[ 76.030854][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. 2023/10/30 16:13:17 ignoring optional flag "sandboxArg"="0" 2023/10/30 16:13:17 parsed 1 programs 2023/10/30 16:13:17 executed programs: 0 [ 80.769936][ T4442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.777554][ T4442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.785600][ T4442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.794261][ T4442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.802182][ T4442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.809655][ T4442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.920729][ T5391] chnl_net:caif_netlink_parms(): no params data found [ 80.972791][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.979969][ T5391] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.987062][ T5391] bridge_slave_0: entered allmulticast mode [ 80.994076][ T5391] bridge_slave_0: entered promiscuous mode [ 81.002448][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.009660][ T5391] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.016777][ T5391] bridge_slave_1: entered allmulticast mode [ 81.023677][ T5391] bridge_slave_1: entered promiscuous mode [ 81.047784][ T5391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.060144][ T5391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.086679][ T5391] team0: Port device team_slave_0 added [ 81.094441][ T5391] team0: Port device team_slave_1 added [ 81.116910][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.124026][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.149968][ T5391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.162363][ T5391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.169388][ T5391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.195324][ T5391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.231443][ T5391] hsr_slave_0: entered promiscuous mode [ 81.237667][ T5391] hsr_slave_1: entered promiscuous mode [ 82.154169][ T5391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.165311][ T5391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.176913][ T5391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.189358][ T5391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.287683][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.311690][ T5391] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.327571][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.334850][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.363070][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.370241][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.561514][ T5391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.615213][ T5391] veth0_vlan: entered promiscuous mode [ 82.628792][ T5391] veth1_vlan: entered promiscuous mode [ 82.677851][ T5391] veth0_macvtap: entered promiscuous mode [ 82.690960][ T5391] veth1_macvtap: entered promiscuous mode [ 82.723008][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.741299][ T5391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.755305][ T5391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.766243][ T5391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.776583][ T5391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.787674][ T5391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.864523][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.880031][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.889549][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 82.920073][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.927905][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.045689][ T5469] loop0: detected capacity change from 0 to 8192 [ 83.059586][ T5469] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.081769][ T5469] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 83.092562][ T5469] REISERFS (device loop0): using ordered data mode [ 83.100913][ T5469] reiserfs: using flush barriers [ 83.108068][ T5469] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.127898][ T5469] REISERFS (device loop0): checking transaction log (loop0) [ 83.226942][ T5469] REISERFS (device loop0): Using r5 hash to sort names [ 83.428310][ T5483] loop0: detected capacity change from 0 to 8192 [ 83.437362][ T5483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.452056][ T5483] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 83.462779][ T5483] REISERFS (device loop0): using ordered data mode [ 83.469498][ T5483] reiserfs: using flush barriers [ 83.476298][ T5483] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.496845][ T5483] REISERFS (device loop0): checking transaction log (loop0) [ 83.592365][ T5483] REISERFS (device loop0): Using r5 hash to sort names [ 83.790937][ T5502] loop0: detected capacity change from 0 to 8192 [ 83.800677][ T5502] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.814214][ T5502] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 83.825048][ T5502] REISERFS (device loop0): using ordered data mode [ 83.831772][ T5502] reiserfs: using flush barriers [ 83.838342][ T5502] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.855443][ T5502] REISERFS (device loop0): checking transaction log (loop0) [ 83.922448][ T5502] REISERFS (device loop0): Using r5 hash to sort names [ 84.115478][ T5513] loop0: detected capacity change from 0 to 8192 [ 84.124270][ T5513] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.138037][ T5513] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 84.147811][ T5513] REISERFS (device loop0): using ordered data mode [ 84.155323][ T5513] reiserfs: using flush barriers [ 84.162077][ T5513] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.184658][ T5513] REISERFS (device loop0): checking transaction log (loop0) [ 84.276317][ T5513] REISERFS (device loop0): Using r5 hash to sort names [ 84.473440][ T5531] loop0: detected capacity change from 0 to 8192 [ 84.482824][ T5531] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.497237][ T5531] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 84.507522][ T5531] REISERFS (device loop0): using ordered data mode [ 84.514879][ T5531] reiserfs: using flush barriers [ 84.521879][ T5531] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.540674][ T5531] REISERFS (device loop0): checking transaction log (loop0) [ 84.631563][ T5531] REISERFS (device loop0): Using r5 hash to sort names [ 84.790344][ T5544] loop0: detected capacity change from 0 to 8192 [ 84.800274][ T5544] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.813429][ T5544] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 84.823959][ T5544] REISERFS (device loop0): using ordered data mode [ 84.830954][ T5544] reiserfs: using flush barriers [ 84.837694][ T5544] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.855517][ T5544] REISERFS (device loop0): checking transaction log (loop0) [ 84.952889][ T5544] REISERFS (device loop0): Using r5 hash to sort names [ 84.971243][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 85.179325][ T5563] loop0: detected capacity change from 0 to 8192 [ 85.188557][ T5563] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.202397][ T5563] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 85.211959][ T5563] REISERFS (device loop0): using ordered data mode [ 85.218546][ T5563] reiserfs: using flush barriers [ 85.227541][ T5563] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.244593][ T5563] REISERFS (device loop0): checking transaction log (loop0) [ 85.317495][ T5563] REISERFS (device loop0): Using r5 hash to sort names [ 85.330786][ T5563] ================================================================== [ 85.338887][ T5563] BUG: KASAN: out-of-bounds in reiserfs_readdir_inode+0xce1/0x14b0 [ 85.346797][ T5563] Read of size 8 at addr ffff88806db1f000 by task syz-executor.0/5563 [ 85.354966][ T5563] [ 85.357293][ T5563] CPU: 1 PID: 5563 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller #0 [ 85.365551][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 85.375625][ T5563] Call Trace: [ 85.378995][ T5563] [ 85.381922][ T5563] dump_stack_lvl+0xd9/0x1b0 [ 85.386533][ T5563] print_report+0xc4/0x620 [ 85.390968][ T5563] ? __virt_addr_valid+0x5e/0x2d0 [ 85.396176][ T5563] ? __phys_addr+0xc6/0x140 [ 85.400688][ T5563] kasan_report+0xda/0x110 [ 85.405106][ T5563] ? reiserfs_readdir_inode+0xce1/0x14b0 [ 85.410738][ T5563] ? reiserfs_readdir_inode+0xce1/0x14b0 [ 85.416377][ T5563] kasan_check_range+0xef/0x190 [ 85.421241][ T5563] reiserfs_readdir_inode+0xce1/0x14b0 [ 85.426711][ T5563] ? reiserfs_dir_fsync+0x140/0x140 [ 85.431925][ T5563] ? down_read_killable+0x222/0x4b0 [ 85.437130][ T5563] ? fsnotify_perm.part.0+0x268/0x630 [ 85.442518][ T5563] ? apparmor_file_permission+0x21f/0x4f0 [ 85.448250][ T5563] iterate_dir+0x1e5/0x5f0 [ 85.452673][ T5563] __x64_sys_getdents64+0x14f/0x2e0 [ 85.457875][ T5563] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 85.463164][ T5563] ? folio_memcg_unlock+0x2d0/0x2d0 [ 85.468449][ T5563] ? fillonedir+0x400/0x400 [ 85.472953][ T5563] ? syscall_enter_from_user_mode+0x26/0x80 [ 85.478851][ T5563] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.484059][ T5563] do_syscall_64+0x38/0xb0 [ 85.488582][ T5563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.494483][ T5563] RIP: 0033:0x7f17e567c959 [ 85.498898][ T5563] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.518512][ T5563] RSP: 002b:00007f17e62f00c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 85.526938][ T5563] RAX: ffffffffffffffda RBX: 00007f17e579bf80 RCX: 00007f17e567c959 [ 85.534916][ T5563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 85.542887][ T5563] RBP: 00007f17e56d8c88 R08: 0000000000000000 R09: 0000000000000000 [ 85.550857][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.558826][ T5563] R13: 000000000000000b R14: 00007f17e579bf80 R15: 00007ffd3592faf8 [ 85.566807][ T5563] [ 85.569826][ T5563] [ 85.572148][ T5563] The buggy address belongs to the physical page: [ 85.578552][ T5563] page:ffffea0001b6c7c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6db1f [ 85.588699][ T5563] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.595798][ T5563] page_type: 0xffffffff() [ 85.600127][ T5563] raw: 00fff00000000000 ffffea0001b68f88 ffffea0001b6c388 0000000000000000 [ 85.608716][ T5563] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 85.617292][ T5563] page dumped because: kasan: bad access detected [ 85.623696][ T5563] page_owner tracks the page as freed [ 85.629067][ T5563] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5577, tgid 5577 (sed), ts 85464457621, free_ts 85469293575 [ 85.646978][ T5563] post_alloc_hook+0x2cf/0x340 [ 85.651752][ T5563] get_page_from_freelist+0xee0/0x2f20 [ 85.657227][ T5563] __alloc_pages+0x1d0/0x4a0 [ 85.661830][ T5563] __folio_alloc+0x16/0x40 [ 85.666260][ T5563] vma_alloc_folio+0x156/0x890 [ 85.671047][ T5563] __handle_mm_fault+0xe67/0x3e10 [ 85.676083][ T5563] handle_mm_fault+0x478/0xa00 [ 85.680856][ T5563] do_user_addr_fault+0x30b/0x1000 [ 85.685973][ T5563] exc_page_fault+0x5c/0xd0 [ 85.690485][ T5563] asm_exc_page_fault+0x26/0x30 [ 85.695353][ T5563] page last free stack trace: [ 85.700035][ T5563] free_unref_page_prepare+0x476/0xa40 [ 85.705529][ T5563] free_unref_page_list+0xe6/0xb30 [ 85.710653][ T5563] release_pages+0x32a/0x14e0 [ 85.715350][ T5563] tlb_batch_pages_flush+0x9a/0x190 [ 85.720565][ T5563] tlb_finish_mmu+0x14b/0x6f0 [ 85.725259][ T5563] exit_mmap+0x38b/0xa60 [ 85.729517][ T5563] __mmput+0x12a/0x4d0 [ 85.733588][ T5563] mmput+0x62/0x70 [ 85.737312][ T5563] do_exit+0x9ad/0x2a20 [ 85.741480][ T5563] do_group_exit+0xd4/0x2a0 [ 85.745998][ T5563] __x64_sys_exit_group+0x3e/0x50 [ 85.751037][ T5563] do_syscall_64+0x38/0xb0 [ 85.755472][ T5563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.761395][ T5563] [ 85.763729][ T5563] Memory state around the buggy address: [ 85.769364][ T5563] ffff88806db1ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.777434][ T5563] ffff88806db1ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.785512][ T5563] >ffff88806db1f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.793579][ T5563] ^ [ 85.797915][ T5563] ffff88806db1f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.805997][ T5563] ffff88806db1f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.814061][ T5563] ================================================================== [ 85.842655][ T5563] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.849885][ T5563] CPU: 1 PID: 5563 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller #0 [ 85.858130][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 85.868221][ T5563] Call Trace: [ 85.871505][ T5563] [ 85.874436][ T5563] dump_stack_lvl+0xd9/0x1b0 [ 85.879071][ T5563] panic+0x6a6/0x750 [ 85.882984][ T5563] ? panic_smp_self_stop+0xa0/0xa0 [ 85.888105][ T5563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.894385][ T5563] ? preempt_schedule_thunk+0x1a/0x30 [ 85.899792][ T5563] ? preempt_schedule_common+0x45/0xc0 [ 85.905303][ T5563] check_panic_on_warn+0xab/0xb0 [ 85.910260][ T5563] end_report+0x108/0x150 [ 85.914619][ T5563] kasan_report+0xea/0x110 [ 85.919038][ T5563] ? reiserfs_readdir_inode+0xce1/0x14b0 [ 85.924684][ T5563] ? reiserfs_readdir_inode+0xce1/0x14b0 [ 85.930347][ T5563] kasan_check_range+0xef/0x190 [ 85.935207][ T5563] reiserfs_readdir_inode+0xce1/0x14b0 [ 85.940665][ T5563] ? reiserfs_dir_fsync+0x140/0x140 [ 85.945882][ T5563] ? down_read_killable+0x222/0x4b0 [ 85.951069][ T5563] ? fsnotify_perm.part.0+0x268/0x630 [ 85.956439][ T5563] ? apparmor_file_permission+0x21f/0x4f0 [ 85.962152][ T5563] iterate_dir+0x1e5/0x5f0 [ 85.966558][ T5563] __x64_sys_getdents64+0x14f/0x2e0 [ 85.971744][ T5563] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 85.977021][ T5563] ? folio_memcg_unlock+0x2d0/0x2d0 [ 85.982205][ T5563] ? fillonedir+0x400/0x400 [ 85.986697][ T5563] ? syscall_enter_from_user_mode+0x26/0x80 [ 85.992578][ T5563] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.997764][ T5563] do_syscall_64+0x38/0xb0 [ 86.002175][ T5563] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.008061][ T5563] RIP: 0033:0x7f17e567c959 [ 86.012491][ T5563] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.032097][ T5563] RSP: 002b:00007f17e62f00c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 86.040503][ T5563] RAX: ffffffffffffffda RBX: 00007f17e579bf80 RCX: 00007f17e567c959 [ 86.048468][ T5563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 86.056429][ T5563] RBP: 00007f17e56d8c88 R08: 0000000000000000 R09: 0000000000000000 [ 86.064413][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.072397][ T5563] R13: 000000000000000b R14: 00007f17e579bf80 R15: 00007ffd3592faf8 [ 86.080454][ T5563] [ 86.083681][ T5563] Kernel Offset: disabled [ 86.087986][ T5563] Rebooting in 86400 seconds..