Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. 2026/02/19 22:05:01 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 91.666504][ T4595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.954636][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.965059][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.977312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.992581][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.001095][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.008637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.475268][ T4622] chnl_net:caif_netlink_parms(): no params data found [ 93.529332][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.536473][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.544628][ T4622] device bridge_slave_0 entered promiscuous mode [ 93.553004][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.560197][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.568462][ T4622] device bridge_slave_1 entered promiscuous mode [ 93.593039][ T4622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.604563][ T4622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.633361][ T4622] team0: Port device team_slave_0 added [ 93.641336][ T4622] team0: Port device team_slave_1 added [ 93.663184][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.670211][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.696345][ T4622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.708975][ T4622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.715920][ T4622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.742621][ T4622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.777204][ T4622] device hsr_slave_0 entered promiscuous mode [ 93.784103][ T4622] device hsr_slave_1 entered promiscuous mode [ 94.384869][ T4622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.399852][ T4622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.417460][ T4622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.439433][ T4622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.579034][ T4622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.592525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.602382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.619139][ T4622] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.631232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.640557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.652964][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.660114][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.678459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.689019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.698122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.706639][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.713750][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.726942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.750613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.760411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.773865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.784909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.795573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.804810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.814734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.824378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.834174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.845131][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.856114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.015749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.023630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.035552][ T4622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.056793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.068074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.090407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.101652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.118427][ T4622] device veth0_vlan entered promiscuous mode [ 95.124782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.133422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.149470][ T4622] device veth1_vlan entered promiscuous mode [ 95.183892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.193874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.203463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.212927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.224715][ T4622] device veth0_macvtap entered promiscuous mode [ 95.246671][ T4622] device veth1_macvtap entered promiscuous mode [ 95.266647][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.274762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.284816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.294050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.303089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.316797][ T4622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.339238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.348494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.360714][ T4622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.370951][ T4622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.380235][ T4622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.390719][ T4622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.857767][ T4285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/19 22:05:10 executed programs: 0 [ 98.408996][ T4836] chnl_net:caif_netlink_parms(): no params data found [ 98.469775][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.476972][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.488205][ T4836] device bridge_slave_0 entered promiscuous mode [ 98.496728][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.506365][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.514816][ T4836] device bridge_slave_1 entered promiscuous mode [ 98.554931][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.571089][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.604232][ T4836] team0: Port device team_slave_0 added [ 98.612556][ T4836] team0: Port device team_slave_1 added [ 98.640467][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.647449][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.676159][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.698919][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.705893][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.734404][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.773029][ T4836] device hsr_slave_0 entered promiscuous mode [ 98.780203][ T4836] device hsr_slave_1 entered promiscuous mode [ 98.786906][ T4836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.797386][ T4836] Cannot create hsr debugfs directory [ 100.045494][ T4285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.105248][ T4285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.165325][ T4285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.287633][ T4237] Bluetooth: hci0: command 0x0409 tx timeout [ 100.952456][ T4836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.961311][ T4836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.971800][ T4836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.995409][ T4836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.041273][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.071651][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.080226][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.090994][ T4836] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.116059][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.125622][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.134392][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.141488][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.149871][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.160987][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.169838][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.178783][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.185872][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.200049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.216392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.229032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.239600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.248834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.272683][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.281881][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.294314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.302964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.313575][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.322802][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.333087][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.455423][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.463360][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.476408][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.510726][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.519792][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.535749][ T4285] device hsr_slave_0 left promiscuous mode [ 101.542170][ T4285] device hsr_slave_1 left promiscuous mode [ 101.548811][ T4285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.556247][ T4285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.564576][ T4285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.572627][ T4285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.580544][ T4285] device bridge_slave_1 left promiscuous mode [ 101.586693][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.596053][ T4285] device bridge_slave_0 left promiscuous mode [ 101.602483][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.614104][ T4285] device veth1_macvtap left promiscuous mode [ 101.620272][ T4285] device veth0_macvtap left promiscuous mode [ 101.626294][ T4285] device veth1_vlan left promiscuous mode [ 101.632460][ T4285] device veth0_vlan left promiscuous mode [ 101.755463][ T4285] team0 (unregistering): Port device team_slave_1 removed [ 101.766980][ T4285] team0 (unregistering): Port device team_slave_0 removed [ 101.782315][ T4285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.796102][ T4285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.846230][ T4285] bond0 (unregistering): Released all slaves [ 101.898090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.906882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.917234][ T4836] device veth0_vlan entered promiscuous mode [ 101.924211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.932350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.945451][ T4836] device veth1_vlan entered promiscuous mode [ 101.977450][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.985745][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.994764][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.003765][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.014619][ T4836] device veth0_macvtap entered promiscuous mode [ 102.024663][ T4836] device veth1_macvtap entered promiscuous mode [ 102.044923][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.053796][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.062899][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.071449][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.080266][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.095654][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.109051][ T4836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.117979][ T4836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.126694][ T4836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.135580][ T4836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.146378][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.155344][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.201579][ T1502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.212561][ T1502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.220836][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.245134][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.253344][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.262479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.352802][ T5031] loop0: detected capacity change from 0 to 8192 [ 102.368259][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 102.464918][ T5031] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 102.486834][ T5031] REISERFS (device loop0): using ordered data mode [ 102.496009][ T5031] reiserfs: using flush barriers [ 102.504007][ T5031] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.521569][ T5031] REISERFS (device loop0): checking transaction log (loop0) [ 102.650728][ T5031] REISERFS (device loop0): Using tea hash to sort names [ 102.661108][ T5031] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.692359][ T5031] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 102.711096][ T5031] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [6 7 0x0 SD] (nlink == 2) not found (pos 1) [ 102.732273][ T5031] ================================================================== [ 102.740536][ T5031] BUG: KASAN: use-after-free in search_by_entry_key+0x597/0x1370 [ 102.748278][ T5031] Read of size 4 at addr ffff888067d15fc4 by task syz.0.17/5031 [ 102.755905][ T5031] [ 102.758241][ T5031] CPU: 1 PID: 5031 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.765427][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.775485][ T5031] Call Trace: [ 102.778765][ T5031] [ 102.781690][ T5031] dump_stack_lvl+0x188/0x250 [ 102.786373][ T5031] ? show_regs_print_info+0x20/0x20 [ 102.791577][ T5031] ? _printk+0xda/0x130 [ 102.795747][ T5031] ? search_by_entry_key+0x597/0x1370 [ 102.801140][ T5031] ? load_image+0x400/0x400 [ 102.805648][ T5031] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 102.811114][ T5031] print_address_description+0x60/0x2d0 [ 102.816660][ T5031] ? search_by_entry_key+0x597/0x1370 [ 102.822027][ T5031] kasan_report+0xdf/0x130 [ 102.826443][ T5031] ? search_by_entry_key+0x597/0x1370 [ 102.831834][ T5031] search_by_entry_key+0x597/0x1370 [ 102.837058][ T5031] ? make_cpu_key+0x2b/0x220 [ 102.841653][ T5031] reiserfs_find_entry+0x2f2/0x18e0 [ 102.846873][ T5031] ? reiserfs_get_parent+0x2f0/0x2f0 [ 102.852168][ T5031] reiserfs_add_entry+0x6fc/0xe10 [ 102.857209][ T5031] ? drop_new_inode+0x60/0x60 [ 102.861923][ T5031] ? memcpy+0x3c/0x60 [ 102.865924][ T5031] ? journal_begin+0x2b1/0x350 [ 102.870690][ T5031] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 102.877128][ T5031] reiserfs_mkdir+0x6bc/0x920 [ 102.881812][ T5031] ? reiserfs_symlink+0x790/0x790 [ 102.886837][ T5031] ? lookup_one_len+0x19d/0x2d0 [ 102.891717][ T5031] open_xa_dir+0x56f/0x680 [ 102.896148][ T5031] ? listxattr_filler+0x410/0x410 [ 102.901266][ T5031] xattr_lookup+0x22/0x2a0 [ 102.905766][ T5031] ? reiserfs_xattr_set_handle+0xd2/0xf70 [ 102.911484][ T5031] reiserfs_xattr_set_handle+0x101/0xf70 [ 102.917128][ T5031] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 102.922755][ T5031] ? chown_one_xattr+0x90/0x90 [ 102.927514][ T5031] ? mutex_unlock+0x10/0x10 [ 102.932027][ T5031] ? journal_begin+0x1f1/0x350 [ 102.936788][ T5031] ? reiserfs_write_unlock+0xa2/0x110 [ 102.942165][ T5031] reiserfs_xattr_set+0x467/0x590 [ 102.947210][ T5031] ? reiserfs_get_page+0x400/0x400 [ 102.952332][ T5031] ? trusted_set+0x7d/0xe0 [ 102.956746][ T5031] ? trusted_get+0xc0/0xc0 [ 102.961173][ T5031] __vfs_setxattr+0x3e0/0x420 [ 102.965857][ T5031] __vfs_setxattr_noperm+0x129/0x5e0 [ 102.971145][ T5031] vfs_setxattr+0x167/0x2e0 [ 102.975651][ T5031] ? xattr_permission+0x500/0x500 [ 102.980674][ T5031] ? strncpy_from_user+0x1fb/0x360 [ 102.985790][ T5031] setxattr+0x36c/0x390 [ 102.989950][ T5031] ? path_setxattr+0x290/0x290 [ 102.994741][ T5031] ? sb_start_write+0x112/0x1c0 [ 102.999585][ T5031] ? mnt_want_write_file+0x166/0x200 [ 103.004871][ T5031] __se_sys_fsetxattr+0x15e/0x1d0 [ 103.009899][ T5031] do_syscall_64+0x4c/0xa0 [ 103.014310][ T5031] ? clear_bhb_loop+0x30/0x80 [ 103.018986][ T5031] ? clear_bhb_loop+0x30/0x80 [ 103.023658][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.029565][ T5031] RIP: 0033:0x7f32ba907ef9 [ 103.033977][ T5031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.053583][ T5031] RSP: 002b:00007f32b9f6b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 103.062109][ T5031] RAX: ffffffffffffffda RBX: 00007f32bab72fa0 RCX: 00007f32ba907ef9 [ 103.070167][ T5031] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000004 [ 103.078147][ T5031] RBP: 00007f32ba99cee0 R08: 0000000000000003 R09: 0000000000000000 [ 103.086115][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.094087][ T5031] R13: 00007f32bab73038 R14: 00007f32bab72fa0 R15: 00007ffdd3725f68 [ 103.102078][ T5031] [ 103.105091][ T5031] [ 103.107405][ T5031] The buggy address belongs to the page: [ 103.113031][ T5031] page:ffffea00019f4540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x67d15 [ 103.123273][ T5031] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.130421][ T5031] raw: 00fff00000000000 ffffea00019f4588 ffffea00019f4508 0000000000000000 [ 103.139008][ T5031] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 103.147582][ T5031] page dumped because: kasan: bad access detected [ 103.153995][ T5031] page_owner tracks the page as freed [ 103.159354][ T5031] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4609, ts 93065835512, free_ts 93204540561 [ 103.173916][ T5031] get_page_from_freelist+0x1bbd/0x1ca0 [ 103.179718][ T5031] __alloc_pages+0x1ee/0x480 [ 103.184287][ T5031] alloc_pages_vma+0x393/0x7c0 [ 103.189031][ T5031] handle_mm_fault+0x1bd4/0x4410 [ 103.193960][ T5031] do_user_addr_fault+0x489/0xc80 [ 103.199077][ T5031] exc_page_fault+0x60/0x100 [ 103.203650][ T5031] asm_exc_page_fault+0x22/0x30 [ 103.208486][ T5031] page last free stack trace: [ 103.213393][ T5031] free_unref_page_prepare+0x637/0x6c0 [ 103.218852][ T5031] free_unref_page_list+0x119/0x820 [ 103.224038][ T5031] release_pages+0x186c/0x1be0 [ 103.228788][ T5031] tlb_finish_mmu+0x176/0x300 [ 103.233447][ T5031] exit_mmap+0x3d0/0x640 [ 103.237679][ T5031] __mmput+0x115/0x3b0 [ 103.241745][ T5031] exit_mm+0x588/0x6e0 [ 103.245799][ T5031] do_exit+0x5a9/0x20c0 [ 103.249939][ T5031] do_group_exit+0x12e/0x300 [ 103.254521][ T5031] get_signal+0x6ca/0x12c0 [ 103.258962][ T5031] arch_do_signal_or_restart+0xe7/0x12c0 [ 103.264673][ T5031] exit_to_user_mode_loop+0x9e/0x130 [ 103.270112][ T5031] exit_to_user_mode_prepare+0xee/0x180 [ 103.275634][ T5031] syscall_exit_to_user_mode+0x16/0x40 [ 103.281075][ T5031] do_syscall_64+0x58/0xa0 [ 103.285469][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.291430][ T5031] [ 103.293734][ T5031] Memory state around the buggy address: [ 103.299339][ T5031] ffff888067d15e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.307384][ T5031] ffff888067d15f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.315440][ T5031] >ffff888067d15f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.323561][ T5031] ^ [ 103.329690][ T5031] ffff888067d16000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.337728][ T5031] ffff888067d16080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.345765][ T5031] ================================================================== [ 103.353802][ T5031] Disabling lock debugging due to kernel taint [ 103.378324][ T5031] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.385549][ T5031] CPU: 0 PID: 5031 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 103.394138][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.404194][ T5031] Call Trace: [ 103.407466][ T5031] [ 103.410387][ T5031] dump_stack_lvl+0x188/0x250 [ 103.415049][ T5031] ? show_regs_print_info+0x20/0x20 [ 103.420224][ T5031] ? load_image+0x400/0x400 [ 103.424707][ T5031] panic+0x2e5/0x810 [ 103.428579][ T5031] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.434720][ T5031] ? bpf_jit_dump+0xd0/0xd0 [ 103.439203][ T5031] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 103.445269][ T5031] ? _raw_spin_unlock+0x40/0x40 [ 103.450095][ T5031] ? search_by_entry_key+0x597/0x1370 [ 103.455449][ T5031] check_panic_on_warn+0x80/0xa0 [ 103.460401][ T5031] ? search_by_entry_key+0x597/0x1370 [ 103.465838][ T5031] end_report+0x6d/0xf0 [ 103.469978][ T5031] kasan_report+0x102/0x130 [ 103.474472][ T5031] ? search_by_entry_key+0x597/0x1370 [ 103.479824][ T5031] search_by_entry_key+0x597/0x1370 [ 103.485101][ T5031] ? make_cpu_key+0x2b/0x220 [ 103.489671][ T5031] reiserfs_find_entry+0x2f2/0x18e0 [ 103.494853][ T5031] ? reiserfs_get_parent+0x2f0/0x2f0 [ 103.500119][ T5031] reiserfs_add_entry+0x6fc/0xe10 [ 103.505127][ T5031] ? drop_new_inode+0x60/0x60 [ 103.509788][ T5031] ? memcpy+0x3c/0x60 [ 103.513746][ T5031] ? journal_begin+0x2b1/0x350 [ 103.518488][ T5031] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 103.524879][ T5031] reiserfs_mkdir+0x6bc/0x920 [ 103.529536][ T5031] ? reiserfs_symlink+0x790/0x790 [ 103.534548][ T5031] ? lookup_one_len+0x19d/0x2d0 [ 103.539391][ T5031] open_xa_dir+0x56f/0x680 [ 103.543788][ T5031] ? listxattr_filler+0x410/0x410 [ 103.548792][ T5031] xattr_lookup+0x22/0x2a0 [ 103.553186][ T5031] ? reiserfs_xattr_set_handle+0xd2/0xf70 [ 103.558977][ T5031] reiserfs_xattr_set_handle+0x101/0xf70 [ 103.564770][ T5031] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 103.570387][ T5031] ? chown_one_xattr+0x90/0x90 [ 103.575131][ T5031] ? mutex_unlock+0x10/0x10 [ 103.579747][ T5031] ? journal_begin+0x1f1/0x350 [ 103.584507][ T5031] ? reiserfs_write_unlock+0xa2/0x110 [ 103.589990][ T5031] reiserfs_xattr_set+0x467/0x590 [ 103.595019][ T5031] ? reiserfs_get_page+0x400/0x400 [ 103.600129][ T5031] ? trusted_set+0x7d/0xe0 [ 103.604544][ T5031] ? trusted_get+0xc0/0xc0 [ 103.608952][ T5031] __vfs_setxattr+0x3e0/0x420 [ 103.613617][ T5031] __vfs_setxattr_noperm+0x129/0x5e0 [ 103.618885][ T5031] vfs_setxattr+0x167/0x2e0 [ 103.623372][ T5031] ? xattr_permission+0x500/0x500 [ 103.628375][ T5031] ? strncpy_from_user+0x1fb/0x360 [ 103.633558][ T5031] setxattr+0x36c/0x390 [ 103.637717][ T5031] ? path_setxattr+0x290/0x290 [ 103.642489][ T5031] ? sb_start_write+0x112/0x1c0 [ 103.647331][ T5031] ? mnt_want_write_file+0x166/0x200 [ 103.652610][ T5031] __se_sys_fsetxattr+0x15e/0x1d0 [ 103.657629][ T5031] do_syscall_64+0x4c/0xa0 [ 103.662046][ T5031] ? clear_bhb_loop+0x30/0x80 [ 103.666701][ T5031] ? clear_bhb_loop+0x30/0x80 [ 103.671359][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.677231][ T5031] RIP: 0033:0x7f32ba907ef9 [ 103.681627][ T5031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.701218][ T5031] RSP: 002b:00007f32b9f6b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 103.709626][ T5031] RAX: ffffffffffffffda RBX: 00007f32bab72fa0 RCX: 00007f32ba907ef9 [ 103.717582][ T5031] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000004 [ 103.725549][ T5031] RBP: 00007f32ba99cee0 R08: 0000000000000003 R09: 0000000000000000 [ 103.733502][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.741456][ T5031] R13: 00007f32bab73038 R14: 00007f32bab72fa0 R15: 00007ffdd3725f68 [ 103.749413][ T5031] [ 103.752768][ T5031] Kernel Offset: disabled [ 103.757089][ T5031] Rebooting in 86400 seconds..