Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2023/12/19 03:24:06 ignoring optional flag "sandboxArg"="0" 2023/12/19 03:24:06 parsed 1 programs [ 81.940150][ T8] cfg80211: failed to load regulatory.db 2023/12/19 03:24:08 executed programs: 0 [ 82.317959][ T5405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.377747][ T5063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.386073][ T5063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.393893][ T5063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.403580][ T5063] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.411421][ T5063] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.419774][ T5063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.539996][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 82.594047][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.601268][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.608614][ T5413] bridge_slave_0: entered allmulticast mode [ 82.615496][ T5413] bridge_slave_0: entered promiscuous mode [ 82.623359][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.630733][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.638087][ T5413] bridge_slave_1: entered allmulticast mode [ 82.645270][ T5413] bridge_slave_1: entered promiscuous mode [ 82.671187][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.682727][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.711620][ T5413] team0: Port device team_slave_0 added [ 82.719467][ T5413] team0: Port device team_slave_1 added [ 82.742030][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.749197][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.775251][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.787600][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.794564][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.822590][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.859584][ T5413] hsr_slave_0: entered promiscuous mode [ 82.867317][ T5413] hsr_slave_1: entered promiscuous mode [ 83.580195][ T5413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.593320][ T5413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.605222][ T5413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.629260][ T5413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.731921][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.756112][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.771301][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.778534][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.804674][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.812275][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.022545][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.082876][ T5413] veth0_vlan: entered promiscuous mode [ 84.101233][ T5413] veth1_vlan: entered promiscuous mode [ 84.139122][ T5413] veth0_macvtap: entered promiscuous mode [ 84.149616][ T5413] veth1_macvtap: entered promiscuous mode [ 84.177528][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.194827][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.211270][ T5413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.225011][ T5413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.234055][ T5413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.246426][ T5413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.340042][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.357593][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.393114][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.404529][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.487537][ T5063] Bluetooth: hci0: command 0x0409 tx timeout [ 84.762266][ T5482] loop0: detected capacity change from 0 to 32768 [ 84.779217][ T5482] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5482) [ 84.812135][ T5482] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.827018][ T5482] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 84.838237][ T5482] BTRFS info (device loop0): enabling auto defrag [ 84.844945][ T5482] BTRFS info (device loop0): enabling disk space caching [ 84.853570][ T5482] BTRFS info (device loop0): max_inline at 0 [ 84.863065][ T5482] BTRFS info (device loop0): force clearing of disk cache [ 84.870985][ T5482] BTRFS info (device loop0): turning on sync discard [ 84.879869][ T5482] BTRFS info (device loop0): disk space caching is enabled [ 84.950259][ T5482] BTRFS info (device loop0): enabling ssd optimizations [ 84.969265][ T5482] BTRFS info (device loop0): rebuilding free space tree [ 85.014550][ T5482] BTRFS info (device loop0): disabling free space tree [ 85.022951][ T5482] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.034468][ T5482] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.127003][ T5482] ================================================================== [ 85.135467][ T5482] BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 [ 85.142269][ T5482] Read of size 1 at addr ffff88814b62aa28 by task syz-executor.0/5482 [ 85.150439][ T5482] [ 85.152864][ T5482] CPU: 0 PID: 5482 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00200-g3bd7d7488169-dirty #0 [ 85.163729][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 85.173811][ T5482] Call Trace: [ 85.177114][ T5482] [ 85.180063][ T5482] dump_stack_lvl+0x1e7/0x2d0 [ 85.184857][ T5482] ? nf_tcp_handle_invalid+0x650/0x650 [ 85.190353][ T5482] ? panic+0x850/0x850 [ 85.194637][ T5482] ? _printk+0xd5/0x120 [ 85.198825][ T5482] print_report+0x163/0x540 [ 85.203380][ T5482] ? __virt_addr_valid+0x22f/0x2e0 [ 85.208611][ T5482] ? __phys_addr+0xba/0x170 [ 85.213414][ T5482] ? strlen+0x58/0x70 [ 85.217432][ T5482] kasan_report+0x142/0x170 [ 85.221983][ T5482] ? strlen+0x58/0x70 [ 85.225992][ T5482] strlen+0x58/0x70 [ 85.229827][ T5482] getname_kernel+0x1d/0x2e0 [ 85.234449][ T5482] kern_path+0x1d/0x50 [ 85.238626][ T5482] bdev_open_by_path+0xd1/0x540 [ 85.243674][ T5482] ? blkdev_put+0x770/0x770 [ 85.248208][ T5482] btrfs_dev_replace_by_ioctl+0x41b/0x2010 [ 85.254070][ T5482] ? btrfs_finish_block_group_to_copy+0x480/0x480 [ 85.260864][ T5482] ? btrfs_ioctl_dev_replace+0x2be/0x390 [ 85.266677][ T5482] ? do_raw_spin_lock+0x14e/0x370 [ 85.271855][ T5482] ? __lock_acquire+0x1fd0/0x1fd0 [ 85.276901][ T5482] ? do_raw_spin_unlock+0x13b/0x8b0 [ 85.282130][ T5482] btrfs_ioctl_dev_replace+0x2c9/0x390 [ 85.287624][ T5482] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 85.294248][ T5482] __se_sys_ioctl+0xf8/0x170 [ 85.298961][ T5482] do_syscall_64+0x45/0x110 [ 85.303591][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.309782][ T5482] RIP: 0033:0x7f617807cba9 [ 85.314313][ T5482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.334125][ T5482] RSP: 002b:00007f6178dd40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.342578][ T5482] RAX: ffffffffffffffda RBX: 00007f617819bf80 RCX: 00007f617807cba9 [ 85.350766][ T5482] RDX: 0000000020000540 RSI: 00000000ca289435 RDI: 0000000000000005 [ 85.358771][ T5482] RBP: 00007f61780c847a R08: 0000000000000000 R09: 0000000000000000 [ 85.366770][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.374776][ T5482] R13: 000000000000000b R14: 00007f617819bf80 R15: 00007ffcbe283518 [ 85.382787][ T5482] [ 85.385923][ T5482] [ 85.388257][ T5482] Allocated by task 5482: [ 85.392592][ T5482] kasan_set_track+0x4f/0x70 [ 85.397214][ T5482] __kasan_kmalloc+0x98/0xb0 [ 85.401921][ T5482] __kmalloc_node_track_caller+0xb1/0x190 [ 85.407747][ T5482] memdup_user+0x2b/0xc0 [ 85.412015][ T5482] btrfs_ioctl_dev_replace+0xb8/0x390 [ 85.417502][ T5482] __se_sys_ioctl+0xf8/0x170 [ 85.422121][ T5482] do_syscall_64+0x45/0x110 [ 85.426648][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.432574][ T5482] [ 85.434901][ T5482] The buggy address belongs to the object at ffff88814b62a000 [ 85.434901][ T5482] which belongs to the cache kmalloc-4k of size 4096 [ 85.448992][ T5482] The buggy address is located 0 bytes to the right of [ 85.448992][ T5482] allocated 2600-byte region [ffff88814b62a000, ffff88814b62aa28) [ 85.463727][ T5482] [ 85.466061][ T5482] The buggy address belongs to the physical page: [ 85.472578][ T5482] page:ffffea00052d8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14b628 [ 85.483054][ T5482] head:ffffea00052d8a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.492141][ T5482] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 85.500233][ T5482] page_type: 0xffffffff() [ 85.504596][ T5482] raw: 057ff00000000840 ffff888012c42140 dead000000000100 dead000000000122 [ 85.513295][ T5482] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 85.521901][ T5482] page dumped because: kasan: bad access detected [ 85.528607][ T5482] page_owner tracks the page as allocated [ 85.534517][ T5482] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12558368773, free_ts 0 [ 85.554348][ T5482] post_alloc_hook+0x1e6/0x210 [ 85.559146][ T5482] get_page_from_freelist+0x33ea/0x3570 [ 85.564724][ T5482] __alloc_pages+0x255/0x680 [ 85.569339][ T5482] alloc_pages_mpol+0x3de/0x640 [ 85.574210][ T5482] alloc_slab_page+0x6a/0x170 [ 85.579074][ T5482] new_slab+0x84/0x2f0 [ 85.583178][ T5482] ___slab_alloc+0xc8a/0x1330 [ 85.587878][ T5482] __kmem_cache_alloc_node+0x21d/0x300 [ 85.593362][ T5482] __kmalloc_node_track_caller+0xa0/0x190 [ 85.599117][ T5482] kmalloc_reserve+0xf3/0x260 [ 85.603913][ T5482] __alloc_skb+0x1b1/0x420 [ 85.608362][ T5482] genl_ctrl_event+0x18e/0xc80 [ 85.613163][ T5482] genl_register_family+0x13df/0x17a0 [ 85.618573][ T5482] handshake_init+0x2b/0xc0 [ 85.623190][ T5482] do_one_initcall+0x234/0x810 [ 85.627984][ T5482] do_initcall_level+0x157/0x210 [ 85.633184][ T5482] page_owner free stack trace missing [ 85.638653][ T5482] [ 85.641071][ T5482] Memory state around the buggy address: [ 85.646711][ T5482] ffff88814b62a900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.654789][ T5482] ffff88814b62a980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.662864][ T5482] >ffff88814b62aa00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 85.670939][ T5482] ^ [ 85.676326][ T5482] ffff88814b62aa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.684412][ T5482] ffff88814b62ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.692489][ T5482] ================================================================== [ 85.708862][ T5482] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.716202][ T5482] CPU: 0 PID: 5482 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00200-g3bd7d7488169-dirty #0 [ 85.727154][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 85.737660][ T5482] Call Trace: [ 85.740960][ T5482] [ 85.743904][ T5482] dump_stack_lvl+0x1e7/0x2d0 [ 85.748613][ T5482] ? nf_tcp_handle_invalid+0x650/0x650 [ 85.754104][ T5482] ? panic+0x850/0x850 [ 85.758195][ T5482] ? vscnprintf+0x5d/0x80 [ 85.762543][ T5482] panic+0x349/0x850 [ 85.766461][ T5482] ? check_panic_on_warn+0x21/0xa0 [ 85.771595][ T5482] ? __memcpy_flushcache+0x2b0/0x2b0 [ 85.776999][ T5482] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 85.783007][ T5482] ? _raw_spin_unlock+0x40/0x40 [ 85.787884][ T5482] ? print_report+0x4fb/0x540 [ 85.792592][ T5482] check_panic_on_warn+0x82/0xa0 [ 85.797554][ T5482] ? strlen+0x58/0x70 [ 85.801559][ T5482] end_report+0x6e/0x140 [ 85.805839][ T5482] kasan_report+0x153/0x170 [ 85.810367][ T5482] ? strlen+0x58/0x70 [ 85.814356][ T5482] strlen+0x58/0x70 [ 85.818186][ T5482] getname_kernel+0x1d/0x2e0 [ 85.823044][ T5482] kern_path+0x1d/0x50 [ 85.827106][ T5482] bdev_open_by_path+0xd1/0x540 [ 85.831952][ T5482] ? blkdev_put+0x770/0x770 [ 85.836447][ T5482] btrfs_dev_replace_by_ioctl+0x41b/0x2010 [ 85.842339][ T5482] ? btrfs_finish_block_group_to_copy+0x480/0x480 [ 85.848784][ T5482] ? btrfs_ioctl_dev_replace+0x2be/0x390 [ 85.854492][ T5482] ? do_raw_spin_lock+0x14e/0x370 [ 85.859508][ T5482] ? __lock_acquire+0x1fd0/0x1fd0 [ 85.864613][ T5482] ? do_raw_spin_unlock+0x13b/0x8b0 [ 85.869893][ T5482] btrfs_ioctl_dev_replace+0x2c9/0x390 [ 85.875344][ T5482] ? btrfs_ioctl_get_supported_features+0x50/0x50 [ 85.881839][ T5482] __se_sys_ioctl+0xf8/0x170 [ 85.886424][ T5482] do_syscall_64+0x45/0x110 [ 85.890937][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 85.896851][ T5482] RIP: 0033:0x7f617807cba9 [ 85.901255][ T5482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.920961][ T5482] RSP: 002b:00007f6178dd40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.929546][ T5482] RAX: ffffffffffffffda RBX: 00007f617819bf80 RCX: 00007f617807cba9 [ 85.937598][ T5482] RDX: 0000000020000540 RSI: 00000000ca289435 RDI: 0000000000000005 [ 85.945554][ T5482] RBP: 00007f61780c847a R08: 0000000000000000 R09: 0000000000000000 [ 85.953601][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.961560][ T5482] R13: 000000000000000b R14: 00007f617819bf80 R15: 00007ffcbe283518 [ 85.969524][ T5482] [ 85.972747][ T5482] Kernel Offset: disabled [ 85.977064][ T5482] Rebooting in 86400 seconds..