forked to background, child pid 3182 no interfaces have a carrier [ 24.388488][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.399541][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. syzkaller login: [ 44.776019][ T3606] chnl_net:caif_netlink_parms(): no params data found [ 44.812377][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.819932][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.828037][ T3606] device bridge_slave_0 entered promiscuous mode [ 44.836557][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.843918][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.851909][ T3606] device bridge_slave_1 entered promiscuous mode [ 44.870787][ T3606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.882409][ T3606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.904068][ T3606] team0: Port device team_slave_0 added [ 44.911823][ T3606] team0: Port device team_slave_1 added [ 44.928052][ T3606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.935264][ T3606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.961561][ T3606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.974548][ T3606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.981808][ T3606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.007879][ T3606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.036668][ T3606] device hsr_slave_0 entered promiscuous mode [ 45.043688][ T3606] device hsr_slave_1 entered promiscuous mode [ 45.122008][ T3606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.132594][ T3606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.142339][ T3606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.152357][ T3606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.173096][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.180312][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.188013][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.195461][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.235203][ T3606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.251373][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.261422][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.270782][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.278601][ T3268] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 45.290945][ T3606] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.301733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.310307][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.317533][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.328285][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.337327][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.344606][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.362221][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.371875][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.382813][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.397167][ T3606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.408076][ T3606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.422606][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.432066][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.440684][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.458123][ T3606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.465619][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.473337][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.491292][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.509261][ T3606] device veth0_vlan entered promiscuous mode [ 45.516304][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.525242][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.534077][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.548269][ T3606] device veth1_vlan entered promiscuous mode [ 45.566604][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.575094][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.583663][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.594140][ T3606] device veth0_macvtap entered promiscuous mode [ 45.603666][ T3606] device veth1_macvtap entered promiscuous mode [ 45.618616][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.626577][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.635882][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.647453][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.655103][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.666987][ T3606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.676735][ T3606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.685657][ T3606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 45.694463][ T3606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.734323][ T3617] loop0: detected capacity change from 0 to 8192 [ 45.744923][ T3617] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.758571][ T3617] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.769124][ T3617] REISERFS (device loop0): using ordered data mode [ 45.775991][ T3617] reiserfs: using flush barriers [ 45.782775][ T3617] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.799246][ T3617] REISERFS (device loop0): checking transaction log (loop0) [ 45.809514][ T3617] REISERFS (device loop0): Using rupasov hash to sort names [ 45.818121][ T3617] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. executing program [ 45.873737][ T3621] loop0: detected capacity change from 0 to 8192 [ 45.882971][ T3621] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 45.896366][ T3621] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 45.908236][ T3621] REISERFS (device loop0): using ordered data mode [ 45.915532][ T3621] reiserfs: using flush barriers executing program [ 45.921883][ T3621] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 45.938630][ T3621] REISERFS (device loop0): checking transaction log (loop0) [ 45.947501][ T3621] REISERFS (device loop0): Using rupasov hash to sort names [ 45.955716][ T3621] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.004810][ T3624] loop0: detected capacity change from 0 to 8192 [ 46.014555][ T3624] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.029041][ T3624] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.038521][ T3624] REISERFS (device loop0): using ordered data mode [ 46.045729][ T3624] reiserfs: using flush barriers executing program [ 46.051653][ T3624] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.069496][ T3624] REISERFS (device loop0): checking transaction log (loop0) [ 46.077897][ T3624] REISERFS (device loop0): Using rupasov hash to sort names [ 46.085470][ T3624] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.131232][ T3627] loop0: detected capacity change from 0 to 8192 [ 46.139534][ T3627] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.155107][ T3627] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.164627][ T3627] REISERFS (device loop0): using ordered data mode [ 46.171576][ T3627] reiserfs: using flush barriers executing program [ 46.177327][ T3627] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.194328][ T3627] REISERFS (device loop0): checking transaction log (loop0) [ 46.202903][ T3627] REISERFS (device loop0): Using rupasov hash to sort names [ 46.211913][ T3627] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.253701][ T3630] loop0: detected capacity change from 0 to 8192 [ 46.262792][ T3630] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.276604][ T3630] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.286128][ T3630] REISERFS (device loop0): using ordered data mode [ 46.292771][ T3630] reiserfs: using flush barriers executing program [ 46.298692][ T3630] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.316203][ T3630] REISERFS (device loop0): checking transaction log (loop0) [ 46.325035][ T3630] REISERFS (device loop0): Using rupasov hash to sort names [ 46.332668][ T3630] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.373601][ T3633] loop0: detected capacity change from 0 to 8192 [ 46.384673][ T3633] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.398051][ T3633] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.407448][ T3633] REISERFS (device loop0): using ordered data mode [ 46.414356][ T3633] reiserfs: using flush barriers executing program [ 46.420180][ T3633] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.437323][ T3633] REISERFS (device loop0): checking transaction log (loop0) [ 46.445643][ T3633] REISERFS (device loop0): Using rupasov hash to sort names [ 46.453357][ T3633] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.491248][ T3636] loop0: detected capacity change from 0 to 8192 [ 46.501235][ T3636] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.514887][ T3636] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.524151][ T3636] REISERFS (device loop0): using ordered data mode [ 46.530756][ T3636] reiserfs: using flush barriers executing program [ 46.536356][ T3636] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.553755][ T3636] REISERFS (device loop0): checking transaction log (loop0) [ 46.564118][ T3636] REISERFS (device loop0): Using rupasov hash to sort names [ 46.571865][ T3636] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.611113][ T3639] loop0: detected capacity change from 0 to 8192 [ 46.619847][ T3639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.638007][ T3639] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.647671][ T3639] REISERFS (device loop0): using ordered data mode [ 46.654637][ T3639] reiserfs: using flush barriers executing program [ 46.661719][ T3639] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.678089][ T3639] REISERFS (device loop0): checking transaction log (loop0) [ 46.686375][ T3639] REISERFS (device loop0): Using rupasov hash to sort names [ 46.693892][ T3639] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.734232][ T3642] loop0: detected capacity change from 0 to 8192 [ 46.743860][ T3642] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.757007][ T3642] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.766428][ T3642] REISERFS (device loop0): using ordered data mode [ 46.773003][ T3642] reiserfs: using flush barriers executing program [ 46.778806][ T3642] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.796366][ T3642] REISERFS (device loop0): checking transaction log (loop0) [ 46.806183][ T3642] REISERFS (device loop0): Using rupasov hash to sort names [ 46.813857][ T3642] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.850863][ T3645] loop0: detected capacity change from 0 to 8192 [ 46.859554][ T3645] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.874183][ T3645] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 46.884685][ T3645] REISERFS (device loop0): using ordered data mode [ 46.891726][ T3645] reiserfs: using flush barriers executing program [ 46.897540][ T3645] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 46.914251][ T3645] REISERFS (device loop0): checking transaction log (loop0) [ 46.923360][ T3645] REISERFS (device loop0): Using rupasov hash to sort names [ 46.930950][ T3645] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 46.967773][ T3648] loop0: detected capacity change from 0 to 8192 [ 46.979872][ T3648] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 46.994347][ T3648] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.003915][ T3648] REISERFS (device loop0): using ordered data mode [ 47.011622][ T3648] reiserfs: using flush barriers executing program [ 47.017377][ T3648] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.035360][ T3648] REISERFS (device loop0): checking transaction log (loop0) [ 47.043796][ T3648] REISERFS (device loop0): Using rupasov hash to sort names [ 47.051641][ T3648] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.089402][ T3651] loop0: detected capacity change from 0 to 8192 [ 47.098932][ T3651] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.112714][ T3651] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.123465][ T3651] REISERFS (device loop0): using ordered data mode [ 47.130029][ T3651] reiserfs: using flush barriers executing program [ 47.136132][ T3651] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.152982][ T3651] REISERFS (device loop0): checking transaction log (loop0) [ 47.161342][ T3651] REISERFS (device loop0): Using rupasov hash to sort names [ 47.168799][ T3651] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.214062][ T3655] loop0: detected capacity change from 0 to 8192 [ 47.222367][ T3655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.236364][ T3655] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.245971][ T3655] REISERFS (device loop0): using ordered data mode [ 47.253962][ T3655] reiserfs: using flush barriers executing program [ 47.259931][ T3655] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.277106][ T3655] REISERFS (device loop0): checking transaction log (loop0) [ 47.286067][ T3655] REISERFS (device loop0): Using rupasov hash to sort names [ 47.294101][ T3655] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.329789][ T3658] loop0: detected capacity change from 0 to 8192 [ 47.338728][ T3658] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.352695][ T3658] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.362353][ T3658] REISERFS (device loop0): using ordered data mode [ 47.368955][ T3658] reiserfs: using flush barriers executing program [ 47.375327][ T3658] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.392430][ T3658] REISERFS (device loop0): checking transaction log (loop0) [ 47.400571][ T3658] REISERFS (device loop0): Using rupasov hash to sort names [ 47.408024][ T3658] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.456920][ T3661] loop0: detected capacity change from 0 to 8192 [ 47.465197][ T3661] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.479387][ T3661] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.488723][ T3661] REISERFS (device loop0): using ordered data mode [ 47.495954][ T3661] reiserfs: using flush barriers executing program [ 47.502577][ T3661] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.519335][ T3661] REISERFS (device loop0): checking transaction log (loop0) [ 47.527734][ T3661] REISERFS (device loop0): Using rupasov hash to sort names [ 47.535370][ T3661] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.581911][ T3664] loop0: detected capacity change from 0 to 8192 [ 47.589847][ T3664] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.603968][ T3664] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.613574][ T3664] REISERFS (device loop0): using ordered data mode [ 47.620872][ T3664] reiserfs: using flush barriers executing program [ 47.626947][ T3664] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.643533][ T3664] REISERFS (device loop0): checking transaction log (loop0) [ 47.651760][ T3664] REISERFS (device loop0): Using rupasov hash to sort names [ 47.659258][ T3664] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.706372][ T3667] loop0: detected capacity change from 0 to 8192 [ 47.714986][ T3667] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 47.728347][ T3667] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 47.739608][ T3667] REISERFS (device loop0): using ordered data mode [ 47.746976][ T3667] reiserfs: using flush barriers [ 47.755284][ T3667] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 47.784123][ T3667] REISERFS (device loop0): checking transaction log (loop0) [ 47.792610][ T3667] REISERFS (device loop0): Using rupasov hash to sort names [ 47.800713][ T3667] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 47.809805][ T3667] REISERFS warning: reiserfs-5090 is_tree_node: node level 48 does not match to the expected one -1 [ 47.821075][ T3667] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 0. Fsck? [ 47.831718][ T3667] REISERFS (device loop0): Remounting filesystem read-only [ 47.838921][ T3667] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 47.847906][ T3667] ================================================================== [ 47.855960][ T3667] BUG: KASAN: vmalloc-out-of-bounds in cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 47.864894][ T3667] Read of size 8 at addr ffffc90002d5a008 by task syz-executor247/3667 [ 47.873136][ T3667] [ 47.875443][ T3667] CPU: 0 PID: 3667 Comm: syz-executor247 Not tainted 6.1.0-rc3-syzkaller-00299-g2f5065a0bc9d #0 [ 47.885858][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 47.896032][ T3667] Call Trace: [ 47.899317][ T3667] [ 47.902250][ T3667] dump_stack_lvl+0xcd/0x134 [ 47.906872][ T3667] print_report+0x15e/0x45d [ 47.911387][ T3667] ? cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 47.917274][ T3667] kasan_report+0xbb/0x1f0 [ 47.921860][ T3667] ? cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 47.927750][ T3667] cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 47.933464][ T3667] free_journal_ram+0x165/0x600 [ 47.938564][ T3667] ? do_raw_spin_unlock+0x171/0x230 [ 47.943761][ T3667] journal_release_error+0x72/0x90 [ 47.948871][ T3667] reiserfs_fill_super+0x1076/0x2e90 [ 47.954258][ T3667] ? reiserfs_remount+0x1530/0x1530 [ 47.959458][ T3667] ? sget+0x472/0x580 [ 47.963438][ T3667] ? snprintf+0xbb/0xf0 [ 47.967588][ T3667] ? set_blocksize+0x2e5/0x370 [ 47.972342][ T3667] mount_bdev+0x34d/0x410 [ 47.976662][ T3667] ? reiserfs_remount+0x1530/0x1530 [ 47.981858][ T3667] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 47.986907][ T3667] legacy_get_tree+0x105/0x220 [ 47.991665][ T3667] vfs_get_tree+0x89/0x2f0 [ 47.996070][ T3667] path_mount+0x1326/0x1e20 [ 48.000568][ T3667] ? kmem_cache_free+0xea/0x5b0 [ 48.005420][ T3667] ? finish_automount+0x960/0x960 [ 48.010441][ T3667] ? putname+0xfe/0x140 [ 48.014590][ T3667] __x64_sys_mount+0x27f/0x300 [ 48.019347][ T3667] ? copy_mnt_ns+0xae0/0xae0 [ 48.023930][ T3667] ? syscall_enter_from_user_mode+0x22/0xb0 [ 48.029833][ T3667] do_syscall_64+0x35/0xb0 [ 48.034260][ T3667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.040241][ T3667] RIP: 0033:0x7f5ba828986a [ 48.044659][ T3667] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 08 01 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.064287][ T3667] RSP: 002b:00007f5ba822ffe8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 48.072698][ T3667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5ba828986a [ 48.080714][ T3667] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5ba8230000 [ 48.088783][ T3667] RBP: 0000000000000004 R08: 00007f5ba8230040 R09: 00007f5ba82306b8 [ 48.096759][ T3667] R10: 000000000020040a R11: 0000000000000286 R12: 00007f5ba8230040 [ 48.104728][ T3667] R13: 0000000000000008 R14: 00007f5ba8230000 R15: 0000000020000600 [ 48.112787][ T3667] [ 48.115793][ T3667] [ 48.118105][ T3667] The buggy address belongs to the virtual mapping at [ 48.118105][ T3667] [ffffc90002d5a000, ffffc90002d5c000) created by: [ 48.118105][ T3667] reiserfs_allocate_list_bitmaps+0x54/0x1c0 [ 48.137112][ T3667] [ 48.139420][ T3667] The buggy address belongs to the physical page: [ 48.145817][ T3667] page:ffffea0000988ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2623b [ 48.155957][ T3667] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 48.163235][ T3667] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 48.172002][ T3667] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 48.180567][ T3667] page dumped because: kasan: bad access detected [ 48.186958][ T3667] page_owner tracks the page as allocated [ 48.192749][ T3667] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 3667, tgid 3666 (syz-executor247), ts 47753874614, free_ts 47686157415 [ 48.212199][ T3667] get_page_from_freelist+0x10b5/0x2d50 [ 48.217741][ T3667] __alloc_pages+0x1c7/0x5a0 [ 48.222577][ T3667] __alloc_pages_bulk+0xa02/0x15b0 [ 48.227675][ T3667] alloc_pages_bulk_array_mempolicy+0x1b3/0x360 [ 48.233912][ T3667] __vmalloc_node_range+0x576/0x13a0 [ 48.239188][ T3667] vzalloc+0x67/0x80 [ 48.243072][ T3667] reiserfs_allocate_list_bitmaps+0x54/0x1c0 [ 48.249039][ T3667] journal_init+0x3ce/0x64c0 [ 48.253792][ T3667] reiserfs_fill_super+0xc57/0x2e90 [ 48.259015][ T3667] mount_bdev+0x34d/0x410 [ 48.263374][ T3667] legacy_get_tree+0x105/0x220 [ 48.268297][ T3667] vfs_get_tree+0x89/0x2f0 [ 48.272703][ T3667] path_mount+0x1326/0x1e20 [ 48.277191][ T3667] __x64_sys_mount+0x27f/0x300 [ 48.281939][ T3667] do_syscall_64+0x35/0xb0 [ 48.286344][ T3667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.292225][ T3667] page last free stack trace: [ 48.296890][ T3667] free_pcp_prepare+0x65c/0xd90 [ 48.301915][ T3667] free_unref_page+0x19/0x4d0 [ 48.306745][ T3667] __vunmap+0x85d/0xd30 [ 48.310886][ T3667] __vfree+0x3c/0xd0 [ 48.314770][ T3667] vfree+0x5a/0x90 [ 48.318483][ T3667] journal_release+0x272/0x620 [ 48.323234][ T3667] reiserfs_put_super+0xe0/0x5c0 [ 48.328160][ T3667] generic_shutdown_super+0x154/0x410 [ 48.333516][ T3667] kill_block_super+0x97/0xf0 [ 48.338172][ T3667] deactivate_locked_super+0x94/0x160 [ 48.343527][ T3667] deactivate_super+0xad/0xd0 [ 48.348185][ T3667] cleanup_mnt+0x2ae/0x3d0 [ 48.352594][ T3667] task_work_run+0x16b/0x270 [ 48.357174][ T3667] exit_to_user_mode_prepare+0x23c/0x250 [ 48.362877][ T3667] syscall_exit_to_user_mode+0x19/0x50 [ 48.368327][ T3667] do_syscall_64+0x42/0xb0 [ 48.372734][ T3667] [ 48.375035][ T3667] Memory state around the buggy address: [ 48.380643][ T3667] ffffc90002d59f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 48.388683][ T3667] ffffc90002d59f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 48.396723][ T3667] >ffffc90002d5a000: 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 48.404765][ T3667] ^ [ 48.409072][ T3667] ffffc90002d5a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 48.417113][ T3667] ffffc90002d5a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 48.425151][ T3667] ================================================================== [ 48.438292][ T3667] Kernel panic - not syncing: panic_on_warn set ... [ 48.444878][ T3667] CPU: 0 PID: 3667 Comm: syz-executor247 Not tainted 6.1.0-rc3-syzkaller-00299-g2f5065a0bc9d #0 [ 48.455284][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 48.465426][ T3667] Call Trace: [ 48.468690][ T3667] [ 48.471607][ T3667] dump_stack_lvl+0xcd/0x134 [ 48.476191][ T3667] panic+0x2c8/0x622 [ 48.480078][ T3667] ? panic_print_sys_info.part.0+0x110/0x110 [ 48.486049][ T3667] ? preempt_schedule_common+0x59/0xc0 [ 48.491494][ T3667] ? preempt_schedule_thunk+0x16/0x18 [ 48.496861][ T3667] end_report.part.0+0x3f/0x7c [ 48.501613][ T3667] ? cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 48.507665][ T3667] kasan_report.cold+0xa/0xf [ 48.512247][ T3667] ? cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 48.518129][ T3667] cleanup_bitmap_list.part.0+0x4ac/0x5f0 [ 48.523836][ T3667] free_journal_ram+0x165/0x600 [ 48.528671][ T3667] ? do_raw_spin_unlock+0x171/0x230 [ 48.533858][ T3667] journal_release_error+0x72/0x90 [ 48.538959][ T3667] reiserfs_fill_super+0x1076/0x2e90 [ 48.544240][ T3667] ? reiserfs_remount+0x1530/0x1530 [ 48.549428][ T3667] ? sget+0x472/0x580 [ 48.553397][ T3667] ? snprintf+0xbb/0xf0 [ 48.557539][ T3667] ? set_blocksize+0x2e5/0x370 [ 48.562291][ T3667] mount_bdev+0x34d/0x410 [ 48.566605][ T3667] ? reiserfs_remount+0x1530/0x1530 [ 48.571797][ T3667] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 48.576812][ T3667] legacy_get_tree+0x105/0x220 [ 48.581562][ T3667] vfs_get_tree+0x89/0x2f0 [ 48.585962][ T3667] path_mount+0x1326/0x1e20 [ 48.590468][ T3667] ? kmem_cache_free+0xea/0x5b0 [ 48.595310][ T3667] ? finish_automount+0x960/0x960 [ 48.600317][ T3667] ? putname+0xfe/0x140 [ 48.604457][ T3667] __x64_sys_mount+0x27f/0x300 [ 48.609204][ T3667] ? copy_mnt_ns+0xae0/0xae0 [ 48.613866][ T3667] ? syscall_enter_from_user_mode+0x22/0xb0 [ 48.619753][ T3667] do_syscall_64+0x35/0xb0 [ 48.624162][ T3667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.630048][ T3667] RIP: 0033:0x7f5ba828986a [ 48.634448][ T3667] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 08 01 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.654333][ T3667] RSP: 002b:00007f5ba822ffe8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 48.662736][ T3667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5ba828986a [ 48.670779][ T3667] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5ba8230000 [ 48.678912][ T3667] RBP: 0000000000000004 R08: 00007f5ba8230040 R09: 00007f5ba82306b8 [ 48.686866][ T3667] R10: 000000000020040a R11: 0000000000000286 R12: 00007f5ba8230040 [ 48.694839][ T3667] R13: 0000000000000008 R14: 00007f5ba8230000 R15: 0000000020000600 [ 48.702801][ T3667] [ 48.706435][ T3667] Kernel Offset: disabled [ 48.710758][ T3667] Rebooting in 86400 seconds..