Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. 2026/01/13 16:22:06 parsed 1 programs [ 54.784155][ T4185] cgroup: Unknown subsys name 'net' [ 54.916718][ T4185] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.155651][ T4185] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.104759][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.121375][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.131094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.143716][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.152416][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.161157][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.765569][ T4235] chnl_net:caif_netlink_parms(): no params data found [ 58.828448][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.836486][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.846373][ T4235] device bridge_slave_0 entered promiscuous mode [ 58.855888][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.864412][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.872640][ T4235] device bridge_slave_1 entered promiscuous mode [ 58.901144][ T4235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.912920][ T4235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.943825][ T4235] team0: Port device team_slave_0 added [ 58.952192][ T4235] team0: Port device team_slave_1 added [ 58.975592][ T4235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.982910][ T4235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.010269][ T4235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.023888][ T4235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.030835][ T4235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.060300][ T4235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.097497][ T4235] device hsr_slave_0 entered promiscuous mode [ 59.105034][ T4235] device hsr_slave_1 entered promiscuous mode [ 59.217962][ T4235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.228519][ T4235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.239066][ T4235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.249701][ T4235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.303693][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.314628][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.325832][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.332977][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.423594][ T4235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.436545][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.447078][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.455590][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.466337][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.474730][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.485051][ T4235] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.513920][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.522943][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.530075][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.545399][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.554069][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.561196][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.575892][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.586017][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.599044][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.624099][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.635774][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.647873][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.746186][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.754602][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.766814][ T4235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.784705][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.812973][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.822750][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.831103][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.839844][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.850944][ T4235] device veth0_vlan entered promiscuous mode [ 59.884252][ T4235] device veth1_vlan entered promiscuous mode [ 59.902011][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.910669][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.919351][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.928959][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.957169][ T4235] device veth0_macvtap entered promiscuous mode [ 59.966918][ T4235] device veth1_macvtap entered promiscuous mode [ 59.981070][ T4235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.989360][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.997968][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.006424][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.015598][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.028458][ T4235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.036058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.044904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.055748][ T4235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.065915][ T4235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.075246][ T4235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.084201][ T4235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/13 16:22:15 executed programs: 0 [ 61.766513][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 61.795753][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.835384][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.843326][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.851230][ T4292] device bridge_slave_0 entered promiscuous mode [ 61.859744][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.867021][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.875479][ T4292] device bridge_slave_1 entered promiscuous mode [ 61.894071][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.905382][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.926055][ T4292] team0: Port device team_slave_0 added [ 61.934017][ T4292] team0: Port device team_slave_1 added [ 61.954498][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.961740][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.988557][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.000862][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.007878][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.034506][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.062741][ T4292] device hsr_slave_0 entered promiscuous mode [ 62.069328][ T4292] device hsr_slave_1 entered promiscuous mode [ 62.076265][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.084680][ T4292] Cannot create hsr debugfs directory [ 63.702287][ T4250] Bluetooth: hci0: command 0x0409 tx timeout [ 64.528869][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.827214][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.878627][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.686272][ T4292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.695062][ T4292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.718662][ T4292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.727650][ T4292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.782883][ T4311] Bluetooth: hci0: command 0x041b tx timeout [ 65.796254][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.812392][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.820355][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.830295][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.839912][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.848817][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.857622][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.864897][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.876557][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.895274][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.903909][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.913061][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.920381][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.930775][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.942553][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.955426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.964532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.974147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.985810][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.995075][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.006598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.015453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.040307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.049062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.059746][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.151625][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.159188][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.171216][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.204765][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.214502][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.229200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.238187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.247412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.255424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.266174][ T4292] device veth0_vlan entered promiscuous mode [ 66.276668][ T9] device hsr_slave_0 left promiscuous mode [ 66.283584][ T9] device hsr_slave_1 left promiscuous mode [ 66.289873][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.297643][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.307536][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.315071][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.322976][ T9] device bridge_slave_1 left promiscuous mode [ 66.330001][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.344721][ T9] device bridge_slave_0 left promiscuous mode [ 66.351106][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.367112][ T9] device veth1_macvtap left promiscuous mode [ 66.373647][ T9] device veth0_macvtap left promiscuous mode [ 66.379784][ T9] device veth1_vlan left promiscuous mode [ 66.386735][ T9] device veth0_vlan left promiscuous mode [ 66.512153][ T9] team0 (unregistering): Port device team_slave_1 removed [ 66.527191][ T9] team0 (unregistering): Port device team_slave_0 removed [ 66.539553][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.554057][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.603510][ T9] bond0 (unregistering): Released all slaves [ 66.649152][ T4292] device veth1_vlan entered promiscuous mode [ 66.668477][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.677007][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.685264][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.693939][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.705261][ T4292] device veth0_macvtap entered promiscuous mode [ 66.717933][ T4292] device veth1_macvtap entered promiscuous mode [ 66.736849][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.751221][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.759734][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.768013][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.776716][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.788068][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.797369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.806984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.818441][ T4292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.827740][ T4292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.836963][ T4292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.846278][ T4292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.900482][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.911055][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/13 16:22:20 executed programs: 2 [ 66.942776][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.943678][ T160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.953680][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.968134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.040751][ T4345] loop0: detected capacity change from 0 to 8192 [ 67.096877][ T4345] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 67.110514][ T4345] REISERFS (device loop0): using ordered data mode [ 67.119766][ T4345] reiserfs: using flush barriers [ 67.136911][ T4345] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.183034][ T4345] REISERFS (device loop0): checking transaction log (loop0) [ 67.204481][ T4345] REISERFS (device loop0): Using rupasov hash to sort names [ 67.221901][ T4345] REISERFS (device loop0): using 3.5.x disk format [ 67.229868][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.281544][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.301526][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.315253][ T4345] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 67.329869][ T4345] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 67.373782][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.386108][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.401054][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.415340][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.428152][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.440895][ T4345] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 67.454431][ T4345] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 67.470365][ T4345] ================================================================== [ 67.478801][ T4345] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x521/0x780 [ 67.486969][ T4345] Read of size 8188 at addr ffff88805f595050 by task syz.0.17/4345 [ 67.494972][ T4345] [ 67.497307][ T4345] CPU: 0 PID: 4345 Comm: syz.0.17 Not tainted syzkaller #0 [ 67.504677][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.514948][ T4345] Call Trace: [ 67.518241][ T4345] [ 67.521169][ T4345] dump_stack_lvl+0x168/0x230 [ 67.525942][ T4345] ? show_regs_print_info+0x20/0x20 [ 67.531358][ T4345] ? _printk+0xcc/0x110 [ 67.535628][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 67.541458][ T4345] ? load_image+0x3b0/0x3b0 [ 67.545968][ T4345] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 67.551453][ T4345] print_address_description+0x60/0x2d0 [ 67.557091][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 67.562900][ T4345] kasan_report+0xdf/0x130 [ 67.567320][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 67.573318][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 67.579216][ T4345] kasan_check_range+0x27b/0x290 [ 67.584464][ T4345] memmove+0x25/0x60 [ 67.588368][ T4345] reiserfs_release_objectid+0x521/0x780 [ 67.594136][ T4345] remove_save_link+0x2b6/0x3c0 [ 67.599090][ T4345] ? add_save_link+0x5c0/0x5c0 [ 67.604059][ T4345] ? __rwlock_init+0x140/0x140 [ 67.609121][ T4345] ? journal_end+0x1d8/0x290 [ 67.613958][ T4345] reiserfs_evict_inode+0x391/0x490 [ 67.619267][ T4345] ? entry_points_to_object+0x7d0/0x7d0 [ 67.624936][ T4345] ? do_raw_spin_lock+0x11d/0x280 [ 67.629980][ T4345] ? do_raw_spin_unlock+0x11d/0x230 [ 67.635450][ T4345] ? entry_points_to_object+0x7d0/0x7d0 [ 67.641087][ T4345] evict+0x485/0x870 [ 67.645110][ T4345] ? proc_nr_inodes+0x320/0x320 [ 67.650228][ T4345] ? do_raw_spin_unlock+0x11d/0x230 [ 67.655549][ T4345] ? _raw_spin_unlock+0x24/0x40 [ 67.660498][ T4345] __dentry_kill+0x431/0x650 [ 67.665186][ T4345] dentry_kill+0xb8/0x290 [ 67.669522][ T4345] dput+0xd8/0x1a0 [ 67.673356][ T4345] __fput+0x5ee/0x930 [ 67.677453][ T4345] task_work_run+0x125/0x1a0 [ 67.682059][ T4345] exit_to_user_mode_loop+0x10f/0x130 [ 67.687535][ T4345] exit_to_user_mode_prepare+0xee/0x180 [ 67.693125][ T4345] syscall_exit_to_user_mode+0x16/0x40 [ 67.698720][ T4345] do_syscall_64+0x58/0xa0 [ 67.703274][ T4345] ? clear_bhb_loop+0x30/0x80 [ 67.707970][ T4345] ? clear_bhb_loop+0x30/0x80 [ 67.713031][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.719037][ T4345] RIP: 0033:0x7ff67153b749 [ 67.723632][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.743245][ T4345] RSP: 002b:00007ffd771497d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 67.751848][ T4345] RAX: 0000000000000000 RBX: 0000000000010597 RCX: 00007ff67153b749 [ 67.760085][ T4345] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 67.768081][ T4345] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000477149acf [ 67.776240][ T4345] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007ff671791fac [ 67.784299][ T4345] R13: 00007ff671791fa0 R14: ffffffffffffffff R15: 0000000000000002 [ 67.792410][ T4345] [ 67.795644][ T4345] [ 67.798044][ T4345] The buggy address belongs to the page: [ 67.803681][ T4345] page:ffffea00017d6540 refcount:2 mapcount:0 mapping:ffff888145d55af0 index:0x10 pfn:0x5f595 [ 67.814109][ T4345] memcg:ffff888078fcc000 [ 67.818599][ T4345] aops:def_blk_aops ino:700000 [ 67.823376][ T4345] flags: 0xfff00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 67.835061][ T4345] raw: 00fff00000022036 ffffea00018277c8 ffffea00017d6bc8 ffff888145d55af0 [ 67.843649][ T4345] raw: 0000000000000010 ffff88806fddfae0 00000002ffffffff ffff888078fcc000 [ 67.852571][ T4345] page dumped because: kasan: bad access detected [ 67.858997][ T4345] page_owner tracks the page as allocated [ 67.862056][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 67.864876][ T4345] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4345, ts 67096011308, free_ts 56535867649 [ 67.864915][ T4345] get_page_from_freelist+0x1b77/0x1c60 [ 67.894956][ T4345] __alloc_pages+0x1e1/0x470 [ 67.899649][ T4345] __page_cache_alloc+0xd2/0x3f0 [ 67.905052][ T4345] pagecache_get_page+0x986/0xef0 [ 67.910260][ T4345] __getblk_gfp+0x249/0xb70 [ 67.914774][ T4345] __bread_gfp+0x28/0x380 [ 67.919120][ T4345] read_super_block+0x91/0x7a0 [ 67.923884][ T4345] reiserfs_fill_super+0x787/0x23e0 [ 67.929070][ T4345] mount_bdev+0x287/0x3c0 [ 67.933410][ T4345] legacy_get_tree+0xe6/0x180 [ 67.938437][ T4345] vfs_get_tree+0x88/0x270 [ 67.942920][ T4345] do_new_mount+0x24a/0xa40 [ 67.947420][ T4345] __se_sys_mount+0x2d6/0x3c0 [ 67.952181][ T4345] do_syscall_64+0x4c/0xa0 [ 67.956591][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.962674][ T4345] page last free stack trace: [ 67.967322][ T4345] free_unref_page_prepare+0x637/0x6c0 [ 67.972861][ T4345] free_unref_page_list+0x122/0x7e0 [ 67.978249][ T4345] release_pages+0x184b/0x1bb0 [ 67.982996][ T4345] tlb_finish_mmu+0x164/0x2e0 [ 67.987755][ T4345] unmap_region+0x315/0x360 [ 67.992235][ T4345] __do_munmap+0x9d3/0xdc0 [ 67.996891][ T4345] __vm_munmap+0x137/0x230 [ 68.001288][ T4345] __x64_sys_munmap+0x67/0x70 [ 68.006300][ T4345] do_syscall_64+0x4c/0xa0 [ 68.010935][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.017015][ T4345] [ 68.019561][ T4345] Memory state around the buggy address: [ 68.025276][ T4345] ffff88805f595f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.033317][ T4345] ffff88805f595f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.041356][ T4345] >ffff88805f596000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.049397][ T4345] ^ [ 68.053545][ T4345] ffff88805f596080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.061610][ T4345] ffff88805f596100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.069660][ T4345] ================================================================== [ 68.077807][ T4345] Disabling lock debugging due to kernel taint [ 68.087770][ T4345] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.095001][ T4345] CPU: 1 PID: 4345 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 68.103854][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.113909][ T4345] Call Trace: [ 68.117469][ T4345] [ 68.120583][ T4345] dump_stack_lvl+0x168/0x230 [ 68.125359][ T4345] ? show_regs_print_info+0x20/0x20 [ 68.130725][ T4345] ? load_image+0x3b0/0x3b0 [ 68.135303][ T4345] panic+0x2c9/0x7f0 [ 68.139271][ T4345] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.145771][ T4345] ? bpf_jit_dump+0xd0/0xd0 [ 68.150270][ T4345] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 68.156498][ T4345] ? _raw_spin_unlock+0x40/0x40 [ 68.161503][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 68.167375][ T4345] check_panic_on_warn+0x80/0xa0 [ 68.172327][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 68.178208][ T4345] end_report+0x6d/0xf0 [ 68.182348][ T4345] kasan_report+0x102/0x130 [ 68.186896][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 68.192907][ T4345] ? reiserfs_release_objectid+0x521/0x780 [ 68.198776][ T4345] kasan_check_range+0x27b/0x290 [ 68.203796][ T4345] memmove+0x25/0x60 [ 68.207690][ T4345] reiserfs_release_objectid+0x521/0x780 [ 68.213573][ T4345] remove_save_link+0x2b6/0x3c0 [ 68.218528][ T4345] ? add_save_link+0x5c0/0x5c0 [ 68.223627][ T4345] ? __rwlock_init+0x140/0x140 [ 68.228394][ T4345] ? journal_end+0x1d8/0x290 [ 68.233003][ T4345] reiserfs_evict_inode+0x391/0x490 [ 68.238214][ T4345] ? entry_points_to_object+0x7d0/0x7d0 [ 68.244020][ T4345] ? do_raw_spin_lock+0x11d/0x280 [ 68.249140][ T4345] ? do_raw_spin_unlock+0x11d/0x230 [ 68.254427][ T4345] ? entry_points_to_object+0x7d0/0x7d0 [ 68.260054][ T4345] evict+0x485/0x870 [ 68.264214][ T4345] ? proc_nr_inodes+0x320/0x320 [ 68.269049][ T4345] ? do_raw_spin_unlock+0x11d/0x230 [ 68.274793][ T4345] ? _raw_spin_unlock+0x24/0x40 [ 68.279636][ T4345] __dentry_kill+0x431/0x650 [ 68.284316][ T4345] dentry_kill+0xb8/0x290 [ 68.288642][ T4345] dput+0xd8/0x1a0 [ 68.292441][ T4345] __fput+0x5ee/0x930 [ 68.296411][ T4345] task_work_run+0x125/0x1a0 [ 68.301086][ T4345] exit_to_user_mode_loop+0x10f/0x130 [ 68.306440][ T4345] exit_to_user_mode_prepare+0xee/0x180 [ 68.312049][ T4345] syscall_exit_to_user_mode+0x16/0x40 [ 68.317583][ T4345] do_syscall_64+0x58/0xa0 [ 68.321991][ T4345] ? clear_bhb_loop+0x30/0x80 [ 68.326646][ T4345] ? clear_bhb_loop+0x30/0x80 [ 68.331297][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.337271][ T4345] RIP: 0033:0x7ff67153b749 [ 68.341930][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.361862][ T4345] RSP: 002b:00007ffd771497d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 68.370556][ T4345] RAX: 0000000000000000 RBX: 0000000000010597 RCX: 00007ff67153b749 [ 68.378861][ T4345] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 68.387019][ T4345] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000477149acf [ 68.395086][ T4345] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007ff671791fac [ 68.403069][ T4345] R13: 00007ff671791fa0 R14: ffffffffffffffff R15: 0000000000000002 [ 68.411247][ T4345] [ 68.415278][ T4345] Kernel Offset: disabled [ 68.419813][ T4345] Rebooting in 86400 seconds..