Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts.
2023/12/08 15:03:03 ignoring optional flag "sandboxArg"="0"
2023/12/08 15:03:03 parsed 1 programs
2023/12/08 15:03:03 executed programs: 0
[ 79.178514][ T5064] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.187022][ T5064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.195682][ T5064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.203459][ T5064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.210844][ T5064] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 79.218145][ T5064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.333725][ T5414] chnl_net:caif_netlink_parms(): no params data found
[ 79.386922][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.394334][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.401934][ T5414] bridge_slave_0: entered allmulticast mode
[ 79.408948][ T5414] bridge_slave_0: entered promiscuous mode
[ 79.416864][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.424341][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.431865][ T5414] bridge_slave_1: entered allmulticast mode
[ 79.438838][ T5414] bridge_slave_1: entered promiscuous mode
[ 79.463626][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.475161][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.503020][ T5414] team0: Port device team_slave_0 added
[ 79.511535][ T5414] team0: Port device team_slave_1 added
[ 79.533234][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.540392][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.566522][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.579613][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.586587][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.612828][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.647210][ T5414] hsr_slave_0: entered promiscuous mode
[ 79.653566][ T5414] hsr_slave_1: entered promiscuous mode
[ 80.356337][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.368652][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.381686][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.393128][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.497914][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.528085][ T5414] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.545122][ T925] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.552346][ T925] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.572823][ T55] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.580879][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.807568][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.863639][ T5414] veth0_vlan: entered promiscuous mode
[ 80.884869][ T5414] veth1_vlan: entered promiscuous mode
[ 80.924944][ T5414] veth0_macvtap: entered promiscuous mode
[ 80.938110][ T5414] veth1_macvtap: entered promiscuous mode
[ 80.964111][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.984079][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.997269][ T5414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.008792][ T5414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.020714][ T5414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.032371][ T5414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.116322][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.132807][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.169261][ T2447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.181719][ T2447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.280301][ T5064] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.323661][ T5483] loop0: detected capacity change from 0 to 8192
[ 81.338776][ T5483] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 81.354695][ T5483] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 81.365967][ T5483] REISERFS (device loop0): using ordered data mode
[ 81.374644][ T5483] reiserfs: using flush barriers
[ 81.384675][ T5483] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 81.403827][ T5483] REISERFS (device loop0): checking transaction log (loop0)
[ 81.501485][ T5483] REISERFS (device loop0): Using r5 hash to sort names
[ 81.512169][ T5483] ==================================================================
[ 81.520359][ T5483] BUG: KASAN: use-after-free in reiserfs_readdir_inode+0x5dc/0x14c0
[ 81.528453][ T5483] Read of size 8 at addr ffff88806eb21000 by task syz-executor.0/5483
[ 81.536661][ T5483]
[ 81.538997][ T5483] CPU: 0 PID: 5483 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00111-g5e3f5b81de80 #0
[ 81.549511][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 81.559581][ T5483] Call Trace:
[ 81.562885][ T5483]
[ 81.565936][ T5483] dump_stack_lvl+0x1e7/0x2d0
[ 81.570648][ T5483] ? nf_tcp_handle_invalid+0x650/0x650
[ 81.576149][ T5483] ? panic+0x850/0x850
[ 81.580238][ T5483] ? _printk+0xd5/0x120
[ 81.584414][ T5483] print_report+0x163/0x540
[ 81.589029][ T5483] ? __virt_addr_valid+0x22f/0x2e0
[ 81.594176][ T5483] ? __phys_addr+0xba/0x170
[ 81.598701][ T5483] ? reiserfs_readdir_inode+0x5dc/0x14c0
[ 81.604368][ T5483] kasan_report+0x142/0x170
[ 81.608922][ T5483] ? reiserfs_readdir_inode+0x5dc/0x14c0
[ 81.614677][ T5483] kasan_check_range+0x27e/0x290
[ 81.619729][ T5483] reiserfs_readdir_inode+0x5dc/0x14c0
[ 81.625227][ T5483] ? reiserfs_dir_fsync+0x100/0x100
[ 81.630451][ T5483] ? __mutex_trylock_common+0x182/0x2e0
[ 81.636028][ T5483] ? down_read_killable+0xaa8/0xd20
[ 81.641243][ T5483] ? trace_contention_end+0x3c/0x100
[ 81.646547][ T5483] ? __mutex_lock+0x2ee/0xd60
[ 81.651502][ T5483] ? iterate_dir+0xd7/0x540
[ 81.656110][ T5483] ? fsnotify_perm+0x43e/0x5a0
[ 81.660891][ T5483] iterate_dir+0x1cd/0x540
[ 81.665592][ T5483] __se_sys_getdents64+0x20d/0x4f0
[ 81.670727][ T5483] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 81.676734][ T5483] ? __x64_sys_getdents64+0x80/0x80
[ 81.681957][ T5483] ? filldir+0x6a0/0x6a0
[ 81.686306][ T5483] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 81.692320][ T5483] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 81.698322][ T5483] do_syscall_64+0x45/0x110
[ 81.702845][ T5483] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 81.708770][ T5483] RIP: 0033:0x7f6b67c7c8d9
[ 81.713211][ T5483] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 81.733112][ T5483] RSP: 002b:00007f6b6898a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 81.741635][ T5483] RAX: ffffffffffffffda RBX: 00007f6b67d9bf80 RCX: 00007f6b67c7c8d9
[ 81.749716][ T5483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 81.757794][ T5483] RBP: 00007f6b67cd8b20 R08: 0000000000000000 R09: 0000000000000000
[ 81.766146][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 81.774137][ T5483] R13: 000000000000000b R14: 00007f6b67d9bf80 R15: 00007fffaddf87d8
[ 81.782572][ T5483]
[ 81.785724][ T5483]
[ 81.788061][ T5483] The buggy address belongs to the physical page:
[ 81.794488][ T5483] page:ffffea0001bac840 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6eb21
[ 81.804942][ T5483] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 81.812660][ T5483] page_type: 0xffffffff()
[ 81.817128][ T5483] raw: 00fff00000000000 ffffea0001bad4c8 ffffea0001bad588 0000000000000000
[ 81.825738][ T5483] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 81.834593][ T5483] page dumped because: kasan: bad access detected
[ 81.841120][ T5483] page_owner tracks the page as freed
[ 81.846679][ T5483] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5493, tgid 5493 (cmp), ts 81470619786, free_ts 81472674716
[ 81.865643][ T5483] post_alloc_hook+0x1e6/0x210
[ 81.870660][ T5483] get_page_from_freelist+0x33ea/0x3570
[ 81.876322][ T5483] __alloc_pages+0x255/0x680
[ 81.881025][ T5483] alloc_pages_mpol+0x3de/0x640
[ 81.886079][ T5483] vma_alloc_folio+0xf3/0x3f0
[ 81.890790][ T5483] handle_mm_fault+0x238a/0x6680
[ 81.896281][ T5483] exc_page_fault+0x456/0x870
[ 81.900984][ T5483] asm_exc_page_fault+0x26/0x30
[ 81.905857][ T5483] page last free stack trace:
[ 81.910540][ T5483] free_unref_page_prepare+0x931/0xa60
[ 81.916202][ T5483] free_unref_page_list+0x5a0/0x840
[ 81.921596][ T5483] release_pages+0x2117/0x2400
[ 81.926917][ T5483] tlb_flush_mmu+0x34c/0x4e0
[ 81.931713][ T5483] tlb_finish_mmu+0xd4/0x1f0
[ 81.936579][ T5483] exit_mmap+0x4d3/0xc60
[ 81.940846][ T5483] __mmput+0x115/0x3c0
[ 81.945111][ T5483] exit_mm+0x21f/0x300
[ 81.949296][ T5483] do_exit+0x9b7/0x2750
[ 81.953564][ T5483] do_group_exit+0x206/0x2c0
[ 81.958172][ T5483] __x64_sys_exit_group+0x3f/0x40
[ 81.963223][ T5483] do_syscall_64+0x45/0x110
[ 81.967835][ T5483] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 81.973757][ T5483]
[ 81.976176][ T5483] Memory state around the buggy address:
[ 81.981902][ T5483] ffff88806eb20f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 81.990329][ T5483] ffff88806eb20f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 81.999026][ T5483] >ffff88806eb21000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.007186][ T5483] ^
[ 82.011352][ T5483] ffff88806eb21080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.019426][ T5483] ffff88806eb21100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.027502][ T5483] ==================================================================
[ 82.040083][ T1141] cfg80211: failed to load regulatory.db
[ 82.056522][ T5483] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 82.063752][ T5483] CPU: 0 PID: 5483 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00111-g5e3f5b81de80 #0
[ 82.074180][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 82.084342][ T5483] Call Trace:
[ 82.087639][ T5483]
[ 82.090586][ T5483] dump_stack_lvl+0x1e7/0x2d0
[ 82.095286][ T5483] ? nf_tcp_handle_invalid+0x650/0x650
[ 82.100764][ T5483] ? panic+0x850/0x850
[ 82.105103][ T5483] ? vscnprintf+0x5d/0x80
[ 82.109455][ T5483] panic+0x349/0x850
[ 82.113369][ T5483] ? check_panic_on_warn+0x21/0xa0
[ 82.118558][ T5483] ? __memcpy_flushcache+0x2b0/0x2b0
[ 82.123869][ T5483] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 82.129874][ T5483] ? _raw_spin_unlock+0x40/0x40
[ 82.134839][ T5483] ? print_report+0x4fb/0x540
[ 82.139544][ T5483] check_panic_on_warn+0x82/0xa0
[ 82.144588][ T5483] ? reiserfs_readdir_inode+0x5dc/0x14c0
[ 82.150243][ T5483] end_report+0x6e/0x140
[ 82.154509][ T5483] kasan_report+0x153/0x170
[ 82.159033][ T5483] ? reiserfs_readdir_inode+0x5dc/0x14c0
[ 82.164777][ T5483] kasan_check_range+0x27e/0x290
[ 82.169723][ T5483] reiserfs_readdir_inode+0x5dc/0x14c0
[ 82.175193][ T5483] ? reiserfs_dir_fsync+0x100/0x100
[ 82.180416][ T5483] ? __mutex_trylock_common+0x182/0x2e0
[ 82.185957][ T5483] ? down_read_killable+0xaa8/0xd20
[ 82.191153][ T5483] ? trace_contention_end+0x3c/0x100
[ 82.196445][ T5483] ? __mutex_lock+0x2ee/0xd60
[ 82.201226][ T5483] ? iterate_dir+0xd7/0x540
[ 82.206006][ T5483] ? fsnotify_perm+0x43e/0x5a0
[ 82.210781][ T5483] iterate_dir+0x1cd/0x540
[ 82.215644][ T5483] __se_sys_getdents64+0x20d/0x4f0
[ 82.220760][ T5483] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 82.226917][ T5483] ? __x64_sys_getdents64+0x80/0x80
[ 82.232202][ T5483] ? filldir+0x6a0/0x6a0
[ 82.236473][ T5483] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 82.242446][ T5483] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 82.248529][ T5483] do_syscall_64+0x45/0x110
[ 82.253191][ T5483] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 82.259261][ T5483] RIP: 0033:0x7f6b67c7c8d9
[ 82.263675][ T5483] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 82.283555][ T5483] RSP: 002b:00007f6b6898a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 82.291967][ T5483] RAX: ffffffffffffffda RBX: 00007f6b67d9bf80 RCX: 00007f6b67c7c8d9
[ 82.300107][ T5483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 82.308068][ T5483] RBP: 00007f6b67cd8b20 R08: 0000000000000000 R09: 0000000000000000
[ 82.316153][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 82.324158][ T5483] R13: 000000000000000b R14: 00007f6b67d9bf80 R15: 00007fffaddf87d8
[ 82.332151][ T5483]
[ 82.335334][ T5483] Kernel Offset: disabled
[ 82.339644][ T5483] Rebooting in 86400 seconds..