Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
2024/01/11 12:04:01 ignoring optional flag "sandboxArg"="0"
2024/01/11 12:04:01 parsed 1 programs
2024/01/11 12:04:02 executed programs: 0
[ 74.743500][ T5401] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.789239][ T4453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.796529][ T4453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.803756][ T4453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.811773][ T4453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.819455][ T4453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.827080][ T4453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.922611][ T5408] chnl_net:caif_netlink_parms(): no params data found
[ 74.970268][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.977718][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.984928][ T5408] bridge_slave_0: entered allmulticast mode
[ 74.991903][ T5408] bridge_slave_0: entered promiscuous mode
[ 74.999636][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.007084][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.014238][ T5408] bridge_slave_1: entered allmulticast mode
[ 75.020942][ T5408] bridge_slave_1: entered promiscuous mode
[ 75.041725][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.052682][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.076904][ T5408] team0: Port device team_slave_0 added
[ 75.084496][ T5408] team0: Port device team_slave_1 added
[ 75.103405][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.110658][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.137130][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.148909][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.155985][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.182105][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.214233][ T5408] hsr_slave_0: entered promiscuous mode
[ 75.220722][ T5408] hsr_slave_1: entered promiscuous mode
[ 75.737942][ T5408] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.751119][ T5408] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.761437][ T5408] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.773018][ T5408] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.799308][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.806509][ T5408] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.814005][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.822100][ T5408] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.885508][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.914168][ T923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.922650][ T923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.940858][ T5408] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.953044][ T923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.960238][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.988794][ T923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.996277][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.149828][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.193682][ T5408] veth0_vlan: entered promiscuous mode
[ 76.208817][ T5408] veth1_vlan: entered promiscuous mode
[ 76.241448][ T5408] veth0_macvtap: entered promiscuous mode
[ 76.251883][ T5408] veth1_macvtap: entered promiscuous mode
[ 76.272281][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.288497][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.302634][ T5408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.312331][ T5408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.322514][ T5408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.334539][ T5408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.408460][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.425149][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.450382][ T923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.459915][ T923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.705149][ T5480] loop0: detected capacity change from 0 to 32768
[ 76.715428][ T5480] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5480)
[ 76.734642][ T5480] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 76.746563][ T5480] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[ 76.755311][ T5480] BTRFS info (device loop0): disk space caching is enabled
[ 76.802916][ T5480] BTRFS info (device loop0): rebuilding free space tree
[ 76.816764][ T5480] BTRFS info (device loop0): disabling free space tree
[ 76.823748][ T5480] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 76.834236][ T5480] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 76.862797][ T5480] ==================================================================
[ 76.870988][ T5480] BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70
[ 76.877862][ T5480] Read of size 1 at addr ffff88806cc20a28 by task syz-executor.0/5480
[ 76.886024][ T5480]
[ 76.888431][ T5480] CPU: 0 PID: 5480 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-02723-gde927f6c0b07 #0
[ 76.899794][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 76.909944][ T5480] Call Trace:
[ 76.913308][ T5480]
[ 76.916238][ T5480] dump_stack_lvl+0x1e7/0x2d0
[ 76.920915][ T5480] ? nf_tcp_handle_invalid+0x650/0x650
[ 76.926506][ T5480] ? panic+0x850/0x850
[ 76.930592][ T5480] ? _printk+0xd5/0x120
[ 76.934756][ T5480] ? __virt_addr_valid+0x17e/0x480
[ 76.939870][ T5480] print_report+0x163/0x540
[ 76.944370][ T5480] ? __virt_addr_valid+0x17e/0x480
[ 76.949483][ T5480] ? __virt_addr_valid+0x3d1/0x480
[ 76.954628][ T5480] ? __phys_addr+0xba/0x170
[ 76.959296][ T5480] ? strlen+0x58/0x70
[ 76.963271][ T5480] kasan_report+0x142/0x170
[ 76.967787][ T5480] ? strlen+0x58/0x70
[ 76.971789][ T5480] strlen+0x58/0x70
[ 76.975634][ T5480] getname_kernel+0x1d/0x2e0
[ 76.980223][ T5480] kern_path+0x1d/0x50
[ 76.984284][ T5480] bdev_open_by_path+0xd1/0x400
[ 76.989133][ T5480] ? bd_finish_claiming+0x400/0x400
[ 76.994355][ T5480] btrfs_dev_replace_by_ioctl+0x41b/0x2010
[ 77.000178][ T5480] ? rcu_is_watching+0x15/0xb0
[ 77.004943][ T5480] ? lock_release+0xbf/0x9c0
[ 77.009535][ T5480] ? btrfs_finish_block_group_to_copy+0x550/0x550
[ 77.015942][ T5480] ? do_raw_spin_lock+0x14e/0x370
[ 77.021222][ T5480] ? __lock_acquire+0x1fd0/0x1fd0
[ 77.026345][ T5480] ? do_raw_spin_unlock+0x13b/0x8b0
[ 77.031559][ T5480] btrfs_ioctl_dev_replace+0x2c9/0x390
[ 77.037029][ T5480] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 77.043449][ T5480] __se_sys_ioctl+0xf8/0x170
[ 77.048039][ T5480] do_syscall_64+0xf5/0x230
[ 77.052622][ T5480] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.058531][ T5480] RIP: 0033:0x7fa74207cba9
[ 77.063059][ T5480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 77.082687][ T5480] RSP: 002b:00007fa742d870c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.091100][ T5480] RAX: ffffffffffffffda RBX: 00007fa74219bf80 RCX: 00007fa74207cba9
[ 77.099070][ T5480] RDX: 0000000020000540 RSI: 00000000ca289435 RDI: 0000000000000005
[ 77.107035][ T5480] RBP: 00007fa7420c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.115420][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.123402][ T5480] R13: 000000000000000b R14: 00007fa74219bf80 R15: 00007ffe5a2c9dd8
[ 77.131383][ T5480]
[ 77.134400][ T5480]
[ 77.136712][ T5480] Allocated by task 5480:
[ 77.141200][ T5480] kasan_save_track+0x3f/0x70
[ 77.146486][ T5480] __kasan_kmalloc+0x98/0xb0
[ 77.151079][ T5480] __kmalloc_node_track_caller+0x249/0x4e0
[ 77.156878][ T5480] memdup_user+0x2b/0xc0
[ 77.161116][ T5480] btrfs_ioctl_dev_replace+0xb8/0x390
[ 77.166481][ T5480] __se_sys_ioctl+0xf8/0x170
[ 77.171162][ T5480] do_syscall_64+0xf5/0x230
[ 77.175654][ T5480] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.181553][ T5480]
[ 77.183876][ T5480] The buggy address belongs to the object at ffff88806cc20000
[ 77.183876][ T5480] which belongs to the cache kmalloc-4k of size 4096
[ 77.198016][ T5480] The buggy address is located 0 bytes to the right of
[ 77.198016][ T5480] allocated 2600-byte region [ffff88806cc20000, ffff88806cc20a28)
[ 77.212761][ T5480]
[ 77.215163][ T5480] The buggy address belongs to the physical page:
[ 77.221558][ T5480] page:ffffea0001b30800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6cc20
[ 77.231870][ T5480] head:ffffea0001b30800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 77.240801][ T5480] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.248786][ T5480] page_type: 0xffffffff()
[ 77.253146][ T5480] raw: 00fff00000000840 ffff888012c42140 dead000000000122 0000000000000000
[ 77.261910][ T5480] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 77.271012][ T5480] page dumped because: kasan: bad access detected
[ 77.277586][ T5480] page_owner tracks the page as allocated
[ 77.283282][ T5480] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5480, tgid 5478 (syz-executor.0), ts 76853265754, free_ts 51075137329
[ 77.306627][ T5480] post_alloc_hook+0x1e6/0x210
[ 77.311394][ T5480] get_page_from_freelist+0x33ea/0x3570
[ 77.316933][ T5480] __alloc_pages+0x255/0x680
[ 77.321510][ T5480] alloc_slab_page+0x5f/0x160
[ 77.326194][ T5480] new_slab+0x84/0x2f0
[ 77.330603][ T5480] ___slab_alloc+0xd17/0x13d0
[ 77.335272][ T5480] __kmalloc_node_track_caller+0x2cd/0x4e0
[ 77.341171][ T5480] memdup_user+0x2b/0xc0
[ 77.345446][ T5480] btrfs_ioctl_dev_replace+0xb8/0x390
[ 77.350812][ T5480] __se_sys_ioctl+0xf8/0x170
[ 77.355396][ T5480] do_syscall_64+0xf5/0x230
[ 77.359888][ T5480] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.365772][ T5480] page last free pid 5057 tgid 5057 stack trace:
[ 77.372085][ T5480] free_unref_page_prepare+0x907/0xa20
[ 77.377534][ T5480] free_unref_page+0x37/0x3f0
[ 77.382203][ T5480] vfree+0x186/0x2e0
[ 77.386099][ T5480] kcov_close+0x2b/0x50
[ 77.390257][ T5480] __fput+0x428/0x890
[ 77.394226][ T5480] task_work_run+0x24a/0x300
[ 77.398828][ T5480] do_exit+0xa2c/0x2740
[ 77.402986][ T5480] do_group_exit+0x206/0x2c0
[ 77.407742][ T5480] get_signal+0x1769/0x1840
[ 77.412234][ T5480] arch_do_signal_or_restart+0x96/0x860
[ 77.417773][ T5480] syscall_exit_to_user_mode+0xc8/0x370
[ 77.423317][ T5480] do_syscall_64+0x102/0x230
[ 77.428090][ T5480] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.434196][ T5480]
[ 77.436528][ T5480] Memory state around the buggy address:
[ 77.442234][ T5480] ffff88806cc20900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 77.450291][ T5480] ffff88806cc20980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 77.458524][ T5480] >ffff88806cc20a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 77.466656][ T5480] ^
[ 77.472102][ T5480] ffff88806cc20a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 77.480148][ T5480] ffff88806cc20b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 77.488286][ T5480] ==================================================================
[ 77.525643][ T5058] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.535603][ T5480] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.543195][ T5480] CPU: 1 PID: 5480 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller-02723-gde927f6c0b07 #0
[ 77.548996][ T9] cfg80211: failed to load regulatory.db
[ 77.558884][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 77.569291][ T5480] Call Trace:
[ 77.572679][ T5480]
[ 77.575717][ T5480] dump_stack_lvl+0x1e7/0x2d0
[ 77.580406][ T5480] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.585867][ T5480] ? panic+0x850/0x850
[ 77.589936][ T5480] ? rcu_is_watching+0x15/0xb0
[ 77.594783][ T5480] ? vscnprintf+0x5d/0x80
[ 77.599115][ T5480] panic+0x349/0x850
[ 77.603267][ T5480] ? check_panic_on_warn+0x21/0xa0
[ 77.608591][ T5480] ? __memcpy_flushcache+0x2b0/0x2b0
[ 77.613960][ T5480] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 77.620022][ T5480] ? _raw_spin_unlock+0x40/0x40
[ 77.624876][ T5480] ? print_report+0x4fb/0x540
[ 77.629586][ T5480] check_panic_on_warn+0x82/0xa0
[ 77.634521][ T5480] ? strlen+0x58/0x70
[ 77.638496][ T5480] end_report+0x6e/0x140
[ 77.642730][ T5480] kasan_report+0x153/0x170
[ 77.648018][ T5480] ? strlen+0x58/0x70
[ 77.652008][ T5480] strlen+0x58/0x70
[ 77.655819][ T5480] getname_kernel+0x1d/0x2e0
[ 77.660403][ T5480] kern_path+0x1d/0x50
[ 77.664468][ T5480] bdev_open_by_path+0xd1/0x400
[ 77.669340][ T5480] ? bd_finish_claiming+0x400/0x400
[ 77.674719][ T5480] btrfs_dev_replace_by_ioctl+0x41b/0x2010
[ 77.680790][ T5480] ? rcu_is_watching+0x15/0xb0
[ 77.685816][ T5480] ? lock_release+0xbf/0x9c0
[ 77.690398][ T5480] ? btrfs_finish_block_group_to_copy+0x550/0x550
[ 77.696807][ T5480] ? do_raw_spin_lock+0x14e/0x370
[ 77.702007][ T5480] ? __lock_acquire+0x1fd0/0x1fd0
[ 77.707034][ T5480] ? do_raw_spin_unlock+0x13b/0x8b0
[ 77.712576][ T5480] btrfs_ioctl_dev_replace+0x2c9/0x390
[ 77.718030][ T5480] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 77.724700][ T5480] __se_sys_ioctl+0xf8/0x170
[ 77.729283][ T5480] do_syscall_64+0xf5/0x230
[ 77.733865][ T5480] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.739838][ T5480] RIP: 0033:0x7fa74207cba9
[ 77.744255][ T5480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 77.764033][ T5480] RSP: 002b:00007fa742d870c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.772444][ T5480] RAX: ffffffffffffffda RBX: 00007fa74219bf80 RCX: 00007fa74207cba9
[ 77.780414][ T5480] RDX: 0000000020000540 RSI: 00000000ca289435 RDI: 0000000000000005
[ 77.788464][ T5480] RBP: 00007fa7420c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.796514][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.804580][ T5480] R13: 000000000000000b R14: 00007fa74219bf80 R15: 00007ffe5a2c9dd8
[ 77.812672][ T5480]
[ 77.816346][ T5480] Kernel Offset: disabled
[ 77.820760][ T5480] Rebooting in 86400 seconds..