Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts.
2026/05/26 15:15:12 parsed 1 programs
[ 108.982556][ T4605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 111.195414][ T4642] chnl_net:caif_netlink_parms(): no params data found
[ 111.259216][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.267639][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.276288][ T4642] device bridge_slave_0 entered promiscuous mode
[ 111.286297][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.293838][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.303548][ T4642] device bridge_slave_1 entered promiscuous mode
[ 111.333186][ T4642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 111.346041][ T4642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.377646][ T4642] team0: Port device team_slave_0 added
[ 111.385565][ T4642] team0: Port device team_slave_1 added
[ 111.410222][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.417372][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.443346][ T4642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.456099][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.463166][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.489109][ T4642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.529184][ T4642] device hsr_slave_0 entered promiscuous mode
[ 111.536363][ T4642] device hsr_slave_1 entered promiscuous mode
[ 112.242169][ T4642] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.270821][ T4642] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 112.291289][ T4642] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 112.312571][ T4642] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 112.437329][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.453963][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 112.462003][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 112.472945][ T4642] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.486118][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 112.495136][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 112.504603][ T664] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.511868][ T664] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.520123][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 112.539856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 112.554867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 112.567863][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.575021][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.583938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 112.593641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 112.614948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 112.624810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 112.636093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 112.647754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 112.669827][ T4642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 112.681546][ T4642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 112.696096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 112.706218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 112.723312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 112.733539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 112.743544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 112.765084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 112.913780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 112.926453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 112.939475][ T4642] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.962175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 112.977862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 112.998086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 113.011884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 113.028646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 113.036826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 113.049296][ T4642] device veth0_vlan entered promiscuous mode
[ 113.075685][ T4642] device veth1_vlan entered promiscuous mode
[ 113.099918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 113.111672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 113.120005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 113.130011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 113.142165][ T4642] device veth0_macvtap entered promiscuous mode
[ 113.168380][ T4642] device veth1_macvtap entered promiscuous mode
[ 113.188074][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.195639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 113.205168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 113.216063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 113.226776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 113.239556][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.248105][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 113.271435][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 113.283388][ T4642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.293633][ T4642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.303624][ T4642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.312716][ T4642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.008932][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.028144][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.049493][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 115.073568][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.082717][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.100607][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 116.054879][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/26 15:15:24 executed programs: 0
[ 116.548118][ T4814] chnl_net:caif_netlink_parms(): no params data found
[ 116.616962][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.626625][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.635224][ T4814] device bridge_slave_0 entered promiscuous mode
[ 116.644496][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.652077][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.660803][ T4814] device bridge_slave_1 entered promiscuous mode
[ 116.690758][ T4814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.706399][ T4814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.745488][ T4814] team0: Port device team_slave_0 added
[ 116.753846][ T4814] team0: Port device team_slave_1 added
[ 116.787074][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.795179][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.823672][ T4814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.836582][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.846297][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.875073][ T4814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.921068][ T4814] device hsr_slave_0 entered promiscuous mode
[ 116.928033][ T4814] device hsr_slave_1 entered promiscuous mode
[ 116.937587][ T4814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 116.945622][ T4814] Cannot create hsr debugfs directory
[ 118.329121][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.419571][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.470741][ T23] Bluetooth: hci0: command 0x0409 tx timeout
[ 118.501238][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.374803][ T4814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.387412][ T4814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.397921][ T4814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.412558][ T4814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.562713][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.577665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 119.589643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 119.601721][ T4814] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.640469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 119.649466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 119.658989][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.666172][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.675891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 119.685844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 119.695122][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.702315][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.722185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 119.730736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 119.739664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 119.753110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 119.763778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 119.782718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 119.791858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 119.801835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 119.813068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 119.823106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 119.837618][ T4814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 119.849975][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 119.859460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 119.869182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 120.087445][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 120.099728][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 120.113803][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.158078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 120.170156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 120.220749][ T4814] device veth0_vlan entered promiscuous mode
[ 120.227625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 120.240564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 120.255460][ T4814] device veth1_vlan entered promiscuous mode
[ 120.265998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 120.275902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 120.285301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 120.319123][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 120.342957][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 120.351504][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 120.376782][ T4814] device veth0_macvtap entered promiscuous mode
[ 120.411552][ T4814] device veth1_macvtap entered promiscuous mode
[ 120.431151][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 120.445185][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 120.457779][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 120.469433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 120.478718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 120.489206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 120.498964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 120.519320][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 120.544498][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 120.555251][ T4259] Bluetooth: hci0: command 0x041b tx timeout
[ 120.573927][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.589987][ T9] device hsr_slave_0 left promiscuous mode
[ 120.598576][ T9] device hsr_slave_1 left promiscuous mode
[ 120.608213][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.616722][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.627174][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.635116][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.645389][ T9] device bridge_slave_1 left promiscuous mode
[ 120.651862][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.663333][ T9] device bridge_slave_0 left promiscuous mode
[ 120.669593][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.685654][ T9] device veth1_macvtap left promiscuous mode
[ 120.692106][ T9] device veth0_macvtap left promiscuous mode
[ 120.698226][ T9] device veth1_vlan left promiscuous mode
[ 120.706821][ T9] device veth0_vlan left promiscuous mode
[ 120.936764][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 120.956831][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 120.973472][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.992113][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 121.084143][ T9] bond0 (unregistering): Released all slaves
[ 121.157513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 121.166579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 121.181210][ T4814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.189957][ T4814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.206401][ T4814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.215665][ T4814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.337686][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.359296][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.394560][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 121.405146][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.415197][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.435381][ T664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/05/26 15:15:29 executed programs: 2
[ 121.560183][ T5048] loop0: detected capacity change from 0 to 8192
[ 121.621386][ T5048] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 121.641017][ T5048] REISERFS (device loop0): using ordered data mode
[ 121.647585][ T5048] reiserfs: using flush barriers
[ 121.662373][ T5048] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 121.682570][ T5048] REISERFS (device loop0): checking transaction log (loop0)
[ 121.716033][ T5048] REISERFS (device loop0): Using tea hash to sort names
[ 121.732623][ T5048] ==================================================================
[ 121.740986][ T5048] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x794/0x1130
[ 121.748591][ T5048] Read of size 18446744073709551584 at addr ffff88807c066fa4 by task syz.0.16/5048
[ 121.757905][ T5048]
[ 121.760284][ T5048] CPU: 1 PID: 5048 Comm: syz.0.16 Not tainted syzkaller #0
[ 121.767595][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 121.777694][ T5048] Call Trace:
[ 121.781007][ T5048]
[ 121.783963][ T5048] dump_stack_lvl+0x188/0x250
[ 121.788868][ T5048] ? show_regs_print_info+0x20/0x20
[ 121.794111][ T5048] ? load_image+0x400/0x400
[ 121.798651][ T5048] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 121.804158][ T5048] ? __lock_acquire+0x13bc/0x7d10
[ 121.809243][ T5048] print_address_description+0x60/0x2d0
[ 121.814843][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 121.820167][ T5048] kasan_report+0xdf/0x130
[ 121.824637][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 121.829953][ T5048] ? journal_mark_dirty+0x21d/0xdf0
[ 121.835193][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 121.840521][ T5048] kasan_check_range+0x235/0x290
[ 121.845505][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 121.850959][ T5048] memmove+0x25/0x60
[ 121.854882][ T5048] leaf_paste_entries+0x794/0x1130
[ 121.860036][ T5048] balance_leaf+0xb2e5/0x10ec0
[ 121.864935][ T5048] ? mark_lock+0x94/0x320
[ 121.869311][ T5048] ? lock_chain_count+0x20/0x20
[ 121.874289][ T5048] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 121.880224][ T5048] ? do_balance+0x930/0x930
[ 121.884769][ T5048] ? _raw_spin_unlock+0x40/0x40
[ 121.889650][ T5048] ? stack_trace_snprint+0xf0/0xf0
[ 121.894815][ T5048] ? stack_depot_save+0x404/0x440
[ 121.899887][ T5048] ? __kasan_kmalloc+0xcc/0xf0
[ 121.904688][ T5048] ? __kasan_kmalloc+0xb5/0xf0
[ 121.909483][ T5048] ? fix_nodes+0x60a2/0x8340
[ 121.914108][ T5048] ? reiserfs_paste_into_item+0x60b/0x810
[ 121.919875][ T5048] ? reiserfs_add_entry+0xa42/0xe10
[ 121.925100][ T5048] ? reiserfs_mkdir+0x6bc/0x920
[ 121.929984][ T5048] ? reiserfs_xattr_init+0x331/0x720
[ 121.935303][ T5048] ? reiserfs_fill_super+0x1fe6/0x2440
[ 121.940796][ T5048] ? mount_bdev+0x287/0x3c0
[ 121.945329][ T5048] ? legacy_get_tree+0xe6/0x180
[ 121.950215][ T5048] ? vfs_get_tree+0x88/0x270
[ 121.954847][ T5048] ? do_new_mount+0x24a/0xa40
[ 121.959569][ T5048] ? __se_sys_mount+0x2e3/0x3d0
[ 121.964444][ T5048] ? do_syscall_64+0x4c/0xa0
[ 121.969151][ T5048] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 121.975272][ T5048] ? __wake_up_bit+0x120/0x120
[ 121.980172][ T5048] ? get_parents+0x400/0xd20
[ 121.984788][ T5048] ? get_neighbors+0x9ba/0x1030
[ 121.989682][ T5048] ? reiserfs_prepare_for_journal+0x269/0x280
[ 121.995788][ T5048] ? fix_nodes+0x7bc3/0x8340
[ 122.000558][ T5048] do_balance+0x318/0x930
[ 122.004945][ T5048] ? get_right_neighbor_position+0x210/0x210
[ 122.011075][ T5048] ? reiserfs_paste_into_item+0x3b0/0x810
[ 122.016862][ T5048] reiserfs_paste_into_item+0x6dd/0x810
[ 122.022637][ T5048] ? reiserfs_cut_from_item+0x1fa0/0x1fa0
[ 122.028470][ T5048] ? reiserfs_get_parent+0x2f0/0x2f0
[ 122.033799][ T5048] ? inode_get_bytes+0x73/0xa0
[ 122.038610][ T5048] ? _find_first_zero_bit+0x60/0xf0
[ 122.043846][ T5048] reiserfs_add_entry+0xa42/0xe10
[ 122.048923][ T5048] ? drop_new_inode+0x60/0x60
[ 122.053664][ T5048] ? journal_begin+0x1f1/0x350
[ 122.058465][ T5048] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 122.064930][ T5048] reiserfs_mkdir+0x6bc/0x920
[ 122.069655][ T5048] ? reiserfs_symlink+0x790/0x790
[ 122.074720][ T5048] ? rwsem_write_trylock+0x135/0x1c0
[ 122.080051][ T5048] ? lookup_one_len+0x19d/0x2d0
[ 122.084939][ T5048] ? lookup_one_common+0x460/0x460
[ 122.090090][ T5048] reiserfs_xattr_init+0x331/0x720
[ 122.095258][ T5048] reiserfs_fill_super+0x1fe6/0x2440
[ 122.100596][ T5048] ? reiserfs_kill_sb+0x140/0x140
[ 122.105715][ T5048] ? snprintf+0xe5/0x140
[ 122.110163][ T5048] ? vscnprintf+0x80/0x80
[ 122.114522][ T5048] ? set_blocksize+0x1f3/0x370
[ 122.119322][ T5048] ? sb_set_blocksize+0xa5/0xe0
[ 122.124216][ T5048] mount_bdev+0x287/0x3c0
[ 122.128602][ T5048] ? reiserfs_kill_sb+0x140/0x140
[ 122.133674][ T5048] legacy_get_tree+0xe6/0x180
[ 122.138381][ T5048] ? remove_save_link+0x3e0/0x3e0
[ 122.143440][ T5048] vfs_get_tree+0x88/0x270
[ 122.147900][ T5048] do_new_mount+0x24a/0xa40
[ 122.152443][ T5048] __se_sys_mount+0x2e3/0x3d0
[ 122.157176][ T5048] ? __x64_sys_mount+0xc0/0xc0
[ 122.161986][ T5048] ? lockdep_hardirqs_on+0x94/0x140
[ 122.167228][ T5048] ? __x64_sys_mount+0x1c/0xc0
[ 122.172118][ T5048] do_syscall_64+0x4c/0xa0
[ 122.176647][ T5048] ? clear_bhb_loop+0x30/0x80
[ 122.181356][ T5048] ? clear_bhb_loop+0x30/0x80
[ 122.186070][ T5048] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.192031][ T5048] RIP: 0033:0x7f55bc4d530a
[ 122.196492][ T5048] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.216394][ T5048] RSP: 002b:00007f55bb737e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 122.224880][ T5048] RAX: ffffffffffffffda RBX: 00007f55bb737ee0 RCX: 00007f55bc4d530a
[ 122.232891][ T5048] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007f55bb737ea0
[ 122.240895][ T5048] RBP: 0000200000000080 R08: 00007f55bb737ee0 R09: 000000000000800c
[ 122.248895][ T5048] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040
[ 122.256895][ T5048] R13: 00007f55bb737ea0 R14: 0000000000001118 R15: 0000200000001380
[ 122.264920][ T5048]
[ 122.267964][ T5048]
[ 122.270302][ T5048] The buggy address belongs to the page:
[ 122.275954][ T5048] page:ffffea0001f01980 refcount:3 mapcount:0 mapping:ffff88801d154f30 index:0x213 pfn:0x7c066
[ 122.286301][ T5048] memcg:ffff88801db14000
[ 122.290566][ T5048] aops:def_blk_aops ino:700000
[ 122.295358][ T5048] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 122.304765][ T5048] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff88801d154f30
[ 122.313471][ T5048] raw: 0000000000000213 ffff888074612828 00000003ffffffff ffff88801db14000
[ 122.322340][ T5048] page dumped because: kasan: bad access detected
[ 122.328977][ T5048] page_owner tracks the page as allocated
[ 122.334793][ T5048] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5048, ts 121715205967, free_ts 121478566244
[ 122.352107][ T5048] get_page_from_freelist+0x1bbd/0x1ca0
[ 122.357701][ T5048] __alloc_pages+0x1ee/0x480
[ 122.362322][ T5048] __page_cache_alloc+0xce/0x440
[ 122.367372][ T5048] pagecache_get_page+0x9b6/0xf10
[ 122.372425][ T5048] __getblk_gfp+0x247/0xb60
[ 122.376956][ T5048] search_by_key+0x46c/0x4470
[ 122.381654][ T5048] reiserfs_read_locked_inode+0x195/0x26b0
[ 122.387582][ T5048] reiserfs_fill_super+0x12af/0x2440
[ 122.392891][ T5048] mount_bdev+0x287/0x3c0
[ 122.397685][ T5048] legacy_get_tree+0xe6/0x180
[ 122.402478][ T5048] vfs_get_tree+0x88/0x270
[ 122.406920][ T5048] do_new_mount+0x24a/0xa40
[ 122.411452][ T5048] __se_sys_mount+0x2e3/0x3d0
[ 122.416153][ T5048] do_syscall_64+0x4c/0xa0
[ 122.420596][ T5048] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.426517][ T5048] page last free stack trace:
[ 122.431293][ T5048] free_unref_page_prepare+0x637/0x6c0
[ 122.436782][ T5048] free_unref_page_list+0x119/0x820
[ 122.442007][ T5048] release_pages+0x186c/0x1be0
[ 122.446795][ T5048] tlb_finish_mmu+0x1b4/0x370
[ 122.451493][ T5048] unmap_region+0x344/0x3b0
[ 122.456022][ T5048] __do_munmap+0x9f8/0xdf0
[ 122.460459][ T5048] __se_sys_brk+0x490/0x710
[ 122.464987][ T5048] do_syscall_64+0x4c/0xa0
[ 122.469421][ T5048] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.475358][ T5048]
[ 122.477708][ T5048] Memory state around the buggy address:
[ 122.483354][ T5048] ffff88807c066e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.491439][ T5048] ffff88807c066f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.499523][ T5048] >ffff88807c066f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.507606][ T5048] ^
[ 122.512735][ T5048] ffff88807c067000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.520829][ T5048] ffff88807c067080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.528907][ T5048] ==================================================================
[ 122.536990][ T5048] Disabling lock debugging due to kernel taint
[ 122.561959][ T5048] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 122.569206][ T5048] CPU: 1 PID: 5048 Comm: syz.0.16 Tainted: G B syzkaller #0
[ 122.577861][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 122.587949][ T5048] Call Trace:
[ 122.591266][ T5048]
[ 122.594219][ T5048] dump_stack_lvl+0x188/0x250
[ 122.598925][ T5048] ? show_regs_print_info+0x20/0x20
[ 122.604151][ T5048] ? load_image+0x400/0x400
[ 122.608682][ T5048] panic+0x2e5/0x810
[ 122.612707][ T5048] ? bpf_jit_dump+0xd0/0xd0
[ 122.617237][ T5048] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 122.623241][ T5048] ? _raw_spin_unlock+0x40/0x40
[ 122.628115][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 122.630528][ T7] Bluetooth: hci0: command 0x040f tx timeout
[ 122.633424][ T5048] check_panic_on_warn+0x80/0xa0
[ 122.644367][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 122.649684][ T5048] end_report+0x6d/0xf0
[ 122.653872][ T5048] kasan_report+0x102/0x130
[ 122.658410][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 122.663722][ T5048] ? journal_mark_dirty+0x21d/0xdf0
[ 122.668948][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 122.674260][ T5048] kasan_check_range+0x235/0x290
[ 122.679229][ T5048] ? leaf_paste_entries+0x794/0x1130
[ 122.684543][ T5048] memmove+0x25/0x60
[ 122.688458][ T5048] leaf_paste_entries+0x794/0x1130
[ 122.693601][ T5048] balance_leaf+0xb2e5/0x10ec0
[ 122.698407][ T5048] ? mark_lock+0x94/0x320
[ 122.702763][ T5048] ? lock_chain_count+0x20/0x20
[ 122.707641][ T5048] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 122.713560][ T5048] ? do_balance+0x930/0x930
[ 122.718095][ T5048] ? _raw_spin_unlock+0x40/0x40
[ 122.722968][ T5048] ? stack_trace_snprint+0xf0/0xf0
[ 122.728115][ T5048] ? stack_depot_save+0x404/0x440
[ 122.733171][ T5048] ? __kasan_kmalloc+0xcc/0xf0
[ 122.737959][ T5048] ? __kasan_kmalloc+0xb5/0xf0
[ 122.742762][ T5048] ? fix_nodes+0x60a2/0x8340
[ 122.747373][ T5048] ? reiserfs_paste_into_item+0x60b/0x810
[ 122.753127][ T5048] ? reiserfs_add_entry+0xa42/0xe10
[ 122.758349][ T5048] ? reiserfs_mkdir+0x6bc/0x920
[ 122.763218][ T5048] ? reiserfs_xattr_init+0x331/0x720
[ 122.768528][ T5048] ? reiserfs_fill_super+0x1fe6/0x2440
[ 122.774010][ T5048] ? mount_bdev+0x287/0x3c0
[ 122.778535][ T5048] ? legacy_get_tree+0xe6/0x180
[ 122.783406][ T5048] ? vfs_get_tree+0x88/0x270
[ 122.788020][ T5048] ? do_new_mount+0x24a/0xa40
[ 122.792719][ T5048] ? __se_sys_mount+0x2e3/0x3d0
[ 122.797596][ T5048] ? do_syscall_64+0x4c/0xa0
[ 122.802212][ T5048] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.808317][ T5048] ? __wake_up_bit+0x120/0x120
[ 122.813105][ T5048] ? get_parents+0x400/0xd20
[ 122.817719][ T5048] ? get_neighbors+0x9ba/0x1030
[ 122.822592][ T5048] ? reiserfs_prepare_for_journal+0x269/0x280
[ 122.828692][ T5048] ? fix_nodes+0x7bc3/0x8340
[ 122.833322][ T5048] do_balance+0x318/0x930
[ 122.837688][ T5048] ? get_right_neighbor_position+0x210/0x210
[ 122.843711][ T5048] ? reiserfs_paste_into_item+0x3b0/0x810
[ 122.849577][ T5048] reiserfs_paste_into_item+0x6dd/0x810
[ 122.855468][ T5048] ? reiserfs_cut_from_item+0x1fa0/0x1fa0
[ 122.861274][ T5048] ? reiserfs_get_parent+0x2f0/0x2f0
[ 122.866596][ T5048] ? inode_get_bytes+0x73/0xa0
[ 122.871394][ T5048] ? _find_first_zero_bit+0x60/0xf0
[ 122.876630][ T5048] reiserfs_add_entry+0xa42/0xe10
[ 122.881698][ T5048] ? drop_new_inode+0x60/0x60
[ 122.886425][ T5048] ? journal_begin+0x1f1/0x350
[ 122.891223][ T5048] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 122.897673][ T5048] reiserfs_mkdir+0x6bc/0x920
[ 122.902388][ T5048] ? reiserfs_symlink+0x790/0x790
[ 122.907445][ T5048] ? rwsem_write_trylock+0x135/0x1c0
[ 122.912768][ T5048] ? lookup_one_len+0x19d/0x2d0
[ 122.917671][ T5048] ? lookup_one_common+0x460/0x460
[ 122.922818][ T5048] reiserfs_xattr_init+0x331/0x720
[ 122.927972][ T5048] reiserfs_fill_super+0x1fe6/0x2440
[ 122.933298][ T5048] ? reiserfs_kill_sb+0x140/0x140
[ 122.938353][ T5048] ? snprintf+0xe5/0x140
[ 122.942634][ T5048] ? vscnprintf+0x80/0x80
[ 122.947013][ T5048] ? set_blocksize+0x1f3/0x370
[ 122.951810][ T5048] ? sb_set_blocksize+0xa5/0xe0
[ 122.956708][ T5048] mount_bdev+0x287/0x3c0
[ 122.961133][ T5048] ? reiserfs_kill_sb+0x140/0x140
[ 122.966280][ T5048] legacy_get_tree+0xe6/0x180
[ 122.970992][ T5048] ? remove_save_link+0x3e0/0x3e0
[ 122.976058][ T5048] vfs_get_tree+0x88/0x270
[ 122.980514][ T5048] do_new_mount+0x24a/0xa40
[ 122.985061][ T5048] __se_sys_mount+0x2e3/0x3d0
[ 122.989778][ T5048] ? __x64_sys_mount+0xc0/0xc0
[ 122.994586][ T5048] ? lockdep_hardirqs_on+0x94/0x140
[ 122.999913][ T5048] ? __x64_sys_mount+0x1c/0xc0
[ 123.004720][ T5048] do_syscall_64+0x4c/0xa0
[ 123.009181][ T5048] ? clear_bhb_loop+0x30/0x80
[ 123.013899][ T5048] ? clear_bhb_loop+0x30/0x80
[ 123.018711][ T5048] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 123.024638][ T5048] RIP: 0033:0x7f55bc4d530a
[ 123.029192][ T5048] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 123.048920][ T5048] RSP: 002b:00007f55bb737e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 123.057386][ T5048] RAX: ffffffffffffffda RBX: 00007f55bb737ee0 RCX: 00007f55bc4d530a
[ 123.065389][ T5048] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007f55bb737ea0
[ 123.073398][ T5048] RBP: 0000200000000080 R08: 00007f55bb737ee0 R09: 000000000000800c
[ 123.081419][ T5048] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040
[ 123.089439][ T5048] R13: 00007f55bb737ea0 R14: 0000000000001118 R15: 0000200000001380
[ 123.097458][ T5048]
[ 123.100975][ T5048] Kernel Offset: disabled
[ 123.105333][ T5048] Rebooting in 86400 seconds..