Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. 2026/06/08 10:12:02 parsed 1 programs [ 63.182031][ T4201] cgroup: Unknown subsys name 'net' [ 63.328367][ T4201] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.860260][ T4201] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.298740][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 68.361846][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.369535][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.377507][ T4253] device bridge_slave_0 entered promiscuous mode [ 68.386714][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.394202][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.401875][ T4253] device bridge_slave_1 entered promiscuous mode [ 68.420834][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.432157][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.454111][ T4253] team0: Port device team_slave_0 added [ 68.463511][ T4253] team0: Port device team_slave_1 added [ 68.487125][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.494148][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.522756][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.538997][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.547580][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.575183][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.619442][ T4253] device hsr_slave_0 entered promiscuous mode [ 68.626664][ T4253] device hsr_slave_1 entered promiscuous mode [ 68.725623][ T4253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.736276][ T4253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.745322][ T4253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.754913][ T4253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.774830][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.781954][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.789703][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.796787][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.837077][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.850226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.860430][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.869670][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.878388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.890965][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.901771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.910352][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.917455][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.933924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.942396][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.949491][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.961574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.970374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.981769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.994441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.006288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.016834][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.126943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.135778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.148543][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.184812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.201169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.209844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.220119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.230048][ T4253] device veth0_vlan entered promiscuous mode [ 69.257397][ T4253] device veth1_vlan entered promiscuous mode [ 69.276252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.285611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.296699][ T4253] device veth0_macvtap entered promiscuous mode [ 69.317516][ T4253] device veth1_macvtap entered promiscuous mode [ 69.331619][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.339807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.348126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.356122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.364702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.378350][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.385705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.394941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.406014][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.415713][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.424756][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.433945][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.882028][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.893288][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.902005][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.931510][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.940326][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.948845][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/06/08 10:12:10 executed programs: 0 [ 70.527921][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 70.595517][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.602677][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.610878][ T4300] device bridge_slave_0 entered promiscuous mode [ 70.620804][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.628093][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.636389][ T4300] device bridge_slave_1 entered promiscuous mode [ 70.660428][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.672079][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.706801][ T4300] team0: Port device team_slave_0 added [ 70.715713][ T4300] team0: Port device team_slave_1 added [ 70.738711][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.746148][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.772225][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.785286][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.792276][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.819437][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.868732][ T4300] device hsr_slave_0 entered promiscuous mode [ 70.876385][ T4300] device hsr_slave_1 entered promiscuous mode [ 70.883487][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.891667][ T4300] Cannot create hsr debugfs directory [ 70.985478][ T4300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.416112][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422638][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.453515][ T4309] Bluetooth: hci0: command 0x0409 tx timeout [ 73.739039][ T4300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.348871][ T4300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.418523][ T4300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.515276][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.524299][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.533851][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.534803][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 74.549178][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.599003][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.625636][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.634237][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.644477][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.654628][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.663674][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.672297][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.679441][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.687680][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.715159][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.724063][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.732464][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.739570][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.749958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.777086][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.789135][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.797932][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.809072][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.822075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.831018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.856500][ T4300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.867781][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.879694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.888309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.896962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.906042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.915022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.014678][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.022110][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.037514][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.065260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.074361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.100749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.109544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.118656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.127372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.141074][ T4300] device veth0_vlan entered promiscuous mode [ 75.156383][ T1367] device hsr_slave_0 left promiscuous mode [ 75.162724][ T1367] device hsr_slave_1 left promiscuous mode [ 75.169510][ T1367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.177766][ T1367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.186612][ T1367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.194640][ T1367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.202134][ T1367] device bridge_slave_1 left promiscuous mode [ 75.209098][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.220747][ T1367] device bridge_slave_0 left promiscuous mode [ 75.227057][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.244047][ T1367] device veth1_macvtap left promiscuous mode [ 75.250203][ T1367] device veth0_macvtap left promiscuous mode [ 75.256479][ T1367] device veth1_vlan left promiscuous mode [ 75.262344][ T1367] device veth0_vlan left promiscuous mode [ 75.404744][ T1367] team0 (unregistering): Port device team_slave_1 removed [ 75.419366][ T1367] team0 (unregistering): Port device team_slave_0 removed [ 75.431774][ T1367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.450271][ T1367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.500790][ T1367] bond0 (unregistering): Released all slaves [ 75.549324][ T4300] device veth1_vlan entered promiscuous mode [ 75.569311][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.582724][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.591114][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.599789][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.612117][ T4300] device veth0_macvtap entered promiscuous mode [ 75.623290][ T4300] device veth1_macvtap entered promiscuous mode [ 75.637549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.652385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.667139][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.680411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.689421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.701555][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.709527][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.719220][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.730731][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.739575][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.748312][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.758262][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.814812][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.822669][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.835432][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/06/08 10:12:16 executed programs: 2 [ 75.861972][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.870197][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.877923][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.965072][ T4323] loop0: detected capacity change from 0 to 8192 [ 76.016552][ T4323] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 76.030317][ T4323] REISERFS (device loop0): using ordered data mode [ 76.039313][ T4323] reiserfs: using flush barriers [ 76.056097][ T4323] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.081083][ T4323] REISERFS (device loop0): checking transaction log (loop0) [ 76.108460][ T4323] REISERFS (device loop0): Using rupasov hash to sort names [ 76.124384][ T4323] REISERFS (device loop0): using 3.5.x disk format [ 76.131855][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.173561][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.203038][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.222925][ T4323] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 76.250401][ T4323] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 76.275823][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.304593][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.334268][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.356488][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.369122][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.380594][ T4323] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.393238][ T4323] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 76.417624][ T4300] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 76.432364][ T4300] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 76.446110][ T4300] ================================================================== [ 76.454370][ T4300] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x527/0x780 [ 76.462694][ T4300] Read of size 8188 at addr ffff888069c0f050 by task syz-executor/4300 [ 76.470959][ T4300] [ 76.473297][ T4300] CPU: 1 PID: 4300 Comm: syz-executor Not tainted syzkaller #0 [ 76.480859][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.490950][ T4300] Call Trace: [ 76.494250][ T4300] [ 76.497197][ T4300] dump_stack_lvl+0x188/0x250 [ 76.501901][ T4300] ? show_regs_print_info+0x20/0x20 [ 76.507120][ T4300] ? load_image+0x400/0x400 [ 76.511645][ T4300] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 76.517133][ T4300] print_address_description+0x60/0x2d0 [ 76.522701][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 76.528527][ T4300] kasan_report+0xdf/0x130 [ 76.532969][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 76.538877][ T4300] ? journal_mark_dirty+0x21d/0xdf0 [ 76.544192][ T4300] kasan_check_range+0x235/0x290 [ 76.549146][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 76.554972][ T4300] memmove+0x25/0x60 [ 76.558884][ T4300] reiserfs_release_objectid+0x527/0x780 [ 76.564547][ T4300] remove_save_link+0x2af/0x3e0 [ 76.569417][ T4300] ? add_save_link+0x600/0x600 [ 76.574200][ T4300] ? __rwlock_init+0x140/0x140 [ 76.578988][ T4300] ? journal_end+0x1d8/0x290 [ 76.583655][ T4300] reiserfs_evict_inode+0x3ae/0x4c0 [ 76.588875][ T4300] ? entry_points_to_object+0x7d0/0x7d0 [ 76.594435][ T4300] ? do_raw_spin_lock+0x128/0x2f0 [ 76.599485][ T4300] ? do_raw_spin_unlock+0x11d/0x230 [ 76.604702][ T4300] ? entry_points_to_object+0x7d0/0x7d0 [ 76.610265][ T4300] evict+0x4c9/0x8d0 [ 76.614186][ T4300] ? proc_nr_inodes+0x320/0x320 [ 76.619056][ T4300] ? do_raw_spin_unlock+0x11d/0x230 [ 76.624283][ T4300] ? _raw_spin_unlock+0x24/0x40 [ 76.629158][ T4300] ? iput+0x706/0x8a0 [ 76.633163][ T4300] vfs_rmdir+0x3b4/0x430 [ 76.637428][ T4300] do_rmdir+0x2a1/0x740 [ 76.641599][ T4300] ? __phys_addr_symbol+0x2b/0x70 [ 76.646639][ T4300] ? d_delete_notify+0x150/0x150 [ 76.651597][ T4300] ? strncpy_from_user+0x1fb/0x360 [ 76.656729][ T4300] ? getname_flags+0x1fe/0x500 [ 76.661512][ T4300] __x64_sys_unlinkat+0xc0/0xe0 [ 76.666381][ T4300] do_syscall_64+0x4c/0xa0 [ 76.670810][ T4300] ? clear_bhb_loop+0x30/0x80 [ 76.675501][ T4300] ? clear_bhb_loop+0x30/0x80 [ 76.680199][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.686108][ T4300] RIP: 0033:0x7fcb36cd1f77 [ 76.690543][ T4300] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.710165][ T4300] RSP: 002b:00007ffd692f8e88 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 76.718612][ T4300] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fcb36cd1f77 [ 76.726621][ T4300] RDX: 0000000000000200 RSI: 00007ffd692fa030 RDI: 00000000ffffff9c [ 76.734616][ T4300] RBP: 00007fcb36d681ca R08: 0000000000018550 R09: 0000000000000001 [ 76.742608][ T4300] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd692fa030 [ 76.750597][ T4300] R13: 00007fcb36d681ca R14: 0000000000012a17 R15: 00007ffd692fc1f0 [ 76.758611][ T4300] [ 76.761642][ T4300] [ 76.763977][ T4300] The buggy address belongs to the page: [ 76.769612][ T4300] page:ffffea0001a703c0 refcount:2 mapcount:0 mapping:ffff888146c2cf38 index:0x10 pfn:0x69c0f [ 76.779869][ T4300] memcg:ffff88801d67c000 [ 76.784129][ T4300] aops:def_blk_aops ino:700000 [ 76.788909][ T4300] flags: 0xfff00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 76.800554][ T4300] raw: 00fff00000022036 ffffea0001a70348 ffffea0001a70988 ffff888146c2cf38 [ 76.809149][ T4300] raw: 0000000000000010 ffff88805b853740 00000002ffffffff ffff88801d67c000 [ 76.817745][ T4300] page dumped because: kasan: bad access detected [ 76.824165][ T4300] page_owner tracks the page as allocated [ 76.829883][ T4300] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4323, ts 76016050990, free_ts 66133345561 [ 76.847002][ T4300] get_page_from_freelist+0x1bbd/0x1ca0 [ 76.852569][ T4300] __alloc_pages+0x1ee/0x480 [ 76.857173][ T4300] __page_cache_alloc+0xce/0x440 [ 76.862127][ T4300] pagecache_get_page+0x9b6/0xf10 [ 76.867161][ T4300] __getblk_gfp+0x247/0xb60 [ 76.871682][ T4300] __bread_gfp+0x28/0x380 [ 76.876027][ T4300] read_super_block+0x91/0x7a0 [ 76.880804][ T4300] reiserfs_fill_super+0x7a6/0x2440 [ 76.886018][ T4300] mount_bdev+0x287/0x3c0 [ 76.890362][ T4300] legacy_get_tree+0xe6/0x180 [ 76.895055][ T4300] vfs_get_tree+0x88/0x270 [ 76.899484][ T4300] do_new_mount+0x24a/0xa40 [ 76.904009][ T4300] __se_sys_mount+0x2e3/0x3d0 [ 76.908723][ T4300] do_syscall_64+0x4c/0xa0 [ 76.913173][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.919085][ T4300] page last free stack trace: [ 76.923762][ T4300] free_unref_page_prepare+0x637/0x6c0 [ 76.929235][ T4300] free_unref_page_list+0x119/0x820 [ 76.934453][ T4300] release_pages+0x186c/0x1be0 [ 76.939238][ T4300] tlb_finish_mmu+0x1b4/0x370 [ 76.943935][ T4300] unmap_region+0x344/0x3b0 [ 76.948457][ T4300] __do_munmap+0x9f8/0xdf0 [ 76.952886][ T4300] __vm_munmap+0x140/0x240 [ 76.957322][ T4300] __x64_sys_munmap+0x67/0x70 [ 76.962014][ T4300] do_syscall_64+0x4c/0xa0 [ 76.966444][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.972356][ T4300] [ 76.974703][ T4300] Memory state around the buggy address: [ 76.980347][ T4300] ffff888069c0ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.988405][ T4300] ffff888069c0ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.996461][ T4300] >ffff888069c10000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.004516][ T4300] ^ [ 77.008583][ T4300] ffff888069c10080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.016640][ T4300] ffff888069c10100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.024695][ T4300] ================================================================== [ 77.032750][ T4300] Disabling lock debugging due to kernel taint [ 77.040435][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 77.064579][ T4300] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.071805][ T4300] CPU: 1 PID: 4300 Comm: syz-executor Tainted: G B syzkaller #0 [ 77.080756][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.090805][ T4300] Call Trace: [ 77.094073][ T4300] [ 77.097007][ T4300] dump_stack_lvl+0x188/0x250 [ 77.101672][ T4300] ? show_regs_print_info+0x20/0x20 [ 77.106856][ T4300] ? load_image+0x400/0x400 [ 77.111344][ T4300] panic+0x2e5/0x810 [ 77.115223][ T4300] ? bpf_jit_dump+0xd0/0xd0 [ 77.119727][ T4300] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 77.125703][ T4300] ? _raw_spin_unlock+0x40/0x40 [ 77.130540][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 77.136330][ T4300] check_panic_on_warn+0x80/0xa0 [ 77.141256][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 77.147047][ T4300] end_report+0x6d/0xf0 [ 77.151188][ T4300] kasan_report+0x102/0x130 [ 77.155677][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 77.161466][ T4300] ? journal_mark_dirty+0x21d/0xdf0 [ 77.166647][ T4300] kasan_check_range+0x235/0x290 [ 77.171569][ T4300] ? reiserfs_release_objectid+0x527/0x780 [ 77.177370][ T4300] memmove+0x25/0x60 [ 77.181253][ T4300] reiserfs_release_objectid+0x527/0x780 [ 77.186873][ T4300] remove_save_link+0x2af/0x3e0 [ 77.191711][ T4300] ? add_save_link+0x600/0x600 [ 77.196459][ T4300] ? __rwlock_init+0x140/0x140 [ 77.201209][ T4300] ? journal_end+0x1d8/0x290 [ 77.205872][ T4300] reiserfs_evict_inode+0x3ae/0x4c0 [ 77.211071][ T4300] ? entry_points_to_object+0x7d0/0x7d0 [ 77.216597][ T4300] ? do_raw_spin_lock+0x128/0x2f0 [ 77.221618][ T4300] ? do_raw_spin_unlock+0x11d/0x230 [ 77.226801][ T4300] ? entry_points_to_object+0x7d0/0x7d0 [ 77.232425][ T4300] evict+0x4c9/0x8d0 [ 77.236338][ T4300] ? proc_nr_inodes+0x320/0x320 [ 77.241196][ T4300] ? do_raw_spin_unlock+0x11d/0x230 [ 77.246482][ T4300] ? _raw_spin_unlock+0x24/0x40 [ 77.251325][ T4300] ? iput+0x706/0x8a0 [ 77.255298][ T4300] vfs_rmdir+0x3b4/0x430 [ 77.259530][ T4300] do_rmdir+0x2a1/0x740 [ 77.263684][ T4300] ? __phys_addr_symbol+0x2b/0x70 [ 77.268694][ T4300] ? d_delete_notify+0x150/0x150 [ 77.273702][ T4300] ? strncpy_from_user+0x1fb/0x360 [ 77.278813][ T4300] ? getname_flags+0x1fe/0x500 [ 77.283567][ T4300] __x64_sys_unlinkat+0xc0/0xe0 [ 77.288417][ T4300] do_syscall_64+0x4c/0xa0 [ 77.292823][ T4300] ? clear_bhb_loop+0x30/0x80 [ 77.297503][ T4300] ? clear_bhb_loop+0x30/0x80 [ 77.302179][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.308054][ T4300] RIP: 0033:0x7fcb36cd1f77 [ 77.312453][ T4300] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.332044][ T4300] RSP: 002b:00007ffd692f8e88 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 77.340445][ T4300] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fcb36cd1f77 [ 77.348410][ T4300] RDX: 0000000000000200 RSI: 00007ffd692fa030 RDI: 00000000ffffff9c [ 77.356383][ T4300] RBP: 00007fcb36d681ca R08: 0000000000018550 R09: 0000000000000001 [ 77.364338][ T4300] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffd692fa030 [ 77.372292][ T4300] R13: 00007fcb36d681ca R14: 0000000000012a17 R15: 00007ffd692fc1f0 [ 77.380251][ T4300] [ 77.383471][ T4300] Kernel Offset: disabled [ 77.387786][ T4300] Rebooting in 86400 seconds..