[ 56.930073][ T3070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 56.979222][ T3070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 57.060578][ T3070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 57.701954][ T3070] device hsr_slave_0 left promiscuous mode
[ 57.709104][ T3070] device hsr_slave_1 left promiscuous mode
[ 57.717563][ T3070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 57.725173][ T3070] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 57.735253][ T3070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 57.742849][ T3070] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 57.751569][ T3070] device bridge_slave_1 left promiscuous mode
[ 57.758953][ T3070] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.776899][ T3070] device bridge_slave_0 left promiscuous mode
[ 57.783191][ T3070] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.803439][ T3070] device veth1_macvtap left promiscuous mode
[ 57.812895][ T3070] device veth0_macvtap left promiscuous mode
[ 57.819306][ T3070] device veth1_vlan left promiscuous mode
[ 57.825834][ T3070] device veth0_vlan left promiscuous mode
[ 57.944603][ T3070] team0 (unregistering): Port device team_slave_1 removed
[ 57.959786][ T3070] team0 (unregistering): Port device team_slave_0 removed
[ 57.972773][ T3070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 57.986841][ T3070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 58.030473][ T3070] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts.
2026/09/25 06:36:50 ignoring optional flag "type"="gce"
2026/09/25 06:36:51 parsed 1 programs
2026/09/25 06:36:52 executed programs: 0
[ 62.111103][ T4387] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 62.230725][ T4399] chnl_net:caif_netlink_parms(): no params data found
[ 62.264906][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.272108][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.280118][ T4399] device bridge_slave_0 entered promiscuous mode
[ 62.287774][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.295079][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.303079][ T4399] device bridge_slave_1 entered promiscuous mode
[ 62.321063][ T4399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.332096][ T4399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.357389][ T4399] team0: Port device team_slave_0 added
[ 62.364380][ T4399] team0: Port device team_slave_1 added
[ 62.381060][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.388405][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.414489][ T4399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.426082][ T4399] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.433025][ T4399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.459137][ T4399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.485162][ T4399] device hsr_slave_0 entered promiscuous mode
[ 62.492054][ T4399] device hsr_slave_1 entered promiscuous mode
[ 62.959068][ T4399] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 62.969118][ T4399] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 62.979521][ T4399] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 62.989628][ T4399] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 63.010853][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.018023][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 63.025868][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.032969][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 63.081291][ T4399] 8021q: adding VLAN 0 to HW filter on device bond0
[ 63.097335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 63.106993][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 63.115001][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 63.123142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 63.136285][ T4399] 8021q: adding VLAN 0 to HW filter on device team0
[ 63.148244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 63.158696][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 63.165833][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 63.187667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 63.197078][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 63.204264][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 63.213283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 63.222144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 63.233284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 63.243370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 63.260617][ T4399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 63.272089][ T4399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 63.284251][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 63.293235][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 63.305195][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 63.313664][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 63.335692][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 63.432260][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 63.441479][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 63.455529][ T4399] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 63.477465][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 63.493528][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 63.514304][ T4399] device veth0_vlan entered promiscuous mode
[ 63.524781][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 63.533584][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 63.543078][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 63.551473][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 63.566763][ T4399] device veth1_vlan entered promiscuous mode
[ 63.587688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 63.598891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 63.607484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 63.618499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 63.629399][ T4399] device veth0_macvtap entered promiscuous mode
[ 63.640173][ T4399] device veth1_macvtap entered promiscuous mode
[ 63.656711][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 63.664949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 63.672967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 63.683076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 63.692728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 63.706095][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 63.715706][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 63.724618][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 63.736085][ T4399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.744926][ T4399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.753757][ T4399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.763308][ T4399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.890901][ T4483] loop0: detected capacity change from 0 to 8192
[ 63.913262][ T4483] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 63.923623][ T4483] REISERFS (device loop0): using ordered data mode
[ 63.930773][ T4483] reiserfs: using flush barriers
[ 63.946301][ T4483] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 63.966853][ T4483] REISERFS (device loop0): checking transaction log (loop0)
[ 64.072981][ T4483] REISERFS (device loop0): Using r5 hash to sort names
[ 64.082207][ T4483] REISERFS (device loop0): using 3.5.x disk format
[ 64.090903][ T4483] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 64.106122][ T26] audit: type=1800 audit(1790318214.459:3): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=2 res=0 errno=0
[ 64.110742][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.135073][ T26] audit: type=1800 audit(1790318214.459:4): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0
[ 64.154290][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.198195][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.213654][ T4025] Bluetooth: hci0: command 0x0409 tx timeout
[ 64.223928][ T4496] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.239295][ T4496] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.253792][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 64.268047][ T4496] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.282510][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 64.298282][ T4496] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.313087][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 64.328186][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 64.343616][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 64.362436][ T4482] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.386768][ T4482] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.401029][ T4482] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 64.607603][ T4516] loop0: detected capacity change from 0 to 8192
[ 64.630783][ T4516] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 64.652907][ T4516] REISERFS (device loop0): using ordered data mode
[ 64.659759][ T4516] reiserfs: using flush barriers
[ 64.674649][ T4516] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 64.692796][ T4516] REISERFS (device loop0): checking transaction log (loop0)
[ 64.761250][ T4516] REISERFS (device loop0): Using r5 hash to sort names
[ 64.769492][ T4516] REISERFS (device loop0): using 3.5.x disk format
[ 64.777688][ T4516] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 64.796854][ T26] audit: type=1800 audit(1790318215.149:5): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=2 res=0 errno=0
[ 64.820579][ T4516] ==================================================================
[ 64.829081][ T4516] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.836753][ T4516] Read of size 18446744073709551309 at addr ffff8880668fb000 by task syz-executor.0/4516
[ 64.846571][ T4516]
[ 64.848925][ T4516] CPU: 0 PID: 4516 Comm: syz-executor.0 Not tainted syzkaller #0
[ 64.856738][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 64.864545][ T26] audit: type=1800 audit(1790318215.169:6): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0
[ 64.866811][ T4516] Call Trace:
[ 64.890458][ T4516]
[ 64.893404][ T4516] dump_stack_lvl+0x188/0x250
[ 64.898108][ T4516] ? show_regs_print_info+0x20/0x20
[ 64.903318][ T4516] ? _printk+0xda/0x130
[ 64.907657][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.913050][ T4516] ? load_image+0x410/0x410
[ 64.917573][ T4516] print_address_description+0x60/0x2d0
[ 64.923135][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.928520][ T4516] kasan_report+0xdf/0x130
[ 64.933039][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.938428][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.943814][ T4516] kasan_check_range+0x235/0x290
[ 64.948851][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.954300][ T4516] memmove+0x25/0x60
[ 64.958215][ T4516] leaf_paste_in_buffer+0x1e7/0xaf0
[ 64.963711][ T4516] balance_leaf+0x748f/0x10ec0
[ 64.968508][ T4516] ? __find_get_block+0xcaa/0x10d0
[ 64.974024][ T4516] ? do_balance+0x930/0x930
[ 64.978565][ T4516] ? write_boundary_block+0x150/0x150
[ 64.983959][ T4516] ? __lock_acquire+0x7b50/0x7b50
[ 64.989268][ T4516] ? do_raw_spin_lock+0x128/0x2f0
[ 64.994407][ T4516] ? __getblk_gfp+0x9d4/0xb20
[ 64.999122][ T4516] ? get_empty_nodes+0x7d3/0x990
[ 65.004074][ T4516] ? indirect_check_left+0x17/0x30
[ 65.009228][ T4516] ? get_neighbors+0x1000/0x1000
[ 65.014213][ T4516] ? __wake_up_bit+0x120/0x120
[ 65.018997][ T4516] ? get_neighbors+0x98d/0x1000
[ 65.023917][ T4516] ? reiserfs_prepare_for_journal+0x269/0x280
[ 65.030017][ T4516] ? fix_nodes+0x7f2d/0x8720
[ 65.034657][ T4516] do_balance+0x318/0x930
[ 65.039016][ T4516] ? get_right_neighbor_position+0x210/0x210
[ 65.045140][ T4516] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 65.050991][ T4516] reiserfs_paste_into_item+0x744/0x7f0
[ 65.056571][ T4516] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 65.062311][ T4516] ? __kernel_text_address+0x9a/0x100
[ 65.068067][ T4516] reiserfs_get_block+0x1c3d/0x4360
[ 65.073315][ T4516] ? make_le_item_head+0x510/0x510
[ 65.078551][ T4516] ? kmem_cache_alloc+0x15d/0x280
[ 65.083592][ T4516] ? create_page_buffers+0x1c4/0x320
[ 65.088894][ T4516] ? __block_write_begin_int+0x25f/0x15d0
[ 65.094671][ T4516] ? reiserfs_setattr+0x3f5/0x10d0
[ 65.099793][ T4516] ? do_sys_ftruncate+0x31b/0x3d0
[ 65.104835][ T4516] ? do_syscall_64+0x4c/0xa0
[ 65.109447][ T4516] ? verify_lock_unused+0x140/0x140
[ 65.114692][ T4516] ? lockdep_init_map_type+0x98/0x900
[ 65.120213][ T4516] ? do_raw_spin_unlock+0x11d/0x230
[ 65.125437][ T4516] ? create_page_buffers+0x238/0x320
[ 65.130743][ T4516] __block_write_begin_int+0x565/0x15d0
[ 65.136328][ T4516] ? make_le_item_head+0x510/0x510
[ 65.141539][ T4516] ? page_zero_new_buffers+0x490/0x490
[ 65.147137][ T4516] ? __mutex_lock_common+0x435/0x2400
[ 65.152538][ T4516] reiserfs_write_begin+0x353/0x820
[ 65.157932][ T4516] ? pagecache_write_begin+0x33/0xa0
[ 65.163251][ T4516] generic_cont_expand_simple+0xf0/0x1a0
[ 65.168911][ T4516] ? submit_bh+0x30/0x30
[ 65.173171][ T4516] ? setattr_prepare+0x1ed/0xd30
[ 65.178130][ T4516] ? mutex_lock_nested+0x17/0x20
[ 65.183079][ T4516] reiserfs_setattr+0x3f5/0x10d0
[ 65.188037][ T4516] ? reiserfs_commit_write+0x630/0x630
[ 65.193521][ T4516] ? ktime_get_coarse_real_ts64+0x106/0x120
[ 65.199437][ T4516] ? current_time+0x1d8/0x2c0
[ 65.204161][ T4516] ? atime_needs_update+0x770/0x770
[ 65.209413][ T4516] ? bpf_lsm_inode_setattr+0x5/0x10
[ 65.214633][ T4516] ? try_break_deleg+0x79/0x120
[ 65.219499][ T4516] ? reiserfs_commit_write+0x630/0x630
[ 65.224973][ T4516] notify_change+0xbc6/0xee0
[ 65.229588][ T4516] do_truncate+0x1ac/0x240
[ 65.234025][ T4516] ? rcu_lock_release+0x20/0x20
[ 65.238895][ T4516] ? rcu_read_lock_bh_held+0xf0/0xf0
[ 65.244211][ T4516] ? bpf_lsm_path_truncate+0x5/0x10
[ 65.249427][ T4516] do_sys_ftruncate+0x31b/0x3d0
[ 65.254300][ T4516] do_syscall_64+0x4c/0xa0
[ 65.258729][ T4516] ? clear_bhb_loop+0x30/0x80
[ 65.263424][ T4516] ? clear_bhb_loop+0x30/0x80
[ 65.268123][ T4516] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 65.274047][ T4516] RIP: 0033:0x7f35c5916079
[ 65.278472][ T4516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 65.298240][ T4516] RSP: 002b:00007f35c4ca70b8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 65.306838][ T4516] RAX: ffffffffffffffda RBX: 00007f35c5a54f80 RCX: 00007f35c5916079
[ 65.314831][ T4516] RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000005
[ 65.323050][ T4516] RBP: 00007f35c5977498 R08: 0000000000000000 R09: 0000000000000000
[ 65.331125][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 65.339284][ T4516] R13: 000000000000000b R14: 00007f35c5a54f80 R15: 00007ffd9de65728
[ 65.347290][ T4516]
[ 65.350320][ T4516]
[ 65.352644][ T4516] The buggy address belongs to the page:
[ 65.358376][ T4516] page:ffffea00019a3ec0 refcount:3 mapcount:0 mapping:ffff88806e8c9e38 index:0x0 pfn:0x668fb
[ 65.368636][ T4516] memcg:ffff888076158000
[ 65.372881][ T4516] aops:reiserfs_address_space_operations ino:2 dentry name:"file2"
[ 65.380794][ T4516] flags: 0xfff00000002011(locked|lru|private|node=0|zone=1|lastcpupid=0x7ff)
[ 65.389689][ T4516] raw: 00fff00000002011 ffff888074949020 ffff888074949020 ffff88806e8c9e38
[ 65.398805][ T4516] raw: 0000000000000000 ffff888070c78488 00000003ffffffff ffff888076158000
[ 65.407404][ T4516] page dumped because: kasan: bad access detected
[ 65.413914][ T4516] page_owner tracks the page as allocated
[ 65.419640][ T4516] page last allocated via order 0, migratetype Movable, gfp_mask 0x1101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), pid 4529, ts 64819214744, free_ts 64724351357
[ 65.435274][ T4516] get_page_from_freelist+0x24f6/0x2670
[ 65.440933][ T4516] __alloc_pages+0x1ee/0x480
[ 65.445620][ T4516] __page_cache_alloc+0xce/0x440
[ 65.450603][ T4516] pagecache_get_page+0x9b8/0xf20
[ 65.455637][ T4516] grab_cache_page_write_begin+0x5c/0xa0
[ 65.461281][ T4516] reiserfs_write_begin+0x156/0x820
[ 65.466496][ T4516] generic_cont_expand_simple+0xf0/0x1a0
[ 65.472148][ T4516] reiserfs_setattr+0x3f5/0x10d0
[ 65.477365][ T4516] notify_change+0xbc6/0xee0
[ 65.481971][ T4516] do_truncate+0x1ac/0x240
[ 65.486400][ T4516] do_sys_ftruncate+0x31b/0x3d0
[ 65.491439][ T4516] do_syscall_64+0x4c/0xa0
[ 65.495866][ T4516] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 65.501769][ T4516] page last free stack trace:
[ 65.506443][ T4516] free_unref_page_prepare+0x637/0x6c0
[ 65.512004][ T4516] free_unref_page_list+0x119/0x830
[ 65.517488][ T4516] release_pages+0x185f/0x1bd0
[ 65.522269][ T4516] tlb_finish_mmu+0x1b4/0x370
[ 65.526970][ T4516] exit_mmap+0x3d0/0x640
[ 65.531227][ T4516] __mmput+0x115/0x390
[ 65.535311][ T4516] exit_mm+0x632/0x7b0
[ 65.539387][ T4516] do_exit+0x5b8/0x2110
[ 65.543547][ T4516] do_group_exit+0x12c/0x2f0
[ 65.548159][ T4516] __x64_sys_exit_group+0x3b/0x40
[ 65.553960][ T4516] do_syscall_64+0x4c/0xa0
[ 65.558416][ T4516] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 65.564355][ T4516]
[ 65.566682][ T4516] Memory state around the buggy address:
[ 65.572404][ T4516] ffff8880668faf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.580474][ T4516] ffff8880668faf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.588544][ T4516] >ffff8880668fb000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.596606][ T4516] ^
[ 65.600680][ T4516] ffff8880668fb080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.608749][ T4516] ffff8880668fb100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.616822][ T4516] ==================================================================
[ 65.624987][ T4516] Disabling lock debugging due to kernel taint
[ 65.641310][ T4516] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 65.648529][ T4516] CPU: 0 PID: 4516 Comm: syz-executor.0 Tainted: G B syzkaller #0
[ 65.657673][ T4516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 65.667994][ T4516] Call Trace:
[ 65.671277][ T4516]
[ 65.674210][ T4516] dump_stack_lvl+0x188/0x250
[ 65.678890][ T4516] ? show_regs_print_info+0x20/0x20
[ 65.684112][ T4516] ? load_image+0x410/0x410
[ 65.688725][ T4516] panic+0x2f8/0x850
[ 65.692637][ T4516] ? bpf_jit_dump+0xd0/0xd0
[ 65.697156][ T4516] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 65.703148][ T4516] ? _raw_spin_unlock+0x40/0x40
[ 65.708029][ T4516] ? print_memory_metadata+0x314/0x400
[ 65.713509][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 65.718900][ T4516] check_panic_on_warn+0x80/0xa0
[ 65.723856][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 65.729243][ T4516] end_report+0x6d/0xf0
[ 65.733415][ T4516] kasan_report+0x102/0x130
[ 65.737928][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 65.743314][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 65.748704][ T4516] kasan_check_range+0x235/0x290
[ 65.753666][ T4516] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 65.759263][ T4516] memmove+0x25/0x60
[ 65.763170][ T4516] leaf_paste_in_buffer+0x1e7/0xaf0
[ 65.768403][ T4516] balance_leaf+0x748f/0x10ec0
[ 65.773160][ T4516] ? __find_get_block+0xcaa/0x10d0
[ 65.778265][ T4516] ? do_balance+0x930/0x930
[ 65.782749][ T4516] ? write_boundary_block+0x150/0x150
[ 65.788104][ T4516] ? __lock_acquire+0x7b50/0x7b50
[ 65.793119][ T4516] ? do_raw_spin_lock+0x128/0x2f0
[ 65.798132][ T4516] ? __getblk_gfp+0x9d4/0xb20
[ 65.802799][ T4516] ? get_empty_nodes+0x7d3/0x990
[ 65.807801][ T4516] ? indirect_check_left+0x17/0x30
[ 65.812897][ T4516] ? get_neighbors+0x1000/0x1000
[ 65.817815][ T4516] ? __wake_up_bit+0x120/0x120
[ 65.822654][ T4516] ? get_neighbors+0x98d/0x1000
[ 65.827576][ T4516] ? reiserfs_prepare_for_journal+0x269/0x280
[ 65.833626][ T4516] ? fix_nodes+0x7f2d/0x8720
[ 65.838226][ T4516] do_balance+0x318/0x930
[ 65.842541][ T4516] ? get_right_neighbor_position+0x210/0x210
[ 65.848547][ T4516] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 65.854259][ T4516] reiserfs_paste_into_item+0x744/0x7f0
[ 65.860232][ T4516] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 65.866046][ T4516] ? __kernel_text_address+0x9a/0x100
[ 65.871519][ T4516] reiserfs_get_block+0x1c3d/0x4360
[ 65.876734][ T4516] ? make_le_item_head+0x510/0x510
[ 65.881834][ T4516] ? kmem_cache_alloc+0x15d/0x280
[ 65.886838][ T4516] ? create_page_buffers+0x1c4/0x320
[ 65.892192][ T4516] ? __block_write_begin_int+0x25f/0x15d0
[ 65.897891][ T4516] ? reiserfs_setattr+0x3f5/0x10d0
[ 65.902989][ T4516] ? do_sys_ftruncate+0x31b/0x3d0
[ 65.908343][ T4516] ? do_syscall_64+0x4c/0xa0
[ 65.912923][ T4516] ? verify_lock_unused+0x140/0x140
[ 65.918118][ T4516] ? lockdep_init_map_type+0x98/0x900
[ 65.923501][ T4516] ? do_raw_spin_unlock+0x11d/0x230
[ 65.928705][ T4516] ? create_page_buffers+0x238/0x320
[ 65.934017][ T4516] __block_write_begin_int+0x565/0x15d0
[ 65.939545][ T4516] ? make_le_item_head+0x510/0x510
[ 65.944827][ T4516] ? page_zero_new_buffers+0x490/0x490
[ 65.950336][ T4516] ? __mutex_lock_common+0x435/0x2400
[ 65.955690][ T4516] reiserfs_write_begin+0x353/0x820
[ 65.960873][ T4516] ? pagecache_write_begin+0x33/0xa0
[ 65.966153][ T4516] generic_cont_expand_simple+0xf0/0x1a0
[ 65.971766][ T4516] ? submit_bh+0x30/0x30
[ 65.975985][ T4516] ? setattr_prepare+0x1ed/0xd30
[ 65.980908][ T4516] ? mutex_lock_nested+0x17/0x20
[ 65.985825][ T4516] reiserfs_setattr+0x3f5/0x10d0
[ 65.990760][ T4516] ? reiserfs_commit_write+0x630/0x630
[ 65.996218][ T4516] ? ktime_get_coarse_real_ts64+0x106/0x120
[ 66.002111][ T4516] ? current_time+0x1d8/0x2c0
[ 66.006776][ T4516] ? atime_needs_update+0x770/0x770
[ 66.011975][ T4516] ? bpf_lsm_inode_setattr+0x5/0x10
[ 66.017157][ T4516] ? try_break_deleg+0x79/0x120
[ 66.021984][ T4516] ? reiserfs_commit_write+0x630/0x630
[ 66.027422][ T4516] notify_change+0xbc6/0xee0
[ 66.032012][ T4516] do_truncate+0x1ac/0x240
[ 66.036409][ T4516] ? rcu_lock_release+0x20/0x20
[ 66.042553][ T4516] ? rcu_read_lock_bh_held+0xf0/0xf0
[ 66.047844][ T4516] ? bpf_lsm_path_truncate+0x5/0x10
[ 66.053040][ T4516] do_sys_ftruncate+0x31b/0x3d0
[ 66.057965][ T4516] do_syscall_64+0x4c/0xa0
[ 66.062379][ T4516] ? clear_bhb_loop+0x30/0x80
[ 66.067059][ T4516] ? clear_bhb_loop+0x30/0x80
[ 66.071807][ T4516] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.077682][ T4516] RIP: 0033:0x7f35c5916079
[ 66.082198][ T4516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 66.101787][ T4516] RSP: 002b:00007f35c4ca70b8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 66.110189][ T4516] RAX: ffffffffffffffda RBX: 00007f35c5a54f80 RCX: 00007f35c5916079
[ 66.118146][ T4516] RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000005
[ 66.126095][ T4516] RBP: 00007f35c5977498 R08: 0000000000000000 R09: 0000000000000000
[ 66.134052][ T4516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 66.142004][ T4516] R13: 000000000000000b R14: 00007f35c5a54f80 R15: 00007ffd9de65728
[ 66.149962][ T4516]
[ 66.153250][ T4516] Kernel Offset: disabled
[ 66.157603][ T4516] Rebooting in 86400 seconds..