Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts. 2023/10/25 23:06:42 ignoring optional flag "sandboxArg"="0" 2023/10/25 23:06:43 parsed 1 programs 2023/10/25 23:06:43 executed programs: 0 [ 99.045593][ T4465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.053750][ T4465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.061871][ T4465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.070774][ T4465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.079239][ T4465] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.086812][ T4465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.240383][ T5419] chnl_net:caif_netlink_parms(): no params data found [ 99.316017][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.323182][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.330795][ T5419] bridge_slave_0: entered allmulticast mode [ 99.337924][ T5419] bridge_slave_0: entered promiscuous mode [ 99.346872][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.353973][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.361607][ T5419] bridge_slave_1: entered allmulticast mode [ 99.368856][ T5419] bridge_slave_1: entered promiscuous mode [ 99.402308][ T5419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.414669][ T5419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.450754][ T5419] team0: Port device team_slave_0 added [ 99.459658][ T5419] team0: Port device team_slave_1 added [ 99.489048][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.496076][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.522393][ T5419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.538409][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.545572][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.571779][ T5419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.617189][ T5419] hsr_slave_0: entered promiscuous mode [ 99.623545][ T5419] hsr_slave_1: entered promiscuous mode [ 100.550614][ T5419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.563519][ T5419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.579895][ T5419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.592710][ T5419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.734737][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.765838][ T5419] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.782132][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.789481][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.820328][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.827777][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.104625][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.116072][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 101.185338][ T5419] veth0_vlan: entered promiscuous mode [ 101.204191][ T5419] veth1_vlan: entered promiscuous mode [ 101.251364][ T5419] veth0_macvtap: entered promiscuous mode [ 101.264346][ T5419] veth1_macvtap: entered promiscuous mode [ 101.298728][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.318370][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.338121][ T5419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.350251][ T5419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.360723][ T5419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.371433][ T5419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.477300][ T5082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.501161][ T5082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.550364][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.561737][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.672850][ T5482] loop0: detected capacity change from 0 to 32768 [ 101.779956][ T111] ================================================================== [ 101.788124][ T111] BUG: KASAN: use-after-free in dbJoin+0x23e/0x250 [ 101.794917][ T111] Read of size 1 at addr ffff888170ddba4c by task jfsCommit/111 [ 101.802569][ T111] [ 101.804916][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted 6.6.0-rc7-next-20231025-syzkaller-14992-gfe1998aa935b #0 [ 101.815953][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 101.826040][ T111] Call Trace: [ 101.829336][ T111] [ 101.832283][ T111] dump_stack_lvl+0xd9/0x1b0 [ 101.836997][ T111] print_report+0xc3/0x620 [ 101.841531][ T111] ? __virt_addr_valid+0x5e/0x580 [ 101.846585][ T111] ? __phys_addr+0xc6/0x140 [ 101.851118][ T111] kasan_report+0xd9/0x110 [ 101.855572][ T111] ? dbJoin+0x23e/0x250 [ 101.859754][ T111] ? dbJoin+0x23e/0x250 [ 101.863936][ T111] dbJoin+0x23e/0x250 [ 101.867945][ T111] dbFreeBits+0x15a/0x8e0 [ 101.872301][ T111] dbFreeDmap+0x62/0x1a0 [ 101.876599][ T111] dbFree+0x266/0x550 [ 101.880609][ T111] txFreeMap+0x9a9/0xe60 [ 101.884886][ T111] txUpdateMap+0x3f1/0xd10 [ 101.889352][ T111] ? txFreeMap+0xe60/0xe60 [ 101.893801][ T111] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 101.899643][ T111] jfs_lazycommit+0x5d8/0xb10 [ 101.904362][ T111] ? txCommit+0x4fd0/0x4fd0 [ 101.908893][ T111] ? wake_up_state+0x10/0x10 [ 101.913503][ T111] ? lockdep_hardirqs_on+0x7c/0x100 [ 101.918730][ T111] ? __kthread_parkme+0x148/0x220 [ 101.923778][ T111] ? txCommit+0x4fd0/0x4fd0 [ 101.928308][ T111] kthread+0x337/0x440 [ 101.932410][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.937637][ T111] ? kthread_complete_and_exit+0x40/0x40 [ 101.943305][ T111] ret_from_fork+0x45/0x80 [ 101.947744][ T111] ? kthread_complete_and_exit+0x40/0x40 [ 101.953395][ T111] ret_from_fork_asm+0x11/0x20 [ 101.958201][ T111] [ 101.961230][ T111] [ 101.963555][ T111] The buggy address belongs to the physical page: [ 101.970066][ T111] page:ffffea0005c376c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170ddb [ 101.980320][ T111] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 101.987532][ T111] page_type: 0xffffffff() [ 101.991885][ T111] raw: 057ff00000000000 ffffea0005c376c8 ffffea0005c376c8 0000000000000000 [ 102.000572][ T111] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 102.009251][ T111] page dumped because: kasan: bad access detected [ 102.015688][ T111] page_owner info is not present (never set?) [ 102.021755][ T111] [ 102.024080][ T111] Memory state around the buggy address: [ 102.029714][ T111] ffff888170ddb900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.037800][ T111] ffff888170ddb980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.045872][ T111] >ffff888170ddba00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.053938][ T111] ^ [ 102.060366][ T111] ffff888170ddba80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.068458][ T111] ffff888170ddbb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.076527][ T111] ================================================================== [ 102.095420][ T111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.102669][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted 6.6.0-rc7-next-20231025-syzkaller-14992-gfe1998aa935b #0 [ 102.113703][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 102.123775][ T111] Call Trace: [ 102.127065][ T111] [ 102.130003][ T111] dump_stack_lvl+0xd9/0x1b0 [ 102.134615][ T111] panic+0x6dc/0x790 [ 102.138542][ T111] ? panic_smp_self_stop+0xa0/0xa0 [ 102.143682][ T111] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.149866][ T111] ? preempt_schedule_thunk+0x1a/0x30 [ 102.155275][ T111] ? preempt_schedule_common+0x44/0xc0 [ 102.160864][ T111] ? check_panic_on_warn+0x1f/0xb0 [ 102.166007][ T111] check_panic_on_warn+0xab/0xb0 [ 102.170975][ T111] end_report+0x117/0x160 [ 102.175418][ T111] kasan_report+0xe9/0x110 [ 102.179873][ T111] ? dbJoin+0x23e/0x250 [ 102.184052][ T111] ? dbJoin+0x23e/0x250 [ 102.188231][ T111] dbJoin+0x23e/0x250 [ 102.192247][ T111] dbFreeBits+0x15a/0x8e0 [ 102.196609][ T111] dbFreeDmap+0x62/0x1a0 [ 102.200876][ T111] dbFree+0x266/0x550 [ 102.204879][ T111] txFreeMap+0x9a9/0xe60 [ 102.209145][ T111] txUpdateMap+0x3f1/0xd10 [ 102.213574][ T111] ? txFreeMap+0xe60/0xe60 [ 102.217998][ T111] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 102.223811][ T111] jfs_lazycommit+0x5d8/0xb10 [ 102.228497][ T111] ? txCommit+0x4fd0/0x4fd0 [ 102.233003][ T111] ? wake_up_state+0x10/0x10 [ 102.237588][ T111] ? lockdep_hardirqs_on+0x7c/0x100 [ 102.242790][ T111] ? __kthread_parkme+0x148/0x220 [ 102.247815][ T111] ? txCommit+0x4fd0/0x4fd0 [ 102.252317][ T111] kthread+0x337/0x440 [ 102.256399][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.261639][ T111] ? kthread_complete_and_exit+0x40/0x40 [ 102.267271][ T111] ret_from_fork+0x45/0x80 [ 102.271684][ T111] ? kthread_complete_and_exit+0x40/0x40 [ 102.277314][ T111] ret_from_fork_asm+0x11/0x20 [ 102.282087][ T111] [ 102.285285][ T111] Kernel Offset: disabled [ 102.289594][ T111] Rebooting in 86400 seconds..