[ 71.278272][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.284748][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts.
2025/10/28 14:29:58 ignoring optional flag "type"="gce"
2025/10/28 14:29:58 parsed 1 programs
2025/10/28 14:30:00 executed programs: 0
[ 76.101815][ T4454] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 76.228270][ T4510] chnl_net:caif_netlink_parms(): no params data found
[ 76.263354][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.270646][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.278359][ T4510] device bridge_slave_0 entered promiscuous mode
[ 76.286447][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.293572][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.301509][ T4510] device bridge_slave_1 entered promiscuous mode
[ 76.320729][ T4510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.331635][ T4510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.351937][ T4510] team0: Port device team_slave_0 added
[ 76.359242][ T4510] team0: Port device team_slave_1 added
[ 76.374740][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.381857][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.397910][ T1108] cfg80211: failed to load regulatory.db
[ 76.408459][ T4510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.427650][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.434599][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.461989][ T4510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.503610][ T4510] device hsr_slave_0 entered promiscuous mode
[ 76.510534][ T4510] device hsr_slave_1 entered promiscuous mode
[ 77.073161][ T4510] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.084199][ T4510] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.094247][ T4510] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.105008][ T4510] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.130622][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.137839][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.145609][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.152706][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.207334][ T4510] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.222607][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.231618][ T765] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.240804][ T765] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.249932][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 77.264595][ T4510] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.275173][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 77.292337][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.301975][ T765] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.309116][ T765] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.326464][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 77.335875][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.344504][ T765] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.351640][ T765] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.362114][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 77.381012][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 77.390606][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 77.401569][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.410443][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 77.421531][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.437218][ T4510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 77.448284][ T4510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 77.461622][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.471136][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 77.480495][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.489712][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 77.498882][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.512904][ T765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.623575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.633363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.647313][ T4510] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.668721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.678236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.699965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.708481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.718565][ T4510] device veth0_vlan entered promiscuous mode
[ 77.726338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.736038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.748572][ T4510] device veth1_vlan entered promiscuous mode
[ 77.773156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.784171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.793584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.803503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.816570][ T4510] device veth0_macvtap entered promiscuous mode
[ 77.827253][ T4510] device veth1_macvtap entered promiscuous mode
[ 77.844490][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.852072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.862298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 77.871044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.880300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.893266][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.906594][ T4510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.915905][ T4510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.924880][ T4510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.934221][ T4510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.944936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.954710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 78.066886][ T4597] loop0: detected capacity change from 0 to 8192
[ 78.123339][ T4597] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 78.151165][ T4597] REISERFS (device loop0): using ordered data mode
[ 78.156306][ T4186] Bluetooth: hci0: command 0x0409 tx timeout
[ 78.168998][ T4597] reiserfs: using flush barriers
[ 78.177334][ T4597] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 78.196412][ T4597] REISERFS (device loop0): checking transaction log (loop0)
[ 78.354572][ T4597] REISERFS (device loop0): Using tea hash to sort names
[ 78.365006][ T4597] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 78.453195][ T4597] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024)
[ 78.471525][ T4597] REISERFS (device loop0): Remounting filesystem read-only
[ 78.480010][ T4597] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 265880 (1024)
[ 78.490904][ T4597] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 593568 (1024)
[ 78.501835][ T4597] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 78.512267][ T4597] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 78.523980][ T4597] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 5 on readonly FS
[ 78.749437][ T4635] loop0: detected capacity change from 0 to 8192
[ 78.879912][ T4635] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 78.896663][ T4635] REISERFS (device loop0): using ordered data mode
[ 78.903236][ T4635] reiserfs: using flush barriers
[ 78.928019][ T4635] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 78.946195][ T4635] REISERFS (device loop0): checking transaction log (loop0)
[ 79.051061][ T4635] REISERFS (device loop0): Using tea hash to sort names
[ 79.058772][ T4635] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 79.140697][ T4635] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024)
[ 79.155918][ T4635] REISERFS (device loop0): Remounting filesystem read-only
[ 79.163396][ T4635] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 265880 (1024)
[ 79.174360][ T4635] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 593568 (1024)
[ 79.185446][ T4635] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 79.197711][ T4635] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 79.208364][ T4635] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 5 on readonly FS
[ 79.391085][ T4668] loop0: detected capacity change from 0 to 8192
[ 79.417168][ T4668] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 79.426639][ T4668] REISERFS (device loop0): using ordered data mode
[ 79.433348][ T4668] reiserfs: using flush barriers
[ 79.441630][ T4668] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 79.459187][ T4668] REISERFS (device loop0): checking transaction log (loop0)
[ 79.571220][ T4668] REISERFS (device loop0): Using tea hash to sort names
[ 79.578681][ T4668] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 79.660700][ T4668] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024)
[ 79.672159][ T4668] REISERFS (device loop0): Remounting filesystem read-only
[ 79.684176][ T4668] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 265880 (1024)
[ 79.695314][ T4668] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 593568 (1024)
[ 79.706270][ T4668] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 79.716937][ T4668] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 79.727514][ T4668] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 5 on readonly FS
[ 79.902670][ T4696] loop0: detected capacity change from 0 to 8192
[ 79.927354][ T4696] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 79.946020][ T4696] REISERFS (device loop0): using ordered data mode
[ 79.957585][ T4696] reiserfs: using flush barriers
[ 79.963636][ T4696] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 79.981348][ T4696] REISERFS (device loop0): checking transaction log (loop0)
[ 80.064192][ T4696] REISERFS (device loop0): Using tea hash to sort names
[ 80.071604][ T4696] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 80.131947][ T4696] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024)
[ 80.142887][ T4696] REISERFS (device loop0): Remounting filesystem read-only
[ 80.151727][ T4696] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 265880 (1024)
[ 80.162643][ T4696] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 593568 (1024)
[ 80.174650][ T4696] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 80.187224][ T4696] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 80.198173][ T4696] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 5 on readonly FS
[ 80.235535][ T4186] Bluetooth: hci0: command 0x041b tx timeout
[ 80.398356][ T4721] loop0: detected capacity change from 0 to 8192
[ 80.422523][ T4721] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 80.447198][ T4721] REISERFS (device loop0): using ordered data mode
[ 80.453864][ T4721] reiserfs: using flush barriers
[ 80.482949][ T4721] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 80.501119][ T4721] REISERFS (device loop0): checking transaction log (loop0)
[ 80.582155][ T4721] REISERFS (device loop0): Using tea hash to sort names
[ 80.590064][ T4721] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 80.630844][ T4721] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 11822 (1024)
[ 80.652306][ T4721] REISERFS (device loop0): Remounting filesystem read-only
[ 80.659994][ T4721] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 265880 (1024)
[ 80.671739][ T4721] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 593568 (1024)
[ 80.683155][ T4721] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 80.693587][ T4721] REISERFS error (device loop0): vs-4080 _reiserfs_free_block: block 1: bit already cleared
[ 80.704056][ T4721] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 5 on readonly FS
[ 80.886497][ T4746] loop0: detected capacity change from 0 to 8192
[ 80.911130][ T4746] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 80.923604][ T4746] REISERFS (device loop0): using ordered data mode
[ 80.930560][ T4746] reiserfs: using flush barriers
[ 80.937850][ T4746] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 80.976143][ T4746] REISERFS (device loop0): checking transaction log (loop0)
[ 81.054655][ T4746] REISERFS (device loop0): Using tea hash to sort names
[ 81.063342][ T4746] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 81.132467][ T4746] ==================================================================
[ 81.141048][ T4746] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x615/0xab0
[ 81.148794][ T4746] Read of size 48 at addr ffff88806ec4eff0 by task syz-executor.0/4746
[ 81.157046][ T4746]
[ 81.159380][ T4746] CPU: 0 PID: 4746 Comm: syz-executor.0 Not tainted syzkaller #0
[ 81.167223][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 81.177387][ T4746] Call Trace:
[ 81.180672][ T4746]
[ 81.183712][ T4746] dump_stack_lvl+0x168/0x230
[ 81.188431][ T4746] ? show_regs_print_info+0x20/0x20
[ 81.193668][ T4746] ? _printk+0xcc/0x110
[ 81.197842][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 81.203404][ T4746] ? load_image+0x3b0/0x3b0
[ 81.208009][ T4746] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 81.213418][ T4746] print_address_description+0x60/0x2d0
[ 81.219296][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 81.224692][ T4746] kasan_report+0xdf/0x130
[ 81.229128][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 81.234602][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 81.240184][ T4746] kasan_check_range+0x27b/0x290
[ 81.245140][ T4746] memcpy+0x25/0x60
[ 81.249136][ T4746] leaf_paste_in_buffer+0x615/0xab0
[ 81.254592][ T4746] leaf_copy_dir_entries+0x56c/0x8f0
[ 81.259917][ T4746] leaf_copy_boundary_item+0xb8c/0x2190
[ 81.265483][ T4746] ? get_right_neighbor_position+0x143/0x210
[ 81.271486][ T4746] leaf_move_items+0x84a/0xde0
[ 81.276447][ T4746] ? reiserfs_convert_objectid_map_v1+0x4f0/0x4f0
[ 81.283446][ T4746] balance_leaf+0xc2fa/0x10e60
[ 81.288242][ T4746] ? __lock_acquire+0x7c60/0x7c60
[ 81.293570][ T4746] ? do_balance+0x930/0x930
[ 81.298112][ T4746] ? __mutex_trylock_common+0x14f/0x250
[ 81.303685][ T4746] ? rcu_lock_release+0x20/0x20
[ 81.308655][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 81.314655][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 81.320662][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 81.326700][ T4746] ? __mutex_lock_common+0x431/0x2390
[ 81.332188][ T4746] ? __might_sleep+0xf0/0xf0
[ 81.336888][ T4746] ? fix_nodes+0x6044/0x82d0
[ 81.341496][ T4746] ? reiserfs_do_truncate+0xa90/0x13e0
[ 81.347312][ T4746] ? reiserfs_truncate_file+0x632/0xdc0
[ 81.352961][ T4746] ? reiserfs_setattr+0xaa7/0x1010
[ 81.358092][ T4746] ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 81.363924][ T4746] ? mutex_lock_io_nested+0x60/0x60
[ 81.369343][ T4746] ? get_empty_nodes+0x431/0x8c0
[ 81.374480][ T4746] ? indirect_is_left_mergeable+0xe1/0x180
[ 81.380482][ T4746] ? indirect_decrement_key+0x90/0x90
[ 81.386129][ T4746] ? get_neighbors+0x1030/0x1030
[ 81.391082][ T4746] ? create_virtual_node+0x1fd/0x1c60
[ 81.396472][ T4746] ? __wake_up_bit+0x100/0x100
[ 81.401417][ T4746] ? mutex_lock_nested+0x17/0x20
[ 81.406414][ T4746] ? get_neighbors+0x9ba/0x1030
[ 81.411376][ T4746] ? reiserfs_prepare_for_journal+0x269/0x280
[ 81.417627][ T4746] ? fix_nodes+0x7b26/0x82d0
[ 81.422354][ T4746] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 81.428354][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 81.434188][ T4746] ? prepare_for_delete_or_cut+0x12bf/0x1e00
[ 81.440195][ T4746] do_balance+0x2fa/0x930
[ 81.444548][ T4746] ? get_right_neighbor_position+0x210/0x210
[ 81.450642][ T4746] ? reiserfs_delete_item+0xf20/0xf20
[ 81.456218][ T4746] ? calc_deleted_bytes_number+0x465/0x800
[ 81.462147][ T4746] reiserfs_cut_from_item+0x1391/0x1ef0
[ 81.468065][ T4746] ? __mutex_trylock_common+0x14f/0x250
[ 81.474169][ T4746] ? reiserfs_do_truncate+0x13e0/0x13e0
[ 81.480635][ T4746] ? __mutex_trylock_common+0x14f/0x250
[ 81.486522][ T4746] reiserfs_do_truncate+0xa90/0x13e0
[ 81.491841][ T4746] ? reiserfs_delete_object+0x1a0/0x1a0
[ 81.497424][ T4746] ? journal_begin+0x1f1/0x350
[ 81.502208][ T4746] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 81.508929][ T4746] reiserfs_truncate_file+0x632/0xdc0
[ 81.514471][ T4746] ? read_lock_is_recursive+0x10/0x10
[ 81.519964][ T4746] ? reiserfs_new_symlink+0x560/0x560
[ 81.525366][ T4746] reiserfs_setattr+0xaa7/0x1010
[ 81.530683][ T4746] ? reiserfs_commit_write+0x580/0x580
[ 81.536168][ T4746] ? ktime_get_coarse_real_ts64+0x10c/0x120
[ 81.542171][ T4746] ? current_time+0x1d0/0x2b0
[ 81.546878][ T4746] ? atime_needs_update+0x780/0x780
[ 81.552265][ T4746] ? __might_sleep+0xf0/0xf0
[ 81.556953][ T4746] ? preempt_count_add+0x8d/0x190
[ 81.562077][ T4746] ? bpf_lsm_inode_setattr+0x5/0x10
[ 81.567288][ T4746] ? try_break_deleg+0x79/0x120
[ 81.572248][ T4746] ? reiserfs_commit_write+0x580/0x580
[ 81.578041][ T4746] notify_change+0xbcd/0xee0
[ 81.582704][ T4746] do_truncate+0x197/0x220
[ 81.587144][ T4746] ? aa_get_task_label+0x21c/0x2c0
[ 81.592535][ T4746] ? rcu_lock_release+0x20/0x20
[ 81.597405][ T4746] ? ima_bprm_check+0x1f0/0x1f0
[ 81.602594][ T4746] ? bpf_lsm_path_truncate+0x5/0x10
[ 81.608035][ T4746] path_openat+0x28af/0x2f30
[ 81.612674][ T4746] ? __kasan_slab_alloc+0xb3/0xd0
[ 81.617809][ T4746] ? __kasan_slab_alloc+0x9c/0xd0
[ 81.623051][ T4746] ? verify_lock_unused+0x140/0x140
[ 81.628270][ T4746] ? do_filp_open+0x3e0/0x3e0
[ 81.633249][ T4746] do_filp_open+0x1b3/0x3e0
[ 81.637864][ T4746] ? vfs_tmpfile+0x300/0x300
[ 81.642591][ T4746] ? _raw_spin_unlock+0x24/0x40
[ 81.647648][ T4746] ? alloc_fd+0x598/0x630
[ 81.652110][ T4746] do_sys_openat2+0x142/0x4a0
[ 81.657019][ T4746] ? do_sys_open+0xe0/0xe0
[ 81.661458][ T4746] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 81.667534][ T4746] ? lock_chain_count+0x20/0x20
[ 81.672595][ T4746] ? vtime_user_exit+0x2dc/0x400
[ 81.677639][ T4746] __x64_sys_creat+0x8c/0xb0
[ 81.682370][ T4746] do_syscall_64+0x4c/0xa0
[ 81.686827][ T4746] ? clear_bhb_loop+0x30/0x80
[ 81.691629][ T4746] ? clear_bhb_loop+0x30/0x80
[ 81.696494][ T4746] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.702596][ T4746] RIP: 0033:0x7f38a8e79ca9
[ 81.707114][ T4746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 81.727992][ T4746] RSP: 002b:00007f38a81fa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 81.736596][ T4746] RAX: ffffffffffffffda RBX: 00007f38a8fa7f80 RCX: 00007f38a8e79ca9
[ 81.744674][ T4746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0
[ 81.752740][ T4746] RBP: 00007f38a8ec547e R08: 0000000000000000 R09: 0000000000000000
[ 81.760810][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 81.768794][ T4746] R13: 000000000000000b R14: 00007f38a8fa7f80 R15: 00007fff97cbc5b8
[ 81.776798][ T4746]
[ 81.779820][ T4746]
[ 81.782236][ T4746] The buggy address belongs to the page:
[ 81.787872][ T4746] page:ffffea0001bb1380 refcount:2 mapcount:0 mapping:ffff888145f35af0 index:0x224 pfn:0x6ec4e
[ 81.798560][ T4746] memcg:ffff88807d1ac000
[ 81.802810][ T4746] aops:def_blk_aops ino:700000
[ 81.807580][ T4746] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 81.817408][ T4746] raw: 00fff00000002032 ffffea0001bbea08 ffffea0001bbef88 ffff888145f35af0
[ 81.826093][ T4746] raw: 0000000000000224 ffff8880738941d0 00000002ffffffff ffff88807d1ac000
[ 81.834991][ T4746] page dumped because: kasan: bad access detected
[ 81.841418][ T4746] page_owner tracks the page as allocated
[ 81.847310][ T4746] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4746, ts 81100602365, free_ts 81029678263
[ 81.864598][ T4746] get_page_from_freelist+0x1b77/0x1c60
[ 81.870160][ T4746] __alloc_pages+0x1e1/0x470
[ 81.874939][ T4746] __page_cache_alloc+0xd2/0x3f0
[ 81.879910][ T4746] pagecache_get_page+0x986/0xef0
[ 81.884945][ T4746] __getblk_gfp+0x249/0xb70
[ 81.889549][ T4746] get_empty_nodes+0x511/0x8c0
[ 81.894491][ T4746] fix_nodes+0x1e69/0x82d0
[ 81.899006][ T4746] reiserfs_paste_into_item+0x5c8/0x7e0
[ 81.904561][ T4746] reiserfs_get_block+0x1bde/0x4100
[ 81.909771][ T4746] __block_write_begin_int+0x54e/0x15a0
[ 81.915327][ T4746] reiserfs_write_begin+0x34b/0x810
[ 81.920696][ T4746] generic_cont_expand_simple+0xe9/0x190
[ 81.926515][ T4746] reiserfs_setattr+0x42f/0x1010
[ 81.931464][ T4746] notify_change+0xbcd/0xee0
[ 81.936613][ T4746] do_truncate+0x197/0x220
[ 81.941153][ T4746] do_sys_ftruncate+0x31b/0x3d0
[ 81.946033][ T4746] page last free stack trace:
[ 81.950717][ T4746] free_unref_page_prepare+0x637/0x6c0
[ 81.956274][ T4746] free_unref_page_list+0x122/0x7e0
[ 81.961492][ T4746] release_pages+0x184b/0x1bb0
[ 81.966270][ T4746] tlb_finish_mmu+0x164/0x2e0
[ 81.970957][ T4746] exit_mmap+0x3a6/0x5f0
[ 81.975205][ T4746] __mmput+0x115/0x3b0
[ 81.979277][ T4746] exit_mm+0x567/0x6c0
[ 81.983449][ T4746] do_exit+0x5a1/0x20a0
[ 81.987654][ T4746] do_group_exit+0x12e/0x300
[ 81.992254][ T4746] __x64_sys_exit_group+0x3b/0x40
[ 81.997374][ T4746] do_syscall_64+0x4c/0xa0
[ 82.001894][ T4746] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 82.007795][ T4746]
[ 82.010251][ T4746] Memory state around the buggy address:
[ 82.015928][ T4746] ffff88806ec4ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 82.023995][ T4746] ffff88806ec4ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 82.032061][ T4746] >ffff88806ec4f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.040405][ T4746] ^
[ 82.044489][ T4746] ffff88806ec4f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.052663][ T4746] ffff88806ec4f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.060882][ T4746] ==================================================================
[ 82.068943][ T4746] Disabling lock debugging due to kernel taint
[ 82.081201][ T4746] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 82.088420][ T4746] CPU: 0 PID: 4746 Comm: syz-executor.0 Tainted: G B syzkaller #0
[ 82.097610][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 82.107696][ T4746] Call Trace:
[ 82.110987][ T4746]
[ 82.113921][ T4746] dump_stack_lvl+0x168/0x230
[ 82.118871][ T4746] ? show_regs_print_info+0x20/0x20
[ 82.124106][ T4746] ? load_image+0x3b0/0x3b0
[ 82.128664][ T4746] panic+0x2c9/0x7f0
[ 82.132672][ T4746] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 82.139202][ T4746] ? bpf_jit_dump+0xd0/0xd0
[ 82.143798][ T4746] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 82.149877][ T4746] ? _raw_spin_unlock+0x40/0x40
[ 82.154734][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 82.160110][ T4746] check_panic_on_warn+0x80/0xa0
[ 82.165147][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 82.170527][ T4746] end_report+0x6d/0xf0
[ 82.174791][ T4746] kasan_report+0x102/0x130
[ 82.179525][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 82.185245][ T4746] ? leaf_paste_in_buffer+0x615/0xab0
[ 82.190729][ T4746] kasan_check_range+0x27b/0x290
[ 82.195777][ T4746] memcpy+0x25/0x60
[ 82.199604][ T4746] leaf_paste_in_buffer+0x615/0xab0
[ 82.204814][ T4746] leaf_copy_dir_entries+0x56c/0x8f0
[ 82.210342][ T4746] leaf_copy_boundary_item+0xb8c/0x2190
[ 82.216051][ T4746] ? get_right_neighbor_position+0x143/0x210
[ 82.222044][ T4746] leaf_move_items+0x84a/0xde0
[ 82.226816][ T4746] ? reiserfs_convert_objectid_map_v1+0x4f0/0x4f0
[ 82.234313][ T4746] balance_leaf+0xc2fa/0x10e60
[ 82.239077][ T4746] ? __lock_acquire+0x7c60/0x7c60
[ 82.244293][ T4746] ? do_balance+0x930/0x930
[ 82.248786][ T4746] ? __mutex_trylock_common+0x14f/0x250
[ 82.254402][ T4746] ? rcu_lock_release+0x20/0x20
[ 82.259334][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 82.265035][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 82.270946][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 82.276661][ T4746] ? __mutex_lock_common+0x431/0x2390
[ 82.282141][ T4746] ? __might_sleep+0xf0/0xf0
[ 82.286796][ T4746] ? fix_nodes+0x6044/0x82d0
[ 82.291362][ T4746] ? reiserfs_do_truncate+0xa90/0x13e0
[ 82.296801][ T4746] ? reiserfs_truncate_file+0x632/0xdc0
[ 82.302324][ T4746] ? reiserfs_setattr+0xaa7/0x1010
[ 82.307673][ T4746] ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 82.313293][ T4746] ? mutex_lock_io_nested+0x60/0x60
[ 82.318471][ T4746] ? get_empty_nodes+0x431/0x8c0
[ 82.323397][ T4746] ? indirect_is_left_mergeable+0xe1/0x180
[ 82.329230][ T4746] ? indirect_decrement_key+0x90/0x90
[ 82.334581][ T4746] ? get_neighbors+0x1030/0x1030
[ 82.339499][ T4746] ? create_virtual_node+0x1fd/0x1c60
[ 82.344853][ T4746] ? __wake_up_bit+0x100/0x100
[ 82.349601][ T4746] ? mutex_lock_nested+0x17/0x20
[ 82.354523][ T4746] ? get_neighbors+0x9ba/0x1030
[ 82.359348][ T4746] ? reiserfs_prepare_for_journal+0x269/0x280
[ 82.365390][ T4746] ? fix_nodes+0x7b26/0x82d0
[ 82.369965][ T4746] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 82.375919][ T4746] ? reiserfs_write_lock_nested+0x5c/0xd0
[ 82.381708][ T4746] ? prepare_for_delete_or_cut+0x12bf/0x1e00
[ 82.387751][ T4746] do_balance+0x2fa/0x930
[ 82.392063][ T4746] ? get_right_neighbor_position+0x210/0x210
[ 82.398019][ T4746] ? reiserfs_delete_item+0xf20/0xf20
[ 82.403369][ T4746] ? calc_deleted_bytes_number+0x465/0x800
[ 82.409320][ T4746] reiserfs_cut_from_item+0x1391/0x1ef0
[ 82.414900][ T4746] ? __mutex_trylock_common+0x14f/0x250
[ 82.420545][ T4746] ? reiserfs_do_truncate+0x13e0/0x13e0
[ 82.426289][ T4746] ? __mutex_trylock_common+0x14f/0x250
[ 82.431925][ T4746] reiserfs_do_truncate+0xa90/0x13e0
[ 82.437195][ T4746] ? reiserfs_delete_object+0x1a0/0x1a0
[ 82.442724][ T4746] ? journal_begin+0x1f1/0x350
[ 82.447769][ T4746] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 82.454185][ T4746] reiserfs_truncate_file+0x632/0xdc0
[ 82.459648][ T4746] ? read_lock_is_recursive+0x10/0x10
[ 82.465207][ T4746] ? reiserfs_new_symlink+0x560/0x560
[ 82.470676][ T4746] reiserfs_setattr+0xaa7/0x1010
[ 82.475739][ T4746] ? reiserfs_commit_write+0x580/0x580
[ 82.481188][ T4746] ? ktime_get_coarse_real_ts64+0x10c/0x120
[ 82.487176][ T4746] ? current_time+0x1d0/0x2b0
[ 82.491850][ T4746] ? atime_needs_update+0x780/0x780
[ 82.497055][ T4746] ? __might_sleep+0xf0/0xf0
[ 82.501729][ T4746] ? preempt_count_add+0x8d/0x190
[ 82.506738][ T4746] ? bpf_lsm_inode_setattr+0x5/0x10
[ 82.512006][ T4746] ? try_break_deleg+0x79/0x120
[ 82.516838][ T4746] ? reiserfs_commit_write+0x580/0x580
[ 82.522277][ T4746] notify_change+0xbcd/0xee0
[ 82.526946][ T4746] do_truncate+0x197/0x220
[ 82.531344][ T4746] ? aa_get_task_label+0x21c/0x2c0
[ 82.536448][ T4746] ? rcu_lock_release+0x20/0x20
[ 82.541398][ T4746] ? ima_bprm_check+0x1f0/0x1f0
[ 82.546259][ T4746] ? bpf_lsm_path_truncate+0x5/0x10
[ 82.551722][ T4746] path_openat+0x28af/0x2f30
[ 82.556384][ T4746] ? __kasan_slab_alloc+0xb3/0xd0
[ 82.561392][ T4746] ? __kasan_slab_alloc+0x9c/0xd0
[ 82.566393][ T4746] ? verify_lock_unused+0x140/0x140
[ 82.571602][ T4746] ? do_filp_open+0x3e0/0x3e0
[ 82.576266][ T4746] do_filp_open+0x1b3/0x3e0
[ 82.580747][ T4746] ? vfs_tmpfile+0x300/0x300
[ 82.585433][ T4746] ? _raw_spin_unlock+0x24/0x40
[ 82.590432][ T4746] ? alloc_fd+0x598/0x630
[ 82.594880][ T4746] do_sys_openat2+0x142/0x4a0
[ 82.599650][ T4746] ? do_sys_open+0xe0/0xe0
[ 82.604141][ T4746] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 82.610366][ T4746] ? lock_chain_count+0x20/0x20
[ 82.615387][ T4746] ? vtime_user_exit+0x2dc/0x400
[ 82.620407][ T4746] __x64_sys_creat+0x8c/0xb0
[ 82.624993][ T4746] do_syscall_64+0x4c/0xa0
[ 82.629390][ T4746] ? clear_bhb_loop+0x30/0x80
[ 82.634220][ T4746] ? clear_bhb_loop+0x30/0x80
[ 82.638876][ T4746] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 82.644781][ T4746] RIP: 0033:0x7f38a8e79ca9
[ 82.649261][ T4746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 82.668846][ T4746] RSP: 002b:00007f38a81fa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[ 82.678220][ T4746] RAX: ffffffffffffffda RBX: 00007f38a8fa7f80 RCX: 00007f38a8e79ca9
[ 82.686641][ T4746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0
[ 82.694799][ T4746] RBP: 00007f38a8ec547e R08: 0000000000000000 R09: 0000000000000000
[ 82.702965][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 82.710938][ T4746] R13: 000000000000000b R14: 00007f38a8fa7f80 R15: 00007fff97cbc5b8
[ 82.719076][ T4746]
[ 82.722376][ T4746] Kernel Offset: disabled
[ 82.726707][ T4746] Rebooting in 86400 seconds..