[ 82.188960][ T27] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. 2023/10/16 09:20:52 ignoring optional flag "sandboxArg"="0" 2023/10/16 09:20:52 parsed 1 programs 2023/10/16 09:20:54 executed programs: 0 [ 87.537093][ T5381] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.588466][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.597921][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.606651][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.615169][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.623002][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.630386][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.748935][ T5387] chnl_net:caif_netlink_parms(): no params data found [ 87.804483][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.811772][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.819748][ T5387] bridge_slave_0: entered allmulticast mode [ 87.827290][ T5387] bridge_slave_0: entered promiscuous mode [ 87.836056][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.843845][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.851295][ T5387] bridge_slave_1: entered allmulticast mode [ 87.858248][ T5387] bridge_slave_1: entered promiscuous mode [ 87.883560][ T5387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.895066][ T5387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.924451][ T5387] team0: Port device team_slave_0 added [ 87.933520][ T5387] team0: Port device team_slave_1 added [ 87.956751][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.964161][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.991117][ T5387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.008900][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.016499][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.043223][ T5387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.081594][ T5387] hsr_slave_0: entered promiscuous mode [ 88.088365][ T5387] hsr_slave_1: entered promiscuous mode [ 88.844057][ T5387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.857351][ T5387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.869809][ T5387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.883465][ T5387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.990713][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.017660][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.035748][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.043149][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.066596][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.074677][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.127318][ T5387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.327090][ T5387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.386304][ T5387] veth0_vlan: entered promiscuous mode [ 89.406076][ T5387] veth1_vlan: entered promiscuous mode [ 89.447358][ T5387] veth0_macvtap: entered promiscuous mode [ 89.458154][ T5387] veth1_macvtap: entered promiscuous mode [ 89.484553][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.502659][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.517833][ T5387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.530477][ T5387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.543788][ T5387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.553003][ T5387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.659451][ T5040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.681733][ T5040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.702252][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 89.720124][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.729651][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.917259][ T5452] loop0: detected capacity change from 0 to 8192 [ 89.934486][ T5452] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.949736][ T5452] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 89.960248][ T5452] REISERFS (device loop0): using ordered data mode [ 89.967879][ T5452] reiserfs: using flush barriers [ 89.976979][ T5452] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.995011][ T5452] REISERFS (device loop0): checking transaction log (loop0) [ 90.113104][ T5452] REISERFS (device loop0): Using r5 hash to sort names [ 90.131698][ T5452] ================================================================== [ 90.140341][ T5452] BUG: KASAN: use-after-free in reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.149296][ T5452] Read of size 8 at addr ffff88806676b000 by task syz-executor.0/5452 [ 90.157606][ T5452] [ 90.160148][ T5452] CPU: 0 PID: 5452 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller-g58720809f527 #0 [ 90.170780][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 90.181122][ T5452] Call Trace: [ 90.184429][ T5452] [ 90.187758][ T5452] dump_stack_lvl+0x1e7/0x2d0 [ 90.192536][ T5452] ? nf_tcp_handle_invalid+0x650/0x650 [ 90.198939][ T5452] ? panic+0x770/0x770 [ 90.203339][ T5452] ? _printk+0xd5/0x120 [ 90.208070][ T5452] print_report+0x163/0x540 [ 90.212701][ T5452] ? __virt_addr_valid+0x22f/0x2e0 [ 90.218574][ T5452] ? __phys_addr+0xba/0x170 [ 90.223444][ T5452] ? reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.229216][ T5452] kasan_report+0x175/0x1b0 [ 90.234290][ T5452] ? reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.240859][ T5452] kasan_check_range+0x27e/0x290 [ 90.246276][ T5452] reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.251973][ T5452] ? reiserfs_dir_fsync+0x100/0x100 [ 90.257244][ T5452] ? __mutex_trylock_common+0x182/0x2e0 [ 90.263017][ T5452] ? down_read_killable+0xaa8/0xd10 [ 90.268439][ T5452] ? trace_contention_end+0x3c/0xf0 [ 90.274384][ T5452] ? __mutex_lock+0x2ee/0xd60 [ 90.279243][ T5452] ? iterate_dir+0xd7/0x580 [ 90.283880][ T5452] ? fsnotify_perm+0x420/0x5a0 [ 90.289281][ T5452] iterate_dir+0x1cd/0x580 [ 90.293750][ T5452] __se_sys_getdents64+0x20d/0x4f0 [ 90.298938][ T5452] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 90.305136][ T5452] ? __x64_sys_getdents64+0x80/0x80 [ 90.311162][ T5452] ? filldir+0x6a0/0x6a0 [ 90.315809][ T5452] ? syscall_enter_from_user_mode+0x32/0x230 [ 90.322111][ T5452] ? lockdep_hardirqs_on+0x98/0x140 [ 90.327788][ T5452] ? syscall_enter_from_user_mode+0x32/0x230 [ 90.333992][ T5452] do_syscall_64+0x41/0xc0 [ 90.338478][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.344528][ T5452] RIP: 0033:0x7f691d87cae9 [ 90.349233][ T5452] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.369565][ T5452] RSP: 002b:00007f691e54c0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 90.378009][ T5452] RAX: ffffffffffffffda RBX: 00007f691d99bf80 RCX: 00007f691d87cae9 [ 90.386159][ T5452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 90.395547][ T5452] RBP: 00007f691d8c847a R08: 0000000000000000 R09: 0000000000000000 [ 90.403729][ T5452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.411814][ T5452] R13: 000000000000000b R14: 00007f691d99bf80 R15: 00007ffd51df7f18 [ 90.419819][ T5452] [ 90.422949][ T5452] [ 90.425285][ T5452] The buggy address belongs to the physical page: [ 90.431889][ T5452] page:ffffea000199dac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6676b [ 90.442158][ T5452] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.449565][ T5452] page_type: 0xffffffff() [ 90.453924][ T5452] raw: 00fff00000000000 ffffea000199db08 ffff8880b9842220 0000000000000000 [ 90.462908][ T5452] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 90.471605][ T5452] page dumped because: kasan: bad access detected [ 90.478300][ T5452] page_owner tracks the page as freed [ 90.483686][ T5452] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 17198670761, free_ts 18651473350 [ 90.499093][ T5452] post_alloc_hook+0x1e6/0x210 [ 90.503895][ T5452] split_map_pages+0x24a/0x510 [ 90.508957][ T5452] isolate_freepages_range+0x472/0x4d0 [ 90.514975][ T5452] alloc_contig_range+0x62e/0x9a0 [ 90.520208][ T5452] alloc_contig_pages+0x3f4/0x4f0 [ 90.525441][ T5452] debug_vm_pgtable_alloc_huge_page+0xb9/0x110 [ 90.531801][ T5452] init_args+0x837/0xb10 [ 90.536245][ T5452] debug_vm_pgtable+0xe0/0x540 [ 90.541038][ T5452] do_one_initcall+0x23d/0x7d0 [ 90.545919][ T5452] do_initcall_level+0x157/0x210 [ 90.551066][ T5452] do_initcalls+0x3f/0x80 [ 90.555521][ T5452] kernel_init_freeable+0x429/0x5c0 [ 90.561008][ T5452] kernel_init+0x1d/0x2a0 [ 90.565367][ T5452] ret_from_fork+0x48/0x80 [ 90.569812][ T5452] ret_from_fork_asm+0x11/0x20 [ 90.574784][ T5452] page last free stack trace: [ 90.579904][ T5452] free_unref_page_prepare+0x8c3/0x9f0 [ 90.585399][ T5452] free_unref_page+0x37/0x3f0 [ 90.590102][ T5452] free_contig_range+0x9e/0x150 [ 90.594987][ T5452] destroy_args+0x95/0x7c0 [ 90.599868][ T5452] debug_vm_pgtable+0x4ba/0x540 [ 90.605002][ T5452] do_one_initcall+0x23d/0x7d0 [ 90.610137][ T5452] do_initcall_level+0x157/0x210 [ 90.615199][ T5452] do_initcalls+0x3f/0x80 [ 90.619558][ T5452] kernel_init_freeable+0x429/0x5c0 [ 90.624874][ T5452] kernel_init+0x1d/0x2a0 [ 90.629234][ T5452] ret_from_fork+0x48/0x80 [ 90.633676][ T5452] ret_from_fork_asm+0x11/0x20 [ 90.638470][ T5452] [ 90.640803][ T5452] Memory state around the buggy address: [ 90.646447][ T5452] ffff88806676af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.654617][ T5452] ffff88806676af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.662888][ T5452] >ffff88806676b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.671119][ T5452] ^ [ 90.675299][ T5452] ffff88806676b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.683573][ T5452] ffff88806676b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 90.691742][ T5452] ================================================================== [ 90.753586][ T5452] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.760835][ T5452] CPU: 0 PID: 5452 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller-g58720809f527 #0 [ 90.770847][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 90.781714][ T5452] Call Trace: [ 90.785161][ T5452] [ 90.788793][ T5452] dump_stack_lvl+0x1e7/0x2d0 [ 90.794300][ T5452] ? nf_tcp_handle_invalid+0x650/0x650 [ 90.799897][ T5452] ? panic+0x770/0x770 [ 90.804256][ T5452] ? preempt_schedule_common+0x83/0xc0 [ 90.809769][ T5452] ? vscnprintf+0x5d/0x80 [ 90.814413][ T5452] panic+0x30f/0x770 [ 90.818314][ T5452] ? check_panic_on_warn+0x21/0xa0 [ 90.823865][ T5452] ? __memcpy_flushcache+0x2b0/0x2b0 [ 90.829146][ T5452] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 90.835483][ T5452] ? _raw_spin_unlock+0x40/0x40 [ 90.840424][ T5452] ? print_report+0x4fb/0x540 [ 90.845441][ T5452] check_panic_on_warn+0x82/0xa0 [ 90.850635][ T5452] ? reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.856386][ T5452] end_report+0x6e/0x130 [ 90.860684][ T5452] kasan_report+0x186/0x1b0 [ 90.865323][ T5452] ? reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.871067][ T5452] kasan_check_range+0x27e/0x290 [ 90.876264][ T5452] reiserfs_readdir_inode+0x5dc/0x14c0 [ 90.881731][ T5452] ? reiserfs_dir_fsync+0x100/0x100 [ 90.887041][ T5452] ? __mutex_trylock_common+0x182/0x2e0 [ 90.892652][ T5452] ? down_read_killable+0xaa8/0xd10 [ 90.897930][ T5452] ? trace_contention_end+0x3c/0xf0 [ 90.903256][ T5452] ? __mutex_lock+0x2ee/0xd60 [ 90.907999][ T5452] ? iterate_dir+0xd7/0x580 [ 90.912570][ T5452] ? fsnotify_perm+0x420/0x5a0 [ 90.917520][ T5452] iterate_dir+0x1cd/0x580 [ 90.922040][ T5452] __se_sys_getdents64+0x20d/0x4f0 [ 90.927322][ T5452] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 90.933467][ T5452] ? __x64_sys_getdents64+0x80/0x80 [ 90.938848][ T5452] ? filldir+0x6a0/0x6a0 [ 90.943610][ T5452] ? syscall_enter_from_user_mode+0x32/0x230 [ 90.949881][ T5452] ? lockdep_hardirqs_on+0x98/0x140 [ 90.955103][ T5452] ? syscall_enter_from_user_mode+0x32/0x230 [ 90.961174][ T5452] do_syscall_64+0x41/0xc0 [ 90.965604][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.971490][ T5452] RIP: 0033:0x7f691d87cae9 [ 90.975906][ T5452] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.995766][ T5452] RSP: 002b:00007f691e54c0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 91.004411][ T5452] RAX: ffffffffffffffda RBX: 00007f691d99bf80 RCX: 00007f691d87cae9 [ 91.012822][ T5452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 91.020960][ T5452] RBP: 00007f691d8c847a R08: 0000000000000000 R09: 0000000000000000 [ 91.028925][ T5452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.037351][ T5452] R13: 000000000000000b R14: 00007f691d99bf80 R15: 00007ffd51df7f18 [ 91.045710][ T5452] [ 91.049049][ T5452] Kernel Offset: disabled [ 91.053473][ T5452] Rebooting in 86400 seconds..