217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 103.121991][ T5217] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 103.127913][ T5217] ? do_balance+0x930/0x930
[ 103.132623][ T5217] ? _raw_spin_unlock+0x40/0x40
[ 103.137677][ T5217] ? stack_trace_snprint+0xe0/0xe0
[ 103.143803][ T5217] ? stack_depot_save+0x41b/0x460
[ 103.148863][ T5217] ? __kasan_kmalloc+0xc6/0xe0
[ 103.153659][ T5217] ? __kasan_kmalloc+0xaf/0xe0
[ 103.158535][ T5217] ? fix_nodes+0x63f2/0x8720
[ 103.163154][ T5217] ? reiserfs_paste_into_item+0x60b/0x7f0
[ 103.168910][ T5217] ? reiserfs_add_entry+0x9bd/0xd80
[ 103.174128][ T5217] ? reiserfs_mkdir+0x6be/0x920
[ 103.179012][ T5217] ? reiserfs_xattr_init+0x33a/0x720
[ 103.184412][ T5217] ? reiserfs_fill_super+0x1cd9/0x2120
[ 103.190004][ T5217] ? mount_bdev+0x28a/0x3c0
[ 103.194530][ T5217] ? legacy_get_tree+0xe6/0x180
[ 103.199402][ T5217] ? vfs_get_tree+0x88/0x270
[ 103.204017][ T5217] ? do_new_mount+0x247/0xa40
[ 103.209107][ T5217] ? __se_sys_mount+0x2e3/0x3d0
[ 103.214268][ T5217] ? do_syscall_64+0x4c/0xa0
[ 103.218875][ T5217] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.224987][ T5217] ? __wake_up_bit+0x120/0x120
[ 103.229966][ T5217] ? get_parents+0x3d9/0xcd0
[ 103.234664][ T5217] ? get_neighbors+0x98d/0x1000
[ 103.239610][ T5217] ? reiserfs_prepare_for_journal+0x269/0x280
[ 103.246287][ T5217] ? fix_nodes+0x7f2d/0x8720
[ 103.250946][ T5217] do_balance+0x318/0x930
[ 103.255398][ T5217] ? get_right_neighbor_position+0x210/0x210
[ 103.261505][ T5217] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 103.268089][ T5217] reiserfs_paste_into_item+0x744/0x7f0
[ 103.274087][ T5217] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 103.280101][ T5217] ? reiserfs_get_parent+0x2f0/0x2f0
[ 103.285441][ T5217] ? _find_first_zero_bit+0x61/0xf0
[ 103.291030][ T5217] reiserfs_add_entry+0x9bd/0xd80
[ 103.296184][ T5217] ? drop_new_inode+0x60/0x60
[ 103.301176][ T5217] ? journal_begin+0x1f1/0x350
[ 103.305978][ T5217] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 103.312448][ T5217] reiserfs_mkdir+0x6be/0x920
[ 103.317162][ T5217] ? reiserfs_symlink+0x7a0/0x7a0
[ 103.322395][ T5217] ? rwsem_write_trylock+0x135/0x1c0
[ 103.328623][ T5217] ? clear_nonspinnable+0x60/0x60
[ 103.333672][ T5217] ? lookup_one_len+0x19d/0x2d0
[ 103.338565][ T5217] ? lookup_one_common+0x460/0x460
[ 103.343712][ T5217] reiserfs_xattr_init+0x33a/0x720
[ 103.349053][ T5217] reiserfs_fill_super+0x1cd9/0x2120
[ 103.354565][ T5217] ? reiserfs_kill_sb+0x140/0x140
[ 103.359608][ T5217] ? snprintf+0xe5/0x140
[ 103.366642][ T5217] ? vscnprintf+0x80/0x80
[ 103.371401][ T5217] ? up_write+0x1b6/0x410
[ 103.375921][ T5217] ? set_blocksize+0x1f1/0x360
[ 103.380800][ T5217] ? sb_set_blocksize+0xa5/0xe0
[ 103.385949][ T5217] mount_bdev+0x28a/0x3c0
[ 103.390588][ T5217] ? reiserfs_kill_sb+0x140/0x140
[ 103.395731][ T5217] legacy_get_tree+0xe6/0x180
[ 103.401544][ T5217] ? remove_save_link+0x3e0/0x3e0
[ 103.407170][ T5217] vfs_get_tree+0x88/0x270
[ 103.411720][ T5217] do_new_mount+0x247/0xa40
[ 103.416255][ T5217] __se_sys_mount+0x2e3/0x3d0
[ 103.421075][ T5217] ? __x64_sys_mount+0xc0/0xc0
[ 103.425967][ T5217] ? lockdep_hardirqs_on+0x94/0x140
[ 103.431450][ T5217] ? __x64_sys_mount+0x1c/0xc0
[ 103.436421][ T5217] do_syscall_64+0x4c/0xa0
[ 103.440876][ T5217] ? clear_bhb_loop+0x30/0x80
[ 103.445673][ T5217] ? clear_bhb_loop+0x30/0x80
[ 103.450605][ T5217] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.456529][ T5217] RIP: 0033:0x7f80b9f18a0a
[ 103.461085][ T5217] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.481141][ T5217] RSP: 002b:00007f80b9578e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 103.489577][ T5217] RAX: ffffffffffffffda RBX: 00007f80b9578ee0 RCX: 00007f80b9f18a0a
[ 103.497887][ T5217] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 00007f80b9578ea0
[ 103.506067][ T5217] RBP: 00002000000001c0 R08: 00007f80b9578ee0 R09: 0000000003000012
[ 103.514237][ T5217] R10: 0000000003000012 R11: 0000000000000246 R12: 0000200000000040
[ 103.522436][ T5217] R13: 00007f80b9578ea0 R14: 0000000000001119 R15: 0000200000000180
[ 103.530625][ T5217]
[ 103.533690][ T5217]
[ 103.536117][ T5217] The buggy address belongs to the page:
[ 103.542602][ T5217] page:ffffea0001810200 refcount:3 mapcount:0 mapping:ffff888140815af8 index:0x213 pfn:0x60408
[ 103.552945][ T5217] memcg:ffff888078984000
[ 103.557561][ T5217] aops:def_blk_aops ino:700000
[ 103.562535][ T5217] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 103.571961][ T5217] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff888140815af8
[ 103.580827][ T5217] raw: 0000000000000213 ffff888145d74570 00000003ffffffff ffff888078984000
[ 103.589715][ T5217] page dumped because: kasan: bad access detected
[ 103.596434][ T5217] page_owner tracks the page as allocated
[ 103.602301][ T5217] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5217, ts 102946523980, free_ts 101264485152
[ 103.620215][ T5217] get_page_from_freelist+0x24f6/0x2670
[ 103.625871][ T5217] __alloc_pages+0x1ee/0x480
[ 103.630483][ T5217] __page_cache_alloc+0xce/0x440
[ 103.636086][ T5217] pagecache_get_page+0x9b8/0xf20
[ 103.642631][ T5217] __getblk_gfp+0x240/0xb20
[ 103.647431][ T5217] search_by_key+0x474/0x4400
[ 103.652263][ T5217] reiserfs_read_locked_inode+0x195/0x24c0
[ 103.658328][ T5217] reiserfs_fill_super+0x1126/0x2120
[ 103.664039][ T5217] mount_bdev+0x28a/0x3c0
[ 103.668744][ T5217] legacy_get_tree+0xe6/0x180
[ 103.673547][ T5217] vfs_get_tree+0x88/0x270
[ 103.678004][ T5217] do_new_mount+0x247/0xa40
[ 103.682630][ T5217] __se_sys_mount+0x2e3/0x3d0
[ 103.687336][ T5217] do_syscall_64+0x4c/0xa0
[ 103.691772][ T5217] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.698215][ T5217] page last free stack trace:
[ 103.702912][ T5217] free_unref_page_prepare+0x637/0x6c0
[ 103.708803][ T5217] free_unref_page_list+0x119/0x830
[ 103.714340][ T5217] release_pages+0x185f/0x1bd0
[ 103.719388][ T5217] tlb_finish_mmu+0x1b4/0x370
[ 103.724097][ T5217] exit_mmap+0x3d0/0x640
[ 103.728573][ T5217] __mmput+0x115/0x390
[ 103.732713][ T5217] exit_mm+0x632/0x7b0
[ 103.736786][ T5217] do_exit+0x5b8/0x2110
[ 103.741027][ T5217] do_group_exit+0x12c/0x2f0
[ 103.745623][ T5217] __x64_sys_exit_group+0x3b/0x40
[ 103.750832][ T5217] do_syscall_64+0x4c/0xa0
[ 103.756073][ T5217] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.762221][ T5217]
[ 103.764549][ T5217] Memory state around the buggy address:
[ 103.770355][ T5217] ffff888060408e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 103.780406][ T5217] ffff888060408f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 103.789119][ T5217] >ffff888060408f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 103.797437][ T5217] ^
[ 103.802971][ T5217] ffff888060409000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 103.811655][ T5217] ffff888060409080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 103.819972][ T5217] ==================================================================
[ 103.828388][ T5217] Disabling lock debugging due to kernel taint
[ 103.838031][ T5067] Bluetooth: hci0: command 0x041b tx timeout
[ 103.848045][ T5217] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 103.856600][ T5217] CPU: 0 PID: 5217 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 103.866945][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 103.877602][ T5217] Call Trace:
[ 103.880875][ T5217]
[ 103.883794][ T5217] dump_stack_lvl+0x188/0x250
[ 103.888559][ T5217] ? show_regs_print_info+0x20/0x20
[ 103.893923][ T5217] ? load_image+0x410/0x410
[ 103.898420][ T5217] panic+0x2f8/0x850
[ 103.902496][ T5217] ? bpf_jit_dump+0xd0/0xd0
[ 103.907131][ T5217] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 103.913133][ T5217] ? _raw_spin_unlock+0x40/0x40
[ 103.918069][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.923450][ T5217] check_panic_on_warn+0x80/0xa0
[ 103.928605][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.934317][ T5217] end_report+0x6d/0xf0
[ 103.938551][ T5217] kasan_report+0x102/0x130
[ 103.943503][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.949167][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.954466][ T5217] kasan_check_range+0x235/0x290
[ 103.959849][ T5217] ? leaf_paste_entries+0x7cb/0x1140
[ 103.965596][ T5217] memmove+0x25/0x60
[ 103.969728][ T5217] leaf_paste_entries+0x7cb/0x1140
[ 103.975308][ T5217] balance_leaf+0xc14c/0x10ec0
[ 103.980099][ T5217] ? mark_lock+0x94/0x320
[ 103.984430][ T5217] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 103.990809][ T5217] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 103.996916][ T5217] ? do_balance+0x930/0x930
[ 104.001507][ T5217] ? _raw_spin_unlock+0x40/0x40
[ 104.006360][ T5217] ? stack_trace_snprint+0xe0/0xe0
[ 104.011733][ T5217] ? stack_depot_save+0x41b/0x460
[ 104.017114][ T5217] ? __kasan_kmalloc+0xc6/0xe0
[ 104.021868][ T5217] ? __kasan_kmalloc+0xaf/0xe0
[ 104.026652][ T5217] ? fix_nodes+0x63f2/0x8720
[ 104.031381][ T5217] ? reiserfs_paste_into_item+0x60b/0x7f0
[ 104.037278][ T5217] ? reiserfs_add_entry+0x9bd/0xd80
[ 104.042475][ T5217] ? reiserfs_mkdir+0x6be/0x920
[ 104.047419][ T5217] ? reiserfs_xattr_init+0x33a/0x720
[ 104.052692][ T5217] ? reiserfs_fill_super+0x1cd9/0x2120
[ 104.058667][ T5217] ? mount_bdev+0x28a/0x3c0
[ 104.064140][ T5217] ? legacy_get_tree+0xe6/0x180
[ 104.069090][ T5217] ? vfs_get_tree+0x88/0x270
[ 104.074080][ T5217] ? do_new_mount+0x247/0xa40
[ 104.079035][ T5217] ? __se_sys_mount+0x2e3/0x3d0
[ 104.083971][ T5217] ? do_syscall_64+0x4c/0xa0
[ 104.088712][ T5217] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.094997][ T5217] ? __wake_up_bit+0x120/0x120
[ 104.099975][ T5217] ? get_parents+0x3d9/0xcd0
[ 104.104848][ T5217] ? get_neighbors+0x98d/0x1000
[ 104.109692][ T5217] ? reiserfs_prepare_for_journal+0x269/0x280
[ 104.116302][ T5217] ? fix_nodes+0x7f2d/0x8720
[ 104.120986][ T5217] do_balance+0x318/0x930
[ 104.125327][ T5217] ? get_right_neighbor_position+0x210/0x210
[ 104.131488][ T5217] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 104.137237][ T5217] reiserfs_paste_into_item+0x744/0x7f0
[ 104.142775][ T5217] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 104.148493][ T5217] ? reiserfs_get_parent+0x2f0/0x2f0
[ 104.153797][ T5217] ? _find_first_zero_bit+0x61/0xf0
[ 104.159424][ T5217] reiserfs_add_entry+0x9bd/0xd80
[ 104.164441][ T5217] ? drop_new_inode+0x60/0x60
[ 104.169134][ T5217] ? journal_begin+0x1f1/0x350
[ 104.173897][ T5217] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 104.180492][ T5217] reiserfs_mkdir+0x6be/0x920
[ 104.185167][ T5217] ? reiserfs_symlink+0x7a0/0x7a0
[ 104.190439][ T5217] ? rwsem_write_trylock+0x135/0x1c0
[ 104.195972][ T5217] ? clear_nonspinnable+0x60/0x60
[ 104.201074][ T5217] ? lookup_one_len+0x19d/0x2d0
[ 104.205934][ T5217] ? lookup_one_common+0x460/0x460
[ 104.211197][ T5217] reiserfs_xattr_init+0x33a/0x720
[ 104.216308][ T5217] reiserfs_fill_super+0x1cd9/0x2120
[ 104.221674][ T5217] ? reiserfs_kill_sb+0x140/0x140
[ 104.226683][ T5217] ? snprintf+0xe5/0x140
[ 104.230933][ T5217] ? vscnprintf+0x80/0x80
[ 104.235244][ T5217] ? up_write+0x1b6/0x410
[ 104.239571][ T5217] ? set_blocksize+0x1f1/0x360
[ 104.244336][ T5217] ? sb_set_blocksize+0xa5/0xe0
[ 104.249270][ T5217] mount_bdev+0x28a/0x3c0
[ 104.253617][ T5217] ? reiserfs_kill_sb+0x140/0x140
[ 104.258638][ T5217] legacy_get_tree+0xe6/0x180
[ 104.263317][ T5217] ? remove_save_link+0x3e0/0x3e0
[ 104.268340][ T5217] vfs_get_tree+0x88/0x270
[ 104.272817][ T5217] do_new_mount+0x247/0xa40
[ 104.277414][ T5217] __se_sys_mount+0x2e3/0x3d0
[ 104.282086][ T5217] ? __x64_sys_mount+0xc0/0xc0
[ 104.287023][ T5217] ? lockdep_hardirqs_on+0x94/0x140
[ 104.292532][ T5217] ? __x64_sys_mount+0x1c/0xc0
[ 104.297825][ T5217] do_syscall_64+0x4c/0xa0
[ 104.302573][ T5217] ? clear_bhb_loop+0x30/0x80
[ 104.309247][ T5217] ? clear_bhb_loop+0x30/0x80
[ 104.314023][ T5217] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.320277][ T5217] RIP: 0033:0x7f80b9f18a0a
[ 104.324698][ T5217] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.348896][ T5217] RSP: 002b:00007f80b9578e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 104.359348][ T5217] RAX: ffffffffffffffda RBX: 00007f80b9578ee0 RCX: 00007f80b9f18a0a
[ 104.367910][ T5217] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 00007f80b9578ea0
[ 104.376124][ T5217] RBP: 00002000000001c0 R08: 00007f80b9578ee0 R09: 0000000003000012
[ 104.384094][ T5217] R10: 0000000003000012 R11: 0000000000000246 R12: 0000200000000040
[ 104.392540][ T5217] R13: 00007f80b9578ea0 R14: 0000000000001119 R15: 0000200000000180
[ 104.401031][ T5217]
[ 104.404479][ T5217] Kernel Offset: disabled
[ 104.409465][ T5217] Rebooting in 86400 seconds..