[ 76.059712][ T774] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts.
2023/09/25 00:54:52 ignoring optional flag "sandboxArg"="0"
2023/09/25 00:54:52 parsed 1 programs
2023/09/25 00:54:53 executed programs: 0
[ 81.696653][ T5383] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.746569][ T4438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.754187][ T4438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.761877][ T4438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.770355][ T4438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.777972][ T4438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 81.785714][ T4438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.895521][ T5390] chnl_net:caif_netlink_parms(): no params data found
[ 81.945747][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.952984][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.960782][ T5390] bridge_slave_0: entered allmulticast mode
[ 81.967419][ T5390] bridge_slave_0: entered promiscuous mode
[ 81.975358][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.982567][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.989758][ T5390] bridge_slave_1: entered allmulticast mode
[ 81.996405][ T5390] bridge_slave_1: entered promiscuous mode
[ 82.021755][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.033236][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.059938][ T5390] team0: Port device team_slave_0 added
[ 82.067819][ T5390] team0: Port device team_slave_1 added
[ 82.090513][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.097445][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.123367][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.135419][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.142413][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.168327][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.203522][ T5390] hsr_slave_0: entered promiscuous mode
[ 82.209750][ T5390] hsr_slave_1: entered promiscuous mode
[ 82.824326][ T5390] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.836539][ T5390] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.850871][ T5390] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.862673][ T5390] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.895416][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.902582][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.910063][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.917208][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.930286][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.938958][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.011748][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.035451][ T5390] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.051499][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.058648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.074821][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.081962][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.276040][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.325959][ T5390] veth0_vlan: entered promiscuous mode
[ 83.348168][ T5390] veth1_vlan: entered promiscuous mode
[ 83.385509][ T5390] veth0_macvtap: entered promiscuous mode
[ 83.395992][ T5390] veth1_macvtap: entered promiscuous mode
[ 83.423847][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.440898][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.454488][ T5390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.466252][ T5390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.476445][ T5390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.486903][ T5390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.570951][ T5047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.579190][ T5047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.621401][ T4502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.630610][ T4502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.810339][ T4438] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.972503][ T5456] loop0: detected capacity change from 0 to 32768
[ 84.007600][ T5456] ==================================================================
[ 84.015694][ T5456] BUG: KASAN: slab-out-of-bounds in dbAllocBits+0x617/0x630
[ 84.022985][ T5456] Read of size 8 at addr ffff88807ea93eb8 by task syz-executor.0/5456
[ 84.031134][ T5456]
[ 84.033451][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc3-syzkaller-g6465e260f487 #0
[ 84.043256][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 84.053304][ T5456] Call Trace:
[ 84.056578][ T5456]
[ 84.059507][ T5456] dump_stack_lvl+0xd9/0x1b0
[ 84.064112][ T5456] print_report+0xc4/0x620
[ 84.068539][ T5456] ? __virt_addr_valid+0x5e/0x2d0
[ 84.073568][ T5456] ? __phys_addr+0xc6/0x140
[ 84.078080][ T5456] kasan_report+0xda/0x110
[ 84.082498][ T5456] ? dbAllocBits+0x617/0x630
[ 84.087105][ T5456] ? dbAllocBits+0x617/0x630
[ 84.091706][ T5456] dbAllocBits+0x617/0x630
[ 84.096140][ T5456] dbAllocDmap+0x5c/0x100
[ 84.100482][ T5456] dbAlloc+0x780/0xaa0
[ 84.104556][ T5456] ea_get+0xc0d/0x12c0
[ 84.108644][ T5456] ? ea_release+0x220/0x220
[ 84.113168][ T5456] __jfs_setxattr+0x1ed/0x1050
[ 84.117934][ T5456] ? ea_write+0xd00/0xd00
[ 84.122263][ T5456] ? posix_acl_to_xattr+0x2cb/0x380
[ 84.127470][ T5456] __jfs_set_acl+0x110/0x1a0
[ 84.132070][ T5456] jfs_set_acl+0x252/0x330
[ 84.136491][ T5456] ? jfs_get_acl+0x160/0x160
[ 84.141099][ T5456] ? make_vfsuid+0x108/0x160
[ 84.145789][ T5456] ? fscontext_read+0x1b0/0x2e0
[ 84.150640][ T5456] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 84.156569][ T5456] ? posix_acl_valid+0x2f2/0x340
[ 84.161526][ T5456] set_posix_acl+0x259/0x320
[ 84.166123][ T5456] vfs_set_acl+0x539/0x900
[ 84.170560][ T5456] do_set_acl+0xda/0x1b0
[ 84.174818][ T5456] do_setxattr+0xeb/0x170
[ 84.179148][ T5456] setxattr+0x159/0x170
[ 84.183309][ T5456] ? do_setxattr+0x170/0x170
[ 84.187908][ T5456] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 84.193915][ T5456] ? __mnt_want_write+0x20c/0x300
[ 84.198946][ T5456] path_setxattr+0x1a3/0x1d0
[ 84.203536][ T5456] ? setxattr+0x170/0x170
[ 84.207873][ T5456] __x64_sys_lsetxattr+0xc1/0x160
[ 84.212896][ T5456] ? syscall_enter_from_user_mode+0x26/0x80
[ 84.218804][ T5456] do_syscall_64+0x38/0xb0
[ 84.223225][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 84.229124][ T5456] RIP: 0033:0x7fa555a7cb29
[ 84.233535][ T5456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 84.253146][ T5456] RSP: 002b:00007fa5568400c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 84.261564][ T5456] RAX: ffffffffffffffda RBX: 00007fa555b9bf80 RCX: 00007fa555a7cb29
[ 84.269546][ T5456] RDX: 0000000020000180 RSI: 0000000020000040 RDI: 0000000020000000
[ 84.277516][ T5456] RBP: 00007fa555ac847a R08: 0000000000000000 R09: 0000000000000000
[ 84.285492][ T5456] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 84.293461][ T5456] R13: 000000000000000b R14: 00007fa555b9bf80 R15: 00007ffce97576b8
[ 84.301434][ T5456]
[ 84.304446][ T5456]
[ 84.306764][ T5456] The buggy address belongs to the object at ffff88807ea93000
[ 84.306764][ T5456] which belongs to the cache kmalloc-2k of size 2048
[ 84.320815][ T5456] The buggy address is located 1720 bytes to the right of
[ 84.320815][ T5456] allocated 2048-byte region [ffff88807ea93000, ffff88807ea93800)
[ 84.335653][ T5456]
[ 84.337971][ T5456] The buggy address belongs to the physical page:
[ 84.344371][ T5456] page:ffffea0001faa400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ea90
[ 84.354516][ T5456] head:ffffea0001faa400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 84.363450][ T5456] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 84.371435][ T5456] page_type: 0xffffffff()
[ 84.375759][ T5456] raw: 00fff00000000840 ffff888012c42000 dead000000000122 0000000000000000
[ 84.384344][ T5456] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[ 84.392919][ T5456] page dumped because: kasan: bad access detected
[ 84.399325][ T5456] page_owner tracks the page as allocated
[ 84.405033][ T5456] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5456, tgid 5454 (syz-executor.0), ts 83986249677, free_ts 82342815227
[ 84.427958][ T5456] post_alloc_hook+0x2cf/0x340
[ 84.432733][ T5456] get_page_from_freelist+0xee0/0x2f20
[ 84.438216][ T5456] __alloc_pages+0x1d0/0x4a0
[ 84.442814][ T5456] alloc_pages+0x1a9/0x270
[ 84.447249][ T5456] allocate_slab+0x251/0x380
[ 84.451852][ T5456] ___slab_alloc+0x8c7/0x1580
[ 84.456534][ T5456] __slab_alloc.constprop.0+0x56/0xa0
[ 84.461908][ T5456] __kmem_cache_alloc_node+0x131/0x340
[ 84.467378][ T5456] kmalloc_trace+0x25/0xe0
[ 84.471804][ T5456] dbMount+0x50/0xa20
[ 84.475800][ T5456] jfs_mount+0x282/0x890
[ 84.480042][ T5456] jfs_fill_super+0x5a3/0xd20
[ 84.484728][ T5456] mount_bdev+0x1f3/0x2e0
[ 84.489067][ T5456] legacy_get_tree+0x109/0x220
[ 84.493937][ T5456] vfs_get_tree+0x8c/0x370
[ 84.498358][ T5456] path_mount+0x1492/0x1ed0
[ 84.502874][ T5456] page last free stack trace:
[ 84.507543][ T5456] free_unref_page_prepare+0x476/0xa40
[ 84.513015][ T5456] free_unref_page+0x33/0x3b0
[ 84.517961][ T5456] __unfreeze_partials+0x21d/0x240
[ 84.523099][ T5456] qlist_free_all+0x6a/0x170
[ 84.527693][ T5456] kasan_quarantine_reduce+0x18e/0x1d0
[ 84.533153][ T5456] __kasan_slab_alloc+0x65/0x90
[ 84.538005][ T5456] __kmem_cache_alloc_node+0x195/0x340
[ 84.543470][ T5456] __kmalloc+0x4f/0x100
[ 84.547629][ T5456] load_elf_phdrs+0x103/0x210
[ 84.552318][ T5456] load_elf_binary+0x1fe/0x4f10
[ 84.557166][ T5456] bprm_execve+0x7fc/0x1a40
[ 84.561671][ T5456] do_execveat_common.isra.0+0x5d3/0x740
[ 84.567320][ T5456] __x64_sys_execve+0x8c/0xb0
[ 84.572000][ T5456] do_syscall_64+0x38/0xb0
[ 84.576414][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 84.582316][ T5456]
[ 84.584639][ T5456] Memory state around the buggy address:
[ 84.590274][ T5456] ffff88807ea93d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.598335][ T5456] ffff88807ea93e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.606396][ T5456] >ffff88807ea93e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.614445][ T5456] ^
[ 84.620325][ T5456] ffff88807ea93f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.628386][ T5456] ffff88807ea93f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.636434][ T5456] ==================================================================
[ 84.703841][ T5456] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.711048][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc3-syzkaller-g6465e260f487 #0
[ 84.720844][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 84.730896][ T5456] Call Trace:
[ 84.734178][ T5456]
[ 84.737107][ T5456] dump_stack_lvl+0xd9/0x1b0
[ 84.741711][ T5456] panic+0x6a6/0x750
[ 84.745617][ T5456] ? panic_smp_self_stop+0xa0/0xa0
[ 84.750829][ T5456] ? preempt_schedule_thunk+0x1a/0x30
[ 84.756226][ T5456] ? preempt_schedule_common+0x45/0xc0
[ 84.761699][ T5456] check_panic_on_warn+0xab/0xb0
[ 84.766644][ T5456] end_report+0x108/0x150
[ 84.770978][ T5456] kasan_report+0xea/0x110
[ 84.775394][ T5456] ? dbAllocBits+0x617/0x630
[ 84.779999][ T5456] ? dbAllocBits+0x617/0x630
[ 84.784592][ T5456] dbAllocBits+0x617/0x630
[ 84.789019][ T5456] dbAllocDmap+0x5c/0x100
[ 84.793364][ T5456] dbAlloc+0x780/0xaa0
[ 84.797437][ T5456] ea_get+0xc0d/0x12c0
[ 84.801526][ T5456] ? ea_release+0x220/0x220
[ 84.806044][ T5456] __jfs_setxattr+0x1ed/0x1050
[ 84.810820][ T5456] ? ea_write+0xd00/0xd00
[ 84.815144][ T5456] ? posix_acl_to_xattr+0x2cb/0x380
[ 84.820341][ T5456] __jfs_set_acl+0x110/0x1a0
[ 84.824936][ T5456] jfs_set_acl+0x252/0x330
[ 84.829354][ T5456] ? jfs_get_acl+0x160/0x160
[ 84.833945][ T5456] ? make_vfsuid+0x108/0x160
[ 84.838543][ T5456] ? fscontext_read+0x1b0/0x2e0
[ 84.843404][ T5456] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 84.849305][ T5456] ? posix_acl_valid+0x2f2/0x340
[ 84.854253][ T5456] set_posix_acl+0x259/0x320
[ 84.858855][ T5456] vfs_set_acl+0x539/0x900
[ 84.863282][ T5456] do_set_acl+0xda/0x1b0
[ 84.867538][ T5456] do_setxattr+0xeb/0x170
[ 84.871873][ T5456] setxattr+0x159/0x170
[ 84.876035][ T5456] ? do_setxattr+0x170/0x170
[ 84.880623][ T5456] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 84.886635][ T5456] ? __mnt_want_write+0x20c/0x300
[ 84.891679][ T5456] path_setxattr+0x1a3/0x1d0
[ 84.896271][ T5456] ? setxattr+0x170/0x170
[ 84.900601][ T5456] __x64_sys_lsetxattr+0xc1/0x160
[ 84.905635][ T5456] ? syscall_enter_from_user_mode+0x26/0x80
[ 84.911540][ T5456] do_syscall_64+0x38/0xb0
[ 84.915964][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 84.921868][ T5456] RIP: 0033:0x7fa555a7cb29
[ 84.926280][ T5456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 84.945891][ T5456] RSP: 002b:00007fa5568400c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 84.954305][ T5456] RAX: ffffffffffffffda RBX: 00007fa555b9bf80 RCX: 00007fa555a7cb29
[ 84.962281][ T5456] RDX: 0000000020000180 RSI: 0000000020000040 RDI: 0000000020000000
[ 84.970254][ T5456] RBP: 00007fa555ac847a R08: 0000000000000000 R09: 0000000000000000
[ 84.978221][ T5456] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 84.986278][ T5456] R13: 000000000000000b R14: 00007fa555b9bf80 R15: 00007ffce97576b8
[ 84.994292][ T5456]
[ 84.998121][ T5456] Kernel Offset: disabled
[ 85.002427][ T5456] Rebooting in 86400 seconds..