[ 82.261144][ T27] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.10.30' (ED25519) to the list of known hosts. 2023/11/17 17:17:02 ignoring optional flag "sandboxArg"="0" 2023/11/17 17:17:02 parsed 1 programs 2023/11/17 17:17:04 executed programs: 0 [ 87.640539][ T5395] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.696101][ T4442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.704771][ T4442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.713115][ T4442] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.722112][ T4442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.730553][ T4442] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.738006][ T4442] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.869161][ T5403] chnl_net:caif_netlink_parms(): no params data found [ 87.928135][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.935549][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.943562][ T5403] bridge_slave_0: entered allmulticast mode [ 87.950695][ T5403] bridge_slave_0: entered promiscuous mode [ 87.959516][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.966667][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.974645][ T5403] bridge_slave_1: entered allmulticast mode [ 87.981772][ T5403] bridge_slave_1: entered promiscuous mode [ 88.009977][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.022385][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.050622][ T5403] team0: Port device team_slave_0 added [ 88.060691][ T5403] team0: Port device team_slave_1 added [ 88.083631][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.091258][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.118058][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.132694][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.140074][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.166814][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.203395][ T5403] hsr_slave_0: entered promiscuous mode [ 88.209866][ T5403] hsr_slave_1: entered promiscuous mode [ 88.865367][ T5403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.880165][ T5403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.890950][ T5403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.902609][ T5403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.015936][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.044516][ T5403] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.058595][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.065847][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.092363][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.100938][ T5059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.313719][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.374314][ T5403] veth0_vlan: entered promiscuous mode [ 89.388369][ T5403] veth1_vlan: entered promiscuous mode [ 89.431632][ T5403] veth0_macvtap: entered promiscuous mode [ 89.443794][ T5403] veth1_macvtap: entered promiscuous mode [ 89.467590][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.490186][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.505409][ T5403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.516369][ T5403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.527040][ T5403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.537261][ T5403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.629686][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.637657][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.686269][ T2830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.700454][ T2830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.780049][ T4442] Bluetooth: hci0: command 0x0409 tx timeout [ 89.788356][ T5467] loop0: detected capacity change from 0 to 1024 [ 89.874808][ T2830] ================================================================== [ 89.883247][ T2830] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.892224][ T2830] Read of size 2048 at addr ffff888027867800 by task kworker/u4:10/2830 [ 89.900762][ T2830] [ 89.903117][ T2830] CPU: 1 PID: 2830 Comm: kworker/u4:10 Not tainted 6.7.0-rc1-syzkaller-00139-g6bc40e44f1dd #0 [ 89.913469][ T2830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 89.923618][ T2830] Workqueue: loop0 loop_workfn [ 89.928400][ T2830] Call Trace: [ 89.931672][ T2830] [ 89.934635][ T2830] dump_stack_lvl+0x1e7/0x2d0 [ 89.939314][ T2830] ? nf_tcp_handle_invalid+0x650/0x650 [ 89.944769][ T2830] ? panic+0x850/0x850 [ 89.948828][ T2830] ? _printk+0xd5/0x120 [ 89.953087][ T2830] print_report+0x163/0x540 [ 89.957754][ T2830] ? __might_sleep+0xc0/0xc0 [ 89.962459][ T2830] ? filemap_get_entry+0x127/0x4d0 [ 89.967756][ T2830] ? __virt_addr_valid+0x22f/0x2e0 [ 89.972956][ T2830] ? __phys_addr+0xba/0x170 [ 89.977543][ T2830] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.983519][ T2830] kasan_report+0x142/0x170 [ 89.988018][ T2830] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.994076][ T2830] kasan_check_range+0x27e/0x290 [ 89.999528][ T2830] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.005541][ T2830] __asan_memcpy+0x29/0x70 [ 90.010092][ T2830] copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.016040][ T2830] ? iov_iter_zero+0x1b50/0x1b50 [ 90.021171][ T2830] ? shmem_write_begin+0x23f/0x4c0 [ 90.026331][ T2830] ? shmem_writepage+0x1ac0/0x1ac0 [ 90.031550][ T2830] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 90.037501][ T2830] ? fault_in_iov_iter_readable+0x236/0x280 [ 90.043441][ T2830] generic_perform_write+0x392/0x630 [ 90.048767][ T2830] ? generic_file_direct_write+0x3f0/0x3f0 [ 90.054628][ T2830] ? preempt_count_add+0x93/0x180 [ 90.059696][ T2830] ? mnt_put_write_access_file+0xbb/0x100 [ 90.065452][ T2830] ? file_update_time+0x19c/0x1b0 [ 90.070599][ T2830] shmem_file_write_iter+0xfc/0x120 [ 90.075933][ T2830] do_iter_write+0x7ac/0xcb0 [ 90.080560][ T2830] ? vfs_iter_write+0xa0/0xa0 [ 90.085258][ T2830] ? rcu_read_lock_bh_held+0x120/0x120 [ 90.090896][ T2830] ? vfs_iter_write+0x70/0xa0 [ 90.095578][ T2830] loop_process_work+0x14c3/0x22a0 [ 90.100780][ T2830] ? psi_task_switch+0x441/0x770 [ 90.105723][ T2830] ? loop_workfn+0x50/0x50 [ 90.110138][ T2830] ? read_lock_is_recursive+0x20/0x20 [ 90.115509][ T2830] ? print_irqtrace_events+0x220/0x220 [ 90.121261][ T2830] ? process_scheduled_works+0x825/0x1400 [ 90.126996][ T2830] process_scheduled_works+0x90f/0x1400 [ 90.132734][ T2830] ? assign_work+0x3d0/0x3d0 [ 90.137499][ T2830] ? assign_work+0x364/0x3d0 [ 90.142081][ T2830] worker_thread+0xa5f/0xff0 [ 90.146665][ T2830] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.152569][ T2830] kthread+0x2d3/0x370 [ 90.156628][ T2830] ? pr_cont_work+0x5e0/0x5e0 [ 90.161305][ T2830] ? kthread_blkcg+0xd0/0xd0 [ 90.165883][ T2830] ret_from_fork+0x48/0x80 [ 90.170300][ T2830] ? kthread_blkcg+0xd0/0xd0 [ 90.174920][ T2830] ret_from_fork_asm+0x11/0x20 [ 90.179775][ T2830] [ 90.182789][ T2830] [ 90.185191][ T2830] Allocated by task 5467: [ 90.189513][ T2830] kasan_set_track+0x4f/0x70 [ 90.194099][ T2830] __kasan_kmalloc+0x98/0xb0 [ 90.198964][ T2830] __kmalloc+0xb9/0x230 [ 90.203165][ T2830] hfsplus_read_wrapper+0x545/0x1330 [ 90.208643][ T2830] hfsplus_fill_super+0x38e/0x1c90 [ 90.213850][ T2830] mount_bdev+0x237/0x300 [ 90.218259][ T2830] legacy_get_tree+0xef/0x190 [ 90.222926][ T2830] vfs_get_tree+0x8c/0x280 [ 90.227330][ T2830] do_new_mount+0x28f/0xae0 [ 90.231907][ T2830] __se_sys_mount+0x2d9/0x3c0 [ 90.236571][ T2830] do_syscall_64+0x44/0x110 [ 90.241075][ T2830] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 90.246957][ T2830] [ 90.249295][ T2830] The buggy address belongs to the object at ffff888027867800 [ 90.249295][ T2830] which belongs to the cache kmalloc-512 of size 512 [ 90.263529][ T2830] The buggy address is located 0 bytes inside of [ 90.263529][ T2830] allocated 512-byte region [ffff888027867800, ffff888027867a00) [ 90.278005][ T2830] [ 90.280404][ T2830] The buggy address belongs to the physical page: [ 90.286803][ T2830] page:ffffea00009e1900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27864 [ 90.297117][ T2830] head:ffffea00009e1900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.306034][ T2830] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 90.314346][ T2830] page_type: 0xffffffff() [ 90.318663][ T2830] raw: 00fff00000000840 ffff888012841c80 ffffea00009feb00 dead000000000003 [ 90.327262][ T2830] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 90.335856][ T2830] page dumped because: kasan: bad access detected [ 90.342270][ T2830] page_owner tracks the page as allocated [ 90.347988][ T2830] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3246, tgid 3246 (kworker/u4:2), ts 13810055781, free_ts 0 [ 90.368674][ T2830] post_alloc_hook+0x1e6/0x210 [ 90.373443][ T2830] get_page_from_freelist+0x339a/0x3530 [ 90.379077][ T2830] __alloc_pages+0x255/0x670 [ 90.383856][ T2830] alloc_pages_mpol+0x3de/0x640 [ 90.388960][ T2830] alloc_slab_page+0x6a/0x160 [ 90.393665][ T2830] new_slab+0x84/0x2f0 [ 90.397918][ T2830] ___slab_alloc+0xc85/0x1310 [ 90.402853][ T2830] __kmem_cache_alloc_node+0x21d/0x300 [ 90.408391][ T2830] kmalloc_trace+0x2a/0xe0 [ 90.412809][ T2830] alloc_bprm+0x56/0x900 [ 90.417226][ T2830] kernel_execve+0x96/0xa10 [ 90.421733][ T2830] call_usermodehelper_exec_async+0x233/0x370 [ 90.427822][ T2830] ret_from_fork+0x48/0x80 [ 90.432534][ T2830] ret_from_fork_asm+0x11/0x20 [ 90.437309][ T2830] page_owner free stack trace missing [ 90.442836][ T2830] [ 90.445187][ T2830] Memory state around the buggy address: [ 90.451027][ T2830] ffff888027867900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.459278][ T2830] ffff888027867980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.467356][ T2830] >ffff888027867a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.475595][ T2830] ^ [ 90.479749][ T2830] ffff888027867a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.488365][ T2830] ffff888027867b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.496851][ T2830] ================================================================== [ 90.505205][ T2830] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.512763][ T2830] CPU: 1 PID: 2830 Comm: kworker/u4:10 Not tainted 6.7.0-rc1-syzkaller-00139-g6bc40e44f1dd #0 [ 90.523457][ T2830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 90.534403][ T2830] Workqueue: loop0 loop_workfn [ 90.539217][ T2830] Call Trace: [ 90.542512][ T2830] [ 90.545460][ T2830] dump_stack_lvl+0x1e7/0x2d0 [ 90.550197][ T2830] ? nf_tcp_handle_invalid+0x650/0x650 [ 90.555766][ T2830] ? panic+0x850/0x850 [ 90.559840][ T2830] ? vscnprintf+0x5d/0x80 [ 90.564166][ T2830] panic+0x349/0x850 [ 90.568054][ T2830] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.574298][ T2830] ? check_panic_on_warn+0x21/0xa0 [ 90.579508][ T2830] ? __memcpy_flushcache+0x2b0/0x2b0 [ 90.584887][ T2830] ? mark_lock+0x9a/0x340 [ 90.589217][ T2830] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 90.595141][ T2830] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.601069][ T2830] ? _raw_spin_unlock+0x40/0x40 [ 90.606099][ T2830] ? print_report+0x4fb/0x540 [ 90.610781][ T2830] check_panic_on_warn+0x82/0xa0 [ 90.615876][ T2830] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.621951][ T2830] end_report+0x6e/0x130 [ 90.626287][ T2830] kasan_report+0x153/0x170 [ 90.630802][ T2830] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.636813][ T2830] kasan_check_range+0x27e/0x290 [ 90.641867][ T2830] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.648275][ T2830] __asan_memcpy+0x29/0x70 [ 90.652717][ T2830] copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.658629][ T2830] ? iov_iter_zero+0x1b50/0x1b50 [ 90.663867][ T2830] ? shmem_write_begin+0x23f/0x4c0 [ 90.668977][ T2830] ? shmem_writepage+0x1ac0/0x1ac0 [ 90.674084][ T2830] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 90.679972][ T2830] ? fault_in_iov_iter_readable+0x236/0x280 [ 90.686035][ T2830] generic_perform_write+0x392/0x630 [ 90.691421][ T2830] ? generic_file_direct_write+0x3f0/0x3f0 [ 90.697228][ T2830] ? preempt_count_add+0x93/0x180 [ 90.702248][ T2830] ? mnt_put_write_access_file+0xbb/0x100 [ 90.708087][ T2830] ? file_update_time+0x19c/0x1b0 [ 90.713237][ T2830] shmem_file_write_iter+0xfc/0x120 [ 90.718558][ T2830] do_iter_write+0x7ac/0xcb0 [ 90.723192][ T2830] ? vfs_iter_write+0xa0/0xa0 [ 90.728010][ T2830] ? rcu_read_lock_bh_held+0x120/0x120 [ 90.733589][ T2830] ? vfs_iter_write+0x70/0xa0 [ 90.738347][ T2830] loop_process_work+0x14c3/0x22a0 [ 90.743466][ T2830] ? psi_task_switch+0x441/0x770 [ 90.748489][ T2830] ? loop_workfn+0x50/0x50 [ 90.753093][ T2830] ? read_lock_is_recursive+0x20/0x20 [ 90.758716][ T2830] ? print_irqtrace_events+0x220/0x220 [ 90.764466][ T2830] ? process_scheduled_works+0x825/0x1400 [ 90.770280][ T2830] process_scheduled_works+0x90f/0x1400 [ 90.775925][ T2830] ? assign_work+0x3d0/0x3d0 [ 90.780609][ T2830] ? assign_work+0x364/0x3d0 [ 90.785201][ T2830] worker_thread+0xa5f/0xff0 [ 90.790029][ T2830] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.796021][ T2830] kthread+0x2d3/0x370 [ 90.800452][ T2830] ? pr_cont_work+0x5e0/0x5e0 [ 90.805140][ T2830] ? kthread_blkcg+0xd0/0xd0 [ 90.810310][ T2830] ret_from_fork+0x48/0x80 [ 90.814933][ T2830] ? kthread_blkcg+0xd0/0xd0 [ 90.819623][ T2830] ret_from_fork_asm+0x11/0x20 [ 90.824565][ T2830] [ 90.828791][ T2830] Kernel Offset: disabled [ 90.833566][ T2830] Rebooting in 86400 seconds..