Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. 2024/11/14 14:38:55 ignoring optional flag "sandboxArg"="0" 2024/11/14 14:38:55 ignoring optional flag "type"="gce" 2024/11/14 14:38:55 parsed 1 programs [ 102.424545][ T4548] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 104.305046][ T368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.320741][ T368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.332223][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.335189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.348241][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.358083][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.307460][ T4603] chnl_net:caif_netlink_parms(): no params data found [ 105.371580][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.378863][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.387478][ T4603] device bridge_slave_0 entered promiscuous mode [ 105.396830][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.403978][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.413498][ T4603] device bridge_slave_1 entered promiscuous mode [ 105.445845][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.459575][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.492630][ T4603] team0: Port device team_slave_0 added [ 105.502154][ T4603] team0: Port device team_slave_1 added [ 105.530488][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.537686][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.563745][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.576213][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.583355][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.609724][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.650976][ T4603] device hsr_slave_0 entered promiscuous mode [ 105.658224][ T4603] device hsr_slave_1 entered promiscuous mode [ 106.450840][ T4603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.461756][ T4603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.476375][ T4603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.486885][ T4603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.593718][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.645349][ T4603] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.653080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.664291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.677144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.689963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.698629][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.705860][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.718041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.738130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.753298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.763283][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.770432][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.812402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.827394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.848096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.859048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.869248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.879749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.923588][ T4603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.935545][ T4603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.947707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.956954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.965369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.974291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.984602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.993360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.139607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.150838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.196932][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.221762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.236603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.275082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.284462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.295257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.305260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.319972][ T4603] device veth0_vlan entered promiscuous mode [ 107.361382][ T4603] device veth1_vlan entered promiscuous mode [ 107.390659][ T4603] device veth0_macvtap entered promiscuous mode [ 107.403474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.415169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.425727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.444064][ T4603] device veth1_macvtap entered promiscuous mode [ 107.477176][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.485921][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.495323][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.507961][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.523031][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.539393][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.566415][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.579541][ T4603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.590125][ T4603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.600543][ T4603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.610459][ T4603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/11/14 14:39:05 executed programs: 0 [ 108.417025][ T4727] chnl_net:caif_netlink_parms(): no params data found [ 108.536767][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.544256][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.555934][ T4727] device bridge_slave_0 entered promiscuous mode [ 108.570462][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.577919][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.586217][ T4727] device bridge_slave_1 entered promiscuous mode [ 108.624616][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.637937][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.674782][ T4727] team0: Port device team_slave_0 added [ 108.683198][ T4727] team0: Port device team_slave_1 added [ 108.735991][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.743168][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.772640][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.801689][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.815486][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.845093][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.921233][ T4727] device hsr_slave_0 entered promiscuous mode [ 108.936242][ T4727] device hsr_slave_1 entered promiscuous mode [ 108.942990][ T4727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.954223][ T4727] Cannot create hsr debugfs directory [ 109.097282][ T4727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.305856][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 112.111973][ T4727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.385752][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 112.769987][ T4727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.842323][ T4727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.923259][ T4727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.933084][ T4727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.942544][ T4727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.952305][ T4727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.021831][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.043285][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.052901][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.073953][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.083591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.092986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.102074][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.109185][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.118189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.139856][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.148873][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.157875][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.165108][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.186412][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.199410][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.212294][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.224379][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.234542][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.254590][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.263847][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.275363][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.284539][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.300287][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.311852][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.320035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.328940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.341773][ T1224] device hsr_slave_0 left promiscuous mode [ 113.349217][ T1224] device hsr_slave_1 left promiscuous mode [ 113.356424][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.363852][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.372090][ T1224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.379602][ T1224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.387392][ T1224] device bridge_slave_1 left promiscuous mode [ 113.393597][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.402488][ T1224] device bridge_slave_0 left promiscuous mode [ 113.409324][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.421371][ T1224] device veth1_macvtap left promiscuous mode [ 113.427966][ T1224] device veth0_macvtap left promiscuous mode [ 113.434072][ T1224] device veth1_vlan left promiscuous mode [ 113.440053][ T1224] device veth0_vlan left promiscuous mode [ 113.597263][ T1224] team0 (unregistering): Port device team_slave_1 removed [ 113.610358][ T1224] team0 (unregistering): Port device team_slave_0 removed [ 113.622459][ T1224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.639657][ T1224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.705237][ T1224] bond0 (unregistering): Released all slaves [ 113.854674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.862611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.887418][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.904798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.914088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.935845][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.945226][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.954337][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.962845][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.973292][ T4727] device veth0_vlan entered promiscuous mode [ 113.985035][ T4727] device veth1_vlan entered promiscuous mode [ 114.010873][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.019119][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.028240][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.037606][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.049777][ T4727] device veth0_macvtap entered promiscuous mode [ 114.060373][ T4727] device veth1_macvtap entered promiscuous mode [ 114.084799][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.092198][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.106330][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.118761][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.127793][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.137950][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.149636][ T4727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.159717][ T4727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.169109][ T4727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.179650][ T4727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.259309][ T368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.275601][ T368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.284917][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2024/11/14 14:39:11 executed programs: 2 [ 114.313997][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.324354][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.335659][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.410401][ T4984] loop0: detected capacity change from 0 to 1024 [ 114.449486][ T4984] ======================================================= [ 114.449486][ T4984] WARNING: The mand mount option has been deprecated and [ 114.449486][ T4984] and is ignored by this kernel. Remove the mand [ 114.449486][ T4984] option from the mount to silence this warning. [ 114.449486][ T4984] ======================================================= [ 114.487029][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 114.607696][ T4984] loop_set_block_size: loop0 () has still dirty pages (nrpages=7) [ 114.733612][ T4986] loop0: detected capacity change from 0 to 1024 [ 114.796193][ T4986] loop_set_block_size: loop0 () has still dirty pages (nrpages=3) [ 114.870554][ T4988] loop0: detected capacity change from 0 to 1024 [ 114.973152][ T154] ================================================================== [ 114.981504][ T154] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x8e3/0x1230 [ 114.990232][ T154] Read of size 2048 at addr ffff88807a1d8800 by task kworker/u4:2/154 [ 114.998394][ T154] [ 115.000736][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted 5.15.172-syzkaller #0 [ 115.008983][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.019136][ T154] Workqueue: loop0 loop_workfn [ 115.024014][ T154] Call Trace: [ 115.027391][ T154] [ 115.030345][ T154] dump_stack_lvl+0x1e3/0x2d0 [ 115.035054][ T154] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 115.040709][ T154] ? _printk+0xd1/0x120 [ 115.044888][ T154] ? __wake_up_klogd+0xcc/0x100 [ 115.049758][ T154] ? panic+0x860/0x860 [ 115.053840][ T154] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 115.059327][ T154] print_address_description+0x63/0x3b0 [ 115.064897][ T154] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.070982][ T154] kasan_report+0x16b/0x1c0 [ 115.075500][ T154] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.081509][ T154] kasan_check_range+0x27e/0x290 [ 115.086454][ T154] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.092537][ T154] memcpy+0x25/0x60 [ 115.096361][ T154] copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.102198][ T154] ? shmem_getpage+0xa0/0xa0 [ 115.106800][ T154] ? pipe_zero+0x4f0/0x4f0 [ 115.111227][ T154] ? __lock_acquire+0x1295/0x1ff0 [ 115.116281][ T154] generic_perform_write+0x33a/0x5b0 [ 115.121597][ T154] ? grab_cache_page_write_begin+0x90/0x90 [ 115.127438][ T154] ? file_remove_privs+0x610/0x610 [ 115.132585][ T154] ? rwsem_write_trylock+0x166/0x210 [ 115.137928][ T154] __generic_file_write_iter+0x243/0x4f0 [ 115.143612][ T154] generic_file_write_iter+0xa7/0x1b0 [ 115.149203][ T154] do_iter_readv_writev+0x594/0x7a0 [ 115.154513][ T154] ? generic_file_rw_checks+0x260/0x260 [ 115.160087][ T154] ? common_file_perm+0x17d/0x1d0 [ 115.165233][ T154] ? fsnotify_perm+0x64/0x590 [ 115.169945][ T154] ? security_file_permission+0x75/0xa0 [ 115.175533][ T154] do_iter_write+0x1e6/0x760 [ 115.180150][ T154] ? rcu_read_lock_any_held+0xb3/0x160 [ 115.185728][ T154] ? vfs_iter_write+0x69/0xa0 [ 115.190438][ T154] lo_write_bvec+0x297/0x740 [ 115.195052][ T154] ? lo_rw_aio+0xd80/0xd80 [ 115.199526][ T154] ? kthread_associate_blkcg+0x424/0x590 [ 115.205201][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 115.210420][ T154] loop_process_work+0x2309/0x2af0 [ 115.215569][ T154] ? rcu_lock_release+0x20/0x20 [ 115.220439][ T154] ? read_lock_is_recursive+0x10/0x10 [ 115.225818][ T154] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 115.231800][ T154] ? print_irqtrace_events+0x210/0x210 [ 115.237254][ T154] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.243153][ T154] ? do_raw_spin_unlock+0x137/0x8b0 [ 115.248361][ T154] process_one_work+0x8a1/0x10c0 [ 115.253320][ T154] ? worker_detach_from_pool+0x260/0x260 [ 115.258955][ T154] ? _raw_spin_lock_irqsave+0x120/0x120 [ 115.264507][ T154] ? kthread_data+0x4e/0xc0 [ 115.269033][ T154] ? wq_worker_running+0x97/0x170 [ 115.274059][ T154] worker_thread+0xaca/0x1280 [ 115.278829][ T154] kthread+0x3f6/0x4f0 [ 115.282900][ T154] ? rcu_lock_release+0x20/0x20 [ 115.287751][ T154] ? kthread_blkcg+0xd0/0xd0 [ 115.292436][ T154] ret_from_fork+0x1f/0x30 [ 115.296862][ T154] [ 115.299881][ T154] [ 115.302198][ T154] Allocated by task 4988: [ 115.306517][ T154] ____kasan_kmalloc+0xba/0xf0 [ 115.311301][ T154] __kmalloc+0x168/0x300 [ 115.315540][ T154] hfsplus_read_wrapper+0x4e3/0x13b0 [ 115.320821][ T154] hfsplus_fill_super+0x38a/0x1c90 [ 115.326029][ T154] mount_bdev+0x2c9/0x3f0 [ 115.330394][ T154] legacy_get_tree+0xeb/0x180 [ 115.335066][ T154] vfs_get_tree+0x88/0x270 [ 115.339490][ T154] do_new_mount+0x2ba/0xb40 [ 115.343986][ T154] __se_sys_mount+0x2d5/0x3c0 [ 115.348658][ T154] do_syscall_64+0x3b/0xb0 [ 115.353158][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.359052][ T154] [ 115.361368][ T154] The buggy address belongs to the object at ffff88807a1d8800 [ 115.361368][ T154] which belongs to the cache kmalloc-512 of size 512 [ 115.375410][ T154] The buggy address is located 0 bytes inside of [ 115.375410][ T154] 512-byte region [ffff88807a1d8800, ffff88807a1d8a00) [ 115.388503][ T154] The buggy address belongs to the page: [ 115.394132][ T154] page:ffffea0001e87600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a1d8 [ 115.404377][ T154] head:ffffea0001e87600 order:2 compound_mapcount:0 compound_pincount:0 [ 115.412697][ T154] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 115.420772][ T154] raw: 00fff00000010200 0000000000000000 0000000500000001 ffff888017041c80 [ 115.429358][ T154] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 115.438110][ T154] page dumped because: kasan: bad access detected [ 115.444523][ T154] page_owner tracks the page as allocated [ 115.450331][ T154] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 368, ts 80795079164, free_ts 80787192276 [ 115.471689][ T154] get_page_from_freelist+0x3b78/0x3d40 [ 115.477236][ T154] __alloc_pages+0x272/0x700 [ 115.481833][ T154] new_slab+0xbb/0x4b0 [ 115.485921][ T154] ___slab_alloc+0x6f6/0xe10 [ 115.490523][ T154] __kmalloc_node_track_caller+0x1f6/0x390 [ 115.496335][ T154] pskb_expand_head+0x111/0x1130 [ 115.501270][ T154] netlink_trim+0x183/0x220 [ 115.505783][ T154] netlink_broadcast_filtered+0x62/0x11a0 [ 115.511567][ T154] netlink_broadcast+0x35/0x50 [ 115.516361][ T154] devlink_port_type_eth_set+0x27e/0x3b0 [ 115.522007][ T154] __nsim_dev_port_add+0x884/0xb90 [ 115.527115][ T154] nsim_dev_reload_up+0x6c9/0x970 [ 115.532132][ T154] devlink_reload+0x31a/0x750 [ 115.536894][ T154] devlink_pernet_pre_exit+0x1ca/0x350 [ 115.542359][ T154] cleanup_net+0x59c/0xb60 [ 115.546781][ T154] process_one_work+0x8a1/0x10c0 [ 115.551745][ T154] page last free stack trace: [ 115.556547][ T154] free_unref_page_prepare+0xc34/0xcf0 [ 115.562004][ T154] free_unref_page+0x95/0x2d0 [ 115.566673][ T154] stack_depot_save+0x3ef/0x440 [ 115.571521][ T154] ____kasan_kmalloc+0xd1/0xf0 [ 115.576379][ T154] kmem_cache_alloc_trace+0x143/0x290 [ 115.581835][ T154] batadv_hard_if_event+0xe8d/0x17a0 [ 115.587121][ T154] raw_notifier_call_chain+0xd0/0x170 [ 115.592489][ T154] call_netdevice_notifiers+0x145/0x1b0 [ 115.598030][ T154] register_netdevice+0x12e8/0x1720 [ 115.603224][ T154] nsim_create+0x329/0x3e0 [ 115.607648][ T154] __nsim_dev_port_add+0x6de/0xb90 [ 115.612773][ T154] nsim_dev_reload_up+0x6c9/0x970 [ 115.617807][ T154] devlink_reload+0x31a/0x750 [ 115.622495][ T154] devlink_pernet_pre_exit+0x1ca/0x350 [ 115.627975][ T154] cleanup_net+0x59c/0xb60 [ 115.632389][ T154] process_one_work+0x8a1/0x10c0 [ 115.637572][ T154] [ 115.639887][ T154] Memory state around the buggy address: [ 115.645528][ T154] ffff88807a1d8900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.653582][ T154] ffff88807a1d8980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.661643][ T154] >ffff88807a1d8a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.669870][ T154] ^ [ 115.673935][ T154] ffff88807a1d8a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.682004][ T154] ffff88807a1d8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 115.690422][ T154] ================================================================== [ 115.698614][ T154] Disabling lock debugging due to kernel taint [ 115.705578][ T154] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.712981][ T154] CPU: 1 PID: 154 Comm: kworker/u4:2 Tainted: G B 5.15.172-syzkaller #0 [ 115.722717][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.732878][ T154] Workqueue: loop0 loop_workfn [ 115.737991][ T154] Call Trace: [ 115.741284][ T154] [ 115.744220][ T154] dump_stack_lvl+0x1e3/0x2d0 [ 115.748916][ T154] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 115.754573][ T154] ? panic+0x860/0x860 [ 115.758668][ T154] ? rcu_is_watching+0x11/0xa0 [ 115.763429][ T154] panic+0x318/0x860 [ 115.767679][ T154] ? check_panic_on_warn+0x1d/0xa0 [ 115.772954][ T154] ? fb_is_primary_device+0xd0/0xd0 [ 115.778176][ T154] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 115.784206][ T154] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.790114][ T154] ? _raw_spin_unlock+0x40/0x40 [ 115.795040][ T154] ? print_memory_metadata+0xe2/0x140 [ 115.800404][ T154] check_panic_on_warn+0x7e/0xa0 [ 115.805344][ T154] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.811347][ T154] end_report+0x6d/0xf0 [ 115.815688][ T154] kasan_report+0x18e/0x1c0 [ 115.820200][ T154] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.826197][ T154] kasan_check_range+0x27e/0x290 [ 115.831133][ T154] ? copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.837103][ T154] memcpy+0x25/0x60 [ 115.840913][ T154] copy_page_from_iter_atomic+0x8e3/0x1230 [ 115.846732][ T154] ? shmem_getpage+0xa0/0xa0 [ 115.851321][ T154] ? pipe_zero+0x4f0/0x4f0 [ 115.855738][ T154] ? __lock_acquire+0x1295/0x1ff0 [ 115.860925][ T154] generic_perform_write+0x33a/0x5b0 [ 115.866230][ T154] ? grab_cache_page_write_begin+0x90/0x90 [ 115.872058][ T154] ? file_remove_privs+0x610/0x610 [ 115.877174][ T154] ? rwsem_write_trylock+0x166/0x210 [ 115.882578][ T154] __generic_file_write_iter+0x243/0x4f0 [ 115.888225][ T154] generic_file_write_iter+0xa7/0x1b0 [ 115.893748][ T154] do_iter_readv_writev+0x594/0x7a0 [ 115.899066][ T154] ? generic_file_rw_checks+0x260/0x260 [ 115.904619][ T154] ? common_file_perm+0x17d/0x1d0 [ 115.909651][ T154] ? fsnotify_perm+0x64/0x590 [ 115.914323][ T154] ? security_file_permission+0x75/0xa0 [ 115.919865][ T154] do_iter_write+0x1e6/0x760 [ 115.924454][ T154] ? rcu_read_lock_any_held+0xb3/0x160 [ 115.929908][ T154] ? vfs_iter_write+0x69/0xa0 [ 115.934608][ T154] lo_write_bvec+0x297/0x740 [ 115.939193][ T154] ? lo_rw_aio+0xd80/0xd80 [ 115.943721][ T154] ? kthread_associate_blkcg+0x424/0x590 [ 115.949380][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 115.954610][ T154] loop_process_work+0x2309/0x2af0 [ 115.959829][ T154] ? rcu_lock_release+0x20/0x20 [ 115.964773][ T154] ? read_lock_is_recursive+0x10/0x10 [ 115.970153][ T154] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 115.976159][ T154] ? print_irqtrace_events+0x210/0x210 [ 115.981629][ T154] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.987535][ T154] ? do_raw_spin_unlock+0x137/0x8b0 [ 115.992886][ T154] process_one_work+0x8a1/0x10c0 [ 115.997936][ T154] ? worker_detach_from_pool+0x260/0x260 [ 116.003736][ T154] ? _raw_spin_lock_irqsave+0x120/0x120 [ 116.009276][ T154] ? kthread_data+0x4e/0xc0 [ 116.013767][ T154] ? wq_worker_running+0x97/0x170 [ 116.018795][ T154] worker_thread+0xaca/0x1280 [ 116.023486][ T154] kthread+0x3f6/0x4f0 [ 116.027573][ T154] ? rcu_lock_release+0x20/0x20 [ 116.032411][ T154] ? kthread_blkcg+0xd0/0xd0 [ 116.037001][ T154] ret_from_fork+0x1f/0x30 [ 116.041412][ T154] [ 116.044679][ T154] Kernel Offset: disabled [ 116.049014][ T154] Rebooting in 86400 seconds..