Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. 2025/12/05 07:53:52 parsed 1 programs [ 88.177036][ T4870] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 90.475487][ T4913] chnl_net:caif_netlink_parms(): no params data found [ 90.484386][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.492537][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.526733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.635532][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.643565][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.768774][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.948891][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.961523][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.999969][ T4913] device bridge_slave_0 entered promiscuous mode [ 91.060316][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.073457][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.096069][ T4913] device bridge_slave_1 entered promiscuous mode [ 91.159965][ T4913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.176368][ T4913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.215392][ T4913] team0: Port device team_slave_0 added [ 91.235666][ T4913] team0: Port device team_slave_1 added [ 91.276324][ T4913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.294062][ T4913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.343963][ T4913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.373686][ T4913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.396217][ T4913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.461021][ T4913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.527361][ T4913] device hsr_slave_0 entered promiscuous mode [ 91.545283][ T4913] device hsr_slave_1 entered promiscuous mode [ 91.730309][ T4913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.740266][ T4913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.750266][ T4913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.760464][ T4913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.830773][ T4913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.847509][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.855915][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.866842][ T4913] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.878187][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.888501][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.897913][ T1493] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.905039][ T1493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.915736][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.927327][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.937877][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.947520][ T1493] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.954805][ T1493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.966020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.978269][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.996084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.009567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.020507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.030363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.043700][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.058602][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.069863][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.175359][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.183066][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.197195][ T4913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.219227][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.230927][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.252652][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.262941][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.274310][ T4913] device veth0_vlan entered promiscuous mode [ 92.302276][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.310989][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.320523][ T4913] device veth1_vlan entered promiscuous mode [ 92.352794][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.363357][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.371953][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.382170][ T1493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.393809][ T4913] device veth0_macvtap entered promiscuous mode [ 92.410795][ T4913] device veth1_macvtap entered promiscuous mode [ 92.430910][ T4913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.440011][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.449422][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.458562][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.469117][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.486517][ T4913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.496791][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.508516][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.522137][ T4913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.531298][ T4913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540202][ T4913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549044][ T4913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/12/05 07:53:59 executed programs: 0 [ 92.675075][ T4913] syz-executor (4913) used greatest stack depth: 19968 bytes left [ 93.090800][ T4970] chnl_net:caif_netlink_parms(): no params data found [ 93.157256][ T4978] chnl_net:caif_netlink_parms(): no params data found [ 93.229492][ T4969] chnl_net:caif_netlink_parms(): no params data found [ 93.259416][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.266674][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.275728][ T4970] device bridge_slave_0 entered promiscuous mode [ 93.289510][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.296745][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.305080][ T4970] device bridge_slave_1 entered promiscuous mode [ 93.354073][ T4978] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.361264][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.375541][ T4978] device bridge_slave_0 entered promiscuous mode [ 93.390179][ T4974] chnl_net:caif_netlink_parms(): no params data found [ 93.404636][ T4970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.417565][ T4976] chnl_net:caif_netlink_parms(): no params data found [ 93.426440][ T4978] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.433590][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.442111][ T4978] device bridge_slave_1 entered promiscuous mode [ 93.475718][ T4970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.518955][ T4978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.533599][ T4978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.565475][ T4970] team0: Port device team_slave_0 added [ 93.573140][ T4970] team0: Port device team_slave_1 added [ 93.634140][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.641145][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.667673][ T4970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.679974][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.688513][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.696843][ T4969] device bridge_slave_0 entered promiscuous mode [ 93.707385][ T4978] team0: Port device team_slave_0 added [ 93.724821][ T4970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.732026][ T4970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.758551][ T4970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.770256][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.777731][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.785898][ T4969] device bridge_slave_1 entered promiscuous mode [ 93.802296][ T4978] team0: Port device team_slave_1 added [ 93.863382][ T4969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.875768][ T4969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.899271][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.907113][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.916517][ T4974] device bridge_slave_0 entered promiscuous mode [ 93.946654][ T4976] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.953728][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.962105][ T4976] device bridge_slave_0 entered promiscuous mode [ 93.970747][ T4978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.978334][ T4978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.004762][ T4978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.018582][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.027144][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.035767][ T4974] device bridge_slave_1 entered promiscuous mode [ 94.046305][ T4970] device hsr_slave_0 entered promiscuous mode [ 94.053114][ T4970] device hsr_slave_1 entered promiscuous mode [ 94.059840][ T4970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.067526][ T4970] Cannot create hsr debugfs directory [ 94.087856][ T4969] team0: Port device team_slave_0 added [ 94.094229][ T4976] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.101470][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.109941][ T4976] device bridge_slave_1 entered promiscuous mode [ 94.118042][ T4978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.125198][ T4978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.151712][ T4978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.193395][ T4969] team0: Port device team_slave_1 added [ 94.241963][ T4978] device hsr_slave_0 entered promiscuous mode [ 94.249108][ T4978] device hsr_slave_1 entered promiscuous mode [ 94.256081][ T4978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.263667][ T4978] Cannot create hsr debugfs directory [ 94.280499][ T4974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.318922][ T4976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.346770][ T4974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.356649][ T4969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.363604][ T4969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.390200][ T4969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.405905][ T4976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.436967][ T4969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.444355][ T4969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.470684][ T4969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.525908][ T4974] team0: Port device team_slave_0 added [ 94.535462][ T4976] team0: Port device team_slave_0 added [ 94.580550][ T4974] team0: Port device team_slave_1 added [ 94.594866][ T4976] team0: Port device team_slave_1 added [ 94.658681][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.665724][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.691957][ T4974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.703800][ T4976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.711089][ T4976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.739146][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 94.747051][ T4976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.762875][ T4976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.770672][ T4976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.797236][ T4976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.818532][ T4969] device hsr_slave_0 entered promiscuous mode [ 94.825635][ T4961] Bluetooth: hci2: command 0x0409 tx timeout [ 94.832075][ T4961] Bluetooth: hci1: command 0x0409 tx timeout [ 94.832617][ T4969] device hsr_slave_1 entered promiscuous mode [ 94.838717][ T4961] Bluetooth: hci3: command 0x0409 tx timeout [ 94.851270][ T4969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.859461][ T4969] Cannot create hsr debugfs directory [ 94.890925][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.898285][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 94.899939][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.931066][ T4974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.022330][ T4976] device hsr_slave_0 entered promiscuous mode [ 95.030108][ T4976] device hsr_slave_1 entered promiscuous mode [ 95.037303][ T4976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.045419][ T4976] Cannot create hsr debugfs directory [ 95.117923][ T4974] device hsr_slave_0 entered promiscuous mode [ 95.125502][ T4974] device hsr_slave_1 entered promiscuous mode [ 95.131966][ T4974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.139587][ T4974] Cannot create hsr debugfs directory [ 95.231684][ T4970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.249851][ T4970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.273707][ T4970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.307559][ T4970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.459314][ T4978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.531128][ T4978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.575786][ T4978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.591396][ T4978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.665599][ T4970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.686831][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.705269][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.716846][ T4970] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.791449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.801283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.811472][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.818600][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.830375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.839813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.849170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.858494][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.865826][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.902389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.914141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.923327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.937437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.988529][ T4970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.001019][ T4970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.016655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.026253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.036236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.045409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.054376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.063106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.073449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.102588][ T4974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.128652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.192440][ T4978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.213175][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.225610][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.244253][ T4978] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.262684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.272228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.294763][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.301874][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.329615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.338370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.347741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.363285][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.370455][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.401721][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.410819][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.434637][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.445962][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.455028][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.463821][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.472906][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.482361][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.491187][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.500623][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.518953][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.527737][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.538947][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.547193][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.567474][ T4970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.630316][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.640018][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.688182][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.722461][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.734296][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.763349][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.777224][ T4970] device veth0_vlan entered promiscuous mode [ 96.812435][ T4970] device veth1_vlan entered promiscuous mode [ 96.820360][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 96.883208][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.891694][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.902937][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 96.914286][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 96.927594][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 96.934720][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.943258][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.956113][ T4970] device veth0_macvtap entered promiscuous mode [ 96.974452][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 96.988736][ T4970] device veth1_macvtap entered promiscuous mode [ 97.007051][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.041112][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.059531][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.068546][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.091488][ T4978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.119856][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.152432][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.180894][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.197620][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.217509][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.237709][ T4970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.280495][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.303203][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.326118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.345115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.374917][ T4970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.383628][ T4970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.413254][ T4970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.430584][ T4970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.525194][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.546005][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.575631][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.583744][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.608265][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.642241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.651581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.675080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.683040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.707255][ T4978] device veth0_vlan entered promiscuous mode [ 97.727295][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.742017][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.763542][ T4978] device veth1_vlan entered promiscuous mode [ 97.781486][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.804640][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/05 07:54:04 executed programs: 10 [ 97.851468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.861542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.908486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.947021][ T4978] device veth0_macvtap entered promiscuous mode [ 97.972990][ T4978] device veth1_macvtap entered promiscuous mode [ 98.021752][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.060274][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.074559][ T5098] loop1: detected capacity change from 0 to 8192 [ 98.083170][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.103147][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.116432][ T4978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.133932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.142993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.157406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.199392][ T5098] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 98.211309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.214484][ T5098] REISERFS (device loop1): using ordered data mode [ 98.236660][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.247328][ T5098] reiserfs: using flush barriers [ 98.269135][ T5098] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.293938][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.303799][ T4978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.324741][ T5098] REISERFS (device loop1): checking transaction log (loop1) [ 98.361832][ T4978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.377854][ T4978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.394601][ T5098] REISERFS (device loop1): Using rupasov hash to sort names [ 98.402499][ T5098] REISERFS (device loop1): using 3.5.x disk format [ 98.410807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.421177][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.433524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.434438][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.453320][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.464626][ T5098] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 98.481515][ T4978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.497534][ T4978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.506567][ T5098] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 98.516909][ T4978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.555874][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.568613][ T4978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.594407][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.644599][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.649655][ T4974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.678799][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.692940][ T5098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.741027][ T5098] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 98.758298][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.777789][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.788637][ T4974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.828559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.866807][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.884210][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.895263][ T4974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.905903][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 98.928465][ T4970] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 98.957528][ T4970] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 98.957545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.976273][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 98.984835][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 99.014145][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 99.023831][ T4970] ================================================================== [ 99.032275][ T4970] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x521/0x780 [ 99.040465][ T4970] Read of size 8188 at addr ffff888055f54050 by task syz-executor/4970 [ 99.048815][ T4970] [ 99.051156][ T4970] CPU: 0 PID: 4970 Comm: syz-executor Not tainted syzkaller #0 [ 99.058703][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.068953][ T4970] Call Trace: [ 99.072245][ T4970] [ 99.075185][ T4970] dump_stack_lvl+0x168/0x230 [ 99.079884][ T4970] ? show_regs_print_info+0x20/0x20 [ 99.085101][ T4970] ? _printk+0xcc/0x110 [ 99.089273][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.095098][ T4970] ? load_image+0x3b0/0x3b0 [ 99.099614][ T4970] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 99.105006][ T4970] print_address_description+0x60/0x2d0 [ 99.110563][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.116382][ T4970] kasan_report+0xdf/0x130 [ 99.120858][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.126685][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.132517][ T4970] kasan_check_range+0x27b/0x290 [ 99.137647][ T4970] memmove+0x25/0x60 [ 99.141562][ T4970] reiserfs_release_objectid+0x521/0x780 [ 99.147222][ T4970] remove_save_link+0x2b6/0x3c0 [ 99.152224][ T4970] ? add_save_link+0x5c0/0x5c0 [ 99.157017][ T4970] ? __rwlock_init+0x140/0x140 [ 99.161939][ T4970] ? journal_end+0x1d8/0x290 [ 99.166550][ T4970] reiserfs_evict_inode+0x391/0x490 [ 99.171883][ T4970] ? entry_points_to_object+0x7d0/0x7d0 [ 99.177532][ T4970] ? do_raw_spin_lock+0x11d/0x280 [ 99.182578][ T4970] ? do_raw_spin_unlock+0x11d/0x230 [ 99.187805][ T4970] ? entry_points_to_object+0x7d0/0x7d0 [ 99.193364][ T4970] evict+0x485/0x870 [ 99.197270][ T4970] ? __lock_acquire+0x7c60/0x7c60 [ 99.202313][ T4970] ? proc_nr_inodes+0x320/0x320 [ 99.207350][ T4970] ? do_raw_spin_unlock+0x11d/0x230 [ 99.212559][ T4970] ? _raw_spin_unlock+0x24/0x40 [ 99.217433][ T4970] ? iput+0x706/0x8a0 [ 99.221442][ T4970] vfs_rmdir+0x3b4/0x430 [ 99.225735][ T4970] do_rmdir+0x295/0x710 [ 99.229904][ T4970] ? __phys_addr_symbol+0x2b/0x70 [ 99.234937][ T4970] ? d_delete_notify+0x150/0x150 [ 99.239881][ T4970] ? strncpy_from_user+0x1fb/0x360 [ 99.245014][ T4970] ? getname_flags+0x1fe/0x500 [ 99.249795][ T4970] __x64_sys_unlinkat+0xc0/0xe0 [ 99.254656][ T4970] do_syscall_64+0x4c/0xa0 [ 99.259079][ T4970] ? clear_bhb_loop+0x30/0x80 [ 99.263778][ T4970] ? clear_bhb_loop+0x30/0x80 [ 99.268460][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.274379][ T4970] RIP: 0033:0x7fd50a980207 [ 99.278822][ T4970] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.298621][ T4970] RSP: 002b:00007ffd19874768 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 99.307056][ T4970] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fd50a980207 [ 99.315047][ T4970] RDX: 0000000000000200 RSI: 00007ffd19875910 RDI: 00000000ffffff9c [ 99.323034][ T4970] RBP: 00007fd50aa03c2d R08: 000055557170c66b R09: 0000000000000000 [ 99.331023][ T4970] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffd19875910 [ 99.339011][ T4970] R13: 00007fd50aa03c2d R14: 00000000000181b7 R15: 00007ffd19877ad0 [ 99.347284][ T4970] [ 99.350315][ T4970] [ 99.352650][ T4970] The buggy address belongs to the page: [ 99.358289][ T4970] page:ffffea000157d500 refcount:2 mapcount:0 mapping:ffff88814088c370 index:0x10 pfn:0x55f54 [ 99.368646][ T4970] memcg:ffff888018bb0000 [ 99.372929][ T4970] aops:def_blk_aops ino:700001 [ 99.377712][ T4970] flags: 0xfff00000022036(referenced|uptodate|lru|active|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 99.389376][ T4970] raw: 00fff00000022036 ffffea000157d448 ffffea00017dde08 ffff88814088c370 [ 99.397982][ T4970] raw: 0000000000000010 ffff888073bd7000 00000002ffffffff ffff888018bb0000 [ 99.406795][ T4970] page dumped because: kasan: bad access detected [ 99.413321][ T4970] page_owner tracks the page as allocated [ 99.419050][ T4970] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5098, ts 98198942461, free_ts 12530469486 [ 99.436172][ T4970] get_page_from_freelist+0x1b77/0x1c60 [ 99.441746][ T4970] __alloc_pages+0x1e1/0x470 [ 99.446395][ T4970] __page_cache_alloc+0xd2/0x3f0 [ 99.451448][ T4970] pagecache_get_page+0x986/0xef0 [ 99.456480][ T4970] __getblk_gfp+0x249/0xb70 [ 99.460995][ T4970] __bread_gfp+0x28/0x380 [ 99.465330][ T4970] read_super_block+0x91/0x7a0 [ 99.470106][ T4970] reiserfs_fill_super+0x787/0x23e0 [ 99.475319][ T4970] mount_bdev+0x287/0x3c0 [ 99.479660][ T4970] legacy_get_tree+0xe6/0x180 [ 99.484342][ T4970] vfs_get_tree+0x88/0x270 [ 99.488771][ T4970] do_new_mount+0x24a/0xa40 [ 99.493289][ T4970] __se_sys_mount+0x2d6/0x3c0 [ 99.497998][ T4970] do_syscall_64+0x4c/0xa0 [ 99.502420][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.508325][ T4970] page last free stack trace: [ 99.513001][ T4970] free_unref_page_prepare+0x637/0x6c0 [ 99.518475][ T4970] free_unref_page+0x94/0x280 [ 99.523161][ T4970] free_contig_range+0x96/0xf0 [ 99.527937][ T4970] destroy_args+0x100/0xa20 [ 99.532453][ T4970] debug_vm_pgtable+0x318/0x370 [ 99.537312][ T4970] do_one_initcall+0x1ee/0x680 [ 99.542097][ T4970] do_initcall_level+0x137/0x1f0 [ 99.547045][ T4970] do_initcalls+0x4b/0x90 [ 99.551529][ T4970] kernel_init_freeable+0x3ce/0x560 [ 99.556741][ T4970] kernel_init+0x19/0x1b0 [ 99.561221][ T4970] ret_from_fork+0x1f/0x30 [ 99.565657][ T4970] [ 99.567983][ T4970] Memory state around the buggy address: [ 99.573623][ T4970] ffff888055f54f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.581697][ T4970] ffff888055f54f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 99.589776][ T4970] >ffff888055f55000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.597849][ T4970] ^ [ 99.602096][ T4970] ffff888055f55080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.610168][ T4970] ffff888055f55100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.618237][ T4970] ================================================================== [ 99.626388][ T4970] Disabling lock debugging due to kernel taint [ 99.634247][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 99.693134][ T4970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.700478][ T4970] CPU: 0 PID: 4970 Comm: syz-executor Tainted: G B syzkaller #0 [ 99.709432][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.719498][ T4970] Call Trace: [ 99.723218][ T4970] [ 99.726147][ T4970] dump_stack_lvl+0x168/0x230 [ 99.730845][ T4970] ? show_regs_print_info+0x20/0x20 [ 99.736055][ T4970] ? load_image+0x3b0/0x3b0 [ 99.740585][ T4970] panic+0x2c9/0x7f0 [ 99.744487][ T4970] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.750728][ T4970] ? bpf_jit_dump+0xd0/0xd0 [ 99.755246][ T4970] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 99.759302][ T5148] loop4: detected capacity change from 0 to 8192 [ 99.761222][ T4970] ? _raw_spin_unlock+0x40/0x40 [ 99.772352][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.778165][ T4970] check_panic_on_warn+0x80/0xa0 [ 99.781895][ T5148] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 99.783112][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.797981][ T4970] end_report+0x6d/0xf0 [ 99.802141][ T4970] kasan_report+0x102/0x130 [ 99.806652][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.812461][ T4970] ? reiserfs_release_objectid+0x521/0x780 [ 99.814051][ T5148] REISERFS (device loop4): using ordered data mode [ 99.818268][ T4970] kasan_check_range+0x27b/0x290 [ 99.825428][ T5148] reiserfs: using flush barriers [ 99.829661][ T4970] memmove+0x25/0x60 [ 99.835697][ T5148] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.838436][ T4970] reiserfs_release_objectid+0x521/0x780 [ 99.857195][ T5148] REISERFS (device loop4): checking transaction log (loop4) [ 99.860213][ T4970] remove_save_link+0x2b6/0x3c0 [ 99.868770][ T5148] REISERFS (device loop4): Using rupasov hash to sort names [ 99.872573][ T4970] ? add_save_link+0x5c0/0x5c0 [ 99.872598][ T4970] ? __rwlock_init+0x140/0x140 [ 99.872615][ T4970] ? journal_end+0x1d8/0x290 [ 99.872632][ T4970] reiserfs_evict_inode+0x391/0x490 [ 99.872654][ T4970] ? entry_points_to_object+0x7d0/0x7d0 [ 99.872671][ T4970] ? do_raw_spin_lock+0x11d/0x280 [ 99.872688][ T4970] ? do_raw_spin_unlock+0x11d/0x230 [ 99.872704][ T4970] ? entry_points_to_object+0x7d0/0x7d0 [ 99.872720][ T4970] evict+0x485/0x870 [ 99.872740][ T4970] ? __lock_acquire+0x7c60/0x7c60 [ 99.872762][ T4970] ? proc_nr_inodes+0x320/0x320 [ 99.872778][ T4970] ? do_raw_spin_unlock+0x11d/0x230 [ 99.872794][ T4970] ? _raw_spin_unlock+0x24/0x40 [ 99.872810][ T4970] ? iput+0x706/0x8a0 [ 99.872833][ T4970] vfs_rmdir+0x3b4/0x430 [ 99.872852][ T4970] do_rmdir+0x295/0x710 [ 99.872868][ T4970] ? __phys_addr_symbol+0x2b/0x70 [ 99.872884][ T4970] ? d_delete_notify+0x150/0x150 [ 99.872900][ T4970] ? strncpy_from_user+0x1fb/0x360 [ 99.872920][ T4970] ? getname_flags+0x1fe/0x500 [ 99.872936][ T4970] __x64_sys_unlinkat+0xc0/0xe0 [ 99.872949][ T4970] do_syscall_64+0x4c/0xa0 [ 99.872964][ T4970] ? clear_bhb_loop+0x30/0x80 [ 99.872987][ T4970] ? clear_bhb_loop+0x30/0x80 [ 99.873001][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.873016][ T4970] RIP: 0033:0x7fd50a980207 [ 99.873031][ T4970] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.882373][ T5148] REISERFS (device loop4): using 3.5.x disk format [ 99.885048][ T4970] RSP: 002b:00007ffd19874768 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 99.885068][ T4970] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fd50a980207 [ 99.885078][ T4970] RDX: 0000000000000200 RSI: 00007ffd19875910 RDI: 00000000ffffff9c [ 99.890286][ T5148] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 99.894394][ T4970] RBP: 00007fd50aa03c2d R08: 000055557170c66b R09: 0000000000000000 [ 99.894406][ T4970] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffd19875910 [ 99.894415][ T4970] R13: 00007fd50aa03c2d R14: 00000000000181b7 R15: 00007ffd19877ad0 [ 99.894430][ T4970] [ 99.900051][ T5148] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 99.905336][ T4970] Kernel Offset: disabled [ 100.109343][ T4970] Rebooting in 86400 seconds..