[ 76.844186][ T921] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. 2023/08/13 02:38:48 ignoring optional flag "sandboxArg"="0" 2023/08/13 02:38:48 parsed 1 programs 2023/08/13 02:38:49 executed programs: 0 [ 81.612582][ T5365] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.669129][ T4423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.677705][ T4423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.686635][ T4423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.694673][ T4423] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.701991][ T4423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.802299][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 81.843343][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.850785][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.857954][ T5372] bridge_slave_0: entered allmulticast mode [ 81.864940][ T5372] bridge_slave_0: entered promiscuous mode [ 81.872819][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.879956][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.887785][ T5372] bridge_slave_1: entered allmulticast mode [ 81.894651][ T5372] bridge_slave_1: entered promiscuous mode [ 81.914914][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.926587][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.951024][ T5372] team0: Port device team_slave_0 added [ 81.959467][ T5372] team0: Port device team_slave_1 added [ 81.978020][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.985113][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.011190][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.023648][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.030678][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.056806][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.087174][ T5372] hsr_slave_0: entered promiscuous mode [ 82.093495][ T5372] hsr_slave_1: entered promiscuous mode [ 82.732703][ T5372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.746437][ T5372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.757946][ T5372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.770121][ T5372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.796005][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.803299][ T5372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.810752][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.818751][ T5372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.856278][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.865427][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.917344][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.939042][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.953151][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.960428][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.985188][ T921] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.992465][ T921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.200147][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.250166][ T5372] veth0_vlan: entered promiscuous mode [ 83.266529][ T5372] veth1_vlan: entered promiscuous mode [ 83.296680][ T5372] veth0_macvtap: entered promiscuous mode [ 83.307766][ T5372] veth1_macvtap: entered promiscuous mode [ 83.327430][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.346956][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.362884][ T5372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.375391][ T5372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385123][ T5372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.395544][ T5372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469898][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.480490][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.510710][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.520126][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.594247][ T5431] loop0: detected capacity change from 0 to 2048 [ 83.603870][ T5431] ======================================================= [ 83.603870][ T5431] WARNING: The mand mount option has been deprecated and [ 83.603870][ T5431] and is ignored by this kernel. Remove the mand [ 83.603870][ T5431] option from the mount to silence this warning. [ 83.603870][ T5431] ======================================================= [ 83.652415][ T5431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.722556][ T4423] Bluetooth: hci0: command 0x0409 tx timeout [ 83.785480][ T5372] ================================================================== [ 83.793689][ T5372] BUG: KASAN: slab-out-of-bounds in udf_close_lvid+0x6a8/0x9a0 [ 83.801360][ T5372] Write of size 1 at addr ffff88807d255e28 by task syz-executor.0/5372 [ 83.809809][ T5372] [ 83.812151][ T5372] CPU: 0 PID: 5372 Comm: syz-executor.0 Not tainted 6.5.0-rc5-syzkaller-00296-gf8de32cc060b-dirty #0 [ 83.823190][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 83.833359][ T5372] Call Trace: [ 83.836660][ T5372] [ 83.839873][ T5372] dump_stack_lvl+0x1e7/0x2d0 [ 83.845710][ T5372] ? irq_work_queue+0xca/0x150 [ 83.850591][ T5372] ? nf_tcp_handle_invalid+0x650/0x650 [ 83.856169][ T5372] ? panic+0x770/0x770 [ 83.860259][ T5372] ? _printk+0xd5/0x120 [ 83.864439][ T5372] print_report+0x163/0x540 [ 83.869314][ T5372] ? hook_sb_delete+0x75e/0xb30 [ 83.874194][ T5372] ? __virt_addr_valid+0x22f/0x2e0 [ 83.879414][ T5372] ? __phys_addr+0xba/0x170 [ 83.884113][ T5372] ? udf_close_lvid+0x6a8/0x9a0 [ 83.889074][ T5372] kasan_report+0x175/0x1b0 [ 83.893600][ T5372] ? udf_close_lvid+0x6a8/0x9a0 [ 83.899075][ T5372] udf_close_lvid+0x6a8/0x9a0 [ 83.903791][ T5372] ? udf_open_lvid+0x5b0/0x5b0 [ 83.908565][ T5372] ? iput+0x37e/0x8f0 [ 83.912545][ T5372] ? clear_inode+0x150/0x150 [ 83.917122][ T5372] udf_put_super+0xcd/0x160 [ 83.921700][ T5372] ? udf_free_in_core_inode+0x30/0x30 [ 83.927154][ T5372] generic_shutdown_super+0x134/0x340 [ 83.932516][ T5372] kill_block_super+0x68/0xa0 [ 83.937188][ T5372] deactivate_locked_super+0xa4/0x110 [ 83.942550][ T5372] cleanup_mnt+0x426/0x4c0 [ 83.947051][ T5372] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.952238][ T5372] task_work_run+0x24a/0x300 [ 83.956908][ T5372] ? task_work_cancel+0x2b0/0x2b0 [ 83.961941][ T5372] ? exit_to_user_mode_loop+0x39/0x100 [ 83.967473][ T5372] exit_to_user_mode_loop+0xd9/0x100 [ 83.972747][ T5372] exit_to_user_mode_prepare+0xb1/0x140 [ 83.978454][ T5372] syscall_exit_to_user_mode+0x64/0x280 [ 83.984109][ T5372] do_syscall_64+0x4d/0xc0 [ 83.989035][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.994945][ T5372] RIP: 0033:0x7ff30167de17 [ 84.001000][ T5372] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 84.020766][ T5372] RSP: 002b:00007ffd888c4358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.030997][ T5372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff30167de17 [ 84.039143][ T5372] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd888c4410 [ 84.047136][ T5372] RBP: 00007ffd888c4410 R08: 0000000000000000 R09: 0000000000000000 [ 84.055171][ T5372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd888c54d0 [ 84.065057][ T5372] R13: 00007ff3016c73b9 R14: 0000000000014647 R15: 0000000000000007 [ 84.073811][ T5372] [ 84.077003][ T5372] [ 84.079383][ T5372] Allocated by task 5271: [ 84.083857][ T5372] kasan_set_track+0x4f/0x70 [ 84.088462][ T5372] __kasan_kmalloc+0x98/0xb0 [ 84.093056][ T5372] __kmalloc+0xb9/0x230 [ 84.097204][ T5372] tomoyo_realpath_from_path+0xcf/0x5e0 [ 84.102886][ T5372] tomoyo_path_perm+0x28d/0x700 [ 84.107721][ T5372] security_inode_getattr+0xd3/0x120 [ 84.112999][ T5372] vfs_statx+0x18f/0x480 [ 84.117230][ T5372] __x64_sys_newfstatat+0x14f/0x1d0 [ 84.122412][ T5372] do_syscall_64+0x41/0xc0 [ 84.126814][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.132704][ T5372] [ 84.135009][ T5372] Freed by task 5271: [ 84.138970][ T5372] kasan_set_track+0x4f/0x70 [ 84.143546][ T5372] kasan_save_free_info+0x28/0x40 [ 84.148558][ T5372] ____kasan_slab_free+0xd6/0x120 [ 84.153566][ T5372] __kmem_cache_free+0x25f/0x3b0 [ 84.158493][ T5372] tomoyo_realpath_from_path+0x5a3/0x5e0 [ 84.164113][ T5372] tomoyo_path_perm+0x28d/0x700 [ 84.168948][ T5372] security_inode_getattr+0xd3/0x120 [ 84.174217][ T5372] vfs_statx+0x18f/0x480 [ 84.178455][ T5372] __x64_sys_newfstatat+0x14f/0x1d0 [ 84.183640][ T5372] do_syscall_64+0x41/0xc0 [ 84.188131][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.194228][ T5372] [ 84.196638][ T5372] The buggy address belongs to the object at ffff88807d254000 [ 84.196638][ T5372] which belongs to the cache kmalloc-4k of size 4096 [ 84.210768][ T5372] The buggy address is located 3624 bytes to the right of [ 84.210768][ T5372] allocated 4096-byte region [ffff88807d254000, ffff88807d255000) [ 84.225909][ T5372] [ 84.228306][ T5372] The buggy address belongs to the physical page: [ 84.234712][ T5372] page:ffffea0001f49400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d250 [ 84.244932][ T5372] head:ffffea0001f49400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.254280][ T5372] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 84.262328][ T5372] page_type: 0xffffffff() [ 84.266643][ T5372] raw: 00fff00000010200 ffff888012842140 dead000000000100 dead000000000122 [ 84.275475][ T5372] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 84.284041][ T5372] page dumped because: kasan: bad access detected [ 84.290437][ T5372] page_owner tracks the page as allocated [ 84.296162][ T5372] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4479, tgid 4479 (udevd), ts 26549380925, free_ts 26143601613 [ 84.316733][ T5372] post_alloc_hook+0x1e6/0x210 [ 84.321511][ T5372] get_page_from_freelist+0x31e8/0x3370 [ 84.327233][ T5372] __alloc_pages+0x255/0x670 [ 84.331832][ T5372] alloc_slab_page+0x6a/0x160 [ 84.336603][ T5372] new_slab+0x84/0x2f0 [ 84.340670][ T5372] ___slab_alloc+0xade/0x1100 [ 84.345364][ T5372] __kmem_cache_alloc_node+0x1af/0x270 [ 84.351023][ T5372] __kmalloc+0xa8/0x230 [ 84.355544][ T5372] tomoyo_realpath_from_path+0xcf/0x5e0 [ 84.361110][ T5372] tomoyo_path2_perm+0x3b8/0xb20 [ 84.366233][ T5372] tomoyo_path_rename+0x198/0x1e0 [ 84.371520][ T5372] security_path_rename+0x173/0x210 [ 84.376720][ T5372] do_renameat2+0x924/0x1660 [ 84.381389][ T5372] __x64_sys_rename+0x86/0x90 [ 84.386245][ T5372] do_syscall_64+0x41/0xc0 [ 84.390753][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.396658][ T5372] page last free stack trace: [ 84.401658][ T5372] free_unref_page_prepare+0x903/0xa30 [ 84.407102][ T5372] free_unref_page+0x37/0x3f0 [ 84.411764][ T5372] __unfreeze_partials+0x1dc/0x220 [ 84.416885][ T5372] put_cpu_partial+0x116/0x180 [ 84.421652][ T5372] __slab_free+0x2b6/0x390 [ 84.426232][ T5372] qlist_free_all+0x22/0x60 [ 84.430817][ T5372] kasan_quarantine_reduce+0x14b/0x160 [ 84.436275][ T5372] __kasan_slab_alloc+0x23/0x70 [ 84.441117][ T5372] slab_post_alloc_hook+0x6c/0x3b0 [ 84.446234][ T5372] kmem_cache_alloc+0x123/0x300 [ 84.451162][ T5372] getname_flags+0xbc/0x4e0 [ 84.455654][ T5372] __x64_sys_newfstatat+0x12e/0x1d0 [ 84.461029][ T5372] do_syscall_64+0x41/0xc0 [ 84.465520][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.471492][ T5372] [ 84.473903][ T5372] Memory state around the buggy address: [ 84.479793][ T5372] ffff88807d255d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.488277][ T5372] ffff88807d255d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.497104][ T5372] >ffff88807d255e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.505489][ T5372] ^ [ 84.510926][ T5372] ffff88807d255e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.519054][ T5372] ffff88807d255f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.527094][ T5372] ================================================================== [ 84.552633][ T5372] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.559878][ T5372] CPU: 0 PID: 5372 Comm: syz-executor.0 Not tainted 6.5.0-rc5-syzkaller-00296-gf8de32cc060b-dirty #0 [ 84.570748][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 84.580822][ T5372] Call Trace: [ 84.584095][ T5372] [ 84.587021][ T5372] dump_stack_lvl+0x1e7/0x2d0 [ 84.591692][ T5372] ? nf_tcp_handle_invalid+0x650/0x650 [ 84.597136][ T5372] ? panic+0x770/0x770 [ 84.601201][ T5372] ? preempt_schedule_common+0x83/0xc0 [ 84.606648][ T5372] ? vscnprintf+0x5d/0x80 [ 84.610969][ T5372] panic+0x30f/0x770 [ 84.614851][ T5372] ? check_panic_on_warn+0x21/0xa0 [ 84.619948][ T5372] ? __memcpy_flushcache+0x2b0/0x2b0 [ 84.625221][ T5372] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 84.631278][ T5372] ? _raw_spin_unlock+0x40/0x40 [ 84.636154][ T5372] ? print_report+0x4fb/0x540 [ 84.640927][ T5372] check_panic_on_warn+0x82/0xa0 [ 84.646054][ T5372] ? udf_close_lvid+0x6a8/0x9a0 [ 84.650912][ T5372] end_report+0x6e/0x130 [ 84.655169][ T5372] kasan_report+0x186/0x1b0 [ 84.659765][ T5372] ? udf_close_lvid+0x6a8/0x9a0 [ 84.664616][ T5372] udf_close_lvid+0x6a8/0x9a0 [ 84.669383][ T5372] ? udf_open_lvid+0x5b0/0x5b0 [ 84.674283][ T5372] ? iput+0x37e/0x8f0 [ 84.678287][ T5372] ? clear_inode+0x150/0x150 [ 84.682886][ T5372] udf_put_super+0xcd/0x160 [ 84.687409][ T5372] ? udf_free_in_core_inode+0x30/0x30 [ 84.692785][ T5372] generic_shutdown_super+0x134/0x340 [ 84.698235][ T5372] kill_block_super+0x68/0xa0 [ 84.702906][ T5372] deactivate_locked_super+0xa4/0x110 [ 84.708367][ T5372] cleanup_mnt+0x426/0x4c0 [ 84.712868][ T5372] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.718144][ T5372] task_work_run+0x24a/0x300 [ 84.722727][ T5372] ? task_work_cancel+0x2b0/0x2b0 [ 84.727739][ T5372] ? exit_to_user_mode_loop+0x39/0x100 [ 84.733446][ T5372] exit_to_user_mode_loop+0xd9/0x100 [ 84.738896][ T5372] exit_to_user_mode_prepare+0xb1/0x140 [ 84.744427][ T5372] syscall_exit_to_user_mode+0x64/0x280 [ 84.750223][ T5372] do_syscall_64+0x4d/0xc0 [ 84.754770][ T5372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.760709][ T5372] RIP: 0033:0x7ff30167de17 [ 84.765215][ T5372] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 84.785623][ T5372] RSP: 002b:00007ffd888c4358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.794123][ T5372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff30167de17 [ 84.802084][ T5372] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd888c4410 [ 84.810041][ T5372] RBP: 00007ffd888c4410 R08: 0000000000000000 R09: 0000000000000000 [ 84.818016][ T5372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd888c54d0 [ 84.826058][ T5372] R13: 00007ff3016c73b9 R14: 0000000000014647 R15: 0000000000000007 [ 84.834029][ T5372] [ 84.837251][ T5372] Kernel Offset: disabled [ 84.841560][ T5372] Rebooting in 86400 seconds..