[ 81.856256][ T1146] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 2023/11/11 12:09:51 ignoring optional flag "sandboxArg"="0" 2023/11/11 12:09:51 parsed 1 programs 2023/11/11 12:09:53 executed programs: 0 [ 84.236667][ T5407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.289165][ T4457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.297651][ T4457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.305994][ T4457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.315505][ T4457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.323283][ T4457] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.330949][ T4457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.447975][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 84.499534][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.506766][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.514413][ T5414] bridge_slave_0: entered allmulticast mode [ 84.521443][ T5414] bridge_slave_0: entered promiscuous mode [ 84.530164][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.537508][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.545454][ T5414] bridge_slave_1: entered allmulticast mode [ 84.552266][ T5414] bridge_slave_1: entered promiscuous mode [ 84.578338][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.589954][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.618263][ T5414] team0: Port device team_slave_0 added [ 84.627246][ T5414] team0: Port device team_slave_1 added [ 84.650133][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.657417][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.683836][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.696720][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.703920][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.730559][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.766351][ T5414] hsr_slave_0: entered promiscuous mode [ 84.772848][ T5414] hsr_slave_1: entered promiscuous mode [ 85.609556][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.623157][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.637324][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.648955][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.745140][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.771215][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.786661][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.793975][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.816733][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.824022][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.870606][ T5414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.032378][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.090939][ T5414] veth0_vlan: entered promiscuous mode [ 86.109647][ T5414] veth1_vlan: entered promiscuous mode [ 86.152006][ T5414] veth0_macvtap: entered promiscuous mode [ 86.163621][ T5414] veth1_macvtap: entered promiscuous mode [ 86.191566][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.211845][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.227935][ T5414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.237192][ T5414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.250243][ T5414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.259166][ T5414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.361636][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.377804][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.379482][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.389299][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.428347][ T5063] Bluetooth: hci0: command 0x0409 tx timeout [ 86.472256][ T5480] loop0: detected capacity change from 0 to 1024 [ 86.569230][ T1087] ================================================================== [ 86.577620][ T1087] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x9b2/0x1e70 [ 86.586591][ T1087] Read of size 2048 at addr ffff88806957e400 by task kworker/u4:6/1087 [ 86.594857][ T1087] [ 86.597225][ T1087] CPU: 1 PID: 1087 Comm: kworker/u4:6 Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 86.607242][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 86.617610][ T1087] Workqueue: loop0 loop_workfn [ 86.622556][ T1087] Call Trace: [ 86.625961][ T1087] [ 86.629235][ T1087] dump_stack_lvl+0x1e7/0x2d0 [ 86.634114][ T1087] ? nf_tcp_handle_invalid+0x650/0x650 [ 86.639624][ T1087] ? panic+0x850/0x850 [ 86.643806][ T1087] ? _printk+0xd5/0x120 [ 86.648352][ T1087] print_report+0x163/0x540 [ 86.653065][ T1087] ? __might_sleep+0xc0/0xc0 [ 86.657687][ T1087] ? filemap_get_entry+0x127/0x4d0 [ 86.662828][ T1087] ? __virt_addr_valid+0x22f/0x2e0 [ 86.668330][ T1087] ? __phys_addr+0xba/0x170 [ 86.672855][ T1087] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 86.679251][ T1087] kasan_report+0x142/0x170 [ 86.683875][ T1087] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 86.689886][ T1087] kasan_check_range+0x27e/0x290 [ 86.694850][ T1087] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 86.700858][ T1087] __asan_memcpy+0x29/0x70 [ 86.705486][ T1087] copy_page_from_iter_atomic+0x9b2/0x1e70 [ 86.711421][ T1087] ? iov_iter_zero+0x1b50/0x1b50 [ 86.716383][ T1087] ? shmem_write_begin+0x23f/0x4c0 [ 86.721609][ T1087] ? shmem_writepage+0x1ac0/0x1ac0 [ 86.726838][ T1087] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 86.732930][ T1087] ? fault_in_iov_iter_readable+0x236/0x280 [ 86.738871][ T1087] generic_perform_write+0x392/0x630 [ 86.744368][ T1087] ? generic_file_direct_write+0x3f0/0x3f0 [ 86.750204][ T1087] ? preempt_count_add+0x93/0x180 [ 86.755259][ T1087] ? mnt_put_write_access_file+0xbb/0x100 [ 86.761092][ T1087] ? file_update_time+0x19c/0x1b0 [ 86.766148][ T1087] shmem_file_write_iter+0xfc/0x120 [ 86.771672][ T1087] do_iter_write+0x7ac/0xcb0 [ 86.776301][ T1087] ? vfs_iter_write+0xa0/0xa0 [ 86.781122][ T1087] ? rcu_read_lock_bh_held+0x120/0x120 [ 86.787479][ T1087] ? vfs_iter_write+0x70/0xa0 [ 86.792361][ T1087] loop_process_work+0x14c3/0x22a0 [ 86.797589][ T1087] ? psi_task_switch+0x441/0x770 [ 86.802567][ T1087] ? loop_workfn+0x50/0x50 [ 86.807017][ T1087] ? read_lock_is_recursive+0x20/0x20 [ 86.812441][ T1087] ? print_irqtrace_events+0x220/0x220 [ 86.818038][ T1087] ? process_scheduled_works+0x825/0x1400 [ 86.823798][ T1087] process_scheduled_works+0x90f/0x1400 [ 86.829388][ T1087] ? assign_work+0x3d0/0x3d0 [ 86.834008][ T1087] ? assign_work+0x364/0x3d0 [ 86.838624][ T1087] worker_thread+0xa5f/0xff0 [ 86.843267][ T1087] kthread+0x2d3/0x370 [ 86.847495][ T1087] ? pr_cont_work+0x5e0/0x5e0 [ 86.852286][ T1087] ? kthread_blkcg+0xd0/0xd0 [ 86.856897][ T1087] ret_from_fork+0x48/0x80 [ 86.861337][ T1087] ? kthread_blkcg+0xd0/0xd0 [ 86.866033][ T1087] ret_from_fork_asm+0x11/0x20 [ 86.871093][ T1087] [ 86.874224][ T1087] [ 86.876572][ T1087] Allocated by task 5480: [ 86.880995][ T1087] kasan_set_track+0x4f/0x70 [ 86.885693][ T1087] __kasan_kmalloc+0x98/0xb0 [ 86.890924][ T1087] __kmalloc+0xb9/0x230 [ 86.895372][ T1087] hfsplus_read_wrapper+0x545/0x1330 [ 86.901034][ T1087] hfsplus_fill_super+0x38e/0x1c90 [ 86.906256][ T1087] mount_bdev+0x237/0x300 [ 86.910782][ T1087] legacy_get_tree+0xef/0x190 [ 86.915490][ T1087] vfs_get_tree+0x8c/0x280 [ 86.919926][ T1087] do_new_mount+0x28f/0xae0 [ 86.924452][ T1087] __se_sys_mount+0x2d9/0x3c0 [ 86.929154][ T1087] do_syscall_64+0x44/0x110 [ 86.933770][ T1087] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 86.939793][ T1087] [ 86.942306][ T1087] The buggy address belongs to the object at ffff88806957e400 [ 86.942306][ T1087] which belongs to the cache kmalloc-512 of size 512 [ 86.956733][ T1087] The buggy address is located 0 bytes inside of [ 86.956733][ T1087] allocated 512-byte region [ffff88806957e400, ffff88806957e600) [ 86.970723][ T1087] [ 86.973148][ T1087] The buggy address belongs to the physical page: [ 86.979831][ T1087] page:ffffea0001a55f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6957c [ 86.990263][ T1087] head:ffffea0001a55f00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.999410][ T1087] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 87.007757][ T1087] page_type: 0xffffffff() [ 87.012115][ T1087] raw: 00fff00000000840 ffff888012c41c80 dead000000000122 0000000000000000 [ 87.020717][ T1087] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 87.029331][ T1087] page dumped because: kasan: bad access detected [ 87.036020][ T1087] page_owner tracks the page as allocated [ 87.041973][ T1087] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 27, tgid 27 (kworker/1:1), ts 86402606020, free_ts 58935228750 [ 87.064835][ T1087] post_alloc_hook+0x1e6/0x210 [ 87.070236][ T1087] get_page_from_freelist+0x339a/0x3530 [ 87.075804][ T1087] __alloc_pages+0x255/0x670 [ 87.081594][ T1087] alloc_pages_mpol+0x3de/0x640 [ 87.087381][ T1087] alloc_slab_page+0x6a/0x160 [ 87.093659][ T1087] new_slab+0x84/0x2f0 [ 87.097762][ T1087] ___slab_alloc+0xc85/0x1310 [ 87.102554][ T1087] __kmem_cache_alloc_node+0x21d/0x300 [ 87.108065][ T1087] __kmalloc+0xa8/0x230 [ 87.112252][ T1087] fib6_info_alloc+0x2e/0xe0 [ 87.116956][ T1087] ip6_route_info_create+0x445/0x1220 [ 87.122532][ T1087] addrconf_f6i_alloc+0x3c2/0x7f0 [ 87.127680][ T1087] ipv6_add_addr+0x5bd/0x1090 [ 87.132497][ T1087] addrconf_add_linklocal+0x368/0xa20 [ 87.138075][ T1087] addrconf_addr_gen+0x804/0xb60 [ 87.143127][ T1087] addrconf_init_auto_addrs+0x974/0xec0 [ 87.149147][ T1087] page last free stack trace: [ 87.153958][ T1087] free_unref_page_prepare+0x92a/0xa50 [ 87.159547][ T1087] free_unref_page+0x37/0x3f0 [ 87.164249][ T1087] vfree+0x186/0x2e0 [ 87.168188][ T1087] kcov_close+0x2b/0x50 [ 87.172550][ T1087] __fput+0x3cc/0xa10 [ 87.176727][ T1087] task_work_run+0x24a/0x300 [ 87.181338][ T1087] do_exit+0xa34/0x2750 [ 87.185687][ T1087] do_group_exit+0x206/0x2c0 [ 87.190296][ T1087] get_signal+0x1769/0x1840 [ 87.194824][ T1087] arch_do_signal_or_restart+0x96/0x860 [ 87.200493][ T1087] exit_to_user_mode_loop+0x6a/0x100 [ 87.206065][ T1087] exit_to_user_mode_prepare+0xb1/0x140 [ 87.211633][ T1087] syscall_exit_to_user_mode+0x64/0x280 [ 87.217244][ T1087] do_syscall_64+0x50/0x110 [ 87.221868][ T1087] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 87.228053][ T1087] [ 87.230472][ T1087] Memory state around the buggy address: [ 87.236207][ T1087] ffff88806957e500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.244458][ T1087] ffff88806957e580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.252796][ T1087] >ffff88806957e600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.260952][ T1087] ^ [ 87.265125][ T1087] ffff88806957e680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.273378][ T1087] ffff88806957e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.282404][ T1087] ================================================================== [ 87.291151][ T1087] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.298819][ T1087] CPU: 1 PID: 1087 Comm: kworker/u4:6 Not tainted 6.6.0-syzkaller-16159-g3ca112b71f35 #0 [ 87.308903][ T1087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 87.319063][ T1087] Workqueue: loop0 loop_workfn [ 87.324180][ T1087] Call Trace: [ 87.327603][ T1087] [ 87.330568][ T1087] dump_stack_lvl+0x1e7/0x2d0 [ 87.335271][ T1087] ? nf_tcp_handle_invalid+0x650/0x650 [ 87.340752][ T1087] ? panic+0x850/0x850 [ 87.344850][ T1087] ? vscnprintf+0x5d/0x80 [ 87.349178][ T1087] panic+0x349/0x850 [ 87.353072][ T1087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.359223][ T1087] ? check_panic_on_warn+0x21/0xa0 [ 87.364593][ T1087] ? __memcpy_flushcache+0x2b0/0x2b0 [ 87.369971][ T1087] ? mark_lock+0x9a/0x340 [ 87.374485][ T1087] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 87.380497][ T1087] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 87.386734][ T1087] ? _raw_spin_unlock+0x40/0x40 [ 87.391686][ T1087] ? print_report+0x4fb/0x540 [ 87.396359][ T1087] check_panic_on_warn+0x82/0xa0 [ 87.401561][ T1087] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 87.407548][ T1087] end_report+0x6e/0x130 [ 87.411826][ T1087] kasan_report+0x153/0x170 [ 87.416687][ T1087] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 87.422773][ T1087] kasan_check_range+0x27e/0x290 [ 87.427795][ T1087] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 87.433855][ T1087] __asan_memcpy+0x29/0x70 [ 87.438267][ T1087] copy_page_from_iter_atomic+0x9b2/0x1e70 [ 87.444169][ T1087] ? iov_iter_zero+0x1b50/0x1b50 [ 87.449094][ T1087] ? shmem_write_begin+0x23f/0x4c0 [ 87.454381][ T1087] ? shmem_writepage+0x1ac0/0x1ac0 [ 87.459572][ T1087] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 87.465459][ T1087] ? fault_in_iov_iter_readable+0x236/0x280 [ 87.471515][ T1087] generic_perform_write+0x392/0x630 [ 87.476983][ T1087] ? generic_file_direct_write+0x3f0/0x3f0 [ 87.482893][ T1087] ? preempt_count_add+0x93/0x180 [ 87.487926][ T1087] ? mnt_put_write_access_file+0xbb/0x100 [ 87.493737][ T1087] ? file_update_time+0x19c/0x1b0 [ 87.498749][ T1087] shmem_file_write_iter+0xfc/0x120 [ 87.504027][ T1087] do_iter_write+0x7ac/0xcb0 [ 87.508695][ T1087] ? vfs_iter_write+0xa0/0xa0 [ 87.513536][ T1087] ? rcu_read_lock_bh_held+0x120/0x120 [ 87.518984][ T1087] ? vfs_iter_write+0x70/0xa0 [ 87.523739][ T1087] loop_process_work+0x14c3/0x22a0 [ 87.528936][ T1087] ? psi_task_switch+0x441/0x770 [ 87.533989][ T1087] ? loop_workfn+0x50/0x50 [ 87.538491][ T1087] ? read_lock_is_recursive+0x20/0x20 [ 87.543941][ T1087] ? print_irqtrace_events+0x220/0x220 [ 87.549392][ T1087] ? process_scheduled_works+0x825/0x1400 [ 87.555626][ T1087] process_scheduled_works+0x90f/0x1400 [ 87.562479][ T1087] ? assign_work+0x3d0/0x3d0 [ 87.567061][ T1087] ? assign_work+0x364/0x3d0 [ 87.571850][ T1087] worker_thread+0xa5f/0xff0 [ 87.576525][ T1087] kthread+0x2d3/0x370 [ 87.580620][ T1087] ? pr_cont_work+0x5e0/0x5e0 [ 87.585807][ T1087] ? kthread_blkcg+0xd0/0xd0 [ 87.590384][ T1087] ret_from_fork+0x48/0x80 [ 87.594880][ T1087] ? kthread_blkcg+0xd0/0xd0 [ 87.599719][ T1087] ret_from_fork_asm+0x11/0x20 [ 87.604475][ T1087] [ 87.607766][ T1087] Kernel Offset: disabled [ 87.612174][ T1087] Rebooting in 86400 seconds..