[ 76.439815][ T1324] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. 2026/04/22 08:42:11 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 84.609050][ T4672] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.926839][ T4682] chnl_net:caif_netlink_parms(): no params data found [ 85.961027][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.968531][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.976390][ T4682] device bridge_slave_0 entered promiscuous mode [ 85.986418][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.993684][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.001328][ T4682] device bridge_slave_1 entered promiscuous mode [ 86.021810][ T4682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.033268][ T4682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.058404][ T4682] team0: Port device team_slave_0 added [ 86.065995][ T4682] team0: Port device team_slave_1 added [ 86.082040][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.089082][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.115170][ T4682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.129209][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.137148][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.163711][ T4682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.189514][ T4682] device hsr_slave_0 entered promiscuous mode [ 86.196304][ T4682] device hsr_slave_1 entered promiscuous mode [ 86.762727][ T4682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.785676][ T4682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.805792][ T4682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.822156][ T4682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.856668][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.863882][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.871233][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.878341][ T4682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.915241][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.933806][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.976588][ T4682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.997738][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.013829][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.027624][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.055267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.065747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.079341][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.086489][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.095337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.105370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.114141][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.121389][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.129491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.144403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.164419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.176981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.187441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.198833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.212334][ T4682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.224063][ T4682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.242082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.250844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.260010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.284165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.311767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.321344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.519241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.543473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.557667][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.596136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.613781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.643398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.663799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.675119][ T4682] device veth0_vlan entered promiscuous mode [ 87.693970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.702267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.727800][ T4682] device veth1_vlan entered promiscuous mode [ 87.758418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.774526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.790899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.813718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.832252][ T4682] device veth0_macvtap entered promiscuous mode [ 87.854225][ T4682] device veth1_macvtap entered promiscuous mode [ 87.881106][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.903095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.911721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.934493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.943512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.967755][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.987944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.997605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.008954][ T4682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.020024][ T4682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.029282][ T4682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.046552][ T4682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.420805][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.019164][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.035776][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.053158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.065535][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.074713][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.082706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.290663][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/22 08:42:21 executed programs: 0 [ 91.103563][ T4957] chnl_net:caif_netlink_parms(): no params data found [ 91.157487][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.165078][ T4957] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.178451][ T4957] device bridge_slave_0 entered promiscuous mode [ 91.187065][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.196564][ T4957] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.205220][ T4957] device bridge_slave_1 entered promiscuous mode [ 91.234331][ T4957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.245855][ T4957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.274340][ T4957] team0: Port device team_slave_0 added [ 91.283817][ T4957] team0: Port device team_slave_1 added [ 91.306305][ T4957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.313828][ T4957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.340115][ T4957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.352900][ T4957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.360077][ T4957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.389093][ T4957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.418670][ T4957] device hsr_slave_0 entered promiscuous mode [ 91.426170][ T4957] device hsr_slave_1 entered promiscuous mode [ 91.432609][ T4957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.440493][ T4957] Cannot create hsr debugfs directory [ 92.408444][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.461073][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.993832][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 93.255945][ T144] device hsr_slave_0 left promiscuous mode [ 93.262236][ T144] device hsr_slave_1 left promiscuous mode [ 93.268806][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.276362][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.284126][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.291525][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.299859][ T144] device bridge_slave_1 left promiscuous mode [ 93.306243][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.315570][ T144] device bridge_slave_0 left promiscuous mode [ 93.321790][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.332842][ T144] device veth1_macvtap left promiscuous mode [ 93.339753][ T144] device veth0_macvtap left promiscuous mode [ 93.345931][ T144] device veth1_vlan left promiscuous mode [ 93.351719][ T144] device veth0_vlan left promiscuous mode [ 93.468837][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.479709][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.491801][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.505594][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.549056][ T144] bond0 (unregistering): Released all slaves [ 93.634781][ T4957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.643515][ T4957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.651972][ T4957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.661290][ T4957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.715350][ T4957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.727569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.735677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.746972][ T4957] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.760851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.771021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.779615][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.786774][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.795467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.807391][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.817467][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.830181][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.837316][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.848286][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.859592][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.870482][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.879957][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.888941][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.903107][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.911804][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.920415][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.929300][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.940641][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.949513][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.960846][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.076558][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.084727][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.097079][ T4957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.116820][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.126267][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.150474][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.159244][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.168725][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.177124][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.187740][ T4957] device veth0_vlan entered promiscuous mode [ 94.200583][ T4957] device veth1_vlan entered promiscuous mode [ 94.221749][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.230130][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.240405][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.249496][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.262853][ T4957] device veth0_macvtap entered promiscuous mode [ 94.281429][ T4957] device veth1_macvtap entered promiscuous mode [ 94.299053][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.307373][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.316819][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.325681][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.337524][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.349775][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.358466][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.367948][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.380248][ T4957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389649][ T4957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.399984][ T4957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.409429][ T4957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.474728][ T477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.482580][ T477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.497813][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.525165][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.534967][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.543740][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.666416][ T5106] loop0: detected capacity change from 0 to 8192 [ 94.729836][ T5106] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 94.742634][ T5106] REISERFS (device loop0): using ordered data mode [ 94.774454][ T5106] reiserfs: using flush barriers [ 94.781878][ T5106] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.803737][ T5106] REISERFS (device loop0): checking transaction log (loop0) [ 94.828241][ T5106] REISERFS (device loop0): Using rupasov hash to sort names [ 94.837777][ T5106] REISERFS (device loop0): using 3.5.x disk format [ 94.845468][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.857930][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.869746][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.881453][ T5106] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 94.896128][ T5106] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 94.909620][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.922975][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.937607][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.951868][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.964231][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.975416][ T5106] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 94.986577][ T5106] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 95.004237][ T5105] ================================================================== [ 95.012525][ T5105] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x527/0x780 [ 95.020706][ T5105] Read of size 8188 at addr ffff88806b00d050 by task syz.0.17/5105 [ 95.028610][ T5105] [ 95.030933][ T5105] CPU: 0 PID: 5105 Comm: syz.0.17 Not tainted syzkaller #0 [ 95.038106][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.048238][ T5105] Call Trace: [ 95.051503][ T5105] [ 95.054416][ T5105] dump_stack_lvl+0x188/0x250 [ 95.059273][ T5105] ? show_regs_print_info+0x20/0x20 [ 95.064456][ T5105] ? load_image+0x400/0x400 [ 95.068944][ T5105] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 95.074392][ T5105] print_address_description+0x60/0x2d0 [ 95.079948][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.085746][ T5105] kasan_report+0xdf/0x130 [ 95.090175][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.095959][ T5105] ? journal_mark_dirty+0x21d/0xdf0 [ 95.101147][ T5105] kasan_check_range+0x235/0x290 [ 95.106084][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.111867][ T5105] memmove+0x25/0x60 [ 95.115744][ T5105] reiserfs_release_objectid+0x527/0x780 [ 95.121389][ T5105] remove_save_link+0x2af/0x3e0 [ 95.126343][ T5105] ? add_save_link+0x600/0x600 [ 95.131106][ T5105] ? __rwlock_init+0x140/0x140 [ 95.135858][ T5105] ? journal_end+0x1d8/0x290 [ 95.140463][ T5105] reiserfs_evict_inode+0x3ae/0x4c0 [ 95.145657][ T5105] ? entry_points_to_object+0x7d0/0x7d0 [ 95.151190][ T5105] ? do_raw_spin_lock+0x128/0x2f0 [ 95.156230][ T5105] ? do_raw_spin_unlock+0x11d/0x230 [ 95.161417][ T5105] ? entry_points_to_object+0x7d0/0x7d0 [ 95.166979][ T5105] evict+0x4c9/0x8d0 [ 95.170867][ T5105] ? proc_nr_inodes+0x320/0x320 [ 95.175715][ T5105] ? do_raw_spin_unlock+0x11d/0x230 [ 95.180904][ T5105] ? _raw_spin_unlock+0x24/0x40 [ 95.185744][ T5105] __dentry_kill+0x431/0x650 [ 95.190394][ T5105] dentry_kill+0xb8/0x290 [ 95.194729][ T5105] dput+0xd8/0x1a0 [ 95.198443][ T5105] __fput+0x5ee/0x930 [ 95.202428][ T5105] task_work_run+0x125/0x1a0 [ 95.207003][ T5105] exit_to_user_mode_loop+0x10f/0x130 [ 95.212356][ T5105] exit_to_user_mode_prepare+0xee/0x180 [ 95.217883][ T5105] syscall_exit_to_user_mode+0x16/0x40 [ 95.223330][ T5105] do_syscall_64+0x58/0xa0 [ 95.227736][ T5105] ? clear_bhb_loop+0x30/0x80 [ 95.232402][ T5105] ? clear_bhb_loop+0x30/0x80 [ 95.237169][ T5105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.243066][ T5105] RIP: 0033:0x7ff4f3e25ef9 [ 95.247726][ T5105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.267313][ T5105] RSP: 002b:00007fff12583d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 95.275735][ T5105] RAX: 0000000000000000 RBX: 00007ff4f4092da0 RCX: 00007ff4f3e25ef9 [ 95.283692][ T5105] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 95.291642][ T5105] RBP: 00007ff4f4092da0 R08: 00007ff4f4091038 R09: 0000000000000000 [ 95.299771][ T5105] R10: 000000000003fdc0 R11: 0000000000000246 R12: 00000000000174aa [ 95.307728][ T5105] R13: 00007ff4f4090fac R14: 00000000000172f6 R15: 00007fff12583e40 [ 95.315711][ T5105] [ 95.318737][ T5105] [ 95.321041][ T5105] The buggy address belongs to the page: [ 95.326653][ T5105] page:ffffea0001ac0340 refcount:2 mapcount:0 mapping:ffff88801d724f30 index:0x10 pfn:0x6b00d [ 95.336869][ T5105] memcg:ffff88807a394000 [ 95.341095][ T5105] aops:def_blk_aops ino:700000 [ 95.345846][ T5105] flags: 0xfff00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 95.357471][ T5105] raw: 00fff00000022036 ffffea0001a96108 ffffea0001ac0388 ffff88801d724f30 [ 95.366043][ T5105] raw: 0000000000000010 ffff88806f126570 00000002ffffffff ffff88807a394000 [ 95.374628][ T5105] page dumped because: kasan: bad access detected [ 95.381040][ T5105] page_owner tracks the page as allocated [ 95.386914][ T5105] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5106, ts 94729105282, free_ts 85685681368 [ 95.403998][ T5105] get_page_from_freelist+0x1bbd/0x1ca0 [ 95.409533][ T5105] __alloc_pages+0x1ee/0x480 [ 95.414122][ T5105] __page_cache_alloc+0xce/0x440 [ 95.419064][ T5105] pagecache_get_page+0x9b6/0xf10 [ 95.424066][ T5105] __getblk_gfp+0x247/0xb60 [ 95.428544][ T5105] __bread_gfp+0x28/0x380 [ 95.432854][ T5105] read_super_block+0x91/0x7a0 [ 95.437595][ T5105] reiserfs_fill_super+0x7a6/0x2440 [ 95.442784][ T5105] mount_bdev+0x287/0x3c0 [ 95.447096][ T5105] legacy_get_tree+0xe6/0x180 [ 95.451761][ T5105] vfs_get_tree+0x88/0x270 [ 95.456161][ T5105] do_new_mount+0x24a/0xa40 [ 95.460651][ T5105] __se_sys_mount+0x2e3/0x3d0 [ 95.465401][ T5105] do_syscall_64+0x4c/0xa0 [ 95.469805][ T5105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.475689][ T5105] page last free stack trace: [ 95.480362][ T5105] free_unref_page_prepare+0x637/0x6c0 [ 95.485812][ T5105] free_unref_page_list+0x119/0x820 [ 95.491011][ T5105] release_pages+0x186c/0x1be0 [ 95.495778][ T5105] tlb_finish_mmu+0x1b4/0x370 [ 95.500441][ T5105] unmap_region+0x344/0x3b0 [ 95.504925][ T5105] __do_munmap+0x9f8/0xdf0 [ 95.509324][ T5105] __vm_munmap+0x140/0x240 [ 95.513734][ T5105] __x64_sys_munmap+0x67/0x70 [ 95.518408][ T5105] do_syscall_64+0x4c/0xa0 [ 95.522828][ T5105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.528718][ T5105] [ 95.531145][ T5105] Memory state around the buggy address: [ 95.536753][ T5105] ffff88806b00ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.544822][ T5105] ffff88806b00ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.552951][ T5105] >ffff88806b00f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 95.561086][ T5105] ^ [ 95.565351][ T5105] ffff88806b00f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 95.573582][ T5105] ffff88806b00f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 95.581648][ T5105] ================================================================== [ 95.589697][ T5105] Disabling lock debugging due to kernel taint [ 95.597430][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 95.611158][ T5105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.618373][ T5105] CPU: 0 PID: 5105 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 95.626975][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.637023][ T5105] Call Trace: [ 95.640313][ T5105] [ 95.643230][ T5105] dump_stack_lvl+0x188/0x250 [ 95.647897][ T5105] ? show_regs_print_info+0x20/0x20 [ 95.653142][ T5105] ? load_image+0x400/0x400 [ 95.657651][ T5105] panic+0x2e5/0x810 [ 95.661571][ T5105] ? bpf_jit_dump+0xd0/0xd0 [ 95.666159][ T5105] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 95.672143][ T5105] ? _raw_spin_unlock+0x40/0x40 [ 95.676995][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.682903][ T5105] check_panic_on_warn+0x80/0xa0 [ 95.687837][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.693631][ T5105] end_report+0x6d/0xf0 [ 95.697775][ T5105] kasan_report+0x102/0x130 [ 95.702288][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.708179][ T5105] ? journal_mark_dirty+0x21d/0xdf0 [ 95.713483][ T5105] kasan_check_range+0x235/0x290 [ 95.718403][ T5105] ? reiserfs_release_objectid+0x527/0x780 [ 95.724187][ T5105] memmove+0x25/0x60 [ 95.728090][ T5105] reiserfs_release_objectid+0x527/0x780 [ 95.733704][ T5105] remove_save_link+0x2af/0x3e0 [ 95.738537][ T5105] ? add_save_link+0x600/0x600 [ 95.743281][ T5105] ? __rwlock_init+0x140/0x140 [ 95.748034][ T5105] ? journal_end+0x1d8/0x290 [ 95.752608][ T5105] reiserfs_evict_inode+0x3ae/0x4c0 [ 95.757794][ T5105] ? entry_points_to_object+0x7d0/0x7d0 [ 95.763317][ T5105] ? do_raw_spin_lock+0x128/0x2f0 [ 95.768340][ T5105] ? do_raw_spin_unlock+0x11d/0x230 [ 95.773523][ T5105] ? entry_points_to_object+0x7d0/0x7d0 [ 95.779076][ T5105] evict+0x4c9/0x8d0 [ 95.783120][ T5105] ? proc_nr_inodes+0x320/0x320 [ 95.787968][ T5105] ? do_raw_spin_unlock+0x11d/0x230 [ 95.793167][ T5105] ? _raw_spin_unlock+0x24/0x40 [ 95.798007][ T5105] __dentry_kill+0x431/0x650 [ 95.802588][ T5105] dentry_kill+0xb8/0x290 [ 95.806988][ T5105] dput+0xd8/0x1a0 [ 95.810704][ T5105] __fput+0x5ee/0x930 [ 95.814671][ T5105] task_work_run+0x125/0x1a0 [ 95.819243][ T5105] exit_to_user_mode_loop+0x10f/0x130 [ 95.824717][ T5105] exit_to_user_mode_prepare+0xee/0x180 [ 95.830266][ T5105] syscall_exit_to_user_mode+0x16/0x40 [ 95.835744][ T5105] do_syscall_64+0x58/0xa0 [ 95.840158][ T5105] ? clear_bhb_loop+0x30/0x80 [ 95.844830][ T5105] ? clear_bhb_loop+0x30/0x80 [ 95.849509][ T5105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.855463][ T5105] RIP: 0033:0x7ff4f3e25ef9 [ 95.859869][ T5105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.879466][ T5105] RSP: 002b:00007fff12583d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 95.887870][ T5105] RAX: 0000000000000000 RBX: 00007ff4f4092da0 RCX: 00007ff4f3e25ef9 [ 95.895911][ T5105] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 95.903862][ T5105] RBP: 00007ff4f4092da0 R08: 00007ff4f4091038 R09: 0000000000000000 [ 95.911830][ T5105] R10: 000000000003fdc0 R11: 0000000000000246 R12: 00000000000174aa [ 95.919794][ T5105] R13: 00007ff4f4090fac R14: 00000000000172f6 R15: 00007fff12583e40 [ 95.927756][ T5105] [ 95.930845][ T5105] Kernel Offset: disabled [ 95.935158][ T5105] Rebooting in 86400 seconds..