Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 parsed 1 programs [ 61.818978][ T4489] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 65.079170][ T4569] chnl_net:caif_netlink_parms(): no params data found [ 65.096261][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.097563][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.099719][ T4569] device bridge_slave_0 entered promiscuous mode [ 65.101693][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.102803][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.104288][ T4569] device bridge_slave_1 entered promiscuous mode [ 65.111724][ T4569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.114093][ T4569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.123054][ T4569] team0: Port device team_slave_0 added [ 65.124771][ T4569] team0: Port device team_slave_1 added [ 65.131125][ T4569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.132234][ T4569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.135824][ T4569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.137926][ T4569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.139630][ T4569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.143402][ T4569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.199933][ T4569] device hsr_slave_0 entered promiscuous mode [ 65.238961][ T4569] device hsr_slave_1 entered promiscuous mode [ 65.824283][ T4569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.859947][ T4569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.880009][ T4569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.920452][ T4569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.946403][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.947582][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.948850][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.949965][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.967577][ T4569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.971591][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.973285][ T1628] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.974699][ T1628] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.976487][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.982742][ T4569] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.986533][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.988089][ T556] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.989255][ T556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.993679][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.995387][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.996476][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.004929][ T4569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.006579][ T4569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.010577][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.013004][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.014631][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.016407][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.017829][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.020165][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.061246][ T4569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.070582][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.071704][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.073113][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.077006][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.078585][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.081516][ T4569] device veth0_vlan entered promiscuous mode [ 66.082946][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.084285][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.088441][ T4569] device veth1_vlan entered promiscuous mode [ 66.097327][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.099053][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.100615][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.102203][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.110606][ T4569] device veth0_macvtap entered promiscuous mode [ 66.113323][ T4569] device veth1_macvtap entered promiscuous mode [ 66.118671][ T4569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.120047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.121611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.122986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.124452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.127840][ T4569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.130192][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.131647][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.134581][ T4569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135937][ T4569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.137181][ T4569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.138407][ T4569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.423276][ T1628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.610107][ T1541] cfg80211: failed to load regulatory.db [ 69.610180][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612267][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.741596][ T1628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.131640][ T1628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.182264][ T1628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.453694][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.454927][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.456154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.467435][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.468635][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.475786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:13 executed programs: 0 [ 73.118898][ T5047] chnl_net:caif_netlink_parms(): no params data found [ 73.141387][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.142625][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.144175][ T5047] device bridge_slave_0 entered promiscuous mode [ 73.146253][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.147330][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.149494][ T5047] device bridge_slave_1 entered promiscuous mode [ 73.158127][ T5047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.162386][ T1628] device hsr_slave_0 left promiscuous mode [ 73.199268][ T1628] device hsr_slave_1 left promiscuous mode [ 73.278849][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.280139][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.281782][ T1628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.282975][ T1628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.284319][ T1628] device bridge_slave_1 left promiscuous mode [ 73.285394][ T1628] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.329373][ T1628] device bridge_slave_0 left promiscuous mode [ 73.330425][ T1628] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.448999][ T1628] device veth1_macvtap left promiscuous mode [ 73.450027][ T1628] device veth0_macvtap left promiscuous mode [ 73.451033][ T1628] device veth1_vlan left promiscuous mode [ 73.451905][ T1628] device veth0_vlan left promiscuous mode [ 73.538636][ T1628] team0 (unregistering): Port device team_slave_1 removed [ 73.544249][ T1628] team0 (unregistering): Port device team_slave_0 removed [ 73.548053][ T1628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.591759][ T1628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.682756][ T1628] bond0 (unregistering): Released all slaves [ 73.762207][ T5047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.776641][ T5047] team0: Port device team_slave_0 added [ 73.781293][ T5047] team0: Port device team_slave_1 added [ 73.788184][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.789449][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.793143][ T5047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.795469][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.796490][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.800548][ T5047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.850768][ T5047] device hsr_slave_0 entered promiscuous mode [ 73.889019][ T5047] device hsr_slave_1 entered promiscuous mode [ 74.456497][ T5047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.490108][ T5047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.510078][ T5047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.546854][ T5047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.651496][ T5047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.656155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.657799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.663975][ T5047] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.670678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.672320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.673794][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.674899][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.676411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.687026][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.688576][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.690678][ T556] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.692062][ T556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.700978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.703739][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.706509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.708624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.711484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.721681][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.723384][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.726354][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.733779][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.740152][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.837311][ T5047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.841263][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.842462][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.849746][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.851351][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.858704][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.860215][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.861739][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.862949][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.866529][ T5047] device veth0_vlan entered promiscuous mode [ 74.874853][ T5047] device veth1_vlan entered promiscuous mode [ 74.891183][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.892742][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.894225][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.895708][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.899069][ T5047] device veth0_macvtap entered promiscuous mode [ 74.901571][ T5047] device veth1_macvtap entered promiscuous mode [ 74.915087][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.916327][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.917692][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.919405][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.921065][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.925221][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.926490][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.928049][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.931615][ T5047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.933024][ T5047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.934404][ T5047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.935800][ T5047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.972793][ T345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.974090][ T345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.975459][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.994358][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.995685][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.996974][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.071295][ T5191] loop0: detected capacity change from 0 to 8192 [ 75.099118][ T5191] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 75.100684][ T5191] REISERFS (device loop0): using ordered data mode [ 75.101652][ T5191] reiserfs: using flush barriers [ 75.103832][ T5191] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.106410][ T5191] REISERFS (device loop0): checking transaction log (loop0) [ 75.129054][ T4150] Bluetooth: hci0: command 0x0409 tx timeout [ 75.160656][ T5191] REISERFS (device loop0): Using tea hash to sort names [ 75.163429][ T5191] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 75.193317][ T5191] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 75.195850][ T5191] ================================================================== [ 75.197141][ T5191] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x198/0xa0c [ 75.198348][ T5191] Write of size 3936 at addr ffff0000ec9a8140 by task syz.0.15/5191 [ 75.199539][ T5191] [ 75.199914][ T5191] CPU: 0 PID: 5191 Comm: syz.0.15 Not tainted syzkaller #0 [ 75.200976][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.202514][ T5191] Call trace: [ 75.203031][ T5191] dump_backtrace+0x0/0x458 [ 75.203694][ T5191] show_stack+0x2c/0x3c [ 75.204296][ T5191] __dump_stack+0x30/0x40 [ 75.204964][ T5191] dump_stack_lvl+0xf4/0x15c [ 75.205658][ T5191] print_address_description+0x78/0x30c [ 75.206490][ T5191] kasan_report+0xec/0x158 [ 75.207140][ T5191] kasan_check_range+0x268/0x2a0 [ 75.207869][ T5191] memmove+0xb4/0xe8 [ 75.208434][ T5191] leaf_paste_in_buffer+0x198/0xa0c [ 75.209190][ T5191] leaf_copy_boundary_item+0x930/0x19dc [ 75.210017][ T5191] leaf_move_items+0x6a0/0xbb0 [ 75.210725][ T5191] leaf_shift_left+0xc8/0x3ac [ 75.211415][ T5191] balance_leaf+0x84e0/0xd92c [ 75.212195][ T5191] do_balance+0x270/0x790 [ 75.212872][ T5191] reiserfs_paste_into_item+0x5d0/0x6e0 [ 75.213709][ T5191] reiserfs_get_block+0x14bc/0x3654 [ 75.214467][ T5191] __block_write_begin_int+0x3d8/0x1530 [ 75.215312][ T5191] __block_write_begin+0x40/0x54 [ 75.216094][ T5191] reiserfs_write_begin+0x3c8/0x654 [ 75.216934][ T5191] pagecache_write_begin+0xa0/0xc0 [ 75.217752][ T5191] generic_cont_expand_simple+0xf4/0x1ac [ 75.218591][ T5191] reiserfs_setattr+0x338/0xddc [ 75.219291][ T5191] notify_change+0xa08/0xcd8 [ 75.219991][ T5191] do_truncate+0x188/0x20c [ 75.220631][ T5191] do_sys_ftruncate+0x284/0x31c [ 75.221315][ T5191] __arm64_sys_ftruncate+0x60/0x74 [ 75.222063][ T5191] invoke_syscall+0x98/0x2b0 [ 75.222764][ T5191] el0_svc_common+0x138/0x258 [ 75.223460][ T5191] do_el0_svc+0x58/0x13c [ 75.224170][ T5191] el0_svc+0x78/0x1d0 [ 75.224774][ T5191] el0t_64_sync_handler+0xcc/0xe4 [ 75.225483][ T5191] el0t_64_sync+0x1a0/0x1a4 [ 75.226160][ T5191] [ 75.226520][ T5191] The buggy address belongs to the page: [ 75.227375][ T5191] page:0000000086f518d7 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12c9a8 [ 75.228923][ T5191] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 75.229967][ T5191] raw: 05ffc00000000000 fffffc0003b26988 fffffc0003b26508 0000000000000000 [ 75.231232][ T5191] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 75.232433][ T5191] page dumped because: kasan: bad access detected [ 75.233402][ T5191] [ 75.233744][ T5191] Memory state around the buggy address: [ 75.234587][ T5191] ffff0000ec9a8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.235841][ T5191] ffff0000ec9a8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.237055][ T5191] >ffff0000ec9a8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.238212][ T5191] ^ [ 75.239098][ T5191] ffff0000ec9a8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.240272][ T5191] ffff0000ec9a8200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.241463][ T5191] ================================================================== [ 75.242568][ T5191] Disabling lock debugging due to kernel taint [ 75.248272][ T5190] ================================================================================ [ 75.248897][ T4150] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 75.249869][ T5190] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 75.251250][ T4150] CPU: 1 PID: 4150 Comm: kworker/1:9 Tainted: G B syzkaller #0 [ 75.252418][ T5190] index 16382 is out of range for type 'unsigned long[8]' [ 75.253691][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.256137][ T4150] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 75.257270][ T4150] Modules linked in: [ 75.257834][ T4150] CPU: 1 PID: 4150 Comm: kworker/1:9 Tainted: G B syzkaller #0 [ 75.259071][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.282792][ C0] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000134 [ 75.284277][ C0] Mem abort info: [ 75.284872][ C0] ESR = 0x0000000096000006 [ 75.285585][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 75.286485][ C0] SET = 0, FnV = 0 [ 75.287110][ C0] EA = 0, S1PTW = 0 [ 75.287661][ C0] FSC = 0x06: level 2 translation fault [ 75.288480][ C0] Data abort info: [ 75.289075][ C0] ISV = 0, ISS = 0x00000006 [ 75.289811][ C0] CM = 0, WnR = 0 [ 75.290377][ C0] user pgtable: 4k pages, 48-bit VAs, pgdp=000000012b670000 [ 75.291426][ C0] [0000000000000134] pgd=080000011c71c003, p4d=080000011c71c003, pud=080000011d5d4003, pmd=0000000000000000