last executing test programs: 4.32216896s ago: executing program 1 (id=12): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="2c747970653da5efd8b92c6e6c733d61736369692c706172743d3078303030303030303030303030303030322c706172743d3078303030303030303030303030303030622c706172743d3078303030303030303030303030303030342c00"], 0x20, 0x70f, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4.093035863s ago: executing program 4 (id=5): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f00000000c0), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181242, 0x148) pipe2(0x0, 0x10000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0xc2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) truncate(0x0, 0xf88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05"], 0x8) 2.943201827s ago: executing program 1 (id=20): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x1001021, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 2.902353117s ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 2.763963298s ago: executing program 3 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 2.753362278s ago: executing program 4 (id=26): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105e2, &(0x7f0000020c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) write$binfmt_elf32(r0, &(0x7f00000033c0)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x4, 0x5, 0xb, 0x7, 0x3, 0x3e, 0x5de, 0x1b4, 0x38, 0x2fb, 0x2, 0x8, 0x20, 0x1, 0x0, 0x100, 0x9}, [{0x0, 0x0, 0x3fa, 0xfffffffa, 0x717e, 0x1000, 0x6bff1131, 0x7}]}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) 2.584811271s ago: executing program 3 (id=29): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 2.162218175s ago: executing program 3 (id=31): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.937790738s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @broadcast}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) 1.140425037s ago: executing program 3 (id=36): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f00000000c0), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181242, 0x148) pipe2(0x0, 0x10000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0xc2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) truncate(0x0, 0xf88) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e"], 0x8) 935.923489ms ago: executing program 2 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0xd3, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 893.90567ms ago: executing program 2 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 773.774351ms ago: executing program 2 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 731.299441ms ago: executing program 0 (id=41): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 712.270492ms ago: executing program 2 (id=42): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 666.130902ms ago: executing program 2 (id=43): mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000045c0)="02", 0x1}, {0x0}], 0x2) 641.859493ms ago: executing program 0 (id=44): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB="2c728c6fc5296f64653d30300500", @ANYRESDEC=0x0]) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) 617.669483ms ago: executing program 2 (id=45): syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000e60700410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) userfaultfd(0x80001) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4000) 600.450893ms ago: executing program 3 (id=46): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 586.929674ms ago: executing program 0 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 158.778999ms ago: executing program 0 (id=48): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="160000000d0a01080000000000000a0000010000"], 0x14}, 0x1, 0x0, 0x0, 0x400c045}, 0x8000) 111.564239ms ago: executing program 1 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0xd3, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 61.727439ms ago: executing program 0 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 61.282929ms ago: executing program 1 (id=51): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r1, 0x207}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 19.84864ms ago: executing program 1 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0) 0s ago: executing program 0 (id=53): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. syzkaller login: [ 28.958412][ T4312] cgroup: Unknown subsys name 'net' [ 29.229626][ T4312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.519555][ T4312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.238993][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.240900][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.242450][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.247223][ T4329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.250337][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.252425][ T4339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.253905][ T4339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.255274][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.256717][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.258714][ T4339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.259849][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.260040][ T4339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.261472][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.262643][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.264910][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.265325][ T4339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.267814][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.267973][ T4339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.270814][ T4339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.270897][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.274812][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.275356][ T4341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.278284][ T4341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.282958][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.285402][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.288398][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.290428][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.292052][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.295726][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.298316][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.422842][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.448169][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 30.452838][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 30.465720][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.475923][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.478507][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.480148][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.483224][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.484524][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.486020][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.498938][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.517949][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.530091][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.536692][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.538635][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.540126][ T4324] device bridge_slave_0 entered promiscuous mode [ 30.547615][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.548895][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.550452][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.553311][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.554537][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.556118][ T4332] device bridge_slave_0 entered promiscuous mode [ 30.558350][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.559513][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.561096][ T4324] device bridge_slave_1 entered promiscuous mode [ 30.563460][ T4328] team0: Port device team_slave_0 added [ 30.566108][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.567673][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.569252][ T4325] device bridge_slave_1 entered promiscuous mode [ 30.570508][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.571741][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.573225][ T4332] device bridge_slave_1 entered promiscuous mode [ 30.577899][ T4328] team0: Port device team_slave_1 added [ 30.583087][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.584275][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.589066][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.603637][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.604911][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.609403][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.611569][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.612803][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.614406][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.623382][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.628609][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.630279][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.631477][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.633093][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.635595][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.640379][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.643899][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.648436][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.688170][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.727157][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.769779][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.774816][ T4324] team0: Port device team_slave_0 added [ 30.776593][ T4324] team0: Port device team_slave_1 added [ 30.778900][ T4325] team0: Port device team_slave_0 added [ 30.780811][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.783905][ T4332] team0: Port device team_slave_0 added [ 30.794466][ T4325] team0: Port device team_slave_1 added [ 30.799952][ T4332] team0: Port device team_slave_1 added [ 30.810687][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.811833][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.815991][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.822613][ T4333] team0: Port device team_slave_0 added [ 30.825961][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.829716][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.834143][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.837940][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.839096][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.843667][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.847520][ T4333] team0: Port device team_slave_1 added [ 30.852609][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.853660][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.858659][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.860828][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.862033][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.866639][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.874017][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.875178][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.879867][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.882211][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.883487][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.887861][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.890038][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.891180][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.895648][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.958092][ T4324] device hsr_slave_0 entered promiscuous mode [ 30.997107][ T4324] device hsr_slave_1 entered promiscuous mode [ 31.047003][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.048419][ T4324] Cannot create hsr debugfs directory [ 31.088718][ T4332] device hsr_slave_0 entered promiscuous mode [ 31.127060][ T4332] device hsr_slave_1 entered promiscuous mode [ 31.177016][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.178294][ T4332] Cannot create hsr debugfs directory [ 31.228051][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.277118][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.327003][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.328221][ T4325] Cannot create hsr debugfs directory [ 31.378074][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.417115][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.456990][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.458383][ T4333] Cannot create hsr debugfs directory [ 31.528263][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.554557][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.593302][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.628570][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.719552][ T4332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.771958][ T4332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.808749][ T4332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.868518][ T4332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.927435][ T4324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.968207][ T4324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.007936][ T4324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.068062][ T4324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.123384][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.135809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.138416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.141915][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.145934][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.178037][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.220697][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.257970][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.311353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.313217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.314800][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.316050][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.317855][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 32.317931][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 32.327350][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 32.327562][ T4341] Bluetooth: hci1: command 0x0409 tx timeout [ 32.332484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.336215][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.380423][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.382188][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.384099][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.385326][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.386878][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.396988][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 32.428769][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.477438][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.513512][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.515372][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.523553][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.530643][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.533028][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.534548][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.543255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.545585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.553693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.555320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.562277][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.565168][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.566838][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.573324][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.574921][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.576439][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.578604][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.580421][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.581727][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.583245][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.585387][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.598754][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.600487][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.602008][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.603214][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.611311][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.613872][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.615649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.619130][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.624001][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.626516][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.642414][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.644461][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.650952][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.652596][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.658722][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.660330][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.662654][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.673701][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.675471][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.677447][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.679349][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.680462][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.682229][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.683845][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.685436][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.686676][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.689163][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.691908][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.703818][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.705542][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.708518][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.711690][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.715152][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.717329][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.724614][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.726627][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.728978][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.730572][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.732004][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.734284][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.748713][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.750081][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.751342][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.752931][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.754482][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.756257][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.760681][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.762215][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.765208][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.767853][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.770855][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.774796][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.788131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.789966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.803571][ T4328] device veth0_vlan entered promiscuous mode [ 32.806867][ T4328] device veth1_vlan entered promiscuous mode [ 32.813032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.814767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.816285][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.817579][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.822597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.825704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.827759][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.828893][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.830389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.832330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.834041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.835881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.841189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.842964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.844631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.846156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.859968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.862154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.863706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.865486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.868170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.869893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.871446][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.872617][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.874129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.875705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.880834][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.882036][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.883572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.885252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.886868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.889292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.892322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.893838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.898484][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.899726][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.910665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.912345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.913766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.915023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.921271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.923130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.924788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.926395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.929765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.931414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.934388][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.937796][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.941166][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.945483][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.947987][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.953228][ T4328] device veth0_macvtap entered promiscuous mode [ 32.963307][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.965377][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.968653][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.970179][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.971602][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.982196][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.984474][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.986132][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.988581][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.990163][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.002185][ T4328] device veth1_macvtap entered promiscuous mode [ 33.009397][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.010998][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.012619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.014338][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.015758][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.025680][ T4324] device veth0_vlan entered promiscuous mode [ 33.033838][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.035598][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.039699][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.041242][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.043682][ T4332] device veth0_vlan entered promiscuous mode [ 33.053587][ T4324] device veth1_vlan entered promiscuous mode [ 33.056722][ T4332] device veth1_vlan entered promiscuous mode [ 33.062197][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.065005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.066624][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.071399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.073161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.078388][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.085777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.087830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.089159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.091262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.092945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.094248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.099459][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.112075][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.113591][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.115085][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.116626][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.122035][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.123711][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.132094][ T4332] device veth0_macvtap entered promiscuous mode [ 33.133764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.135389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.137900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.143088][ T4324] device veth0_macvtap entered promiscuous mode [ 33.145609][ T4332] device veth1_macvtap entered promiscuous mode [ 33.156575][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.164918][ T4324] device veth1_macvtap entered promiscuous mode [ 33.166392][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.167998][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.169464][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.170950][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.172287][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.173620][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.175117][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.184075][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.185731][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.196641][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.202018][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.204710][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.206388][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.208652][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.210798][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.212511][ T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.223510][ T4325] device veth0_vlan entered promiscuous mode [ 33.232292][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.234195][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.235943][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.240584][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.243256][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.248564][ T4325] device veth1_vlan entered promiscuous mode [ 33.251793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.253389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.255014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.260953][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.262816][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.265460][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.270712][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.272438][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.274103][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.275891][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.284385][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.286092][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.288963][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.294668][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.296483][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.301472][ T4332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.303073][ T4332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.304599][ T4332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.306181][ T4332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.311067][ T4324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.312459][ T4324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.314121][ T4324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.315601][ T4324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.320736][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.322050][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.330446][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.332122][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.341715][ T4325] device veth0_macvtap entered promiscuous mode [ 33.346178][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.348148][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.349888][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.351506][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.353094][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.361587][ T4325] device veth1_macvtap entered promiscuous mode [ 33.372003][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.373442][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.381105][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.382751][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.384367][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.386003][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.388632][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.391511][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.398686][ T4333] device veth0_vlan entered promiscuous mode [ 33.404510][ T4333] device veth1_vlan entered promiscuous mode [ 33.417799][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.419782][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.421534][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.423343][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.425034][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.426696][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.430012][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.432092][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.433689][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.435246][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.436884][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.466708][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.468474][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.476504][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.478799][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.480373][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.482037][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.483904][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.485540][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.488203][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.490616][ T4333] device veth0_macvtap entered promiscuous mode [ 33.494711][ T4407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.496071][ T4407] IPv6: NLM_F_CREATE should be set when creating new route [ 33.498710][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.500417][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.501888][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.505011][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506446][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.512142][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.513663][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.519502][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.520900][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.522390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.544070][ T4333] device veth1_macvtap entered promiscuous mode [ 33.556475][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.558380][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.561394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.572206][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.574200][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.575816][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.579172][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.580920][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.582688][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.584220][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.586012][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.601810][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.609177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.610843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.616040][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.618536][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.620595][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.622232][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.623886][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.625559][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.634682][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.636471][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.639221][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.643336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.645090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.655812][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.657218][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.659356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.663832][ T4413] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 33.666820][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.668925][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.671239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.686452][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.695275][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.698521][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699950][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.705404][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.706725][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.711056][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.742080][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.743488][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.755768][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.276661][ T4430] Zero length message leads to an empty skb [ 34.302119][ T4431] loop1: detected capacity change from 0 to 1024 [ 34.304130][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.305507][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.313457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.341381][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.344574][ T4435] autofs4:pid:4435:autofs_fill_super: called with bogus options [ 34.349961][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.351353][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.399289][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 34.399347][ T4341] Bluetooth: hci0: command 0x041b tx timeout [ 34.407562][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 34.408811][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 34.422259][ T4438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.423586][ T4438] IPv6: NLM_F_CREATE should be set when creating new route [ 34.477644][ T4341] Bluetooth: hci2: command 0x041b tx timeout [ 35.583139][ T4443] loop4: detected capacity change from 0 to 8192 [ 35.606429][ T4442] hfsplus: b-tree write err: -5, ino 25 [ 35.608028][ T4442] hfsplus: b-tree write err: -5, ino 4 [ 35.608977][ T4442] hfsplus: b-tree write err: -5, ino 2 [ 35.611172][ T4443] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.616529][ T4443] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 35.623866][ T4443] REISERFS (device loop4): using ordered data mode [ 35.624892][ T4443] reiserfs: using flush barriers [ 35.628315][ T4443] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.657152][ T4443] REISERFS (device loop4): checking transaction log (loop4) [ 35.718249][ T4457] loop1: detected capacity change from 0 to 8192 [ 35.721502][ T4457] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.723793][ T4457] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 35.725882][ T4443] REISERFS (device loop4): Using tea hash to sort names [ 35.727708][ T4443] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 35.729737][ T4457] REISERFS (device loop1): using ordered data mode [ 35.730851][ T4457] reiserfs: using flush barriers [ 35.736709][ T4457] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 35.750362][ T4457] REISERFS (device loop1): checking transaction log (loop1) [ 35.763203][ T4457] REISERFS (device loop1): Using r5 hash to sort names [ 35.764649][ T4457] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 35.830546][ T4457] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 35.853913][ T4457] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 35.861973][ T4457] REISERFS (device loop1): Remounting filesystem read-only [ 35.863828][ T4457] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 35.907932][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 35.910982][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 35.917273][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 35.919957][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 35.929508][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 35.932410][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 35.968307][ T4471] loop4: detected capacity change from 0 to 8192 [ 35.979955][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 35.984168][ T4474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.985965][ T4471] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 35.991024][ T4471] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 35.992634][ T4471] REISERFS (device loop4): using ordered data mode [ 36.332347][ T4471] reiserfs: using flush barriers [ 36.335638][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.337746][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.340393][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.342395][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.345004][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.346882][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.349629][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.351471][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.352318][ T4471] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.354188][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.358782][ T4471] REISERFS (device loop4): checking transaction log (loop4) [ 36.369626][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.373190][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.375002][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.378160][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.387110][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.395387][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.413141][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.424537][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.429566][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.439683][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.441660][ T4471] REISERFS (device loop4): Using tea hash to sort names [ 36.443338][ T4471] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 36.450515][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.464151][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.471666][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.478497][ T4341] Bluetooth: hci3: command 0x040f tx timeout [ 36.479776][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 36.479788][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 36.487555][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.495106][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.507048][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.510988][ T4468] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 36.514047][ T4488] loop0: detected capacity change from 0 to 1024 [ 36.516634][ T4468] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 36.569774][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 37.714415][ T4441] hfsplus: b-tree write err: -5, ino 25 [ 37.715523][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 37.716511][ T4441] hfsplus: b-tree write err: -5, ino 2 [ 37.738069][ T4496] loop3: detected capacity change from 0 to 8192 [ 37.760715][ T4496] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 37.763006][ T4496] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 37.764519][ T4496] REISERFS (device loop3): using ordered data mode [ 37.765700][ T4496] reiserfs: using flush barriers [ 37.785323][ T4496] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 37.788563][ T4496] REISERFS (device loop3): checking transaction log (loop3) [ 37.838676][ T4497] autofs4:pid:4497:autofs_fill_super: called with bogus options [ 37.853853][ T4496] REISERFS (device loop3): Using tea hash to sort names [ 37.855578][ T4496] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 37.861201][ T4513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.894742][ T4515] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 38.541295][ T4471] ================================================================== [ 38.542667][ T4471] BUG: KASAN: use-after-free in leaf_paste_entries+0x4f4/0xae4 [ 38.543977][ T4471] Read of size 2 at addr ffff0000e494100c by task syz.4.26/4471 [ 38.545249][ T4471] [ 38.545628][ T4471] CPU: 0 PID: 4471 Comm: syz.4.26 Not tainted syzkaller #0 [ 38.546693][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.548363][ T4471] Call trace: [ 38.548891][ T4471] dump_backtrace+0x1c0/0x1ec [ 38.549687][ T4471] show_stack+0x2c/0x3c [ 38.550401][ T4471] __dump_stack+0x30/0x40 [ 38.551094][ T4471] dump_stack_lvl+0xf4/0x15c [ 38.551847][ T4471] print_address_description+0x88/0x218 [ 38.552744][ T4471] print_report+0x50/0x68 [ 38.553526][ T4471] kasan_report+0xa8/0xfc [ 38.554245][ T4471] __asan_report_load_n_noabort+0x28/0x34 [ 38.555129][ T4471] leaf_paste_entries+0x4f4/0xae4 [ 38.555906][ T4471] leaf_copy_dir_entries+0x4dc/0x788 [ 38.556770][ T4471] leaf_copy_boundary_item+0x888/0x19dc [ 38.557627][ T4471] leaf_move_items+0x6a0/0xbb0 [ 38.558379][ T4471] leaf_shift_left+0xc8/0x3ac [ 38.559140][ T4471] balance_leaf+0x27b0/0xd92c [ 38.559948][ T4471] do_balance+0x270/0x790 [ 38.560631][ T4471] reiserfs_cut_from_item+0x114c/0x1a14 [ 38.561555][ T4471] reiserfs_do_truncate+0x738/0x1058 [ 38.562480][ T4471] reiserfs_truncate_file+0x5d0/0xb00 [ 38.563410][ T4471] reiserfs_setattr+0xab4/0xfec [ 38.564228][ T4471] notify_change+0xb0c/0xdcc [ 38.565000][ T4471] do_truncate+0x188/0x20c [ 38.565766][ T4471] path_openat+0x2110/0x26bc [ 38.566553][ T4471] do_filp_open+0x194/0x384 [ 38.567273][ T4471] do_sys_openat2+0x134/0x3f4 [ 38.568094][ T4471] __arm64_sys_openat+0x118/0x14c [ 38.568937][ T4471] invoke_syscall+0x98/0x2b4 [ 38.569696][ T4471] el0_svc_common+0x138/0x258 [ 38.570452][ T4471] do_el0_svc+0x58/0x130 [ 38.571149][ T4471] el0_svc+0x58/0x128 [ 38.571828][ T4471] el0t_64_sync_handler+0x84/0xf0 [ 38.572681][ T4471] el0t_64_sync+0x18c/0x190 [ 38.573414][ T4471] [ 38.573837][ T4471] The buggy address belongs to the physical page: [ 38.574900][ T4471] page:00000000de5a978f refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x124941 [ 38.576688][ T4471] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 38.577927][ T4471] raw: 05ffc00000000000 fffffc0003e0a648 fffffc0003925108 0000000000000000 [ 38.579310][ T4471] raw: 0000000000000001 0000000000000000 00000000ffffff7f 0000000000000000 [ 38.580828][ T4471] page dumped because: kasan: bad access detected [ 38.581981][ T4471] [ 38.582389][ T4471] Memory state around the buggy address: [ 38.583390][ T4471] ffff0000e4940f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.584742][ T4471] ffff0000e4940f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 38.586218][ T4471] >ffff0000e4941000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.587522][ T4471] ^ [ 38.588203][ T4471] ffff0000e4941080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.589579][ T4471] ffff0000e4941100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.590825][ T4471] ================================================================== [ 38.592443][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 38.593372][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 38.599555][ T4471] Disabling lock debugging due to kernel taint [ 38.605878][ T4517] Unable to handle kernel paging request at virtual address dfff9ffff3e7efff [ 38.606915][ C0] Unable to handle kernel paging request at virtual address dfff800000000024 [ 38.607465][ C1] slab maple_node [ 38.608600][ C0] KASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127] [ 38.609247][ C1] Unable to handle kernel paging request at virtual address dfff800000000012 [ 38.610435][ C0] Mem abort info: [ 38.611850][ C1] KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] [ 38.612374][ C0] ESR = 0x0000000096000006 [ 38.613816][ C1] Mem abort info: [ 38.614456][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 38.615077][ C1] ESR = 0x0000000096000006 [ 38.615911][ C0] SET = 0, FnV = 0 [ 38.616699][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 38.617238][ C0] EA = 0, S1PTW = 0 [ 38.618229][ C1] SET = 0, FnV = 0 [ 38.618785][ C0] FSC = 0x06: level 2 translation fault [ 38.619438][ C1] EA = 0, S1PTW = 0 [ 38.620221][ C0] Data abort info: [ 38.620226][ C0] ISV = 0, ISS = 0x00000006 [ 38.620864][ C1] FSC = 0x06: level 2 translation fault [ 38.621382][ C0] CM = 0, WnR = 0 [ 38.622235][ C1] Data abort info: [ 38.623046][ C0] [dfff800000000024] address between user and kernel address ranges [ 38.623624][ C1] ISV = 0, ISS = 0x00000006 [ 38.624148][ C0] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 38.625532][ C1] CM = 0, WnR = 0 [ 38.626178][ C0] Modules linked in: [ 38.627377][ C1] [dfff800000000012] address between user and kernel address ranges [ 38.627918][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B syzkaller #0 [ 38.631046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.632538][ C0] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 38.633719][ C0] pc : cpuacct_account_field+0x100/0x1cc [ 38.634587][ C0] lr : cpuacct_account_field+0xf8/0x1cc [ 38.635415][ C0] sp : ffff800008007af0 [ 38.636037][ C0] x29: ffff800008007af0 x28: 1ffff00002a33e40 x27: ffff800021505ff0 [ 38.637250][ C0] x26: ffff00019f535258 x25: 0000000000000002 x24: ffff8000152bf580 [ 38.638470][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000120 [ 38.639653][ C0] x20: ffff800011b9a9e0 x19: 0000000000985e74 x18: ffff800011b9bf60 [ 38.641047][ C0] x17: ffff80018a3bc000 x16: ffff8000082eef80 x15: 0000000000000002 [ 38.642358][ C0] x14: 0000000000000001 x13: 1fffe00033ea6920 x12: 0000000000ff0100 [ 38.643593][ C0] x11: ff0080000a8df3f0 x10: 0000000000000003 x9 : 0000000000000000 [ 38.644812][ C0] x8 : 0000000000000024 x7 : 0000000000000000 x6 : ffff8000083c1bd4 [ 38.646084][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000002 [ 38.647446][ C0] x2 : 0000000000985e74 x1 : ffff800011b9a9e0 x0 : 0000000000000000 [ 38.648824][ C0] Call trace: [ 38.649407][ C0] cpuacct_account_field+0x100/0x1cc [ 38.650264][ C0] task_group_account_field+0x7c/0x1ac [ 38.651220][ C0] irqtime_account_process_tick+0x374/0x498 [ 38.652141][ C0] account_process_tick+0x44/0x46c [ 38.652983][ C0] update_process_times+0x34/0x1ec [ 38.653802][ C0] tick_sched_timer+0x30c/0x4bc [ 38.654635][ C0] __hrtimer_run_queues+0x408/0xc3c [ 38.655438][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 38.656220][ C0] arch_timer_handler_virt+0x74/0x88 [ 38.657098][ C0] handle_percpu_devid_irq+0x174/0x34c [ 38.658032][ C0] generic_handle_domain_irq+0xe0/0x140 [ 38.658974][ C0] gic_handle_irq+0x70/0x1d4 [ 38.659732][ C0] call_on_irq_stack+0x30/0x48 [ 38.660575][ C0] do_interrupt_handler+0xd4/0x138 [ 38.661443][ C0] el1_interrupt+0x34/0x54 [ 38.662198][ C0] el1h_64_irq_handler+0x18/0x24 [ 38.663095][ C0] el1h_64_irq+0x64/0x68 [ 38.663805][ C0] __memcpy+0x1f4/0x240 [ 38.664487][ C0] leaf_paste_entries+0x69c/0xae4 [ 38.665389][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 38.666306][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 38.667244][ C0] leaf_move_items+0x6a0/0xbb0 [ 38.668000][ C0] leaf_shift_left+0xc8/0x3ac [ 38.668764][ C0] balance_leaf+0x27b0/0xd92c [ 38.669543][ C0] do_balance+0x270/0x790 [ 38.670249][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 38.671126][ C0] reiserfs_do_truncate+0x738/0x1058 [ 38.672025][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 38.672936][ C0] reiserfs_setattr+0xab4/0xfec [ 38.673776][ C0] notify_change+0xb0c/0xdcc [ 38.674506][ C0] do_truncate+0x188/0x20c [ 38.675238][ C0] path_openat+0x2110/0x26bc [ 38.675999][ C0] do_filp_open+0x194/0x384 [ 38.676750][ C0] do_sys_openat2+0x134/0x3f4 [ 38.677532][ C0] __arm64_sys_openat+0x118/0x14c [ 38.678329][ C0] invoke_syscall+0x98/0x2b4 [ 38.679087][ C0] el0_svc_common+0x138/0x258 [ 38.679880][ C0] do_el0_svc+0x58/0x130 [ 38.680613][ C0] el0_svc+0x58/0x128 [ 38.681261][ C0] el0t_64_sync_handler+0x84/0xf0 [ 38.682108][ C0] el0t_64_sync+0x18c/0x190 [ 38.682913][ C0] Code: aa1403e0 95f51fba 910482d5 d343fea8 (38776908) [ 38.684042][ C0] ---[ end trace 0000000000000000 ]--- [ 38.699068][ C0] ------------[ cut here ]------------ [ 38.699820][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 38.701301][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 38.702602][ C0] Modules linked in: [ 38.703148][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D syzkaller #0 [ 38.704333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.705723][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 38.707056][ C0] pc : __virt_to_phys+0x88/0xa0 [ 38.707883][ C0] lr : __virt_to_phys+0x84/0xa0 [ 38.708706][ C0] sp : ffff800008007200 [ 38.709425][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 38.710728][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: 0000000000000000 [ 38.712104][ C0] x23: ffff00019f530a28 x22: 000000000001057a x21: 00000000000000c0 [ 38.713476][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 38.714944][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 38.716341][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 38.717766][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 38.719133][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 38.720548][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 38.721938][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 38.723232][ C0] Call trace: [ 38.723791][ C0] __virt_to_phys+0x88/0xa0 [ 38.724514][ C0] check_and_switch_context+0x33c/0x6c8 [ 38.725409][ C0] efi_virtmap_unload+0x5c/0xd0 [ 38.726201][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 38.727307][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 38.728269][ C0] efi_pstore_write+0x298/0x39c [ 38.729069][ C0] pstore_dump+0x5b0/0x820 [ 38.729797][ C0] kmsg_dump+0x170/0x260 [ 38.730474][ C0] oops_exit+0x2c/0x38 [ 38.731195][ C0] die+0xb8/0x1d8 [ 38.731837][ C0] die_kernel_fault+0x6c/0x80 [ 38.732615][ C0] __do_kernel_fault+0x3a0/0x3ac [ 38.733489][ C0] do_bad_area+0x84/0x234 [ 38.734212][ C0] do_translation_fault+0xac/0xc8 [ 38.735054][ C0] do_mem_abort+0x70/0x194 [ 38.735725][ C0] el1_abort+0x3c/0x5c [ 38.736449][ C0] el1h_64_sync_handler+0x50/0xac [ 38.737232][ C0] el1h_64_sync+0x64/0x68 [ 38.737916][ C0] cpuacct_account_field+0x100/0x1cc [ 38.738715][ C0] task_group_account_field+0x7c/0x1ac [ 38.739569][ C0] irqtime_account_process_tick+0x374/0x498 [ 38.740552][ C0] account_process_tick+0x44/0x46c [ 38.741362][ C0] update_process_times+0x34/0x1ec [ 38.742216][ C0] tick_sched_timer+0x30c/0x4bc [ 38.743005][ C0] __hrtimer_run_queues+0x408/0xc3c [ 38.743825][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 38.744716][ C0] arch_timer_handler_virt+0x74/0x88 [ 38.745628][ C0] handle_percpu_devid_irq+0x174/0x34c [ 38.746544][ C0] generic_handle_domain_irq+0xe0/0x140 [ 38.747444][ C0] gic_handle_irq+0x70/0x1d4 [ 38.748161][ C0] call_on_irq_stack+0x30/0x48 [ 38.748960][ C0] do_interrupt_handler+0xd4/0x138 [ 38.749787][ C0] el1_interrupt+0x34/0x54 [ 38.750511][ C0] el1h_64_irq_handler+0x18/0x24 [ 38.751309][ C0] el1h_64_irq+0x64/0x68 [ 38.752072][ C0] __memcpy+0x1f4/0x240 [ 38.752816][ C0] leaf_paste_entries+0x69c/0xae4 [ 38.753640][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 38.754509][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 38.755518][ C0] leaf_move_items+0x6a0/0xbb0 [ 38.756400][ C0] leaf_shift_left+0xc8/0x3ac [ 38.757191][ C0] balance_leaf+0x27b0/0xd92c [ 38.758008][ C0] do_balance+0x270/0x790 [ 38.758812][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 38.759716][ C0] reiserfs_do_truncate+0x738/0x1058 [ 38.760546][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 38.761420][ C0] reiserfs_setattr+0xab4/0xfec [ 38.762231][ C0] notify_change+0xb0c/0xdcc [ 38.762982][ C0] do_truncate+0x188/0x20c [ 38.763775][ C0] path_openat+0x2110/0x26bc [ 38.764487][ C0] do_filp_open+0x194/0x384 [ 38.765205][ C0] do_sys_openat2+0x134/0x3f4 [ 38.765958][ C0] __arm64_sys_openat+0x118/0x14c [ 38.766828][ C0] invoke_syscall+0x98/0x2b4 [ 38.767591][ C0] el0_svc_common+0x138/0x258 [ 38.768395][ C0] do_el0_svc+0x58/0x130 [ 38.769069][ C0] el0_svc+0x58/0x128 [ 38.769697][ C0] el0t_64_sync_handler+0x84/0xf0 [ 38.770472][ C0] el0t_64_sync+0x18c/0x190 [ 38.771194][ C0] irq event stamp: 401073 [ 38.771894][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 38.773468][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 38.775116][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 38.776793][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 38.778276][ C0] ---[ end trace 0000000000000000 ]--- [ 38.792398][ C0] ------------[ cut here ]------------ [ 38.793232][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 38.795045][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 38.796549][ C0] Modules linked in: [ 38.797175][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 38.798594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.800392][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 38.801723][ C0] pc : __virt_to_phys+0x88/0xa0 [ 38.802509][ C0] lr : __virt_to_phys+0x84/0xa0 [ 38.803326][ C0] sp : ffff800008007200 [ 38.804000][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 38.805405][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 38.806735][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 38.808198][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 38.809612][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 38.810942][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 38.812244][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 38.813476][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 38.814886][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 38.816270][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 38.817643][ C0] Call trace: [ 38.818173][ C0] __virt_to_phys+0x88/0xa0 [ 38.818957][ C0] check_and_switch_context+0x33c/0x6c8 [ 38.820036][ C0] efi_virtmap_unload+0x5c/0xd0 [ 38.820836][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 38.821948][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 38.822977][ C0] efi_pstore_write+0x298/0x39c [ 38.823765][ C0] pstore_dump+0x5b0/0x820 [ 38.824559][ C0] kmsg_dump+0x170/0x260 [ 38.825357][ C0] oops_exit+0x2c/0x38 [ 38.825984][ C0] die+0xb8/0x1d8 [ 38.826580][ C0] die_kernel_fault+0x6c/0x80 [ 38.827428][ C0] __do_kernel_fault+0x3a0/0x3ac [ 38.828329][ C0] do_bad_area+0x84/0x234 [ 38.829134][ C0] do_translation_fault+0xac/0xc8 [ 38.830002][ C0] do_mem_abort+0x70/0x194 [ 38.830743][ C0] el1_abort+0x3c/0x5c [ 38.831487][ C0] el1h_64_sync_handler+0x50/0xac [ 38.832337][ C0] el1h_64_sync+0x64/0x68 [ 38.833099][ C0] cpuacct_account_field+0x100/0x1cc [ 38.833975][ C0] task_group_account_field+0x7c/0x1ac [ 38.834936][ C0] irqtime_account_process_tick+0x374/0x498 [ 38.835986][ C0] account_process_tick+0x44/0x46c [ 38.836879][ C0] update_process_times+0x34/0x1ec [ 38.837817][ C0] tick_sched_timer+0x30c/0x4bc [ 38.838683][ C0] __hrtimer_run_queues+0x408/0xc3c [ 38.839622][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 38.840507][ C0] arch_timer_handler_virt+0x74/0x88 [ 38.841429][ C0] handle_percpu_devid_irq+0x174/0x34c [ 38.842365][ C0] generic_handle_domain_irq+0xe0/0x140 [ 38.843347][ C0] gic_handle_irq+0x70/0x1d4 [ 38.844137][ C0] call_on_irq_stack+0x30/0x48 [ 38.844963][ C0] do_interrupt_handler+0xd4/0x138 [ 38.845815][ C0] el1_interrupt+0x34/0x54 [ 38.846530][ C0] el1h_64_irq_handler+0x18/0x24 [ 38.847381][ C0] el1h_64_irq+0x64/0x68 [ 38.848100][ C0] __memcpy+0x1f4/0x240 [ 38.848813][ C0] leaf_paste_entries+0x69c/0xae4 [ 38.849703][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 38.850662][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 38.851657][ C0] leaf_move_items+0x6a0/0xbb0 [ 38.852444][ C0] leaf_shift_left+0xc8/0x3ac [ 38.853201][ C0] balance_leaf+0x27b0/0xd92c [ 38.853979][ C0] do_balance+0x270/0x790 [ 38.854689][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 38.855657][ C0] reiserfs_do_truncate+0x738/0x1058 [ 38.856548][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 38.857461][ C0] reiserfs_setattr+0xab4/0xfec [ 38.858309][ C0] notify_change+0xb0c/0xdcc [ 38.859077][ C0] do_truncate+0x188/0x20c [ 38.859758][ C0] path_openat+0x2110/0x26bc [ 38.860612][ C0] do_filp_open+0x194/0x384 [ 38.861424][ C0] do_sys_openat2+0x134/0x3f4 [ 38.862219][ C0] __arm64_sys_openat+0x118/0x14c [ 38.863137][ C0] invoke_syscall+0x98/0x2b4 [ 38.863904][ C0] el0_svc_common+0x138/0x258 [ 38.864683][ C0] do_el0_svc+0x58/0x130 [ 38.865498][ C0] el0_svc+0x58/0x128 [ 38.866206][ C0] el0t_64_sync_handler+0x84/0xf0 [ 38.867098][ C0] el0t_64_sync+0x18c/0x190 [ 38.867845][ C0] irq event stamp: 401073 [ 38.868580][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 38.870190][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 38.871698][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 38.873335][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 38.874964][ C0] ---[ end trace 0000000000000000 ]--- [ 38.888859][ C0] ------------[ cut here ]------------ [ 38.889650][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 38.891599][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 38.893192][ C0] Modules linked in: [ 38.893785][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 38.895203][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.896810][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 38.898135][ C0] pc : __virt_to_phys+0x88/0xa0 [ 38.899032][ C0] lr : __virt_to_phys+0x84/0xa0 [ 38.899865][ C0] sp : ffff800008007200 [ 38.900587][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 38.901936][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 38.903285][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 38.904575][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 38.905931][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 38.907298][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 38.908569][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 38.909805][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 38.911014][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 38.912251][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 38.913657][ C0] Call trace: [ 38.914259][ C0] __virt_to_phys+0x88/0xa0 [ 38.915044][ C0] check_and_switch_context+0x33c/0x6c8 [ 38.915987][ C0] efi_virtmap_unload+0x5c/0xd0 [ 38.916810][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 38.917869][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 38.918853][ C0] efi_pstore_write+0x298/0x39c [ 38.919639][ C0] pstore_dump+0x5b0/0x820 [ 38.920351][ C0] kmsg_dump+0x170/0x260 [ 38.921091][ C0] oops_exit+0x2c/0x38 [ 38.921801][ C0] die+0xb8/0x1d8 [ 38.922437][ C0] die_kernel_fault+0x6c/0x80 [ 38.923204][ C0] __do_kernel_fault+0x3a0/0x3ac [ 38.924104][ C0] do_bad_area+0x84/0x234 [ 38.924910][ C0] do_translation_fault+0xac/0xc8 [ 38.925682][ C0] do_mem_abort+0x70/0x194 [ 38.926436][ C0] el1_abort+0x3c/0x5c [ 38.927154][ C0] el1h_64_sync_handler+0x50/0xac [ 38.928037][ C0] el1h_64_sync+0x64/0x68 [ 38.928776][ C0] cpuacct_account_field+0x100/0x1cc [ 38.929696][ C0] task_group_account_field+0x7c/0x1ac [ 38.930671][ C0] irqtime_account_process_tick+0x374/0x498 [ 38.931698][ C0] account_process_tick+0x44/0x46c [ 38.932573][ C0] update_process_times+0x34/0x1ec [ 38.933372][ C0] tick_sched_timer+0x30c/0x4bc [ 38.934198][ C0] __hrtimer_run_queues+0x408/0xc3c [ 38.935071][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 38.935942][ C0] arch_timer_handler_virt+0x74/0x88 [ 38.936825][ C0] handle_percpu_devid_irq+0x174/0x34c [ 38.937757][ C0] generic_handle_domain_irq+0xe0/0x140 [ 38.938697][ C0] gic_handle_irq+0x70/0x1d4 [ 38.939431][ C0] call_on_irq_stack+0x30/0x48 [ 38.940281][ C0] do_interrupt_handler+0xd4/0x138 [ 38.941153][ C0] el1_interrupt+0x34/0x54 [ 38.941937][ C0] el1h_64_irq_handler+0x18/0x24 [ 38.942786][ C0] el1h_64_irq+0x64/0x68 [ 38.943476][ C0] __memcpy+0x1f4/0x240 [ 38.944166][ C0] leaf_paste_entries+0x69c/0xae4 [ 38.944976][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 38.945906][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 38.946860][ C0] leaf_move_items+0x6a0/0xbb0 [ 38.947624][ C0] leaf_shift_left+0xc8/0x3ac [ 38.948517][ C0] balance_leaf+0x27b0/0xd92c [ 38.949295][ C0] do_balance+0x270/0x790 [ 38.950026][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 38.950993][ C0] reiserfs_do_truncate+0x738/0x1058 [ 38.951922][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 38.952717][ C0] reiserfs_setattr+0xab4/0xfec [ 38.953533][ C0] notify_change+0xb0c/0xdcc [ 38.954352][ C0] do_truncate+0x188/0x20c [ 38.955161][ C0] path_openat+0x2110/0x26bc [ 38.955912][ C0] do_filp_open+0x194/0x384 [ 38.956730][ C0] do_sys_openat2+0x134/0x3f4 [ 38.957538][ C0] __arm64_sys_openat+0x118/0x14c [ 38.958445][ C0] invoke_syscall+0x98/0x2b4 [ 38.959209][ C0] el0_svc_common+0x138/0x258 [ 38.960011][ C0] do_el0_svc+0x58/0x130 [ 38.960716][ C0] el0_svc+0x58/0x128 [ 38.961322][ C0] el0t_64_sync_handler+0x84/0xf0 [ 38.962211][ C0] el0t_64_sync+0x18c/0x190 [ 38.962956][ C0] irq event stamp: 401073 [ 38.963748][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 38.965376][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 38.966942][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 38.968501][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 38.970047][ C0] ---[ end trace 0000000000000000 ]--- [ 38.984106][ C0] ------------[ cut here ]------------ [ 38.984950][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 38.986595][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 38.987914][ C0] Modules linked in: [ 38.988505][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 38.989818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 38.991354][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 38.992505][ C0] pc : __virt_to_phys+0x88/0xa0 [ 38.993198][ C0] lr : __virt_to_phys+0x84/0xa0 [ 38.993916][ C0] sp : ffff800008007200 [ 38.994524][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 38.995797][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 38.997070][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 38.998314][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 38.999531][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.000704][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.001919][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.003109][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.004271][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.005463][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.006675][ C0] Call trace: [ 39.007201][ C0] __virt_to_phys+0x88/0xa0 [ 39.008032][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.008926][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.009680][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.010715][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.011727][ C0] efi_pstore_write+0x298/0x39c [ 39.012531][ C0] pstore_dump+0x5b0/0x820 [ 39.013343][ C0] kmsg_dump+0x170/0x260 [ 39.014080][ C0] oops_exit+0x2c/0x38 [ 39.014775][ C0] die+0xb8/0x1d8 [ 39.015363][ C0] die_kernel_fault+0x6c/0x80 [ 39.016159][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.017005][ C0] do_bad_area+0x84/0x234 [ 39.017749][ C0] do_translation_fault+0xac/0xc8 [ 39.018600][ C0] do_mem_abort+0x70/0x194 [ 39.019375][ C0] el1_abort+0x3c/0x5c [ 39.020122][ C0] el1h_64_sync_handler+0x50/0xac [ 39.020990][ C0] el1h_64_sync+0x64/0x68 [ 39.021721][ C0] cpuacct_account_field+0x100/0x1cc [ 39.022734][ C0] task_group_account_field+0x7c/0x1ac [ 39.023696][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.024741][ C0] account_process_tick+0x44/0x46c [ 39.025595][ C0] update_process_times+0x34/0x1ec [ 39.026442][ C0] tick_sched_timer+0x30c/0x4bc [ 39.027265][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.028086][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.028961][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.029806][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.030739][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.031641][ C0] gic_handle_irq+0x70/0x1d4 [ 39.032443][ C0] call_on_irq_stack+0x30/0x48 [ 39.033289][ C0] do_interrupt_handler+0xd4/0x138 [ 39.034146][ C0] el1_interrupt+0x34/0x54 [ 39.034900][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.035686][ C0] el1h_64_irq+0x64/0x68 [ 39.036352][ C0] __memcpy+0x1f4/0x240 [ 39.037069][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.037989][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.038924][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.039882][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.040768][ C0] leaf_shift_left+0xc8/0x3ac [ 39.041504][ C0] balance_leaf+0x27b0/0xd92c [ 39.042328][ C0] do_balance+0x270/0x790 [ 39.043116][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.044112][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.045071][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.045981][ C0] reiserfs_setattr+0xab4/0xfec [ 39.046783][ C0] notify_change+0xb0c/0xdcc [ 39.047580][ C0] do_truncate+0x188/0x20c [ 39.048327][ C0] path_openat+0x2110/0x26bc [ 39.049134][ C0] do_filp_open+0x194/0x384 [ 39.049844][ C0] do_sys_openat2+0x134/0x3f4 [ 39.050599][ C0] __arm64_sys_openat+0x118/0x14c [ 39.051493][ C0] invoke_syscall+0x98/0x2b4 [ 39.052336][ C0] el0_svc_common+0x138/0x258 [ 39.053090][ C0] do_el0_svc+0x58/0x130 [ 39.053812][ C0] el0_svc+0x58/0x128 [ 39.054435][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.055255][ C0] el0t_64_sync+0x18c/0x190 [ 39.055994][ C0] irq event stamp: 401073 [ 39.056671][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.058339][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.059954][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.061607][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.063308][ C0] ---[ end trace 0000000000000000 ]--- [ 39.076787][ C0] ------------[ cut here ]------------ [ 39.077620][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.079535][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.081203][ C0] Modules linked in: [ 39.081862][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.083316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.085087][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.086471][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.087332][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.088164][ C0] sp : ffff800008007200 [ 39.088876][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.090255][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.091741][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.093188][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.094500][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.095916][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.097295][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.098638][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.100018][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.101431][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.102965][ C0] Call trace: [ 39.103524][ C0] __virt_to_phys+0x88/0xa0 [ 39.104295][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.105253][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.106052][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.107158][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.108203][ C0] efi_pstore_write+0x298/0x39c [ 39.109035][ C0] pstore_dump+0x5b0/0x820 [ 39.109813][ C0] kmsg_dump+0x170/0x260 [ 39.110524][ C0] oops_exit+0x2c/0x38 [ 39.111225][ C0] die+0xb8/0x1d8 [ 39.111819][ C0] die_kernel_fault+0x6c/0x80 [ 39.112603][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.113416][ C0] do_bad_area+0x84/0x234 [ 39.114247][ C0] do_translation_fault+0xac/0xc8 [ 39.115115][ C0] do_mem_abort+0x70/0x194 [ 39.115896][ C0] el1_abort+0x3c/0x5c [ 39.116581][ C0] el1h_64_sync_handler+0x50/0xac [ 39.117386][ C0] el1h_64_sync+0x64/0x68 [ 39.118068][ C0] cpuacct_account_field+0x100/0x1cc [ 39.118860][ C0] task_group_account_field+0x7c/0x1ac [ 39.119788][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.120830][ C0] account_process_tick+0x44/0x46c [ 39.121719][ C0] update_process_times+0x34/0x1ec [ 39.122659][ C0] tick_sched_timer+0x30c/0x4bc [ 39.123600][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.124465][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.125334][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.126268][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.127236][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.128162][ C0] gic_handle_irq+0x70/0x1d4 [ 39.128947][ C0] call_on_irq_stack+0x30/0x48 [ 39.129780][ C0] do_interrupt_handler+0xd4/0x138 [ 39.130660][ C0] el1_interrupt+0x34/0x54 [ 39.131437][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.132284][ C0] el1h_64_irq+0x64/0x68 [ 39.132975][ C0] __memcpy+0x1f4/0x240 [ 39.133663][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.134515][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.135464][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.136387][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.137145][ C0] leaf_shift_left+0xc8/0x3ac [ 39.137940][ C0] balance_leaf+0x27b0/0xd92c [ 39.138762][ C0] do_balance+0x270/0x790 [ 39.139459][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.140377][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.141312][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.142373][ C0] reiserfs_setattr+0xab4/0xfec [ 39.143231][ C0] notify_change+0xb0c/0xdcc [ 39.144006][ C0] do_truncate+0x188/0x20c [ 39.144769][ C0] path_openat+0x2110/0x26bc [ 39.145481][ C0] do_filp_open+0x194/0x384 [ 39.146266][ C0] do_sys_openat2+0x134/0x3f4 [ 39.147099][ C0] __arm64_sys_openat+0x118/0x14c [ 39.148048][ C0] invoke_syscall+0x98/0x2b4 [ 39.148860][ C0] el0_svc_common+0x138/0x258 [ 39.149655][ C0] do_el0_svc+0x58/0x130 [ 39.150389][ C0] el0_svc+0x58/0x128 [ 39.151112][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.152061][ C0] el0t_64_sync+0x18c/0x190 [ 39.152897][ C0] irq event stamp: 401073 [ 39.153659][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.155316][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.156824][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.158434][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.160039][ C0] ---[ end trace 0000000000000000 ]--- [ 39.173840][ C0] ------------[ cut here ]------------ [ 39.174721][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.176601][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.178124][ C0] Modules linked in: [ 39.178746][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.180211][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.181946][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.183309][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.184140][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.184956][ C0] sp : ffff800008007200 [ 39.185663][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.187117][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.188587][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.190007][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.191389][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.192824][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.194258][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.195646][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.197040][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.198489][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.199848][ C0] Call trace: [ 39.200365][ C0] __virt_to_phys+0x88/0xa0 [ 39.201123][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.202009][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.202798][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.203846][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.204806][ C0] efi_pstore_write+0x298/0x39c [ 39.205707][ C0] pstore_dump+0x5b0/0x820 [ 39.206487][ C0] kmsg_dump+0x170/0x260 [ 39.207187][ C0] oops_exit+0x2c/0x38 [ 39.207938][ C0] die+0xb8/0x1d8 [ 39.208559][ C0] die_kernel_fault+0x6c/0x80 [ 39.209353][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.210162][ C0] do_bad_area+0x84/0x234 [ 39.210818][ C0] do_translation_fault+0xac/0xc8 [ 39.211624][ C0] do_mem_abort+0x70/0x194 [ 39.212392][ C0] el1_abort+0x3c/0x5c [ 39.213143][ C0] el1h_64_sync_handler+0x50/0xac [ 39.213939][ C0] el1h_64_sync+0x64/0x68 [ 39.214581][ C0] cpuacct_account_field+0x100/0x1cc [ 39.215498][ C0] task_group_account_field+0x7c/0x1ac [ 39.216516][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.217514][ C0] account_process_tick+0x44/0x46c [ 39.218464][ C0] update_process_times+0x34/0x1ec [ 39.219350][ C0] tick_sched_timer+0x30c/0x4bc [ 39.220181][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.221089][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.221972][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.222987][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.223914][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.224821][ C0] gic_handle_irq+0x70/0x1d4 [ 39.225642][ C0] call_on_irq_stack+0x30/0x48 [ 39.226460][ C0] do_interrupt_handler+0xd4/0x138 [ 39.227361][ C0] el1_interrupt+0x34/0x54 [ 39.228178][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.229046][ C0] el1h_64_irq+0x64/0x68 [ 39.229763][ C0] __memcpy+0x1f4/0x240 [ 39.230440][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.231279][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.232192][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.233112][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.234018][ C0] leaf_shift_left+0xc8/0x3ac [ 39.234821][ C0] balance_leaf+0x27b0/0xd92c [ 39.235601][ C0] do_balance+0x270/0x790 [ 39.236231][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.237191][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.238107][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.239096][ C0] reiserfs_setattr+0xab4/0xfec [ 39.239903][ C0] notify_change+0xb0c/0xdcc [ 39.240740][ C0] do_truncate+0x188/0x20c [ 39.241455][ C0] path_openat+0x2110/0x26bc [ 39.242252][ C0] do_filp_open+0x194/0x384 [ 39.243047][ C0] do_sys_openat2+0x134/0x3f4 [ 39.243791][ C0] __arm64_sys_openat+0x118/0x14c [ 39.244617][ C0] invoke_syscall+0x98/0x2b4 [ 39.245404][ C0] el0_svc_common+0x138/0x258 [ 39.246238][ C0] do_el0_svc+0x58/0x130 [ 39.246996][ C0] el0_svc+0x58/0x128 [ 39.247614][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.248468][ C0] el0t_64_sync+0x18c/0x190 [ 39.249231][ C0] irq event stamp: 401073 [ 39.249958][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.251690][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.253338][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.254997][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.256771][ C0] ---[ end trace 0000000000000000 ]--- [ 39.271585][ C0] ------------[ cut here ]------------ [ 39.272330][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.274241][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.275858][ C0] Modules linked in: [ 39.276572][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.277983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.279683][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.281161][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.282019][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.282895][ C0] sp : ffff800008007200 [ 39.283634][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.284927][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.286362][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.287699][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.289057][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.290325][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.291517][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.292780][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.294032][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.295352][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.296803][ C0] Call trace: [ 39.297349][ C0] __virt_to_phys+0x88/0xa0 [ 39.298088][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.298987][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.299809][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.300903][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.301849][ C0] efi_pstore_write+0x298/0x39c [ 39.302731][ C0] pstore_dump+0x5b0/0x820 [ 39.303545][ C0] kmsg_dump+0x170/0x260 [ 39.304352][ C0] oops_exit+0x2c/0x38 [ 39.305014][ C0] die+0xb8/0x1d8 [ 39.305632][ C0] die_kernel_fault+0x6c/0x80 [ 39.306437][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.307359][ C0] do_bad_area+0x84/0x234 [ 39.308114][ C0] do_translation_fault+0xac/0xc8 [ 39.308944][ C0] do_mem_abort+0x70/0x194 [ 39.309678][ C0] el1_abort+0x3c/0x5c [ 39.310358][ C0] el1h_64_sync_handler+0x50/0xac [ 39.311146][ C0] el1h_64_sync+0x64/0x68 [ 39.311938][ C0] cpuacct_account_field+0x100/0x1cc [ 39.312852][ C0] task_group_account_field+0x7c/0x1ac [ 39.313821][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.314830][ C0] account_process_tick+0x44/0x46c [ 39.315782][ C0] update_process_times+0x34/0x1ec [ 39.316623][ C0] tick_sched_timer+0x30c/0x4bc [ 39.317465][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.318382][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.319210][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.320244][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.321206][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.322143][ C0] gic_handle_irq+0x70/0x1d4 [ 39.322909][ C0] call_on_irq_stack+0x30/0x48 [ 39.323769][ C0] do_interrupt_handler+0xd4/0x138 [ 39.324661][ C0] el1_interrupt+0x34/0x54 [ 39.325426][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.326280][ C0] el1h_64_irq+0x64/0x68 [ 39.327063][ C0] __memcpy+0x1f4/0x240 [ 39.327761][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.328632][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.329522][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.330502][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.331330][ C0] leaf_shift_left+0xc8/0x3ac [ 39.332106][ C0] balance_leaf+0x27b0/0xd92c [ 39.332953][ C0] do_balance+0x270/0x790 [ 39.333645][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.334600][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.335543][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.336451][ C0] reiserfs_setattr+0xab4/0xfec [ 39.337297][ C0] notify_change+0xb0c/0xdcc [ 39.338112][ C0] do_truncate+0x188/0x20c [ 39.338930][ C0] path_openat+0x2110/0x26bc [ 39.339743][ C0] do_filp_open+0x194/0x384 [ 39.340486][ C0] do_sys_openat2+0x134/0x3f4 [ 39.341248][ C0] __arm64_sys_openat+0x118/0x14c [ 39.342090][ C0] invoke_syscall+0x98/0x2b4 [ 39.342906][ C0] el0_svc_common+0x138/0x258 [ 39.343686][ C0] do_el0_svc+0x58/0x130 [ 39.344408][ C0] el0_svc+0x58/0x128 [ 39.345092][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.345941][ C0] el0t_64_sync+0x18c/0x190 [ 39.346710][ C0] irq event stamp: 401073 [ 39.347419][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.349151][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.350741][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.352295][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.353927][ C0] ---[ end trace 0000000000000000 ]--- [ 39.366606][ C0] ------------[ cut here ]------------ [ 39.367405][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.369600][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.371217][ C0] Modules linked in: [ 39.372018][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.373539][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.375331][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.376691][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.377540][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.378398][ C0] sp : ffff800008007200 [ 39.379068][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.380479][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.381881][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.383316][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.384681][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.386061][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.387523][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.388884][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.390283][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.391623][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.393126][ C0] Call trace: [ 39.393719][ C0] __virt_to_phys+0x88/0xa0 [ 39.394492][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.395474][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.396241][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.397250][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.398271][ C0] efi_pstore_write+0x298/0x39c [ 39.399128][ C0] pstore_dump+0x5b0/0x820 [ 39.399891][ C0] kmsg_dump+0x170/0x260 [ 39.400660][ C0] oops_exit+0x2c/0x38 [ 39.401412][ C0] die+0xb8/0x1d8 [ 39.402068][ C0] die_kernel_fault+0x6c/0x80 [ 39.402891][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.403756][ C0] do_bad_area+0x84/0x234 [ 39.404504][ C0] do_translation_fault+0xac/0xc8 [ 39.405324][ C0] do_mem_abort+0x70/0x194 [ 39.406093][ C0] el1_abort+0x3c/0x5c [ 39.406785][ C0] el1h_64_sync_handler+0x50/0xac [ 39.407578][ C0] el1h_64_sync+0x64/0x68 [ 39.408262][ C0] cpuacct_account_field+0x100/0x1cc [ 39.409131][ C0] task_group_account_field+0x7c/0x1ac [ 39.410009][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.411012][ C0] account_process_tick+0x44/0x46c [ 39.411781][ C0] update_process_times+0x34/0x1ec [ 39.412591][ C0] tick_sched_timer+0x30c/0x4bc [ 39.413438][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.414347][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.415198][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.416002][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.416988][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.418002][ C0] gic_handle_irq+0x70/0x1d4 [ 39.418834][ C0] call_on_irq_stack+0x30/0x48 [ 39.419704][ C0] do_interrupt_handler+0xd4/0x138 [ 39.420618][ C0] el1_interrupt+0x34/0x54 [ 39.421432][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.422292][ C0] el1h_64_irq+0x64/0x68 [ 39.422973][ C0] __memcpy+0x1f4/0x240 [ 39.423642][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.424478][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.425402][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.426310][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.427060][ C0] leaf_shift_left+0xc8/0x3ac [ 39.427781][ C0] balance_leaf+0x27b0/0xd92c [ 39.428555][ C0] do_balance+0x270/0x790 [ 39.429283][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.430240][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.431134][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.432022][ C0] reiserfs_setattr+0xab4/0xfec [ 39.432871][ C0] notify_change+0xb0c/0xdcc [ 39.433637][ C0] do_truncate+0x188/0x20c [ 39.434414][ C0] path_openat+0x2110/0x26bc [ 39.435163][ C0] do_filp_open+0x194/0x384 [ 39.435933][ C0] do_sys_openat2+0x134/0x3f4 [ 39.436695][ C0] __arm64_sys_openat+0x118/0x14c [ 39.437558][ C0] invoke_syscall+0x98/0x2b4 [ 39.438383][ C0] el0_svc_common+0x138/0x258 [ 39.439131][ C0] do_el0_svc+0x58/0x130 [ 39.439862][ C0] el0_svc+0x58/0x128 [ 39.440477][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.441334][ C0] el0t_64_sync+0x18c/0x190 [ 39.442096][ C0] irq event stamp: 401073 [ 39.442886][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.444614][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.446246][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.447849][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.449602][ C0] ---[ end trace 0000000000000000 ]--- [ 39.462886][ C0] ------------[ cut here ]------------ [ 39.463700][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.465383][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.466744][ C0] Modules linked in: [ 39.467307][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.468715][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.470303][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.471646][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.472412][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.473164][ C0] sp : ffff800008007200 [ 39.473784][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.475133][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.476438][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.477801][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.479138][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.480470][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.481813][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.483209][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.484539][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.485864][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.487205][ C0] Call trace: [ 39.487702][ C0] __virt_to_phys+0x88/0xa0 [ 39.488561][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.489557][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.490384][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.491463][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.492436][ C0] efi_pstore_write+0x298/0x39c [ 39.493275][ C0] pstore_dump+0x5b0/0x820 [ 39.494035][ C0] kmsg_dump+0x170/0x260 [ 39.494787][ C0] oops_exit+0x2c/0x38 [ 39.495427][ C0] die+0xb8/0x1d8 [ 39.495987][ C0] die_kernel_fault+0x6c/0x80 [ 39.496792][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.497630][ C0] do_bad_area+0x84/0x234 [ 39.498361][ C0] do_translation_fault+0xac/0xc8 [ 39.499265][ C0] do_mem_abort+0x70/0x194 [ 39.500049][ C0] el1_abort+0x3c/0x5c [ 39.500731][ C0] el1h_64_sync_handler+0x50/0xac [ 39.501489][ C0] el1h_64_sync+0x64/0x68 [ 39.502261][ C0] cpuacct_account_field+0x100/0x1cc [ 39.503081][ C0] task_group_account_field+0x7c/0x1ac [ 39.504048][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.505030][ C0] account_process_tick+0x44/0x46c [ 39.505823][ C0] update_process_times+0x34/0x1ec [ 39.506639][ C0] tick_sched_timer+0x30c/0x4bc [ 39.507503][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.508323][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.509157][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.509983][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.510853][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.511698][ C0] gic_handle_irq+0x70/0x1d4 [ 39.512361][ C0] call_on_irq_stack+0x30/0x48 [ 39.513089][ C0] do_interrupt_handler+0xd4/0x138 [ 39.513900][ C0] el1_interrupt+0x34/0x54 [ 39.514555][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.515297][ C0] el1h_64_irq+0x64/0x68 [ 39.515893][ C0] __memcpy+0x1f4/0x240 [ 39.516530][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.517278][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.518076][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.518967][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.519661][ C0] leaf_shift_left+0xc8/0x3ac [ 39.520343][ C0] balance_leaf+0x27b0/0xd92c [ 39.521129][ C0] do_balance+0x270/0x790 [ 39.521817][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.522748][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.523632][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.524524][ C0] reiserfs_setattr+0xab4/0xfec [ 39.525366][ C0] notify_change+0xb0c/0xdcc [ 39.526112][ C0] do_truncate+0x188/0x20c [ 39.526866][ C0] path_openat+0x2110/0x26bc [ 39.527647][ C0] do_filp_open+0x194/0x384 [ 39.528348][ C0] do_sys_openat2+0x134/0x3f4 [ 39.529180][ C0] __arm64_sys_openat+0x118/0x14c [ 39.529992][ C0] invoke_syscall+0x98/0x2b4 [ 39.530739][ C0] el0_svc_common+0x138/0x258 [ 39.531527][ C0] do_el0_svc+0x58/0x130 [ 39.532201][ C0] el0_svc+0x58/0x128 [ 39.532879][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.533748][ C0] el0t_64_sync+0x18c/0x190 [ 39.534598][ C0] irq event stamp: 401073 [ 39.535315][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.537048][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.538653][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.540319][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.541997][ C0] ---[ end trace 0000000000000000 ]--- [ 39.556396][ C0] ------------[ cut here ]------------ [ 39.557308][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.559134][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.560732][ C0] Modules linked in: [ 39.561405][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.562839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.564594][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.565903][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.566753][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.567669][ C0] sp : ffff800008007200 [ 39.568411][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.569770][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.571046][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.572484][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.573841][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.575250][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.576680][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.578045][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.579300][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.580669][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.582036][ C0] Call trace: [ 39.582586][ C0] __virt_to_phys+0x88/0xa0 [ 39.583344][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.584241][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.585079][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.586194][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.587113][ C0] efi_pstore_write+0x298/0x39c [ 39.587973][ C0] pstore_dump+0x5b0/0x820 [ 39.588775][ C0] kmsg_dump+0x170/0x260 [ 39.589534][ C0] oops_exit+0x2c/0x38 [ 39.590197][ C0] die+0xb8/0x1d8 [ 39.590818][ C0] die_kernel_fault+0x6c/0x80 [ 39.591581][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.592380][ C0] do_bad_area+0x84/0x234 [ 39.593062][ C0] do_translation_fault+0xac/0xc8 [ 39.593831][ C0] do_mem_abort+0x70/0x194 [ 39.594535][ C0] el1_abort+0x3c/0x5c [ 39.595204][ C0] el1h_64_sync_handler+0x50/0xac [ 39.596055][ C0] el1h_64_sync+0x64/0x68 [ 39.596834][ C0] cpuacct_account_field+0x100/0x1cc [ 39.597741][ C0] task_group_account_field+0x7c/0x1ac [ 39.598635][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.599610][ C0] account_process_tick+0x44/0x46c [ 39.600416][ C0] update_process_times+0x34/0x1ec [ 39.601205][ C0] tick_sched_timer+0x30c/0x4bc [ 39.601972][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.602734][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.603504][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.604349][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.605231][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.606058][ C0] gic_handle_irq+0x70/0x1d4 [ 39.606773][ C0] call_on_irq_stack+0x30/0x48 [ 39.607562][ C0] do_interrupt_handler+0xd4/0x138 [ 39.608468][ C0] el1_interrupt+0x34/0x54 [ 39.609188][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.609957][ C0] el1h_64_irq+0x64/0x68 [ 39.610656][ C0] __memcpy+0x1f4/0x240 [ 39.611352][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.612232][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.613090][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.614056][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.614822][ C0] leaf_shift_left+0xc8/0x3ac [ 39.615613][ C0] balance_leaf+0x27b0/0xd92c [ 39.616466][ C0] do_balance+0x270/0x790 [ 39.617244][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.618243][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.619160][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.620129][ C0] reiserfs_setattr+0xab4/0xfec [ 39.620939][ C0] notify_change+0xb0c/0xdcc [ 39.621712][ C0] do_truncate+0x188/0x20c [ 39.622477][ C0] path_openat+0x2110/0x26bc [ 39.623239][ C0] do_filp_open+0x194/0x384 [ 39.623966][ C0] do_sys_openat2+0x134/0x3f4 [ 39.624745][ C0] __arm64_sys_openat+0x118/0x14c [ 39.625584][ C0] invoke_syscall+0x98/0x2b4 [ 39.626428][ C0] el0_svc_common+0x138/0x258 [ 39.627253][ C0] do_el0_svc+0x58/0x130 [ 39.628065][ C0] el0_svc+0x58/0x128 [ 39.628766][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.629609][ C0] el0t_64_sync+0x18c/0x190 [ 39.630386][ C0] irq event stamp: 401073 [ 39.631109][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.632777][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.634503][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.636191][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.637902][ C0] ---[ end trace 0000000000000000 ]--- [ 39.651518][ C0] ------------[ cut here ]------------ [ 39.652408][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.654202][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.655783][ C0] Modules linked in: [ 39.656518][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.658111][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.659961][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.661310][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.662213][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.663041][ C0] sp : ffff800008007200 [ 39.663785][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.665131][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.666478][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.667938][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.669265][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.670689][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.671988][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.673408][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.674809][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.676213][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.677518][ C0] Call trace: [ 39.678048][ C0] __virt_to_phys+0x88/0xa0 [ 39.678776][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.679665][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.680450][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.681472][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.682423][ C0] efi_pstore_write+0x298/0x39c [ 39.683282][ C0] pstore_dump+0x5b0/0x820 [ 39.684065][ C0] kmsg_dump+0x170/0x260 [ 39.684819][ C0] oops_exit+0x2c/0x38 [ 39.685501][ C0] die+0xb8/0x1d8 [ 39.686091][ C0] die_kernel_fault+0x6c/0x80 [ 39.686811][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.687565][ C0] do_bad_area+0x84/0x234 [ 39.688331][ C0] do_translation_fault+0xac/0xc8 [ 39.689252][ C0] do_mem_abort+0x70/0x194 [ 39.689948][ C0] el1_abort+0x3c/0x5c [ 39.690640][ C0] el1h_64_sync_handler+0x50/0xac [ 39.691378][ C0] el1h_64_sync+0x64/0x68 [ 39.692106][ C0] cpuacct_account_field+0x100/0x1cc [ 39.692944][ C0] task_group_account_field+0x7c/0x1ac [ 39.693845][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.694794][ C0] account_process_tick+0x44/0x46c [ 39.695641][ C0] update_process_times+0x34/0x1ec [ 39.696494][ C0] tick_sched_timer+0x30c/0x4bc [ 39.697274][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.698157][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.698972][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.699853][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.700799][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.701885][ C0] gic_handle_irq+0x70/0x1d4 [ 39.702587][ C0] call_on_irq_stack+0x30/0x48 [ 39.703388][ C0] do_interrupt_handler+0xd4/0x138 [ 39.704201][ C0] el1_interrupt+0x34/0x54 [ 39.704993][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.705910][ C0] el1h_64_irq+0x64/0x68 [ 39.706641][ C0] __memcpy+0x1f4/0x240 [ 39.707305][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.708203][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.709121][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.710076][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.710944][ C0] leaf_shift_left+0xc8/0x3ac [ 39.711799][ C0] balance_leaf+0x27b0/0xd92c [ 39.712585][ C0] do_balance+0x270/0x790 [ 39.713314][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.714248][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.715204][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.716065][ C0] reiserfs_setattr+0xab4/0xfec [ 39.716833][ C0] notify_change+0xb0c/0xdcc [ 39.717593][ C0] do_truncate+0x188/0x20c [ 39.718363][ C0] path_openat+0x2110/0x26bc [ 39.719124][ C0] do_filp_open+0x194/0x384 [ 39.719871][ C0] do_sys_openat2+0x134/0x3f4 [ 39.720639][ C0] __arm64_sys_openat+0x118/0x14c [ 39.721495][ C0] invoke_syscall+0x98/0x2b4 [ 39.722294][ C0] el0_svc_common+0x138/0x258 [ 39.723130][ C0] do_el0_svc+0x58/0x130 [ 39.723830][ C0] el0_svc+0x58/0x128 [ 39.724512][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.725379][ C0] el0t_64_sync+0x18c/0x190 [ 39.726162][ C0] irq event stamp: 401073 [ 39.726885][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.728556][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.730305][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.731969][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.733658][ C0] ---[ end trace 0000000000000000 ]--- [ 39.747841][ C0] ------------[ cut here ]------------ [ 39.748641][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.750338][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.751692][ C0] Modules linked in: [ 39.752427][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.753898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.755637][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.756871][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.757663][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.758498][ C0] sp : ffff800008007200 [ 39.759199][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.760619][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.761953][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.763314][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.764770][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.766092][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.767514][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.768950][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.770361][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.771695][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.773047][ C0] Call trace: [ 39.773573][ C0] __virt_to_phys+0x88/0xa0 [ 39.774303][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.775303][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.776171][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.777274][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.778176][ C0] efi_pstore_write+0x298/0x39c [ 39.779057][ C0] pstore_dump+0x5b0/0x820 [ 39.779775][ C0] kmsg_dump+0x170/0x260 [ 39.780453][ C0] oops_exit+0x2c/0x38 [ 39.781115][ C0] die+0xb8/0x1d8 [ 39.781766][ C0] die_kernel_fault+0x6c/0x80 [ 39.782611][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.783468][ C0] do_bad_area+0x84/0x234 [ 39.784270][ C0] do_translation_fault+0xac/0xc8 [ 39.785116][ C0] do_mem_abort+0x70/0x194 [ 39.785885][ C0] el1_abort+0x3c/0x5c [ 39.786578][ C0] el1h_64_sync_handler+0x50/0xac [ 39.787402][ C0] el1h_64_sync+0x64/0x68 [ 39.788182][ C0] cpuacct_account_field+0x100/0x1cc [ 39.789120][ C0] task_group_account_field+0x7c/0x1ac [ 39.790093][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.791113][ C0] account_process_tick+0x44/0x46c [ 39.791983][ C0] update_process_times+0x34/0x1ec [ 39.793046][ C0] tick_sched_timer+0x30c/0x4bc [ 39.793853][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.794760][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.795599][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.796489][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.797388][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.798310][ C0] gic_handle_irq+0x70/0x1d4 [ 39.799075][ C0] call_on_irq_stack+0x30/0x48 [ 39.799891][ C0] do_interrupt_handler+0xd4/0x138 [ 39.800803][ C0] el1_interrupt+0x34/0x54 [ 39.801664][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.802468][ C0] el1h_64_irq+0x64/0x68 [ 39.803118][ C0] __memcpy+0x1f4/0x240 [ 39.803830][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.804706][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.805585][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.806533][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.807375][ C0] leaf_shift_left+0xc8/0x3ac [ 39.808133][ C0] balance_leaf+0x27b0/0xd92c [ 39.808943][ C0] do_balance+0x270/0x790 [ 39.809661][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.810612][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.811514][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.812402][ C0] reiserfs_setattr+0xab4/0xfec [ 39.813190][ C0] notify_change+0xb0c/0xdcc [ 39.813943][ C0] do_truncate+0x188/0x20c [ 39.814641][ C0] path_openat+0x2110/0x26bc [ 39.815457][ C0] do_filp_open+0x194/0x384 [ 39.816217][ C0] do_sys_openat2+0x134/0x3f4 [ 39.817183][ C0] __arm64_sys_openat+0x118/0x14c [ 39.818039][ C0] invoke_syscall+0x98/0x2b4 [ 39.818797][ C0] el0_svc_common+0x138/0x258 [ 39.819602][ C0] do_el0_svc+0x58/0x130 [ 39.820368][ C0] el0_svc+0x58/0x128 [ 39.821067][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.821929][ C0] el0t_64_sync+0x18c/0x190 [ 39.822727][ C0] irq event stamp: 401073 [ 39.823451][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.825193][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.826819][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.828359][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.830098][ C0] ---[ end trace 0000000000000000 ]--- [ 39.843419][ C0] ------------[ cut here ]------------ [ 39.844210][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.846024][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.847602][ C0] Modules linked in: [ 39.848336][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.849755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.851513][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.852867][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.853667][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.854648][ C0] sp : ffff800008007200 [ 39.855403][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.856783][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.858224][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.859622][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.861007][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.862346][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.863670][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.865037][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.866414][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.867740][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.869102][ C0] Call trace: [ 39.869648][ C0] __virt_to_phys+0x88/0xa0 [ 39.870496][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.871471][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.872192][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.873218][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.874196][ C0] efi_pstore_write+0x298/0x39c [ 39.874971][ C0] pstore_dump+0x5b0/0x820 [ 39.875717][ C0] kmsg_dump+0x170/0x260 [ 39.876431][ C0] oops_exit+0x2c/0x38 [ 39.877152][ C0] die+0xb8/0x1d8 [ 39.877744][ C0] die_kernel_fault+0x6c/0x80 [ 39.878485][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.879310][ C0] do_bad_area+0x84/0x234 [ 39.880101][ C0] do_translation_fault+0xac/0xc8 [ 39.880904][ C0] do_mem_abort+0x70/0x194 [ 39.881673][ C0] el1_abort+0x3c/0x5c [ 39.882397][ C0] el1h_64_sync_handler+0x50/0xac [ 39.883204][ C0] el1h_64_sync+0x64/0x68 [ 39.883939][ C0] cpuacct_account_field+0x100/0x1cc [ 39.884866][ C0] task_group_account_field+0x7c/0x1ac [ 39.885802][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.886829][ C0] account_process_tick+0x44/0x46c [ 39.887721][ C0] update_process_times+0x34/0x1ec [ 39.888597][ C0] tick_sched_timer+0x30c/0x4bc [ 39.889361][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.890209][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.891028][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.891897][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.892836][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.893757][ C0] gic_handle_irq+0x70/0x1d4 [ 39.894531][ C0] call_on_irq_stack+0x30/0x48 [ 39.895428][ C0] do_interrupt_handler+0xd4/0x138 [ 39.896355][ C0] el1_interrupt+0x34/0x54 [ 39.897130][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.897989][ C0] el1h_64_irq+0x64/0x68 [ 39.898679][ C0] __memcpy+0x1f4/0x240 [ 39.899359][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.900228][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.901153][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.902101][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.902861][ C0] leaf_shift_left+0xc8/0x3ac [ 39.903657][ C0] balance_leaf+0x27b0/0xd92c [ 39.904495][ C0] do_balance+0x270/0x790 [ 39.905246][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 39.906224][ C0] reiserfs_do_truncate+0x738/0x1058 [ 39.907173][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 39.908051][ C0] reiserfs_setattr+0xab4/0xfec [ 39.908891][ C0] notify_change+0xb0c/0xdcc [ 39.909639][ C0] do_truncate+0x188/0x20c [ 39.910413][ C0] path_openat+0x2110/0x26bc [ 39.911201][ C0] do_filp_open+0x194/0x384 [ 39.911962][ C0] do_sys_openat2+0x134/0x3f4 [ 39.912853][ C0] __arm64_sys_openat+0x118/0x14c [ 39.913761][ C0] invoke_syscall+0x98/0x2b4 [ 39.914539][ C0] el0_svc_common+0x138/0x258 [ 39.915332][ C0] do_el0_svc+0x58/0x130 [ 39.916091][ C0] el0_svc+0x58/0x128 [ 39.916788][ C0] el0t_64_sync_handler+0x84/0xf0 [ 39.917671][ C0] el0t_64_sync+0x18c/0x190 [ 39.918500][ C0] irq event stamp: 401073 [ 39.919218][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 39.920906][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 39.922560][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 39.924261][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 39.925955][ C0] ---[ end trace 0000000000000000 ]--- [ 39.939447][ C0] ------------[ cut here ]------------ [ 39.940312][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 39.941914][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 39.943305][ C0] Modules linked in: [ 39.943899][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 39.945189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.946858][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 39.948218][ C0] pc : __virt_to_phys+0x88/0xa0 [ 39.949000][ C0] lr : __virt_to_phys+0x84/0xa0 [ 39.949885][ C0] sp : ffff800008007200 [ 39.950652][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 39.952036][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 39.953395][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 39.954645][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 39.956105][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 39.957480][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 39.958784][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 39.960233][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 39.961567][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 39.962995][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 39.964360][ C0] Call trace: [ 39.964867][ C0] __virt_to_phys+0x88/0xa0 [ 39.965615][ C0] check_and_switch_context+0x33c/0x6c8 [ 39.966564][ C0] efi_virtmap_unload+0x5c/0xd0 [ 39.967434][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 39.968535][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 39.969593][ C0] efi_pstore_write+0x298/0x39c [ 39.970453][ C0] pstore_dump+0x5b0/0x820 [ 39.971233][ C0] kmsg_dump+0x170/0x260 [ 39.971998][ C0] oops_exit+0x2c/0x38 [ 39.972718][ C0] die+0xb8/0x1d8 [ 39.973341][ C0] die_kernel_fault+0x6c/0x80 [ 39.974120][ C0] __do_kernel_fault+0x3a0/0x3ac [ 39.975037][ C0] do_bad_area+0x84/0x234 [ 39.975839][ C0] do_translation_fault+0xac/0xc8 [ 39.976767][ C0] do_mem_abort+0x70/0x194 [ 39.977544][ C0] el1_abort+0x3c/0x5c [ 39.978268][ C0] el1h_64_sync_handler+0x50/0xac [ 39.979181][ C0] el1h_64_sync+0x64/0x68 [ 39.979922][ C0] cpuacct_account_field+0x100/0x1cc [ 39.980852][ C0] task_group_account_field+0x7c/0x1ac [ 39.981848][ C0] irqtime_account_process_tick+0x374/0x498 [ 39.982894][ C0] account_process_tick+0x44/0x46c [ 39.983835][ C0] update_process_times+0x34/0x1ec [ 39.984744][ C0] tick_sched_timer+0x30c/0x4bc [ 39.985560][ C0] __hrtimer_run_queues+0x408/0xc3c [ 39.986518][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 39.987418][ C0] arch_timer_handler_virt+0x74/0x88 [ 39.988329][ C0] handle_percpu_devid_irq+0x174/0x34c [ 39.989298][ C0] generic_handle_domain_irq+0xe0/0x140 [ 39.990219][ C0] gic_handle_irq+0x70/0x1d4 [ 39.991048][ C0] call_on_irq_stack+0x30/0x48 [ 39.991864][ C0] do_interrupt_handler+0xd4/0x138 [ 39.992780][ C0] el1_interrupt+0x34/0x54 [ 39.993492][ C0] el1h_64_irq_handler+0x18/0x24 [ 39.994437][ C0] el1h_64_irq+0x64/0x68 [ 39.995165][ C0] __memcpy+0x1f4/0x240 [ 39.995881][ C0] leaf_paste_entries+0x69c/0xae4 [ 39.996714][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 39.997594][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 39.998609][ C0] leaf_move_items+0x6a0/0xbb0 [ 39.999469][ C0] leaf_shift_left+0xc8/0x3ac [ 40.000310][ C0] balance_leaf+0x27b0/0xd92c [ 40.001147][ C0] do_balance+0x270/0x790 [ 40.001905][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 40.002834][ C0] reiserfs_do_truncate+0x738/0x1058 [ 40.003704][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 40.004601][ C0] reiserfs_setattr+0xab4/0xfec [ 40.005503][ C0] notify_change+0xb0c/0xdcc [ 40.006301][ C0] do_truncate+0x188/0x20c [ 40.007062][ C0] path_openat+0x2110/0x26bc [ 40.007864][ C0] do_filp_open+0x194/0x384 [ 40.008596][ C0] do_sys_openat2+0x134/0x3f4 [ 40.009355][ C0] __arm64_sys_openat+0x118/0x14c [ 40.010183][ C0] invoke_syscall+0x98/0x2b4 [ 40.010926][ C0] el0_svc_common+0x138/0x258 [ 40.011754][ C0] do_el0_svc+0x58/0x130 [ 40.012477][ C0] el0_svc+0x58/0x128 [ 40.013245][ C0] el0t_64_sync_handler+0x84/0xf0 [ 40.014074][ C0] el0t_64_sync+0x18c/0x190 [ 40.014830][ C0] irq event stamp: 401073 [ 40.015500][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 40.017278][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 40.018861][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 40.020519][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 40.022140][ C0] ---[ end trace 0000000000000000 ]--- [ 40.038006][ C0] ------------[ cut here ]------------ [ 40.038775][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 40.040597][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 40.042221][ C0] Modules linked in: [ 40.042896][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 40.044477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.046109][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 40.047419][ C0] pc : __virt_to_phys+0x88/0xa0 [ 40.048272][ C0] lr : __virt_to_phys+0x84/0xa0 [ 40.049189][ C0] sp : ffff800008007200 [ 40.049919][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 40.051303][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 40.052622][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 40.053940][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 40.055356][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 40.056787][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 40.058229][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 40.059678][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.061077][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 40.062399][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 40.063677][ C0] Call trace: [ 40.064231][ C0] __virt_to_phys+0x88/0xa0 [ 40.065053][ C0] check_and_switch_context+0x33c/0x6c8 [ 40.065992][ C0] efi_virtmap_unload+0x5c/0xd0 [ 40.066811][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 40.067811][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 40.068832][ C0] efi_pstore_write+0x298/0x39c [ 40.069645][ C0] pstore_dump+0x5b0/0x820 [ 40.070404][ C0] kmsg_dump+0x170/0x260 [ 40.071116][ C0] oops_exit+0x2c/0x38 [ 40.071829][ C0] die+0xb8/0x1d8 [ 40.072435][ C0] die_kernel_fault+0x6c/0x80 [ 40.073182][ C0] __do_kernel_fault+0x3a0/0x3ac [ 40.073989][ C0] do_bad_area+0x84/0x234 [ 40.074736][ C0] do_translation_fault+0xac/0xc8 [ 40.075609][ C0] do_mem_abort+0x70/0x194 [ 40.076293][ C0] el1_abort+0x3c/0x5c [ 40.076907][ C0] el1h_64_sync_handler+0x50/0xac [ 40.077759][ C0] el1h_64_sync+0x64/0x68 [ 40.078526][ C0] cpuacct_account_field+0x100/0x1cc [ 40.079443][ C0] task_group_account_field+0x7c/0x1ac [ 40.080406][ C0] irqtime_account_process_tick+0x374/0x498 [ 40.081473][ C0] account_process_tick+0x44/0x46c [ 40.082358][ C0] update_process_times+0x34/0x1ec [ 40.083295][ C0] tick_sched_timer+0x30c/0x4bc [ 40.084101][ C0] __hrtimer_run_queues+0x408/0xc3c [ 40.084990][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 40.085863][ C0] arch_timer_handler_virt+0x74/0x88 [ 40.086671][ C0] handle_percpu_devid_irq+0x174/0x34c [ 40.087614][ C0] generic_handle_domain_irq+0xe0/0x140 [ 40.088611][ C0] gic_handle_irq+0x70/0x1d4 [ 40.089416][ C0] call_on_irq_stack+0x30/0x48 [ 40.090253][ C0] do_interrupt_handler+0xd4/0x138 [ 40.091256][ C0] el1_interrupt+0x34/0x54 [ 40.092011][ C0] el1h_64_irq_handler+0x18/0x24 [ 40.092953][ C0] el1h_64_irq+0x64/0x68 [ 40.093673][ C0] __memcpy+0x1f4/0x240 [ 40.094344][ C0] leaf_paste_entries+0x69c/0xae4 [ 40.095214][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 40.096061][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 40.097026][ C0] leaf_move_items+0x6a0/0xbb0 [ 40.097883][ C0] leaf_shift_left+0xc8/0x3ac [ 40.098691][ C0] balance_leaf+0x27b0/0xd92c [ 40.099542][ C0] do_balance+0x270/0x790 [ 40.100281][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 40.101215][ C0] reiserfs_do_truncate+0x738/0x1058 [ 40.102025][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 40.102981][ C0] reiserfs_setattr+0xab4/0xfec [ 40.103883][ C0] notify_change+0xb0c/0xdcc [ 40.104628][ C0] do_truncate+0x188/0x20c [ 40.105333][ C0] path_openat+0x2110/0x26bc [ 40.106094][ C0] do_filp_open+0x194/0x384 [ 40.106843][ C0] do_sys_openat2+0x134/0x3f4 [ 40.107632][ C0] __arm64_sys_openat+0x118/0x14c [ 40.108506][ C0] invoke_syscall+0x98/0x2b4 [ 40.109320][ C0] el0_svc_common+0x138/0x258 [ 40.110172][ C0] do_el0_svc+0x58/0x130 [ 40.110946][ C0] el0_svc+0x58/0x128 [ 40.111621][ C0] el0t_64_sync_handler+0x84/0xf0 [ 40.112495][ C0] el0t_64_sync+0x18c/0x190 [ 40.113232][ C0] irq event stamp: 401073 [ 40.113952][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 40.115617][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 40.117363][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 40.118969][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 40.120568][ C0] ---[ end trace 0000000000000000 ]--- [ 40.135538][ C0] ------------[ cut here ]------------ [ 40.136398][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 40.138393][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 40.139969][ C0] Modules linked in: [ 40.140680][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 40.142186][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.143821][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 40.145183][ C0] pc : __virt_to_phys+0x88/0xa0 [ 40.145986][ C0] lr : __virt_to_phys+0x84/0xa0 [ 40.146800][ C0] sp : ffff800008007200 [ 40.147564][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 40.148985][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 40.150464][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 40.151895][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 40.153268][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 40.154603][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 40.155949][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 40.157201][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.158679][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 40.160072][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 40.161543][ C0] Call trace: [ 40.162127][ C0] __virt_to_phys+0x88/0xa0 [ 40.162891][ C0] check_and_switch_context+0x33c/0x6c8 [ 40.163886][ C0] efi_virtmap_unload+0x5c/0xd0 [ 40.164803][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 40.165874][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 40.166880][ C0] efi_pstore_write+0x298/0x39c [ 40.167715][ C0] pstore_dump+0x5b0/0x820 [ 40.168478][ C0] kmsg_dump+0x170/0x260 [ 40.169227][ C0] oops_exit+0x2c/0x38 [ 40.169900][ C0] die+0xb8/0x1d8 [ 40.170533][ C0] die_kernel_fault+0x6c/0x80 [ 40.171354][ C0] __do_kernel_fault+0x3a0/0x3ac [ 40.172122][ C0] do_bad_area+0x84/0x234 [ 40.172832][ C0] do_translation_fault+0xac/0xc8 [ 40.173631][ C0] do_mem_abort+0x70/0x194 [ 40.174399][ C0] el1_abort+0x3c/0x5c [ 40.175137][ C0] el1h_64_sync_handler+0x50/0xac [ 40.176003][ C0] el1h_64_sync+0x64/0x68 [ 40.176760][ C0] cpuacct_account_field+0x100/0x1cc [ 40.177670][ C0] task_group_account_field+0x7c/0x1ac [ 40.178632][ C0] irqtime_account_process_tick+0x374/0x498 [ 40.179682][ C0] account_process_tick+0x44/0x46c [ 40.180588][ C0] update_process_times+0x34/0x1ec [ 40.181460][ C0] tick_sched_timer+0x30c/0x4bc [ 40.182271][ C0] __hrtimer_run_queues+0x408/0xc3c [ 40.183089][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 40.183857][ C0] arch_timer_handler_virt+0x74/0x88 [ 40.184760][ C0] handle_percpu_devid_irq+0x174/0x34c [ 40.185674][ C0] generic_handle_domain_irq+0xe0/0x140 [ 40.186644][ C0] gic_handle_irq+0x70/0x1d4 [ 40.187424][ C0] call_on_irq_stack+0x30/0x48 [ 40.188194][ C0] do_interrupt_handler+0xd4/0x138 [ 40.188983][ C0] el1_interrupt+0x34/0x54 [ 40.189759][ C0] el1h_64_irq_handler+0x18/0x24 [ 40.190568][ C0] el1h_64_irq+0x64/0x68 [ 40.191265][ C0] __memcpy+0x1f4/0x240 [ 40.191947][ C0] leaf_paste_entries+0x69c/0xae4 [ 40.192832][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 40.193669][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 40.194665][ C0] leaf_move_items+0x6a0/0xbb0 [ 40.195546][ C0] leaf_shift_left+0xc8/0x3ac [ 40.196340][ C0] balance_leaf+0x27b0/0xd92c [ 40.197101][ C0] do_balance+0x270/0x790 [ 40.197813][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 40.198799][ C0] reiserfs_do_truncate+0x738/0x1058 [ 40.199782][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 40.200754][ C0] reiserfs_setattr+0xab4/0xfec [ 40.201606][ C0] notify_change+0xb0c/0xdcc [ 40.202373][ C0] do_truncate+0x188/0x20c [ 40.203232][ C0] path_openat+0x2110/0x26bc [ 40.203997][ C0] do_filp_open+0x194/0x384 [ 40.204797][ C0] do_sys_openat2+0x134/0x3f4 [ 40.205552][ C0] __arm64_sys_openat+0x118/0x14c [ 40.206438][ C0] invoke_syscall+0x98/0x2b4 [ 40.207227][ C0] el0_svc_common+0x138/0x258 [ 40.207995][ C0] do_el0_svc+0x58/0x130 [ 40.208695][ C0] el0_svc+0x58/0x128 [ 40.209330][ C0] el0t_64_sync_handler+0x84/0xf0 [ 40.210176][ C0] el0t_64_sync+0x18c/0x190 [ 40.210860][ C0] irq event stamp: 401073 [ 40.211524][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 40.213257][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 40.214793][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 40.216383][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 40.217975][ C0] ---[ end trace 0000000000000000 ]--- [ 40.232104][ C0] ------------[ cut here ]------------ [ 40.233073][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 40.234935][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 40.236459][ C0] Modules linked in: [ 40.237125][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 40.238584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.240206][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 40.241543][ C0] pc : __virt_to_phys+0x88/0xa0 [ 40.242341][ C0] lr : __virt_to_phys+0x84/0xa0 [ 40.243164][ C0] sp : ffff800008007200 [ 40.243909][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 40.245310][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 40.246649][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 40.247983][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 40.249400][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 40.250723][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 40.252055][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 40.253408][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.254687][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 40.256019][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 40.257316][ C0] Call trace: [ 40.257867][ C0] __virt_to_phys+0x88/0xa0 [ 40.258563][ C0] check_and_switch_context+0x33c/0x6c8 [ 40.259529][ C0] efi_virtmap_unload+0x5c/0xd0 [ 40.260355][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 40.261488][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 40.262509][ C0] efi_pstore_write+0x298/0x39c [ 40.263301][ C0] pstore_dump+0x5b0/0x820 [ 40.264006][ C0] kmsg_dump+0x170/0x260 [ 40.264722][ C0] oops_exit+0x2c/0x38 [ 40.265404][ C0] die+0xb8/0x1d8 [ 40.266003][ C0] die_kernel_fault+0x6c/0x80 [ 40.266841][ C0] __do_kernel_fault+0x3a0/0x3ac [ 40.267730][ C0] do_bad_area+0x84/0x234 [ 40.268491][ C0] do_translation_fault+0xac/0xc8 [ 40.269386][ C0] do_mem_abort+0x70/0x194 [ 40.270158][ C0] el1_abort+0x3c/0x5c [ 40.270838][ C0] el1h_64_sync_handler+0x50/0xac [ 40.271724][ C0] el1h_64_sync+0x64/0x68 [ 40.272520][ C0] cpuacct_account_field+0x100/0x1cc [ 40.273397][ C0] task_group_account_field+0x7c/0x1ac [ 40.274377][ C0] irqtime_account_process_tick+0x374/0x498 [ 40.275502][ C0] account_process_tick+0x44/0x46c [ 40.276393][ C0] update_process_times+0x34/0x1ec [ 40.277249][ C0] tick_sched_timer+0x30c/0x4bc [ 40.278030][ C0] __hrtimer_run_queues+0x408/0xc3c [ 40.278912][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 40.279797][ C0] arch_timer_handler_virt+0x74/0x88 [ 40.280786][ C0] handle_percpu_devid_irq+0x174/0x34c [ 40.281743][ C0] generic_handle_domain_irq+0xe0/0x140 [ 40.282737][ C0] gic_handle_irq+0x70/0x1d4 [ 40.283462][ C0] call_on_irq_stack+0x30/0x48 [ 40.284339][ C0] do_interrupt_handler+0xd4/0x138 [ 40.285240][ C0] el1_interrupt+0x34/0x54 [ 40.286008][ C0] el1h_64_irq_handler+0x18/0x24 [ 40.286825][ C0] el1h_64_irq+0x64/0x68 [ 40.287489][ C0] __memcpy+0x1f4/0x240 [ 40.288208][ C0] leaf_paste_entries+0x69c/0xae4 [ 40.288998][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 40.289994][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 40.290983][ C0] leaf_move_items+0x6a0/0xbb0 [ 40.291904][ C0] leaf_shift_left+0xc8/0x3ac [ 40.292794][ C0] balance_leaf+0x27b0/0xd92c [ 40.293566][ C0] do_balance+0x270/0x790 [ 40.294337][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 40.295237][ C0] reiserfs_do_truncate+0x738/0x1058 [ 40.296171][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 40.297123][ C0] reiserfs_setattr+0xab4/0xfec [ 40.297924][ C0] notify_change+0xb0c/0xdcc [ 40.298654][ C0] do_truncate+0x188/0x20c [ 40.299343][ C0] path_openat+0x2110/0x26bc [ 40.300126][ C0] do_filp_open+0x194/0x384 [ 40.300875][ C0] do_sys_openat2+0x134/0x3f4 [ 40.301629][ C0] __arm64_sys_openat+0x118/0x14c [ 40.302469][ C0] invoke_syscall+0x98/0x2b4 [ 40.303235][ C0] el0_svc_common+0x138/0x258 [ 40.303947][ C0] do_el0_svc+0x58/0x130 [ 40.304672][ C0] el0_svc+0x58/0x128 [ 40.305375][ C0] el0t_64_sync_handler+0x84/0xf0 [ 40.306227][ C0] el0t_64_sync+0x18c/0x190 [ 40.306967][ C0] irq event stamp: 401073 [ 40.307650][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 40.309470][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 40.311019][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 40.312663][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 40.314323][ C0] ---[ end trace 0000000000000000 ]--- [ 40.328445][ C0] ------------[ cut here ]------------ [ 40.329227][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 40.330977][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 40.332394][ C0] Modules linked in: [ 40.332950][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 40.334387][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.336079][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 40.337379][ C0] pc : __virt_to_phys+0x88/0xa0 [ 40.338215][ C0] lr : __virt_to_phys+0x84/0xa0 [ 40.338946][ C0] sp : ffff800008007200 [ 40.339677][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 40.341210][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 40.342619][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 40.344042][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 40.345422][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 40.346832][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 40.348171][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 40.349648][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.351010][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 40.352356][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 40.353706][ C0] Call trace: [ 40.354232][ C0] __virt_to_phys+0x88/0xa0 [ 40.355066][ C0] check_and_switch_context+0x33c/0x6c8 [ 40.355982][ C0] efi_virtmap_unload+0x5c/0xd0 [ 40.356729][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 40.357713][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 40.358701][ C0] efi_pstore_write+0x298/0x39c [ 40.359470][ C0] pstore_dump+0x5b0/0x820 [ 40.360178][ C0] kmsg_dump+0x170/0x260 [ 40.360841][ C0] oops_exit+0x2c/0x38 [ 40.361503][ C0] die+0xb8/0x1d8 [ 40.362108][ C0] die_kernel_fault+0x6c/0x80 [ 40.362883][ C0] __do_kernel_fault+0x3a0/0x3ac [ 40.363682][ C0] do_bad_area+0x84/0x234 [ 40.364439][ C0] do_translation_fault+0xac/0xc8 [ 40.365264][ C0] do_mem_abort+0x70/0x194 [ 40.366030][ C0] el1_abort+0x3c/0x5c [ 40.366648][ C0] el1h_64_sync_handler+0x50/0xac [ 40.367606][ C0] el1h_64_sync+0x64/0x68 [ 40.368312][ C0] cpuacct_account_field+0x100/0x1cc [ 40.369227][ C0] task_group_account_field+0x7c/0x1ac [ 40.370111][ C0] irqtime_account_process_tick+0x374/0x498 [ 40.371067][ C0] account_process_tick+0x44/0x46c [ 40.371892][ C0] update_process_times+0x34/0x1ec [ 40.372720][ C0] tick_sched_timer+0x30c/0x4bc [ 40.373508][ C0] __hrtimer_run_queues+0x408/0xc3c [ 40.374282][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 40.375089][ C0] arch_timer_handler_virt+0x74/0x88 [ 40.375971][ C0] handle_percpu_devid_irq+0x174/0x34c [ 40.376878][ C0] generic_handle_domain_irq+0xe0/0x140 [ 40.377765][ C0] gic_handle_irq+0x70/0x1d4 [ 40.378549][ C0] call_on_irq_stack+0x30/0x48 [ 40.379348][ C0] do_interrupt_handler+0xd4/0x138 [ 40.380229][ C0] el1_interrupt+0x34/0x54 [ 40.380969][ C0] el1h_64_irq_handler+0x18/0x24 [ 40.381757][ C0] el1h_64_irq+0x64/0x68 [ 40.382462][ C0] __memcpy+0x1f4/0x240 [ 40.383144][ C0] leaf_paste_entries+0x69c/0xae4 [ 40.384010][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 40.384858][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 40.385735][ C0] leaf_move_items+0x6a0/0xbb0 [ 40.386501][ C0] leaf_shift_left+0xc8/0x3ac [ 40.387266][ C0] balance_leaf+0x27b0/0xd92c [ 40.388005][ C0] do_balance+0x270/0x790 [ 40.388682][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 40.389575][ C0] reiserfs_do_truncate+0x738/0x1058 [ 40.390379][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 40.391225][ C0] reiserfs_setattr+0xab4/0xfec [ 40.392084][ C0] notify_change+0xb0c/0xdcc [ 40.392852][ C0] do_truncate+0x188/0x20c [ 40.393783][ C0] path_openat+0x2110/0x26bc [ 40.394552][ C0] do_filp_open+0x194/0x384 [ 40.395340][ C0] do_sys_openat2+0x134/0x3f4 [ 40.396124][ C0] __arm64_sys_openat+0x118/0x14c [ 40.397011][ C0] invoke_syscall+0x98/0x2b4 [ 40.397758][ C0] el0_svc_common+0x138/0x258 [ 40.398573][ C0] do_el0_svc+0x58/0x130 [ 40.399300][ C0] el0_svc+0x58/0x128 [ 40.400016][ C0] el0t_64_sync_handler+0x84/0xf0 [ 40.400896][ C0] el0t_64_sync+0x18c/0x190 [ 40.401734][ C0] irq event stamp: 401073 [ 40.402528][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 40.404326][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 40.405972][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 40.407472][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 40.409059][ C0] ---[ end trace 0000000000000000 ]--- [ 40.427657][ C0] ------------[ cut here ]------------ [ 40.428457][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 40.430078][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 40.431620][ C0] Modules linked in: [ 40.432235][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 40.433590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.435242][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 40.436622][ C0] pc : __virt_to_phys+0x88/0xa0 [ 40.437373][ C0] lr : __virt_to_phys+0x84/0xa0 [ 40.438125][ C0] sp : ffff800008007200 [ 40.438782][ C0] x29: ffff800008007200 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 40.440204][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 40.441622][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 40.443005][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 40.444415][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010005 [ 40.445980][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 40.447375][ C0] x11: ff00800008194250 x10: 0000000000010003 x9 : a14876f4f6d47800 [ 40.448681][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.450086][ C0] x5 : ffff800008006c98 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 40.451353][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000000 [ 40.452732][ C0] Call trace: [ 40.453291][ C0] __virt_to_phys+0x88/0xa0 [ 40.454078][ C0] check_and_switch_context+0x33c/0x6c8 [ 40.454988][ C0] efi_virtmap_unload+0x5c/0xd0 [ 40.455839][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 40.456818][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 40.457778][ C0] efi_pstore_write+0x298/0x39c [ 40.458672][ C0] pstore_dump+0x5b0/0x820 [ 40.459418][ C0] kmsg_dump+0x170/0x260 [ 40.460100][ C0] oops_exit+0x2c/0x38 [ 40.460750][ C0] die+0xb8/0x1d8 [ 40.461387][ C0] die_kernel_fault+0x6c/0x80 [ 40.462229][ C0] __do_kernel_fault+0x3a0/0x3ac [ 40.463074][ C0] do_bad_area+0x84/0x234 [ 40.463831][ C0] do_translation_fault+0xac/0xc8 [ 40.464696][ C0] do_mem_abort+0x70/0x194 [ 40.465492][ C0] el1_abort+0x3c/0x5c [ 40.466181][ C0] el1h_64_sync_handler+0x50/0xac [ 40.467017][ C0] el1h_64_sync+0x64/0x68 [ 40.467840][ C0] cpuacct_account_field+0x100/0x1cc [ 40.468791][ C0] task_group_account_field+0x7c/0x1ac [ 40.469851][ C0] irqtime_account_process_tick+0x374/0x498 [ 40.470932][ C0] account_process_tick+0x44/0x46c [ 40.471821][ C0] update_process_times+0x34/0x1ec [ 40.472669][ C0] tick_sched_timer+0x30c/0x4bc [ 40.473537][ C0] __hrtimer_run_queues+0x408/0xc3c [ 40.474442][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 40.475366][ C0] arch_timer_handler_virt+0x74/0x88 [ 40.476277][ C0] handle_percpu_devid_irq+0x174/0x34c [ 40.477220][ C0] generic_handle_domain_irq+0xe0/0x140 [ 40.478211][ C0] gic_handle_irq+0x70/0x1d4 [ 40.479020][ C0] call_on_irq_stack+0x30/0x48 [ 40.479855][ C0] do_interrupt_handler+0xd4/0x138 [ 40.480802][ C0] el1_interrupt+0x34/0x54 [ 40.481515][ C0] el1h_64_irq_handler+0x18/0x24 [ 40.482349][ C0] el1h_64_irq+0x64/0x68 [ 40.483060][ C0] __memcpy+0x1f4/0x240 [ 40.483794][ C0] leaf_paste_entries+0x69c/0xae4 [ 40.484661][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 40.485542][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 40.486531][ C0] leaf_move_items+0x6a0/0xbb0 [ 40.487312][ C0] leaf_shift_left+0xc8/0x3ac [ 40.488194][ C0] balance_leaf+0x27b0/0xd92c [ 40.489036][ C0] do_balance+0x270/0x790 [ 40.489713][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 40.490766][ C0] reiserfs_do_truncate+0x738/0x1058 [ 40.491752][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 40.492747][ C0] reiserfs_setattr+0xab4/0xfec [ 40.493453][ C0] notify_change+0xb0c/0xdcc [ 40.494264][ C0] do_truncate+0x188/0x20c [ 40.495045][ C0] path_openat+0x2110/0x26bc [ 40.495800][ C0] do_filp_open+0x194/0x384 [ 40.496526][ C0] do_sys_openat2+0x134/0x3f4 [ 40.497354][ C0] __arm64_sys_openat+0x118/0x14c [ 40.498290][ C0] invoke_syscall+0x98/0x2b4 [ 40.499154][ C0] el0_svc_common+0x138/0x258 [ 40.500044][ C0] do_el0_svc+0x58/0x130 [ 40.500833][ C0] el0_svc+0x58/0x128 [ 40.501513][ C0] el0t_64_sync_handler+0x84/0xf0 [ 40.502384][ C0] el0t_64_sync+0x18c/0x190 [ 40.503188][ C0] irq event stamp: 401073 [ 40.503875][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 40.505539][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 40.507226][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 40.508869][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 40.510544][ C0] ---[ end trace 0000000000000000 ]--- [ 40.511553][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 40.512951][ C0] SMP: stopping secondary CPUs [ 41.611330][ C0] SMP: failed to stop secondary CPUs 0-1 [ 41.612256][ C0] Kernel Offset: disabled [ 41.613010][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 41.613934][ C0] Memory Limit: none [ 41.633891][ C0] ------------[ cut here ]------------ [ 41.634782][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 41.636700][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 41.638412][ C0] Modules linked in: [ 41.639193][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 41.640574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.642290][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.643522][ C0] pc : __virt_to_phys+0x88/0xa0 [ 41.644246][ C0] lr : __virt_to_phys+0x84/0xa0 [ 41.645017][ C0] sp : ffff8000080070c0 [ 41.645687][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 41.647027][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 41.648500][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 41.649877][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 41.651231][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 41.652664][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 41.654018][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 41.655402][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 41.656840][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 41.658240][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 41.659620][ C0] Call trace: [ 41.660214][ C0] __virt_to_phys+0x88/0xa0 [ 41.660981][ C0] check_and_switch_context+0x33c/0x6c8 [ 41.661899][ C0] efi_virtmap_unload+0x5c/0xd0 [ 41.662688][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 41.663716][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 41.664660][ C0] efi_pstore_write+0x298/0x39c [ 41.665463][ C0] pstore_dump+0x5b0/0x820 [ 41.666194][ C0] kmsg_dump+0x170/0x260 [ 41.666869][ C0] panic+0x384/0x7ac [ 41.667511][ C0] die+0x188/0x1d8 [ 41.668084][ C0] die_kernel_fault+0x6c/0x80 [ 41.668875][ C0] __do_kernel_fault+0x3a0/0x3ac [ 41.669715][ C0] do_bad_area+0x84/0x234 [ 41.670498][ C0] do_translation_fault+0xac/0xc8 [ 41.671378][ C0] do_mem_abort+0x70/0x194 [ 41.672122][ C0] el1_abort+0x3c/0x5c [ 41.672813][ C0] el1h_64_sync_handler+0x50/0xac [ 41.673661][ C0] el1h_64_sync+0x64/0x68 [ 41.674440][ C0] cpuacct_account_field+0x100/0x1cc [ 41.675271][ C0] task_group_account_field+0x7c/0x1ac [ 41.676148][ C0] irqtime_account_process_tick+0x374/0x498 [ 41.677143][ C0] account_process_tick+0x44/0x46c [ 41.677980][ C0] update_process_times+0x34/0x1ec [ 41.678843][ C0] tick_sched_timer+0x30c/0x4bc [ 41.679641][ C0] __hrtimer_run_queues+0x408/0xc3c [ 41.680502][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 41.681330][ C0] arch_timer_handler_virt+0x74/0x88 [ 41.682243][ C0] handle_percpu_devid_irq+0x174/0x34c [ 41.683257][ C0] generic_handle_domain_irq+0xe0/0x140 [ 41.684191][ C0] gic_handle_irq+0x70/0x1d4 [ 41.684987][ C0] call_on_irq_stack+0x30/0x48 [ 41.685798][ C0] do_interrupt_handler+0xd4/0x138 [ 41.686631][ C0] el1_interrupt+0x34/0x54 [ 41.687441][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.688302][ C0] el1h_64_irq+0x64/0x68 [ 41.689019][ C0] __memcpy+0x1f4/0x240 [ 41.689631][ C0] leaf_paste_entries+0x69c/0xae4 [ 41.690490][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 41.691356][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 41.692254][ C0] leaf_move_items+0x6a0/0xbb0 [ 41.693014][ C0] leaf_shift_left+0xc8/0x3ac [ 41.693854][ C0] balance_leaf+0x27b0/0xd92c [ 41.694585][ C0] do_balance+0x270/0x790 [ 41.695365][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 41.696352][ C0] reiserfs_do_truncate+0x738/0x1058 [ 41.697251][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 41.698184][ C0] reiserfs_setattr+0xab4/0xfec [ 41.699029][ C0] notify_change+0xb0c/0xdcc [ 41.699807][ C0] do_truncate+0x188/0x20c [ 41.700497][ C0] path_openat+0x2110/0x26bc [ 41.701254][ C0] do_filp_open+0x194/0x384 [ 41.702022][ C0] do_sys_openat2+0x134/0x3f4 [ 41.702707][ C0] __arm64_sys_openat+0x118/0x14c [ 41.703622][ C0] invoke_syscall+0x98/0x2b4 [ 41.704429][ C0] el0_svc_common+0x138/0x258 [ 41.705242][ C0] do_el0_svc+0x58/0x130 [ 41.705968][ C0] el0_svc+0x58/0x128 [ 41.706649][ C0] el0t_64_sync_handler+0x84/0xf0 [ 41.707455][ C0] el0t_64_sync+0x18c/0x190 [ 41.708249][ C0] irq event stamp: 401073 [ 41.708992][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 41.710642][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 41.712127][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 41.713772][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 41.715460][ C0] ---[ end trace 0000000000000000 ]--- [ 41.734040][ C0] ------------[ cut here ]------------ [ 41.734855][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 41.736837][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 41.738418][ C0] Modules linked in: [ 41.739040][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 41.740525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.742160][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.743480][ C0] pc : __virt_to_phys+0x88/0xa0 [ 41.744345][ C0] lr : __virt_to_phys+0x84/0xa0 [ 41.745210][ C0] sp : ffff8000080070c0 [ 41.745906][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 41.747344][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 41.748756][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 41.750154][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 41.751453][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 41.752801][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 41.754185][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 41.755602][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 41.756903][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 41.758277][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 41.759713][ C0] Call trace: [ 41.760263][ C0] __virt_to_phys+0x88/0xa0 [ 41.761109][ C0] check_and_switch_context+0x33c/0x6c8 [ 41.762050][ C0] efi_virtmap_unload+0x5c/0xd0 [ 41.762802][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 41.763811][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 41.764722][ C0] efi_pstore_write+0x298/0x39c [ 41.765552][ C0] pstore_dump+0x5b0/0x820 [ 41.766300][ C0] kmsg_dump+0x170/0x260 [ 41.767019][ C0] panic+0x384/0x7ac [ 41.767728][ C0] die+0x188/0x1d8 [ 41.768396][ C0] die_kernel_fault+0x6c/0x80 [ 41.769175][ C0] __do_kernel_fault+0x3a0/0x3ac [ 41.769988][ C0] do_bad_area+0x84/0x234 [ 41.770760][ C0] do_translation_fault+0xac/0xc8 [ 41.771590][ C0] do_mem_abort+0x70/0x194 [ 41.772329][ C0] el1_abort+0x3c/0x5c [ 41.772954][ C0] el1h_64_sync_handler+0x50/0xac [ 41.773744][ C0] el1h_64_sync+0x64/0x68 [ 41.774431][ C0] cpuacct_account_field+0x100/0x1cc [ 41.775281][ C0] task_group_account_field+0x7c/0x1ac [ 41.776171][ C0] irqtime_account_process_tick+0x374/0x498 [ 41.777152][ C0] account_process_tick+0x44/0x46c [ 41.778060][ C0] update_process_times+0x34/0x1ec [ 41.778990][ C0] tick_sched_timer+0x30c/0x4bc [ 41.779799][ C0] __hrtimer_run_queues+0x408/0xc3c [ 41.780638][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 41.781406][ C0] arch_timer_handler_virt+0x74/0x88 [ 41.782264][ C0] handle_percpu_devid_irq+0x174/0x34c [ 41.783145][ C0] generic_handle_domain_irq+0xe0/0x140 [ 41.784174][ C0] gic_handle_irq+0x70/0x1d4 [ 41.784990][ C0] call_on_irq_stack+0x30/0x48 [ 41.785820][ C0] do_interrupt_handler+0xd4/0x138 [ 41.786684][ C0] el1_interrupt+0x34/0x54 [ 41.787434][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.788275][ C0] el1h_64_irq+0x64/0x68 [ 41.788944][ C0] __memcpy+0x1f4/0x240 [ 41.789658][ C0] leaf_paste_entries+0x69c/0xae4 [ 41.790506][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 41.791412][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 41.792348][ C0] leaf_move_items+0x6a0/0xbb0 [ 41.793186][ C0] leaf_shift_left+0xc8/0x3ac [ 41.793898][ C0] balance_leaf+0x27b0/0xd92c [ 41.794635][ C0] do_balance+0x270/0x790 [ 41.795389][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 41.796321][ C0] reiserfs_do_truncate+0x738/0x1058 [ 41.797226][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 41.798135][ C0] reiserfs_setattr+0xab4/0xfec [ 41.798984][ C0] notify_change+0xb0c/0xdcc [ 41.799660][ C0] do_truncate+0x188/0x20c [ 41.800379][ C0] path_openat+0x2110/0x26bc [ 41.801066][ C0] do_filp_open+0x194/0x384 [ 41.801817][ C0] do_sys_openat2+0x134/0x3f4 [ 41.802568][ C0] __arm64_sys_openat+0x118/0x14c [ 41.803372][ C0] invoke_syscall+0x98/0x2b4 [ 41.804111][ C0] el0_svc_common+0x138/0x258 [ 41.804984][ C0] do_el0_svc+0x58/0x130 [ 41.805676][ C0] el0_svc+0x58/0x128 [ 41.806375][ C0] el0t_64_sync_handler+0x84/0xf0 [ 41.807215][ C0] el0t_64_sync+0x18c/0x190 [ 41.807957][ C0] irq event stamp: 401073 [ 41.808651][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 41.810286][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 41.811891][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 41.813433][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 41.815074][ C0] ---[ end trace 0000000000000000 ]--- [ 41.835039][ C0] ------------[ cut here ]------------ [ 41.835961][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 41.837928][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 41.839429][ C0] Modules linked in: [ 41.840035][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 41.841470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.843186][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.844488][ C0] pc : __virt_to_phys+0x88/0xa0 [ 41.845274][ C0] lr : __virt_to_phys+0x84/0xa0 [ 41.846114][ C0] sp : ffff8000080070c0 [ 41.846776][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 41.848156][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 41.849581][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 41.851022][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 41.852401][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 41.853744][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 41.855161][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 41.856498][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 41.857955][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 41.859311][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 41.860711][ C0] Call trace: [ 41.861255][ C0] __virt_to_phys+0x88/0xa0 [ 41.861994][ C0] check_and_switch_context+0x33c/0x6c8 [ 41.862960][ C0] efi_virtmap_unload+0x5c/0xd0 [ 41.863811][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 41.864903][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 41.865892][ C0] efi_pstore_write+0x298/0x39c [ 41.866697][ C0] pstore_dump+0x5b0/0x820 [ 41.867460][ C0] kmsg_dump+0x170/0x260 [ 41.868173][ C0] panic+0x384/0x7ac [ 41.868796][ C0] die+0x188/0x1d8 [ 41.869370][ C0] die_kernel_fault+0x6c/0x80 [ 41.870247][ C0] __do_kernel_fault+0x3a0/0x3ac [ 41.871078][ C0] do_bad_area+0x84/0x234 [ 41.871914][ C0] do_translation_fault+0xac/0xc8 [ 41.872833][ C0] do_mem_abort+0x70/0x194 [ 41.873664][ C0] el1_abort+0x3c/0x5c [ 41.874340][ C0] el1h_64_sync_handler+0x50/0xac [ 41.875158][ C0] el1h_64_sync+0x64/0x68 [ 41.875907][ C0] cpuacct_account_field+0x100/0x1cc [ 41.876773][ C0] task_group_account_field+0x7c/0x1ac [ 41.877764][ C0] irqtime_account_process_tick+0x374/0x498 [ 41.878786][ C0] account_process_tick+0x44/0x46c [ 41.879599][ C0] update_process_times+0x34/0x1ec [ 41.880465][ C0] tick_sched_timer+0x30c/0x4bc [ 41.881283][ C0] __hrtimer_run_queues+0x408/0xc3c [ 41.882078][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 41.882919][ C0] arch_timer_handler_virt+0x74/0x88 [ 41.883753][ C0] handle_percpu_devid_irq+0x174/0x34c [ 41.884620][ C0] generic_handle_domain_irq+0xe0/0x140 [ 41.885522][ C0] gic_handle_irq+0x70/0x1d4 [ 41.886283][ C0] call_on_irq_stack+0x30/0x48 [ 41.887050][ C0] do_interrupt_handler+0xd4/0x138 [ 41.887916][ C0] el1_interrupt+0x34/0x54 [ 41.888707][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.889593][ C0] el1h_64_irq+0x64/0x68 [ 41.890302][ C0] __memcpy+0x1f4/0x240 [ 41.891025][ C0] leaf_paste_entries+0x69c/0xae4 [ 41.891868][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 41.892788][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 41.893715][ C0] leaf_move_items+0x6a0/0xbb0 [ 41.894534][ C0] leaf_shift_left+0xc8/0x3ac [ 41.895332][ C0] balance_leaf+0x27b0/0xd92c [ 41.896095][ C0] do_balance+0x270/0x790 [ 41.896858][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 41.897817][ C0] reiserfs_do_truncate+0x738/0x1058 [ 41.898693][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 41.899536][ C0] reiserfs_setattr+0xab4/0xfec [ 41.900330][ C0] notify_change+0xb0c/0xdcc [ 41.901097][ C0] do_truncate+0x188/0x20c [ 41.901891][ C0] path_openat+0x2110/0x26bc [ 41.902678][ C0] do_filp_open+0x194/0x384 [ 41.903375][ C0] do_sys_openat2+0x134/0x3f4 [ 41.904262][ C0] __arm64_sys_openat+0x118/0x14c [ 41.905074][ C0] invoke_syscall+0x98/0x2b4 [ 41.905958][ C0] el0_svc_common+0x138/0x258 [ 41.906780][ C0] do_el0_svc+0x58/0x130 [ 41.907509][ C0] el0_svc+0x58/0x128 [ 41.908143][ C0] el0t_64_sync_handler+0x84/0xf0 [ 41.909006][ C0] el0t_64_sync+0x18c/0x190 [ 41.909805][ C0] irq event stamp: 401073 [ 41.910523][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 41.912130][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 41.913638][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 41.915305][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 41.917030][ C0] ---[ end trace 0000000000000000 ]--- [ 41.935309][ C0] ------------[ cut here ]------------ [ 41.936128][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 41.937779][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 41.939253][ C0] Modules linked in: [ 41.939869][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 41.941226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.942798][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.943964][ C0] pc : __virt_to_phys+0x88/0xa0 [ 41.944685][ C0] lr : __virt_to_phys+0x84/0xa0 [ 41.945503][ C0] sp : ffff8000080070c0 [ 41.946208][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 41.947472][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 41.948763][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 41.950225][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 41.951604][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 41.952923][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 41.954369][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 41.955771][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 41.956976][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 41.958427][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 41.959877][ C0] Call trace: [ 41.960521][ C0] __virt_to_phys+0x88/0xa0 [ 41.961298][ C0] check_and_switch_context+0x33c/0x6c8 [ 41.962243][ C0] efi_virtmap_unload+0x5c/0xd0 [ 41.963132][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 41.964159][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 41.965134][ C0] efi_pstore_write+0x298/0x39c [ 41.965974][ C0] pstore_dump+0x5b0/0x820 [ 41.966743][ C0] kmsg_dump+0x170/0x260 [ 41.967413][ C0] panic+0x384/0x7ac [ 41.968056][ C0] die+0x188/0x1d8 [ 41.968677][ C0] die_kernel_fault+0x6c/0x80 [ 41.969435][ C0] __do_kernel_fault+0x3a0/0x3ac [ 41.970278][ C0] do_bad_area+0x84/0x234 [ 41.970978][ C0] do_translation_fault+0xac/0xc8 [ 41.971840][ C0] do_mem_abort+0x70/0x194 [ 41.972546][ C0] el1_abort+0x3c/0x5c [ 41.973197][ C0] el1h_64_sync_handler+0x50/0xac [ 41.973984][ C0] el1h_64_sync+0x64/0x68 [ 41.974749][ C0] cpuacct_account_field+0x100/0x1cc [ 41.975584][ C0] task_group_account_field+0x7c/0x1ac [ 41.976524][ C0] irqtime_account_process_tick+0x374/0x498 [ 41.977498][ C0] account_process_tick+0x44/0x46c [ 41.978312][ C0] update_process_times+0x34/0x1ec [ 41.979182][ C0] tick_sched_timer+0x30c/0x4bc [ 41.980014][ C0] __hrtimer_run_queues+0x408/0xc3c [ 41.980847][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 41.981634][ C0] arch_timer_handler_virt+0x74/0x88 [ 41.982470][ C0] handle_percpu_devid_irq+0x174/0x34c [ 41.983340][ C0] generic_handle_domain_irq+0xe0/0x140 [ 41.984236][ C0] gic_handle_irq+0x70/0x1d4 [ 41.985018][ C0] call_on_irq_stack+0x30/0x48 [ 41.985780][ C0] do_interrupt_handler+0xd4/0x138 [ 41.986678][ C0] el1_interrupt+0x34/0x54 [ 41.987405][ C0] el1h_64_irq_handler+0x18/0x24 [ 41.988193][ C0] el1h_64_irq+0x64/0x68 [ 41.988865][ C0] __memcpy+0x1f4/0x240 [ 41.989559][ C0] leaf_paste_entries+0x69c/0xae4 [ 41.990452][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 41.991301][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 41.992376][ C0] leaf_move_items+0x6a0/0xbb0 [ 41.993141][ C0] leaf_shift_left+0xc8/0x3ac [ 41.993983][ C0] balance_leaf+0x27b0/0xd92c [ 41.994736][ C0] do_balance+0x270/0x790 [ 41.995405][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 41.996348][ C0] reiserfs_do_truncate+0x738/0x1058 [ 41.997211][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 41.998038][ C0] reiserfs_setattr+0xab4/0xfec [ 41.998793][ C0] notify_change+0xb0c/0xdcc [ 41.999511][ C0] do_truncate+0x188/0x20c [ 42.000279][ C0] path_openat+0x2110/0x26bc [ 42.001133][ C0] do_filp_open+0x194/0x384 [ 42.001843][ C0] do_sys_openat2+0x134/0x3f4 [ 42.002632][ C0] __arm64_sys_openat+0x118/0x14c [ 42.003537][ C0] invoke_syscall+0x98/0x2b4 [ 42.004319][ C0] el0_svc_common+0x138/0x258 [ 42.005086][ C0] do_el0_svc+0x58/0x130 [ 42.005753][ C0] el0_svc+0x58/0x128 [ 42.006523][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.007313][ C0] el0t_64_sync+0x18c/0x190 [ 42.008022][ C0] irq event stamp: 401073 [ 42.008714][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.010286][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.011907][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.013499][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.014954][ C0] ---[ end trace 0000000000000000 ]--- [ 42.032839][ C0] ------------[ cut here ]------------ [ 42.033660][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.035450][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.037064][ C0] Modules linked in: [ 42.037747][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.039199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.040886][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.042252][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.043050][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.043821][ C0] sp : ffff8000080070c0 [ 42.044478][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.045820][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.047209][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.048543][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.049842][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.051161][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.052608][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.054012][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.055352][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.056750][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.058020][ C0] Call trace: [ 42.058558][ C0] __virt_to_phys+0x88/0xa0 [ 42.059340][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.060199][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.061016][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.062065][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.063072][ C0] efi_pstore_write+0x298/0x39c [ 42.063909][ C0] pstore_dump+0x5b0/0x820 [ 42.064606][ C0] kmsg_dump+0x170/0x260 [ 42.065338][ C0] panic+0x384/0x7ac [ 42.065982][ C0] die+0x188/0x1d8 [ 42.066610][ C0] die_kernel_fault+0x6c/0x80 [ 42.067412][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.068215][ C0] do_bad_area+0x84/0x234 [ 42.068888][ C0] do_translation_fault+0xac/0xc8 [ 42.069697][ C0] do_mem_abort+0x70/0x194 [ 42.070302][ C0] el1_abort+0x3c/0x5c [ 42.070921][ C0] el1h_64_sync_handler+0x50/0xac [ 42.071729][ C0] el1h_64_sync+0x64/0x68 [ 42.072487][ C0] cpuacct_account_field+0x100/0x1cc [ 42.073403][ C0] task_group_account_field+0x7c/0x1ac [ 42.074328][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.075328][ C0] account_process_tick+0x44/0x46c [ 42.076235][ C0] update_process_times+0x34/0x1ec [ 42.077081][ C0] tick_sched_timer+0x30c/0x4bc [ 42.077900][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.078864][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.079803][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.080695][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.081525][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.082389][ C0] gic_handle_irq+0x70/0x1d4 [ 42.083179][ C0] call_on_irq_stack+0x30/0x48 [ 42.084017][ C0] do_interrupt_handler+0xd4/0x138 [ 42.084928][ C0] el1_interrupt+0x34/0x54 [ 42.085709][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.086566][ C0] el1h_64_irq+0x64/0x68 [ 42.087306][ C0] __memcpy+0x1f4/0x240 [ 42.088001][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.088870][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.089808][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.090740][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.091496][ C0] leaf_shift_left+0xc8/0x3ac [ 42.092191][ C0] balance_leaf+0x27b0/0xd92c [ 42.092933][ C0] do_balance+0x270/0x790 [ 42.093654][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.094556][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.095372][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.096238][ C0] reiserfs_setattr+0xab4/0xfec [ 42.097077][ C0] notify_change+0xb0c/0xdcc [ 42.098005][ C0] do_truncate+0x188/0x20c [ 42.098783][ C0] path_openat+0x2110/0x26bc [ 42.099643][ C0] do_filp_open+0x194/0x384 [ 42.100347][ C0] do_sys_openat2+0x134/0x3f4 [ 42.101139][ C0] __arm64_sys_openat+0x118/0x14c [ 42.101936][ C0] invoke_syscall+0x98/0x2b4 [ 42.102641][ C0] el0_svc_common+0x138/0x258 [ 42.103350][ C0] do_el0_svc+0x58/0x130 [ 42.104047][ C0] el0_svc+0x58/0x128 [ 42.104645][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.105460][ C0] el0t_64_sync+0x18c/0x190 [ 42.106141][ C0] irq event stamp: 401073 [ 42.106845][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.108371][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.109882][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.111325][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.112764][ C0] ---[ end trace 0000000000000000 ]--- [ 42.130646][ C0] ------------[ cut here ]------------ [ 42.131430][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.133352][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.134887][ C0] Modules linked in: [ 42.135495][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.136905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.138554][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.139775][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.140539][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.141277][ C0] sp : ffff8000080070c0 [ 42.141865][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.143094][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.144376][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.145625][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.146968][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.148304][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.149566][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.150834][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.152053][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.153361][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.154596][ C0] Call trace: [ 42.155123][ C0] __virt_to_phys+0x88/0xa0 [ 42.155837][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.156785][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.157690][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.158705][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.159723][ C0] efi_pstore_write+0x298/0x39c [ 42.160524][ C0] pstore_dump+0x5b0/0x820 [ 42.161284][ C0] kmsg_dump+0x170/0x260 [ 42.162001][ C0] panic+0x384/0x7ac [ 42.162683][ C0] die+0x188/0x1d8 [ 42.163335][ C0] die_kernel_fault+0x6c/0x80 [ 42.164112][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.164954][ C0] do_bad_area+0x84/0x234 [ 42.165626][ C0] do_translation_fault+0xac/0xc8 [ 42.166422][ C0] do_mem_abort+0x70/0x194 [ 42.167094][ C0] el1_abort+0x3c/0x5c [ 42.167810][ C0] el1h_64_sync_handler+0x50/0xac [ 42.168603][ C0] el1h_64_sync+0x64/0x68 [ 42.169346][ C0] cpuacct_account_field+0x100/0x1cc [ 42.170160][ C0] task_group_account_field+0x7c/0x1ac [ 42.171048][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.172040][ C0] account_process_tick+0x44/0x46c [ 42.172904][ C0] update_process_times+0x34/0x1ec [ 42.173707][ C0] tick_sched_timer+0x30c/0x4bc [ 42.174546][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.175366][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.176119][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.176991][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.177893][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.178759][ C0] gic_handle_irq+0x70/0x1d4 [ 42.179552][ C0] call_on_irq_stack+0x30/0x48 [ 42.180351][ C0] do_interrupt_handler+0xd4/0x138 [ 42.181140][ C0] el1_interrupt+0x34/0x54 [ 42.181875][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.182691][ C0] el1h_64_irq+0x64/0x68 [ 42.183348][ C0] __memcpy+0x1f4/0x240 [ 42.184020][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.184811][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.185717][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.186689][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.187482][ C0] leaf_shift_left+0xc8/0x3ac [ 42.188320][ C0] balance_leaf+0x27b0/0xd92c [ 42.189115][ C0] do_balance+0x270/0x790 [ 42.189900][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.190844][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.191767][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.192605][ C0] reiserfs_setattr+0xab4/0xfec [ 42.193422][ C0] notify_change+0xb0c/0xdcc [ 42.194180][ C0] do_truncate+0x188/0x20c [ 42.194886][ C0] path_openat+0x2110/0x26bc [ 42.195696][ C0] do_filp_open+0x194/0x384 [ 42.196496][ C0] do_sys_openat2+0x134/0x3f4 [ 42.197299][ C0] __arm64_sys_openat+0x118/0x14c [ 42.198218][ C0] invoke_syscall+0x98/0x2b4 [ 42.198988][ C0] el0_svc_common+0x138/0x258 [ 42.199781][ C0] do_el0_svc+0x58/0x130 [ 42.200405][ C0] el0_svc+0x58/0x128 [ 42.201100][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.202030][ C0] el0t_64_sync+0x18c/0x190 [ 42.202844][ C0] irq event stamp: 401073 [ 42.203643][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.205379][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.206863][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.208543][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.210224][ C0] ---[ end trace 0000000000000000 ]--- [ 42.228252][ C0] ------------[ cut here ]------------ [ 42.229228][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.231037][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.232586][ C0] Modules linked in: [ 42.233212][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.234652][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.236187][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.237466][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.238228][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.238993][ C0] sp : ffff8000080070c0 [ 42.239623][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.240827][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.242115][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.243446][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.244895][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.246216][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.247487][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.248770][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.250134][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.251480][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.252759][ C0] Call trace: [ 42.253285][ C0] __virt_to_phys+0x88/0xa0 [ 42.253999][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.254988][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.255874][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.256954][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.257933][ C0] efi_pstore_write+0x298/0x39c [ 42.258778][ C0] pstore_dump+0x5b0/0x820 [ 42.259544][ C0] kmsg_dump+0x170/0x260 [ 42.260227][ C0] panic+0x384/0x7ac [ 42.260884][ C0] die+0x188/0x1d8 [ 42.261520][ C0] die_kernel_fault+0x6c/0x80 [ 42.262383][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.263243][ C0] do_bad_area+0x84/0x234 [ 42.264034][ C0] do_translation_fault+0xac/0xc8 [ 42.264852][ C0] do_mem_abort+0x70/0x194 [ 42.265459][ C0] el1_abort+0x3c/0x5c [ 42.266115][ C0] el1h_64_sync_handler+0x50/0xac [ 42.266889][ C0] el1h_64_sync+0x64/0x68 [ 42.267701][ C0] cpuacct_account_field+0x100/0x1cc [ 42.268504][ C0] task_group_account_field+0x7c/0x1ac [ 42.269404][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.270338][ C0] account_process_tick+0x44/0x46c [ 42.271198][ C0] update_process_times+0x34/0x1ec [ 42.271971][ C0] tick_sched_timer+0x30c/0x4bc [ 42.272898][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.273781][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.274632][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.275528][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.276486][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.277447][ C0] gic_handle_irq+0x70/0x1d4 [ 42.278239][ C0] call_on_irq_stack+0x30/0x48 [ 42.279014][ C0] do_interrupt_handler+0xd4/0x138 [ 42.279817][ C0] el1_interrupt+0x34/0x54 [ 42.280501][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.281304][ C0] el1h_64_irq+0x64/0x68 [ 42.282018][ C0] __memcpy+0x1f4/0x240 [ 42.282656][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.283551][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.284515][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.285421][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.286177][ C0] leaf_shift_left+0xc8/0x3ac [ 42.286981][ C0] balance_leaf+0x27b0/0xd92c [ 42.287807][ C0] do_balance+0x270/0x790 [ 42.288519][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.289429][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.290292][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.291152][ C0] reiserfs_setattr+0xab4/0xfec [ 42.291966][ C0] notify_change+0xb0c/0xdcc [ 42.292789][ C0] do_truncate+0x188/0x20c [ 42.293472][ C0] path_openat+0x2110/0x26bc [ 42.294243][ C0] do_filp_open+0x194/0x384 [ 42.294981][ C0] do_sys_openat2+0x134/0x3f4 [ 42.295644][ C0] __arm64_sys_openat+0x118/0x14c [ 42.296329][ C0] invoke_syscall+0x98/0x2b4 [ 42.296944][ C0] el0_svc_common+0x138/0x258 [ 42.297610][ C0] do_el0_svc+0x58/0x130 [ 42.298198][ C0] el0_svc+0x58/0x128 [ 42.298733][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.299439][ C0] el0t_64_sync+0x18c/0x190 [ 42.300099][ C0] irq event stamp: 401073 [ 42.300685][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.302020][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.303260][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.304509][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.306037][ C0] ---[ end trace 0000000000000000 ]--- [ 42.325546][ C0] ------------[ cut here ]------------ [ 42.326461][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.328418][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.329901][ C0] Modules linked in: [ 42.330537][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.331907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.333456][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.334699][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.335506][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.336293][ C0] sp : ffff8000080070c0 [ 42.336939][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.338297][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.339697][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.341094][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.342431][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.343741][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.345073][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.346461][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.347782][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.349109][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.350371][ C0] Call trace: [ 42.350871][ C0] __virt_to_phys+0x88/0xa0 [ 42.351610][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.352508][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.353291][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.354310][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.355176][ C0] efi_pstore_write+0x298/0x39c [ 42.356008][ C0] pstore_dump+0x5b0/0x820 [ 42.356707][ C0] kmsg_dump+0x170/0x260 [ 42.357361][ C0] panic+0x384/0x7ac [ 42.357938][ C0] die+0x188/0x1d8 [ 42.358545][ C0] die_kernel_fault+0x6c/0x80 [ 42.359352][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.360065][ C0] do_bad_area+0x84/0x234 [ 42.360854][ C0] do_translation_fault+0xac/0xc8 [ 42.361615][ C0] do_mem_abort+0x70/0x194 [ 42.362353][ C0] el1_abort+0x3c/0x5c [ 42.363028][ C0] el1h_64_sync_handler+0x50/0xac [ 42.363896][ C0] el1h_64_sync+0x64/0x68 [ 42.364639][ C0] cpuacct_account_field+0x100/0x1cc [ 42.365521][ C0] task_group_account_field+0x7c/0x1ac [ 42.366471][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.367451][ C0] account_process_tick+0x44/0x46c [ 42.368317][ C0] update_process_times+0x34/0x1ec [ 42.369096][ C0] tick_sched_timer+0x30c/0x4bc [ 42.369897][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.370786][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.371619][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.372475][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.373320][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.374247][ C0] gic_handle_irq+0x70/0x1d4 [ 42.375003][ C0] call_on_irq_stack+0x30/0x48 [ 42.375750][ C0] do_interrupt_handler+0xd4/0x138 [ 42.376574][ C0] el1_interrupt+0x34/0x54 [ 42.377284][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.378080][ C0] el1h_64_irq+0x64/0x68 [ 42.378788][ C0] __memcpy+0x1f4/0x240 [ 42.379440][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.380267][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.381107][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.381960][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.382750][ C0] leaf_shift_left+0xc8/0x3ac [ 42.383492][ C0] balance_leaf+0x27b0/0xd92c [ 42.384232][ C0] do_balance+0x270/0x790 [ 42.384950][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.385792][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.386634][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.387589][ C0] reiserfs_setattr+0xab4/0xfec [ 42.388385][ C0] notify_change+0xb0c/0xdcc [ 42.389158][ C0] do_truncate+0x188/0x20c [ 42.389912][ C0] path_openat+0x2110/0x26bc [ 42.390677][ C0] do_filp_open+0x194/0x384 [ 42.391410][ C0] do_sys_openat2+0x134/0x3f4 [ 42.392172][ C0] __arm64_sys_openat+0x118/0x14c [ 42.392972][ C0] invoke_syscall+0x98/0x2b4 [ 42.393753][ C0] el0_svc_common+0x138/0x258 [ 42.394529][ C0] do_el0_svc+0x58/0x130 [ 42.395199][ C0] el0_svc+0x58/0x128 [ 42.395804][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.396592][ C0] el0t_64_sync+0x18c/0x190 [ 42.397244][ C0] irq event stamp: 401073 [ 42.397882][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.399341][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.400747][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.402390][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.403881][ C0] ---[ end trace 0000000000000000 ]--- [ 42.421168][ C0] ------------[ cut here ]------------ [ 42.422010][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.423626][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.424977][ C0] Modules linked in: [ 42.425575][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.426949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.428523][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.429747][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.430564][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.431394][ C0] sp : ffff8000080070c0 [ 42.431979][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.433358][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.435003][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.436337][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.437630][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.438829][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.440122][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.441461][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.442655][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.443891][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.445216][ C0] Call trace: [ 42.445765][ C0] __virt_to_phys+0x88/0xa0 [ 42.446542][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.447503][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.448303][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.449302][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.450276][ C0] efi_pstore_write+0x298/0x39c [ 42.451099][ C0] pstore_dump+0x5b0/0x820 [ 42.451817][ C0] kmsg_dump+0x170/0x260 [ 42.452483][ C0] panic+0x384/0x7ac [ 42.453103][ C0] die+0x188/0x1d8 [ 42.453768][ C0] die_kernel_fault+0x6c/0x80 [ 42.454483][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.455333][ C0] do_bad_area+0x84/0x234 [ 42.456053][ C0] do_translation_fault+0xac/0xc8 [ 42.456851][ C0] do_mem_abort+0x70/0x194 [ 42.457573][ C0] el1_abort+0x3c/0x5c [ 42.458218][ C0] el1h_64_sync_handler+0x50/0xac [ 42.459066][ C0] el1h_64_sync+0x64/0x68 [ 42.459750][ C0] cpuacct_account_field+0x100/0x1cc [ 42.460679][ C0] task_group_account_field+0x7c/0x1ac [ 42.461528][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.462509][ C0] account_process_tick+0x44/0x46c [ 42.463386][ C0] update_process_times+0x34/0x1ec [ 42.464258][ C0] tick_sched_timer+0x30c/0x4bc [ 42.465032][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.465884][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.466645][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.467440][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.468328][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.469270][ C0] gic_handle_irq+0x70/0x1d4 [ 42.470026][ C0] call_on_irq_stack+0x30/0x48 [ 42.470890][ C0] do_interrupt_handler+0xd4/0x138 [ 42.471764][ C0] el1_interrupt+0x34/0x54 [ 42.472517][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.473337][ C0] el1h_64_irq+0x64/0x68 [ 42.474011][ C0] __memcpy+0x1f4/0x240 [ 42.474748][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.475583][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.476566][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.477581][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.478449][ C0] leaf_shift_left+0xc8/0x3ac [ 42.479314][ C0] balance_leaf+0x27b0/0xd92c [ 42.480080][ C0] do_balance+0x270/0x790 [ 42.480797][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.481735][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.482574][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.483423][ C0] reiserfs_setattr+0xab4/0xfec [ 42.484269][ C0] notify_change+0xb0c/0xdcc [ 42.485066][ C0] do_truncate+0x188/0x20c [ 42.485764][ C0] path_openat+0x2110/0x26bc [ 42.486470][ C0] do_filp_open+0x194/0x384 [ 42.487203][ C0] do_sys_openat2+0x134/0x3f4 [ 42.487961][ C0] __arm64_sys_openat+0x118/0x14c [ 42.488824][ C0] invoke_syscall+0x98/0x2b4 [ 42.489644][ C0] el0_svc_common+0x138/0x258 [ 42.490475][ C0] do_el0_svc+0x58/0x130 [ 42.491150][ C0] el0_svc+0x58/0x128 [ 42.491761][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.492534][ C0] el0t_64_sync+0x18c/0x190 [ 42.493243][ C0] irq event stamp: 401073 [ 42.493937][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.495555][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.497113][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.498672][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.500281][ C0] ---[ end trace 0000000000000000 ]--- [ 42.517592][ C0] ------------[ cut here ]------------ [ 42.518414][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.520101][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.521661][ C0] Modules linked in: [ 42.522285][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.523594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.525140][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.526248][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.526946][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.527691][ C0] sp : ffff8000080070c0 [ 42.528312][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.529456][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.530631][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.531825][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.533002][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.534261][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.535457][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.536625][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.537921][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.539271][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.540621][ C0] Call trace: [ 42.541145][ C0] __virt_to_phys+0x88/0xa0 [ 42.541875][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.542770][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.543541][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.544637][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.545600][ C0] efi_pstore_write+0x298/0x39c [ 42.546426][ C0] pstore_dump+0x5b0/0x820 [ 42.547230][ C0] kmsg_dump+0x170/0x260 [ 42.547957][ C0] panic+0x384/0x7ac [ 42.548590][ C0] die+0x188/0x1d8 [ 42.549143][ C0] die_kernel_fault+0x6c/0x80 [ 42.549957][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.550841][ C0] do_bad_area+0x84/0x234 [ 42.551568][ C0] do_translation_fault+0xac/0xc8 [ 42.552364][ C0] do_mem_abort+0x70/0x194 [ 42.553143][ C0] el1_abort+0x3c/0x5c [ 42.553816][ C0] el1h_64_sync_handler+0x50/0xac [ 42.554490][ C0] el1h_64_sync+0x64/0x68 [ 42.555076][ C0] cpuacct_account_field+0x100/0x1cc [ 42.555792][ C0] task_group_account_field+0x7c/0x1ac [ 42.556667][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.557726][ C0] account_process_tick+0x44/0x46c [ 42.558628][ C0] update_process_times+0x34/0x1ec [ 42.559400][ C0] tick_sched_timer+0x30c/0x4bc [ 42.560144][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.560985][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.561683][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.562527][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.563443][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.564436][ C0] gic_handle_irq+0x70/0x1d4 [ 42.565178][ C0] call_on_irq_stack+0x30/0x48 [ 42.565949][ C0] do_interrupt_handler+0xd4/0x138 [ 42.566814][ C0] el1_interrupt+0x34/0x54 [ 42.567541][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.568343][ C0] el1h_64_irq+0x64/0x68 [ 42.569055][ C0] __memcpy+0x1f4/0x240 [ 42.569770][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.570519][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.571357][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.572214][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.573012][ C0] leaf_shift_left+0xc8/0x3ac [ 42.573740][ C0] balance_leaf+0x27b0/0xd92c [ 42.574506][ C0] do_balance+0x270/0x790 [ 42.575173][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.576079][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.576946][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.577877][ C0] reiserfs_setattr+0xab4/0xfec [ 42.578748][ C0] notify_change+0xb0c/0xdcc [ 42.579510][ C0] do_truncate+0x188/0x20c [ 42.580234][ C0] path_openat+0x2110/0x26bc [ 42.580975][ C0] do_filp_open+0x194/0x384 [ 42.581720][ C0] do_sys_openat2+0x134/0x3f4 [ 42.582446][ C0] __arm64_sys_openat+0x118/0x14c [ 42.583300][ C0] invoke_syscall+0x98/0x2b4 [ 42.584007][ C0] el0_svc_common+0x138/0x258 [ 42.584774][ C0] do_el0_svc+0x58/0x130 [ 42.585468][ C0] el0_svc+0x58/0x128 [ 42.586091][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.586961][ C0] el0t_64_sync+0x18c/0x190 [ 42.587707][ C0] irq event stamp: 401073 [ 42.588473][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.590097][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.591738][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.593387][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.595029][ C0] ---[ end trace 0000000000000000 ]--- [ 42.612213][ C0] ------------[ cut here ]------------ [ 42.613087][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.614996][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.616524][ C0] Modules linked in: [ 42.617152][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.618583][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.620274][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.621545][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.622304][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.623071][ C0] sp : ffff8000080070c0 [ 42.623794][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.625226][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.626635][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.627897][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.629199][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.630558][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.631973][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.633357][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.634694][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.636112][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.637512][ C0] Call trace: [ 42.638071][ C0] __virt_to_phys+0x88/0xa0 [ 42.638752][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.639622][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.640446][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.641487][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.642452][ C0] efi_pstore_write+0x298/0x39c [ 42.643271][ C0] pstore_dump+0x5b0/0x820 [ 42.643977][ C0] kmsg_dump+0x170/0x260 [ 42.644670][ C0] panic+0x384/0x7ac [ 42.645253][ C0] die+0x188/0x1d8 [ 42.645903][ C0] die_kernel_fault+0x6c/0x80 [ 42.646676][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.647576][ C0] do_bad_area+0x84/0x234 [ 42.648350][ C0] do_translation_fault+0xac/0xc8 [ 42.649224][ C0] do_mem_abort+0x70/0x194 [ 42.649950][ C0] el1_abort+0x3c/0x5c [ 42.650674][ C0] el1h_64_sync_handler+0x50/0xac [ 42.651427][ C0] el1h_64_sync+0x64/0x68 [ 42.652128][ C0] cpuacct_account_field+0x100/0x1cc [ 42.653045][ C0] task_group_account_field+0x7c/0x1ac [ 42.654009][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.654965][ C0] account_process_tick+0x44/0x46c [ 42.655766][ C0] update_process_times+0x34/0x1ec [ 42.656579][ C0] tick_sched_timer+0x30c/0x4bc [ 42.657382][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.658204][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.658995][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.659982][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.660953][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.661932][ C0] gic_handle_irq+0x70/0x1d4 [ 42.662722][ C0] call_on_irq_stack+0x30/0x48 [ 42.663497][ C0] do_interrupt_handler+0xd4/0x138 [ 42.664381][ C0] el1_interrupt+0x34/0x54 [ 42.665180][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.666058][ C0] el1h_64_irq+0x64/0x68 [ 42.666788][ C0] __memcpy+0x1f4/0x240 [ 42.667528][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.668440][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.669377][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.670405][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.671191][ C0] leaf_shift_left+0xc8/0x3ac [ 42.671998][ C0] balance_leaf+0x27b0/0xd92c [ 42.672757][ C0] do_balance+0x270/0x790 [ 42.673486][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.674410][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.675228][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.676132][ C0] reiserfs_setattr+0xab4/0xfec [ 42.677003][ C0] notify_change+0xb0c/0xdcc [ 42.677788][ C0] do_truncate+0x188/0x20c [ 42.678593][ C0] path_openat+0x2110/0x26bc [ 42.679349][ C0] do_filp_open+0x194/0x384 [ 42.680094][ C0] do_sys_openat2+0x134/0x3f4 [ 42.680746][ C0] __arm64_sys_openat+0x118/0x14c [ 42.681505][ C0] invoke_syscall+0x98/0x2b4 [ 42.682310][ C0] el0_svc_common+0x138/0x258 [ 42.683052][ C0] do_el0_svc+0x58/0x130 [ 42.683757][ C0] el0_svc+0x58/0x128 [ 42.684416][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.685264][ C0] el0t_64_sync+0x18c/0x190 [ 42.685986][ C0] irq event stamp: 401073 [ 42.686712][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.688202][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.689728][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.691460][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.693030][ C0] ---[ end trace 0000000000000000 ]--- [ 42.710682][ C0] ------------[ cut here ]------------ [ 42.711464][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.713088][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.714576][ C0] Modules linked in: [ 42.715241][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.716639][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.718273][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.719595][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.720435][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.721202][ C0] sp : ffff8000080070c0 [ 42.721926][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.723268][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.724585][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.725872][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.727162][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.728408][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.729784][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.731194][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.732614][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.734006][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.735310][ C0] Call trace: [ 42.735886][ C0] __virt_to_phys+0x88/0xa0 [ 42.736693][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.737664][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.738518][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.739588][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.740679][ C0] efi_pstore_write+0x298/0x39c [ 42.741477][ C0] pstore_dump+0x5b0/0x820 [ 42.742218][ C0] kmsg_dump+0x170/0x260 [ 42.742949][ C0] panic+0x384/0x7ac [ 42.743604][ C0] die+0x188/0x1d8 [ 42.744248][ C0] die_kernel_fault+0x6c/0x80 [ 42.745059][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.745875][ C0] do_bad_area+0x84/0x234 [ 42.746617][ C0] do_translation_fault+0xac/0xc8 [ 42.747373][ C0] do_mem_abort+0x70/0x194 [ 42.748118][ C0] el1_abort+0x3c/0x5c [ 42.748752][ C0] el1h_64_sync_handler+0x50/0xac [ 42.749559][ C0] el1h_64_sync+0x64/0x68 [ 42.750354][ C0] cpuacct_account_field+0x100/0x1cc [ 42.751232][ C0] task_group_account_field+0x7c/0x1ac [ 42.752111][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.753115][ C0] account_process_tick+0x44/0x46c [ 42.753968][ C0] update_process_times+0x34/0x1ec [ 42.754763][ C0] tick_sched_timer+0x30c/0x4bc [ 42.755524][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.756391][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.757181][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.758127][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.759077][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.760028][ C0] gic_handle_irq+0x70/0x1d4 [ 42.760807][ C0] call_on_irq_stack+0x30/0x48 [ 42.761584][ C0] do_interrupt_handler+0xd4/0x138 [ 42.762550][ C0] el1_interrupt+0x34/0x54 [ 42.763296][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.764155][ C0] el1h_64_irq+0x64/0x68 [ 42.764866][ C0] __memcpy+0x1f4/0x240 [ 42.765580][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.766444][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.767312][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.768190][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.768992][ C0] leaf_shift_left+0xc8/0x3ac [ 42.769685][ C0] balance_leaf+0x27b0/0xd92c [ 42.770475][ C0] do_balance+0x270/0x790 [ 42.771157][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.772086][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.772927][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.773865][ C0] reiserfs_setattr+0xab4/0xfec [ 42.774717][ C0] notify_change+0xb0c/0xdcc [ 42.775513][ C0] do_truncate+0x188/0x20c [ 42.776297][ C0] path_openat+0x2110/0x26bc [ 42.777023][ C0] do_filp_open+0x194/0x384 [ 42.777705][ C0] do_sys_openat2+0x134/0x3f4 [ 42.778466][ C0] __arm64_sys_openat+0x118/0x14c [ 42.779365][ C0] invoke_syscall+0x98/0x2b4 [ 42.780142][ C0] el0_svc_common+0x138/0x258 [ 42.780965][ C0] do_el0_svc+0x58/0x130 [ 42.781686][ C0] el0_svc+0x58/0x128 [ 42.782336][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.783224][ C0] el0t_64_sync+0x18c/0x190 [ 42.783931][ C0] irq event stamp: 401073 [ 42.784602][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.786257][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.787736][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.789421][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.791010][ C0] ---[ end trace 0000000000000000 ]--- [ 42.808377][ C0] ------------[ cut here ]------------ [ 42.809336][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.811189][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.812714][ C0] Modules linked in: [ 42.813349][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.814751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.816390][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.817718][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.818546][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.819335][ C0] sp : ffff8000080070c0 [ 42.820089][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.821426][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.822728][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.824159][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.825588][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.826954][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.828366][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.829732][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.831050][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.832470][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.833841][ C0] Call trace: [ 42.834335][ C0] __virt_to_phys+0x88/0xa0 [ 42.835150][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.836042][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.836873][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.838046][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.839024][ C0] efi_pstore_write+0x298/0x39c [ 42.839843][ C0] pstore_dump+0x5b0/0x820 [ 42.840515][ C0] kmsg_dump+0x170/0x260 [ 42.841233][ C0] panic+0x384/0x7ac [ 42.841918][ C0] die+0x188/0x1d8 [ 42.842545][ C0] die_kernel_fault+0x6c/0x80 [ 42.843361][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.844200][ C0] do_bad_area+0x84/0x234 [ 42.844990][ C0] do_translation_fault+0xac/0xc8 [ 42.845824][ C0] do_mem_abort+0x70/0x194 [ 42.846583][ C0] el1_abort+0x3c/0x5c [ 42.847283][ C0] el1h_64_sync_handler+0x50/0xac [ 42.848172][ C0] el1h_64_sync+0x64/0x68 [ 42.848907][ C0] cpuacct_account_field+0x100/0x1cc [ 42.849733][ C0] task_group_account_field+0x7c/0x1ac [ 42.850673][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.851668][ C0] account_process_tick+0x44/0x46c [ 42.852491][ C0] update_process_times+0x34/0x1ec [ 42.853434][ C0] tick_sched_timer+0x30c/0x4bc [ 42.854250][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.855059][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.855928][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.856872][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.857809][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.858702][ C0] gic_handle_irq+0x70/0x1d4 [ 42.859427][ C0] call_on_irq_stack+0x30/0x48 [ 42.860206][ C0] do_interrupt_handler+0xd4/0x138 [ 42.861029][ C0] el1_interrupt+0x34/0x54 [ 42.861765][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.862558][ C0] el1h_64_irq+0x64/0x68 [ 42.863266][ C0] __memcpy+0x1f4/0x240 [ 42.863912][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.864700][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.865571][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.866503][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.867245][ C0] leaf_shift_left+0xc8/0x3ac [ 42.867998][ C0] balance_leaf+0x27b0/0xd92c [ 42.868718][ C0] do_balance+0x270/0x790 [ 42.869434][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.870325][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.871237][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.872130][ C0] reiserfs_setattr+0xab4/0xfec [ 42.872971][ C0] notify_change+0xb0c/0xdcc [ 42.873767][ C0] do_truncate+0x188/0x20c [ 42.874507][ C0] path_openat+0x2110/0x26bc [ 42.875409][ C0] do_filp_open+0x194/0x384 [ 42.876183][ C0] do_sys_openat2+0x134/0x3f4 [ 42.877004][ C0] __arm64_sys_openat+0x118/0x14c [ 42.877937][ C0] invoke_syscall+0x98/0x2b4 [ 42.878717][ C0] el0_svc_common+0x138/0x258 [ 42.879524][ C0] do_el0_svc+0x58/0x130 [ 42.880266][ C0] el0_svc+0x58/0x128 [ 42.880907][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.881735][ C0] el0t_64_sync+0x18c/0x190 [ 42.882443][ C0] irq event stamp: 401073 [ 42.883127][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.884702][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.886234][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.887859][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.889405][ C0] ---[ end trace 0000000000000000 ]--- [ 42.905828][ C0] ------------[ cut here ]------------ [ 42.906561][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 42.908377][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 42.909880][ C0] Modules linked in: [ 42.910571][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 42.912055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.913733][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.915158][ C0] pc : __virt_to_phys+0x88/0xa0 [ 42.915992][ C0] lr : __virt_to_phys+0x84/0xa0 [ 42.916813][ C0] sp : ffff8000080070c0 [ 42.917537][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 42.918858][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 42.920145][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 42.921526][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 42.922963][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 42.924380][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 42.925721][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 42.927076][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.928497][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 42.929801][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 42.931227][ C0] Call trace: [ 42.931767][ C0] __virt_to_phys+0x88/0xa0 [ 42.932460][ C0] check_and_switch_context+0x33c/0x6c8 [ 42.933389][ C0] efi_virtmap_unload+0x5c/0xd0 [ 42.934200][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 42.935312][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 42.936203][ C0] efi_pstore_write+0x298/0x39c [ 42.937004][ C0] pstore_dump+0x5b0/0x820 [ 42.937863][ C0] kmsg_dump+0x170/0x260 [ 42.938561][ C0] panic+0x384/0x7ac [ 42.939211][ C0] die+0x188/0x1d8 [ 42.939800][ C0] die_kernel_fault+0x6c/0x80 [ 42.940598][ C0] __do_kernel_fault+0x3a0/0x3ac [ 42.941477][ C0] do_bad_area+0x84/0x234 [ 42.942183][ C0] do_translation_fault+0xac/0xc8 [ 42.942969][ C0] do_mem_abort+0x70/0x194 [ 42.943703][ C0] el1_abort+0x3c/0x5c [ 42.944333][ C0] el1h_64_sync_handler+0x50/0xac [ 42.945154][ C0] el1h_64_sync+0x64/0x68 [ 42.945865][ C0] cpuacct_account_field+0x100/0x1cc [ 42.946737][ C0] task_group_account_field+0x7c/0x1ac [ 42.947627][ C0] irqtime_account_process_tick+0x374/0x498 [ 42.948530][ C0] account_process_tick+0x44/0x46c [ 42.949381][ C0] update_process_times+0x34/0x1ec [ 42.950164][ C0] tick_sched_timer+0x30c/0x4bc [ 42.951046][ C0] __hrtimer_run_queues+0x408/0xc3c [ 42.951952][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 42.952774][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.953645][ C0] handle_percpu_devid_irq+0x174/0x34c [ 42.954507][ C0] generic_handle_domain_irq+0xe0/0x140 [ 42.955499][ C0] gic_handle_irq+0x70/0x1d4 [ 42.956267][ C0] call_on_irq_stack+0x30/0x48 [ 42.957141][ C0] do_interrupt_handler+0xd4/0x138 [ 42.957974][ C0] el1_interrupt+0x34/0x54 [ 42.958613][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.959486][ C0] el1h_64_irq+0x64/0x68 [ 42.960233][ C0] __memcpy+0x1f4/0x240 [ 42.960917][ C0] leaf_paste_entries+0x69c/0xae4 [ 42.961779][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 42.962694][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 42.963653][ C0] leaf_move_items+0x6a0/0xbb0 [ 42.964487][ C0] leaf_shift_left+0xc8/0x3ac [ 42.965260][ C0] balance_leaf+0x27b0/0xd92c [ 42.966023][ C0] do_balance+0x270/0x790 [ 42.966725][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 42.967628][ C0] reiserfs_do_truncate+0x738/0x1058 [ 42.968485][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 42.969367][ C0] reiserfs_setattr+0xab4/0xfec [ 42.970193][ C0] notify_change+0xb0c/0xdcc [ 42.970921][ C0] do_truncate+0x188/0x20c [ 42.971680][ C0] path_openat+0x2110/0x26bc [ 42.972517][ C0] do_filp_open+0x194/0x384 [ 42.973272][ C0] do_sys_openat2+0x134/0x3f4 [ 42.974053][ C0] __arm64_sys_openat+0x118/0x14c [ 42.974889][ C0] invoke_syscall+0x98/0x2b4 [ 42.975645][ C0] el0_svc_common+0x138/0x258 [ 42.976406][ C0] do_el0_svc+0x58/0x130 [ 42.977098][ C0] el0_svc+0x58/0x128 [ 42.977720][ C0] el0t_64_sync_handler+0x84/0xf0 [ 42.978624][ C0] el0t_64_sync+0x18c/0x190 [ 42.979341][ C0] irq event stamp: 401073 [ 42.980031][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 42.981577][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 42.983056][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 42.984689][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 42.986340][ C0] ---[ end trace 0000000000000000 ]--- [ 43.002537][ C0] ------------[ cut here ]------------ [ 43.003278][ C0] virt_to_phys used for non-linear address: 00000000860a2a74 (arch_get_unmapped_area_topdown+0x0/0x48) [ 43.005050][ C0] WARNING: CPU: 0 PID: 4471 at arch/arm64/mm/physaddr.c:15 __virt_to_phys+0x88/0xa0 [ 43.006473][ C0] Modules linked in: [ 43.007085][ C0] CPU: 0 PID: 4471 Comm: syz.4.26 Tainted: G B D W syzkaller #0 [ 43.008687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.010412][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 43.011722][ C0] pc : __virt_to_phys+0x88/0xa0 [ 43.012640][ C0] lr : __virt_to_phys+0x84/0xa0 [ 43.013436][ C0] sp : ffff8000080070c0 [ 43.014106][ C0] x29: ffff8000080070c0 x28: ffff800017e0d000 x27: 1fffe0001c03ac85 [ 43.015340][ C0] x26: dfff800000000000 x25: ffff800015220f40 x24: ffff00019f530a28 [ 43.016789][ C0] x23: ffff800017e0d660 x22: 0000000000010002 x21: 0000000000010002 [ 43.018149][ C0] x20: 00008000087ff75c x19: ffff8000087ff75c x18: ffff800011b9bf60 [ 43.019553][ C0] x17: 6863726128203437 x16: ffff8000082eef80 x15: 0000000000010006 [ 43.020945][ C0] x14: 0000000000000001 x13: 1fffe00033ea63a3 x12: 0000000000ff0100 [ 43.022248][ C0] x11: ff00800008194250 x10: 0000000000010004 x9 : a14876f4f6d47800 [ 43.023593][ C0] x8 : ffff800014c43000 x7 : 0000000000000001 x6 : 0000000000000001 [ 43.024986][ C0] x5 : ffff800008006b58 x4 : ffff800015304cc0 x3 : ffff8000085388c8 [ 43.026304][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000000 [ 43.027751][ C0] Call trace: [ 43.028279][ C0] __virt_to_phys+0x88/0xa0 [ 43.028942][ C0] check_and_switch_context+0x33c/0x6c8 [ 43.029784][ C0] efi_virtmap_unload+0x5c/0xd0 [ 43.030655][ C0] virt_efi_set_variable_nonblocking+0xdc/0x16c [ 43.031693][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 43.032609][ C0] efi_pstore_write+0x298/0x39c [ 43.033391][ C0] pstore_dump+0x5b0/0x820 [ 43.034110][ C0] kmsg_dump+0x170/0x260 [ 43.034828][ C0] panic+0x384/0x7ac [ 43.035555][ C0] die+0x188/0x1d8 [ 43.036181][ C0] die_kernel_fault+0x6c/0x80 [ 43.036965][ C0] __do_kernel_fault+0x3a0/0x3ac [ 43.037720][ C0] do_bad_area+0x84/0x234 [ 43.038516][ C0] do_translation_fault+0xac/0xc8 [ 43.039329][ C0] do_mem_abort+0x70/0x194 [ 43.040093][ C0] el1_abort+0x3c/0x5c [ 43.040690][ C0] el1h_64_sync_handler+0x50/0xac [ 43.041459][ C0] el1h_64_sync+0x64/0x68 [ 43.042170][ C0] cpuacct_account_field+0x100/0x1cc [ 43.043077][ C0] task_group_account_field+0x7c/0x1ac [ 43.044042][ C0] irqtime_account_process_tick+0x374/0x498 [ 43.045090][ C0] account_process_tick+0x44/0x46c [ 43.045921][ C0] update_process_times+0x34/0x1ec [ 43.046802][ C0] tick_sched_timer+0x30c/0x4bc [ 43.047596][ C0] __hrtimer_run_queues+0x408/0xc3c [ 43.048437][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 43.049206][ C0] arch_timer_handler_virt+0x74/0x88 [ 43.050115][ C0] handle_percpu_devid_irq+0x174/0x34c [ 43.050999][ C0] generic_handle_domain_irq+0xe0/0x140 [ 43.051945][ C0] gic_handle_irq+0x70/0x1d4 [ 43.052678][ C0] call_on_irq_stack+0x30/0x48 [ 43.053441][ C0] do_interrupt_handler+0xd4/0x138 [ 43.054292][ C0] el1_interrupt+0x34/0x54 [ 43.055036][ C0] el1h_64_irq_handler+0x18/0x24 [ 43.055833][ C0] el1h_64_irq+0x64/0x68 [ 43.056564][ C0] __memcpy+0x1f4/0x240 [ 43.057207][ C0] leaf_paste_entries+0x69c/0xae4 [ 43.057984][ C0] leaf_copy_dir_entries+0x4dc/0x788 [ 43.058848][ C0] leaf_copy_boundary_item+0x888/0x19dc [ 43.059724][ C0] leaf_move_items+0x6a0/0xbb0 [ 43.060591][ C0] leaf_shift_left+0xc8/0x3ac [ 43.061375][ C0] balance_leaf+0x27b0/0xd92c [ 43.062171][ C0] do_balance+0x270/0x790 [ 43.062856][ C0] reiserfs_cut_from_item+0x114c/0x1a14 [ 43.063871][ C0] reiserfs_do_truncate+0x738/0x1058 [ 43.064850][ C0] reiserfs_truncate_file+0x5d0/0xb00 [ 43.065716][ C0] reiserfs_setattr+0xab4/0xfec [ 43.066595][ C0] notify_change+0xb0c/0xdcc [ 43.067435][ C0] do_truncate+0x188/0x20c [ 43.068222][ C0] path_openat+0x2110/0x26bc [ 43.069013][ C0] do_filp_open+0x194/0x384 [ 43.069763][ C0] do_sys_openat2+0x134/0x3f4 [ 43.070574][ C0] __arm64_sys_openat+0x118/0x14c [ 43.071442][ C0] invoke_syscall+0x98/0x2b4 [ 43.072241][ C0] el0_svc_common+0x138/0x258 [ 43.073027][ C0] do_el0_svc+0x58/0x130 [ 43.073768][ C0] el0_svc+0x58/0x128 [ 43.074428][ C0] el0t_64_sync_handler+0x84/0xf0 [ 43.075276][ C0] el0t_64_sync+0x18c/0x190 [ 43.075942][ C0] irq event stamp: 401073 [ 43.076651][ C0] hardirqs last enabled at (401073): [] finish_lock_switch+0xb0/0x1c4 [ 43.078396][ C0] hardirqs last disabled at (401072): [] __schedule+0x298/0x1b0c [ 43.079890][ C0] softirqs last enabled at (400788): [] local_bh_enable+0x10/0x34 [ 43.081454][ C0] softirqs last disabled at (400786): [] local_bh_disable+0x10/0x34 [ 43.083065][ C0] ---[ end trace 0000000000000000 ]--- [ 43.083943][ C0] Rebooting in 86400 seconds..