Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. 2023/10/11 22:38:27 ignoring optional flag "sandboxArg"="0" 2023/10/11 22:38:27 parsed 1 programs [ 41.948650][ T3316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS 2023/10/11 22:38:27 executed programs: 0 [ 42.101087][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.102735][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.104696][ T3324] device bridge_slave_0 entered promiscuous mode [ 42.107595][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.109208][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.111105][ T3324] device bridge_slave_1 entered promiscuous mode [ 42.277693][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.279377][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.280959][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.282591][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.451258][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.453086][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.455018][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.457595][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.501087][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.503121][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.504670][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.507119][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.509132][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.510773][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.512537][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.514415][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.847857][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.893424][ T3324] device veth0_vlan entered promiscuous mode [ 42.895942][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.898389][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.900134][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.902945][ T3324] device veth1_vlan entered promiscuous mode [ 42.909271][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.911090][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.912940][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.916414][ T3324] device veth0_macvtap entered promiscuous mode [ 42.967819][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.969793][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.971891][ T92] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.149341][ T3465] loop0: detected capacity change from 0 to 8192 [ 43.151930][ T3465] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 43.154967][ T3465] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 43.157311][ T3465] REISERFS (device loop0): using ordered data mode [ 43.158794][ T3465] reiserfs: using flush barriers [ 43.160282][ T3465] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 43.163947][ T3465] REISERFS (device loop0): checking transaction log (loop0) [ 43.179823][ T3465] REISERFS (device loop0): Using r5 hash to sort names [ 43.181603][ T3465] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 43.187836][ T3465] ================================================================== [ 43.189713][ T3465] BUG: KASAN: out-of-bounds in leaf_insert_into_buf+0x1f4/0x748 [ 43.191534][ T3465] Read of size 18446744073709551384 at addr ffff0000e0955000 by task syz-executor.0/3465 [ 43.193777][ T3465] [ 43.194348][ T3465] CPU: 0 PID: 3465 Comm: syz-executor.0 Not tainted 6.1.57-syzkaller #0 [ 43.196202][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.198523][ T3465] Call trace: [ 43.199333][ T3465] dump_backtrace+0x1c8/0x1f4 [ 43.200422][ T3465] show_stack+0x2c/0x3c [ 43.201401][ T3465] dump_stack_lvl+0xc0/0x104 [ 43.202461][ T3465] print_report+0x174/0x4c0 [ 43.203597][ T3465] kasan_report+0xcc/0x124 [ 43.204618][ T3465] kasan_check_range+0x264/0x2a4 [ 43.205791][ T3465] memmove+0x48/0x90 [ 43.206699][ T3465] leaf_insert_into_buf+0x1f4/0x748 [ 43.207911][ T3465] do_balance+0x4220/0xb510 [ 43.208938][ T3465] reiserfs_insert_item+0x908/0xa4c [ 43.210128][ T3465] indirect2direct+0x51c/0x88c [ 43.211225][ T3465] reiserfs_cut_from_item+0x840/0x1c50 [ 43.212450][ T3465] reiserfs_do_truncate+0x764/0x10a0 [ 43.213614][ T3465] reiserfs_truncate_file+0x510/0xb1c [ 43.214795][ T3465] reiserfs_write_end+0x640/0x800 [ 43.216003][ T3465] generic_perform_write+0x384/0x548 [ 43.217213][ T3465] __generic_file_write_iter+0x168/0x388 [ 43.218449][ T3465] generic_file_write_iter+0xb8/0x2b4 [ 43.219773][ T3465] vfs_write+0x610/0x914 [ 43.220675][ T3465] ksys_write+0x15c/0x26c [ 43.221711][ T3465] __arm64_sys_write+0x7c/0x90 [ 43.222821][ T3465] invoke_syscall+0x98/0x2c0 [ 43.223889][ T3465] el0_svc_common+0x134/0x24c [ 43.224996][ T3465] do_el0_svc+0x64/0x218 [ 43.226048][ T3465] el0_svc+0x34/0x100 [ 43.226990][ T3465] el0t_64_sync_handler+0x84/0xf0 [ 43.228240][ T3465] el0t_64_sync+0x18c/0x190 [ 43.229264][ T3465] [ 43.229816][ T3465] The buggy address belongs to the physical page: [ 43.231342][ T3465] page:00000000f7b337bb refcount:1 mapcount:0 mapping:00000000788a5a0e index:0xc pfn:0x120955 [ 43.233849][ T3465] memcg:ffff0000cf8fc000 [ 43.234881][ T3465] aops:shmem_aops ino:5 dentry name:"memfd:syzkaller" [ 43.236432][ T3465] flags: 0x5ffc0000008001e(referenced|uptodate|dirty|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 43.238797][ T3465] raw: 05ffc0000008001e fffffc0003825008 fffffc00038256c8 ffff0000d0a9eeb8 [ 43.240807][ T3465] raw: 000000000000000c 0000000000000000 00000001ffffffff ffff0000cf8fc000 [ 43.242884][ T3465] page dumped because: kasan: bad access detected [ 43.244436][ T3465] [ 43.244927][ T3465] Memory state around the buggy address: [ 43.246322][ T3465] ffff0000e0954f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.248176][ T3465] ffff0000e0954f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.249956][ T3465] >ffff0000e0955000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.251815][ T3465] ^ [ 43.252730][ T3465] ffff0000e0955080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.254541][ T3465] ffff0000e0955100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 43.256357][ T3465] ================================================================== [ 43.258800][ T3465] Disabling lock debugging due to kernel taint [ 43.273440][ T0] Unable to handle kernel paging request at virtual address dfff800020000000 [ 43.275390][ T0] KASAN: probably user-memory-access in range [0x0000000100000000-0x0000000100000007] [ 43.275682][ C1] Unable to handle kernel paging request at virtual address 001fccff55202e02 [ 43.277719][ C0] Unable to handle kernel paging request at virtual address dfff800000000002 [ 43.279738][ C1] Mem abort info: [ 43.281879][ C0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 43.282627][ C1] ESR = 0x0000000096000004 [ 43.284428][ C0] Mem abort info: [ 43.285447][ C1] EC = 0x25: DABT (current EL), IL = 32 bits [ 43.286295][ C0] ESR = 0x0000000096000006 [ 43.287720][ C1] SET = 0, FnV = 0 [ 43.288738][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 43.289582][ C1] EA = 0, S1PTW = 0 [ 43.290982][ C0] SET = 0, FnV = 0 [ 43.291798][ C1] FSC = 0x04: level 0 translation fault [ 43.292742][ C0] EA = 0, S1PTW = 0 [ 43.293937][ C1] Data abort info: [ 43.293941][ C1] ISV = 0, ISS = 0x00000004 [ 43.294781][ C0] FSC = 0x06: level 2 translation fault [ 43.295546][ C1] CM = 0, WnR = 0 [ 43.296622][ C0] Data abort info: [ 43.296626][ C0] ISV = 0, ISS = 0x00000006 [ 43.297910][ C1] [001fccff55202e02] address between user and kernel address ranges [ 43.298764][ C0] CM = 0, WnR = 0 [ 43.299613][ C1] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 43.300712][ C0] [dfff800000000002] address between user and kernel address ranges [ 43.302532][ C1] Modules linked in: [ 43.307726][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 6.1.57-syzkaller #0 [ 43.309838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.312248][ C1] pstate: 004000c5 (nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 43.314067][ C1] pc : timerqueue_add+0x8c/0x1e0 [ 43.315134][ C1] lr : timerqueue_add+0xe8/0x1e0 [ 43.316239][ C1] sp : ffff800008017ce0 [ 43.317190][ C1] x29: ffff800008017cf0 x28: dfff800000000000 x27: 0000000000000010 [ 43.319049][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: a90267faa9016ffc [ 43.320955][ C1] x23: a90267faa9016ffc x22: ffff80000ed8f244 x21: 0000000a114e0a00 [ 43.322787][ C1] x20: 0000000000000000 x19: 1ffff00001db1e48 x18: 1fffe00036a1e177 [ 43.324562][ C1] x17: ffff8001a3c44000 x16: ffff800008010000 x15: ffff0001b50f0bbc [ 43.326400][ C1] x14: ffff0001b50f0bb8 x13: 1fffe00036a1e176 x12: 0000000000000001 [ 43.328224][ C1] x11: ff8080000eca7058 x10: 0000000000010002 x9 : ffff80000eca7058 [ 43.330093][ C1] x8 : 15204cff55202e02 x7 : 0000000000000000 x6 : ffff800009a5da9c [ 43.332016][ C1] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082968b8 [ 43.333924][ C1] x2 : 0000000000000001 x1 : 910003fda9054ff4 x0 : a90267faa9017014 [ 43.335702][ C1] Call trace: [ 43.336421][ C1] timerqueue_add+0x8c/0x1e0 [ 43.337440][ C1] __hrtimer_run_queues+0x39c/0x60c [ 43.338588][ C1] hrtimer_interrupt+0x2ac/0xb2c [ 43.339657][ C1] arch_timer_handler_virt+0x74/0x88 [ 43.340885][ C1] handle_percpu_devid_irq+0x168/0x2c8 [ 43.342137][ C1] generic_handle_domain_irq+0x7c/0xc4 [ 43.343413][ C1] gic_handle_irq+0x70/0x1ac [ 43.344559][ C1] call_on_irq_stack+0x24/0x4c [ 43.345823][ C1] do_interrupt_handler+0xd4/0x138 [ 43.347035][ C1] el1_interrupt+0x34/0x68 [ 43.348049][ C1] el1h_64_irq_handler+0x18/0x24 [ 43.349159][ C1] el1h_64_irq+0x64/0x68 [ 43.350171][ C1] arch_local_irq_enable+0xc/0x18 [ 43.351310][ C1] do_idle+0x1c4/0x4d8 [ 43.352331][ C1] cpu_startup_entry+0x5c/0x74 [ 43.353485][ C1] secondary_start_kernel+0x19c/0x1c4 [ 43.354672][ C1] __secondary_switched+0xb0/0xb4 [ 43.355810][ C1] Code: 5280021b f2fbfffa 910062e0 d343fc08 (387c6908) [ 43.357356][ C1] ---[ end trace 0000000000000000 ]--- [ 43.609612][ C1] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 43.611421][ C1] SMP: stopping secondary CPUs [ 44.684996][ C1] SMP: failed to stop secondary CPUs 0-1 [ 44.686348][ C1] Kernel Offset: disabled [ 44.687398][ C1] CPU features: 0x00000,02070084,26017203 [ 44.688635][ C1] Memory Limit: none [ 44.916817][ C1] Rebooting in 86400 seconds..