[ 81.914013][ T923] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. 2023/12/05 13:30:43 ignoring optional flag "sandboxArg"="0" 2023/12/05 13:30:43 parsed 1 programs 2023/12/05 13:30:45 executed programs: 0 [ 86.470894][ T5410] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.523549][ T4460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.532563][ T4460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.541088][ T4460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.550236][ T4460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.558553][ T4460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.566433][ T4460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.681222][ T5417] chnl_net:caif_netlink_parms(): no params data found [ 86.734713][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.741999][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.749760][ T5417] bridge_slave_0: entered allmulticast mode [ 86.757278][ T5417] bridge_slave_0: entered promiscuous mode [ 86.765558][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.773384][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.780958][ T5417] bridge_slave_1: entered allmulticast mode [ 86.788160][ T5417] bridge_slave_1: entered promiscuous mode [ 86.813457][ T5417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.825598][ T5417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.851929][ T5417] team0: Port device team_slave_0 added [ 86.860500][ T5417] team0: Port device team_slave_1 added [ 86.883752][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.890963][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.917557][ T5417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.930701][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.938175][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.964924][ T5417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.000067][ T5417] hsr_slave_0: entered promiscuous mode [ 87.007182][ T5417] hsr_slave_1: entered promiscuous mode [ 87.722838][ T5417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.742751][ T5417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.763485][ T5417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.776501][ T5417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.875432][ T5417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.899413][ T5417] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.913937][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.921252][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.950877][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.958212][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.166720][ T5417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.225236][ T5417] veth0_vlan: entered promiscuous mode [ 88.239062][ T5417] veth1_vlan: entered promiscuous mode [ 88.280313][ T5417] veth0_macvtap: entered promiscuous mode [ 88.292475][ T5417] veth1_macvtap: entered promiscuous mode [ 88.316741][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.337203][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.352555][ T5417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.364439][ T5417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.376389][ T5417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.386283][ T5417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.481914][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.501609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.535195][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.543432][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.634795][ T5064] Bluetooth: hci0: command 0x0409 tx timeout [ 88.687845][ T5484] loop0: detected capacity change from 0 to 8192 [ 88.702039][ T5484] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.720394][ T5484] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 88.730667][ T5484] REISERFS (device loop0): using ordered data mode [ 88.738212][ T5484] reiserfs: using flush barriers [ 88.747947][ T5484] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.767520][ T5484] REISERFS (device loop0): checking transaction log (loop0) [ 88.876055][ T5484] REISERFS (device loop0): Using tea hash to sort names [ 88.887058][ T5484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 88.902331][ T5484] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 88.923257][ T5484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 88.946285][ T5484] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.217764][ T5505] loop0: detected capacity change from 0 to 8192 [ 89.230018][ T5505] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.244377][ T5505] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 89.254043][ T5505] REISERFS (device loop0): using ordered data mode [ 89.260695][ T5505] reiserfs: using flush barriers [ 89.267848][ T5505] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.285717][ T5505] REISERFS (device loop0): checking transaction log (loop0) [ 89.376605][ T5505] REISERFS (device loop0): Using tea hash to sort names [ 89.384170][ T5505] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.399517][ T5505] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 89.414633][ T5505] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.443465][ T5505] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.677996][ T5524] loop0: detected capacity change from 0 to 8192 [ 89.687703][ T5524] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.704141][ T5524] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 89.716207][ T5524] REISERFS (device loop0): using ordered data mode [ 89.725119][ T5524] reiserfs: using flush barriers [ 89.732187][ T5524] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.751235][ T5524] REISERFS (device loop0): checking transaction log (loop0) [ 89.869700][ T5524] REISERFS (device loop0): Using tea hash to sort names [ 89.878957][ T5524] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.894974][ T5524] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 89.921838][ T5524] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 89.955716][ T5524] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.185961][ T5544] loop0: detected capacity change from 0 to 8192 [ 90.196752][ T5544] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.211465][ T5544] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 90.221227][ T5544] REISERFS (device loop0): using ordered data mode [ 90.229584][ T5544] reiserfs: using flush barriers [ 90.238931][ T5544] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.256667][ T5544] REISERFS (device loop0): checking transaction log (loop0) [ 90.343189][ T5544] REISERFS (device loop0): Using tea hash to sort names [ 90.351044][ T5544] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.367666][ T5544] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.386689][ T5544] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.413347][ T5544] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.650319][ T5563] loop0: detected capacity change from 0 to 8192 [ 90.661487][ T5563] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.675038][ T5563] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 90.684592][ T5563] REISERFS (device loop0): using ordered data mode [ 90.691596][ T5563] reiserfs: using flush barriers [ 90.698660][ T5563] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.713827][ T5064] Bluetooth: hci0: command 0x041b tx timeout [ 90.717167][ T5563] REISERFS (device loop0): checking transaction log (loop0) [ 90.826862][ T5563] REISERFS (device loop0): Using tea hash to sort names [ 90.836397][ T5563] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.851325][ T5563] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 90.883789][ T5563] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 90.914432][ T5563] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.138725][ T5585] loop0: detected capacity change from 0 to 8192 [ 91.158675][ T5585] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.174120][ T5585] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 91.184011][ T5585] REISERFS (device loop0): using ordered data mode [ 91.190632][ T5585] reiserfs: using flush barriers [ 91.198291][ T5585] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.218324][ T5585] REISERFS (device loop0): checking transaction log (loop0) [ 91.336347][ T5585] REISERFS (device loop0): Using tea hash to sort names [ 91.343983][ T5585] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.359849][ T5585] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 91.371465][ T5585] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.389036][ T5585] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.593796][ T5603] loop0: detected capacity change from 0 to 8192 [ 91.614134][ T5603] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.628863][ T5603] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 91.648716][ T5603] REISERFS (device loop0): using ordered data mode [ 91.657219][ T5603] reiserfs: using flush barriers [ 91.665633][ T5603] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.683666][ T5603] REISERFS (device loop0): checking transaction log (loop0) [ 91.769323][ T5603] REISERFS (device loop0): Using tea hash to sort names [ 91.779948][ T5603] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.794693][ T5603] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. 2023/12/05 13:30:50 executed programs: 7 [ 91.806878][ T5603] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 91.821721][ T5603] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.021865][ T5619] loop0: detected capacity change from 0 to 8192 [ 92.034325][ T5619] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.048099][ T5619] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 92.059179][ T5619] REISERFS (device loop0): using ordered data mode [ 92.066449][ T5619] reiserfs: using flush barriers [ 92.074716][ T5619] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.092425][ T5619] REISERFS (device loop0): checking transaction log (loop0) [ 92.183060][ T5619] REISERFS (device loop0): Using tea hash to sort names [ 92.190898][ T5619] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.205779][ T5619] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 92.218512][ T5619] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.234799][ T5619] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.442109][ T5635] loop0: detected capacity change from 0 to 8192 [ 92.453611][ T5635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.468322][ T5635] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 92.478063][ T5635] REISERFS (device loop0): using ordered data mode [ 92.485060][ T5635] reiserfs: using flush barriers [ 92.492270][ T5635] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.512618][ T5635] REISERFS (device loop0): checking transaction log (loop0) [ 92.623099][ T5635] REISERFS (device loop0): Using tea hash to sort names [ 92.630776][ T5635] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.647964][ T5635] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 92.665109][ T5635] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.687381][ T5635] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.704398][ T5635] ================================================================== [ 92.712672][ T5635] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x510/0x770 [ 92.720860][ T5635] Read of size 7172 at addr ffff88807060b050 by task syz-executor.0/5635 [ 92.729304][ T5635] [ 92.731651][ T5635] CPU: 0 PID: 5635 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0 [ 92.742340][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 92.752502][ T5635] Call Trace: [ 92.755800][ T5635] [ 92.758747][ T5635] dump_stack_lvl+0x1e7/0x2d0 [ 92.763462][ T5635] ? nf_tcp_handle_invalid+0x650/0x650 [ 92.769041][ T5635] ? panic+0x850/0x850 [ 92.773476][ T5635] ? _printk+0xd5/0x120 [ 92.777665][ T5635] print_report+0x163/0x540 [ 92.782463][ T5635] ? __virt_addr_valid+0x22f/0x2e0 [ 92.787609][ T5635] ? __phys_addr+0xba/0x170 [ 92.792142][ T5635] ? reiserfs_release_objectid+0x510/0x770 [ 92.792809][ T5064] Bluetooth: hci0: command 0x040f tx timeout [ 92.798047][ T5635] kasan_report+0x142/0x170 [ 92.798072][ T5635] ? reiserfs_release_objectid+0x510/0x770 [ 92.815489][ T5635] kasan_check_range+0x27e/0x290 [ 92.820536][ T5635] ? reiserfs_release_objectid+0x510/0x770 [ 92.826472][ T5635] __asan_memmove+0x29/0x70 [ 92.831076][ T5635] reiserfs_release_objectid+0x510/0x770 [ 92.836917][ T5635] remove_save_link+0x357/0x540 [ 92.841973][ T5635] ? reiserfs_write_lock_nested+0x5f/0xd0 [ 92.847895][ T5635] ? add_save_link+0x7c0/0x7c0 [ 92.852689][ T5635] ? journal_end+0x20b/0x2c0 [ 92.857403][ T5635] reiserfs_evict_inode+0x362/0x470 [ 92.862647][ T5635] ? entry_points_to_object+0x6f0/0x6f0 [ 92.868304][ T5635] ? do_raw_spin_unlock+0x13b/0x8b0 [ 92.873546][ T5635] ? entry_points_to_object+0x6f0/0x6f0 [ 92.879216][ T5635] evict+0x2a4/0x630 [ 92.883429][ T5635] vfs_rmdir+0x385/0x4c0 [ 92.887696][ T5635] do_rmdir+0x3b5/0x580 [ 92.891876][ T5635] ? d_delete_notify+0x150/0x150 [ 92.897272][ T5635] ? strncpy_from_user+0x1a5/0x2e0 [ 92.902634][ T5635] __x64_sys_rmdir+0x49/0x50 [ 92.907622][ T5635] do_syscall_64+0x45/0x110 [ 92.912244][ T5635] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 92.918257][ T5635] RIP: 0033:0x7f60ef67cae9 [ 92.922787][ T5635] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 92.943129][ T5635] RSP: 002b:00007f60f03cf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 92.951935][ T5635] RAX: ffffffffffffffda RBX: 00007f60ef79bf80 RCX: 00007f60ef67cae9 [ 92.960036][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 92.968040][ T5635] RBP: 00007f60ef6c847a R08: 0000000000000000 R09: 0000000000000000 [ 92.976031][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.984051][ T5635] R13: 000000000000000b R14: 00007f60ef79bf80 R15: 00007ffdc44abed8 [ 92.992064][ T5635] [ 92.995165][ T5635] [ 92.997584][ T5635] The buggy address belongs to the physical page: [ 93.004012][ T5635] page:ffffea0001c182c0 refcount:2 mapcount:0 mapping:ffff888148cc8878 index:0x10 pfn:0x7060b [ 93.014355][ T5635] memcg:ffff88801f796000 [ 93.018731][ T5635] aops:def_blk_aops ino:700000 [ 93.023514][ T5635] flags: 0xfff0000002812c(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 93.036052][ T5635] page_type: 0xffffffff() [ 93.040541][ T5635] raw: 00fff0000002812c ffffea0001976bc8 ffffea0001bce8c8 ffff888148cc8878 [ 93.049229][ T5635] raw: 0000000000000010 ffff888067a7ecb0 00000002ffffffff ffff88801f796000 [ 93.058009][ T5635] page dumped because: kasan: bad access detected [ 93.064525][ T5635] page_owner tracks the page as allocated [ 93.070264][ T5635] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5635, tgid 5634 (syz-executor.0), ts 92452213370, free_ts 92450620664 [ 93.091302][ T5635] post_alloc_hook+0x1e6/0x210 [ 93.096200][ T5635] get_page_from_freelist+0x33ea/0x3570 [ 93.101770][ T5635] __alloc_pages+0x255/0x680 [ 93.106417][ T5635] alloc_pages_mpol+0x3de/0x640 [ 93.111304][ T5635] folio_alloc+0x12a/0x330 [ 93.115821][ T5635] filemap_alloc_folio+0xde/0x500 [ 93.120872][ T5635] __filemap_get_folio+0x431/0xbb0 [ 93.126177][ T5635] bdev_getblk+0x243/0x6d0 [ 93.130709][ T5635] __bread_gfp+0xac/0x420 [ 93.135145][ T5635] read_super_block+0x91/0x800 [ 93.139947][ T5635] reiserfs_fill_super+0x912/0x2620 [ 93.145175][ T5635] mount_bdev+0x237/0x300 [ 93.149531][ T5635] legacy_get_tree+0xef/0x190 [ 93.154493][ T5635] vfs_get_tree+0x8c/0x2a0 [ 93.159015][ T5635] do_new_mount+0x28f/0xae0 [ 93.163539][ T5635] __se_sys_mount+0x2d9/0x3c0 [ 93.168240][ T5635] page last free stack trace: [ 93.173267][ T5635] free_unref_page_prepare+0x931/0xa60 [ 93.178742][ T5635] free_unref_page_list+0x5a0/0x840 [ 93.183958][ T5635] release_pages+0x2117/0x2400 [ 93.188745][ T5635] tlb_flush_mmu+0x34c/0x4e0 [ 93.193440][ T5635] tlb_finish_mmu+0xd4/0x1f0 [ 93.198045][ T5635] exit_mmap+0x4d3/0xc60 [ 93.202482][ T5635] __mmput+0x115/0x3c0 [ 93.209956][ T5635] exit_mm+0x21f/0x300 [ 93.214053][ T5635] do_exit+0x9b7/0x2750 [ 93.218330][ T5635] do_group_exit+0x206/0x2c0 [ 93.223123][ T5635] __x64_sys_exit_group+0x3f/0x40 [ 93.228263][ T5635] do_syscall_64+0x45/0x110 [ 93.232882][ T5635] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 93.239258][ T5635] [ 93.241683][ T5635] Memory state around the buggy address: [ 93.247328][ T5635] ffff88807060bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.255757][ T5635] ffff88807060bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.263918][ T5635] >ffff88807060c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.272159][ T5635] ^ [ 93.276237][ T5635] ffff88807060c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.284485][ T5635] ffff88807060c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.292800][ T5635] ================================================================== [ 93.318967][ T5635] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.326469][ T5635] CPU: 0 PID: 5635 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0 [ 93.337292][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 93.348068][ T5635] Call Trace: [ 93.351433][ T5635] [ 93.354474][ T5635] dump_stack_lvl+0x1e7/0x2d0 [ 93.359625][ T5635] ? nf_tcp_handle_invalid+0x650/0x650 [ 93.365126][ T5635] ? panic+0x850/0x850 [ 93.369413][ T5635] ? vscnprintf+0x5d/0x80 [ 93.374041][ T5635] panic+0x349/0x850 [ 93.378143][ T5635] ? check_panic_on_warn+0x21/0xa0 [ 93.383486][ T5635] ? __memcpy_flushcache+0x2b0/0x2b0 [ 93.389086][ T5635] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 93.395500][ T5635] ? _raw_spin_unlock+0x40/0x40 [ 93.400751][ T5635] ? print_report+0x4fb/0x540 [ 93.405839][ T5635] check_panic_on_warn+0x82/0xa0 [ 93.410806][ T5635] ? reiserfs_release_objectid+0x510/0x770 [ 93.417104][ T5635] end_report+0x6e/0x140 [ 93.421463][ T5635] kasan_report+0x153/0x170 [ 93.426217][ T5635] ? reiserfs_release_objectid+0x510/0x770 [ 93.432233][ T5635] kasan_check_range+0x27e/0x290 [ 93.437544][ T5635] ? reiserfs_release_objectid+0x510/0x770 [ 93.443641][ T5635] __asan_memmove+0x29/0x70 [ 93.448273][ T5635] reiserfs_release_objectid+0x510/0x770 [ 93.453943][ T5635] remove_save_link+0x357/0x540 [ 93.458920][ T5635] ? reiserfs_write_lock_nested+0x5f/0xd0 [ 93.464755][ T5635] ? add_save_link+0x7c0/0x7c0 [ 93.469556][ T5635] ? journal_end+0x20b/0x2c0 [ 93.474362][ T5635] reiserfs_evict_inode+0x362/0x470 [ 93.479771][ T5635] ? entry_points_to_object+0x6f0/0x6f0 [ 93.485692][ T5635] ? do_raw_spin_unlock+0x13b/0x8b0 [ 93.491088][ T5635] ? entry_points_to_object+0x6f0/0x6f0 [ 93.496839][ T5635] evict+0x2a4/0x630 [ 93.500853][ T5635] vfs_rmdir+0x385/0x4c0 [ 93.505385][ T5635] do_rmdir+0x3b5/0x580 [ 93.509661][ T5635] ? d_delete_notify+0x150/0x150 [ 93.514884][ T5635] ? strncpy_from_user+0x1a5/0x2e0 [ 93.520207][ T5635] __x64_sys_rmdir+0x49/0x50 [ 93.525093][ T5635] do_syscall_64+0x45/0x110 [ 93.529811][ T5635] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 93.536378][ T5635] RIP: 0033:0x7f60ef67cae9 [ 93.540918][ T5635] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 93.561332][ T5635] RSP: 002b:00007f60f03cf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 93.570206][ T5635] RAX: ffffffffffffffda RBX: 00007f60ef79bf80 RCX: 00007f60ef67cae9 [ 93.578303][ T5635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 93.586750][ T5635] RBP: 00007f60ef6c847a R08: 0000000000000000 R09: 0000000000000000 [ 93.595466][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.603912][ T5635] R13: 000000000000000b R14: 00007f60ef79bf80 R15: 00007ffdc44abed8 [ 93.612263][ T5635] [ 93.615923][ T5635] Kernel Offset: disabled [ 93.620346][ T5635] Rebooting in 86400 seconds..