Warning: Permanently added '10.128.10.46' (ECDSA) to the list of known hosts. 2022/06/12 09:17:13 parsed 1 programs 2022/06/12 09:17:13 executed programs: 0 [ 53.857790][ T5870] cgroup: Unknown subsys name 'net' [ 53.866580][ T5870] cgroup: Unknown subsys name 'rlimit' [ 54.920603][ T5876] IPVS: ftp: loaded support on port[0] = 21 [ 54.961795][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 54.988242][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.997184][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.004686][ T5876] device bridge_slave_0 entered promiscuous mode [ 55.012835][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.020084][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.027544][ T5876] device bridge_slave_1 entered promiscuous mode [ 55.040800][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.051795][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.068252][ T5876] team0: Port device team_slave_0 added [ 55.075489][ T5876] team0: Port device team_slave_1 added [ 55.087489][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.094815][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.121215][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.134321][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.141604][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.168326][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.187564][ T5876] device hsr_slave_0 entered promiscuous mode [ 55.195199][ T5876] device hsr_slave_1 entered promiscuous mode [ 55.234853][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.241926][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.249582][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.256623][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.283128][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.294087][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.304512][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.312463][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.320004][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 55.331102][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.340985][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.350454][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.357531][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.368293][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.378710][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.385877][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.403283][ T5876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.414403][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.427372][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.436018][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.444258][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.452482][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.461065][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.468532][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.483584][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.491483][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.499437][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.565126][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.573792][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.582094][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.590091][ T2934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.599587][ T5876] device veth0_vlan entered promiscuous mode [ 55.609260][ T5876] device veth1_vlan entered promiscuous mode [ 55.623357][ T5876] device veth0_macvtap entered promiscuous mode [ 55.631850][ T3825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.639913][ T3825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.647822][ T3825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.657563][ T3825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.667991][ T5876] device veth1_macvtap entered promiscuous mode [ 55.679689][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.688179][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.699134][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.707956][ T3825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.742482][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.757338][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.762358][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.766784][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.773058][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.788634][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.815333][ T5890] loop0: detected capacity change from 252287 to 0 [ 55.838648][ T5890] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 55.850191][ T5890] REISERFS (device loop0): using ordered data mode [ 55.858065][ T5890] reiserfs: using flush barriers [ 55.865677][ T5890] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 0, max trans age 30 [ 55.889974][ T5890] REISERFS (device loop0): checking transaction log (loop0) [ 55.899082][ T5890] REISERFS (device loop0): Using r5 hash to sort names [ 55.906818][ T5890] REISERFS (device loop0): using 3.5.x disk format [ 55.913825][ T5890] ================================================================== [ 55.922140][ T5890] BUG: KASAN: use-after-free in search_by_entry_key+0x776/0x980 [ 55.929752][ T5890] Read of size 4 at addr ffff888032f21014 by task syz-executor.0/5890 [ 55.937879][ T5890] [ 55.940185][ T5890] CPU: 0 PID: 5890 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 55.948574][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.958639][ T5890] Call Trace: [ 55.961913][ T5890] dump_stack+0x9a/0xcc [ 55.966147][ T5890] ? search_by_entry_key+0x776/0x980 [ 55.971433][ T5890] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 55.978450][ T5890] ? search_by_entry_key+0x776/0x980 [ 55.983721][ T5890] ? search_by_entry_key+0x776/0x980 [ 55.989331][ T5890] kasan_report.cold+0x79/0xd5 [ 55.994431][ T5890] ? search_by_entry_key+0x776/0x980 [ 55.999810][ T5890] search_by_entry_key+0x776/0x980 [ 56.005350][ T5890] reiserfs_find_entry.part.0+0x133/0xcb0 [ 56.011578][ T5890] ? mutex_lock_io_nested+0xf60/0xf60 [ 56.017566][ T5890] ? search_by_entry_key+0x980/0x980 [ 56.025175][ T5890] ? d_alloc_parallel+0x507/0x1480 [ 56.030625][ T5890] ? lock_downgrade+0x6a3/0x6d0 [ 56.035455][ T5890] reiserfs_lookup+0x1ff/0x3e0 [ 56.040190][ T5890] ? reiserfs_unlink+0x6e0/0x6e0 [ 56.045226][ T5890] ? lockdep_init_map_waits+0x26a/0x720 [ 56.050760][ T5890] ? __raw_spin_lock_init+0x34/0x100 [ 56.056219][ T5890] __lookup_slow+0x1fe/0x3c0 [ 56.060791][ T5890] ? page_put_link+0x180/0x180 [ 56.065663][ T5890] ? d_lookup+0x6b/0xc0 [ 56.069816][ T5890] lookup_one_len+0x11f/0x150 [ 56.074495][ T5890] ? try_lookup_one_len+0x130/0x130 [ 56.079767][ T5890] ? down_write_killable_nested+0x170/0x170 [ 56.085642][ T5890] ? wait_for_completion_io+0x260/0x260 [ 56.091164][ T5890] ? get_cnode+0x16f/0x1d0 [ 56.095556][ T5890] reiserfs_lookup_privroot+0x8d/0x260 [ 56.101092][ T5890] reiserfs_fill_super+0x1c20/0x2670 [ 56.106529][ T5890] ? reiserfs_remount+0x1330/0x1330 [ 56.111703][ T5890] ? pointer+0x700/0x700 [ 56.115930][ T5890] ? up_write+0x191/0x560 [ 56.120248][ T5890] ? wait_for_completion_io+0x260/0x260 [ 56.125795][ T5890] ? sget+0x3db/0x4d0 [ 56.129857][ T5890] mount_bdev+0x2cb/0x3b0 [ 56.134186][ T5890] ? reiserfs_remount+0x1330/0x1330 [ 56.139370][ T5890] ? reiserfs_kill_sb+0x1d0/0x1d0 [ 56.144378][ T5890] legacy_get_tree+0xfa/0x1f0 [ 56.149030][ T5890] vfs_get_tree+0x7f/0x2c0 [ 56.153423][ T5890] path_mount+0x7f3/0x1b30 [ 56.157825][ T5890] ? strncpy_from_user+0x68/0x2d0 [ 56.162829][ T5890] ? finish_automount+0x900/0x900 [ 56.167831][ T5890] ? getname_flags.part.0+0x89/0x440 [ 56.173098][ T5890] __x64_sys_mount+0x1f5/0x260 [ 56.177839][ T5890] ? copy_mnt_ns+0xd20/0xd20 [ 56.182504][ T5890] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 56.188474][ T5890] ? syscall_enter_from_user_mode+0x27/0x70 [ 56.194348][ T5890] do_syscall_64+0x2d/0x40 [ 56.198737][ T5890] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.204607][ T5890] RIP: 0033:0x7f06c590863a [ 56.209177][ T5890] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.228850][ T5890] RSP: 002b:00007f06c507bf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.237244][ T5890] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f06c590863a [ 56.245204][ T5890] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f06c507bfe0 [ 56.253168][ T5890] RBP: 00007f06c507c020 R08: 00007f06c507c020 R09: 0000000020000000 [ 56.261118][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 56.269077][ T5890] R13: 0000000020000100 R14: 00007f06c507bfe0 R15: 0000000020000580 [ 56.277307][ T5890] [ 56.279611][ T5890] The buggy address belongs to the page: [ 56.285396][ T5890] page:00000000a51ceb13 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x32f21 [ 56.295634][ T5890] flags: 0xfff00000000000() [ 56.300113][ T5890] raw: 00fff00000000000 ffffea0000cbc888 ffff8880b9e56068 0000000000000000 [ 56.308676][ T5890] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 56.317240][ T5890] page dumped because: kasan: bad access detected [ 56.323629][ T5890] page_owner tracks the page as freed [ 56.328963][ T5890] page last allocated via order 9, migratetype Movable, gfp_mask 0x3d24ca(GFP_TRANSHUGE|__GFP_NORETRY|__GFP_THISNODE), pid 5321, ts 30982313698 [ 56.343958][ T5890] post_alloc_hook+0x144/0x1c0 [ 56.348699][ T5890] get_page_from_freelist+0x1c6e/0x3f80 [ 56.354226][ T5890] __alloc_pages_nodemask+0x2d6/0x730 [ 56.359573][ T5890] alloc_pages_vma+0x44f/0x5d0 [ 56.364328][ T5890] do_huge_pmd_anonymous_page+0x2b5/0x1c70 [ 56.370110][ T5890] handle_mm_fault+0x2620/0x4520 [ 56.375020][ T5890] do_user_addr_fault+0x2d3/0x930 [ 56.380018][ T5890] exc_page_fault+0x60/0xc0 [ 56.384526][ T5890] asm_exc_page_fault+0x1e/0x30 [ 56.389444][ T5890] page last free stack trace: [ 56.394090][ T5890] __free_pages_ok+0x4da/0xed0 [ 56.399126][ T5890] release_pages+0x4b7/0x1400 [ 56.403794][ T5890] tlb_finish_mmu+0x127/0x790 [ 56.408534][ T5890] exit_mmap+0x265/0x4c0 [ 56.412872][ T5890] __mmput+0xeb/0x3e0 [ 56.416830][ T5890] do_exit+0x9e9/0x2570 [ 56.420959][ T5890] do_group_exit+0xe7/0x290 [ 56.425447][ T5890] __x64_sys_exit_group+0x35/0x40 [ 56.430467][ T5890] do_syscall_64+0x2d/0x40 [ 56.434937][ T5890] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.440883][ T5890] [ 56.443182][ T5890] Memory state around the buggy address: [ 56.448885][ T5890] ffff888032f20f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.456927][ T5890] ffff888032f20f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.464978][ T5890] >ffff888032f21000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.473029][ T5890] ^ [ 56.477614][ T5890] ffff888032f21080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.485671][ T5890] ffff888032f21100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.493744][ T5890] ================================================================== [ 56.501798][ T5890] Disabling lock debugging due to kernel taint [ 56.513853][ T5890] Kernel panic - not syncing: panic_on_warn set ... [ 56.520420][ T5890] CPU: 0 PID: 5890 Comm: syz-executor.0 Tainted: G B 5.11.0-syzkaller #0 [ 56.530096][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.540135][ T5890] Call Trace: [ 56.543390][ T5890] dump_stack+0x9a/0xcc [ 56.547626][ T5890] panic+0x256/0x4eb [ 56.551488][ T5890] ? __warn_printk+0xee/0xee [ 56.556111][ T5890] ? preempt_schedule_common+0x59/0xc0 [ 56.561551][ T5890] ? search_by_entry_key+0x776/0x980 [ 56.566835][ T5890] ? preempt_schedule_thunk+0x16/0x18 [ 56.572481][ T5890] ? search_by_entry_key+0x776/0x980 [ 56.577987][ T5890] ? search_by_entry_key+0x776/0x980 [ 56.583463][ T5890] end_report+0x58/0x5e [ 56.587726][ T5890] kasan_report.cold+0x67/0xd5 [ 56.592808][ T5890] ? search_by_entry_key+0x776/0x980 [ 56.598132][ T5890] search_by_entry_key+0x776/0x980 [ 56.603217][ T5890] reiserfs_find_entry.part.0+0x133/0xcb0 [ 56.608994][ T5890] ? mutex_lock_io_nested+0xf60/0xf60 [ 56.614331][ T5890] ? search_by_entry_key+0x980/0x980 [ 56.619584][ T5890] ? d_alloc_parallel+0x507/0x1480 [ 56.624657][ T5890] ? lock_downgrade+0x6a3/0x6d0 [ 56.629474][ T5890] reiserfs_lookup+0x1ff/0x3e0 [ 56.634199][ T5890] ? reiserfs_unlink+0x6e0/0x6e0 [ 56.639117][ T5890] ? lockdep_init_map_waits+0x26a/0x720 [ 56.644649][ T5890] ? __raw_spin_lock_init+0x34/0x100 [ 56.649905][ T5890] __lookup_slow+0x1fe/0x3c0 [ 56.654466][ T5890] ? page_put_link+0x180/0x180 [ 56.659202][ T5890] ? d_lookup+0x6b/0xc0 [ 56.663427][ T5890] lookup_one_len+0x11f/0x150 [ 56.668087][ T5890] ? try_lookup_one_len+0x130/0x130 [ 56.673246][ T5890] ? down_write_killable_nested+0x170/0x170 [ 56.679102][ T5890] ? wait_for_completion_io+0x260/0x260 [ 56.684612][ T5890] ? get_cnode+0x16f/0x1d0 [ 56.688990][ T5890] reiserfs_lookup_privroot+0x8d/0x260 [ 56.694413][ T5890] reiserfs_fill_super+0x1c20/0x2670 [ 56.699839][ T5890] ? reiserfs_remount+0x1330/0x1330 [ 56.705014][ T5890] ? pointer+0x700/0x700 [ 56.709224][ T5890] ? up_write+0x191/0x560 [ 56.713695][ T5890] ? wait_for_completion_io+0x260/0x260 [ 56.719292][ T5890] ? sget+0x3db/0x4d0 [ 56.723239][ T5890] mount_bdev+0x2cb/0x3b0 [ 56.727627][ T5890] ? reiserfs_remount+0x1330/0x1330 [ 56.732805][ T5890] ? reiserfs_kill_sb+0x1d0/0x1d0 [ 56.737797][ T5890] legacy_get_tree+0xfa/0x1f0 [ 56.742438][ T5890] vfs_get_tree+0x7f/0x2c0 [ 56.746852][ T5890] path_mount+0x7f3/0x1b30 [ 56.751237][ T5890] ? strncpy_from_user+0x68/0x2d0 [ 56.756224][ T5890] ? finish_automount+0x900/0x900 [ 56.761212][ T5890] ? getname_flags.part.0+0x89/0x440 [ 56.766461][ T5890] __x64_sys_mount+0x1f5/0x260 [ 56.771190][ T5890] ? copy_mnt_ns+0xd20/0xd20 [ 56.775832][ T5890] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 56.781777][ T5890] ? syscall_enter_from_user_mode+0x27/0x70 [ 56.787639][ T5890] do_syscall_64+0x2d/0x40 [ 56.792021][ T5890] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 56.797896][ T5890] RIP: 0033:0x7f06c590863a [ 56.802280][ T5890] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.822553][ T5890] RSP: 002b:00007f06c507bf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.831024][ T5890] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 00007f06c590863a [ 56.839230][ T5890] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f06c507bfe0 [ 56.847730][ T5890] RBP: 00007f06c507c020 R08: 00007f06c507c020 R09: 0000000020000000 [ 56.855681][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 56.863630][ T5890] R13: 0000000020000100 R14: 00007f06c507bfe0 R15: 0000000020000580 [ 56.871646][ T5890] Kernel Offset: disabled [ 56.876832][ T5890] Rebooting in 86400 seconds..