[ 81.967246][ T54] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. 2023/11/02 07:30:06 ignoring optional flag "sandboxArg"="0" 2023/11/02 07:30:06 parsed 1 programs 2023/11/02 07:30:08 executed programs: 0 [ 86.904231][ T5393] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.959939][ T5048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.968103][ T5048] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.977053][ T5048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.985484][ T5048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.994573][ T5048] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.002522][ T5048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.121490][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 87.177886][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.185293][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.193051][ T5401] bridge_slave_0: entered allmulticast mode [ 87.199885][ T5401] bridge_slave_0: entered promiscuous mode [ 87.208446][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.215848][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.223116][ T5401] bridge_slave_1: entered allmulticast mode [ 87.230588][ T5401] bridge_slave_1: entered promiscuous mode [ 87.256416][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.268096][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.299182][ T5401] team0: Port device team_slave_0 added [ 87.308542][ T5401] team0: Port device team_slave_1 added [ 87.331517][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.339117][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.366787][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.379815][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.387025][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.414635][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.454037][ T5401] hsr_slave_0: entered promiscuous mode [ 87.461106][ T5401] hsr_slave_1: entered promiscuous mode [ 88.219802][ T5401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.233191][ T5401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.247124][ T5401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.260857][ T5401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.364847][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.398286][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.412479][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.420917][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.449459][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.457149][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.503836][ T5401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.681964][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.746496][ T5401] veth0_vlan: entered promiscuous mode [ 88.763173][ T5401] veth1_vlan: entered promiscuous mode [ 88.812390][ T5401] veth0_macvtap: entered promiscuous mode [ 88.825443][ T5401] veth1_macvtap: entered promiscuous mode [ 88.852186][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.872161][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.888799][ T5401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.901630][ T5401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912079][ T5401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.924845][ T5401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.037301][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.054358][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.086476][ T4451] Bluetooth: hci0: command 0x0409 tx timeout [ 89.093840][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.108742][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.197755][ T5468] loop0: detected capacity change from 0 to 1024 [ 89.308818][ T56] ================================================================== [ 89.316932][ T56] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.325895][ T56] Read of size 2048 at addr ffff888027afb400 by task kworker/u4:4/56 [ 89.333991][ T56] [ 89.336423][ T56] CPU: 1 PID: 56 Comm: kworker/u4:4 Not tainted 6.6.0-syzkaller-10265-gbabe393974de #0 [ 89.346252][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 89.356684][ T56] Workqueue: loop0 loop_workfn [ 89.361840][ T56] Call Trace: [ 89.365229][ T56] [ 89.368277][ T56] dump_stack_lvl+0x1e7/0x2d0 [ 89.373861][ T56] ? nf_tcp_handle_invalid+0x650/0x650 [ 89.382298][ T56] ? panic+0x770/0x770 [ 89.386407][ T56] ? _printk+0xd5/0x120 [ 89.391308][ T56] print_report+0x163/0x540 [ 89.396015][ T56] ? __virt_addr_valid+0x22f/0x2e0 [ 89.401231][ T56] ? __phys_addr+0xba/0x170 [ 89.405789][ T56] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.412021][ T56] kasan_report+0x175/0x1b0 [ 89.416628][ T56] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.422989][ T56] kasan_check_range+0x27e/0x290 [ 89.428311][ T56] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.434507][ T56] __asan_memcpy+0x29/0x70 [ 89.439308][ T56] copy_page_from_iter_atomic+0x9b2/0x1e70 [ 89.445520][ T56] ? iov_iter_zero+0x1b50/0x1b50 [ 89.450764][ T56] ? shmem_write_begin+0x1c1/0x300 [ 89.456081][ T56] ? shmem_writepage+0x1ac0/0x1ac0 [ 89.461411][ T56] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 89.467520][ T56] ? fault_in_iov_iter_readable+0x236/0x280 [ 89.473702][ T56] generic_perform_write+0x392/0x630 [ 89.479075][ T56] ? generic_file_direct_write+0x3f0/0x3f0 [ 89.485299][ T56] ? preempt_count_add+0x93/0x180 [ 89.490437][ T56] ? mnt_put_write_access_file+0xbb/0x100 [ 89.496443][ T56] ? file_update_time+0x19c/0x1b0 [ 89.501688][ T56] shmem_file_write_iter+0xfc/0x120 [ 89.507094][ T56] do_iter_write+0x7ac/0xcb0 [ 89.511795][ T56] ? vfs_iter_write+0xa0/0xa0 [ 89.516573][ T56] ? rcu_read_lock_bh_held+0x120/0x120 [ 89.522159][ T56] ? vfs_iter_write+0x70/0xa0 [ 89.527260][ T56] loop_process_work+0x14c3/0x22a0 [ 89.532818][ T56] ? loop_workfn+0x50/0x50 [ 89.537528][ T56] ? read_lock_is_recursive+0x20/0x20 [ 89.543081][ T56] ? print_irqtrace_events+0x220/0x220 [ 89.548717][ T56] ? process_scheduled_works+0x825/0x1400 [ 89.554620][ T56] process_scheduled_works+0x90f/0x1400 [ 89.560636][ T56] ? assign_work+0x3d0/0x3d0 [ 89.565335][ T56] ? assign_work+0x364/0x3d0 [ 89.570224][ T56] worker_thread+0xa5f/0xff0 [ 89.574832][ T56] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.580998][ T56] kthread+0x2d3/0x370 [ 89.585182][ T56] ? pr_cont_work+0x5e0/0x5e0 [ 89.590210][ T56] ? kthread_blkcg+0xd0/0xd0 [ 89.595496][ T56] ret_from_fork+0x48/0x80 [ 89.600100][ T56] ? kthread_blkcg+0xd0/0xd0 [ 89.604732][ T56] ret_from_fork_asm+0x11/0x20 [ 89.609780][ T56] [ 89.612810][ T56] [ 89.615145][ T56] Allocated by task 5468: [ 89.619579][ T56] kasan_set_track+0x4f/0x70 [ 89.624196][ T56] __kasan_kmalloc+0x98/0xb0 [ 89.628892][ T56] __kmalloc+0xb9/0x230 [ 89.633206][ T56] hfsplus_read_wrapper+0x545/0x1330 [ 89.638506][ T56] hfsplus_fill_super+0x38e/0x1c90 [ 89.643725][ T56] mount_bdev+0x237/0x300 [ 89.648150][ T56] legacy_get_tree+0xef/0x190 [ 89.652928][ T56] vfs_get_tree+0x8c/0x280 [ 89.657352][ T56] do_new_mount+0x28f/0xae0 [ 89.662142][ T56] __se_sys_mount+0x2d9/0x3c0 [ 89.667077][ T56] do_syscall_64+0x44/0x110 [ 89.671853][ T56] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 89.678811][ T56] [ 89.681698][ T56] The buggy address belongs to the object at ffff888027afb400 [ 89.681698][ T56] which belongs to the cache kmalloc-512 of size 512 [ 89.696807][ T56] The buggy address is located 0 bytes inside of [ 89.696807][ T56] allocated 512-byte region [ffff888027afb400, ffff888027afb600) [ 89.711135][ T56] [ 89.713463][ T56] The buggy address belongs to the physical page: [ 89.720488][ T56] page:ffffea00009ebe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27af8 [ 89.731410][ T56] head:ffffea00009ebe00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.740592][ T56] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.749016][ T56] page_type: 0xffffffff() [ 89.753514][ T56] raw: 00fff00000000840 ffff888012c41c80 0000000000000000 dead000000000001 [ 89.762353][ T56] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 89.770935][ T56] page dumped because: kasan: bad access detected [ 89.778090][ T56] page_owner tracks the page as allocated [ 89.784004][ T56] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3172, tgid 3172 (kworker/u4:8), ts 14595200328, free_ts 0 [ 89.805038][ T56] post_alloc_hook+0x1e6/0x210 [ 89.810281][ T56] get_page_from_freelist+0x31db/0x3360 [ 89.815839][ T56] __alloc_pages+0x255/0x670 [ 89.821314][ T56] alloc_slab_page+0x6a/0x160 [ 89.826636][ T56] new_slab+0x84/0x2f0 [ 89.830749][ T56] ___slab_alloc+0xc85/0x1310 [ 89.835501][ T56] __kmem_cache_alloc_node+0x19d/0x270 [ 89.841033][ T56] kmalloc_trace+0x2a/0xe0 [ 89.845612][ T56] alloc_bprm+0x56/0x900 [ 89.850015][ T56] kernel_execve+0x96/0xa10 [ 89.854614][ T56] call_usermodehelper_exec_async+0x233/0x370 [ 89.861149][ T56] ret_from_fork+0x48/0x80 [ 89.865605][ T56] ret_from_fork_asm+0x11/0x20 [ 89.870482][ T56] page_owner free stack trace missing [ 89.876016][ T56] [ 89.878329][ T56] Memory state around the buggy address: [ 89.884396][ T56] ffff888027afb500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.892810][ T56] ffff888027afb580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 89.901472][ T56] >ffff888027afb600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.909550][ T56] ^ [ 89.913780][ T56] ffff888027afb680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.922028][ T56] ffff888027afb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.930083][ T56] ================================================================== [ 89.938614][ T56] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.945907][ T56] CPU: 1 PID: 56 Comm: kworker/u4:4 Not tainted 6.6.0-syzkaller-10265-gbabe393974de #0 [ 89.955818][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 89.965978][ T56] Workqueue: loop0 loop_workfn [ 89.970940][ T56] Call Trace: [ 89.974579][ T56] [ 89.977629][ T56] dump_stack_lvl+0x1e7/0x2d0 [ 89.982522][ T56] ? nf_tcp_handle_invalid+0x650/0x650 [ 89.988370][ T56] ? panic+0x770/0x770 [ 89.993130][ T56] ? vscnprintf+0x5d/0x80 [ 89.998437][ T56] panic+0x30f/0x770 [ 90.002730][ T56] ? check_panic_on_warn+0x21/0xa0 [ 90.008202][ T56] ? __memcpy_flushcache+0x2b0/0x2b0 [ 90.013529][ T56] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 90.019529][ T56] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.025567][ T56] ? _raw_spin_unlock+0x40/0x40 [ 90.030513][ T56] ? print_report+0x4fb/0x540 [ 90.035276][ T56] check_panic_on_warn+0x82/0xa0 [ 90.040381][ T56] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.046732][ T56] end_report+0x6e/0x130 [ 90.051060][ T56] kasan_report+0x186/0x1b0 [ 90.055742][ T56] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.062021][ T56] kasan_check_range+0x27e/0x290 [ 90.067048][ T56] ? copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.073024][ T56] __asan_memcpy+0x29/0x70 [ 90.077521][ T56] copy_page_from_iter_atomic+0x9b2/0x1e70 [ 90.083747][ T56] ? iov_iter_zero+0x1b50/0x1b50 [ 90.088853][ T56] ? shmem_write_begin+0x1c1/0x300 [ 90.093959][ T56] ? shmem_writepage+0x1ac0/0x1ac0 [ 90.099417][ T56] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 90.105400][ T56] ? fault_in_iov_iter_readable+0x236/0x280 [ 90.112356][ T56] generic_perform_write+0x392/0x630 [ 90.117728][ T56] ? generic_file_direct_write+0x3f0/0x3f0 [ 90.124690][ T56] ? preempt_count_add+0x93/0x180 [ 90.130178][ T56] ? mnt_put_write_access_file+0xbb/0x100 [ 90.136001][ T56] ? file_update_time+0x19c/0x1b0 [ 90.141343][ T56] shmem_file_write_iter+0xfc/0x120 [ 90.146741][ T56] do_iter_write+0x7ac/0xcb0 [ 90.151436][ T56] ? vfs_iter_write+0xa0/0xa0 [ 90.156209][ T56] ? rcu_read_lock_bh_held+0x120/0x120 [ 90.162039][ T56] ? vfs_iter_write+0x70/0xa0 [ 90.166852][ T56] loop_process_work+0x14c3/0x22a0 [ 90.172564][ T56] ? loop_workfn+0x50/0x50 [ 90.177355][ T56] ? read_lock_is_recursive+0x20/0x20 [ 90.182831][ T56] ? print_irqtrace_events+0x220/0x220 [ 90.188293][ T56] ? process_scheduled_works+0x825/0x1400 [ 90.194316][ T56] process_scheduled_works+0x90f/0x1400 [ 90.199980][ T56] ? assign_work+0x3d0/0x3d0 [ 90.205240][ T56] ? assign_work+0x364/0x3d0 [ 90.210128][ T56] worker_thread+0xa5f/0xff0 [ 90.216141][ T56] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 90.222308][ T56] kthread+0x2d3/0x370 [ 90.226632][ T56] ? pr_cont_work+0x5e0/0x5e0 [ 90.231565][ T56] ? kthread_blkcg+0xd0/0xd0 [ 90.236326][ T56] ret_from_fork+0x48/0x80 [ 90.240904][ T56] ? kthread_blkcg+0xd0/0xd0 [ 90.246001][ T56] ret_from_fork_asm+0x11/0x20 [ 90.250862][ T56] [ 90.254203][ T56] Kernel Offset: disabled [ 90.258965][ T56] Rebooting in 86400 seconds..