Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. 1970/01/01 00:00:26 parsed 1 programs [ 27.482320][ T4327] cgroup: Unknown subsys name 'net' [ 27.691240][ T4327] cgroup: Unknown subsys name 'rlimit' [ 27.953387][ T4327] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.050045][ T4358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.051852][ T4358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.053233][ T4358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.054682][ T4358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.056076][ T4358] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.057295][ T4358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.367412][ T4371] chnl_net:caif_netlink_parms(): no params data found [ 31.387766][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.389179][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.390711][ T4371] device bridge_slave_0 entered promiscuous mode [ 31.393070][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394202][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.395590][ T4371] device bridge_slave_1 entered promiscuous mode [ 31.404246][ T4371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.406704][ T4371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.413611][ T4371] team0: Port device team_slave_0 added [ 31.415392][ T4371] team0: Port device team_slave_1 added [ 31.423060][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.424123][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.427980][ T4371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.430649][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.431794][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.435948][ T4371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.469756][ T4371] device hsr_slave_0 entered promiscuous mode [ 31.518713][ T4371] device hsr_slave_1 entered promiscuous mode [ 31.605318][ T4371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.650219][ T4371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.739428][ T4371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.780069][ T4371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.818101][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.819361][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.820790][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.821938][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.841822][ T4371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.845587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.848093][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.850820][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.852690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 31.857301][ T4371] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.862614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.864165][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.865288][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.867928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.870242][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.871289][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.878032][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.879959][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.883059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.886054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.890236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.895668][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.948289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.950092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.954804][ T4371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.963836][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.972597][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.975177][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.976949][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.980294][ T4371] device veth0_vlan entered promiscuous mode [ 31.983991][ T4371] device veth1_vlan entered promiscuous mode [ 31.991433][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.992848][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.994342][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.996836][ T4371] device veth0_macvtap entered promiscuous mode [ 31.999614][ T4371] device veth1_macvtap entered promiscuous mode [ 32.004357][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.005687][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.007717][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.020901][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.022354][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.024877][ T4371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.026199][ T4371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.027421][ T4371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.029461][ T4371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.438383][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.440231][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.442372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.449628][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.450968][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.452548][ T1761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:32 executed programs: 0 [ 32.630228][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.631818][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.633105][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.634618][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.635913][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.637087][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.691587][ T4431] chnl_net:caif_netlink_parms(): no params data found [ 32.706449][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.707704][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.710317][ T4431] device bridge_slave_0 entered promiscuous mode [ 32.717330][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.718977][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.720499][ T4431] device bridge_slave_1 entered promiscuous mode [ 32.727668][ T4431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.730333][ T4431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.738942][ T4431] team0: Port device team_slave_0 added [ 32.740859][ T4431] team0: Port device team_slave_1 added [ 32.746533][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.747576][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.751982][ T4431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.754243][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.755355][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.759393][ T4431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.829765][ T4431] device hsr_slave_0 entered promiscuous mode [ 32.878687][ T4431] device hsr_slave_1 entered promiscuous mode [ 32.928591][ T4431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.929894][ T4431] Cannot create hsr debugfs directory [ 33.363329][ T4431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.648954][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 36.039678][ T4431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.728772][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 37.859810][ T4431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.951460][ T4431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.141418][ T4431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.251243][ T4431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.340675][ T4431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.430284][ T4431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.529651][ T4431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.533109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.534640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.537044][ T4431] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.540178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.541828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.543688][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.544859][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.546353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.550214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.551727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.553174][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.554269][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.556580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.559897][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.562897][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.564844][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.566589][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.570611][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.572446][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.574495][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.576058][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.578461][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.581242][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.818549][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 38.882692][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.985200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.986498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.989884][ T4431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.995147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.996709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.002999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.004803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.006338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.007722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.010596][ T4431] device veth0_vlan entered promiscuous mode [ 39.013727][ T4431] device veth1_vlan entered promiscuous mode [ 39.020437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.021860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.023346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.024754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.027006][ T4431] device veth0_macvtap entered promiscuous mode [ 39.321900][ T4431] device veth1_macvtap entered promiscuous mode [ 39.326138][ T4431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.327739][ T4431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.329891][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.333167][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.335195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.336626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.338237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.340567][ T4431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.342187][ T4431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.344199][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.345451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.347005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.379922][ T4431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.381319][ T4431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.382661][ T4431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.384121][ T4431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400518][ T329] device hsr_slave_0 left promiscuous mode [ 39.448920][ T329] device hsr_slave_1 left promiscuous mode [ 39.548594][ T329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.549801][ T329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.551408][ T329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.552632][ T329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.554056][ T329] device bridge_slave_1 left promiscuous mode [ 39.555500][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.589607][ T329] device bridge_slave_0 left promiscuous mode [ 39.590568][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.718741][ T329] device veth1_macvtap left promiscuous mode [ 39.719791][ T329] device veth0_macvtap left promiscuous mode [ 39.720680][ T329] device veth1_vlan left promiscuous mode [ 39.721653][ T329] device veth0_vlan left promiscuous mode [ 40.888532][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 41.499650][ T329] team0 (unregistering): Port device team_slave_1 removed [ 41.669410][ T329] team0 (unregistering): Port device team_slave_0 removed [ 41.839304][ T329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.079757][ T329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.590604][ T329] bond0 (unregistering): Released all slaves [ 44.844672][ T1761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.846204][ T1761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.847973][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.853424][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.854657][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.856223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.911847][ T4463] loop0: detected capacity change from 0 to 8192 [ 44.917267][ T4463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 44.920075][ T4463] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 44.921605][ T4463] REISERFS (device loop0): using ordered data mode [ 44.922688][ T4463] reiserfs: using flush barriers [ 44.923929][ T4463] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 44.926699][ T4463] REISERFS (device loop0): checking transaction log (loop0) [ 44.930080][ T4463] REISERFS (device loop0): Using r5 hash to sort names [ 44.931586][ T4463] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 44.952424][ T4431] ================================================================== [ 44.953635][ T4431] BUG: KASAN: vmalloc-out-of-bounds in cleanup_bitmap_list+0x14c/0x46c [ 44.954818][ T4431] Read of size 8 at addr ffff800020e1d008 by task syz-executor/4431 [ 44.956021][ T4431] [ 44.956373][ T4431] CPU: 1 PID: 4431 Comm: syz-executor Not tainted syzkaller #0 [ 44.957423][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.959048][ T4431] Call trace: [ 44.959606][ T4431] dump_backtrace+0x1c8/0x1f4 [ 44.960375][ T4431] show_stack+0x2c/0x3c [ 44.961114][ T4431] __dump_stack+0x30/0x40 [ 44.961864][ T4431] dump_stack_lvl+0xf8/0x160 [ 44.962721][ T4431] print_address_description+0x88/0x218 [ 44.963601][ T4431] print_report+0x50/0x68 [ 44.964235][ T4431] kasan_report+0xa8/0x100 [ 44.964879][ T4431] __asan_report_load8_noabort+0x2c/0x38 [ 44.965704][ T4431] cleanup_bitmap_list+0x14c/0x46c [ 44.966457][ T4431] flush_commit_list+0x1018/0x1898 [ 44.967206][ T4431] flush_journal_list+0x254/0x18e4 [ 44.968039][ T4431] flush_used_journal_lists+0xf3c/0x1234 [ 44.968857][ T4431] do_journal_end+0x2ad4/0x3bb0 [ 44.969553][ T4431] journal_end_sync+0x164/0x1d0 [ 44.970298][ T4431] reiserfs_sync_fs+0xd0/0x14c [ 44.971038][ T4431] sync_filesystem+0xe8/0x218 [ 44.971817][ T4431] generic_shutdown_super+0x70/0x324 [ 44.972685][ T4431] kill_block_super+0x70/0xdc [ 44.973392][ T4431] reiserfs_kill_sb+0x124/0x13c [ 44.974142][ T4431] deactivate_locked_super+0xac/0x124 [ 44.975052][ T4431] deactivate_super+0xe8/0x108 [ 44.975785][ T4431] cleanup_mnt+0x37c/0x404 [ 44.976542][ T4431] __cleanup_mnt+0x20/0x30 [ 44.977277][ T4431] task_work_run+0x1ec/0x270 [ 44.977967][ T4431] do_exit+0x54c/0x19a8 [ 44.978576][ T4431] do_group_exit+0x194/0x22c [ 44.979330][ T4431] get_signal+0x11d0/0x1310 [ 44.980062][ T4431] do_notify_resume+0x290/0x2b0c [ 44.980849][ T4431] el0_da+0xb4/0x154 [ 44.981475][ T4431] el0t_64_sync_handler+0x90/0xf0 [ 44.982251][ T4431] el0t_64_sync+0x18c/0x190 [ 44.983010][ T4431] [ 44.983409][ T4431] The buggy address belongs to a 1-page vmalloc region starting at 0xffff800020e1d000 allocated at reiserfs_allocate_list_bitmaps+0x5c/0x204 [ 44.985727][ T4431] The buggy address belongs to the physical page: [ 44.986791][ T4431] page:000000007607e326 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10cc69 [ 44.988395][ T4431] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 44.989617][ T4431] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 44.991055][ T4431] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 44.992548][ T4431] page dumped because: kasan: bad access detected [ 44.993638][ T4431] [ 44.994043][ T4431] Memory state around the buggy address: [ 44.994932][ T4431] ffff800020e1cf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 44.996275][ T4431] ffff800020e1cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 44.997665][ T4431] >ffff800020e1d000: 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 44.999039][ T4431] ^ [ 44.999751][ T4431] ffff800020e1d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 45.001093][ T4431] ffff800020e1d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 45.002332][ T4431] ================================================================== [ 45.006539][ T4431] Disabling lock debugging due to kernel taint [ 45.007439][ T4431] Unable to handle kernel paging request at virtual address ffff800020e1e000 [ 45.016053][ T4431] KASAN: probably user-memory-access in range [0x00000001070f0000-0x00000001070f0007] [ 45.017689][ T4431] Mem abort info: [ 45.018300][ T4431] ESR = 0x0000000096000007 [ 45.028674][ T4431] EC = 0x25: DABT (current EL), IL = 32 bits [ 45.029694][ T4431] SET = 0, FnV = 0 [ 45.030336][ T4431] EA = 0, S1PTW = 0 [ 45.031026][ T4431] FSC = 0x07: level 3 translation fault [ 45.031992][ T4431] Data abort info: [ 45.032640][ T4431] ISV = 0, ISS = 0x00000007 [ 45.033404][ T4431] CM = 0, WnR = 0 [ 45.034007][ T4431] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020e267000 [ 45.035183][ T4431] [ffff800020e1e000] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000010a1b0003, pte=0000000000000000 [ 45.037374][ T4431] Internal error: Oops: 0000000096000007 [#1] PREEMPT SMP [ 45.038471][ T4431] Modules linked in: [ 45.039088][ T4431] CPU: 1 PID: 4431 Comm: syz-executor Tainted: G B syzkaller #0 [ 45.040629][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.042242][ T4431] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 45.043463][ T4431] pc : cleanup_bitmap_list+0x14c/0x46c [ 45.044306][ T4431] lr : cleanup_bitmap_list+0x14c/0x46c [ 45.045175][ T4431] sp : ffff8000212a6df0 [ 45.045865][ T4431] x29: ffff8000212a6e30 x28: dfff800000000000 x27: ffff8000215e92e0 [ 45.047105][ T4431] x26: 1ffff000042bd25c x25: ffff0000d2cf4678 x24: ffff0000d2c63000 [ 45.048436][ T4431] x23: ffff0000d2cf4018 x22: ffff800020e1e000 x21: 0000000000000200 [ 45.049710][ T4431] x20: 0000000000000201 x19: 0000000000000000 x18: ffff800011abbcc0 [ 45.051004][ T4431] x17: 0000000000000000 x16: ffff800008042c8c x15: 0000000000000000 [ 45.052226][ T4431] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 45.053428][ T4431] x11: ff00800008cda7d8 x10: 0000000000000000 x9 : ffff80001c326a10 [ 45.054763][ T4431] x8 : 0000000000000001 x7 : 0000000000000001 x6 : 0000000000000001 [ 45.056133][ T4431] x5 : ffff8000212a67d8 x4 : ffff8000151a4820 x3 : ffff800008cda5ac [ 45.057482][ T4431] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 [ 45.058762][ T4431] Call trace: [ 45.059318][ T4431] cleanup_bitmap_list+0x14c/0x46c [ 45.060200][ T4431] flush_commit_list+0x1018/0x1898 [ 45.061020][ T4431] flush_journal_list+0x254/0x18e4 [ 45.061861][ T4431] flush_used_journal_lists+0xf3c/0x1234 [ 45.062714][ T4431] do_journal_end+0x2ad4/0x3bb0 [ 45.063449][ T4431] journal_end_sync+0x164/0x1d0 [ 45.064180][ T4431] reiserfs_sync_fs+0xd0/0x14c [ 45.064902][ T4431] sync_filesystem+0xe8/0x218 [ 45.065682][ T4431] generic_shutdown_super+0x70/0x324 [ 45.066554][ T4431] kill_block_super+0x70/0xdc [ 45.067329][ T4431] reiserfs_kill_sb+0x124/0x13c [ 45.068126][ T4431] deactivate_locked_super+0xac/0x124 [ 45.069038][ T4431] deactivate_super+0xe8/0x108 [ 45.069850][ T4431] cleanup_mnt+0x37c/0x404 [ 45.070618][ T4431] __cleanup_mnt+0x20/0x30 [ 45.071382][ T4431] task_work_run+0x1ec/0x270 [ 45.072141][ T4431] do_exit+0x54c/0x19a8 [ 45.072832][ T4431] do_group_exit+0x194/0x22c [ 45.073590][ T4431] get_signal+0x11d0/0x1310 [ 45.074314][ T4431] do_notify_resume+0x290/0x2b0c [ 45.075146][ T4431] el0_da+0xb4/0x154 [ 45.075770][ T4431] el0t_64_sync_handler+0x90/0xf0 [ 45.076565][ T4431] el0t_64_sync+0x18c/0x190 [ 45.077329][ T4431] Code: 387c6908 34000068 aa1603e0 97eff0ee (f94002d6) [ 45.078443][ T4431] ---[ end trace 0000000000000000 ]--- [ 45.278494][ T4431] Kernel panic - not syncing: Oops: Fatal exception [ 45.279421][ T4431] SMP: stopping secondary CPUs [ 45.280145][ T4431] Kernel Offset: disabled [ 45.280817][ T4431] CPU features: 0x080000,000f0097,a65bfea7 [ 45.281725][ T4431] Memory Limit: none [ 45.481920][ T4431] Rebooting in 86400 seconds..