Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
2023/10/01 19:23:34 ignoring optional flag "sandboxArg"="0"
2023/10/01 19:23:34 parsed 1 programs
2023/10/01 19:23:34 executed programs: 0
[ 75.155491][ T5040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.163268][ T5040] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.170821][ T5040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.178806][ T5040] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.186125][ T5040] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.295966][ T5388] chnl_net:caif_netlink_parms(): no params data found
[ 75.347130][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.354410][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.361580][ T5388] bridge_slave_0: entered allmulticast mode
[ 75.368273][ T5388] bridge_slave_0: entered promiscuous mode
[ 75.375887][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.383106][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.390331][ T5388] bridge_slave_1: entered allmulticast mode
[ 75.397181][ T5388] bridge_slave_1: entered promiscuous mode
[ 75.419598][ T5388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.431156][ T5388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.457795][ T5388] team0: Port device team_slave_0 added
[ 75.465519][ T5388] team0: Port device team_slave_1 added
[ 75.487684][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.494731][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.520620][ T5388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.534081][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.541038][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.567089][ T5388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.601085][ T5388] hsr_slave_0: entered promiscuous mode
[ 75.607334][ T5388] hsr_slave_1: entered promiscuous mode
[ 76.314498][ T5388] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.328045][ T5388] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.338656][ T5388] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.350281][ T5388] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.451154][ T5388] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.473695][ T5388] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.485990][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.493164][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.524317][ T779] cfg80211: failed to load regulatory.db
[ 76.545652][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.552827][ T5048] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.601102][ T5388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 76.632910][ T5388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 76.866478][ T5388] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.951450][ T5388] veth0_vlan: entered promiscuous mode
[ 76.966632][ T5388] veth1_vlan: entered promiscuous mode
[ 77.000154][ T5388] veth0_macvtap: entered promiscuous mode
[ 77.011410][ T5388] veth1_macvtap: entered promiscuous mode
[ 77.061322][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.080804][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.095432][ T5388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.104352][ T5388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.116193][ T5388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.125317][ T5388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.234286][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.248583][ T4436] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.256610][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.289612][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.299836][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.443555][ T5456] loop0: detected capacity change from 0 to 8192
[ 77.456423][ T5456] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 77.470887][ T5456] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 77.481537][ T5456] REISERFS (device loop0): using ordered data mode
[ 77.490167][ T5456] reiserfs: using flush barriers
[ 77.499547][ T5456] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 77.516925][ T5456] REISERFS (device loop0): checking transaction log (loop0)
[ 77.530205][ T5456] REISERFS (device loop0): Using r5 hash to sort names
[ 77.540343][ T5456] ==================================================================
[ 77.548419][ T5456] BUG: KASAN: use-after-free in reiserfs_get_unused_objectid+0x231/0x490
[ 77.556845][ T5456] Read of size 250888 at addr ffff88806ecb8058 by task syz-executor.0/5456
[ 77.565434][ T5456]
[ 77.567761][ T5456] CPU: 1 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc3-syzkaller-00225-gec8c298121e3 #0
[ 77.578089][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 77.588146][ T5456] Call Trace:
[ 77.591433][ T5456]
[ 77.594373][ T5456] dump_stack_lvl+0x1e7/0x2d0
[ 77.599062][ T5456] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.604532][ T5456] ? panic+0x770/0x770
[ 77.608618][ T5456] ? _printk+0xd5/0x120
[ 77.612796][ T5456] print_report+0x163/0x540
[ 77.617314][ T5456] ? __virt_addr_valid+0x22f/0x2e0
[ 77.622453][ T5456] ? __phys_addr+0xba/0x170
[ 77.626968][ T5456] ? reiserfs_get_unused_objectid+0x231/0x490
[ 77.633045][ T5456] kasan_report+0x175/0x1b0
[ 77.637562][ T5456] ? reiserfs_get_unused_objectid+0x231/0x490
[ 77.643646][ T5456] kasan_check_range+0x27e/0x290
[ 77.648607][ T5456] ? reiserfs_get_unused_objectid+0x231/0x490
[ 77.654694][ T5456] __asan_memmove+0x29/0x70
[ 77.659219][ T5456] reiserfs_get_unused_objectid+0x231/0x490
[ 77.665129][ T5456] reiserfs_new_inode+0x2bc/0x1d10
[ 77.670261][ T5456] ? reiserfs_write_inode+0x2e0/0x2e0
[ 77.675645][ T5456] ? do_journal_begin_r+0xdcd/0x1020
[ 77.680956][ T5456] ? journal_begin+0x1f3/0x360
[ 77.685736][ T5456] reiserfs_mkdir+0x5b0/0x8f0
[ 77.690428][ T5456] ? reiserfs_symlink+0x720/0x720
[ 77.695467][ T5456] ? __down_write_common+0x161/0x200
[ 77.700762][ T5456] ? __up_read+0x690/0x690
[ 77.705195][ T5456] reiserfs_xattr_init+0x323/0x670
[ 77.710325][ T5456] reiserfs_fill_super+0x2207/0x2620
[ 77.715635][ T5456] ? reiserfs_kill_sb+0x150/0x150
[ 77.720678][ T5456] ? __down_write_common+0x161/0x200
[ 77.725976][ T5456] mount_bdev+0x237/0x300
[ 77.730319][ T5456] ? reiserfs_kill_sb+0x150/0x150
[ 77.735356][ T5456] ? get_tree_bdev+0x5b0/0x5b0
[ 77.740135][ T5456] ? vfs_parse_fs_string+0x190/0x230
[ 77.745439][ T5456] ? vfs_parse_fs_param+0x410/0x410
[ 77.750651][ T5456] ? cap_capable+0x1b4/0x240
[ 77.755255][ T5456] legacy_get_tree+0xef/0x190
[ 77.759946][ T5456] ? remove_save_link+0x540/0x540
[ 77.764989][ T5456] vfs_get_tree+0x8c/0x280
[ 77.769418][ T5456] do_new_mount+0x28f/0xae0
[ 77.773939][ T5456] ? do_move_mount_old+0x170/0x170
[ 77.779065][ T5456] ? user_path_at_empty+0x12f/0x180
[ 77.784274][ T5456] __se_sys_mount+0x2d9/0x3c0
[ 77.788971][ T5456] ? __x64_sys_mount+0xc0/0xc0
[ 77.793748][ T5456] ? syscall_enter_from_user_mode+0x32/0x230
[ 77.799828][ T5456] ? lockdep_hardirqs_on+0x98/0x140
[ 77.805039][ T5456] ? __x64_sys_mount+0x20/0xc0
[ 77.809816][ T5456] do_syscall_64+0x41/0xc0
[ 77.814243][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.820149][ T5456] RIP: 0033:0x7fb50867dfda
[ 77.824570][ T5456] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 77.844191][ T5456] RSP: 002b:00007fb50937cee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 77.852617][ T5456] RAX: ffffffffffffffda RBX: 00007fb50937cf80 RCX: 00007fb50867dfda
[ 77.860600][ T5456] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 00007fb50937cf40
[ 77.868581][ T5456] RBP: 0000000020000080 R08: 00007fb50937cf80 R09: 0000000000008008
[ 77.876562][ T5456] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000020000040
[ 77.884549][ T5456] R13: 00007fb50937cf40 R14: 0000000000001138 R15: 00000000200000c0
[ 77.892541][ T5456]
[ 77.895567][ T5456]
[ 77.897899][ T5456] The buggy address belongs to the physical page:
[ 77.904311][ T5456] page:ffffea0001bb2e00 refcount:2 mapcount:0 mapping:ffff88801ac8cd78 index:0x10 pfn:0x6ecb8
[ 77.914557][ T5456] memcg:ffff888021d9c000
[ 77.918795][ T5456] aops:def_blk_aops ino:700000
[ 77.923580][ T5456] flags: 0xfff00000008124(referenced|lru|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 77.933299][ T5456] page_type: 0xffffffff()
[ 77.937636][ T5456] raw: 00fff00000008124 ffffea0001bb05c8 ffffea0001bb2e48 ffff88801ac8cd78
[ 77.946229][ T5456] raw: 0000000000000010 ffff88806e23dcb0 00000002ffffffff ffff888021d9c000
[ 77.954811][ T5456] page dumped because: kasan: bad access detected
[ 77.961225][ T5456] page_owner tracks the page as allocated
[ 77.966950][ T5456] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5456, tgid 5454 (syz-executor.0), ts 77456045102, free_ts 77414746013
[ 77.987448][ T5456] post_alloc_hook+0x1e6/0x210
[ 77.992241][ T5456] get_page_from_freelist+0x31db/0x3360
[ 77.997801][ T5456] __alloc_pages+0x255/0x670
[ 78.002403][ T5456] folio_alloc+0x1e/0x60
[ 78.006654][ T5456] filemap_alloc_folio+0xde/0x500
[ 78.011693][ T5456] __filemap_get_folio+0x431/0xbb0
[ 78.016807][ T5456] __getblk_gfp+0x218/0x630
[ 78.021320][ T5456] __bread_gfp+0x2e/0x380
[ 78.025660][ T5456] read_super_block+0x91/0x800
[ 78.030438][ T5456] reiserfs_fill_super+0x912/0x2620
[ 78.035649][ T5456] mount_bdev+0x237/0x300
[ 78.039990][ T5456] legacy_get_tree+0xef/0x190
[ 78.044683][ T5456] vfs_get_tree+0x8c/0x280
[ 78.049111][ T5456] do_new_mount+0x28f/0xae0
[ 78.053629][ T5456] __se_sys_mount+0x2d9/0x3c0
[ 78.058325][ T5456] do_syscall_64+0x41/0xc0
[ 78.062747][ T5456] page last free stack trace:
[ 78.067418][ T5456] free_unref_page_prepare+0x8c3/0x9f0
[ 78.072888][ T5456] free_unref_page_list+0x596/0x830
[ 78.078096][ T5456] release_pages+0x2113/0x23f0
[ 78.082871][ T5456] tlb_flush_mmu+0x34c/0x4e0
[ 78.087470][ T5456] tlb_finish_mmu+0xd4/0x1f0
[ 78.092073][ T5456] exit_mmap+0x4d3/0xc50
[ 78.096323][ T5456] __mmput+0x115/0x3c0
[ 78.100400][ T5456] exit_mm+0x21f/0x300
[ 78.104479][ T5456] do_exit+0x9af/0x2650
[ 78.108643][ T5456] do_group_exit+0x206/0x2c0
[ 78.113241][ T5456] __x64_sys_exit_group+0x3f/0x40
[ 78.118277][ T5456] do_syscall_64+0x41/0xc0
[ 78.122698][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.128597][ T5456]
[ 78.130925][ T5456] Memory state around the buggy address:
[ 78.136554][ T5456] ffff88806ecb9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.144623][ T5456] ffff88806ecb9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 78.152686][ T5456] >ffff88806ecba000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 78.160749][ T5456] ^
[ 78.164820][ T5456] ffff88806ecba080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 78.172885][ T5456] ffff88806ecba100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 78.180944][ T5456] ==================================================================
[ 78.214449][ T5456] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 78.221665][ T5456] CPU: 1 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc3-syzkaller-00225-gec8c298121e3 #0
[ 78.231994][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 78.242052][ T5456] Call Trace:
[ 78.245336][ T5456]
[ 78.248268][ T5456] dump_stack_lvl+0x1e7/0x2d0
[ 78.252957][ T5456] ? nf_tcp_handle_invalid+0x650/0x650
[ 78.258423][ T5456] ? panic+0x770/0x770
[ 78.262511][ T5456] ? vscnprintf+0x5d/0x80
[ 78.266855][ T5456] panic+0x30f/0x770
[ 78.270760][ T5456] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 78.276924][ T5456] ? check_panic_on_warn+0x21/0xa0
[ 78.282045][ T5456] ? __memcpy_flushcache+0x2b0/0x2b0
[ 78.287344][ T5456] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 78.293340][ T5456] ? _raw_spin_unlock+0x40/0x40
[ 78.298210][ T5456] check_panic_on_warn+0x82/0xa0
[ 78.303162][ T5456] ? reiserfs_get_unused_objectid+0x231/0x490
[ 78.309241][ T5456] end_report+0x6e/0x130
[ 78.313498][ T5456] kasan_report+0x186/0x1b0
[ 78.318015][ T5456] ? reiserfs_get_unused_objectid+0x231/0x490
[ 78.324100][ T5456] kasan_check_range+0x27e/0x290
[ 78.329055][ T5456] ? reiserfs_get_unused_objectid+0x231/0x490
[ 78.335133][ T5456] __asan_memmove+0x29/0x70
[ 78.339654][ T5456] reiserfs_get_unused_objectid+0x231/0x490
[ 78.345563][ T5456] reiserfs_new_inode+0x2bc/0x1d10
[ 78.350698][ T5456] ? reiserfs_write_inode+0x2e0/0x2e0
[ 78.356082][ T5456] ? do_journal_begin_r+0xdcd/0x1020
[ 78.361395][ T5456] ? journal_begin+0x1f3/0x360
[ 78.366176][ T5456] reiserfs_mkdir+0x5b0/0x8f0
[ 78.370875][ T5456] ? reiserfs_symlink+0x720/0x720
[ 78.375916][ T5456] ? __down_write_common+0x161/0x200
[ 78.381219][ T5456] ? __up_read+0x690/0x690
[ 78.385650][ T5456] reiserfs_xattr_init+0x323/0x670
[ 78.390780][ T5456] reiserfs_fill_super+0x2207/0x2620
[ 78.396092][ T5456] ? reiserfs_kill_sb+0x150/0x150
[ 78.401134][ T5456] ? __down_write_common+0x161/0x200
[ 78.406435][ T5456] mount_bdev+0x237/0x300
[ 78.410778][ T5456] ? reiserfs_kill_sb+0x150/0x150
[ 78.415817][ T5456] ? get_tree_bdev+0x5b0/0x5b0
[ 78.420591][ T5456] ? vfs_parse_fs_string+0x190/0x230
[ 78.425893][ T5456] ? vfs_parse_fs_param+0x410/0x410
[ 78.431111][ T5456] ? cap_capable+0x1b4/0x240
[ 78.435714][ T5456] legacy_get_tree+0xef/0x190
[ 78.440408][ T5456] ? remove_save_link+0x540/0x540
[ 78.445445][ T5456] vfs_get_tree+0x8c/0x280
[ 78.449866][ T5456] do_new_mount+0x28f/0xae0
[ 78.454377][ T5456] ? do_move_mount_old+0x170/0x170
[ 78.459495][ T5456] ? user_path_at_empty+0x12f/0x180
[ 78.464706][ T5456] __se_sys_mount+0x2d9/0x3c0
[ 78.469403][ T5456] ? __x64_sys_mount+0xc0/0xc0
[ 78.474183][ T5456] ? syscall_enter_from_user_mode+0x32/0x230
[ 78.480180][ T5456] ? lockdep_hardirqs_on+0x98/0x140
[ 78.485394][ T5456] ? __x64_sys_mount+0x20/0xc0
[ 78.490172][ T5456] do_syscall_64+0x41/0xc0
[ 78.494601][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.500505][ T5456] RIP: 0033:0x7fb50867dfda
[ 78.504935][ T5456] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 78.524549][ T5456] RSP: 002b:00007fb50937cee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 78.532974][ T5456] RAX: ffffffffffffffda RBX: 00007fb50937cf80 RCX: 00007fb50867dfda
[ 78.540958][ T5456] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 00007fb50937cf40
[ 78.548948][ T5456] RBP: 0000000020000080 R08: 00007fb50937cf80 R09: 0000000000008008
[ 78.556930][ T5456] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000020000040
[ 78.564911][ T5456] R13: 00007fb50937cf40 R14: 0000000000001138 R15: 00000000200000c0
[ 78.572898][ T5456]
[ 78.576097][ T5456] Kernel Offset: disabled
[ 78.580404][ T5456] Rebooting in 86400 seconds..