[ 76.032135][ T779] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 2023/12/16 22:20:05 ignoring optional flag "sandboxArg"="0" 2023/12/16 22:20:05 parsed 1 programs 2023/12/16 22:20:06 executed programs: 0 [ 81.049215][ T5416] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.097815][ T4464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.105405][ T4464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.113054][ T4464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.122384][ T4464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.129946][ T4464] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.137428][ T4464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.247692][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 81.300700][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.307997][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.315220][ T5423] bridge_slave_0: entered allmulticast mode [ 81.322129][ T5423] bridge_slave_0: entered promiscuous mode [ 81.330155][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.337364][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.344568][ T5423] bridge_slave_1: entered allmulticast mode [ 81.351393][ T5423] bridge_slave_1: entered promiscuous mode [ 81.375519][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.386869][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.414642][ T5423] team0: Port device team_slave_0 added [ 81.423096][ T5423] team0: Port device team_slave_1 added [ 81.444498][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.451522][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.477443][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.489901][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.496854][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.522776][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.559807][ T5423] hsr_slave_0: entered promiscuous mode [ 81.567523][ T5423] hsr_slave_1: entered promiscuous mode [ 82.310883][ T5423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.322381][ T5423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.333612][ T5423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.345670][ T5423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.456458][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.480415][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.494811][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.501964][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.519597][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.526758][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.723405][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.770525][ T5423] veth0_vlan: entered promiscuous mode [ 82.784017][ T5423] veth1_vlan: entered promiscuous mode [ 82.821252][ T5423] veth0_macvtap: entered promiscuous mode [ 82.833400][ T5423] veth1_macvtap: entered promiscuous mode [ 82.855998][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.872128][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.885063][ T5423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.895138][ T5423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905975][ T5423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.915925][ T5423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.987915][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.998787][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.035904][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.045233][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.177271][ T5493] loop0: detected capacity change from 0 to 8192 [ 83.189721][ T5493] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.205607][ T5493] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 83.216521][ T5493] REISERFS (device loop0): using ordered data mode [ 83.224226][ T5493] reiserfs: using flush barriers [ 83.232634][ T4464] Bluetooth: hci0: command 0x0409 tx timeout [ 83.235587][ T5493] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.256875][ T5493] REISERFS (device loop0): checking transaction log (loop0) [ 83.269475][ T5493] REISERFS (device loop0): Using tea hash to sort names [ 83.278476][ T5493] REISERFS (device loop0): using 3.5.x disk format [ 83.286178][ T5493] ================================================================== [ 83.294256][ T5493] BUG: KASAN: use-after-free in set_de_name_and_namelen+0x592/0x6a0 [ 83.302268][ T5493] Read of size 1 at addr ffff88806629ff83 by task syz-executor.0/5493 [ 83.310426][ T5493] [ 83.312748][ T5493] CPU: 0 PID: 5493 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00230-g3b8a9b2e6809 #0 [ 83.323091][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 83.333157][ T5493] Call Trace: [ 83.336453][ T5493] [ 83.339388][ T5493] dump_stack_lvl+0xd9/0x1b0 [ 83.344002][ T5493] print_report+0xc4/0x620 [ 83.348451][ T5493] ? __virt_addr_valid+0x5e/0x2d0 [ 83.353495][ T5493] ? __phys_addr+0xc6/0x140 [ 83.358005][ T5493] kasan_report+0xda/0x110 [ 83.362440][ T5493] ? set_de_name_and_namelen+0x592/0x6a0 [ 83.368081][ T5493] ? set_de_name_and_namelen+0x592/0x6a0 [ 83.373736][ T5493] set_de_name_and_namelen+0x592/0x6a0 [ 83.379296][ T5493] reiserfs_find_entry+0x481/0xe70 [ 83.384429][ T5493] ? search_by_entry_key+0x940/0x940 [ 83.389727][ T5493] reiserfs_lookup+0x1f5/0x690 [ 83.394499][ T5493] ? reiserfs_unlink+0x740/0x740 [ 83.399469][ T5493] __lookup_slow+0x24d/0x450 [ 83.404072][ T5493] ? lookup_open.isra.0+0x13b0/0x13b0 [ 83.409456][ T5493] ? reacquire_held_locks+0x4c0/0x4c0 [ 83.414844][ T5493] ? secondary_startup_64_no_verify+0x11b/0x16b [ 83.421099][ T5493] ? secondary_startup_64_no_verify+0x11b/0x16b [ 83.427446][ T5493] ? d_lookup+0xe9/0x180 [ 83.431703][ T5493] lookup_one_len+0x17d/0x1b0 [ 83.436406][ T5493] ? __lookup_slow+0x450/0x450 [ 83.441192][ T5493] reiserfs_lookup_privroot+0x94/0x200 [ 83.446660][ T5493] reiserfs_fill_super+0x20f9/0x3160 [ 83.451957][ T5493] ? reiserfs_remount+0x1640/0x1640 [ 83.457166][ T5493] ? up_write+0x510/0x510 [ 83.461524][ T5493] ? lock_sync+0x190/0x190 [ 83.465966][ T5493] ? reiserfs_remount+0x1640/0x1640 [ 83.471185][ T5493] mount_bdev+0x1f3/0x2e0 [ 83.475548][ T5493] ? sget+0x640/0x640 [ 83.479657][ T5493] ? apparmor_capable+0x126/0x1e0 [ 83.484721][ T5493] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 83.489768][ T5493] legacy_get_tree+0x109/0x220 [ 83.494572][ T5493] vfs_get_tree+0x8c/0x370 [ 83.499010][ T5493] path_mount+0x1492/0x1ed0 [ 83.503533][ T5493] ? kmem_cache_free+0xf8/0x350 [ 83.508412][ T5493] ? finish_automount+0xa40/0xa40 [ 83.513459][ T5493] ? putname+0x12e/0x170 [ 83.517712][ T5493] __x64_sys_mount+0x293/0x310 [ 83.522491][ T5493] ? copy_mnt_ns+0xb60/0xb60 [ 83.527104][ T5493] ? syscall_enter_from_user_mode+0x7f/0x120 [ 83.533102][ T5493] do_syscall_64+0x40/0x110 [ 83.537626][ T5493] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 83.543537][ T5493] RIP: 0033:0x7fd4a547e1ea [ 83.547957][ T5493] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.567574][ T5493] RSP: 002b:00007fd4a47fdee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.575999][ T5493] RAX: ffffffffffffffda RBX: 00007fd4a47fdf80 RCX: 00007fd4a547e1ea [ 83.583981][ T5493] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007fd4a47fdf40 [ 83.591965][ T5493] RBP: 0000000020000000 R08: 00007fd4a47fdf80 R09: 0000000000000000 [ 83.599953][ T5493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040 [ 83.608016][ T5493] R13: 00007fd4a47fdf40 R14: 000000000000111d R15: 0000000020000300 [ 83.615997][ T5493] [ 83.619024][ T5493] [ 83.621343][ T5493] The buggy address belongs to the physical page: [ 83.627761][ T5493] page:ffffea000198a7c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6629f [ 83.637919][ T5493] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.645219][ T5493] page_type: 0xffffffff() [ 83.649571][ T5493] raw: 00fff00000000000 ffffea000198a808 ffffea000198a788 0000000000000000 [ 83.658172][ T5493] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 83.666756][ T5493] page dumped because: kasan: bad access detected [ 83.673179][ T5493] page_owner tracks the page as freed [ 83.678548][ T5493] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 12071288811, free_ts 13169836979 [ 83.693488][ T5493] post_alloc_hook+0x2d0/0x350 [ 83.698272][ T5493] split_map_pages+0x1ff/0x520 [ 83.703043][ T5493] isolate_freepages_range+0x318/0x370 [ 83.708515][ T5493] alloc_contig_range+0x32e/0x510 [ 83.713644][ T5493] alloc_contig_pages+0x31a/0x610 [ 83.718710][ T5493] debug_vm_pgtable+0x5d8/0x3250 [ 83.723701][ T5493] do_one_initcall+0x11c/0x650 [ 83.728473][ T5493] kernel_init_freeable+0x687/0xc10 [ 83.733698][ T5493] kernel_init+0x1c/0x2a0 [ 83.738036][ T5493] ret_from_fork+0x45/0x80 [ 83.742463][ T5493] ret_from_fork_asm+0x11/0x20 [ 83.747253][ T5493] page last free stack trace: [ 83.751925][ T5493] free_unref_page_prepare+0x4fa/0xaa0 [ 83.757396][ T5493] free_unref_page+0x33/0x3b0 [ 83.762082][ T5493] free_contig_range+0xb6/0x190 [ 83.766950][ T5493] destroy_args+0xa69/0xe40 [ 83.771464][ T5493] debug_vm_pgtable+0x16fe/0x3250 [ 83.776523][ T5493] do_one_initcall+0x11c/0x650 [ 83.781313][ T5493] kernel_init_freeable+0x687/0xc10 [ 83.786547][ T5493] kernel_init+0x1c/0x2a0 [ 83.792716][ T5493] ret_from_fork+0x45/0x80 [ 83.797146][ T5493] ret_from_fork_asm+0x11/0x20 [ 83.801925][ T5493] [ 83.804250][ T5493] Memory state around the buggy address: [ 83.809877][ T5493] ffff88806629fe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.817936][ T5493] ffff88806629ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.826001][ T5493] >ffff88806629ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.834065][ T5493] ^ [ 83.838131][ T5493] ffff8880662a0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.846196][ T5493] ffff8880662a0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 83.854253][ T5493] ================================================================== [ 83.896516][ T5493] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.903738][ T5493] CPU: 0 PID: 5493 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00230-g3b8a9b2e6809 #0 [ 83.914057][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 83.924113][ T5493] Call Trace: [ 83.927389][ T5493] [ 83.930319][ T5493] dump_stack_lvl+0xd9/0x1b0 [ 83.934918][ T5493] panic+0x6dc/0x790 [ 83.938829][ T5493] ? panic_smp_self_stop+0xa0/0xa0 [ 83.943952][ T5493] ? irqentry_exit+0x3b/0x80 [ 83.948546][ T5493] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.953769][ T5493] ? preempt_schedule_thunk+0x1a/0x30 [ 83.959153][ T5493] ? preempt_schedule_common+0x45/0xc0 [ 83.964627][ T5493] ? check_panic_on_warn+0x1f/0xb0 [ 83.969761][ T5493] check_panic_on_warn+0xab/0xb0 [ 83.974719][ T5493] end_report+0x108/0x150 [ 83.979059][ T5493] kasan_report+0xea/0x110 [ 83.983494][ T5493] ? set_de_name_and_namelen+0x592/0x6a0 [ 83.989154][ T5493] ? set_de_name_and_namelen+0x592/0x6a0 [ 83.994806][ T5493] set_de_name_and_namelen+0x592/0x6a0 [ 84.000284][ T5493] reiserfs_find_entry+0x481/0xe70 [ 84.005408][ T5493] ? search_by_entry_key+0x940/0x940 [ 84.010689][ T5493] reiserfs_lookup+0x1f5/0x690 [ 84.015453][ T5493] ? reiserfs_unlink+0x740/0x740 [ 84.020392][ T5493] __lookup_slow+0x24d/0x450 [ 84.024972][ T5493] ? lookup_open.isra.0+0x13b0/0x13b0 [ 84.030334][ T5493] ? reacquire_held_locks+0x4c0/0x4c0 [ 84.035700][ T5493] ? secondary_startup_64_no_verify+0x11b/0x16b [ 84.041937][ T5493] ? secondary_startup_64_no_verify+0x11b/0x16b [ 84.048255][ T5493] ? d_lookup+0xe9/0x180 [ 84.052494][ T5493] lookup_one_len+0x17d/0x1b0 [ 84.057162][ T5493] ? __lookup_slow+0x450/0x450 [ 84.061917][ T5493] reiserfs_lookup_privroot+0x94/0x200 [ 84.067362][ T5493] reiserfs_fill_super+0x20f9/0x3160 [ 84.072635][ T5493] ? reiserfs_remount+0x1640/0x1640 [ 84.077822][ T5493] ? up_write+0x510/0x510 [ 84.082141][ T5493] ? lock_sync+0x190/0x190 [ 84.086558][ T5493] ? reiserfs_remount+0x1640/0x1640 [ 84.091739][ T5493] mount_bdev+0x1f3/0x2e0 [ 84.096061][ T5493] ? sget+0x640/0x640 [ 84.100032][ T5493] ? apparmor_capable+0x126/0x1e0 [ 84.105051][ T5493] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 84.110063][ T5493] legacy_get_tree+0x109/0x220 [ 84.114819][ T5493] vfs_get_tree+0x8c/0x370 [ 84.119223][ T5493] path_mount+0x1492/0x1ed0 [ 84.123731][ T5493] ? kmem_cache_free+0xf8/0x350 [ 84.128571][ T5493] ? finish_automount+0xa40/0xa40 [ 84.133588][ T5493] ? putname+0x12e/0x170 [ 84.137817][ T5493] __x64_sys_mount+0x293/0x310 [ 84.142568][ T5493] ? copy_mnt_ns+0xb60/0xb60 [ 84.147154][ T5493] ? syscall_enter_from_user_mode+0x7f/0x120 [ 84.153124][ T5493] do_syscall_64+0x40/0x110 [ 84.157617][ T5493] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 84.163498][ T5493] RIP: 0033:0x7fd4a547e1ea [ 84.167900][ T5493] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 84.187502][ T5493] RSP: 002b:00007fd4a47fdee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.195909][ T5493] RAX: ffffffffffffffda RBX: 00007fd4a47fdf80 RCX: 00007fd4a547e1ea [ 84.203871][ T5493] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007fd4a47fdf40 [ 84.211830][ T5493] RBP: 0000000020000000 R08: 00007fd4a47fdf80 R09: 0000000000000000 [ 84.219958][ T5493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000040 [ 84.227916][ T5493] R13: 00007fd4a47fdf40 R14: 000000000000111d R15: 0000000020000300 [ 84.235880][ T5493] [ 84.239142][ T5493] Kernel Offset: disabled [ 84.243442][ T5493] Rebooting in 86400 seconds..