[ 92.239159][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts.
2023/08/22 14:44:40 ignoring optional flag "sandboxArg"="0"
2023/08/22 14:44:40 parsed 1 programs
2023/08/22 14:44:42 executed programs: 0
[ 98.822201][ T5390] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 98.834509][ T5389] syz-execprog[5389]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 98.844908][ T5389] syz-execprog[5389]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 98.901597][ T5043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.909192][ T5043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.917337][ T5043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.925398][ T5043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.933234][ T5043] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 98.940771][ T5043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.082647][ T5397] chnl_net:caif_netlink_parms(): no params data found
[ 99.150048][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.157691][ T5397] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.164946][ T5397] bridge_slave_0: entered allmulticast mode
[ 99.172338][ T5397] bridge_slave_0: entered promiscuous mode
[ 99.180660][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.188020][ T5397] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.195358][ T5397] bridge_slave_1: entered allmulticast mode
[ 99.202554][ T5397] bridge_slave_1: entered promiscuous mode
[ 99.233281][ T5397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.245517][ T5397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.277669][ T5397] team0: Port device team_slave_0 added
[ 99.285940][ T5397] team0: Port device team_slave_1 added
[ 99.314028][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.321029][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.347776][ T5397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.359945][ T5397] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.367310][ T5397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.394045][ T5397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.437855][ T5397] hsr_slave_0: entered promiscuous mode
[ 99.444277][ T5397] hsr_slave_1: entered promiscuous mode
[ 100.256764][ T5397] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.270019][ T5397] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.283078][ T5397] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.296254][ T5397] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.432013][ T5397] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.463481][ T5397] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.481951][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.489207][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.512758][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.520464][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.775525][ T5397] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.854270][ T5397] veth0_vlan: entered promiscuous mode
[ 100.873542][ T5397] veth1_vlan: entered promiscuous mode
[ 100.922585][ T5397] veth0_macvtap: entered promiscuous mode
[ 100.935888][ T5397] veth1_macvtap: entered promiscuous mode
[ 100.956707][ T4444] Bluetooth: hci0: command 0x0409 tx timeout
[ 100.963737][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.985985][ T5397] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.003828][ T5397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.014674][ T5397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.024935][ T5397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.037318][ T5397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.142530][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.169280][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.215054][ T5052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.223631][ T5052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.286745][ T5462] syz-executor.0[5462]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 101.374668][ T5462] loop0: detected capacity change from 0 to 8192
[ 101.384447][ T5462] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 101.399086][ T5462] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 101.410102][ T5462] REISERFS (device loop0): using ordered data mode
[ 101.417872][ T5462] reiserfs: using flush barriers
[ 101.429232][ T5462] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 101.451057][ T5462] REISERFS (device loop0): checking transaction log (loop0)
[ 101.562061][ T5462] REISERFS (device loop0): Using r5 hash to sort names
[ 101.570177][ T5462] REISERFS (device loop0): using 3.5.x disk format
[ 101.646633][ C0] ==================================================================
[ 101.654752][ C0] BUG: KASAN: unknown-crash in __hrtimer_run_queues+0xb18/0xc10
[ 101.662514][ C0] Read of size 8 at addr ffffc9000485fc80 by task syz-executor.0/5462
[ 101.670963][ C0]
[ 101.673319][ C0] CPU: 0 PID: 5462 Comm: syz-executor.0 Not tainted 6.5.0-rc7-next-20230822-syzkaller-g28c736b0e92e #0
[ 101.679266][ T1] ------------[ cut here ]------------
[ 101.684433][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 101.690026][ T1] kernel BUG at arch/x86/mm/physaddr.c:28!
[ 101.700296][ C0] Call Trace:
[ 101.700305][ C0]
[ 101.700312][ C0] dump_stack_lvl+0xd9/0x1b0
[ 101.700343][ C0] print_report+0xc4/0x620
[ 101.706186][ T1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 101.709414][ C0] ? __virt_addr_valid+0x5e/0x2d0
[ 101.712250][ T1] CPU: 1 PID: 1 Comm: init Not tainted 6.5.0-rc7-next-20230822-syzkaller-g28c736b0e92e #0
[ 101.716905][ C0] kasan_report+0xda/0x110
[ 101.721298][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 101.727558][ C0] ? __hrtimer_run_queues+0xb18/0xc10
[ 101.732559][ T1] RIP: 0010:__phys_addr+0xd3/0x140
[ 101.742427][ C0] ? __hrtimer_run_queues+0xb18/0xc10
[ 101.746821][ T1] Code: 48 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 74 46 4c 00 48 85 ed 75 0d e8 da 4a 4c 00 48 89 d8 5b 5d 41 5c c3 e8 cd 4a 4c 00 <0f> 0b e8 c6 4a 4c 00 48 c7 c0 10 f0 99 8c 48 ba 00 00 00 00 00 fc
[ 101.756858][ C0] __hrtimer_run_queues+0xb18/0xc10
[ 101.762198][ T1] RSP: 0018:ffffc90000067cd8 EFLAGS: 00010293
[ 101.767393][ C0] ? enqueue_hrtimer+0x310/0x310
[ 101.772748][ T1]
[ 101.772754][ T1] RAX: 0000000000000000 RBX: 0000778100040020 RCX: 0000000000000000
[ 101.792595][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610
[ 101.797776][ T1] RDX: ffff888015668000 RSI: ffffffff813b8773 RDI: 0000000000000006
[ 101.803914][ C0] hrtimer_interrupt+0x31b/0x800
[ 101.808939][ T1] RBP: 0000000180040020 R08: 0000000000000006 R09: 0000000180040020
[ 101.811257][ C0] __sysvec_apic_timer_interrupt+0x105/0x3f0
[ 101.819400][ T1] R10: 0000778100040020 R11: 0000000000000000 R12: 0000000000000000
[ 101.825618][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0
[ 101.833595][ T1] R13: ffffc90000067d38 R14: 0000000100040020 R15: 0000000000000000
[ 101.838596][ C0]
[ 101.846627][ T1] FS: 00007f5a49cf0380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 101.852585][ C0]
[ 101.852595][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 101.860626][ T1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 101.866879][ C0] RIP: 0010:memmove+0x28/0x1b0
[ 101.875024][ T1] CR2: 0000000100040020 CR3: 000000002a053000 CR4: 00000000003506e0
[ 101.878214][ C0] Code: c3 90 f3 0f 1e fa 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f b5 00 00 00 48 83 fa 20 0f 82 01 01 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 47 48 83 ea 20 48
[ 101.887129][ T1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 101.890049][ C0] RSP: 0018:ffffc90004caef18 EFLAGS: 00010286
[ 101.896011][ T1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 101.902585][ C0]
[ 101.902592][ C0] RAX: ffff888065490fb4 RBX: 0000000000000002 RCX: fffffffffb6eb3f7
[ 101.907339][ T1] Call Trace:
[ 101.907350][ T1]
[ 101.915286][ C0] RDX: ffffffffffffffe0 RSI: ffff888069da5b8d RDI: ffff888069da5b9d
[ 101.935739][ T1] ? show_regs+0x8f/0xa0
[ 101.943698][ C0] RBP: 0000000000000020 R08: ffff888065490f84 R09: 0000766972705f73
[ 101.949742][ T1] ? die+0x36/0xa0
[ 101.957871][ C0] R10: 667265736965722e R11: 0000766972705f73 R12: 0000000000000001
[ 101.960272][ T1] ? do_trap+0x22b/0x420
[ 101.968655][ C0] R13: 0000000000000000 R14: ffff888065490fa4 R15: 0000000000000010
[ 101.972005][ T1] ? __phys_addr+0xd3/0x140
[ 101.974997][ C0] leaf_paste_entries+0x43c/0x920
[ 101.983378][ T1] ? __phys_addr+0xd3/0x140
[ 101.987644][ C0] balance_leaf+0x9476/0xcd90
[ 101.995625][ T1] ? do_error_trap+0xf4/0x230
[ 101.999347][ C0] ? get_num_ver.constprop.0+0xfd0/0xfd0
[ 102.007398][ T1] ? __phys_addr+0xd3/0x140
[ 102.011826][ C0] ? replace_key+0x150/0x150
[ 102.020134][ T1] ? handle_invalid_op+0x34/0x40
[ 102.024637][ C0] do_balance+0x337/0x840
[ 102.029632][ T1] ? __phys_addr+0xd3/0x140
[ 102.034302][ C0] ? get_right_neighbor_position+0x170/0x170
[ 102.038961][ T1] ? exc_invalid_op+0x2d/0x40
[ 102.043711][ C0] ? bit_wait_timeout+0x160/0x160
[ 102.049516][ T1] ? asm_exc_invalid_op+0x1a/0x20
[ 102.054035][ C0] reiserfs_paste_into_item+0x62a/0x7c0
[ 102.059225][ T1] ? __phys_addr+0xd3/0x140
[ 102.064403][ C0] ? reiserfs_delete_object+0x200/0x200
[ 102.068796][ T1] ? __phys_addr+0xd3/0x140
[ 102.073624][ C0] ? search_by_entry_key+0x940/0x940
[ 102.079729][ T1] ? __phys_addr+0xd3/0x140
[ 102.084475][ C0] ? reiserfs_new_inode+0x1219/0x20b0
[ 102.089568][ T1] qlist_free_all+0x86/0x170
[ 102.094660][ C0] ? r5_hash+0xaf/0xd0
[ 102.100187][ T1] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 102.104872][ C0] ? make_cpu_key+0x26/0x2a0
[ 102.110486][ T1] kasan_quarantine_reduce+0x18b/0x1d0
[ 102.115080][ C0] reiserfs_add_entry+0x936/0xd20
[ 102.120431][ T1] __kasan_slab_alloc+0x65/0x90
[ 102.124923][ C0] ? reiserfs_lookup+0x690/0x690
[ 102.130303][ T1] kmem_cache_alloc+0x172/0x3b0
[ 102.134892][ C0] reiserfs_mkdir+0x68a/0x9a0
[ 102.138931][ T1] getname_flags.part.0+0x50/0x4d0
[ 102.145144][ C0] ? reiserfs_mknod+0x740/0x740
[ 102.149712][ T1] getname_flags+0x9c/0xf0
[ 102.155142][ C0] ? reiserfs_lookup_privroot+0x19b/0x200
[ 102.160333][ T1] user_path_at_empty+0x2c/0x60
[ 102.165567][ C0] ? down_write_killable_nested+0x250/0x250
[ 102.170833][ T1] do_faccessat+0x14d/0xb40
[ 102.175668][ C0] reiserfs_xattr_init+0x57f/0xbb0
[ 102.180347][ T1] ? stream_open+0x50/0x50
[ 102.185633][ C0] reiserfs_fill_super+0x2139/0x3150
[ 102.190643][ T1] ? rcu_is_watching+0x12/0xb0
[ 102.195047][ C0] ? reiserfs_remount+0x1640/0x1640
[ 102.201010][ T1] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 102.206279][ C0] ? snprintf+0xc8/0x100
[ 102.212341][ T1] do_syscall_64+0x38/0xb0
[ 102.216835][ C0] ? vsprintf+0x30/0x30
[ 102.222196][ T1] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 102.227114][ C0] ? bit_wait_timeout+0x160/0x160
[ 102.232649][ T1] RIP: 0033:0x7f5a49e44c91
[ 102.237493][ C0] ? preempt_count_sub+0x150/0x150
[ 102.242755][ T1] Code: 28 c3 c3 b8 08 00 00 00 0f 05 48 3d 00 f0 ff ff 76 10 48 8b 15 88 a1 0d 00 f7 d8 64 89 02 48 83 c8 ff c3 b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 68 a1 0d 00 f7 d8 64 89 02 48 83
[ 102.248710][ C0] ? do_raw_spin_lock+0x12e/0x2b0
[ 102.252927][ T1] RSP: 002b:00007fff5298b798 EFLAGS: 00000246 ORIG_RAX: 0000000000000015
[ 102.257422][ C0] ? down_write+0x14f/0x200
[ 102.261818][ T1] RAX: ffffffffffffffda RBX: 0000000000001262 RCX: 00007f5a49e44c91
[ 102.268056][ C0] ? setup_bdev_super+0x366/0x6f0
[ 102.273050][ T1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 00007f5a49febf4d
[ 102.277532][ C0] ? reiserfs_remount+0x1640/0x1640
[ 102.282791][ T1] RBP: 00007f5a49febf4d R08: 0000000000000000 R09: 0000000000000000
[ 102.303078][ C0] mount_bdev+0x1f3/0x2e0
[ 102.308172][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.316664][ C0] ? sget+0x610/0x610
[ 102.321315][ T1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000001262
[ 102.329442][ C0] ? apparmor_capable+0x1da/0x4e0
[ 102.334491][ T1]
[ 102.342692][ C0] ? reiserfs_kill_sb+0x1e0/0x1e0
[ 102.347949][ T1] Modules linked in:
[ 102.355989][ C0] legacy_get_tree+0x109/0x220
[ 102.367792][ T1] ---[ end trace 0000000000000000 ]---
[ 102.368525][ C0] vfs_get_tree+0x8c/0x370
[ 102.372584][ T1] RIP: 0010:__phys_addr+0xd3/0x140
[ 102.380632][ C0] path_mount+0x1492/0x1ed0
[ 102.380660][ C0] ? kmem_cache_free+0xf0/0x480
[ 102.385676][ T1] Code: 48 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 74 46 4c 00 48 85 ed 75 0d e8 da 4a 4c 00 48 89 d8 5b 5d 41 5c c3 e8 cd 4a 4c 00 <0f> 0b e8 c6 4a 4c 00 48 c7 c0 10 f0 99 8c 48 ba 00 00 00 00 00 fc
[ 102.388686][ C0] ? finish_automount+0xa50/0xa50
[ 102.388716][ C0] ? putname+0x101/0x140
[ 102.388740][ C0] __x64_sys_mount+0x293/0x310
[ 102.394050][ T1] RSP: 0018:ffffc90000067cd8 EFLAGS: 00010293
[ 102.397894][ C0] ? copy_mnt_ns+0xb60/0xb60
[ 102.397922][ C0] ? rcu_is_watching+0x12/0xb0
[ 102.397941][ C0] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 102.402686][ T1]
[ 102.402692][ T1] RAX: 0000000000000000 RBX: 0000778100040020 RCX: 0000000000000000
[ 102.408124][ C0] do_syscall_64+0x38/0xb0
[ 102.408154][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 102.412814][ T1] RDX: ffff888015668000 RSI: ffffffff813b8773 RDI: 0000000000000006
[ 102.417943][ C0] RIP: 0033:0x7f12a8c7e1ea
[ 102.417962][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 102.422580][ T1] RBP: 0000000180040020 R08: 0000000000000006 R09: 0000000180040020
[ 102.427561][ C0] RSP: 002b:00007f12a992eee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 102.427583][ C0] RAX: ffffffffffffffda RBX: 00007f12a992ef80 RCX: 00007f12a8c7e1ea
[ 102.427594][ C0] RDX: 0000000020001100 RSI: 0000000020000040 RDI: 00007f12a992ef40
[ 102.427607][ C0] RBP: 0000000020001100 R08: 00007f12a992ef80 R09: 0000000000000080
[ 102.427620][ C0] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000040
[ 102.427633][ C0] R13: 00007f12a992ef40 R14: 00000000000010f6 R15: 00000000200000c0
[ 102.427654][ C0]
[ 102.447819][ T1] R10: 0000778100040020 R11: 0000000000000000 R12: 0000000000000000
[ 102.452677][ C0]
[ 102.452688][ C0] The buggy address belongs to the virtual mapping at
[ 102.452688][ C0] [ffffc90004858000, ffffc90004861000) created by:
[ 102.452688][ C0] kernel_clone+0xfd/0x930
[ 102.457013][ T1] R13: ffffc90000067d38 R14: 0000000100040020 R15: 0000000000000000
[ 102.461811][ C0]
[ 102.461818][ C0] The buggy address belongs to the physical page:
[ 102.468539][ T1] FS: 00007f5a49cf0380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 102.473207][ C0] page:ffffea0001a5f040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x697c1
[ 102.478063][ T1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.484074][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 102.486390][ T1] CR2: 0000000100040020 CR3: 000000002a053000 CR4: 00000000003506e0
[ 102.494685][ C0] page_type: 0xffffffff()
[ 102.494704][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 102.494720][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 102.494731][ C0] page dumped because: kasan: bad access detected
[ 102.499168][ T1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 102.504993][ C0] page_owner tracks the page as allocated
[ 102.513329][ T1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 102.517723][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5385, tgid 5385 (syz-execprog), ts 96806686158, free_ts 96668437228
[ 102.517758][ C0] post_alloc_hook+0x2cf/0x340
[ 102.537693][ T1] Kernel panic - not syncing: Fatal exception
[ 102.545588][ C0] get_page_from_freelist+0x10d7/0x31b0
[ 102.545610][ C0] __alloc_pages+0x1d0/0x4a0
[ 102.545625][ C0] alloc_pages+0x1a9/0x270
[ 102.545649][ C0] __vmalloc_node_range+0xa6e/0x1540
[ 102.545673][ C0] copy_process+0x13f1/0x7400
[ 102.545692][ C0] kernel_clone+0xfd/0x930
[ 102.545710][ C0] __do_sys_clone+0xba/0x100
[ 102.545729][ C0] do_syscall_64+0x38/0xb0
[ 102.545752][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 102.545779][ C0] page last free stack trace:
[ 102.545784][ C0] free_unref_page_prepare+0x476/0xa40
[ 102.545810][ C0] free_unref_page+0x33/0x3b0
[ 102.545825][ C0] __unfreeze_partials+0x21d/0x240
[ 102.545850][ C0] qlist_free_all+0x6a/0x170
[ 102.545869][ C0] kasan_quarantine_reduce+0x18b/0x1d0
[ 102.545890][ C0] __kasan_slab_alloc+0x65/0x90
[ 102.545906][ C0] __kmem_cache_alloc_node+0x19b/0x350
[ 102.545931][ C0] __kmalloc+0x4f/0x100
[ 102.545946][ C0] tomoyo_supervisor+0xcdb/0xea0
[ 102.545965][ C0] tomoyo_execute_permission+0x38a/0x4a0
[ 102.545987][ C0] tomoyo_find_next_domain+0x367/0x2020
[ 102.546012][ C0] tomoyo_bprm_check_security+0x12d/0x1d0
[ 102.546037][ C0] security_bprm_check+0x6a/0xe0
[ 102.546057][ C0] bprm_execve+0x74d/0x1a50
[ 102.546075][ C0] do_execveat_common.isra.0+0x5d3/0x740
[ 102.546094][ C0] __x64_sys_execve+0x8c/0xb0
[ 102.546114][ C0]
[ 102.546117][ C0] Memory state around the buggy address:
[ 102.546126][ C0] ffffc9000485fb80: 20 00 04 00 01 00 00 00 01 ff 00 00 00 00 00 00
[ 102.546139][ C0] ffffc9000485fc00: 20 00 04 00 01 00 00 00 01 ff 00 00 00 00 00 00
[ 102.546151][ C0] >ffffc9000485fc80: 20 00 04 00 01 00 00 00 01 ff 00 00 00 00 00 00
[ 102.546161][ C0] ^
[ 102.546169][ C0] ffffc9000485fd00: 20 00 04 00 01 00 00 00 01 ff 00 00 00 00 00 00
[ 102.546181][ C0] ffffc9000485fd80: 20 00 04 00 01 00 00 00 01 ff 00 00 00 00 00 00
[ 102.546191][ C0] ==================================================================
[ 102.546203][ C0] BUG: unable to handle page fault for address: 0000000100040020
[ 102.546211][ C0] #PF: supervisor instruction fetch in kernel mode
[ 102.546221][ C0] #PF: error_code(0x0010) - not-present page
[ 102.546230][ C0] PGD 25706067 P4D 25706067 PUD 0
[ 102.546250][ C0] Oops: 0010 [#2] PREEMPT SMP KASAN
[ 102.546267][ C0] CPU: 0 PID: 5462 Comm: syz-executor.0 Tainted: G B D 6.5.0-rc7-next-20230822-syzkaller-g28c736b0e92e #0
[ 102.546290][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 102.546301][ C0] RIP: 0010:0x100040020
[ 102.546315][ C0] Code: Unable to access opcode bytes at 0x10003fff6.
[ 102.546322][ C0] RSP: 0018:ffffc90000007e38 EFLAGS: 00010046
[ 102.546336][ C0] RAX: ffff888079a28000 RBX: ffff8880b982b9c0 RCX: 1ffff1100f345156
[ 102.546350][ C0] RDX: ffff888079a28000 RSI: ffffffff8176bd0f RDI: ffffc9000485fc58
[ 102.546363][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 102.546375][ C0] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff8880b982b940
[ 102.546387][ C0] R13: 0000000000000000 R14: ffffc9000485fc58 R15: 0000000100040020
[ 102.546400][ C0] FS: 00007f12a992f6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 102.546420][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.546434][ C0] CR2: 0000000100040020 CR3: 000000005266b000 CR4: 00000000003506f0
[ 102.546446][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 102.546457][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 102.546469][ C0] Call Trace:
[ 102.546476][ C0]
[ 102.546482][ C0] ? show_regs+0x8f/0xa0
[ 102.546504][ C0] ? __die+0x2c/0x80
[ 102.546524][ C0] ? page_fault_oops+0x398/0xad0
[ 102.546544][ C0] ? vprintk_emit+0x12a/0x630
[ 102.546572][ C0] ? dump_pagetable+0x530/0x530
[ 102.546590][ C0] ? __wake_up_klogd.part.0+0x99/0xf0
[ 102.546616][ C0] ? vprintk_emit+0x12a/0x630
[ 102.546646][ C0] ? end_report+0x4c/0x150
[ 102.546661][ C0] ? reacquire_held_locks+0x4b0/0x4b0
[ 102.546687][ C0] ? dump_page+0x6ff/0x1340
[ 102.546712][ C0] ? do_user_addr_fault+0x53d/0x1010
[ 102.546732][ C0] ? print_report+0x2b5/0x620
[ 102.546750][ C0] ? exc_page_fault+0x5c/0xd0
[ 102.546767][ C0] ? asm_exc_page_fault+0x26/0x30
[ 102.546796][ C0] ? __hrtimer_run_queues+0x1cf/0xc10
[ 102.546823][ C0] ? __hrtimer_run_queues+0x203/0xc10
[ 102.546851][ C0] ? enqueue_hrtimer+0x310/0x310
[ 102.546873][ C0] ? ktime_get_update_offsets_now+0x3bc/0x610
[ 102.546906][ C0] ? hrtimer_interrupt+0x31b/0x800
[ 102.546937][ C0] ? __sysvec_apic_timer_interrupt+0x105/0x3f0
[ 102.546961][ C0] ? sysvec_apic_timer_interrupt+0x8e/0xc0
[ 102.546989][ C0]
[ 102.546994][ C0]
[ 102.547005][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 102.547038][ C0] ? memmove+0x28/0x1b0
[ 102.547056][ C0] ? leaf_paste_entries+0x43c/0x920
[ 102.547083][ C0] ? balance_leaf+0x9476/0xcd90
[ 102.547110][ C0] ? get_num_ver.constprop.0+0xfd0/0xfd0
[ 102.547134][ C0] ? replace_key+0x150/0x150
[ 102.547166][ C0] ? do_balance+0x337/0x840
[ 102.547192][ C0] ? get_right_neighbor_position+0x170/0x170
[ 102.547218][ C0] ? bit_wait_timeout+0x160/0x160
[ 102.547243][ C0] ? reiserfs_paste_into_item+0x62a/0x7c0
[ 102.547269][ C0] ? reiserfs_delete_object+0x200/0x200
[ 102.547322][ C0] ? search_by_entry_key+0x940/0x940
[ 102.547346][ C0] ? reiserfs_new_inode+0x1219/0x20b0
[ 102.547376][ C0] ? r5_hash+0xaf/0xd0
[ 102.547396][ C0] ? make_cpu_key+0x26/0x2a0
[ 102.547423][ C0] ? reiserfs_add_entry+0x936/0xd20
[ 102.547452][ C0] ? reiserfs_lookup+0x690/0x690
[ 102.547498][ C0] ? reiserfs_mkdir+0x68a/0x9a0
[ 102.547526][ C0] ? reiserfs_mknod+0x740/0x740
[ 102.547551][ C0] ? reiserfs_lookup_privroot+0x19b/0x200
[ 102.547573][ C0] ? down_write_killable_nested+0x250/0x250
[ 102.547596][ C0] ? reiserfs_xattr_init+0x57f/0xbb0
[ 102.547616][ C0] ? reiserfs_fill_super+0x2139/0x3150
[ 102.547639][ C0] ? reiserfs_remount+0x1640/0x1640
[ 102.547660][ C0] ? snprintf+0xc8/0x100
[ 102.547678][ C0] ? vsprintf+0x30/0x30
[ 102.547695][ C0] ? bit_wait_timeout+0x160/0x160
[ 102.547711][ C0] ? preempt_count_sub+0x150/0x150
[ 102.547739][ C0] ? do_raw_spin_lock+0x12e/0x2b0
[ 102.547767][ C0] ? down_write+0x14f/0x200
[ 102.547786][ C0] ? setup_bdev_super+0x366/0x6f0
[ 102.547812][ C0] ? reiserfs_remount+0x1640/0x1640
[ 102.547831][ C0] ? mount_bdev+0x1f3/0x2e0
[ 102.547856][ C0] ? sget+0x610/0x610
[ 102.547880][ C0] ? apparmor_capable+0x1da/0x4e0
[ 102.547907][ C0] ? reiserfs_kill_sb+0x1e0/0x1e0
[ 102.547924][ C0] ? legacy_get_tree+0x109/0x220
[ 102.547953][ C0] ? vfs_get_tree+0x8c/0x370
[ 102.547977][ C0] ? path_mount+0x1492/0x1ed0
[ 102.548006][ C0] ? kmem_cache_free+0xf0/0x480
[ 102.548032][ C0] ? finish_automount+0xa50/0xa50
[ 102.548059][ C0] ? putname+0x101/0x140
[ 102.548083][ C0] ? __x64_sys_mount+0x293/0x310
[ 102.548108][ C0] ? copy_mnt_ns+0xb60/0xb60
[ 102.548133][ C0] ? rcu_is_watching+0x12/0xb0
[ 102.548151][ C0] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 102.548175][ C0] ? do_syscall_64+0x38/0xb0
[ 102.548199][ C0] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 102.548231][ C0]
[ 102.548236][ C0] Modules linked in:
[ 102.548244][ C0] CR2: 0000000100040020
[ 102.548251][ C0] ---[ end trace 0000000000000000 ]---
[ 102.548257][ C0] RIP: 0010:__phys_addr+0xd3/0x140
[ 102.548280][ C0] Code: 48 89 d8 31 ff 48 d3 e8 48 89 c5 48 89 c6 e8 74 46 4c 00 48 85 ed 75 0d e8 da 4a 4c 00 48 89 d8 5b 5d 41 5c c3 e8 cd 4a 4c 00 <0f> 0b e8 c6 4a 4c 00 48 c7 c0 10 f0 99 8c 48 ba 00 00 00 00 00 fc
[ 102.548296][ C0] RSP: 0018:ffffc90000067cd8 EFLAGS: 00010293
[ 102.548310][ C0] RAX: 0000000000000000 RBX: 0000778100040020 RCX: 0000000000000000
[ 102.548321][ C0] RDX: ffff888015668000 RSI: ffffffff813b8773 RDI: 0000000000000006
[ 102.548334][ C0] RBP: 0000000180040020 R08: 0000000000000006 R09: 0000000180040020
[ 102.548345][ C0] R10: 0000778100040020 R11: 0000000000000000 R12: 0000000000000000
[ 102.548357][ C0] R13: ffffc90000067d38 R14: 0000000100040020 R15: 0000000000000000
[ 102.548369][ C0] FS: 00007f12a992f6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 102.548388][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.548401][ C0] CR2: 0000000100040020 CR3: 000000005266b000 CR4: 00000000003506f0
[ 102.548413][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 102.548423][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 103.629295][ T1] Shutting down cpus with NMI
[ 104.697416][ T1] Kernel Offset: disabled
[ 104.701732][ T1] Rebooting in 86400 seconds..