[ 81.875512][ T1111] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. 2026/06/30 07:14:30 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 88.147719][ T4502] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.423550][ T4664] chnl_net:caif_netlink_parms(): no params data found [ 92.479436][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.486708][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.495350][ T4664] device bridge_slave_0 entered promiscuous mode [ 92.504315][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.511946][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.520683][ T4664] device bridge_slave_1 entered promiscuous mode [ 92.544205][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.556313][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.583696][ T4664] team0: Port device team_slave_0 added [ 92.592294][ T4664] team0: Port device team_slave_1 added [ 92.633890][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.640997][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.668004][ T4664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.681416][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.688751][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.716014][ T4664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.748391][ T4664] device hsr_slave_0 entered promiscuous mode [ 92.756226][ T4664] device hsr_slave_1 entered promiscuous mode [ 93.325994][ T4664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.335977][ T4664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.345530][ T4664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.356542][ T4664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.474170][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.488836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.511029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.522676][ T4664] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.548666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.560466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.569119][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.576359][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.602198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.610954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.622568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.633439][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.640702][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.651419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.675798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.686771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.702860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.713292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.724291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.742117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.751560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.762936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.772633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.783819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.795266][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.009666][ T4664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.026920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.038465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.057592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.080692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.120608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.130228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.142564][ T4664] device veth0_vlan entered promiscuous mode [ 94.160959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.181422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.195350][ T4664] device veth1_vlan entered promiscuous mode [ 94.244417][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.270541][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.279045][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.288988][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.301420][ T4664] device veth0_macvtap entered promiscuous mode [ 94.313937][ T4664] device veth1_macvtap entered promiscuous mode [ 94.333243][ T4664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.343082][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.354022][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.362990][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.373502][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.387332][ T4664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.400844][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.421639][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.443815][ T4664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.469973][ T4664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.479443][ T4664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.494476][ T4664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.762798][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.784695][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.805683][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.838987][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.861366][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.868971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.413017][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/30 07:14:41 executed programs: 0 [ 95.890567][ T4797] chnl_net:caif_netlink_parms(): no params data found [ 95.948737][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.956609][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.964749][ T4797] device bridge_slave_0 entered promiscuous mode [ 95.976175][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.983728][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.992801][ T4797] device bridge_slave_1 entered promiscuous mode [ 96.021763][ T4797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.036479][ T4797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.067164][ T4797] team0: Port device team_slave_0 added [ 96.075571][ T4797] team0: Port device team_slave_1 added [ 96.098991][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.107329][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.134346][ T4797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.148009][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.155940][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.184116][ T4797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.224202][ T4797] device hsr_slave_0 entered promiscuous mode [ 96.231500][ T4797] device hsr_slave_1 entered promiscuous mode [ 96.238742][ T4797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.249028][ T4797] Cannot create hsr debugfs directory [ 97.790406][ T4648] Bluetooth: hci0: command 0x0409 tx timeout [ 98.247482][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.735190][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.786428][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.880849][ T4311] Bluetooth: hci0: command 0x041b tx timeout [ 100.645556][ T4797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.654641][ T4797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.665575][ T4797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.675236][ T4797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.735429][ T4797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.762268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.771051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.782156][ T4797] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.792922][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.802658][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.811830][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.819085][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.826825][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.845890][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.854638][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.863705][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.870892][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.882336][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.902222][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.915023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.924902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.935049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.949645][ T4797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.962477][ T4797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.983878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.993809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.004344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.013160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.022839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.031668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.040853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.130968][ T144] device hsr_slave_0 left promiscuous mode [ 101.137406][ T144] device hsr_slave_1 left promiscuous mode [ 101.144903][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.152895][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.161378][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.168795][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.176725][ T144] device bridge_slave_1 left promiscuous mode [ 101.182975][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.192389][ T144] device bridge_slave_0 left promiscuous mode [ 101.198592][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.209566][ T144] device veth1_macvtap left promiscuous mode [ 101.216341][ T144] device veth0_macvtap left promiscuous mode [ 101.222668][ T144] device veth1_vlan left promiscuous mode [ 101.228560][ T144] device veth0_vlan left promiscuous mode [ 101.349774][ T144] team0 (unregistering): Port device team_slave_1 removed [ 101.363755][ T144] team0 (unregistering): Port device team_slave_0 removed [ 101.375114][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.390857][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.437895][ T144] bond0 (unregistering): Released all slaves [ 101.482237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.490460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.504205][ T4797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.526469][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.539246][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.556406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.565436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.578075][ T4797] device veth0_vlan entered promiscuous mode [ 101.584905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.594242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.605540][ T4797] device veth1_vlan entered promiscuous mode [ 101.623887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.632909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.643437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.653047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.663778][ T4797] device veth0_macvtap entered promiscuous mode [ 101.674225][ T4797] device veth1_macvtap entered promiscuous mode [ 101.691149][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.698570][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.707535][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.715866][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.725806][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.736955][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.747978][ T4797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.757002][ T4797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.766892][ T4797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.776047][ T4797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.785801][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.796551][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.859638][ T736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.872650][ T736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.893085][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.903057][ T736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.912447][ T736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.923684][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/06/30 07:14:47 executed programs: 2 [ 101.951025][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 102.029471][ T5087] loop0: detected capacity change from 0 to 8192 [ 102.118729][ T5087] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 102.144151][ T5087] REISERFS (device loop0): using ordered data mode [ 102.161183][ T5087] reiserfs: using flush barriers [ 102.181501][ T5087] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.209687][ T5087] REISERFS (device loop0): checking transaction log (loop0) [ 102.241987][ T5087] REISERFS (device loop0): Using tea hash to sort names [ 102.262735][ T5087] ================================================================== [ 102.271011][ T5087] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7cb/0x1140 [ 102.278752][ T5087] Read of size 18446744073709551584 at addr ffff888059db5fa4 by task syz.0.17/5087 [ 102.288133][ T5087] [ 102.290562][ T5087] CPU: 1 PID: 5087 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.297960][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.308456][ T5087] Call Trace: [ 102.311738][ T5087] [ 102.314669][ T5087] dump_stack_lvl+0x188/0x250 [ 102.319354][ T5087] ? show_regs_print_info+0x20/0x20 [ 102.324708][ T5087] ? load_image+0x410/0x410 [ 102.329505][ T5087] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 102.334975][ T5087] ? __lock_acquire+0x13dc/0x7b50 [ 102.340302][ T5087] print_address_description+0x60/0x2d0 [ 102.345856][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 102.351139][ T5087] kasan_report+0xdf/0x130 [ 102.355563][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 102.360860][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 102.366327][ T5087] kasan_check_range+0x235/0x290 [ 102.371349][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 102.376726][ T5087] memmove+0x25/0x60 [ 102.380710][ T5087] leaf_paste_entries+0x7cb/0x1140 [ 102.386015][ T5087] balance_leaf+0xc14c/0x10ec0 [ 102.390880][ T5087] ? mark_lock+0x94/0x320 [ 102.395207][ T5087] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.401309][ T5087] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 102.407289][ T5087] ? do_balance+0x930/0x930 [ 102.411883][ T5087] ? _raw_spin_unlock+0x40/0x40 [ 102.416756][ T5087] ? stack_trace_snprint+0xe0/0xe0 [ 102.421871][ T5087] ? __lock_acquire+0x13dc/0x7b50 [ 102.426907][ T5087] ? stack_depot_save+0x41b/0x460 [ 102.432114][ T5087] ? __kasan_kmalloc+0xc6/0xe0 [ 102.436999][ T5087] ? __kasan_kmalloc+0xaf/0xe0 [ 102.441769][ T5087] ? fix_nodes+0x63f2/0x8720 [ 102.446352][ T5087] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 102.452068][ T5087] ? reiserfs_add_entry+0x9bd/0xd80 [ 102.457650][ T5087] ? reiserfs_mkdir+0x6be/0x920 [ 102.462510][ T5087] ? reiserfs_xattr_init+0x33a/0x720 [ 102.467806][ T5087] ? reiserfs_fill_super+0x1cd9/0x2120 [ 102.473281][ T5087] ? mount_bdev+0x28a/0x3c0 [ 102.477809][ T5087] ? legacy_get_tree+0xe6/0x180 [ 102.482669][ T5087] ? vfs_get_tree+0x88/0x270 [ 102.487352][ T5087] ? do_new_mount+0x247/0xa40 [ 102.492050][ T5087] ? __se_sys_mount+0x2e3/0x3d0 [ 102.496945][ T5087] ? do_syscall_64+0x4c/0xa0 [ 102.501536][ T5087] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.507728][ T5087] ? __wake_up_bit+0x120/0x120 [ 102.512610][ T5087] ? get_parents+0x3d9/0xcd0 [ 102.517461][ T5087] ? get_neighbors+0x98d/0x1000 [ 102.522419][ T5087] ? reiserfs_prepare_for_journal+0x269/0x280 [ 102.528682][ T5087] ? fix_nodes+0x7f2d/0x8720 [ 102.533520][ T5087] do_balance+0x318/0x930 [ 102.538118][ T5087] ? get_right_neighbor_position+0x210/0x210 [ 102.544112][ T5087] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 102.549835][ T5087] reiserfs_paste_into_item+0x744/0x7f0 [ 102.555392][ T5087] ? reiserfs_cut_from_item+0x1ff0/0x1ff0 [ 102.561182][ T5087] ? reiserfs_get_parent+0x2f0/0x2f0 [ 102.566572][ T5087] ? _find_first_zero_bit+0x61/0xf0 [ 102.571858][ T5087] reiserfs_add_entry+0x9bd/0xd80 [ 102.576919][ T5087] ? drop_new_inode+0x60/0x60 [ 102.581639][ T5087] ? journal_begin+0x1f1/0x350 [ 102.586415][ T5087] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 102.593014][ T5087] reiserfs_mkdir+0x6be/0x920 [ 102.597710][ T5087] ? reiserfs_symlink+0x7a0/0x7a0 [ 102.602833][ T5087] ? rwsem_write_trylock+0x135/0x1c0 [ 102.608208][ T5087] ? clear_nonspinnable+0x60/0x60 [ 102.613406][ T5087] ? lookup_one_len+0x19d/0x2d0 [ 102.618268][ T5087] ? lookup_one_common+0x460/0x460 [ 102.623405][ T5087] reiserfs_xattr_init+0x33a/0x720 [ 102.628534][ T5087] reiserfs_fill_super+0x1cd9/0x2120 [ 102.633922][ T5087] ? reiserfs_kill_sb+0x140/0x140 [ 102.638995][ T5087] ? snprintf+0xe5/0x140 [ 102.643243][ T5087] ? vscnprintf+0x80/0x80 [ 102.647648][ T5087] ? up_write+0x1b6/0x410 [ 102.652067][ T5087] ? set_blocksize+0x1f1/0x360 [ 102.656921][ T5087] ? sb_set_blocksize+0xa5/0xe0 [ 102.661784][ T5087] mount_bdev+0x28a/0x3c0 [ 102.666212][ T5087] ? reiserfs_kill_sb+0x140/0x140 [ 102.671245][ T5087] legacy_get_tree+0xe6/0x180 [ 102.675943][ T5087] ? remove_save_link+0x3e0/0x3e0 [ 102.680975][ T5087] vfs_get_tree+0x88/0x270 [ 102.685400][ T5087] do_new_mount+0x247/0xa40 [ 102.690096][ T5087] __se_sys_mount+0x2e3/0x3d0 [ 102.694965][ T5087] ? __x64_sys_mount+0xc0/0xc0 [ 102.699817][ T5087] ? lockdep_hardirqs_on+0x94/0x140 [ 102.705187][ T5087] ? __x64_sys_mount+0x1c/0xc0 [ 102.709953][ T5087] do_syscall_64+0x4c/0xa0 [ 102.714376][ T5087] ? clear_bhb_loop+0x30/0x80 [ 102.719099][ T5087] ? clear_bhb_loop+0x30/0x80 [ 102.724029][ T5087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.729920][ T5087] RIP: 0033:0x7fbe8bef3a0a [ 102.734330][ T5087] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.754016][ T5087] RSP: 002b:00007fbe8b553e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.762438][ T5087] RAX: ffffffffffffffda RBX: 00007fbe8b553ee0 RCX: 00007fbe8bef3a0a [ 102.770417][ T5087] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fbe8b553ea0 [ 102.778636][ T5087] RBP: 0000200000000080 R08: 00007fbe8b553ee0 R09: 000000000020800c [ 102.786678][ T5087] R10: 000000000020800c R11: 0000000000000246 R12: 0000200000000040 [ 102.794655][ T5087] R13: 00007fbe8b553ea0 R14: 0000000000001119 R15: 0000200000000300 [ 102.802630][ T5087] [ 102.805644][ T5087] [ 102.807952][ T5087] The buggy address belongs to the page: [ 102.813584][ T5087] page:ffffea0001676d40 refcount:2 mapcount:0 mapping:ffff8881461ccf38 index:0x213 pfn:0x59db5 [ 102.823993][ T5087] memcg:ffff888076074000 [ 102.828318][ T5087] aops:def_blk_aops ino:700000 [ 102.833302][ T5087] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 102.843033][ T5087] raw: 00fff00000002032 ffffea0001676e88 ffff88801bfb8030 ffff8881461ccf38 [ 102.851620][ T5087] raw: 0000000000000213 ffff88806f8fd488 00000002ffffffff ffff888076074000 [ 102.860605][ T5087] page dumped because: kasan: bad access detected [ 102.867030][ T5087] page_owner tracks the page as allocated [ 102.872768][ T5087] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5087, ts 102232468141, free_ts 102178671602 [ 102.890227][ T5087] get_page_from_freelist+0x24f6/0x2670 [ 102.895875][ T5087] __alloc_pages+0x1ee/0x480 [ 102.900502][ T5087] __page_cache_alloc+0xce/0x440 [ 102.905666][ T5087] pagecache_get_page+0x9b8/0xf20 [ 102.910701][ T5087] __getblk_gfp+0x240/0xb20 [ 102.915202][ T5087] search_by_key+0x474/0x4400 [ 102.919905][ T5087] reiserfs_read_locked_inode+0x195/0x24c0 [ 102.925705][ T5087] reiserfs_fill_super+0x1126/0x2120 [ 102.930984][ T5087] mount_bdev+0x28a/0x3c0 [ 102.935428][ T5087] legacy_get_tree+0xe6/0x180 [ 102.940108][ T5087] vfs_get_tree+0x88/0x270 [ 102.944507][ T5087] do_new_mount+0x247/0xa40 [ 102.949078][ T5087] __se_sys_mount+0x2e3/0x3d0 [ 102.953737][ T5087] do_syscall_64+0x4c/0xa0 [ 102.958146][ T5087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.964152][ T5087] page last free stack trace: [ 102.968952][ T5087] free_unref_page_prepare+0x637/0x6c0 [ 102.974524][ T5087] free_unref_page_list+0x119/0x830 [ 102.979980][ T5087] release_pages+0x185f/0x1bd0 [ 102.985798][ T5087] tlb_finish_mmu+0x1b4/0x370 [ 102.991267][ T5087] unmap_region+0x344/0x3b0 [ 102.996260][ T5087] __do_munmap+0xa29/0xe10 [ 103.002555][ T5087] __vm_munmap+0x13f/0x240 [ 103.008238][ T5087] __x64_sys_munmap+0x67/0x70 [ 103.013181][ T5087] do_syscall_64+0x4c/0xa0 [ 103.017997][ T5087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.023989][ T5087] [ 103.026325][ T5087] Memory state around the buggy address: [ 103.032121][ T5087] ffff888059db5e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.040274][ T5087] ffff888059db5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.048329][ T5087] >ffff888059db5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.056472][ T5087] ^ [ 103.061566][ T5087] ffff888059db6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.069609][ T5087] ffff888059db6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.077836][ T5087] ================================================================== [ 103.086280][ T5087] Disabling lock debugging due to kernel taint [ 103.113516][ T5087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.120995][ T5087] CPU: 1 PID: 5087 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 103.129596][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.139752][ T5087] Call Trace: [ 103.143020][ T5087] [ 103.145941][ T5087] dump_stack_lvl+0x188/0x250 [ 103.150702][ T5087] ? show_regs_print_info+0x20/0x20 [ 103.155890][ T5087] ? load_image+0x410/0x410 [ 103.160464][ T5087] panic+0x2f8/0x850 [ 103.164363][ T5087] ? bpf_jit_dump+0xd0/0xd0 [ 103.169064][ T5087] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 103.175609][ T5087] ? _raw_spin_unlock+0x40/0x40 [ 103.180628][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 103.185900][ T5087] check_panic_on_warn+0x80/0xa0 [ 103.191008][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 103.196360][ T5087] end_report+0x6d/0xf0 [ 103.200505][ T5087] kasan_report+0x102/0x130 [ 103.205165][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 103.210436][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 103.216250][ T5087] kasan_check_range+0x235/0x290 [ 103.221273][ T5087] ? leaf_paste_entries+0x7cb/0x1140 [ 103.226599][ T5087] memmove+0x25/0x60 [ 103.230651][ T5087] leaf_paste_entries+0x7cb/0x1140 [ 103.235943][ T5087] balance_leaf+0xc14c/0x10ec0 [ 103.240727][ T5087] ? mark_lock+0x94/0x320 [ 103.245055][ T5087] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.251021][ T5087] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 103.256930][ T5087] ? do_balance+0x930/0x930 [ 103.261433][ T5087] ? _raw_spin_unlock+0x40/0x40 [ 103.266352][ T5087] ? stack_trace_snprint+0xe0/0xe0 [ 103.271472][ T5087] ? __lock_acquire+0x13dc/0x7b50 [ 103.276581][ T5087] ? stack_depot_save+0x41b/0x460 [ 103.281603][ T5087] ? __kasan_kmalloc+0xc6/0xe0 [ 103.286449][ T5087] ? __kasan_kmalloc+0xaf/0xe0 [ 103.291208][ T5087] ? fix_nodes+0x63f2/0x8720 [ 103.295895][ T5087] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 103.301701][ T5087] ? reiserfs_add_entry+0x9bd/0xd80 [ 103.306916][ T5087] ? reiserfs_mkdir+0x6be/0x920 [ 103.311745][ T5087] ? reiserfs_xattr_init+0x33a/0x720 [ 103.317193][ T5087] ? reiserfs_fill_super+0x1cd9/0x2120 [ 103.322729][ T5087] ? mount_bdev+0x28a/0x3c0 [ 103.327380][ T5087] ? legacy_get_tree+0xe6/0x180 [ 103.332227][ T5087] ? vfs_get_tree+0x88/0x270 [ 103.336813][ T5087] ? do_new_mount+0x247/0xa40 [ 103.341470][ T5087] ? __se_sys_mount+0x2e3/0x3d0 [ 103.346299][ T5087] ? do_syscall_64+0x4c/0xa0 [ 103.350914][ T5087] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.357046][ T5087] ? __wake_up_bit+0x120/0x120 [ 103.361902][ T5087] ? get_parents+0x3d9/0xcd0 [ 103.366822][ T5087] ? get_neighbors+0x98d/0x1000 [ 103.371678][ T5087] ? reiserfs_prepare_for_journal+0x269/0x280 [ 103.377766][ T5087] ? fix_nodes+0x7f2d/0x8720 [ 103.382444][ T5087] do_balance+0x318/0x930 [ 103.386763][ T5087] ? get_right_neighbor_position+0x210/0x210 [ 103.392817][ T5087] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 103.398707][ T5087] reiserfs_paste_into_item+0x744/0x7f0 [ 103.404441][ T5087] ? reiserfs_cut_from_item+0x1ff0/0x1ff0 [ 103.410153][ T5087] ? reiserfs_get_parent+0x2f0/0x2f0 [ 103.415422][ T5087] ? _find_first_zero_bit+0x61/0xf0 [ 103.421041][ T5087] reiserfs_add_entry+0x9bd/0xd80 [ 103.426053][ T5087] ? drop_new_inode+0x60/0x60 [ 103.430710][ T5087] ? journal_begin+0x1f1/0x350 [ 103.435624][ T5087] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 103.442035][ T5087] reiserfs_mkdir+0x6be/0x920 [ 103.446693][ T5087] ? reiserfs_symlink+0x7a0/0x7a0 [ 103.451779][ T5087] ? rwsem_write_trylock+0x135/0x1c0 [ 103.457051][ T5087] ? clear_nonspinnable+0x60/0x60 [ 103.462047][ T5087] ? lookup_one_len+0x19d/0x2d0 [ 103.466919][ T5087] ? lookup_one_common+0x460/0x460 [ 103.472345][ T5087] reiserfs_xattr_init+0x33a/0x720 [ 103.477647][ T5087] reiserfs_fill_super+0x1cd9/0x2120 [ 103.482950][ T5087] ? reiserfs_kill_sb+0x140/0x140 [ 103.488074][ T5087] ? snprintf+0xe5/0x140 [ 103.492299][ T5087] ? vscnprintf+0x80/0x80 [ 103.496700][ T5087] ? up_write+0x1b6/0x410 [ 103.501020][ T5087] ? set_blocksize+0x1f1/0x360 [ 103.505961][ T5087] ? sb_set_blocksize+0xa5/0xe0 [ 103.511082][ T5087] mount_bdev+0x28a/0x3c0 [ 103.515398][ T5087] ? reiserfs_kill_sb+0x140/0x140 [ 103.520502][ T5087] legacy_get_tree+0xe6/0x180 [ 103.525277][ T5087] ? remove_save_link+0x3e0/0x3e0 [ 103.530461][ T5087] vfs_get_tree+0x88/0x270 [ 103.534967][ T5087] do_new_mount+0x247/0xa40 [ 103.539549][ T5087] __se_sys_mount+0x2e3/0x3d0 [ 103.544221][ T5087] ? __x64_sys_mount+0xc0/0xc0 [ 103.549494][ T5087] ? lockdep_hardirqs_on+0x94/0x140 [ 103.555056][ T5087] ? __x64_sys_mount+0x1c/0xc0 [ 103.560274][ T5087] do_syscall_64+0x4c/0xa0 [ 103.564772][ T5087] ? clear_bhb_loop+0x30/0x80 [ 103.569609][ T5087] ? clear_bhb_loop+0x30/0x80 [ 103.574397][ T5087] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.580423][ T5087] RIP: 0033:0x7fbe8bef3a0a [ 103.584841][ T5087] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.604702][ T5087] RSP: 002b:00007fbe8b553e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.613554][ T5087] RAX: ffffffffffffffda RBX: 00007fbe8b553ee0 RCX: 00007fbe8bef3a0a [ 103.621606][ T5087] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fbe8b553ea0 [ 103.629683][ T5087] RBP: 0000200000000080 R08: 00007fbe8b553ee0 R09: 000000000020800c [ 103.637639][ T5087] R10: 000000000020800c R11: 0000000000000246 R12: 0000200000000040 [ 103.646150][ T5087] R13: 00007fbe8b553ea0 R14: 0000000000001119 R15: 0000200000000300 [ 103.654487][ T5087] [ 103.657939][ T5087] Kernel Offset: disabled [ 103.662274][ T5087] Rebooting in 86400 seconds..