Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2026/01/13 18:18:36 parsed 1 programs [ 53.216649][ T4187] cgroup: Unknown subsys name 'net' [ 53.357469][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.579947][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.383489][ T4242] chnl_net:caif_netlink_parms(): no params data found [ 57.448030][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.455630][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.463649][ T4242] device bridge_slave_0 entered promiscuous mode [ 57.472505][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.479633][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.487443][ T4242] device bridge_slave_1 entered promiscuous mode [ 57.515724][ T4242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.528456][ T4242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.555924][ T4242] team0: Port device team_slave_0 added [ 57.564945][ T4242] team0: Port device team_slave_1 added [ 57.586066][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.593121][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.619240][ T4242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.631933][ T4242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.638940][ T4242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.665172][ T4242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.703415][ T4242] device hsr_slave_0 entered promiscuous mode [ 57.710259][ T4242] device hsr_slave_1 entered promiscuous mode [ 57.802306][ T4242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.813358][ T4242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.822578][ T4242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.832012][ T4242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.866421][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.874825][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.885768][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.892906][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.944934][ T4242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.966419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.006517][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.019134][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.036978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 58.071509][ T4242] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.084351][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.092850][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.099879][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.111789][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.120820][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.127893][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.145396][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.154433][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.166765][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.178837][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.190404][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.200836][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.273022][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.280515][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.293285][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.310077][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.327320][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.336541][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.345821][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.354582][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.363864][ T4242] device veth0_vlan entered promiscuous mode [ 58.375358][ T4242] device veth1_vlan entered promiscuous mode [ 58.392044][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.400350][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.409406][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.418563][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.444592][ T4242] device veth0_macvtap entered promiscuous mode [ 58.454464][ T4242] device veth1_macvtap entered promiscuous mode [ 58.468776][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.477453][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.485741][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.495268][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.504046][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.516075][ T4242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.525234][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.533849][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.559669][ T4242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.568541][ T4242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.577461][ T4242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.586693][ T4242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.761494][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.778213][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.808308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.820841][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.829163][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.838465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/01/13 18:18:44 executed programs: 0 [ 59.920959][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 59.977327][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.984919][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.992982][ T4298] device bridge_slave_0 entered promiscuous mode [ 60.003326][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.010582][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.018725][ T4298] device bridge_slave_1 entered promiscuous mode [ 60.044325][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.057008][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.086624][ T4298] team0: Port device team_slave_0 added [ 60.094494][ T4298] team0: Port device team_slave_1 added [ 60.116616][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.123822][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.149894][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.164585][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.171527][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.198328][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.246445][ T4298] device hsr_slave_0 entered promiscuous mode [ 60.255570][ T4298] device hsr_slave_1 entered promiscuous mode [ 60.262527][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.270368][ T4298] Cannot create hsr debugfs directory [ 60.365549][ T4298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.813195][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 63.893224][ T4309] Bluetooth: hci0: command 0x041b tx timeout [ 64.168610][ T4298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.218343][ T4298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.268973][ T4298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.355180][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.364771][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.382059][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.390887][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.440550][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.453338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.461599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.480310][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.489662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.499022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.508147][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.515265][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.524106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.547927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.556999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.566628][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.573729][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.584196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.595051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.620445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.630405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.639251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.650152][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.659656][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.670573][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.679851][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.699299][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.708577][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.718943][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.796109][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.804412][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.830158][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.849676][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.858704][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.882857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.891089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.900095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.909371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.925931][ T4298] device veth0_vlan entered promiscuous mode [ 64.938190][ T4298] device veth1_vlan entered promiscuous mode [ 64.954987][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.963431][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.971366][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.980249][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.994480][ T4298] device veth0_macvtap entered promiscuous mode [ 65.008845][ T668] device hsr_slave_0 left promiscuous mode [ 65.018286][ T668] device hsr_slave_1 left promiscuous mode [ 65.025220][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.033085][ T668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.041002][ T668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.048654][ T668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.056584][ T668] device bridge_slave_1 left promiscuous mode [ 65.063519][ T668] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.076744][ T668] device bridge_slave_0 left promiscuous mode [ 65.083011][ T668] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.099484][ T668] device veth1_macvtap left promiscuous mode [ 65.105812][ T668] device veth0_macvtap left promiscuous mode [ 65.111828][ T668] device veth1_vlan left promiscuous mode [ 65.118399][ T668] device veth0_vlan left promiscuous mode [ 65.243897][ T668] team0 (unregistering): Port device team_slave_1 removed [ 65.256752][ T668] team0 (unregistering): Port device team_slave_0 removed [ 65.270850][ T668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.284949][ T668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.330930][ T668] bond0 (unregistering): Released all slaves [ 65.377164][ T4298] device veth1_macvtap entered promiscuous mode [ 65.394570][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.401858][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.410187][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.418831][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.428142][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.441695][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.452935][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.461486][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.470587][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.479646][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.488758][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.497736][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.561206][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.581688][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.600429][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/01/13 18:18:50 executed programs: 2 [ 65.612888][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.620887][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.630145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.715863][ T4321] loop0: detected capacity change from 0 to 8192 [ 65.786694][ T4321] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 65.804878][ T4321] REISERFS (device loop0): using ordered data mode [ 65.811408][ T4321] reiserfs: using flush barriers [ 65.835278][ T4321] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.874551][ T4321] REISERFS (device loop0): checking transaction log (loop0) [ 65.902721][ T4321] REISERFS (device loop0): Using rupasov hash to sort names [ 65.922915][ T4321] REISERFS (device loop0): using 3.5.x disk format [ 65.930592][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 65.963638][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 65.976219][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 65.982756][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 65.988652][ T4321] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 66.009230][ T4321] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 66.051837][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 66.082374][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 66.104770][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 66.124973][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 66.138011][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 66.150015][ T4321] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 66.161340][ T4321] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 66.176968][ T4321] ================================================================== [ 66.185225][ T4321] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x521/0x780 [ 66.193400][ T4321] Read of size 8188 at addr ffff88805be9e050 by task syz.0.17/4321 [ 66.201289][ T4321] [ 66.203618][ T4321] CPU: 1 PID: 4321 Comm: syz.0.17 Not tainted syzkaller #0 [ 66.210811][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.220879][ T4321] Call Trace: [ 66.224157][ T4321] [ 66.227083][ T4321] dump_stack_lvl+0x168/0x230 [ 66.231765][ T4321] ? show_regs_print_info+0x20/0x20 [ 66.236999][ T4321] ? _printk+0xcc/0x110 [ 66.241158][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.246967][ T4321] ? load_image+0x3b0/0x3b0 [ 66.251467][ T4321] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 66.256842][ T4321] print_address_description+0x60/0x2d0 [ 66.262389][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.268190][ T4321] kasan_report+0xdf/0x130 [ 66.272605][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.278406][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.284219][ T4321] kasan_check_range+0x27b/0x290 [ 66.289158][ T4321] memmove+0x25/0x60 [ 66.293052][ T4321] reiserfs_release_objectid+0x521/0x780 [ 66.298702][ T4321] remove_save_link+0x2b6/0x3c0 [ 66.303550][ T4321] ? add_save_link+0x5c0/0x5c0 [ 66.308314][ T4321] ? __rwlock_init+0x140/0x140 [ 66.313076][ T4321] ? journal_end+0x1d8/0x290 [ 66.317669][ T4321] reiserfs_evict_inode+0x391/0x490 [ 66.322876][ T4321] ? entry_points_to_object+0x7d0/0x7d0 [ 66.328417][ T4321] ? do_raw_spin_lock+0x11d/0x280 [ 66.333445][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 66.338652][ T4321] ? entry_points_to_object+0x7d0/0x7d0 [ 66.344202][ T4321] evict+0x485/0x870 [ 66.348106][ T4321] ? proc_nr_inodes+0x320/0x320 [ 66.352975][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 66.358172][ T4321] ? _raw_spin_unlock+0x24/0x40 [ 66.363039][ T4321] __dentry_kill+0x431/0x650 [ 66.367633][ T4321] dentry_kill+0xb8/0x290 [ 66.371969][ T4321] dput+0xd8/0x1a0 [ 66.375682][ T4321] __fput+0x5ee/0x930 [ 66.379669][ T4321] task_work_run+0x125/0x1a0 [ 66.384263][ T4321] exit_to_user_mode_loop+0x10f/0x130 [ 66.389642][ T4321] exit_to_user_mode_prepare+0xee/0x180 [ 66.395195][ T4321] syscall_exit_to_user_mode+0x16/0x40 [ 66.400651][ T4321] do_syscall_64+0x58/0xa0 [ 66.405062][ T4321] ? clear_bhb_loop+0x30/0x80 [ 66.409731][ T4321] ? clear_bhb_loop+0x30/0x80 [ 66.414404][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.420293][ T4321] RIP: 0033:0x7fb5d7615749 [ 66.424706][ T4321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.444306][ T4321] RSP: 002b:00007ffe84ad7268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 66.452720][ T4321] RAX: 0000000000000000 RBX: 0000000000010074 RCX: 00007fb5d7615749 [ 66.460689][ T4321] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 66.468655][ T4321] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000484ad755f [ 66.476618][ T4321] R10: 0000001b30920000 R11: 0000000000000246 R12: 00007fb5d786bfac [ 66.484587][ T4321] R13: 00007fb5d786bfa0 R14: ffffffffffffffff R15: 0000000000000002 [ 66.492580][ T4321] [ 66.495602][ T4321] [ 66.497920][ T4321] The buggy address belongs to the page: [ 66.503545][ T4321] page:ffffea00016fa780 refcount:2 mapcount:0 mapping:ffff88814087abf0 index:0x10 pfn:0x5be9e [ 66.513774][ T4321] memcg:ffff888075ec0000 [ 66.518001][ T4321] aops:def_blk_aops ino:700000 [ 66.522760][ T4321] flags: 0xfff00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 66.534399][ T4321] raw: 00fff00000022036 ffffea00016fa748 ffffea00016faa88 ffff88814087abf0 [ 66.542981][ T4321] raw: 0000000000000010 ffff888140a8d1d0 00000002ffffffff ffff888075ec0000 [ 66.551551][ T4321] page dumped because: kasan: bad access detected [ 66.557961][ T4321] page_owner tracks the page as allocated [ 66.563662][ T4321] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4321, ts 65786169525, free_ts 11473196333 [ 66.580777][ T4321] get_page_from_freelist+0x1b77/0x1c60 [ 66.586337][ T4321] __alloc_pages+0x1e1/0x470 [ 66.590931][ T4321] __page_cache_alloc+0xd2/0x3f0 [ 66.595863][ T4321] pagecache_get_page+0x986/0xef0 [ 66.600887][ T4321] __getblk_gfp+0x249/0xb70 [ 66.605383][ T4321] __bread_gfp+0x28/0x380 [ 66.609711][ T4321] read_super_block+0x91/0x7a0 [ 66.614465][ T4321] reiserfs_fill_super+0x787/0x23e0 [ 66.619659][ T4321] mount_bdev+0x287/0x3c0 [ 66.623989][ T4321] legacy_get_tree+0xe6/0x180 [ 66.628665][ T4321] vfs_get_tree+0x88/0x270 [ 66.633078][ T4321] do_new_mount+0x24a/0xa40 [ 66.637593][ T4321] __se_sys_mount+0x2d6/0x3c0 [ 66.642269][ T4321] do_syscall_64+0x4c/0xa0 [ 66.646681][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.652567][ T4321] page last free stack trace: [ 66.657227][ T4321] free_unref_page_prepare+0x637/0x6c0 [ 66.662678][ T4321] free_unref_page+0x94/0x280 [ 66.667352][ T4321] free_contig_range+0x96/0xf0 [ 66.672118][ T4321] destroy_args+0x100/0xa20 [ 66.676619][ T4321] debug_vm_pgtable+0x318/0x370 [ 66.681461][ T4321] do_one_initcall+0x1ee/0x680 [ 66.686229][ T4321] do_initcall_level+0x137/0x1f0 [ 66.691172][ T4321] do_initcalls+0x4b/0x90 [ 66.695499][ T4321] kernel_init_freeable+0x3ce/0x560 [ 66.700694][ T4321] kernel_init+0x19/0x1b0 [ 66.705017][ T4321] ret_from_fork+0x1f/0x30 [ 66.709430][ T4321] [ 66.711732][ T4321] Memory state around the buggy address: [ 66.717337][ T4321] ffff88805be9ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.725372][ T4321] ffff88805be9ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.733420][ T4321] >ffff88805be9f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.741469][ T4321] ^ [ 66.745513][ T4321] ffff88805be9f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.753638][ T4321] ffff88805be9f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.761671][ T4321] ================================================================== [ 66.769712][ T4321] Disabling lock debugging due to kernel taint [ 66.781634][ T4321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.788863][ T4321] CPU: 1 PID: 4321 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 66.797448][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.807484][ T4321] Call Trace: [ 66.810747][ T4321] [ 66.813659][ T4321] dump_stack_lvl+0x168/0x230 [ 66.818316][ T4321] ? show_regs_print_info+0x20/0x20 [ 66.823489][ T4321] ? load_image+0x3b0/0x3b0 [ 66.827976][ T4321] panic+0x2c9/0x7f0 [ 66.831846][ T4321] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.837981][ T4321] ? bpf_jit_dump+0xd0/0xd0 [ 66.842477][ T4321] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 66.848348][ T4321] ? _raw_spin_unlock+0x40/0x40 [ 66.853174][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.858956][ T4321] check_panic_on_warn+0x80/0xa0 [ 66.863872][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.869655][ T4321] end_report+0x6d/0xf0 [ 66.873798][ T4321] kasan_report+0x102/0x130 [ 66.878275][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.884068][ T4321] ? reiserfs_release_objectid+0x521/0x780 [ 66.889854][ T4321] kasan_check_range+0x27b/0x290 [ 66.894770][ T4321] memmove+0x25/0x60 [ 66.898640][ T4321] reiserfs_release_objectid+0x521/0x780 [ 66.904250][ T4321] remove_save_link+0x2b6/0x3c0 [ 66.909074][ T4321] ? add_save_link+0x5c0/0x5c0 [ 66.913813][ T4321] ? __rwlock_init+0x140/0x140 [ 66.918555][ T4321] ? journal_end+0x1d8/0x290 [ 66.923120][ T4321] reiserfs_evict_inode+0x391/0x490 [ 66.928295][ T4321] ? entry_points_to_object+0x7d0/0x7d0 [ 66.933814][ T4321] ? do_raw_spin_lock+0x11d/0x280 [ 66.938821][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 66.943994][ T4321] ? entry_points_to_object+0x7d0/0x7d0 [ 66.949518][ T4321] evict+0x485/0x870 [ 66.953412][ T4321] ? proc_nr_inodes+0x320/0x320 [ 66.958240][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 66.963412][ T4321] ? _raw_spin_unlock+0x24/0x40 [ 66.968239][ T4321] __dentry_kill+0x431/0x650 [ 66.972803][ T4321] dentry_kill+0xb8/0x290 [ 66.977107][ T4321] dput+0xd8/0x1a0 [ 66.980800][ T4321] __fput+0x5ee/0x930 [ 66.984762][ T4321] task_work_run+0x125/0x1a0 [ 66.989342][ T4321] exit_to_user_mode_loop+0x10f/0x130 [ 66.994786][ T4321] exit_to_user_mode_prepare+0xee/0x180 [ 67.000314][ T4321] syscall_exit_to_user_mode+0x16/0x40 [ 67.005757][ T4321] do_syscall_64+0x58/0xa0 [ 67.010155][ T4321] ? clear_bhb_loop+0x30/0x80 [ 67.014810][ T4321] ? clear_bhb_loop+0x30/0x80 [ 67.019463][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.025333][ T4321] RIP: 0033:0x7fb5d7615749 [ 67.029724][ T4321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.049307][ T4321] RSP: 002b:00007ffe84ad7268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 67.057699][ T4321] RAX: 0000000000000000 RBX: 0000000000010074 RCX: 00007fb5d7615749 [ 67.065648][ T4321] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 67.073595][ T4321] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000484ad755f [ 67.081541][ T4321] R10: 0000001b30920000 R11: 0000000000000246 R12: 00007fb5d786bfac [ 67.089494][ T4321] R13: 00007fb5d786bfa0 R14: ffffffffffffffff R15: 0000000000000002 [ 67.097456][ T4321] [ 67.100819][ T4321] Kernel Offset: disabled [ 67.105140][ T4321] Rebooting in 86400 seconds..