Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts.
2025/08/11 15:23:30 ignoring optional flag "sandboxArg"="0"
2025/08/11 15:23:31 parsed 1 programs
[ 85.401176][ T4270] cgroup: Unknown subsys name 'net'
[ 85.531848][ T4270] cgroup: Unknown subsys name 'rlimit'
[ 87.200899][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 89.333325][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.341578][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.352208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 89.378964][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.387091][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.396593][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 89.747436][ T4307] chnl_net:caif_netlink_parms(): no params data found
[ 89.855973][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.864022][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.873045][ T4307] device bridge_slave_0 entered promiscuous mode
[ 89.882659][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.890357][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.898545][ T4307] device bridge_slave_1 entered promiscuous mode
[ 89.921875][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.934078][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.960364][ T4307] team0: Port device team_slave_0 added
[ 89.968120][ T4307] team0: Port device team_slave_1 added
[ 89.988941][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.996552][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.022718][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.045884][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.052980][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.080137][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.128952][ T4307] device hsr_slave_0 entered promiscuous mode
[ 90.136627][ T4307] device hsr_slave_1 entered promiscuous mode
[ 90.261962][ T4307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.272480][ T4307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.289269][ T4307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.298791][ T4307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.382331][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.409590][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 90.418366][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 90.437839][ T4307] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.452440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 90.462835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 90.472266][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.479833][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.494059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 90.502820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 90.511817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 90.521034][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.528680][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.547250][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 90.561248][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 90.575347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 90.585868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 90.594704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 90.640630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 90.652355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 90.669803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 90.679111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 90.689575][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 90.959952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 90.968226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 90.986573][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.006048][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 91.027303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 91.037168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 91.046054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 91.057497][ T4307] device veth0_vlan entered promiscuous mode
[ 91.070079][ T4307] device veth1_vlan entered promiscuous mode
[ 91.090471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 91.098984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 91.107838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 91.121605][ T4307] device veth0_macvtap entered promiscuous mode
[ 91.133833][ T4307] device veth1_macvtap entered promiscuous mode
[ 91.152188][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.161359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 91.171148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 91.183355][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.192506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 91.201548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 91.214493][ T4307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.224101][ T4307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.235346][ T4307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.244363][ T4307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.402117][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.079767][ T126] cfg80211: failed to load regulatory.db
[ 92.833827][ T4356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.843226][ T4356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.853292][ T4356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.862301][ T4356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.871574][ T4356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 92.886392][ T4356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/08/11 15:23:42 executed programs: 0
[ 93.899340][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.948433][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.957037][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.965060][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.973364][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.981997][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 93.990097][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.134432][ T4371] chnl_net:caif_netlink_parms(): no params data found
[ 94.185708][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.192996][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.201065][ T4371] device bridge_slave_0 entered promiscuous mode
[ 94.209398][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.216885][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.225542][ T4371] device bridge_slave_1 entered promiscuous mode
[ 94.251409][ T4371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.263148][ T4371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.289787][ T4371] team0: Port device team_slave_0 added
[ 94.297808][ T4371] team0: Port device team_slave_1 added
[ 94.321592][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.328875][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.355111][ T4371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.368158][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.375384][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.402389][ T4371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.437694][ T4371] device hsr_slave_0 entered promiscuous mode
[ 94.444601][ T4371] device hsr_slave_1 entered promiscuous mode
[ 94.451746][ T4371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 94.459826][ T4371] Cannot create hsr debugfs directory
[ 96.075705][ T4356] Bluetooth: hci0: command 0x0409 tx timeout
[ 96.167445][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.249885][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.130393][ T4371] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.142822][ T4371] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.153958][ T4371] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.177029][ T41] device hsr_slave_0 left promiscuous mode
[ 97.183835][ T41] device hsr_slave_1 left promiscuous mode
[ 97.192321][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.202119][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.212897][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.222277][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.231819][ T41] device bridge_slave_1 left promiscuous mode
[ 97.240341][ T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.253854][ T41] device bridge_slave_0 left promiscuous mode
[ 97.262778][ T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.297376][ T41] device veth1_macvtap left promiscuous mode
[ 97.303900][ T41] device veth0_macvtap left promiscuous mode
[ 97.312106][ T41] device veth1_vlan left promiscuous mode
[ 97.321089][ T41] device veth0_vlan left promiscuous mode
[ 97.720245][ T41] team0 (unregistering): Port device team_slave_1 removed
[ 97.750121][ T41] team0 (unregistering): Port device team_slave_0 removed
[ 97.781173][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.812767][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.100682][ T41] bond0 (unregistering): Released all slaves
[ 98.155062][ T4356] Bluetooth: hci0: command 0x041b tx timeout
[ 98.174462][ T4371] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.252579][ T4371] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.266549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 98.276371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 98.288020][ T4371] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.304293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 98.314208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 98.323922][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.331207][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.339501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 98.351425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 98.360746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 98.369591][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.376861][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.390262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 98.416229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 98.430806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 98.440341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 98.449700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 98.461922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 98.471312][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 98.494366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 98.504591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 98.518807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 98.527480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 98.548221][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 98.802037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 98.810053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 98.829208][ T4371] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.868254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 98.884334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 98.906714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 98.915768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 98.926491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 98.934351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 98.944085][ T4371] device veth0_vlan entered promiscuous mode
[ 98.957938][ T4371] device veth1_vlan entered promiscuous mode
[ 98.979007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 98.987654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 98.996641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 99.005605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 99.017738][ T4371] device veth0_macvtap entered promiscuous mode
[ 99.027269][ T4371] device veth1_macvtap entered promiscuous mode
[ 99.043543][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.051270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 99.060873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 99.069177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 99.079328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 99.092294][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.100240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 99.110076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 99.123437][ T4371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.132905][ T4371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.142344][ T4371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.151520][ T4371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.210992][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.223241][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.240571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 99.251248][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2025/08/11 15:23:47 executed programs: 2
[ 99.261101][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.270202][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 99.383657][ T4431] loop0: detected capacity change from 0 to 8192
[ 99.409924][ T4431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 99.433918][ T4431] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 99.445405][ T4431] REISERFS (device loop0): using ordered data mode
[ 99.451983][ T4431] reiserfs: using flush barriers
[ 99.477744][ T4431] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 99.509453][ T4431] REISERFS (device loop0): checking transaction log (loop0)
[ 99.523691][ T4431] REISERFS (device loop0): Using r5 hash to sort names
[ 99.534090][ T4431] ==================================================================
[ 99.542224][ T4431] BUG: KASAN: use-after-free in search_by_entry_key+0x597/0x1370
[ 99.550196][ T4431] Read of size 4 at addr ffff88805b377754 by task syz.0.17/4431
[ 99.558164][ T4431]
[ 99.560635][ T4431] CPU: 1 PID: 4431 Comm: syz.0.17 Not tainted 6.1.147-syzkaller #0
[ 99.568672][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 99.578869][ T4431] Call Trace:
[ 99.582217][ T4431]
[ 99.585269][ T4431] dump_stack_lvl+0x168/0x22e
[ 99.589992][ T4431] ? read_lock_is_recursive+0x10/0x10
[ 99.595413][ T4431] ? show_regs_print_info+0x12/0x12
[ 99.600654][ T4431] ? load_image+0x3b0/0x3b0
[ 99.605299][ T4431] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 99.610804][ T4431] ? __virt_addr_valid+0x188/0x540
[ 99.615966][ T4431] ? __virt_addr_valid+0x465/0x540
[ 99.621321][ T4431] ? search_by_entry_key+0x597/0x1370
[ 99.626745][ T4431] print_report+0xa8/0x200
[ 99.631210][ T4431] kasan_report+0x10b/0x140
[ 99.635761][ T4431] ? search_by_entry_key+0x597/0x1370
[ 99.641260][ T4431] search_by_entry_key+0x597/0x1370
[ 99.646519][ T4431] ? make_cpu_key+0x2b/0x220
[ 99.651160][ T4431] reiserfs_find_entry+0x2ff/0x18e0
[ 99.656490][ T4431] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 99.662797][ T4431] ? reiserfs_write_lock+0x75/0xd0
[ 99.667969][ T4431] ? mutex_lock_nested+0x10/0x10
[ 99.672954][ T4431] ? d_alloc_parallel+0x2d4/0x1480
[ 99.678210][ T4431] ? reiserfs_get_parent+0x270/0x270
[ 99.683881][ T4431] reiserfs_lookup+0x1a7/0x420
[ 99.688850][ T4431] ? reiserfs_find_entry+0x18e0/0x18e0
[ 99.694345][ T4431] ? __init_waitqueue_head+0xa5/0x150
[ 99.699753][ T4431] __lookup_slow+0x27d/0x3a0
[ 99.704481][ T4431] ? lookup_one_len+0x2c0/0x2c0
[ 99.709379][ T4431] lookup_one_len+0x18e/0x2c0
[ 99.714186][ T4431] ? lookup_one_common+0x450/0x450
[ 99.719420][ T4431] reiserfs_lookup_privroot+0x85/0x1e0
[ 99.725018][ T4431] reiserfs_fill_super+0x16ef/0x2340
[ 99.730345][ T4431] ? reiserfs_kill_sb+0x140/0x140
[ 99.735588][ T4431] ? snprintf+0xd7/0x120
[ 99.739871][ T4431] ? vscnprintf+0x80/0x80
[ 99.744237][ T4431] ? set_blocksize+0x1d3/0x350
[ 99.749387][ T4431] ? sb_set_blocksize+0xa5/0xe0
[ 99.754811][ T4431] mount_bdev+0x287/0x3c0
[ 99.759410][ T4431] ? reiserfs_kill_sb+0x140/0x140
[ 99.764618][ T4431] legacy_get_tree+0xe6/0x180
[ 99.769601][ T4431] ? remove_save_link+0x3c0/0x3c0
[ 99.774915][ T4431] vfs_get_tree+0x88/0x270
[ 99.779378][ T4431] do_new_mount+0x24a/0xa40
[ 99.783984][ T4431] __se_sys_mount+0x2d6/0x3c0
[ 99.788856][ T4431] ? __x64_sys_mount+0xc0/0xc0
[ 99.793773][ T4431] ? lockdep_hardirqs_on+0x94/0x140
[ 99.799160][ T4431] ? __x64_sys_mount+0x1c/0xc0
[ 99.804106][ T4431] do_syscall_64+0x4c/0xa0
[ 99.808647][ T4431] ? clear_bhb_loop+0x60/0xb0
[ 99.813331][ T4431] ? clear_bhb_loop+0x60/0xb0
[ 99.818116][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 99.824129][ T4431] RIP: 0033:0x7fb56579038a
[ 99.828654][ T4431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.848820][ T4431] RSP: 002b:00007ffd4ebb0998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 99.857432][ T4431] RAX: ffffffffffffffda RBX: 00007ffd4ebb0a20 RCX: 00007fb56579038a
[ 99.865520][ T4431] RDX: 0000200000000000 RSI: 0000200000000440 RDI: 00007ffd4ebb09e0
[ 99.873695][ T4431] RBP: 0000200000000000 R08: 00007ffd4ebb0a20 R09: 000000000120c081
[ 99.881749][ T4431] R10: 000000000120c081 R11: 0000000000000246 R12: 0000200000000440
[ 99.889919][ T4431] R13: 00007ffd4ebb09e0 R14: 0000000000001108 R15: 0000200000000900
[ 99.898011][ T4431]
[ 99.901037][ T4431]
[ 99.903449][ T4431] The buggy address belongs to the physical page:
[ 99.910231][ T4431] page:ffffea00016cddc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5b377
[ 99.920560][ T4431] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 99.927886][ T4431] raw: 00fff00000000000 ffffea00016ce348 ffffea0001abcf48 0000000000000000
[ 99.936592][ T4431] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 99.945666][ T4431] page dumped because: kasan: bad access detected
[ 99.952405][ T4431] page_owner tracks the page as freed
[ 99.958226][ T4431] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 4288, tgid 4288 (udevd), ts 99571866337, free_ts 99637268565
[ 99.976754][ T4431] post_alloc_hook+0x173/0x1a0
[ 99.981797][ T4431] get_page_from_freelist+0x1a26/0x1ac0
[ 99.987386][ T4431] __alloc_pages+0x1df/0x4e0
[ 99.992266][ T4431] __folio_alloc+0xe/0x30
[ 99.996721][ T4431] vma_alloc_folio+0x4a3/0x900
[ 100.001572][ T4431] handle_mm_fault+0x2242/0x3e70
[ 100.006723][ T4431] do_user_addr_fault+0x51f/0xb10
[ 100.011801][ T4431] exc_page_fault+0x60/0x100
[ 100.016491][ T4431] asm_exc_page_fault+0x22/0x30
[ 100.021999][ T4431] page last free stack trace:
[ 100.026768][ T4431] free_unref_page_prepare+0x8b4/0x9a0
[ 100.032243][ T4431] free_unref_page_list+0xbb/0x8e0
[ 100.037479][ T4431] release_pages+0x1f92/0x2200
[ 100.042366][ T4431] tlb_flush_mmu+0xff/0x210
[ 100.046971][ T4431] tlb_finish_mmu+0xbd/0x1c0
[ 100.051576][ T4431] unmap_region+0x272/0x2c0
[ 100.056092][ T4431] do_mas_align_munmap+0xc57/0x1220
[ 100.061311][ T4431] do_mas_munmap+0x240/0x2b0
[ 100.066000][ T4431] __vm_munmap+0x18d/0x290
[ 100.070436][ T4431] __x64_sys_munmap+0x5c/0x70
[ 100.075405][ T4431] do_syscall_64+0x4c/0xa0
[ 100.079847][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.085758][ T4431]
[ 100.088083][ T4431] Memory state around the buggy address:
[ 100.093727][ T4431] ffff88805b377600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.101881][ T4431] ffff88805b377680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.110174][ T4431] >ffff88805b377700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.118243][ T4431] ^
[ 100.125013][ T4431] ffff88805b377780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.133076][ T4431] ffff88805b377800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.141225][ T4431] ==================================================================
[ 100.158030][ T4431] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.165374][ T4431] CPU: 1 PID: 4431 Comm: syz.0.17 Not tainted 6.1.147-syzkaller #0
[ 100.173521][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 100.183785][ T4431] Call Trace:
[ 100.187255][ T4431]
[ 100.190286][ T4431] dump_stack_lvl+0x168/0x22e
[ 100.195009][ T4431] ? memcpy+0x3c/0x60
[ 100.199121][ T4431] ? show_regs_print_info+0x12/0x12
[ 100.204325][ T4431] ? load_image+0x3b0/0x3b0
[ 100.209058][ T4431] panic+0x2c9/0x710
[ 100.213240][ T4431] ? bpf_jit_dump+0xd0/0xd0
[ 100.217935][ T4431] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 100.224075][ T4431] ? _raw_spin_unlock+0x40/0x40
[ 100.228966][ T4431] check_panic_on_warn+0x80/0xa0
[ 100.234094][ T4431] ? search_by_entry_key+0x597/0x1370
[ 100.235251][ T4356] Bluetooth: hci0: command 0x040f tx timeout
[ 100.245764][ T4431] end_report+0x66/0x110
[ 100.250168][ T4431] kasan_report+0x118/0x140
[ 100.254701][ T4431] ? search_by_entry_key+0x597/0x1370
[ 100.260193][ T4431] search_by_entry_key+0x597/0x1370
[ 100.265599][ T4431] ? make_cpu_key+0x2b/0x220
[ 100.270315][ T4431] reiserfs_find_entry+0x2ff/0x18e0
[ 100.275713][ T4431] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 100.281726][ T4431] ? reiserfs_write_lock+0x75/0xd0
[ 100.286895][ T4431] ? mutex_lock_nested+0x10/0x10
[ 100.291950][ T4431] ? d_alloc_parallel+0x2d4/0x1480
[ 100.297633][ T4431] ? reiserfs_get_parent+0x270/0x270
[ 100.302947][ T4431] reiserfs_lookup+0x1a7/0x420
[ 100.307770][ T4431] ? reiserfs_find_entry+0x18e0/0x18e0
[ 100.313524][ T4431] ? __init_waitqueue_head+0xa5/0x150
[ 100.319023][ T4431] __lookup_slow+0x27d/0x3a0
[ 100.323753][ T4431] ? lookup_one_len+0x2c0/0x2c0
[ 100.328839][ T4431] lookup_one_len+0x18e/0x2c0
[ 100.333650][ T4431] ? lookup_one_common+0x450/0x450
[ 100.339063][ T4431] reiserfs_lookup_privroot+0x85/0x1e0
[ 100.344635][ T4431] reiserfs_fill_super+0x16ef/0x2340
[ 100.350294][ T4431] ? reiserfs_kill_sb+0x140/0x140
[ 100.355346][ T4431] ? snprintf+0xd7/0x120
[ 100.359637][ T4431] ? vscnprintf+0x80/0x80
[ 100.364341][ T4431] ? set_blocksize+0x1d3/0x350
[ 100.369227][ T4431] ? sb_set_blocksize+0xa5/0xe0
[ 100.374193][ T4431] mount_bdev+0x287/0x3c0
[ 100.378544][ T4431] ? reiserfs_kill_sb+0x140/0x140
[ 100.383681][ T4431] legacy_get_tree+0xe6/0x180
[ 100.388390][ T4431] ? remove_save_link+0x3c0/0x3c0
[ 100.393629][ T4431] vfs_get_tree+0x88/0x270
[ 100.398066][ T4431] do_new_mount+0x24a/0xa40
[ 100.402587][ T4431] __se_sys_mount+0x2d6/0x3c0
[ 100.407414][ T4431] ? __x64_sys_mount+0xc0/0xc0
[ 100.412188][ T4431] ? lockdep_hardirqs_on+0x94/0x140
[ 100.417414][ T4431] ? __x64_sys_mount+0x1c/0xc0
[ 100.422218][ T4431] do_syscall_64+0x4c/0xa0
[ 100.426856][ T4431] ? clear_bhb_loop+0x60/0xb0
[ 100.431549][ T4431] ? clear_bhb_loop+0x60/0xb0
[ 100.436249][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 100.442337][ T4431] RIP: 0033:0x7fb56579038a
[ 100.446861][ T4431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 100.467003][ T4431] RSP: 002b:00007ffd4ebb0998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 100.475431][ T4431] RAX: ffffffffffffffda RBX: 00007ffd4ebb0a20 RCX: 00007fb56579038a
[ 100.483444][ T4431] RDX: 0000200000000000 RSI: 0000200000000440 RDI: 00007ffd4ebb09e0
[ 100.491518][ T4431] RBP: 0000200000000000 R08: 00007ffd4ebb0a20 R09: 000000000120c081
[ 100.499603][ T4431] R10: 000000000120c081 R11: 0000000000000246 R12: 0000200000000440
[ 100.507888][ T4431] R13: 00007ffd4ebb09e0 R14: 0000000000001108 R15: 0000200000000900
[ 100.516056][ T4431]
[ 100.519431][ T4431] Kernel Offset: disabled
[ 100.523863][ T4431] Rebooting in 86400 seconds..