Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. 2023/09/26 06:52:56 ignoring optional flag "sandboxArg"="0" 2023/09/26 06:52:56 parsed 1 programs 2023/09/26 06:52:58 executed programs: 0 [ 81.713181][ T5380] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.770942][ T4438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.779025][ T4438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.787205][ T4438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.795858][ T4438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.803775][ T4438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.811747][ T4438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.884230][ T27] cfg80211: failed to load regulatory.db [ 81.939415][ T5389] chnl_net:caif_netlink_parms(): no params data found [ 81.991443][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.998869][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.006133][ T5389] bridge_slave_0: entered allmulticast mode [ 82.013483][ T5389] bridge_slave_0: entered promiscuous mode [ 82.021505][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.028952][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.036174][ T5389] bridge_slave_1: entered allmulticast mode [ 82.043683][ T5389] bridge_slave_1: entered promiscuous mode [ 82.068763][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.080339][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.108791][ T5389] team0: Port device team_slave_0 added [ 82.116733][ T5389] team0: Port device team_slave_1 added [ 82.138605][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.145770][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.171853][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.184394][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.191430][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.217666][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.254616][ T5389] hsr_slave_0: entered promiscuous mode [ 82.260987][ T5389] hsr_slave_1: entered promiscuous mode [ 82.939102][ T5389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.950855][ T5389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.962592][ T5389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.973873][ T5389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.070303][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.099298][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.114772][ T4619] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.121947][ T4619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.148941][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.156356][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.367899][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.430740][ T5389] veth0_vlan: entered promiscuous mode [ 83.447356][ T5389] veth1_vlan: entered promiscuous mode [ 83.487714][ T5389] veth0_macvtap: entered promiscuous mode [ 83.498185][ T5389] veth1_macvtap: entered promiscuous mode [ 83.527118][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.546420][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.561253][ T5389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.574416][ T5389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.585905][ T5389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.595510][ T5389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.691280][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.711197][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.751266][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.760301][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.857453][ T5454] loop0: detected capacity change from 0 to 1024 [ 83.882839][ T5034] Bluetooth: hci0: command 0x0409 tx timeout [ 83.941489][ T11] ================================================================== [ 83.949692][ T11] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x908/0x12f0 [ 83.958645][ T11] Read of size 2048 at addr ffff888079fb0800 by task kworker/u4:0/11 [ 83.966804][ T11] [ 83.969216][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.6.0-rc2-syzkaller-00018-g2cf0f7156238-dirty #0 [ 83.980046][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 83.990268][ T11] Workqueue: loop0 loop_workfn [ 83.995385][ T11] Call Trace: [ 83.998844][ T11] [ 84.001863][ T11] dump_stack_lvl+0x1e7/0x2d0 [ 84.006550][ T11] ? nf_tcp_handle_invalid+0x650/0x650 [ 84.012182][ T11] ? panic+0x770/0x770 [ 84.016287][ T11] ? _printk+0xd5/0x120 [ 84.020703][ T11] print_report+0x163/0x540 [ 84.025201][ T11] ? __virt_addr_valid+0x22f/0x2e0 [ 84.030410][ T11] ? __phys_addr+0xba/0x170 [ 84.034912][ T11] ? copy_page_from_iter_atomic+0x908/0x12f0 [ 84.040882][ T11] kasan_report+0x175/0x1b0 [ 84.045647][ T11] ? copy_page_from_iter_atomic+0x908/0x12f0 [ 84.051621][ T11] kasan_check_range+0x27e/0x290 [ 84.056558][ T11] ? copy_page_from_iter_atomic+0x908/0x12f0 [ 84.062528][ T11] __asan_memcpy+0x29/0x70 [ 84.066929][ T11] copy_page_from_iter_atomic+0x908/0x12f0 [ 84.072778][ T11] ? iov_iter_zero+0xf60/0xf60 [ 84.077989][ T11] ? shmem_write_begin+0x1c1/0x300 [ 84.083298][ T11] ? shmem_writepage+0x1ac0/0x1ac0 [ 84.088420][ T11] ? inode_maybe_inc_iversion+0x1a3/0x1f0 [ 84.094223][ T11] ? fault_in_iov_iter_readable+0x232/0x280 [ 84.100122][ T11] generic_perform_write+0x392/0x630 [ 84.105403][ T11] ? generic_file_direct_write+0x3f0/0x3f0 [ 84.111198][ T11] ? preempt_count_add+0x93/0x180 [ 84.116214][ T11] ? __mnt_drop_write_file+0xbb/0x100 [ 84.121773][ T11] ? file_update_time+0x19c/0x1b0 [ 84.126963][ T11] shmem_file_write_iter+0xfc/0x120 [ 84.132148][ T11] do_iter_write+0x84f/0xde0 [ 84.136816][ T11] ? vfs_iter_write+0xa0/0xa0 [ 84.141485][ T11] ? rcu_read_lock_bh_held+0x120/0x120 [ 84.147023][ T11] ? vfs_iter_write+0x70/0xa0 [ 84.151697][ T11] loop_process_work+0x14c3/0x22a0 [ 84.156824][ T11] ? psi_task_switch+0x441/0x770 [ 84.161759][ T11] ? loop_workfn+0x50/0x50 [ 84.167299][ T11] ? read_lock_is_recursive+0x20/0x20 [ 84.172662][ T11] ? print_irqtrace_events+0x220/0x220 [ 84.178632][ T11] ? process_scheduled_works+0x825/0x1400 [ 84.184426][ T11] process_scheduled_works+0x90f/0x1400 [ 84.189968][ T11] ? assign_work+0x3d0/0x3d0 [ 84.195156][ T11] ? assign_work+0x364/0x3d0 [ 84.199860][ T11] worker_thread+0xa5f/0xff0 [ 84.204466][ T11] kthread+0x2d3/0x370 [ 84.208610][ T11] ? pr_cont_work+0x5e0/0x5e0 [ 84.213359][ T11] ? kthread_blkcg+0xd0/0xd0 [ 84.217963][ T11] ret_from_fork+0x48/0x80 [ 84.222377][ T11] ? kthread_blkcg+0xd0/0xd0 [ 84.226967][ T11] ret_from_fork_asm+0x11/0x20 [ 84.231730][ T11] [ 84.234738][ T11] [ 84.237135][ T11] Allocated by task 5454: [ 84.241533][ T11] kasan_set_track+0x4f/0x70 [ 84.246116][ T11] __kasan_kmalloc+0x98/0xb0 [ 84.250810][ T11] __kmalloc+0xb9/0x230 [ 84.254976][ T11] hfsplus_read_wrapper+0x555/0x1350 [ 84.260369][ T11] hfsplus_fill_super+0x38e/0x1c90 [ 84.265470][ T11] mount_bdev+0x237/0x300 [ 84.269786][ T11] legacy_get_tree+0xef/0x190 [ 84.274478][ T11] vfs_get_tree+0x8c/0x280 [ 84.278907][ T11] do_new_mount+0x28f/0xae0 [ 84.283397][ T11] __se_sys_mount+0x2d9/0x3c0 [ 84.288063][ T11] do_syscall_64+0x41/0xc0 [ 84.292469][ T11] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.298439][ T11] [ 84.300751][ T11] The buggy address belongs to the object at ffff888079fb0800 [ 84.300751][ T11] which belongs to the cache kmalloc-1k of size 1024 [ 84.315224][ T11] The buggy address is located 0 bytes inside of [ 84.315224][ T11] allocated 1024-byte region [ffff888079fb0800, ffff888079fb0c00) [ 84.329527][ T11] [ 84.331844][ T11] The buggy address belongs to the physical page: [ 84.338240][ T11] page:ffffea0001e7ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79fb0 [ 84.348384][ T11] head:ffffea0001e7ec00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.357309][ T11] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 84.365879][ T11] page_type: 0xffffffff() [ 84.370197][ T11] raw: 00fff00000000840 ffff888012841dc0 0000000000000000 0000000000000001 [ 84.378947][ T11] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 84.387509][ T11] page dumped because: kasan: bad access detected [ 84.393906][ T11] page_owner tracks the page as allocated [ 84.399700][ T11] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 23, tgid 23 (kworker/1:0), ts 60174731910, free_ts 58992476834 [ 84.420350][ T11] post_alloc_hook+0x1e6/0x210 [ 84.425108][ T11] get_page_from_freelist+0x31db/0x3360 [ 84.430651][ T11] __alloc_pages+0x255/0x670 [ 84.435236][ T11] alloc_slab_page+0x6a/0x160 [ 84.439909][ T11] new_slab+0x84/0x2f0 [ 84.443962][ T11] ___slab_alloc+0xc85/0x1310 [ 84.448625][ T11] __kmem_cache_alloc_node+0x1af/0x270 [ 84.454068][ T11] __kmalloc+0xa8/0x230 [ 84.458222][ T11] ieee802_11_parse_elems_full+0xd7/0x2460 [ 84.464103][ T11] ieee80211_ibss_rx_queued_mgmt+0x4ff/0x2ce0 [ 84.470169][ T11] ieee80211_iface_work+0x7bd/0xcf0 [ 84.475481][ T11] cfg80211_wiphy_work+0x21e/0x250 [ 84.480699][ T11] process_scheduled_works+0x90f/0x1400 [ 84.486442][ T11] worker_thread+0xa5f/0xff0 [ 84.492161][ T11] kthread+0x2d3/0x370 [ 84.496224][ T11] ret_from_fork+0x48/0x80 [ 84.500625][ T11] page last free stack trace: [ 84.505294][ T11] free_unref_page_prepare+0x8c3/0x9f0 [ 84.510923][ T11] free_unref_page+0x37/0x3f0 [ 84.515604][ T11] __unfreeze_partials+0x1dc/0x220 [ 84.520980][ T11] put_cpu_partial+0x17b/0x250 [ 84.525737][ T11] __slab_free+0x2b6/0x390 [ 84.530404][ T11] qlist_free_all+0x75/0xe0 [ 84.534979][ T11] kasan_quarantine_reduce+0x14b/0x160 [ 84.540433][ T11] __kasan_slab_alloc+0x23/0x70 [ 84.545362][ T11] slab_post_alloc_hook+0x67/0x3d0 [ 84.550467][ T11] kmem_cache_alloc+0x123/0x300 [ 84.555481][ T11] getname_kernel+0x59/0x2e0 [ 84.560101][ T11] kernel_execve+0x71/0xa10 [ 84.564683][ T11] call_usermodehelper_exec_async+0x233/0x370 [ 84.570738][ T11] ret_from_fork+0x48/0x80 [ 84.575323][ T11] ret_from_fork_asm+0x11/0x20 [ 84.580078][ T11] [ 84.582387][ T11] Memory state around the buggy address: [ 84.588004][ T11] ffff888079fb0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.596147][ T11] ffff888079fb0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.604553][ T11] >ffff888079fb0c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.612617][ T11] ^ [ 84.616663][ T11] ffff888079fb0c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.624793][ T11] ffff888079fb0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.632929][ T11] ================================================================== [ 84.641346][ T11] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.648555][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.6.0-rc2-syzkaller-00018-g2cf0f7156238-dirty #0 [ 84.659172][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 84.669259][ T11] Workqueue: loop0 loop_workfn [ 84.674059][ T11] Call Trace: [ 84.677361][ T11] [ 84.680303][ T11] dump_stack_lvl+0x1e7/0x2d0 [ 84.685001][ T11] ? nf_tcp_handle_invalid+0x650/0x650 [ 84.691278][ T11] ? panic+0x770/0x770 [ 84.695373][ T11] ? vscnprintf+0x5d/0x80 [ 84.699809][ T11] panic+0x30f/0x770 [ 84.703729][ T11] ? check_panic_on_warn+0x21/0xa0 [ 84.708857][ T11] ? __memcpy_flushcache+0x2b0/0x2b0 [ 84.714176][ T11] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 84.720177][ T11] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 84.726532][ T11] ? _raw_spin_unlock+0x40/0x40 [ 84.731589][ T11] ? print_report+0x4fb/0x540 [ 84.736943][ T11] check_panic_on_warn+0x82/0xa0 [ 84.741996][ T11] ? copy_page_from_iter_atomic+0x908/0x12f0 [ 84.748570][ T11] end_report+0x6e/0x130 [ 84.752930][ T11] kasan_report+0x186/0x1b0 [ 84.757462][ T11] ? copy_page_from_iter_atomic+0x908/0x12f0 [ 84.763644][ T11] kasan_check_range+0x27e/0x290 [ 84.768791][ T11] ? copy_page_from_iter_atomic+0x908/0x12f0 [ 84.775064][ T11] __asan_memcpy+0x29/0x70 [ 84.779503][ T11] copy_page_from_iter_atomic+0x908/0x12f0 [ 84.785429][ T11] ? iov_iter_zero+0xf60/0xf60 [ 84.790257][ T11] ? shmem_write_begin+0x1c1/0x300 [ 84.795425][ T11] ? shmem_writepage+0x1ac0/0x1ac0 [ 84.800548][ T11] ? inode_maybe_inc_iversion+0x1a3/0x1f0 [ 84.806361][ T11] ? fault_in_iov_iter_readable+0x232/0x280 [ 84.812349][ T11] generic_perform_write+0x392/0x630 [ 84.817634][ T11] ? generic_file_direct_write+0x3f0/0x3f0 [ 84.823628][ T11] ? preempt_count_add+0x93/0x180 [ 84.829108][ T11] ? __mnt_drop_write_file+0xbb/0x100 [ 84.834489][ T11] ? file_update_time+0x19c/0x1b0 [ 84.839781][ T11] shmem_file_write_iter+0xfc/0x120 [ 84.845058][ T11] do_iter_write+0x84f/0xde0 [ 84.849658][ T11] ? vfs_iter_write+0xa0/0xa0 [ 84.854343][ T11] ? rcu_read_lock_bh_held+0x120/0x120 [ 84.859834][ T11] ? vfs_iter_write+0x70/0xa0 [ 84.864624][ T11] loop_process_work+0x14c3/0x22a0 [ 84.869796][ T11] ? psi_task_switch+0x441/0x770 [ 84.874838][ T11] ? loop_workfn+0x50/0x50 [ 84.879444][ T11] ? read_lock_is_recursive+0x20/0x20 [ 84.884830][ T11] ? print_irqtrace_events+0x220/0x220 [ 84.890296][ T11] ? process_scheduled_works+0x825/0x1400 [ 84.896094][ T11] process_scheduled_works+0x90f/0x1400 [ 84.901725][ T11] ? assign_work+0x3d0/0x3d0 [ 84.906307][ T11] ? assign_work+0x364/0x3d0 [ 84.910913][ T11] worker_thread+0xa5f/0xff0 [ 84.915513][ T11] kthread+0x2d3/0x370 [ 84.919651][ T11] ? pr_cont_work+0x5e0/0x5e0 [ 84.924321][ T11] ? kthread_blkcg+0xd0/0xd0 [ 84.928899][ T11] ret_from_fork+0x48/0x80 [ 84.933306][ T11] ? kthread_blkcg+0xd0/0xd0 [ 84.938055][ T11] ret_from_fork_asm+0x11/0x20 [ 84.942851][ T11] [ 84.946224][ T11] Kernel Offset: disabled [ 84.951362][ T11] Rebooting in 86400 seconds..