[ 81.896785][ T27] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
2023/11/26 18:54:50 ignoring optional flag "sandboxArg"="0"
2023/11/26 18:54:50 parsed 1 programs
2023/11/26 18:54:52 executed programs: 0
[ 86.541726][ T5404] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.592988][ T4453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.601468][ T4453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.610228][ T4453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.618379][ T4453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.626652][ T4453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.634032][ T4453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.750165][ T5410] chnl_net:caif_netlink_parms(): no params data found
[ 86.804756][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.812724][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.820971][ T5410] bridge_slave_0: entered allmulticast mode
[ 86.828349][ T5410] bridge_slave_0: entered promiscuous mode
[ 86.836721][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.843909][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.851725][ T5410] bridge_slave_1: entered allmulticast mode
[ 86.858854][ T5410] bridge_slave_1: entered promiscuous mode
[ 86.883012][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.895716][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.921881][ T5410] team0: Port device team_slave_0 added
[ 86.930784][ T5410] team0: Port device team_slave_1 added
[ 86.953109][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.960344][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.986749][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.000177][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.007653][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.034983][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.070574][ T5410] hsr_slave_0: entered promiscuous mode
[ 87.077073][ T5410] hsr_slave_1: entered promiscuous mode
[ 87.854678][ T5410] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.866942][ T5410] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.878456][ T5410] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.892644][ T5410] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.996703][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.027540][ T5410] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.041820][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.049259][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.079265][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.086512][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.308627][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.372560][ T5410] veth0_vlan: entered promiscuous mode
[ 88.389990][ T5410] veth1_vlan: entered promiscuous mode
[ 88.431472][ T5410] veth0_macvtap: entered promiscuous mode
[ 88.443327][ T5410] veth1_macvtap: entered promiscuous mode
[ 88.470804][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.491955][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.507200][ T5410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.518125][ T5410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.529689][ T5410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.538559][ T5410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.638223][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.662030][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.695812][ T4453] Bluetooth: hci0: command 0x0409 tx timeout
[ 88.704581][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.716040][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.851706][ T5482] loop0: detected capacity change from 0 to 8192
[ 88.871428][ T5482] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 88.887972][ T5482] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 88.899122][ T5482] REISERFS (device loop0): using ordered data mode
[ 88.908493][ T5482] reiserfs: using flush barriers
[ 88.916283][ T5482] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 88.934574][ T5482] REISERFS (device loop0): checking transaction log (loop0)
[ 88.951679][ T5482] REISERFS (device loop0): Using r5 hash to sort names
[ 88.961170][ T5482] ==================================================================
[ 88.969269][ T5482] BUG: KASAN: use-after-free in reiserfs_get_unused_objectid+0x231/0x490
[ 88.977718][ T5482] Read of size 250888 at addr ffff88806b050058 by task syz-executor.0/5482
[ 88.986327][ T5482]
[ 88.988667][ T5482] CPU: 0 PID: 5482 Comm: syz-executor.0 Not tainted 6.7.0-rc2-syzkaller-00265-gd2da77f431ac #0
[ 88.999008][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 89.009091][ T5482] Call Trace:
[ 89.012386][ T5482]
[ 89.015330][ T5482] dump_stack_lvl+0x1e7/0x2d0
[ 89.020037][ T5482] ? nf_tcp_handle_invalid+0x650/0x650
[ 89.025698][ T5482] ? panic+0x850/0x850
[ 89.030060][ T5482] ? _printk+0xd5/0x120
[ 89.034246][ T5482] print_report+0x163/0x540
[ 89.038862][ T5482] ? __virt_addr_valid+0x22f/0x2e0
[ 89.044084][ T5482] ? __phys_addr+0xba/0x170
[ 89.048798][ T5482] ? reiserfs_get_unused_objectid+0x231/0x490
[ 89.055162][ T5482] kasan_report+0x142/0x170
[ 89.059970][ T5482] ? reiserfs_get_unused_objectid+0x231/0x490
[ 89.066240][ T5482] kasan_check_range+0x27e/0x290
[ 89.071202][ T5482] ? reiserfs_get_unused_objectid+0x231/0x490
[ 89.077566][ T5482] __asan_memmove+0x29/0x70
[ 89.082190][ T5482] reiserfs_get_unused_objectid+0x231/0x490
[ 89.088116][ T5482] reiserfs_new_inode+0x2bc/0x1cb0
[ 89.093517][ T5482] ? mutex_unlock+0x10/0x10
[ 89.098060][ T5482] ? reiserfs_write_inode+0x2e0/0x2e0
[ 89.103561][ T5482] ? do_journal_begin_r+0xdcd/0x1030
[ 89.109054][ T5482] ? journal_begin+0x1f3/0x360
[ 89.113939][ T5482] reiserfs_mkdir+0x5b0/0x8f0
[ 89.118655][ T5482] ? reiserfs_symlink+0x720/0x720
[ 89.123724][ T5482] ? __down_write_common+0x161/0x200
[ 89.129051][ T5482] ? __up_read+0x6a0/0x6a0
[ 89.133578][ T5482] reiserfs_xattr_init+0x355/0x6c0
[ 89.138721][ T5482] reiserfs_fill_super+0x2207/0x2620
[ 89.144047][ T5482] ? reiserfs_kill_sb+0x150/0x150
[ 89.149106][ T5482] ? __down_write_common+0x161/0x200
[ 89.154681][ T5482] mount_bdev+0x237/0x300
[ 89.159117][ T5482] ? reiserfs_kill_sb+0x150/0x150
[ 89.164163][ T5482] ? get_tree_bdev+0x5b0/0x5b0
[ 89.168945][ T5482] ? vfs_parse_fs_string+0x190/0x230
[ 89.174248][ T5482] ? vfs_parse_fs_param+0x410/0x410
[ 89.179477][ T5482] ? cap_capable+0x1b4/0x240
[ 89.184180][ T5482] legacy_get_tree+0xef/0x190
[ 89.188964][ T5482] ? remove_save_link+0x540/0x540
[ 89.194054][ T5482] vfs_get_tree+0x8c/0x2a0
[ 89.198667][ T5482] do_new_mount+0x28f/0xae0
[ 89.203285][ T5482] ? do_move_mount_old+0x170/0x170
[ 89.208509][ T5482] __se_sys_mount+0x2d9/0x3c0
[ 89.213209][ T5482] ? __x64_sys_mount+0xc0/0xc0
[ 89.217993][ T5482] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 89.224042][ T5482] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 89.230135][ T5482] ? __x64_sys_mount+0x20/0xc0
[ 89.235007][ T5482] do_syscall_64+0x45/0x110
[ 89.239622][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 89.245544][ T5482] RIP: 0033:0x7f46dec7e1ea
[ 89.250066][ T5482] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 89.269822][ T5482] RSP: 002b:00007f46dfa4dee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 89.278446][ T5482] RAX: ffffffffffffffda RBX: 00007f46dfa4df80 RCX: 00007f46dec7e1ea
[ 89.286706][ T5482] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 00007f46dfa4df40
[ 89.295051][ T5482] RBP: 0000000020000080 R08: 00007f46dfa4df80 R09: 0000000000008008
[ 89.303627][ T5482] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000020000040
[ 89.311741][ T5482] R13: 00007f46dfa4df40 R14: 0000000000001138 R15: 00000000200000c0
[ 89.319743][ T5482]
[ 89.322773][ T5482]
[ 89.325102][ T5482] The buggy address belongs to the physical page:
[ 89.331612][ T5482] page:ffffea0001ac1400 refcount:2 mapcount:0 mapping:ffff88801b086ff8 index:0x10 pfn:0x6b050
[ 89.342051][ T5482] memcg:ffff8881423a8000
[ 89.346305][ T5482] aops:def_blk_aops ino:700000
[ 89.351086][ T5482] flags: 0xfff00000008124(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 89.360813][ T5482] page_type: 0xffffffff()
[ 89.365156][ T5482] raw: 00fff00000008124 ffffea0001ac0088 ffff88807f4f8030 ffff88801b086ff8
[ 89.373961][ T5482] raw: 0000000000000010 ffff88806bcf0740 00000002ffffffff ffff8881423a8000
[ 89.382733][ T5482] page dumped because: kasan: bad access detected
[ 89.389244][ T5482] page_owner tracks the page as allocated
[ 89.395054][ T5482] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5482, tgid 5481 (syz-executor.0), ts 88870829862, free_ts 88863110601
[ 89.415918][ T5482] post_alloc_hook+0x1e6/0x210
[ 89.420706][ T5482] get_page_from_freelist+0x33ea/0x3570
[ 89.426281][ T5482] __alloc_pages+0x255/0x680
[ 89.430893][ T5482] alloc_pages_mpol+0x3de/0x640
[ 89.435762][ T5482] folio_alloc+0x12a/0x330
[ 89.440197][ T5482] filemap_alloc_folio+0xde/0x500
[ 89.445246][ T5482] __filemap_get_folio+0x431/0xbb0
[ 89.450386][ T5482] bdev_getblk+0x246/0x6d0
[ 89.455077][ T5482] __bread_gfp+0xaf/0x430
[ 89.459431][ T5482] read_super_block+0x91/0x800
[ 89.464215][ T5482] reiserfs_fill_super+0x912/0x2620
[ 89.469521][ T5482] mount_bdev+0x237/0x300
[ 89.473873][ T5482] legacy_get_tree+0xef/0x190
[ 89.478578][ T5482] vfs_get_tree+0x8c/0x2a0
[ 89.483240][ T5482] do_new_mount+0x28f/0xae0
[ 89.487854][ T5482] __se_sys_mount+0x2d9/0x3c0
[ 89.492557][ T5482] page last free stack trace:
[ 89.497239][ T5482] free_unref_page_prepare+0x931/0xa60
[ 89.502806][ T5482] free_unref_page_list+0x5a0/0x840
[ 89.508106][ T5482] release_pages+0x2117/0x2400
[ 89.512992][ T5482] tlb_flush_mmu+0x34c/0x4e0
[ 89.517601][ T5482] tlb_finish_mmu+0xd4/0x1f0
[ 89.522292][ T5482] exit_mmap+0x4d3/0xc60
[ 89.526558][ T5482] __mmput+0x115/0x3c0
[ 89.530641][ T5482] exit_mm+0x21f/0x300
[ 89.534816][ T5482] do_exit+0x9b7/0x2750
[ 89.538989][ T5482] do_group_exit+0x206/0x2c0
[ 89.543601][ T5482] __x64_sys_exit_group+0x3f/0x40
[ 89.548656][ T5482] do_syscall_64+0x45/0x110
[ 89.553295][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 89.559277][ T5482]
[ 89.561620][ T5482] Memory state around the buggy address:
[ 89.571342][ T5482] ffff88806b050f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 89.579594][ T5482] ffff88806b050f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 89.588019][ T5482] >ffff88806b051000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 89.596539][ T5482] ^
[ 89.600705][ T5482] ffff88806b051080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 89.609042][ T5482] ffff88806b051100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 89.617663][ T5482] ==================================================================
[ 89.653327][ T5482] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 89.660579][ T5482] CPU: 0 PID: 5482 Comm: syz-executor.0 Not tainted 6.7.0-rc2-syzkaller-00265-gd2da77f431ac #0
[ 89.671102][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 89.681174][ T5482] Call Trace:
[ 89.684490][ T5482]
[ 89.687449][ T5482] dump_stack_lvl+0x1e7/0x2d0
[ 89.692149][ T5482] ? nf_tcp_handle_invalid+0x650/0x650
[ 89.697805][ T5482] ? panic+0x850/0x850
[ 89.701897][ T5482] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 89.708688][ T5482] ? vscnprintf+0x5d/0x80
[ 89.713036][ T5482] panic+0x349/0x850
[ 89.716955][ T5482] ? check_panic_on_warn+0x21/0xa0
[ 89.722178][ T5482] ? __memcpy_flushcache+0x2b0/0x2b0
[ 89.727493][ T5482] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 89.733505][ T5482] ? _raw_spin_unlock+0x40/0x40
[ 89.738388][ T5482] check_panic_on_warn+0x82/0xa0
[ 89.743349][ T5482] ? reiserfs_get_unused_objectid+0x231/0x490
[ 89.749449][ T5482] end_report+0x6e/0x140
[ 89.753718][ T5482] kasan_report+0x153/0x170
[ 89.758243][ T5482] ? reiserfs_get_unused_objectid+0x231/0x490
[ 89.764378][ T5482] kasan_check_range+0x27e/0x290
[ 89.769474][ T5482] ? reiserfs_get_unused_objectid+0x231/0x490
[ 89.775569][ T5482] __asan_memmove+0x29/0x70
[ 89.780100][ T5482] reiserfs_get_unused_objectid+0x231/0x490
[ 89.786040][ T5482] reiserfs_new_inode+0x2bc/0x1cb0
[ 89.791179][ T5482] ? mutex_unlock+0x10/0x10
[ 89.795906][ T5482] ? reiserfs_write_inode+0x2e0/0x2e0
[ 89.801405][ T5482] ? do_journal_begin_r+0xdcd/0x1030
[ 89.807077][ T5482] ? journal_begin+0x1f3/0x360
[ 89.812126][ T5482] reiserfs_mkdir+0x5b0/0x8f0
[ 89.816837][ T5482] ? reiserfs_symlink+0x720/0x720
[ 89.821983][ T5482] ? __down_write_common+0x161/0x200
[ 89.827637][ T5482] ? __up_read+0x6a0/0x6a0
[ 89.832169][ T5482] reiserfs_xattr_init+0x355/0x6c0
[ 89.837357][ T5482] reiserfs_fill_super+0x2207/0x2620
[ 89.842685][ T5482] ? reiserfs_kill_sb+0x150/0x150
[ 89.847835][ T5482] ? __down_write_common+0x161/0x200
[ 89.853148][ T5482] mount_bdev+0x237/0x300
[ 89.857587][ T5482] ? reiserfs_kill_sb+0x150/0x150
[ 89.862722][ T5482] ? get_tree_bdev+0x5b0/0x5b0
[ 89.867506][ T5482] ? vfs_parse_fs_string+0x190/0x230
[ 89.872816][ T5482] ? vfs_parse_fs_param+0x410/0x410
[ 89.878065][ T5482] ? cap_capable+0x1b4/0x240
[ 89.882683][ T5482] legacy_get_tree+0xef/0x190
[ 89.887388][ T5482] ? remove_save_link+0x540/0x540
[ 89.892437][ T5482] vfs_get_tree+0x8c/0x2a0
[ 89.896963][ T5482] do_new_mount+0x28f/0xae0
[ 89.901649][ T5482] ? do_move_mount_old+0x170/0x170
[ 89.906863][ T5482] __se_sys_mount+0x2d9/0x3c0
[ 89.911573][ T5482] ? __x64_sys_mount+0xc0/0xc0
[ 89.916459][ T5482] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 89.922479][ T5482] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 89.928557][ T5482] ? __x64_sys_mount+0x20/0xc0
[ 89.933519][ T5482] do_syscall_64+0x45/0x110
[ 89.938139][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 89.944058][ T5482] RIP: 0033:0x7f46dec7e1ea
[ 89.948585][ T5482] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 89.968380][ T5482] RSP: 002b:00007f46dfa4dee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 89.976990][ T5482] RAX: ffffffffffffffda RBX: 00007f46dfa4df80 RCX: 00007f46dec7e1ea
[ 89.985074][ T5482] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 00007f46dfa4df40
[ 89.993096][ T5482] RBP: 0000000020000080 R08: 00007f46dfa4df80 R09: 0000000000008008
[ 90.001265][ T5482] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000020000040
[ 90.009293][ T5482] R13: 00007f46dfa4df40 R14: 0000000000001138 R15: 00000000200000c0
[ 90.017307][ T5482]
[ 90.020734][ T5482] Kernel Offset: disabled
[ 90.025080][ T5482] Rebooting in 86400 seconds..