[ 81.919563][ T27] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. 2023/11/28 23:07:27 ignoring optional flag "sandboxArg"="0" 2023/11/28 23:07:28 parsed 1 programs 2023/11/28 23:07:29 executed programs: 0 [ 86.701991][ T5405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.757524][ T5059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.765865][ T5059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.774446][ T5059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.783405][ T5059] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.792332][ T5059] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.800014][ T5059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.926773][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 86.985359][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.992720][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.000072][ T5412] bridge_slave_0: entered allmulticast mode [ 87.007034][ T5412] bridge_slave_0: entered promiscuous mode [ 87.015339][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.022788][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.030497][ T5412] bridge_slave_1: entered allmulticast mode [ 87.037348][ T5412] bridge_slave_1: entered promiscuous mode [ 87.066175][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.078134][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.107660][ T5412] team0: Port device team_slave_0 added [ 87.115477][ T5412] team0: Port device team_slave_1 added [ 87.139275][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.146402][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.172981][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.186289][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.193476][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.222117][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.261823][ T5412] hsr_slave_0: entered promiscuous mode [ 87.268583][ T5412] hsr_slave_1: entered promiscuous mode [ 88.081962][ T5412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.098687][ T5412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.110874][ T5412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.122526][ T5412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.224334][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.256229][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.273115][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.280450][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.299042][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.306334][ T5055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.550613][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.612580][ T5412] veth0_vlan: entered promiscuous mode [ 88.630572][ T5412] veth1_vlan: entered promiscuous mode [ 88.670808][ T5412] veth0_macvtap: entered promiscuous mode [ 88.683148][ T5412] veth1_macvtap: entered promiscuous mode [ 88.709945][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.727185][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.743407][ T5412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.755191][ T5412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.767161][ T5412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.778004][ T5412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.868202][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.883496][ T5059] Bluetooth: hci0: command 0x0409 tx timeout [ 88.890599][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.922128][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.930784][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.015391][ T5478] loop0: detected capacity change from 0 to 2048 [ 89.056056][ T5478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.119939][ T5478] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2263: inode #18: comm syz-executor.0: corrupted in-inode xattr: bad magic number in in-inode xattr [ 89.173206][ T5412] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.307556][ T5494] loop0: detected capacity change from 0 to 2048 [ 89.324645][ T5494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.372944][ T5494] ================================================================== [ 89.381142][ T5494] BUG: KASAN: slab-use-after-free in ext4_convert_inline_data_nolock+0x31a/0xe20 [ 89.390542][ T5494] Read of size 20 at addr ffff8880187b61a3 by task syz-executor.0/5494 [ 89.398891][ T5494] [ 89.401235][ T5494] CPU: 1 PID: 5494 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-g18d46e76d7c2 #0 [ 89.411236][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 89.421662][ T5494] Call Trace: [ 89.424961][ T5494] [ 89.427902][ T5494] dump_stack_lvl+0x1e7/0x2d0 [ 89.432793][ T5494] ? nf_tcp_handle_invalid+0x650/0x650 [ 89.438621][ T5494] ? panic+0x850/0x850 [ 89.442818][ T5494] ? _printk+0xd5/0x120 [ 89.447175][ T5494] print_report+0x163/0x540 [ 89.451964][ T5494] ? __virt_addr_valid+0x22f/0x2e0 [ 89.457458][ T5494] ? __phys_addr+0xba/0x170 [ 89.462119][ T5494] ? ext4_convert_inline_data_nolock+0x31a/0xe20 [ 89.469451][ T5494] kasan_report+0x142/0x170 [ 89.474249][ T5494] ? ext4_convert_inline_data_nolock+0x31a/0xe20 [ 89.481628][ T5494] kasan_check_range+0x27e/0x290 [ 89.487729][ T5494] ? ext4_convert_inline_data_nolock+0x31a/0xe20 [ 89.494452][ T5494] __asan_memcpy+0x29/0x70 [ 89.499642][ T5494] ext4_convert_inline_data_nolock+0x31a/0xe20 [ 89.506446][ T5494] ? read_lock_is_recursive+0x20/0x20 [ 89.513046][ T5494] ? __down_write_common+0x161/0x200 [ 89.518571][ T5494] ? ext4_add_dirent_to_inline+0x4b0/0x4b0 [ 89.524933][ T5494] ? ext4_journal_check_start+0x175/0x250 [ 89.531319][ T5494] ? __ext4_journal_start_sb+0x26b/0x5b0 [ 89.537355][ T5494] ext4_convert_inline_data+0x4da/0x620 [ 89.543118][ T5494] ? ext4_inline_data_truncate+0xca0/0xca0 [ 89.549252][ T5494] ext4_fallocate+0x14f/0x1f60 [ 89.554671][ T5494] ? rcu_read_lock_any_held+0xb7/0x160 [ 89.560245][ T5494] ? ext4_ext_truncate+0x2b0/0x2b0 [ 89.565486][ T5494] vfs_fallocate+0x551/0x6b0 [ 89.570192][ T5494] __x64_sys_fallocate+0xbd/0x100 [ 89.575263][ T5494] do_syscall_64+0x45/0x110 [ 89.579826][ T5494] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 89.585747][ T5494] RIP: 0033:0x7f95e147cae9 [ 89.590530][ T5494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.610514][ T5494] RSP: 002b:00007f95e22600c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 89.618951][ T5494] RAX: ffffffffffffffda RBX: 00007f95e159bf80 RCX: 00007f95e147cae9 [ 89.627148][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 89.635136][ T5494] RBP: 00007f95e14c847a R08: 0000000000000000 R09: 0000000000000000 [ 89.643131][ T5494] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 89.651737][ T5494] R13: 000000000000000b R14: 00007f95e159bf80 R15: 00007ffe36919048 [ 89.659738][ T5494] [ 89.662807][ T5494] [ 89.665199][ T5494] Allocated by task 5317: [ 89.669715][ T5494] kasan_set_track+0x4f/0x70 [ 89.674424][ T5494] __kasan_slab_alloc+0x66/0x70 [ 89.679481][ T5494] slab_post_alloc_hook+0x6c/0x3c0 [ 89.684964][ T5494] kmem_cache_alloc+0x19e/0x2b0 [ 89.689928][ T5494] getname_flags+0xbc/0x4f0 [ 89.694457][ T5494] do_sys_openat2+0xd2/0x1d0 [ 89.699065][ T5494] __x64_sys_openat+0x247/0x290 [ 89.703939][ T5494] do_syscall_64+0x45/0x110 [ 89.708668][ T5494] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 89.714586][ T5494] [ 89.716910][ T5494] Freed by task 5317: [ 89.721058][ T5494] kasan_set_track+0x4f/0x70 [ 89.725852][ T5494] kasan_save_free_info+0x28/0x40 [ 89.730900][ T5494] ____kasan_slab_free+0xd6/0x120 [ 89.736628][ T5494] kmem_cache_free+0x299/0x470 [ 89.741679][ T5494] do_sys_openat2+0x17a/0x1d0 [ 89.746376][ T5494] __x64_sys_openat+0x247/0x290 [ 89.751211][ T5494] do_syscall_64+0x45/0x110 [ 89.755696][ T5494] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 89.761677][ T5494] [ 89.764158][ T5494] The buggy address belongs to the object at ffff8880187b5500 [ 89.764158][ T5494] which belongs to the cache names_cache of size 4096 [ 89.778566][ T5494] The buggy address is located 3235 bytes inside of [ 89.778566][ T5494] freed 4096-byte region [ffff8880187b5500, ffff8880187b6500) [ 89.792635][ T5494] [ 89.795073][ T5494] The buggy address belongs to the physical page: [ 89.801565][ T5494] page:ffffea000061ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x187b0 [ 89.812595][ T5494] head:ffffea000061ec00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.821523][ T5494] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.830122][ T5494] page_type: 0xffffffff() [ 89.834619][ T5494] raw: 00fff00000000840 ffff888014e528c0 0000000000000000 dead000000000001 [ 89.843840][ T5494] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 89.852414][ T5494] page dumped because: kasan: bad access detected [ 89.858939][ T5494] page_owner tracks the page as allocated [ 89.864940][ T5494] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 334, tgid 334 (kworker/u4:1), ts 6399601346, free_ts 0 [ 89.885886][ T5494] post_alloc_hook+0x1e6/0x210 [ 89.890985][ T5494] get_page_from_freelist+0x33ea/0x3570 [ 89.896866][ T5494] __alloc_pages+0x255/0x680 [ 89.901470][ T5494] alloc_pages_mpol+0x3de/0x640 [ 89.906847][ T5494] alloc_slab_page+0x6a/0x170 [ 89.911615][ T5494] new_slab+0x84/0x2f0 [ 89.915801][ T5494] ___slab_alloc+0xc8a/0x1330 [ 89.920593][ T5494] kmem_cache_alloc+0x1e9/0x2b0 [ 89.925456][ T5494] getname_kernel+0x59/0x2e0 [ 89.930104][ T5494] kernel_execve+0x71/0xa20 [ 89.934605][ T5494] call_usermodehelper_exec_async+0x233/0x370 [ 89.940762][ T5494] ret_from_fork+0x48/0x80 [ 89.945173][ T5494] ret_from_fork_asm+0x11/0x20 [ 89.949924][ T5494] page_owner free stack trace missing [ 89.955274][ T5494] [ 89.957583][ T5494] Memory state around the buggy address: [ 89.963196][ T5494] ffff8880187b6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.971526][ T5494] ffff8880187b6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.979669][ T5494] >ffff8880187b6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.988074][ T5494] ^ [ 89.993434][ T5494] ffff8880187b6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.001944][ T5494] ffff8880187b6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.010259][ T5494] ================================================================== [ 90.061083][ T5494] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.068678][ T5494] CPU: 1 PID: 5494 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-g18d46e76d7c2 #0 [ 90.078766][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 90.089113][ T5494] Call Trace: [ 90.092505][ T5494] [ 90.095489][ T5494] dump_stack_lvl+0x1e7/0x2d0 [ 90.100540][ T5494] ? nf_tcp_handle_invalid+0x650/0x650 [ 90.106639][ T5494] ? panic+0x850/0x850 [ 90.110913][ T5494] ? vscnprintf+0x5d/0x80 [ 90.115265][ T5494] panic+0x349/0x850 [ 90.119447][ T5494] ? check_panic_on_warn+0x21/0xa0 [ 90.124717][ T5494] ? __memcpy_flushcache+0x2b0/0x2b0 [ 90.130119][ T5494] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 90.136216][ T5494] ? _raw_spin_unlock+0x40/0x40 [ 90.141123][ T5494] ? print_report+0x4fb/0x540 [ 90.146083][ T5494] check_panic_on_warn+0x82/0xa0 [ 90.151570][ T5494] ? ext4_convert_inline_data_nolock+0x31a/0xe20 [ 90.158025][ T5494] end_report+0x6e/0x140 [ 90.162298][ T5494] kasan_report+0x153/0x170 [ 90.167012][ T5494] ? ext4_convert_inline_data_nolock+0x31a/0xe20 [ 90.173454][ T5494] kasan_check_range+0x27e/0x290 [ 90.178745][ T5494] ? ext4_convert_inline_data_nolock+0x31a/0xe20 [ 90.185253][ T5494] __asan_memcpy+0x29/0x70 [ 90.189847][ T5494] ext4_convert_inline_data_nolock+0x31a/0xe20 [ 90.196081][ T5494] ? read_lock_is_recursive+0x20/0x20 [ 90.201478][ T5494] ? __down_write_common+0x161/0x200 [ 90.206778][ T5494] ? ext4_add_dirent_to_inline+0x4b0/0x4b0 [ 90.212664][ T5494] ? ext4_journal_check_start+0x175/0x250 [ 90.218470][ T5494] ? __ext4_journal_start_sb+0x26b/0x5b0 [ 90.224184][ T5494] ext4_convert_inline_data+0x4da/0x620 [ 90.229901][ T5494] ? ext4_inline_data_truncate+0xca0/0xca0 [ 90.235966][ T5494] ext4_fallocate+0x14f/0x1f60 [ 90.240724][ T5494] ? rcu_read_lock_any_held+0xb7/0x160 [ 90.246172][ T5494] ? ext4_ext_truncate+0x2b0/0x2b0 [ 90.251275][ T5494] vfs_fallocate+0x551/0x6b0 [ 90.256004][ T5494] __x64_sys_fallocate+0xbd/0x100 [ 90.261160][ T5494] do_syscall_64+0x45/0x110 [ 90.265852][ T5494] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 90.271759][ T5494] RIP: 0033:0x7f95e147cae9 [ 90.276190][ T5494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.296484][ T5494] RSP: 002b:00007f95e22600c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 90.305082][ T5494] RAX: ffffffffffffffda RBX: 00007f95e159bf80 RCX: 00007f95e147cae9 [ 90.313917][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 90.323281][ T5494] RBP: 00007f95e14c847a R08: 0000000000000000 R09: 0000000000000000 [ 90.331680][ T5494] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 90.339644][ T5494] R13: 000000000000000b R14: 00007f95e159bf80 R15: 00007ffe36919048 [ 90.347875][ T5494] [ 90.351117][ T5494] Kernel Offset: disabled [ 90.355628][ T5494] Rebooting in 86400 seconds..