no interfaces have a carrier
[ 43.104693][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0
[ 43.122819][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts.
2026/07/13 01:28:01 parsed 1 programs
2026/07/13 01:28:01 serving rpc on tcp://33715
syzkaller login: [ 68.677865][ T4199] cgroup: Unknown subsys name 'net'
[ 68.811003][ T4199] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 70.293709][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 71.347674][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.354265][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.686309][ T4208] chnl_net:caif_netlink_parms(): no params data found
[ 71.733813][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.741705][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.750001][ T4208] device bridge_slave_0 entered promiscuous mode
[ 71.759238][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.766448][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.774476][ T4208] device bridge_slave_1 entered promiscuous mode
[ 71.795407][ T4208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.806849][ T4208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.829875][ T4208] team0: Port device team_slave_0 added
[ 71.837513][ T4208] team0: Port device team_slave_1 added
[ 71.856171][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.863150][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.889304][ T4208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.901943][ T4208] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.908990][ T4208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.934930][ T4208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.967272][ T4208] device hsr_slave_0 entered promiscuous mode
[ 71.974046][ T4208] device hsr_slave_1 entered promiscuous mode
[ 72.087571][ T4208] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 72.098826][ T4208] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 72.108775][ T4208] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 72.118449][ T4208] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 72.143437][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.150652][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.158732][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.165854][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.211265][ T4208] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.225275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 72.236969][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.246170][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.255350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 72.268600][ T4208] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.280194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 72.289836][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.296996][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.310624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.319708][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.326823][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.349268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.358242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.376933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.386099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.395033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.406098][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.494507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.502050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.515999][ T4208] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.535916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 72.556433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 72.565512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 72.573206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 72.583508][ T4208] device veth0_vlan entered promiscuous mode
[ 72.595896][ T4208] device veth1_vlan entered promiscuous mode
[ 72.618555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 72.626929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 72.637337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 72.648565][ T4208] device veth0_macvtap entered promiscuous mode
[ 72.659606][ T4208] device veth1_macvtap entered promiscuous mode
[ 72.667689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 72.685750][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.693302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 72.702320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 72.714571][ T4208] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.722233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 72.731111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 72.742094][ T4208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.752122][ T4208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.760966][ T4208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.770422][ T4208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.915085][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.162019][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.629505][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.671847][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.281354][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.294058][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.309938][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 79.340997][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.351872][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.366520][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 79.506828][ T154] device hsr_slave_0 left promiscuous mode
[ 79.513573][ T154] device hsr_slave_1 left promiscuous mode
[ 79.526345][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 79.534136][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 79.544030][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 79.553099][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 79.561580][ T154] device bridge_slave_1 left promiscuous mode
[ 79.570933][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.591890][ T154] device bridge_slave_0 left promiscuous mode
[ 79.598338][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.623727][ T154] device veth1_macvtap left promiscuous mode
[ 79.631361][ T154] device veth0_macvtap left promiscuous mode
[ 79.638488][ T154] device veth1_vlan left promiscuous mode
[ 79.645779][ T154] device veth0_vlan left promiscuous mode
[ 79.843859][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 79.857811][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 79.874512][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 79.890218][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 79.948551][ T154] bond0 (unregistering): Released all slaves
[ 82.522529][ T154] ODEBUG: Out of memory. ODEBUG disabled
2026/07/13 01:28:19 executed programs: 0
[ 83.853475][ T4431] chnl_net:caif_netlink_parms(): no params data found
[ 83.921632][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.929110][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.937440][ T4431] device bridge_slave_0 entered promiscuous mode
[ 83.968281][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.976272][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.984154][ T4431] device bridge_slave_1 entered promiscuous mode
[ 84.004773][ T4431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.045556][ T4431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.076180][ T4431] team0: Port device team_slave_0 added
[ 84.086529][ T4431] team0: Port device team_slave_1 added
[ 84.122628][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.129823][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.157401][ T4431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.170958][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.178166][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.204326][ T4431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.250595][ T4431] device hsr_slave_0 entered promiscuous mode
[ 84.258494][ T4431] device hsr_slave_1 entered promiscuous mode
[ 84.967829][ T4431] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.001665][ T4431] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.035203][ T4431] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.065441][ T4431] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.236104][ T4431] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.260051][ T4431] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.285063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 85.304646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.324350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 85.333291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.350707][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.357875][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.367732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 85.376642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.385639][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.392727][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.401066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.411408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.420791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 85.448641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.467104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.486419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.510290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.526307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.549290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.565018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.579635][ T4431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 85.606252][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.620569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.634948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.675337][ T13] Bluetooth: hci0: command 0x0409 tx timeout
[ 85.843630][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.851528][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 85.877014][ T4431] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.917252][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 85.935058][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 85.967250][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 85.976618][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 85.991131][ T4431] device veth0_vlan entered promiscuous mode
[ 85.998747][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 86.008643][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 86.022248][ T4431] device veth1_vlan entered promiscuous mode
[ 86.050752][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 86.060725][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 86.071076][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 86.080404][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 86.093973][ T4431] device veth0_macvtap entered promiscuous mode
[ 86.106974][ T4431] device veth1_macvtap entered promiscuous mode
[ 86.128760][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.136741][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 86.153120][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 86.162180][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 86.172689][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 86.186301][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.196553][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 86.206846][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 86.219550][ T4431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.233713][ T4431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.243995][ T4431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.253658][ T4431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.327013][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.341181][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.365541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 86.380950][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.389766][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.400170][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.527169][ T4491] loop0: detected capacity change from 0 to 8192
[ 86.628498][ T4491] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 86.650456][ T4491] REISERFS (device loop0): using ordered data mode
[ 86.674396][ T4491] reiserfs: using flush barriers
[ 86.681835][ T4491] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 86.706956][ T1111] cfg80211: failed to load regulatory.db
[ 86.752259][ T4491] REISERFS (device loop0): checking transaction log (loop0)
[ 86.799391][ T4491] REISERFS (device loop0): Using r5 hash to sort names
[ 86.826725][ T4491] ==================================================================
[ 86.835061][ T4491] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7cb/0x1140
[ 86.842662][ T4491] Read of size 18446744073709551594 at addr ffff88806afeefa4 by task syz.0.17/4491
[ 86.851966][ T4491]
[ 86.854314][ T4491] CPU: 1 PID: 4491 Comm: syz.0.17 Not tainted syzkaller #0
[ 86.861649][ T4491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 86.872043][ T4491] Call Trace:
[ 86.875361][ T4491]
[ 86.878323][ T4491] dump_stack_lvl+0x188/0x250
[ 86.883037][ T4491] ? show_regs_print_info+0x20/0x20
[ 86.888266][ T4491] ? load_image+0x410/0x410
[ 86.892887][ T4491] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 86.898383][ T4491] ? __lock_acquire+0x13dc/0x7b50
[ 86.903445][ T4491] print_address_description+0x60/0x2d0
[ 86.909081][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 86.914394][ T4491] kasan_report+0xdf/0x130
[ 86.918837][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 86.924262][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 86.929572][ T4491] kasan_check_range+0x235/0x290
[ 86.934537][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 86.939855][ T4491] memmove+0x25/0x60
[ 86.943781][ T4491] leaf_paste_entries+0x7cb/0x1140
[ 86.948930][ T4491] balance_leaf+0xc14c/0x10ec0
[ 86.953731][ T4491] ? mark_lock+0x94/0x320
[ 86.958097][ T4491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 86.964117][ T4491] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 86.970125][ T4491] ? do_balance+0x930/0x930
[ 86.974712][ T4491] ? _raw_spin_unlock+0x40/0x40
[ 86.979634][ T4491] ? stack_trace_snprint+0xe0/0xe0
[ 86.984780][ T4491] ? stack_depot_save+0x41b/0x460
[ 86.989997][ T4491] ? __kasan_kmalloc+0xc6/0xe0
[ 86.994801][ T4491] ? __kasan_kmalloc+0xaf/0xe0
[ 86.999602][ T4491] ? fix_nodes+0x63f2/0x8720
[ 87.004217][ T4491] ? reiserfs_paste_into_item+0x60b/0x7f0
[ 87.009971][ T4491] ? reiserfs_add_entry+0x9bd/0xd80
[ 87.015216][ T4491] ? reiserfs_mkdir+0x6be/0x920
[ 87.020095][ T4491] ? reiserfs_xattr_init+0x33a/0x720
[ 87.025415][ T4491] ? reiserfs_fill_super+0x1cd9/0x2120
[ 87.030912][ T4491] ? mount_bdev+0x28a/0x3c0
[ 87.035457][ T4491] ? legacy_get_tree+0xe6/0x180
[ 87.040344][ T4491] ? vfs_get_tree+0x88/0x270
[ 87.044975][ T4491] ? do_new_mount+0x247/0xa40
[ 87.049715][ T4491] ? __se_sys_mount+0x2e3/0x3d0
[ 87.054610][ T4491] ? do_syscall_64+0x4c/0xa0
[ 87.059279][ T4491] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.065404][ T4491] ? __wake_up_bit+0x120/0x120
[ 87.070204][ T4491] ? get_parents+0x3d9/0xcd0
[ 87.074839][ T4491] ? get_neighbors+0x98d/0x1000
[ 87.079858][ T4491] ? reiserfs_prepare_for_journal+0x269/0x280
[ 87.085974][ T4491] ? fix_nodes+0x7f2d/0x8720
[ 87.090690][ T4491] do_balance+0x318/0x930
[ 87.095100][ T4491] ? get_right_neighbor_position+0x210/0x210
[ 87.101142][ T4491] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 87.106904][ T4491] reiserfs_paste_into_item+0x744/0x7f0
[ 87.112497][ T4491] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 87.118400][ T4491] ? reiserfs_get_parent+0x2f0/0x2f0
[ 87.123723][ T4491] ? inode2sd_v1+0x50a/0x990
[ 87.128345][ T4491] ? _find_first_zero_bit+0x61/0xf0
[ 87.133570][ T4491] reiserfs_add_entry+0x9bd/0xd80
[ 87.138746][ T4491] ? drop_new_inode+0x60/0x60
[ 87.143477][ T4491] ? journal_begin+0x1f1/0x350
[ 87.148383][ T4491] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 87.154851][ T4491] reiserfs_mkdir+0x6be/0x920
[ 87.159571][ T4491] ? reiserfs_symlink+0x7a0/0x7a0
[ 87.164736][ T4491] ? rwsem_write_trylock+0x135/0x1c0
[ 87.170056][ T4491] ? clear_nonspinnable+0x60/0x60
[ 87.175105][ T4491] ? lookup_one_len+0x19d/0x2d0
[ 87.180029][ T4491] ? lookup_one_common+0x460/0x460
[ 87.185167][ T4491] reiserfs_xattr_init+0x33a/0x720
[ 87.190304][ T4491] reiserfs_fill_super+0x1cd9/0x2120
[ 87.195623][ T4491] ? reiserfs_kill_sb+0x140/0x140
[ 87.200688][ T4491] ? snprintf+0xe5/0x140
[ 87.204970][ T4491] ? vscnprintf+0x80/0x80
[ 87.209316][ T4491] ? up_write+0x1b6/0x410
[ 87.213677][ T4491] ? set_blocksize+0x1f1/0x360
[ 87.218468][ T4491] ? sb_set_blocksize+0xa5/0xe0
[ 87.223347][ T4491] mount_bdev+0x28a/0x3c0
[ 87.227714][ T4491] ? reiserfs_kill_sb+0x140/0x140
[ 87.232770][ T4491] legacy_get_tree+0xe6/0x180
[ 87.237473][ T4491] ? remove_save_link+0x3e0/0x3e0
[ 87.242525][ T4491] vfs_get_tree+0x88/0x270
[ 87.246971][ T4491] do_new_mount+0x247/0xa40
[ 87.251505][ T4491] __se_sys_mount+0x2e3/0x3d0
[ 87.256218][ T4491] ? __x64_sys_mount+0xc0/0xc0
[ 87.261012][ T4491] ? lockdep_hardirqs_on+0x94/0x140
[ 87.266240][ T4491] ? __x64_sys_mount+0x1c/0xc0
[ 87.271061][ T4491] do_syscall_64+0x4c/0xa0
[ 87.275634][ T4491] ? clear_bhb_loop+0x30/0x80
[ 87.280345][ T4491] ? clear_bhb_loop+0x30/0x80
[ 87.285044][ T4491] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.290971][ T4491] RIP: 0033:0x7faee655c0ca
[ 87.295426][ T4491] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.315415][ T4491] RSP: 002b:00007fff585fde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 87.324084][ T4491] RAX: ffffffffffffffda RBX: 00007fff585fdef0 RCX: 00007faee655c0ca
[ 87.332237][ T4491] RDX: 0000200000000300 RSI: 0000200000000380 RDI: 00007fff585fdeb0
[ 87.340246][ T4491] RBP: 0000200000000300 R08: 00007fff585fdef0 R09: 000000000200c002
[ 87.348255][ T4491] R10: 000000000200c002 R11: 0000000000000246 R12: 0000200000000380
[ 87.356264][ T4491] R13: 00007fff585fdeb0 R14: 00000000000010ff R15: 0000200000000340
[ 87.364281][ T4491]
[ 87.367323][ T4491]
[ 87.369666][ T4491] The buggy address belongs to the page:
[ 87.375321][ T4491] page:ffffea0001abfb80 refcount:2 mapcount:0 mapping:ffff88801709daf8 index:0x213 pfn:0x6afee
[ 87.385666][ T4491] memcg:ffff888077138000
[ 87.389922][ T4491] aops:def_blk_aops ino:700000
[ 87.394703][ T4491] flags: 0xfff00000002032(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 87.404470][ T4491] raw: 00fff00000002032 ffffea0001abf848 ffff888017dd8030 ffff88801709daf8
[ 87.413195][ T4491] raw: 0000000000000213 ffff8880747e1570 00000002ffffffff ffff888077138000
[ 87.421792][ T4491] page dumped because: kasan: bad access detected
[ 87.429030][ T4491] page_owner tracks the page as allocated
[ 87.434765][ T4491] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4491, ts 86798601377, free_ts 86720200687
[ 87.451907][ T4491] get_page_from_freelist+0x24f6/0x2670
[ 87.457488][ T4491] __alloc_pages+0x1ee/0x480
[ 87.462103][ T4491] __page_cache_alloc+0xce/0x440
[ 87.467069][ T4491] pagecache_get_page+0x9b8/0xf20
[ 87.472106][ T4491] __getblk_gfp+0x240/0xb20
[ 87.476628][ T4491] search_by_key+0x474/0x4400
[ 87.481329][ T4491] reiserfs_read_locked_inode+0x195/0x24c0
[ 87.487152][ T4491] reiserfs_fill_super+0x1126/0x2120
[ 87.492464][ T4491] mount_bdev+0x28a/0x3c0
[ 87.496842][ T4491] legacy_get_tree+0xe6/0x180
[ 87.501547][ T4491] vfs_get_tree+0x88/0x270
[ 87.506876][ T4491] do_new_mount+0x247/0xa40
[ 87.511445][ T4491] __se_sys_mount+0x2e3/0x3d0
[ 87.516158][ T4491] do_syscall_64+0x4c/0xa0
[ 87.520593][ T4491] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.527129][ T4491] page last free stack trace:
[ 87.532557][ T4491] free_unref_page_prepare+0x637/0x6c0
[ 87.538064][ T4491] free_unref_page_list+0x119/0x830
[ 87.543302][ T4491] release_pages+0x185f/0x1bd0
[ 87.548090][ T4491] tlb_finish_mmu+0x1b4/0x370
[ 87.552788][ T4491] exit_mmap+0x3d0/0x640
[ 87.557231][ T4491] __mmput+0x115/0x390
[ 87.561367][ T4491] exit_mm+0x632/0x7b0
[ 87.565456][ T4491] do_exit+0x5b8/0x2110
[ 87.569749][ T4491] do_group_exit+0x12c/0x2f0
[ 87.574362][ T4491] __x64_sys_exit_group+0x3b/0x40
[ 87.579407][ T4491] do_syscall_64+0x4c/0xa0
[ 87.583842][ T4491] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.589754][ T4491]
[ 87.592091][ T4491] Memory state around the buggy address:
[ 87.597738][ T4491] ffff88806afeee80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 87.605830][ T4491] ffff88806afeef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 87.613913][ T4491] >ffff88806afeef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 87.622002][ T4491] ^
[ 87.627126][ T4491] ffff88806afef000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 87.635236][ T4491] ffff88806afef080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 87.643318][ T4491] ==================================================================
[ 87.651394][ T4491] Disabling lock debugging due to kernel taint
[ 87.713369][ T4491] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.720745][ T4491] CPU: 0 PID: 4491 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 87.729378][ T4491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 87.739464][ T4491] Call Trace:
[ 87.742776][ T4491]
[ 87.745792][ T4491] dump_stack_lvl+0x188/0x250
[ 87.750513][ T4491] ? show_regs_print_info+0x20/0x20
[ 87.755747][ T4491] ? load_image+0x410/0x410
[ 87.760308][ T4491] panic+0x2f8/0x850
[ 87.764250][ T4491] ? bpf_jit_dump+0xd0/0xd0
[ 87.768798][ T4491] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 87.774827][ T4491] ? _raw_spin_unlock+0x40/0x40
[ 87.779733][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 87.785054][ T4491] check_panic_on_warn+0x80/0xa0
[ 87.790054][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 87.795375][ T4491] end_report+0x6d/0xf0
[ 87.799569][ T4491] kasan_report+0x102/0x130
[ 87.804108][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 87.809423][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 87.814767][ T4491] kasan_check_range+0x235/0x290
[ 87.819738][ T4491] ? leaf_paste_entries+0x7cb/0x1140
[ 87.825131][ T4491] memmove+0x25/0x60
[ 87.829191][ T4491] leaf_paste_entries+0x7cb/0x1140
[ 87.834577][ T4491] balance_leaf+0xc14c/0x10ec0
[ 87.839652][ T4491] ? mark_lock+0x94/0x320
[ 87.844235][ T4491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 87.850556][ T4491] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 87.856689][ T4491] ? do_balance+0x930/0x930
[ 87.861255][ T4491] ? _raw_spin_unlock+0x40/0x40
[ 87.866271][ T4491] ? stack_trace_snprint+0xe0/0xe0
[ 87.871434][ T4491] ? stack_depot_save+0x41b/0x460
[ 87.876632][ T4491] ? __kasan_kmalloc+0xc6/0xe0
[ 87.881439][ T4491] ? __kasan_kmalloc+0xaf/0xe0
[ 87.886242][ T4491] ? fix_nodes+0x63f2/0x8720
[ 87.890946][ T4491] ? reiserfs_paste_into_item+0x60b/0x7f0
[ 87.896726][ T4491] ? reiserfs_add_entry+0x9bd/0xd80
[ 87.901955][ T4491] ? reiserfs_mkdir+0x6be/0x920
[ 87.906832][ T4491] ? reiserfs_xattr_init+0x33a/0x720
[ 87.912155][ T4491] ? reiserfs_fill_super+0x1cd9/0x2120
[ 87.917639][ T4491] ? mount_bdev+0x28a/0x3c0
[ 87.922178][ T4491] ? legacy_get_tree+0xe6/0x180
[ 87.927057][ T4491] ? vfs_get_tree+0x88/0x270
[ 87.931679][ T4491] ? do_new_mount+0x247/0xa40
[ 87.936380][ T4491] ? __se_sys_mount+0x2e3/0x3d0
[ 87.941257][ T4491] ? do_syscall_64+0x4c/0xa0
[ 87.945871][ T4491] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.952136][ T4491] ? __wake_up_bit+0x120/0x120
[ 87.956949][ T4491] ? get_parents+0x3d9/0xcd0
[ 87.961583][ T4491] ? get_neighbors+0x98d/0x1000
[ 87.967143][ T4491] ? reiserfs_prepare_for_journal+0x269/0x280
[ 87.973262][ T4491] ? fix_nodes+0x7f2d/0x8720
[ 87.978024][ T4491] do_balance+0x318/0x930
[ 87.982515][ T4491] ? get_right_neighbor_position+0x210/0x210
[ 87.988650][ T4491] ? reiserfs_paste_into_item+0x3ba/0x7f0
[ 87.994413][ T4491] reiserfs_paste_into_item+0x744/0x7f0
[ 87.999992][ T4491] ? reiserfs_cut_from_item+0x1ff0/0x1ff0
[ 88.005775][ T4491] ? reiserfs_get_parent+0x2f0/0x2f0
[ 88.011142][ T4491] ? inode2sd_v1+0x50a/0x990
[ 88.016196][ T4491] ? _find_first_zero_bit+0x61/0xf0
[ 88.021442][ T4491] reiserfs_add_entry+0x9bd/0xd80
[ 88.026528][ T4491] ? drop_new_inode+0x60/0x60
[ 88.031253][ T4491] ? journal_begin+0x1f1/0x350
[ 88.036255][ T4491] ? reiserfs_update_inode_transaction+0x1c/0x120
[ 88.042860][ T4491] reiserfs_mkdir+0x6be/0x920
[ 88.047587][ T4491] ? reiserfs_symlink+0x7a0/0x7a0
[ 88.052684][ T4491] ? rwsem_write_trylock+0x135/0x1c0
[ 88.058025][ T4491] ? clear_nonspinnable+0x60/0x60
[ 88.063090][ T4491] ? lookup_one_len+0x19d/0x2d0
[ 88.067983][ T4491] ? lookup_one_common+0x460/0x460
[ 88.073142][ T4491] reiserfs_xattr_init+0x33a/0x720
[ 88.078288][ T4491] reiserfs_fill_super+0x1cd9/0x2120
[ 88.083621][ T4491] ? reiserfs_kill_sb+0x140/0x140
[ 88.088683][ T4491] ? snprintf+0xe5/0x140
[ 88.092975][ T4491] ? vscnprintf+0x80/0x80
[ 88.097329][ T4491] ? up_write+0x1b6/0x410
[ 88.101702][ T4491] ? set_blocksize+0x1f1/0x360
[ 88.106506][ T4491] ? sb_set_blocksize+0xa5/0xe0
[ 88.111397][ T4491] mount_bdev+0x28a/0x3c0
[ 88.115760][ T4491] ? reiserfs_kill_sb+0x140/0x140
[ 88.120821][ T4491] legacy_get_tree+0xe6/0x180
[ 88.125529][ T4491] ? remove_save_link+0x3e0/0x3e0
[ 88.130596][ T4491] vfs_get_tree+0x88/0x270
[ 88.135056][ T4491] do_new_mount+0x247/0xa40
[ 88.139617][ T4491] __se_sys_mount+0x2e3/0x3d0
[ 88.144331][ T4491] ? __x64_sys_mount+0xc0/0xc0
[ 88.149130][ T4491] ? lockdep_hardirqs_on+0x94/0x140
[ 88.154363][ T4491] ? __x64_sys_mount+0x1c/0xc0
[ 88.159160][ T4491] do_syscall_64+0x4c/0xa0
[ 88.163607][ T4491] ? clear_bhb_loop+0x30/0x80
[ 88.168319][ T4491] ? clear_bhb_loop+0x30/0x80
[ 88.173038][ T4491] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.178961][ T4491] RIP: 0033:0x7faee655c0ca
[ 88.183414][ T4491] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.203054][ T4491] RSP: 002b:00007fff585fde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 88.211868][ T4491] RAX: ffffffffffffffda RBX: 00007fff585fdef0 RCX: 00007faee655c0ca
[ 88.219883][ T4491] RDX: 0000200000000300 RSI: 0000200000000380 RDI: 00007fff585fdeb0
[ 88.227900][ T4491] RBP: 0000200000000300 R08: 00007fff585fdef0 R09: 000000000200c002
[ 88.235951][ T4491] R10: 000000000200c002 R11: 0000000000000246 R12: 0000200000000380
[ 88.244009][ T4491] R13: 00007fff585fdeb0 R14: 00000000000010ff R15: 0000200000000340
[ 88.252025][ T4491]
[ 88.255195][ T4491] Kernel Offset: disabled
[ 88.259551][ T4491] Rebooting in 86400 seconds..