Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. 2024/06/30 16:11:48 ignoring optional flag "sandboxArg"="0" 2024/06/30 16:11:49 parsed 1 programs 2024/06/30 16:11:49 executed programs: 0 [ 40.696062][ T3246] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 40.845650][ T3252] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.848043][ T3252] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.850128][ T3252] device bridge_slave_0 entered promiscuous mode [ 40.852694][ T3252] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.854496][ T3252] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.856682][ T3252] device bridge_slave_1 entered promiscuous mode [ 41.022661][ T3252] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.024627][ T3252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.026481][ T3252] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.028351][ T3252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.206483][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.209198][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.211672][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.213760][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.258353][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.260644][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.262441][ T3097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.264415][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.266571][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.268514][ T3097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.270836][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.274317][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.637272][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.687115][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.689410][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.691432][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.693897][ T3252] device veth0_vlan entered promiscuous mode [ 41.697443][ T3252] device veth1_vlan entered promiscuous mode [ 41.703910][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.706050][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.708488][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.711440][ T3252] device veth0_macvtap entered promiscuous mode [ 41.764262][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.767343][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.769717][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.961976][ T3394] loop0: detected capacity change from 0 to 8192 [ 41.964748][ T3394] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.968358][ T3394] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 41.970699][ T3394] REISERFS (device loop0): using ordered data mode [ 41.972431][ T3394] reiserfs: using flush barriers [ 41.974042][ T3394] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.979124][ T3394] REISERFS (device loop0): checking transaction log (loop0) [ 41.995658][ T3394] REISERFS (device loop0): Using r5 hash to sort names [ 41.997739][ T3394] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 42.004088][ T3394] ================================================================== [ 42.006253][ T3394] BUG: KASAN: out-of-bounds in leaf_insert_into_buf+0x1f4/0x748 [ 42.008310][ T3394] Read of size 18446744073709551384 at addr ffff0000dfb8a000 by task syz-executor.0/3394 [ 42.010885][ T3394] [ 42.011470][ T3394] CPU: 1 PID: 3394 Comm: syz-executor.0 Not tainted 6.1.96-syzkaller #0 [ 42.013645][ T3394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 42.016222][ T3394] Call trace: [ 42.017079][ T3394] dump_backtrace+0x1c8/0x1f4 [ 42.018274][ T3394] show_stack+0x2c/0x3c [ 42.019399][ T3394] dump_stack_lvl+0xc0/0x104 [ 42.020672][ T3394] print_report+0x174/0x4c0 [ 42.021803][ T3394] kasan_report+0xcc/0x124 [ 42.022921][ T3394] kasan_check_range+0x264/0x2a4 [ 42.024249][ T3394] memmove+0x48/0x90 [ 42.025272][ T3394] leaf_insert_into_buf+0x1f4/0x748 [ 42.026660][ T3394] do_balance+0x4220/0xb510 [ 42.027850][ T3394] reiserfs_insert_item+0x908/0xa4c [ 42.029228][ T3394] indirect2direct+0x51c/0x88c [ 42.030497][ T3394] reiserfs_cut_from_item+0x840/0x1c50 [ 42.031931][ T3394] reiserfs_do_truncate+0x764/0x10a0 [ 42.033423][ T3394] reiserfs_truncate_file+0x510/0xb1c [ 42.034800][ T3394] reiserfs_write_end+0x640/0x800 [ 42.036114][ T3394] generic_perform_write+0x384/0x548 [ 42.037485][ T3394] __generic_file_write_iter+0x168/0x388 [ 42.038949][ T3394] generic_file_write_iter+0xb8/0x2b4 [ 42.040394][ T3394] vfs_write+0x610/0x914 [ 42.041513][ T3394] ksys_write+0x15c/0x26c [ 42.042678][ T3394] __arm64_sys_write+0x7c/0x90 [ 42.043890][ T3394] invoke_syscall+0x98/0x2c0 [ 42.045086][ T3394] el0_svc_common+0x134/0x24c [ 42.046302][ T3394] do_el0_svc+0x64/0x218 [ 42.047392][ T3394] el0_svc+0x34/0x100 [ 42.048494][ T3394] el0t_64_sync_handler+0x84/0xf0 [ 42.049821][ T3394] el0t_64_sync+0x18c/0x190 [ 42.051034][ T3394] [ 42.051650][ T3394] The buggy address belongs to the physical page: [ 42.053515][ T3394] page:000000000e63b785 refcount:1 mapcount:1 mapping:0000000000000000 index:0xffffbe978 pfn:0x11fb8a [ 42.056302][ T3394] memcg:ffff0000d9ef8000 [ 42.057422][ T3394] anon flags: 0x5ffc000000a0014(uptodate|lru|mappedtodisk|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 42.060220][ T3394] raw: 05ffc000000a0014 fffffc00037e61c8 fffffc00037ee2c8 ffff0000d2c9c771 [ 42.062427][ T3394] raw: 0000000ffffbe978 0000000000000000 0000000100000000 ffff0000d9ef8000 [ 42.064686][ T3394] page dumped because: kasan: bad access detected [ 42.066325][ T3394] [ 42.066908][ T3394] Memory state around the buggy address: [ 42.068404][ T3394] ffff0000dfb89f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.070524][ T3394] ffff0000dfb89f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.072692][ T3394] >ffff0000dfb8a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.074796][ T3394] ^ [ 42.075840][ T3394] ffff0000dfb8a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.077913][ T3394] ffff0000dfb8a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.080029][ T3394] ================================================================== [ 42.082644][ T3394] Disabling lock debugging due to kernel taint [ 42.096330][ T3394] Unable to handle kernel write to read-only memory at virtual address ffff0000d78adff0 [ 42.096633][ C0] Unable to handle kernel paging request at virtual address 001fccff55202e02 [ 42.098979][ C1] Unable to handle kernel paging request at virtual address dfff800000000024 [ 42.101137][ C0] Mem abort info: [ 42.103334][ C1] KASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127] [ 42.104205][ C0] ESR = 0x0000000096000004 [ 42.106405][ C1] Mem abort info: [ 42.107504][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 42.108405][ C1] ESR = 0x0000000096000006 [ 42.109939][ C0] SET = 0, FnV = 0 [ 42.111169][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 42.112148][ C0] EA = 0, S1PTW = 0 [ 42.113731][ C1] SET = 0, FnV = 0 [ 42.114750][ C0] FSC = 0x04: level 0 translation fault [ 42.115767][ C1] EA = 0, S1PTW = 0 [ 42.117235][ C0] Data abort info: [ 42.118211][ C1] FSC = 0x06: level 2 translation fault [ 42.119123][ C0] ISV = 0, ISS = 0x00000004 [ 42.120570][ C1] Data abort info: [ 42.121749][ C0] CM = 0, WnR = 0 [ 42.122709][ C1] ISV = 0, ISS = 0x00000006 [ 42.123654][ C0] [001fccff55202e02] address between user and kernel address ranges [ 42.124821][ C1] CM = 0, WnR = 0 [ 42.126878][ C0] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 42.127929][ C1] [dfff800000000024] address between user and kernel address ranges [ 42.129846][ C0] Modules linked in: [ 42.132922][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 6.1.96-syzkaller #0 [ 42.135449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 42.138209][ C0] pstate: 004000c5 (nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 42.140349][ C0] pc : timerqueue_add+0x8c/0x1e0 [ 42.141655][ C0] lr : timerqueue_add+0xe8/0x1e0 [ 42.143033][ C0] sp : ffff800008007ce0 [ 42.144127][ C0] x29: ffff800008007cf0 x28: dfff800000000000 x27: 0000000000000010 [ 42.146654][ C0] x26: dfff800000000000 x25: 0000000000000000 x24: a90267faa9016ffc [ 42.148733][ C0] x23: a90267faa9016ffc x22: ffff80000edd1fc4 x21: 00000009cb914180 [ 42.150775][ C0] x20: 0000000000000000 x19: 1ffff00001dba3f8 x18: 1fffe000369db977 [ 42.152903][ C0] x17: ffff8001a3a60000 x16: ffff800008000000 x15: 0000989680000000 [ 42.155009][ C0] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000001 [ 42.157217][ C0] x11: 0000000000ff0100 x10: 0000000000010002 x9 : ffff80000ecea340 [ 42.159212][ C0] x8 : 15204cff55202e02 x7 : 0000000000000000 x6 : ffff800009a6af78 [ 42.161298][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008296e20 [ 42.163437][ C0] x2 : 0000000000000001 x1 : 910003fda9054ff4 x0 : a90267faa9017014 [ 42.165434][ C0] Call trace: [ 42.166247][ C0] timerqueue_add+0x8c/0x1e0 [ 42.167407][ C0] __hrtimer_run_queues+0x39c/0x60c [ 42.168726][ C0] hrtimer_interrupt+0x2ac/0xb2c [ 42.170035][ C0] arch_timer_handler_virt+0x74/0x88 [ 42.171441][ C0] handle_percpu_devid_irq+0x168/0x2c8 [ 42.172841][ C0] generic_handle_domain_irq+0x7c/0xc4 [ 42.174283][ C0] gic_handle_irq+0x70/0x1ac [ 42.175541][ C0] call_on_irq_stack+0x24/0x4c [ 42.176767][ C0] do_interrupt_handler+0xd4/0x138 [ 42.178043][ C0] el1_interrupt+0x34/0x68 [ 42.179165][ C0] el1h_64_irq_handler+0x18/0x24 [ 42.180411][ C0] el1h_64_irq+0x64/0x68 [ 42.181455][ C0] arch_local_irq_enable+0xc/0x18 [ 42.182807][ C0] do_idle+0x1c4/0x4d8 [ 42.183942][ C0] cpu_startup_entry+0x5c/0x74 [ 42.185157][ C0] rest_init+0x124/0x13c [ 42.186316][ C0] start_kernel+0x0/0x450 [ 42.187435][ C0] start_kernel+0x2f8/0x450 [ 42.188561][ C0] __primary_switched+0xb8/0xc0 [ 42.189831][ C0] Code: 5280021b f2fbfffa 910062e0 d343fc08 (387c6908) [ 42.191725][ C0] ---[ end trace 0000000000000000 ]--- [ 42.413842][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 42.415870][ C0] SMP: stopping secondary CPUs [ 43.496788][ C0] SMP: failed to stop secondary CPUs 0-1 [ 43.498338][ C0] Kernel Offset: disabled [ 43.499455][ C0] CPU features: 0x00000,02070084,26017203 [ 43.500904][ C0] Memory Limit: none [ 43.694940][ C0] Rebooting in 86400 seconds..