[ 77.027079][ T1131] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. 2023/08/27 23:18:35 ignoring optional flag "sandboxArg"="0" 2023/08/27 23:18:35 parsed 1 programs 2023/08/27 23:18:35 executed programs: 0 [ 78.403216][ T4422] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.411132][ T4422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.419437][ T4422] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.428470][ T4422] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.435859][ T4422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.532340][ T5368] chnl_net:caif_netlink_parms(): no params data found [ 78.572115][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.579696][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.587166][ T5368] bridge_slave_0: entered allmulticast mode [ 78.594792][ T5368] bridge_slave_0: entered promiscuous mode [ 78.603172][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.610666][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.618049][ T5368] bridge_slave_1: entered allmulticast mode [ 78.624650][ T5368] bridge_slave_1: entered promiscuous mode [ 78.644580][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.656140][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.680758][ T5368] team0: Port device team_slave_0 added [ 78.688221][ T5368] team0: Port device team_slave_1 added [ 78.705633][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.712702][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.739228][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.751650][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.758971][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.786194][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.814026][ T5368] hsr_slave_0: entered promiscuous mode [ 78.821478][ T5368] hsr_slave_1: entered promiscuous mode [ 79.310778][ T5368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.321379][ T5368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.332844][ T5368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.343258][ T5368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.371455][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.378591][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.385926][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.393244][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.451699][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.467866][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.477356][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.494258][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.511638][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.518950][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.541523][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.548885][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.601433][ T5368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.788342][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.834533][ T5368] veth0_vlan: entered promiscuous mode [ 79.847955][ T5368] veth1_vlan: entered promiscuous mode [ 79.879695][ T5368] veth0_macvtap: entered promiscuous mode [ 79.889246][ T5368] veth1_macvtap: entered promiscuous mode [ 79.909871][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.924607][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.939420][ T5368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.950909][ T5368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.960822][ T5368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971873][ T5368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.043095][ T5029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.058027][ T5029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.089261][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.098273][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.219868][ T5422] loop0: detected capacity change from 0 to 8192 [ 80.241877][ T5422] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 80.258512][ T5422] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 80.269265][ T5422] REISERFS (device loop0): using ordered data mode [ 80.277412][ T5422] reiserfs: using flush barriers [ 80.284814][ T5422] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 80.303612][ T5422] REISERFS (device loop0): checking transaction log (loop0) [ 80.411111][ T5422] REISERFS (device loop0): Using r5 hash to sort names [ 80.420136][ T5422] REISERFS (device loop0): using 3.5.x disk format [ 80.428395][ T5422] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 80.444050][ T27] audit: type=1800 audit(1693178317.778:2): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 80.449823][ T5422] ================================================================================ [ 80.464126][ T27] audit: type=1800 audit(1693178317.778:3): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 80.495406][ T4422] Bluetooth: hci0: command 0x0409 tx timeout [ 80.514340][ T5422] UBSAN: array-index-out-of-bounds in fs/reiserfs/item_ops.c:485:3 [ 80.518126][ T27] audit: type=1800 audit(1693178317.778:4): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 80.530247][ T5422] index 1 is out of range for type '__u16[1]' (aka 'unsigned short[1]') [ 80.553102][ T5422] CPU: 0 PID: 5422 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-g2dde18cd1d8f #0 [ 80.562795][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 80.572939][ T5422] Call Trace: [ 80.576245][ T5422] [ 80.579280][ T5422] dump_stack_lvl+0x1e7/0x2d0 [ 80.584098][ T5422] ? nf_tcp_handle_invalid+0x650/0x650 [ 80.589639][ T5422] ? panic+0x770/0x770 [ 80.593751][ T5422] ? __kasan_kmalloc+0x98/0xb0 [ 80.598555][ T5422] ? fix_nodes+0x69a4/0x8ce0 [ 80.603188][ T5422] ? reiserfs_paste_into_item+0x654/0x870 [ 80.608941][ T5422] ? reiserfs_get_block+0x2250/0x5130 [ 80.614350][ T5422] ? reiserfs_write_begin+0x24d/0x520 [ 80.619760][ T5422] ? generic_cont_expand_simple+0x18b/0x2a0 [ 80.625684][ T5422] ? reiserfs_setattr+0x57d/0x1140 [ 80.630824][ T5422] ? notify_change+0xc8b/0xf40 [ 80.635623][ T5422] __ubsan_handle_out_of_bounds+0x11c/0x150 [ 80.641560][ T5422] direntry_create_vi+0x7a9/0xf50 [ 80.646634][ T5422] ? direntry_check_item+0x10/0x10 [ 80.651772][ T5422] create_virtual_node+0xa16/0x1bf0 [ 80.657094][ T5422] fix_nodes+0x1fa8/0x8ce0 [ 80.661631][ T5422] ? __might_sleep+0xc0/0xc0 [ 80.666290][ T5422] ? make_empty_dir_item+0x7f0/0x7f0 [ 80.671622][ T5422] ? reiserfs_paste_into_item+0x3f3/0x870 [ 80.677375][ T5422] reiserfs_paste_into_item+0x654/0x870 [ 80.683049][ T5422] ? reiserfs_cut_from_item+0x2580/0x2580 [ 80.688884][ T5422] ? reiserfs_get_block+0x19aa/0x5130 [ 80.694551][ T5422] ? rcu_is_watching+0x15/0xb0 [ 80.699348][ T5422] ? __kmalloc+0xe6/0x230 [ 80.703720][ T5422] reiserfs_get_block+0x2250/0x5130 [ 80.709029][ T5422] ? make_le_item_head+0x570/0x570 [ 80.714180][ T5422] ? verify_lock_unused+0x140/0x140 [ 80.719415][ T5422] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 80.725434][ T5422] ? print_irqtrace_events+0x220/0x220 [ 80.730981][ T5422] ? __lock_acquire+0x7f70/0x7f70 [ 80.736058][ T5422] ? _raw_spin_unlock+0x28/0x40 [ 80.740943][ T5422] ? folio_create_buffers+0x132/0x250 [ 80.746358][ T5422] __block_write_begin_int+0x555/0x1a60 [ 80.751939][ T5422] ? folio_add_lru+0x353/0x6f0 [ 80.756766][ T5422] ? make_le_item_head+0x570/0x570 [ 80.761912][ T5422] ? folio_zero_new_buffers+0x540/0x540 [ 80.767495][ T5422] ? __block_write_begin+0x65/0x160 [ 80.772720][ T5422] ? reiserfs_write_begin+0x183/0x520 [ 80.778130][ T5422] reiserfs_write_begin+0x24d/0x520 [ 80.783377][ T5422] generic_cont_expand_simple+0x18b/0x2a0 [ 80.790261][ T5422] ? submit_bh+0x20/0x20 [ 80.794620][ T5422] ? smk_access+0x477/0x4b0 [ 80.799171][ T5422] ? mutex_lock_nested+0x1b/0x20 [ 80.804143][ T5422] reiserfs_setattr+0x57d/0x1140 [ 80.809219][ T5422] ? reiserfs_commit_write+0x5b0/0x5b0 [ 80.815068][ T5422] ? current_time+0x1e0/0x300 [ 80.819774][ T5422] ? atime_needs_update+0x6d0/0x6d0 [ 80.825269][ T5422] ? evm_inode_setattr+0x100/0x740 [ 80.830420][ T5422] ? bpf_lsm_inode_setattr+0x9/0x10 [ 80.835653][ T5422] ? security_inode_setattr+0xd7/0x130 [ 80.841147][ T5422] ? reiserfs_commit_write+0x5b0/0x5b0 [ 80.846913][ T5422] notify_change+0xc8b/0xf40 [ 80.851642][ T5422] do_truncate+0x220/0x300 [ 80.856095][ T5422] ? put_page_bootmem+0x2e0/0x2e0 [ 80.861167][ T5422] do_sys_ftruncate+0x2f3/0x390 [ 80.866049][ T5422] do_syscall_64+0x41/0xc0 [ 80.870491][ T5422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.876499][ T5422] RIP: 0033:0x7fca9527c999 [ 80.880938][ T5422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 80.900742][ T5422] RSP: 002b:00007fca95f950c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 80.909451][ T5422] RAX: ffffffffffffffda RBX: 00007fca9539bf80 RCX: 00007fca9527c999 [ 80.917449][ T5422] RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000004 [ 80.925447][ T5422] RBP: 00007fca952d8c88 R08: 0000000000000000 R09: 0000000000000000 [ 80.933441][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.941433][ T5422] R13: 000000000000000b R14: 00007fca9539bf80 R15: 00007ffe74d7a2c8 [ 80.949549][ T5422] [ 80.962143][ T5422] ================================================================================ [ 80.984830][ T5422] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 80.992173][ T5422] CPU: 0 PID: 5422 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-g2dde18cd1d8f #0 [ 81.001654][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 81.011741][ T5422] Call Trace: [ 81.015131][ T5422] [ 81.018081][ T5422] dump_stack_lvl+0x1e7/0x2d0 [ 81.022874][ T5422] ? nf_tcp_handle_invalid+0x650/0x650 [ 81.028454][ T5422] ? panic+0x770/0x770 [ 81.032557][ T5422] ? vscnprintf+0x5d/0x80 [ 81.036928][ T5422] panic+0x30f/0x770 [ 81.040857][ T5422] ? check_panic_on_warn+0x21/0xa0 [ 81.046005][ T5422] ? __memcpy_flushcache+0x2b0/0x2b0 [ 81.051324][ T5422] ? dump_stack_lvl+0x253/0x2d0 [ 81.056565][ T5422] ? __kasan_kmalloc+0x98/0xb0 [ 81.061364][ T5422] ? fix_nodes+0x69a4/0x8ce0 [ 81.066135][ T5422] ? reiserfs_paste_into_item+0x654/0x870 [ 81.072236][ T5422] ? reiserfs_get_block+0x2250/0x5130 [ 81.077751][ T5422] check_panic_on_warn+0x82/0xa0 [ 81.082745][ T5422] __ubsan_handle_out_of_bounds+0x13c/0x150 [ 81.088674][ T5422] direntry_create_vi+0x7a9/0xf50 [ 81.093718][ T5422] ? direntry_check_item+0x10/0x10 [ 81.098829][ T5422] create_virtual_node+0xa16/0x1bf0 [ 81.104042][ T5422] fix_nodes+0x1fa8/0x8ce0 [ 81.108481][ T5422] ? __might_sleep+0xc0/0xc0 [ 81.113118][ T5422] ? make_empty_dir_item+0x7f0/0x7f0 [ 81.118514][ T5422] ? reiserfs_paste_into_item+0x3f3/0x870 [ 81.124258][ T5422] reiserfs_paste_into_item+0x654/0x870 [ 81.129823][ T5422] ? reiserfs_cut_from_item+0x2580/0x2580 [ 81.135690][ T5422] ? reiserfs_get_block+0x19aa/0x5130 [ 81.141064][ T5422] ? rcu_is_watching+0x15/0xb0 [ 81.145993][ T5422] ? __kmalloc+0xe6/0x230 [ 81.150409][ T5422] reiserfs_get_block+0x2250/0x5130 [ 81.155641][ T5422] ? make_le_item_head+0x570/0x570 [ 81.160746][ T5422] ? verify_lock_unused+0x140/0x140 [ 81.166108][ T5422] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 81.172083][ T5422] ? print_irqtrace_events+0x220/0x220 [ 81.177574][ T5422] ? __lock_acquire+0x7f70/0x7f70 [ 81.182602][ T5422] ? _raw_spin_unlock+0x28/0x40 [ 81.187534][ T5422] ? folio_create_buffers+0x132/0x250 [ 81.192904][ T5422] __block_write_begin_int+0x555/0x1a60 [ 81.198440][ T5422] ? folio_add_lru+0x353/0x6f0 [ 81.203391][ T5422] ? make_le_item_head+0x570/0x570 [ 81.208525][ T5422] ? folio_zero_new_buffers+0x540/0x540 [ 81.214069][ T5422] ? __block_write_begin+0x65/0x160 [ 81.219365][ T5422] ? reiserfs_write_begin+0x183/0x520 [ 81.224833][ T5422] reiserfs_write_begin+0x24d/0x520 [ 81.230119][ T5422] generic_cont_expand_simple+0x18b/0x2a0 [ 81.235843][ T5422] ? submit_bh+0x20/0x20 [ 81.240081][ T5422] ? smk_access+0x477/0x4b0 [ 81.244669][ T5422] ? mutex_lock_nested+0x1b/0x20 [ 81.249689][ T5422] reiserfs_setattr+0x57d/0x1140 [ 81.254718][ T5422] ? reiserfs_commit_write+0x5b0/0x5b0 [ 81.260437][ T5422] ? current_time+0x1e0/0x300 [ 81.265213][ T5422] ? atime_needs_update+0x6d0/0x6d0 [ 81.270615][ T5422] ? evm_inode_setattr+0x100/0x740 [ 81.275911][ T5422] ? bpf_lsm_inode_setattr+0x9/0x10 [ 81.281129][ T5422] ? security_inode_setattr+0xd7/0x130 [ 81.286601][ T5422] ? reiserfs_commit_write+0x5b0/0x5b0 [ 81.292234][ T5422] notify_change+0xc8b/0xf40 [ 81.296832][ T5422] do_truncate+0x220/0x300 [ 81.301330][ T5422] ? put_page_bootmem+0x2e0/0x2e0 [ 81.306446][ T5422] do_sys_ftruncate+0x2f3/0x390 [ 81.311470][ T5422] do_syscall_64+0x41/0xc0 [ 81.315885][ T5422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.321774][ T5422] RIP: 0033:0x7fca9527c999 [ 81.326181][ T5422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 81.345785][ T5422] RSP: 002b:00007fca95f950c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 81.354367][ T5422] RAX: ffffffffffffffda RBX: 00007fca9539bf80 RCX: 00007fca9527c999 [ 81.362417][ T5422] RDX: 0000000000000000 RSI: 0000000002007fff RDI: 0000000000000004 [ 81.370550][ T5422] RBP: 00007fca952d8c88 R08: 0000000000000000 R09: 0000000000000000 [ 81.378601][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.386564][ T5422] R13: 000000000000000b R14: 00007fca9539bf80 R15: 00007ffe74d7a2c8 [ 81.394624][ T5422] [ 81.397948][ T5422] Kernel Offset: disabled [ 81.402416][ T5422] Rebooting in 86400 seconds..