Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts.
2026/05/04 06:17:44 parsed 1 programs
[ 85.758363][ T5788] cgroup: Unknown subsys name 'net'
[ 85.903528][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 87.148037][ T787] cfg80211: failed to load regulatory.db
[ 87.680173][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.552700][ T5819] chnl_net:caif_netlink_parms(): no params data found
[ 90.622470][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.630169][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.637716][ T5819] bridge_slave_0: entered allmulticast mode
[ 90.644736][ T5819] bridge_slave_0: entered promiscuous mode
[ 90.663214][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.670931][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.678259][ T5819] bridge_slave_1: entered allmulticast mode
[ 90.685073][ T5819] bridge_slave_1: entered promiscuous mode
[ 90.712655][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.731519][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.763378][ T5819] team0: Port device team_slave_0 added
[ 90.779288][ T5819] team0: Port device team_slave_1 added
[ 90.800492][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.808403][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.834641][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.852472][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.859637][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.886038][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.931399][ T5819] hsr_slave_0: entered promiscuous mode
[ 90.938349][ T5819] hsr_slave_1: entered promiscuous mode
[ 91.083485][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.094318][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.104973][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.114873][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.148084][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.155498][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.163455][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.170625][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.235025][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.254360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.267321][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.284599][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.303287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.310735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.327090][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.334370][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.538540][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.582793][ T5819] veth0_vlan: entered promiscuous mode
[ 91.595379][ T5819] veth1_vlan: entered promiscuous mode
[ 91.628525][ T5819] veth0_macvtap: entered promiscuous mode
[ 91.644341][ T5819] veth1_macvtap: entered promiscuous mode
[ 91.668798][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.683439][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.696740][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.705736][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.716336][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.725066][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.890510][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.899566][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.909082][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.918317][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.931250][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 91.939107][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.207417][ T2993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.665484][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.687392][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.714979][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.723366][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.392708][ T2993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/04 06:17:55 executed programs: 0
[ 94.881715][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.891878][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.900285][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.911574][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.920850][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 94.928577][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.061159][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 95.123460][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.130783][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.138207][ T5886] bridge_slave_0: entered allmulticast mode
[ 95.145664][ T5886] bridge_slave_0: entered promiscuous mode
[ 95.158315][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.165536][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.173193][ T5886] bridge_slave_1: entered allmulticast mode
[ 95.180368][ T5886] bridge_slave_1: entered promiscuous mode
[ 95.207072][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.219522][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.249380][ T5886] team0: Port device team_slave_0 added
[ 95.258268][ T5886] team0: Port device team_slave_1 added
[ 95.282419][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.289617][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.317423][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.330438][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.338087][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.364459][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.406033][ T5886] hsr_slave_0: entered promiscuous mode
[ 95.413290][ T5886] hsr_slave_1: entered promiscuous mode
[ 95.419773][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 95.427933][ T5886] Cannot create hsr debugfs directory
[ 96.629811][ T2993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.700500][ T2993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.989017][ T51] Bluetooth: hci0: command tx timeout
[ 97.638687][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.650220][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.665271][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.687104][ T2993] hsr_slave_0: left promiscuous mode
[ 97.699571][ T2993] hsr_slave_1: left promiscuous mode
[ 97.707438][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.714947][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.723479][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.746548][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.755279][ T2993] bridge_slave_1: left allmulticast mode
[ 97.764078][ T2993] bridge_slave_1: left promiscuous mode
[ 97.771216][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.789874][ T2993] bridge_slave_0: left allmulticast mode
[ 97.795634][ T2993] bridge_slave_0: left promiscuous mode
[ 97.804414][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.839923][ T2993] veth1_macvtap: left promiscuous mode
[ 97.847095][ T2993] veth0_macvtap: left promiscuous mode
[ 97.853336][ T2993] veth1_vlan: left promiscuous mode
[ 97.859575][ T2993] veth0_vlan: left promiscuous mode
[ 98.332013][ T2993] team0 (unregistering): Port device team_slave_1 removed
[ 98.370901][ T2993] team0 (unregistering): Port device team_slave_0 removed
[ 98.407954][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.444394][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.698756][ T2993] bond0 (unregistering): Released all slaves
[ 98.777491][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.852507][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.889710][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.902463][ T74] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.909729][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.937367][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.944768][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.066579][ T51] Bluetooth: hci0: command tx timeout
[ 99.193116][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.249235][ T5886] veth0_vlan: entered promiscuous mode
[ 99.263090][ T5886] veth1_vlan: entered promiscuous mode
[ 99.314604][ T5886] veth0_macvtap: entered promiscuous mode
[ 99.333548][ T5886] veth1_macvtap: entered promiscuous mode
[ 99.373305][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.394421][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.412831][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.424172][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.433421][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.443083][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.587694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.601790][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.624467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.633281][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.684873][ T5926] syz.0.17[5926]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 99.743984][ T5926] loop0: detected capacity change from 0 to 8192
[ 99.773791][ T5926] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 99.791135][ T5926] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 99.801863][ T5926] REISERFS (device loop0): using ordered data mode
[ 99.810128][ T5926] reiserfs: using flush barriers
[ 99.819328][ T5926] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 99.837367][ T5926] REISERFS (device loop0): checking transaction log (loop0)
[ 100.020836][ T5926] REISERFS (device loop0): Using tea hash to sort names
[ 100.037868][ T5926] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 100.061215][ T5926] ==================================================================
[ 100.069613][ T5926] BUG: KASAN: use-after-free in leaf_paste_entries+0x49e/0x10e0
[ 100.077370][ T5926] Read of size 2 at addr ffff88805c5f600c by task syz.0.17/5926
[ 100.085270][ T5926]
[ 100.087602][ T5926] CPU: 1 PID: 5926 Comm: syz.0.17 Not tainted syzkaller #0
[ 100.094923][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 100.104991][ T5926] Call Trace:
[ 100.108285][ T5926]
[ 100.111238][ T5926] dump_stack_lvl+0x18c/0x250
[ 100.116032][ T5926] ? read_lock_is_recursive+0x20/0x20
[ 100.121526][ T5926] ? show_regs_print_info+0x20/0x20
[ 100.126740][ T5926] ? load_image+0x420/0x420
[ 100.131347][ T5926] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 100.136839][ T5926] ? __virt_addr_valid+0x18c/0x540
[ 100.141966][ T5926] ? __virt_addr_valid+0x469/0x540
[ 100.147089][ T5926] print_report+0xa8/0x210
[ 100.151522][ T5926] ? leaf_paste_entries+0x49e/0x10e0
[ 100.156840][ T5926] kasan_report+0x117/0x150
[ 100.161372][ T5926] ? journal_mark_dirty+0x221/0xe00
[ 100.166602][ T5926] ? leaf_paste_entries+0x49e/0x10e0
[ 100.171919][ T5926] leaf_paste_entries+0x49e/0x10e0
[ 100.177074][ T5926] leaf_copy_dir_entries+0x6ee/0x9e0
[ 100.182644][ T5926] ? leaf_item_bottle+0x12e0/0x12e0
[ 100.187861][ T5926] ? mark_lock+0x94/0x320
[ 100.192205][ T5926] ? __lock_acquire+0x1347/0x7d40
[ 100.197246][ T5926] leaf_copy_boundary_item+0xb8c/0x21b0
[ 100.202814][ T5926] leaf_move_items+0x8cf/0xec0
[ 100.207863][ T5926] ? reiserfs_convert_objectid_map_v1+0x500/0x500
[ 100.214303][ T5926] ? leaf_delete_items_entirely+0x2cb/0x8b0
[ 100.220303][ T5926] leaf_shift_left+0xbd/0x450
[ 100.224997][ T5926] balance_leaf+0x132e/0x10df0
[ 100.229862][ T5926] ? verify_lock_unused+0x140/0x140
[ 100.235072][ T5926] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 100.241068][ T5926] ? lock_chain_count+0x20/0x20
[ 100.245932][ T5926] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 100.251841][ T5926] ? do_balance+0x930/0x930
[ 100.256552][ T5926] ? __mutex_trylock_common+0x159/0x260
[ 100.262157][ T5926] ? trace_raw_output_contention_end+0xd0/0xd0
[ 100.268325][ T5926] ? rcu_is_watching+0x15/0xb0
[ 100.273104][ T5926] ? trace_contention_end+0x39/0xe0
[ 100.278312][ T5926] ? __mutex_lock+0x315/0xcc0
[ 100.283008][ T5926] ? __might_sleep+0xe0/0xe0
[ 100.287715][ T5926] ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 100.293447][ T5926] ? reiserfs_write_lock_nested+0x60/0xd0
[ 100.299358][ T5926] ? mutex_lock_nested+0x20/0x20
[ 100.304312][ T5926] ? get_empty_nodes+0x48e/0x920
[ 100.309357][ T5926] ? __wake_up+0x1a0/0x1a0
[ 100.313788][ T5926] ? write_boundary_block+0xb0/0xb0
[ 100.319010][ T5926] ? get_neighbors+0x1030/0x1030
[ 100.323964][ T5926] ? indirect_create_vi+0xd/0x50
[ 100.328909][ T5926] ? indirect_check_item+0x10/0x10
[ 100.334120][ T5926] ? create_virtual_node+0x1fb/0x1b60
[ 100.339782][ T5926] ? fix_nodes+0x7bf3/0x8350
[ 100.344571][ T5926] ? reiserfs_write_lock_nested+0x60/0xd0
[ 100.350499][ T5926] ? reiserfs_write_unlock_nested+0xc4/0xf0
[ 100.356434][ T5926] do_balance+0x31c/0x930
[ 100.360898][ T5926] ? get_right_neighbor_position+0x210/0x210
[ 100.367004][ T5926] ? reiserfs_delete_item+0xf20/0xf20
[ 100.372411][ T5926] ? calc_deleted_bytes_number+0x465/0x800
[ 100.378275][ T5926] reiserfs_cut_from_item+0x156e/0x1fe0
[ 100.384041][ T5926] ? reiserfs_do_truncate+0x12d0/0x12d0
[ 100.389605][ T5926] ? search_by_key+0x4453/0x4650
[ 100.394774][ T5926] ? make_cpu_key+0x2f/0x230
[ 100.399406][ T5926] reiserfs_do_truncate+0x9c2/0x12d0
[ 100.404807][ T5926] ? reiserfs_delete_object+0x1a0/0x1a0
[ 100.410373][ T5926] ? journal_begin+0x1f5/0x360
[ 100.415239][ T5926] ? reiserfs_update_inode_transaction+0x20/0x130
[ 100.421671][ T5926] reiserfs_truncate_file+0x480/0x7d0
[ 100.427064][ T5926] ? reiserfs_new_symlink+0x580/0x580
[ 100.432538][ T5926] ? unmap_mapping_range+0xe7/0x180
[ 100.437833][ T5926] ? setattr_prepare+0x1e6/0xac0
[ 100.442791][ T5926] reiserfs_setattr+0xc1e/0x1230
[ 100.447753][ T5926] ? reiserfs_commit_write+0x620/0x620
[ 100.453225][ T5926] ? ktime_get_coarse_real_ts64+0x110/0x120
[ 100.459137][ T5926] ? current_time+0x1bf/0x280
[ 100.463829][ T5926] ? inode_set_ctime_current+0x2e0/0x2e0
[ 100.469474][ T5926] ? evm_inode_setattr+0x94/0x6a0
[ 100.474512][ T5926] ? bpf_lsm_inode_setattr+0x9/0x10
[ 100.479721][ T5926] ? try_break_deleg+0x79/0x120
[ 100.484701][ T5926] ? reiserfs_commit_write+0x620/0x620
[ 100.490288][ T5926] notify_change+0xb0d/0xe10
[ 100.494905][ T5926] do_truncate+0x1b0/0x240
[ 100.499340][ T5926] ? put_page_bootmem+0x2c0/0x2c0
[ 100.504550][ T5926] ? apparmor_file_truncate+0x24a/0x2e0
[ 100.510124][ T5926] ? ima_bprm_check+0x200/0x200
[ 100.515164][ T5926] path_openat+0x2a32/0x3230
[ 100.519891][ T5926] ? verify_lock_unused+0x140/0x140
[ 100.525106][ T5926] ? do_filp_open+0x430/0x430
[ 100.529795][ T5926] ? __virt_addr_valid+0x18c/0x540
[ 100.535094][ T5926] do_filp_open+0x1f5/0x430
[ 100.539705][ T5926] ? vfs_tmpfile+0x490/0x490
[ 100.544484][ T5926] ? _raw_spin_unlock+0x28/0x40
[ 100.549697][ T5926] ? alloc_fd+0x58f/0x630
[ 100.554056][ T5926] do_sys_openat2+0x134/0x1d0
[ 100.558841][ T5926] ? do_sys_open+0xe0/0xe0
[ 100.563275][ T5926] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 100.569275][ T5926] ? lock_chain_count+0x20/0x20
[ 100.574139][ T5926] __x64_sys_open+0x11f/0x140
[ 100.579027][ T5926] do_syscall_64+0x55/0xa0
[ 100.583566][ T5926] ? clear_bhb_loop+0x40/0x90
[ 100.588260][ T5926] ? clear_bhb_loop+0x40/0x90
[ 100.592956][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.598863][ T5926] RIP: 0033:0x7f220eb9cdd9
[ 100.603286][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 100.623001][ T5926] RSP: 002b:00007ffc45fc08f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 100.631610][ T5926] RAX: ffffffffffffffda RBX: 00007f220ee15fa0 RCX: 00007f220eb9cdd9
[ 100.639770][ T5926] RDX: 0000000000000000 RSI: 000000000014937e RDI: 00002000000002c0
[ 100.647755][ T5926] RBP: 00007f220ec32d69 R08: 0000000000000000 R09: 0000000000000000
[ 100.656008][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.664087][ T5926] R13: 00007f220ee15fac R14: 00007f220ee15fa0 R15: 00007f220ee15fa0
[ 100.672250][ T5926]
[ 100.675365][ T5926]
[ 100.677846][ T5926] The buggy address belongs to the physical page:
[ 100.684262][ T5926] page:ffffea0001717d80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5c5f6
[ 100.694421][ T5926] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 100.701538][ T5926] page_type: 0xffffffff()
[ 100.705975][ T5926] raw: 00fff00000000000 ffffea0001717e88 ffff8880b8f41f20 0000000000000000
[ 100.714662][ T5926] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 100.723593][ T5926] page dumped because: kasan: bad access detected
[ 100.730109][ T5926] page_owner tracks the page as freed
[ 100.735570][ T5926] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_WRITE), pid 5926, tgid 5926 (syz.0.17), ts 100053904207, free_ts 100060280586
[ 100.754363][ T5926] post_alloc_hook+0x1c1/0x200
[ 100.759239][ T5926] get_page_from_freelist+0x1951/0x19e0
[ 100.764961][ T5926] __alloc_pages+0x1f0/0x460
[ 100.769553][ T5926] folio_alloc+0x1e/0x30
[ 100.773812][ T5926] filemap_alloc_folio+0xdf/0x490
[ 100.778845][ T5926] __filemap_get_folio+0x3ea/0xbb0
[ 100.784146][ T5926] pagecache_get_page+0x2a/0x250
[ 100.789088][ T5926] reiserfs_write_begin+0x54/0x4c0
[ 100.794502][ T5926] generic_cont_expand_simple+0x141/0x200
[ 100.800319][ T5926] reiserfs_setattr+0x558/0x1230
[ 100.805266][ T5926] notify_change+0xb0d/0xe10
[ 100.809876][ T5926] do_truncate+0x1b0/0x240
[ 100.814304][ T5926] vfs_truncate+0x266/0x300
[ 100.818901][ T5926] do_sys_truncate+0xf6/0x1c0
[ 100.823591][ T5926] do_syscall_64+0x55/0xa0
[ 100.828016][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.833951][ T5926] page last free stack trace:
[ 100.838669][ T5926] free_unref_page_prepare+0x7b2/0x8c0
[ 100.844436][ T5926] free_unref_page_list+0xbe/0x860
[ 100.849758][ T5926] release_pages+0x1f7a/0x2200
[ 100.854536][ T5926] __folio_batch_release+0x71/0xe0
[ 100.859657][ T5926] truncate_inode_pages_range+0x3b9/0xfb0
[ 100.865386][ T5926] truncate_setsize+0xbd/0xe0
[ 100.870159][ T5926] reiserfs_setattr+0xc11/0x1230
[ 100.875662][ T5926] notify_change+0xb0d/0xe10
[ 100.880280][ T5926] do_truncate+0x1b0/0x240
[ 100.884797][ T5926] path_openat+0x2a32/0x3230
[ 100.889449][ T5926] do_filp_open+0x1f5/0x430
[ 100.893959][ T5926] do_sys_openat2+0x134/0x1d0
[ 100.898745][ T5926] __x64_sys_open+0x11f/0x140
[ 100.903534][ T5926] do_syscall_64+0x55/0xa0
[ 100.908324][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.914353][ T5926]
[ 100.916845][ T5926] Memory state around the buggy address:
[ 100.922562][ T5926] ffff88805c5f5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 100.930986][ T5926] ffff88805c5f5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 100.939154][ T5926] >ffff88805c5f6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.947327][ T5926] ^
[ 100.951760][ T5926] ffff88805c5f6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.959914][ T5926] ffff88805c5f6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.968067][ T5926] ==================================================================
[ 101.006040][ T5926] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.013305][ T5926] CPU: 1 PID: 5926 Comm: syz.0.17 Not tainted syzkaller #0
[ 101.020555][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 101.030658][ T5926] Call Trace:
[ 101.034061][ T5926]
[ 101.037033][ T5926] dump_stack_lvl+0x18c/0x250
[ 101.041774][ T5926] ? show_regs_print_info+0x20/0x20
[ 101.047021][ T5926] ? load_image+0x420/0x420
[ 101.051575][ T5926] panic+0x2dc/0x730
[ 101.055498][ T5926] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 101.062365][ T5926] ? bpf_jit_dump+0xd0/0xd0
[ 101.067241][ T5926] ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 101.073273][ T5926] ? _raw_spin_unlock+0x40/0x40
[ 101.078164][ T5926] ? leaf_paste_entries+0x49e/0x10e0
[ 101.083482][ T5926] check_panic_on_warn+0x84/0xa0
[ 101.088482][ T5926] ? leaf_paste_entries+0x49e/0x10e0
[ 101.094073][ T5926] end_report+0x6f/0x130
[ 101.098431][ T5926] kasan_report+0x128/0x150
[ 101.103129][ T5926] ? journal_mark_dirty+0x221/0xe00
[ 101.108430][ T5926] ? leaf_paste_entries+0x49e/0x10e0
[ 101.113790][ T5926] leaf_paste_entries+0x49e/0x10e0
[ 101.119031][ T5926] leaf_copy_dir_entries+0x6ee/0x9e0
[ 101.124429][ T5926] ? leaf_item_bottle+0x12e0/0x12e0
[ 101.129740][ T5926] ? mark_lock+0x94/0x320
[ 101.134084][ T5926] ? __lock_acquire+0x1347/0x7d40
[ 101.139123][ T5926] leaf_copy_boundary_item+0xb8c/0x21b0
[ 101.144691][ T5926] leaf_move_items+0x8cf/0xec0
[ 101.149473][ T5926] ? reiserfs_convert_objectid_map_v1+0x500/0x500
[ 101.156084][ T5926] ? leaf_delete_items_entirely+0x2cb/0x8b0
[ 101.162124][ T5926] leaf_shift_left+0xbd/0x450
[ 101.166834][ T5926] balance_leaf+0x132e/0x10df0
[ 101.171787][ T5926] ? verify_lock_unused+0x140/0x140
[ 101.177029][ T5926] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 101.183126][ T5926] ? lock_chain_count+0x20/0x20
[ 101.188001][ T5926] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 101.193924][ T5926] ? do_balance+0x930/0x930
[ 101.198620][ T5926] ? __mutex_trylock_common+0x159/0x260
[ 101.204184][ T5926] ? trace_raw_output_contention_end+0xd0/0xd0
[ 101.210450][ T5926] ? rcu_is_watching+0x15/0xb0
[ 101.215223][ T5926] ? trace_contention_end+0x39/0xe0
[ 101.220429][ T5926] ? __mutex_lock+0x315/0xcc0
[ 101.225294][ T5926] ? __might_sleep+0xe0/0xe0
[ 101.229899][ T5926] ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 101.235550][ T5926] ? reiserfs_write_lock_nested+0x60/0xd0
[ 101.241308][ T5926] ? mutex_lock_nested+0x20/0x20
[ 101.246254][ T5926] ? get_empty_nodes+0x48e/0x920
[ 101.251204][ T5926] ? __wake_up+0x1a0/0x1a0
[ 101.255636][ T5926] ? write_boundary_block+0xb0/0xb0
[ 101.260882][ T5926] ? get_neighbors+0x1030/0x1030
[ 101.265927][ T5926] ? indirect_create_vi+0xd/0x50
[ 101.270889][ T5926] ? indirect_check_item+0x10/0x10
[ 101.276009][ T5926] ? create_virtual_node+0x1fb/0x1b60
[ 101.281487][ T5926] ? fix_nodes+0x7bf3/0x8350
[ 101.286279][ T5926] ? reiserfs_write_lock_nested+0x60/0xd0
[ 101.292016][ T5926] ? reiserfs_write_unlock_nested+0xc4/0xf0
[ 101.297947][ T5926] do_balance+0x31c/0x930
[ 101.302307][ T5926] ? get_right_neighbor_position+0x210/0x210
[ 101.308491][ T5926] ? reiserfs_delete_item+0xf20/0xf20
[ 101.313909][ T5926] ? calc_deleted_bytes_number+0x465/0x800
[ 101.320016][ T5926] reiserfs_cut_from_item+0x156e/0x1fe0
[ 101.325683][ T5926] ? reiserfs_do_truncate+0x12d0/0x12d0
[ 101.331707][ T5926] ? search_by_key+0x4453/0x4650
[ 101.336724][ T5926] ? make_cpu_key+0x2f/0x230
[ 101.341429][ T5926] reiserfs_do_truncate+0x9c2/0x12d0
[ 101.346749][ T5926] ? reiserfs_delete_object+0x1a0/0x1a0
[ 101.352321][ T5926] ? journal_begin+0x1f5/0x360
[ 101.357094][ T5926] ? reiserfs_update_inode_transaction+0x20/0x130
[ 101.363516][ T5926] reiserfs_truncate_file+0x480/0x7d0
[ 101.368921][ T5926] ? reiserfs_new_symlink+0x580/0x580
[ 101.374477][ T5926] ? unmap_mapping_range+0xe7/0x180
[ 101.379692][ T5926] ? setattr_prepare+0x1e6/0xac0
[ 101.384647][ T5926] reiserfs_setattr+0xc1e/0x1230
[ 101.389686][ T5926] ? reiserfs_commit_write+0x620/0x620
[ 101.395251][ T5926] ? ktime_get_coarse_real_ts64+0x110/0x120
[ 101.401551][ T5926] ? current_time+0x1bf/0x280
[ 101.406527][ T5926] ? inode_set_ctime_current+0x2e0/0x2e0
[ 101.412279][ T5926] ? evm_inode_setattr+0x94/0x6a0
[ 101.417320][ T5926] ? bpf_lsm_inode_setattr+0x9/0x10
[ 101.422529][ T5926] ? try_break_deleg+0x79/0x120
[ 101.427400][ T5926] ? reiserfs_commit_write+0x620/0x620
[ 101.432867][ T5926] notify_change+0xb0d/0xe10
[ 101.437585][ T5926] do_truncate+0x1b0/0x240
[ 101.442039][ T5926] ? put_page_bootmem+0x2c0/0x2c0
[ 101.447172][ T5926] ? apparmor_file_truncate+0x24a/0x2e0
[ 101.452737][ T5926] ? ima_bprm_check+0x200/0x200
[ 101.457714][ T5926] path_openat+0x2a32/0x3230
[ 101.462322][ T5926] ? verify_lock_unused+0x140/0x140
[ 101.467537][ T5926] ? do_filp_open+0x430/0x430
[ 101.472249][ T5926] ? __virt_addr_valid+0x18c/0x540
[ 101.477393][ T5926] do_filp_open+0x1f5/0x430
[ 101.481920][ T5926] ? vfs_tmpfile+0x490/0x490
[ 101.486708][ T5926] ? _raw_spin_unlock+0x28/0x40
[ 101.491578][ T5926] ? alloc_fd+0x58f/0x630
[ 101.496016][ T5926] do_sys_openat2+0x134/0x1d0
[ 101.500817][ T5926] ? do_sys_open+0xe0/0xe0
[ 101.505415][ T5926] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 101.511433][ T5926] ? lock_chain_count+0x20/0x20
[ 101.516302][ T5926] __x64_sys_open+0x11f/0x140
[ 101.521000][ T5926] do_syscall_64+0x55/0xa0
[ 101.525465][ T5926] ? clear_bhb_loop+0x40/0x90
[ 101.530185][ T5926] ? clear_bhb_loop+0x40/0x90
[ 101.534883][ T5926] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.540896][ T5926] RIP: 0033:0x7f220eb9cdd9
[ 101.545324][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.564949][ T5926] RSP: 002b:00007ffc45fc08f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 101.574004][ T5926] RAX: ffffffffffffffda RBX: 00007f220ee15fa0 RCX: 00007f220eb9cdd9
[ 101.582183][ T5926] RDX: 0000000000000000 RSI: 000000000014937e RDI: 00002000000002c0
[ 101.590258][ T5926] RBP: 00007f220ec32d69 R08: 0000000000000000 R09: 0000000000000000
[ 101.598236][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.606310][ T5926] R13: 00007f220ee15fac R14: 00007f220ee15fa0 R15: 00007f220ee15fa0
[ 101.614381][ T5926]
[ 101.617562][ T5926] Kernel Offset: disabled
[ 101.621973][ T5926] Rebooting in 86400 seconds..