[ 68.544580][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.584479][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.664762][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 69.296211][ T154] device hsr_slave_0 left promiscuous mode
[ 69.303179][ T154] device hsr_slave_1 left promiscuous mode
[ 69.311521][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 69.320616][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 69.331353][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 69.339437][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 69.349347][ T154] device bridge_slave_1 left promiscuous mode
[ 69.356680][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.374671][ T154] device bridge_slave_0 left promiscuous mode
[ 69.381832][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.404929][ T154] device veth1_macvtap left promiscuous mode
[ 69.413055][ T154] device veth0_macvtap left promiscuous mode
[ 69.419750][ T154] device veth1_vlan left promiscuous mode
[ 69.426004][ T154] device veth0_vlan left promiscuous mode
[ 69.558726][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 69.571150][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 69.586705][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 69.601323][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 69.649454][ T154] bond0 (unregistering): Released all slaves
[ 71.520047][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.527421][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts.
2026/07/14 21:41:09 ignoring optional flag "type"="gce"
2026/07/14 21:41:10 parsed 1 programs
2026/07/14 21:41:11 executed programs: 0
[ 74.275505][ T4391] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 74.404031][ T4401] chnl_net:caif_netlink_parms(): no params data found
[ 74.442602][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.453882][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.466585][ T4401] device bridge_slave_0 entered promiscuous mode
[ 74.476549][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.485578][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.496397][ T4401] device bridge_slave_1 entered promiscuous mode
[ 74.517414][ T4401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.530160][ T4401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.555149][ T4401] team0: Port device team_slave_0 added
[ 74.563778][ T4401] team0: Port device team_slave_1 added
[ 74.581513][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.590434][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.619872][ T4401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.632830][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.641918][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.677059][ T4401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.707115][ T4401] device hsr_slave_0 entered promiscuous mode
[ 74.714750][ T4401] device hsr_slave_1 entered promiscuous mode
[ 75.167417][ T4401] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.178429][ T4401] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.188841][ T4401] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.199323][ T4401] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.225394][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.232815][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.241040][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.248455][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.302317][ T4401] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.317372][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.326392][ T302] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.334905][ T302] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.343269][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 75.357667][ T4401] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.371417][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.380585][ T302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.388148][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.408342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 75.419434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.435890][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.443594][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.454800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 75.467101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 75.487175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 75.498724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.507475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 75.518739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.534741][ T4401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 75.547240][ T4401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.562011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.571799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 75.582528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.593631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 75.604414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.617454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.731706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.741639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.756237][ T4401] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.777946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 75.789505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.813221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 75.825466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.837787][ T4401] device veth0_vlan entered promiscuous mode
[ 75.853113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.862387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.872530][ T4401] device veth1_vlan entered promiscuous mode
[ 75.898530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 75.911109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 75.920305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 75.931402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.944114][ T4401] device veth0_macvtap entered promiscuous mode
[ 75.956805][ T4401] device veth1_macvtap entered promiscuous mode
[ 75.977005][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.985604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.995006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 76.004772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 76.013806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 76.027281][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.035407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 76.046623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 76.059872][ T4401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.071434][ T4401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.080710][ T4401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.089954][ T4401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.220101][ T4484] loop0: detected capacity change from 0 to 8192
[ 76.240065][ T4484] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 76.251014][ T4484] REISERFS (device loop0): using ordered data mode
[ 76.257635][ T4484] reiserfs: using flush barriers
[ 76.277960][ T4484] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 76.298420][ T4484] REISERFS (device loop0): checking transaction log (loop0)
[ 76.398848][ T4214] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.411321][ T4484] REISERFS (device loop0): Using r5 hash to sort names
[ 76.423299][ T4484] REISERFS (device loop0): using 3.5.x disk format
[ 76.442933][ T4484] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 76.469716][ T26] audit: type=1800 audit(1784065273.717:3): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=2 res=0 errno=0
[ 76.514591][ T26] audit: type=1800 audit(1784065273.747:4): pid=4484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0
[ 76.519316][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.572862][ T4501] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.587627][ T4501] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.603298][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.619086][ T4501] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.635753][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.651886][ T4501] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.666848][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.684096][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.700483][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.722363][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.738983][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.755097][ T4484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 3 0x0 SD] (nlink == 1) not found (pos 1)
[ 76.773030][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.791302][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 76.808132][ T4483] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[ 77.031165][ T4525] loop0: detected capacity change from 0 to 8192
[ 77.058652][ T4525] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 77.078612][ T4525] REISERFS (device loop0): using ordered data mode
[ 77.085816][ T4525] reiserfs: using flush barriers
[ 77.110744][ T4525] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 77.131192][ T4525] REISERFS (device loop0): checking transaction log (loop0)
[ 77.244234][ T4525] REISERFS (device loop0): Using r5 hash to sort names
[ 77.252539][ T4525] REISERFS (device loop0): using 3.5.x disk format
[ 77.260047][ T4525] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 77.289458][ T26] audit: type=1800 audit(1784065274.537:5): pid=4525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=2 res=0 errno=0
[ 77.319952][ T4525] ==================================================================
[ 77.328022][ T26] audit: type=1800 audit(1784065274.557:6): pid=4525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=3 res=0 errno=0
[ 77.328436][ T4525] BUG: KASAN: out-of-bounds in leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.358221][ T4525] Read of size 18446744073709551305 at addr ffff888065504000 by task syz-executor.0/4525
[ 77.368206][ T4525]
[ 77.370769][ T4525] CPU: 1 PID: 4525 Comm: syz-executor.0 Not tainted syzkaller #0
[ 77.379110][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 77.389537][ T4525] Call Trace:
[ 77.392853][ T4525]
[ 77.395800][ T4525] dump_stack_lvl+0x188/0x250
[ 77.400519][ T4525] ? show_regs_print_info+0x20/0x20
[ 77.405909][ T4525] ? _printk+0xda/0x130
[ 77.410120][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.415528][ T4525] ? load_image+0x410/0x410
[ 77.420297][ T4525] print_address_description+0x60/0x2d0
[ 77.425955][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.431612][ T4525] kasan_report+0xdf/0x130
[ 77.436673][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.442926][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.448872][ T4525] kasan_check_range+0x235/0x290
[ 77.454924][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.460500][ T4525] memmove+0x25/0x60
[ 77.464835][ T4525] leaf_paste_in_buffer+0x1e7/0xaf0
[ 77.470843][ T4525] balance_leaf+0x748f/0x10ec0
[ 77.477127][ T4525] ? __find_get_block+0xcaa/0x10d0
[ 77.482536][ T4525] ? do_balance+0x930/0x930
[ 77.487378][ T4525] ? write_boundary_block+0x150/0x150
[ 77.493488][ T4525] ? __lock_acquire+0x7b50/0x7b50
[ 77.498725][ T4525] ? do_raw_spin_lock+0x128/0x2f0
[ 77.504414][ T4525] ? __getblk_gfp+0x9d4/0xb20
[ 77.509862][ T4525] ? get_empty_nodes+0x7d3/0x990
[ 77.515256][ T4525] ? indirect_check_left+0x17/0x30
[ 77.520809][ T4525] ? get_neighbors+0x1000/0x1000
[ 77.525864][ T4525] ? __wake_up_bit+0x120/0x120
[ 77.531579][ T4525] ? get_neighbors+0x98d/0x1000
[ 77.536453][ T4525] ? reiserfs_prepare_for_journal+0x269/0x280
[ 77.543337][ T4525] ? fix_nodes+0x7f2d/0x8720
[ 77.548332][ T4525] do_balance+0x318/0x930
[ 77.552968][ T4525] ? get_right_neighbor_position+0x210/0x210
[ 77.560523][ T4525] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 77.567711][ T4525] reiserfs_paste_into_item+0x744/0x7f0
[ 77.573324][ T4525] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 77.579334][ T4525] ? __kernel_text_address+0x9a/0x100
[ 77.585002][ T4525] reiserfs_get_block+0x1c3d/0x4360
[ 77.590373][ T4525] ? make_le_item_head+0x510/0x510
[ 77.596259][ T4525] ? kmem_cache_alloc+0x15d/0x280
[ 77.601563][ T4525] ? create_page_buffers+0x1c4/0x320
[ 77.607120][ T4525] ? __block_write_begin_int+0x25f/0x15d0
[ 77.613620][ T4525] ? reiserfs_setattr+0x3f5/0x10d0
[ 77.619514][ T4525] ? do_sys_ftruncate+0x31b/0x3d0
[ 77.625821][ T4525] ? do_syscall_64+0x4c/0xa0
[ 77.631294][ T4525] ? verify_lock_unused+0x140/0x140
[ 77.637690][ T4525] ? lockdep_init_map_type+0x98/0x900
[ 77.644780][ T4525] ? do_raw_spin_unlock+0x11d/0x230
[ 77.650384][ T4525] ? create_page_buffers+0x238/0x320
[ 77.656692][ T4525] __block_write_begin_int+0x565/0x15d0
[ 77.663504][ T4525] ? make_le_item_head+0x510/0x510
[ 77.669251][ T4525] ? page_zero_new_buffers+0x490/0x490
[ 77.674998][ T4525] ? __mutex_lock_common+0x435/0x2400
[ 77.680667][ T4525] reiserfs_write_begin+0x353/0x820
[ 77.686501][ T4525] ? pagecache_write_begin+0x33/0xa0
[ 77.692423][ T4525] generic_cont_expand_simple+0xf0/0x1a0
[ 77.698687][ T4525] ? submit_bh+0x30/0x30
[ 77.703615][ T4525] ? setattr_prepare+0x1ed/0xd30
[ 77.708677][ T4525] ? mutex_lock_nested+0x17/0x20
[ 77.713731][ T4525] reiserfs_setattr+0x3f5/0x10d0
[ 77.718690][ T4525] ? reiserfs_commit_write+0x630/0x630
[ 77.724436][ T4525] ? ktime_get_coarse_real_ts64+0x106/0x120
[ 77.730788][ T4525] ? current_time+0x1d8/0x2c0
[ 77.735775][ T4525] ? atime_needs_update+0x770/0x770
[ 77.741007][ T4525] ? bpf_lsm_inode_setattr+0x5/0x10
[ 77.746426][ T4525] ? try_break_deleg+0x79/0x120
[ 77.751657][ T4525] ? reiserfs_commit_write+0x630/0x630
[ 77.757835][ T4525] notify_change+0xbc6/0xee0
[ 77.762895][ T4525] do_truncate+0x1ac/0x240
[ 77.767765][ T4525] ? rcu_lock_release+0x20/0x20
[ 77.773004][ T4525] ? rcu_read_lock_bh_held+0xf0/0xf0
[ 77.778779][ T4525] ? bpf_lsm_path_truncate+0x5/0x10
[ 77.784795][ T4525] do_sys_ftruncate+0x31b/0x3d0
[ 77.790719][ T4525] do_syscall_64+0x4c/0xa0
[ 77.795265][ T4525] ? clear_bhb_loop+0x30/0x80
[ 77.800483][ T4525] ? clear_bhb_loop+0x30/0x80
[ 77.806513][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.813776][ T4525] RIP: 0033:0x7fd16978d079
[ 77.818389][ T4525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 77.838900][ T4525] RSP: 002b:00007fd168b1e0b8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 77.847951][ T4525] RAX: ffffffffffffffda RBX: 00007fd1698cbf80 RCX: 00007fd16978d079
[ 77.856458][ T4525] RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000005
[ 77.864630][ T4525] RBP: 00007fd1697ee498 R08: 0000000000000000 R09: 0000000000000000
[ 77.873613][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.883015][ T4525] R13: 000000000000000b R14: 00007fd1698cbf80 R15: 00007ffee423c7c8
[ 77.891381][ T4525]
[ 77.895056][ T4525]
[ 77.897513][ T4525] The buggy address belongs to the page:
[ 77.903447][ T4525] page:ffffea0001954100 refcount:1 mapcount:1 mapping:0000000000000000 index:0x6 pfn:0x65504
[ 77.914671][ T4525] memcg:ffff888016e7c000
[ 77.919205][ T4525] anon flags: 0xfff00000080014(uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[ 77.929260][ T4525] raw: 00fff00000080014 ffffea0001bb0bc8 ffffea0001964308 ffff88801e9f7551
[ 77.938388][ T4525] raw: 0000000000000006 0000000000000000 0000000200000001 ffff888016e7c000
[ 77.948284][ T4525] page dumped because: kasan: bad access detected
[ 77.955671][ T4525] page_owner tracks the page as allocated
[ 77.961494][ T4525] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4557, ts 77729647970, free_ts 77712814780
[ 77.978217][ T4525] get_page_from_freelist+0x24f6/0x2670
[ 77.984324][ T4525] __alloc_pages+0x1ee/0x480
[ 77.989117][ T4525] alloc_pages_vma+0x2bc/0x790
[ 77.993985][ T4525] wp_page_copy+0x252/0x2090
[ 77.998772][ T4525] handle_mm_fault+0x1fbd/0x4440
[ 78.003917][ T4525] do_user_addr_fault+0x494/0xc90
[ 78.009107][ T4525] exc_page_fault+0x60/0x100
[ 78.014111][ T4525] asm_exc_page_fault+0x22/0x30
[ 78.019070][ T4525] page last free stack trace:
[ 78.023884][ T4525] free_unref_page_prepare+0x637/0x6c0
[ 78.029577][ T4525] free_unref_page_list+0x119/0x830
[ 78.035578][ T4525] release_pages+0x185f/0x1bd0
[ 78.040472][ T4525] tlb_finish_mmu+0x1b4/0x370
[ 78.045799][ T4525] exit_mmap+0x3d0/0x640
[ 78.050530][ T4525] __mmput+0x115/0x390
[ 78.054977][ T4525] exit_mm+0x632/0x7b0
[ 78.059065][ T4525] do_exit+0x5b8/0x2110
[ 78.063243][ T4525] do_group_exit+0x12c/0x2f0
[ 78.068022][ T4525] __x64_sys_exit_group+0x3b/0x40
[ 78.073674][ T4525] do_syscall_64+0x4c/0xa0
[ 78.078829][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.085365][ T4525]
[ 78.087722][ T4525] Memory state around the buggy address:
[ 78.093715][ T4525] ffff888065503f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.101986][ T4525] ffff888065503f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.110799][ T4525] >ffff888065504000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.119042][ T4525] ^
[ 78.123301][ T4525] ffff888065504080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.131570][ T4525] ffff888065504100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.140288][ T4525] ==================================================================
[ 78.149186][ T4525] Disabling lock debugging due to kernel taint
[ 78.167982][ T4525] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 78.176084][ T4525] CPU: 1 PID: 4525 Comm: syz-executor.0 Tainted: G B syzkaller #0
[ 78.185789][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 78.196214][ T4525] Call Trace:
[ 78.199512][ T4525]
[ 78.202641][ T4525] dump_stack_lvl+0x188/0x250
[ 78.207649][ T4525] ? show_regs_print_info+0x20/0x20
[ 78.214027][ T4525] ? load_image+0x410/0x410
[ 78.218969][ T4525] panic+0x2f8/0x850
[ 78.223476][ T4525] ? bpf_jit_dump+0xd0/0xd0
[ 78.228254][ T4525] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 78.234872][ T4525] ? _raw_spin_unlock+0x40/0x40
[ 78.240554][ T4525] ? print_memory_metadata+0x314/0x400
[ 78.249251][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 78.255078][ T4525] check_panic_on_warn+0x80/0xa0
[ 78.260007][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 78.265718][ T4525] end_report+0x6d/0xf0
[ 78.269862][ T4525] kasan_report+0x102/0x130
[ 78.274355][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 78.280424][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 78.285879][ T4525] kasan_check_range+0x235/0x290
[ 78.290984][ T4525] ? leaf_paste_in_buffer+0x1e7/0xaf0
[ 78.296484][ T4525] memmove+0x25/0x60
[ 78.300392][ T4525] leaf_paste_in_buffer+0x1e7/0xaf0
[ 78.305852][ T4525] balance_leaf+0x748f/0x10ec0
[ 78.310631][ T4525] ? __find_get_block+0xcaa/0x10d0
[ 78.315734][ T4525] ? do_balance+0x930/0x930
[ 78.320254][ T4525] ? write_boundary_block+0x150/0x150
[ 78.325607][ T4525] ? __lock_acquire+0x7b50/0x7b50
[ 78.330638][ T4525] ? do_raw_spin_lock+0x128/0x2f0
[ 78.335737][ T4525] ? __getblk_gfp+0x9d4/0xb20
[ 78.340494][ T4525] ? get_empty_nodes+0x7d3/0x990
[ 78.345861][ T4525] ? indirect_check_left+0x17/0x30
[ 78.351398][ T4525] ? get_neighbors+0x1000/0x1000
[ 78.356628][ T4525] ? __wake_up_bit+0x120/0x120
[ 78.361640][ T4525] ? get_neighbors+0x98d/0x1000
[ 78.366767][ T4525] ? reiserfs_prepare_for_journal+0x269/0x280
[ 78.372907][ T4525] ? fix_nodes+0x7f2d/0x8720
[ 78.377680][ T4525] do_balance+0x318/0x930
[ 78.382282][ T4525] ? get_right_neighbor_position+0x210/0x210
[ 78.388785][ T4525] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 78.395024][ T4525] reiserfs_paste_into_item+0x744/0x7f0
[ 78.400738][ T4525] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 78.407189][ T4525] ? __kernel_text_address+0x9a/0x100
[ 78.412663][ T4525] reiserfs_get_block+0x1c3d/0x4360
[ 78.417951][ T4525] ? make_le_item_head+0x510/0x510
[ 78.423227][ T4525] ? kmem_cache_alloc+0x15d/0x280
[ 78.428699][ T4525] ? create_page_buffers+0x1c4/0x320
[ 78.434772][ T4525] ? __block_write_begin_int+0x25f/0x15d0
[ 78.440750][ T4525] ? reiserfs_setattr+0x3f5/0x10d0
[ 78.446627][ T4525] ? do_sys_ftruncate+0x31b/0x3d0
[ 78.452023][ T4525] ? do_syscall_64+0x4c/0xa0
[ 78.457087][ T4525] ? verify_lock_unused+0x140/0x140
[ 78.462508][ T4525] ? lockdep_init_map_type+0x98/0x900
[ 78.468344][ T4525] ? do_raw_spin_unlock+0x11d/0x230
[ 78.474074][ T4525] ? create_page_buffers+0x238/0x320
[ 78.480441][ T4525] __block_write_begin_int+0x565/0x15d0
[ 78.486523][ T4525] ? make_le_item_head+0x510/0x510
[ 78.491973][ T4525] ? page_zero_new_buffers+0x490/0x490
[ 78.497504][ T4525] ? __mutex_lock_common+0x435/0x2400
[ 78.503123][ T4525] reiserfs_write_begin+0x353/0x820
[ 78.508482][ T4525] ? pagecache_write_begin+0x33/0xa0
[ 78.513851][ T4525] generic_cont_expand_simple+0xf0/0x1a0
[ 78.519654][ T4525] ? submit_bh+0x30/0x30
[ 78.524062][ T4525] ? setattr_prepare+0x1ed/0xd30
[ 78.528995][ T4525] ? mutex_lock_nested+0x17/0x20
[ 78.534150][ T4525] reiserfs_setattr+0x3f5/0x10d0
[ 78.539688][ T4525] ? reiserfs_commit_write+0x630/0x630
[ 78.546035][ T4525] ? ktime_get_coarse_real_ts64+0x106/0x120
[ 78.552574][ T4525] ? current_time+0x1d8/0x2c0
[ 78.557735][ T4525] ? atime_needs_update+0x770/0x770
[ 78.563548][ T4525] ? bpf_lsm_inode_setattr+0x5/0x10
[ 78.569333][ T4525] ? try_break_deleg+0x79/0x120
[ 78.574582][ T4525] ? reiserfs_commit_write+0x630/0x630
[ 78.580303][ T4525] notify_change+0xbc6/0xee0
[ 78.584982][ T4525] do_truncate+0x1ac/0x240
[ 78.589571][ T4525] ? rcu_lock_release+0x20/0x20
[ 78.594593][ T4525] ? rcu_read_lock_bh_held+0xf0/0xf0
[ 78.600416][ T4525] ? bpf_lsm_path_truncate+0x5/0x10
[ 78.605738][ T4525] do_sys_ftruncate+0x31b/0x3d0
[ 78.611548][ T4525] do_syscall_64+0x4c/0xa0
[ 78.616640][ T4525] ? clear_bhb_loop+0x30/0x80
[ 78.621697][ T4525] ? clear_bhb_loop+0x30/0x80
[ 78.626677][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.633030][ T4525] RIP: 0033:0x7fd16978d079
[ 78.637605][ T4525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 78.658170][ T4525] RSP: 002b:00007fd168b1e0b8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 78.666968][ T4525] RAX: ffffffffffffffda RBX: 00007fd1698cbf80 RCX: 00007fd16978d079
[ 78.676215][ T4525] RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000005
[ 78.685088][ T4525] RBP: 00007fd1697ee498 R08: 0000000000000000 R09: 0000000000000000
[ 78.693790][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.702338][ T4525] R13: 000000000000000b R14: 00007fd1698cbf80 R15: 00007ffee423c7c8
[ 78.710684][ T4525]
[ 78.714373][ T4525] Kernel Offset: disabled
[ 78.719065][ T4525] Rebooting in 86400 seconds..