Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. 2026/07/25 08:45:11 parsed 1 programs [ 105.645814][ T4522] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 109.808434][ T9] ODEBUG: Out of memory. ODEBUG disabled [ 109.899483][ T4693] chnl_net:caif_netlink_parms(): no params data found [ 110.052375][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.060802][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.069161][ T4693] device bridge_slave_0 entered promiscuous mode [ 110.083417][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.090871][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.099274][ T4693] device bridge_slave_1 entered promiscuous mode [ 110.122343][ T4693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.133637][ T4693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.157044][ T4693] team0: Port device team_slave_0 added [ 110.165019][ T4693] team0: Port device team_slave_1 added [ 110.185480][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.192845][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.219139][ T4693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.248475][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.255656][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.281820][ T4693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.311972][ T4693] device hsr_slave_0 entered promiscuous mode [ 110.318890][ T4693] device hsr_slave_1 entered promiscuous mode [ 110.881578][ T4693] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.891594][ T4693] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.909099][ T4693] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.919712][ T4693] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.026349][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.039512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.056776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.069382][ T4693] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.104333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.113312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.123388][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.130811][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.162017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.181081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.201637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.220939][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.228057][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.260544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.284142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.301159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.321745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.341971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.365025][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.381420][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.402730][ T4693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.431807][ T4693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.453023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.472046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.492256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.512012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.531735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.733582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.751598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.765576][ T4693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.812388][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.822292][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.884510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.893773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.903696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.911947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.922883][ T4693] device veth0_vlan entered promiscuous mode [ 111.945320][ T4693] device veth1_vlan entered promiscuous mode [ 111.987238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.001281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.016597][ T4693] device veth0_macvtap entered promiscuous mode [ 112.027838][ T4693] device veth1_macvtap entered promiscuous mode [ 112.048293][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.056675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.066477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.075259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.084632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.096802][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.121517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.131336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.144907][ T4693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.159261][ T4693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.168769][ T4693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.179555][ T4693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.655884][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.674291][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.702120][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.728212][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.741875][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.749549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.441903][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/25 08:45:23 executed programs: 0 [ 113.737332][ T4806] chnl_net:caif_netlink_parms(): no params data found [ 113.793632][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.801966][ T4806] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.812831][ T4806] device bridge_slave_0 entered promiscuous mode [ 113.821686][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.828956][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.841021][ T4806] device bridge_slave_1 entered promiscuous mode [ 113.874864][ T4806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.886805][ T4806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.924696][ T4806] team0: Port device team_slave_0 added [ 113.935844][ T4806] team0: Port device team_slave_1 added [ 113.966358][ T4806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.976315][ T4806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.006587][ T4806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.019668][ T4806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.029416][ T4806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.058748][ T4806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.102357][ T4806] device hsr_slave_0 entered promiscuous mode [ 114.113204][ T4806] device hsr_slave_1 entered promiscuous mode [ 114.119952][ T4806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.127840][ T4806] Cannot create hsr debugfs directory [ 115.680323][ T4347] Bluetooth: hci0: command 0x0409 tx timeout [ 116.568208][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.178781][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.239447][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.760449][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 118.144750][ T4806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.157253][ T4806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.167091][ T4806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.184277][ T4806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.243607][ T4806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.264132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.272152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.285877][ T4806] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.299710][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.309177][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.318355][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.325565][ T1260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.335069][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.350638][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.359475][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.370460][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.378381][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.386485][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.399857][ T9] device hsr_slave_0 left promiscuous mode [ 118.406634][ T9] device hsr_slave_1 left promiscuous mode [ 118.413391][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.421095][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.428943][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.437295][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.445427][ T9] device bridge_slave_1 left promiscuous mode [ 118.451825][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.461048][ T9] device bridge_slave_0 left promiscuous mode [ 118.467276][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.479369][ T9] device veth1_macvtap left promiscuous mode [ 118.485642][ T9] device veth0_macvtap left promiscuous mode [ 118.492148][ T9] device veth1_vlan left promiscuous mode [ 118.498927][ T9] device veth0_vlan left promiscuous mode [ 118.634944][ T9] team0 (unregistering): Port device team_slave_1 removed [ 118.648344][ T9] team0 (unregistering): Port device team_slave_0 removed [ 118.659933][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.674479][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.726690][ T9] bond0 (unregistering): Released all slaves [ 118.768545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.783857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.793712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.803358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.819295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.828705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.838118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.847843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.864514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.873757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.885332][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.989824][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.998013][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.013379][ T4806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.030939][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.039683][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.059394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.067922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.077018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.085143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.095273][ T4806] device veth0_vlan entered promiscuous mode [ 119.110895][ T4806] device veth1_vlan entered promiscuous mode [ 119.136031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.145541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.154698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.163834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.175484][ T4806] device veth0_macvtap entered promiscuous mode [ 119.186882][ T4806] device veth1_macvtap entered promiscuous mode [ 119.205023][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.213651][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.226916][ T4806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.235397][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.245196][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.257837][ T4806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.266975][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.276784][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.290158][ T4806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.299254][ T4806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.320193][ T4806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.329058][ T4806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.420939][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.428815][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.457658][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/07/25 08:45:29 executed programs: 2 [ 119.468192][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.478015][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.486132][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.689616][ T5068] loop0: detected capacity change from 0 to 8192 [ 119.840559][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 119.887294][ T5068] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 119.914012][ T5068] REISERFS (device loop0): using ordered data mode [ 119.940224][ T5068] reiserfs: using flush barriers [ 119.947124][ T5068] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.980838][ T5068] REISERFS (device loop0): checking transaction log (loop0) [ 120.003212][ T5068] REISERFS (device loop0): Using r5 hash to sort names [ 120.192640][ T5071] loop0: detected capacity change from 0 to 8192 [ 120.261959][ T5071] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 120.280226][ T5071] REISERFS (device loop0): using ordered data mode [ 120.286980][ T5071] reiserfs: using flush barriers [ 120.310229][ T5071] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.327651][ T5071] REISERFS (device loop0): checking transaction log (loop0) [ 120.337500][ T5071] REISERFS (device loop0): Using r5 hash to sort names [ 120.344927][ T5071] ================================================================== [ 120.353694][ T5071] BUG: KASAN: use-after-free in search_by_entry_key+0x5ae/0x1380 [ 120.361478][ T5071] Read of size 4 at addr ffff88806b68c754 by task syz.0.17/5071 [ 120.369316][ T5071] [ 120.371716][ T5071] CPU: 0 PID: 5071 Comm: syz.0.17 Not tainted syzkaller #0 [ 120.379075][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.389440][ T5071] Call Trace: [ 120.392896][ T5071] [ 120.395959][ T5071] dump_stack_lvl+0x188/0x250 [ 120.400692][ T5071] ? show_regs_print_info+0x20/0x20 [ 120.406018][ T5071] ? _printk+0xda/0x130 [ 120.410353][ T5071] ? search_by_entry_key+0x5ae/0x1380 [ 120.415939][ T5071] ? load_image+0x410/0x410 [ 120.420683][ T5071] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 120.426204][ T5071] print_address_description+0x60/0x2d0 [ 120.431808][ T5071] ? search_by_entry_key+0x5ae/0x1380 [ 120.437232][ T5071] kasan_report+0xdf/0x130 [ 120.441964][ T5071] ? search_by_entry_key+0x5ae/0x1380 [ 120.447471][ T5071] search_by_entry_key+0x5ae/0x1380 [ 120.452913][ T5071] reiserfs_find_entry+0x2eb/0x18e0 [ 120.458225][ T5071] ? mutex_lock_io_nested+0x60/0x60 [ 120.463742][ T5071] ? mark_lock+0x94/0x320 [ 120.468166][ T5071] ? reiserfs_get_parent+0x2f0/0x2f0 [ 120.473524][ T5071] ? mutex_lock_nested+0x17/0x20 [ 120.478528][ T5071] reiserfs_lookup+0x1eb/0x480 [ 120.483468][ T5071] ? reiserfs_find_entry+0x18e0/0x18e0 [ 120.489205][ T5071] __lookup_slow+0x29d/0x410 [ 120.493859][ T5071] ? lookup_one_len+0x2d0/0x2d0 [ 120.499005][ T5071] lookup_one_len+0x19d/0x2d0 [ 120.503732][ T5071] ? lookup_one_common+0x460/0x460 [ 120.509130][ T5071] reiserfs_lookup_privroot+0x85/0x1e0 [ 120.514666][ T5071] reiserfs_fill_super+0x15da/0x2120 [ 120.520041][ T5071] ? reiserfs_kill_sb+0x140/0x140 [ 120.525123][ T5071] ? snprintf+0xe5/0x140 [ 120.529415][ T5071] ? vscnprintf+0x80/0x80 [ 120.533882][ T5071] ? up_write+0x1b6/0x410 [ 120.538301][ T5071] ? set_blocksize+0x1f1/0x360 [ 120.543412][ T5071] ? sb_set_blocksize+0xa5/0xe0 [ 120.548372][ T5071] mount_bdev+0x28a/0x3c0 [ 120.552745][ T5071] ? reiserfs_kill_sb+0x140/0x140 [ 120.557872][ T5071] legacy_get_tree+0xe6/0x180 [ 120.562707][ T5071] ? remove_save_link+0x3e0/0x3e0 [ 120.567874][ T5071] vfs_get_tree+0x88/0x270 [ 120.572452][ T5071] do_new_mount+0x247/0xa40 [ 120.577049][ T5071] __se_sys_mount+0x2e3/0x3d0 [ 120.581785][ T5071] ? __x64_sys_mount+0xc0/0xc0 [ 120.586707][ T5071] ? lockdep_hardirqs_on+0x94/0x140 [ 120.591995][ T5071] ? __x64_sys_mount+0x1c/0xc0 [ 120.596895][ T5071] do_syscall_64+0x4c/0xa0 [ 120.601783][ T5071] ? clear_bhb_loop+0x30/0x80 [ 120.606513][ T5071] ? clear_bhb_loop+0x30/0x80 [ 120.611241][ T5071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.617218][ T5071] RIP: 0033:0x7f07793abb8a [ 120.621866][ T5071] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.641965][ T5071] RSP: 002b:00007f0778610e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.650473][ T5071] RAX: ffffffffffffffda RBX: 00007f0778610ee0 RCX: 00007f07793abb8a [ 120.659304][ T5071] RDX: 0000200000000000 RSI: 0000200000000440 RDI: 00007f0778610ea0 [ 120.667706][ T5071] RBP: 0000200000000000 R08: 00007f0778610ee0 R09: 000000000120c081 [ 120.675892][ T5071] R10: 000000000120c081 R11: 0000000000000246 R12: 0000200000000440 [ 120.683908][ T5071] R13: 00007f0778610ea0 R14: 0000000000001108 R15: 0000200000000900 [ 120.692165][ T5071] [ 120.695226][ T5071] [ 120.697582][ T5071] The buggy address belongs to the page: [ 120.703344][ T5071] page:ffffea0001ada300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6b68c [ 120.713725][ T5071] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 120.720991][ T5071] raw: 00fff00000000000 ffffea0001ada348 ffff8880b90409a0 0000000000000000 [ 120.729620][ T5071] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 120.738290][ T5071] page dumped because: kasan: bad access detected [ 120.744871][ T5071] page_owner tracks the page as freed [ 120.750436][ T5071] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4522, ts 103184041690, free_ts 107625258374 [ 120.766330][ T5071] get_page_from_freelist+0x24f6/0x2670 [ 120.771912][ T5071] __alloc_pages+0x1ee/0x480 [ 120.776526][ T5071] alloc_pages_vma+0x2bc/0x790 [ 120.781328][ T5071] handle_mm_fault+0x23be/0x4440 [ 120.786287][ T5071] do_user_addr_fault+0x494/0xc90 [ 120.791346][ T5071] exc_page_fault+0x60/0x100 [ 120.796064][ T5071] asm_exc_page_fault+0x22/0x30 [ 120.801025][ T5071] page last free stack trace: [ 120.805803][ T5071] free_unref_page_prepare+0x637/0x6c0 [ 120.811293][ T5071] free_unref_page_list+0x119/0x830 [ 120.816748][ T5071] release_pages+0x185f/0x1bd0 [ 120.821536][ T5071] tlb_finish_mmu+0x1b4/0x370 [ 120.826244][ T5071] unmap_region+0x344/0x3b0 [ 120.830941][ T5071] __do_munmap+0xa29/0xe10 [ 120.835377][ T5071] __vm_munmap+0x13f/0x240 [ 120.839808][ T5071] __x64_sys_munmap+0x67/0x70 [ 120.844503][ T5071] do_syscall_64+0x4c/0xa0 [ 120.848933][ T5071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.854872][ T5071] [ 120.857208][ T5071] Memory state around the buggy address: [ 120.862856][ T5071] ffff88806b68c600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 120.871281][ T5071] ffff88806b68c680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 120.879381][ T5071] >ffff88806b68c700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 120.887557][ T5071] ^ [ 120.894262][ T5071] ffff88806b68c780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 120.902352][ T5071] ffff88806b68c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 120.910454][ T5071] ================================================================== [ 120.918529][ T5071] Disabling lock debugging due to kernel taint [ 120.928036][ T5071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.935307][ T5071] CPU: 1 PID: 5071 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 120.944038][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.954312][ T5071] Call Trace: [ 120.957715][ T5071] [ 120.960680][ T5071] dump_stack_lvl+0x188/0x250 [ 120.965661][ T5071] ? show_regs_print_info+0x20/0x20 [ 120.970932][ T5071] ? load_image+0x410/0x410 [ 120.975481][ T5071] panic+0x2f8/0x850 [ 120.979424][ T5071] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 120.985631][ T5071] ? bpf_jit_dump+0xd0/0xd0 [ 120.990171][ T5071] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 120.996186][ T5071] ? _raw_spin_unlock+0x40/0x40 [ 121.001163][ T5071] ? search_by_entry_key+0x5ae/0x1380 [ 121.006755][ T5071] check_panic_on_warn+0x80/0xa0 [ 121.011732][ T5071] ? search_by_entry_key+0x5ae/0x1380 [ 121.017170][ T5071] end_report+0x6d/0xf0 [ 121.021380][ T5071] kasan_report+0x102/0x130 [ 121.026120][ T5071] ? search_by_entry_key+0x5ae/0x1380 [ 121.031520][ T5071] search_by_entry_key+0x5ae/0x1380 [ 121.036756][ T5071] reiserfs_find_entry+0x2eb/0x18e0 [ 121.041990][ T5071] ? mutex_lock_io_nested+0x60/0x60 [ 121.047227][ T5071] ? mark_lock+0x94/0x320 [ 121.051598][ T5071] ? reiserfs_get_parent+0x2f0/0x2f0 [ 121.056944][ T5071] ? mutex_lock_nested+0x17/0x20 [ 121.062027][ T5071] reiserfs_lookup+0x1eb/0x480 [ 121.066837][ T5071] ? reiserfs_find_entry+0x18e0/0x18e0 [ 121.072360][ T5071] __lookup_slow+0x29d/0x410 [ 121.077598][ T5071] ? lookup_one_len+0x2d0/0x2d0 [ 121.082497][ T5071] lookup_one_len+0x19d/0x2d0 [ 121.087415][ T5071] ? lookup_one_common+0x460/0x460 [ 121.092738][ T5071] reiserfs_lookup_privroot+0x85/0x1e0 [ 121.098234][ T5071] reiserfs_fill_super+0x15da/0x2120 [ 121.103549][ T5071] ? reiserfs_kill_sb+0x140/0x140 [ 121.108582][ T5071] ? snprintf+0xe5/0x140 [ 121.112920][ T5071] ? vscnprintf+0x80/0x80 [ 121.117283][ T5071] ? up_write+0x1b6/0x410 [ 121.121942][ T5071] ? set_blocksize+0x1f1/0x360 [ 121.126744][ T5071] ? sb_set_blocksize+0xa5/0xe0 [ 121.131883][ T5071] mount_bdev+0x28a/0x3c0 [ 121.136232][ T5071] ? reiserfs_kill_sb+0x140/0x140 [ 121.141283][ T5071] legacy_get_tree+0xe6/0x180 [ 121.146169][ T5071] ? remove_save_link+0x3e0/0x3e0 [ 121.151219][ T5071] vfs_get_tree+0x88/0x270 [ 121.155647][ T5071] do_new_mount+0x247/0xa40 [ 121.160163][ T5071] __se_sys_mount+0x2e3/0x3d0 [ 121.164899][ T5071] ? __x64_sys_mount+0xc0/0xc0 [ 121.169676][ T5071] ? lockdep_hardirqs_on+0x94/0x140 [ 121.174882][ T5071] ? __x64_sys_mount+0x1c/0xc0 [ 121.179701][ T5071] do_syscall_64+0x4c/0xa0 [ 121.184155][ T5071] ? clear_bhb_loop+0x30/0x80 [ 121.188951][ T5071] ? clear_bhb_loop+0x30/0x80 [ 121.193727][ T5071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.199727][ T5071] RIP: 0033:0x7f07793abb8a [ 121.204161][ T5071] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.224075][ T5071] RSP: 002b:00007f0778610e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.232594][ T5071] RAX: ffffffffffffffda RBX: 00007f0778610ee0 RCX: 00007f07793abb8a [ 121.241058][ T5071] RDX: 0000200000000000 RSI: 0000200000000440 RDI: 00007f0778610ea0 [ 121.249183][ T5071] RBP: 0000200000000000 R08: 00007f0778610ee0 R09: 000000000120c081 [ 121.257172][ T5071] R10: 000000000120c081 R11: 0000000000000246 R12: 0000200000000440 [ 121.265251][ T5071] R13: 00007f0778610ea0 R14: 0000000000001108 R15: 0000200000000900 [ 121.273246][ T5071] [ 121.276753][ T5071] Kernel Offset: disabled [ 121.281126][ T5071] Rebooting in 86400 seconds..