[ 81.905662][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts.
2023/09/18 05:00:25 ignoring optional flag "sandboxArg"="0"
2023/09/18 05:00:25 parsed 1 programs
2023/09/18 05:00:25 executed programs: 0
[ 83.671319][ T4439] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.679464][ T4439] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.688197][ T4439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.695902][ T4439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 83.703168][ T4439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.821434][ T5382] chnl_net:caif_netlink_parms(): no params data found
[ 83.876020][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.883277][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.890585][ T5382] bridge_slave_0: entered allmulticast mode
[ 83.897425][ T5382] bridge_slave_0: entered promiscuous mode
[ 83.906414][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.914577][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.922185][ T5382] bridge_slave_1: entered allmulticast mode
[ 83.929090][ T5382] bridge_slave_1: entered promiscuous mode
[ 83.954763][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.966300][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.993877][ T5382] team0: Port device team_slave_0 added
[ 84.001801][ T5382] team0: Port device team_slave_1 added
[ 84.025700][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.032677][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.059424][ T5382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.072432][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.079997][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.107424][ T5382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.142190][ T5382] hsr_slave_0: entered promiscuous mode
[ 84.148801][ T5382] hsr_slave_1: entered promiscuous mode
[ 84.833148][ T5382] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.848649][ T5382] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.859924][ T5382] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.893347][ T5382] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.995615][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.018987][ T5382] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.033669][ T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.041000][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.067850][ T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.075078][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.122951][ T5382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 85.299742][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.359735][ T5382] veth0_vlan: entered promiscuous mode
[ 85.377628][ T5382] veth1_vlan: entered promiscuous mode
[ 85.414829][ T5382] veth0_macvtap: entered promiscuous mode
[ 85.429895][ T5382] veth1_macvtap: entered promiscuous mode
[ 85.455095][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.473565][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.488736][ T5382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.500444][ T5382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.511060][ T5382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.520703][ T5382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.616455][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.634841][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.677714][ T5043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.688750][ T5043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.745313][ T4439] Bluetooth: hci0: command 0x0409 tx timeout
[ 85.768640][ T5448] loop0: detected capacity change from 0 to 64
[ 85.787715][ T5448] hfs: unable to locate alternate MDB
[ 85.793328][ T5448] hfs: continuing without an alternate MDB
[ 85.830689][ T5448] ==================================================================
[ 85.838823][ T5448] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read_key+0x314/0x440
[ 85.846751][ T5448] Write of size 256 at addr ffff888027063b80 by task syz-executor.0/5448
[ 85.855457][ T5448]
[ 85.857790][ T5448] CPU: 1 PID: 5448 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-gce9ecca0238b #0
[ 85.867919][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 85.878259][ T5448] Call Trace:
[ 85.881580][ T5448]
[ 85.884528][ T5448] dump_stack_lvl+0x1e7/0x2d0
[ 85.889226][ T5448] ? folio_memcg_lock+0x89/0x390
[ 85.894187][ T5448] ? nf_tcp_handle_invalid+0x650/0x650
[ 85.899674][ T5448] ? panic+0x770/0x770
[ 85.903764][ T5448] ? _printk+0xd5/0x120
[ 85.907927][ T5448] print_report+0x163/0x540
[ 85.912425][ T5448] ? __virt_addr_valid+0x22f/0x2e0
[ 85.917659][ T5448] ? __phys_addr+0xba/0x170
[ 85.922326][ T5448] ? hfs_bnode_read_key+0x314/0x440
[ 85.928229][ T5448] kasan_report+0x175/0x1b0
[ 85.932759][ T5448] ? hfs_bnode_read_key+0x314/0x440
[ 85.937982][ T5448] kasan_check_range+0x27e/0x290
[ 85.942925][ T5448] ? hfs_bnode_read_key+0x314/0x440
[ 85.948116][ T5448] __asan_memcpy+0x40/0x70
[ 85.952788][ T5448] hfs_bnode_read_key+0x314/0x440
[ 85.957807][ T5448] hfs_brec_insert+0x6a1/0xbd0
[ 85.962588][ T5448] ? hfs_brec_keylen+0x360/0x360
[ 85.967541][ T5448] ? __asan_memset+0x23/0x40
[ 85.972136][ T5448] ? hfs_cat_build_record+0x242/0x800
[ 85.977503][ T5448] hfs_cat_create+0x5c0/0x970
[ 85.982174][ T5448] ? hfs_cat_build_key+0x170/0x170
[ 85.987368][ T5448] ? _raw_spin_unlock+0x28/0x40
[ 85.992211][ T5448] ? hfs_new_inode+0x88c/0xac0
[ 85.997366][ T5448] hfs_create+0x66/0xd0
[ 86.001557][ T5448] ? hfs_lookup+0x2f0/0x2f0
[ 86.006153][ T5448] path_openat+0x13e7/0x3180
[ 86.010886][ T5448] ? do_filp_open+0x490/0x490
[ 86.015595][ T5448] do_filp_open+0x234/0x490
[ 86.020218][ T5448] ? vfs_tmpfile+0x4b0/0x4b0
[ 86.025099][ T5448] ? _raw_spin_unlock+0x28/0x40
[ 86.030660][ T5448] ? alloc_fd+0x59c/0x640
[ 86.035088][ T5448] do_sys_openat2+0x13e/0x1d0
[ 86.039890][ T5448] ? do_sys_open+0x230/0x230
[ 86.044583][ T5448] ? xfd_validate_state+0x6e/0x150
[ 86.049724][ T5448] ? restore_fpregs_from_fpstate+0x100/0x250
[ 86.055718][ T5448] __x64_sys_openat+0x247/0x290
[ 86.060733][ T5448] ? __ia32_sys_open+0x270/0x270
[ 86.065679][ T5448] ? syscall_enter_from_user_mode+0x32/0x230
[ 86.071681][ T5448] ? lockdep_hardirqs_on+0x98/0x140
[ 86.076970][ T5448] ? syscall_enter_from_user_mode+0x32/0x230
[ 86.082972][ T5448] do_syscall_64+0x41/0xc0
[ 86.087708][ T5448] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.093719][ T5448] RIP: 0033:0x7f749e07c959
[ 86.098145][ T5448] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 86.117759][ T5448] RSP: 002b:00007f749d3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 86.126170][ T5448] RAX: ffffffffffffffda RBX: 00007f749e19bf80 RCX: 00007f749e07c959
[ 86.134135][ T5448] RDX: 0000000000141842 RSI: 0000000020000380 RDI: ffffffffffffff9c
[ 86.142206][ T5448] RBP: 00007f749e0d8c88 R08: 0000000000000000 R09: 0000000000000000
[ 86.150270][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.158233][ T5448] R13: 000000000000000b R14: 00007f749e19bf80 R15: 00007ffce4dccf98
[ 86.166198][ T5448]
[ 86.169204][ T5448]
[ 86.171512][ T5448] Allocated by task 5448:
[ 86.175828][ T5448] kasan_set_track+0x4f/0x70
[ 86.180524][ T5448] __kasan_kmalloc+0x98/0xb0
[ 86.185173][ T5448] __kmalloc+0xb9/0x230
[ 86.189330][ T5448] hfs_find_init+0x90/0x1f0
[ 86.193923][ T5448] hfs_cat_create+0x17e/0x970
[ 86.198595][ T5448] hfs_create+0x66/0xd0
[ 86.202826][ T5448] path_openat+0x13e7/0x3180
[ 86.207406][ T5448] do_filp_open+0x234/0x490
[ 86.212014][ T5448] do_sys_openat2+0x13e/0x1d0
[ 86.216680][ T5448] __x64_sys_openat+0x247/0x290
[ 86.221555][ T5448] do_syscall_64+0x41/0xc0
[ 86.225993][ T5448] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.231881][ T5448]
[ 86.234206][ T5448] The buggy address belongs to the object at ffff888027063b80
[ 86.234206][ T5448] which belongs to the cache kmalloc-96 of size 96
[ 86.248445][ T5448] The buggy address is located 0 bytes inside of
[ 86.248445][ T5448] allocated 78-byte region [ffff888027063b80, ffff888027063bce)
[ 86.262446][ T5448]
[ 86.264875][ T5448] The buggy address belongs to the physical page:
[ 86.271469][ T5448] page:ffffea00009c18c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27063
[ 86.282136][ T5448] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 86.290211][ T5448] page_type: 0xffffffff()
[ 86.294642][ T5448] raw: 00fff00000000800 ffff888012841780 ffffea000050a3c0 dead000000000005
[ 86.303228][ T5448] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[ 86.311796][ T5448] page dumped because: kasan: bad access detected
[ 86.318277][ T5448] page_owner tracks the page as allocated
[ 86.324062][ T5448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 4486, tgid 4486 (udevd), ts 20344920460, free_ts 18126794052
[ 86.342052][ T5448] post_alloc_hook+0x1e6/0x210
[ 86.346983][ T5448] get_page_from_freelist+0x31db/0x3360
[ 86.352520][ T5448] __alloc_pages+0x255/0x670
[ 86.357099][ T5448] alloc_slab_page+0x6a/0x160
[ 86.361939][ T5448] new_slab+0x84/0x2f0
[ 86.366030][ T5448] ___slab_alloc+0xc85/0x1310
[ 86.370692][ T5448] __kmem_cache_alloc_node+0x1af/0x270
[ 86.376221][ T5448] __kmalloc+0xa8/0x230
[ 86.380572][ T5448] ext4_find_extent+0x36c/0xde0
[ 86.385433][ T5448] ext4_ext_map_blocks+0x2cb/0x7150
[ 86.390649][ T5448] ext4_map_blocks+0x405/0x1cb0
[ 86.395522][ T5448] ext4_mpage_readpages+0xb8e/0x2ac0
[ 86.400943][ T5448] read_pages+0x183/0x830
[ 86.405270][ T5448] page_cache_ra_unbounded+0x68e/0x7c0
[ 86.410778][ T5448] filemap_get_pages+0x49c/0x2080
[ 86.415802][ T5448] filemap_read+0x42b/0x10b0
[ 86.420383][ T5448] page last free stack trace:
[ 86.425038][ T5448] free_unref_page_prepare+0x8c3/0x9f0
[ 86.430808][ T5448] free_unref_page+0x37/0x3f0
[ 86.435631][ T5448] kasan_depopulate_vmalloc_pte+0x74/0x90
[ 86.441516][ T5448] __apply_to_page_range+0x8e2/0xe00
[ 86.447460][ T5448] kasan_release_vmalloc+0x9a/0xb0
[ 86.452753][ T5448] __purge_vmap_area_lazy+0xc0f/0x19c0
[ 86.458492][ T5448] _vm_unmap_aliases+0x7d1/0x870
[ 86.463435][ T5448] change_page_attr_set_clr+0x2f8/0xf80
[ 86.468974][ T5448] set_memory_nx+0xf2/0x130
[ 86.473568][ T5448] free_initmem+0x75/0xc0
[ 86.477974][ T5448] kernel_init+0x31/0x2a0
[ 86.482390][ T5448] ret_from_fork+0x48/0x80
[ 86.486882][ T5448] ret_from_fork_asm+0x11/0x20
[ 86.491657][ T5448]
[ 86.494075][ T5448] Memory state around the buggy address:
[ 86.499786][ T5448] ffff888027063a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 86.507835][ T5448] ffff888027063b00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 86.515981][ T5448] >ffff888027063b80: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[ 86.524208][ T5448] ^
[ 86.530779][ T5448] ffff888027063c00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 86.539029][ T5448] ffff888027063c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 86.547187][ T5448] ==================================================================
[ 86.614411][ T5448] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 86.621835][ T5448] CPU: 1 PID: 5448 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-gce9ecca0238b #0
[ 86.631748][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 86.641829][ T5448] Call Trace:
[ 86.645218][ T5448]
[ 86.648253][ T5448] dump_stack_lvl+0x1e7/0x2d0
[ 86.653147][ T5448] ? nf_tcp_handle_invalid+0x650/0x650
[ 86.658807][ T5448] ? panic+0x770/0x770
[ 86.663037][ T5448] ? preempt_schedule_common+0x83/0xc0
[ 86.668528][ T5448] ? vscnprintf+0x5d/0x80
[ 86.672888][ T5448] panic+0x30f/0x770
[ 86.676810][ T5448] ? check_panic_on_warn+0x21/0xa0
[ 86.681945][ T5448] ? __memcpy_flushcache+0x2b0/0x2b0
[ 86.687261][ T5448] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 86.693268][ T5448] ? _raw_spin_unlock+0x40/0x40
[ 86.698249][ T5448] ? print_report+0x4fb/0x540
[ 86.703045][ T5448] check_panic_on_warn+0x82/0xa0
[ 86.708180][ T5448] ? hfs_bnode_read_key+0x314/0x440
[ 86.713498][ T5448] end_report+0x6e/0x130
[ 86.718030][ T5448] kasan_report+0x186/0x1b0
[ 86.722912][ T5448] ? hfs_bnode_read_key+0x314/0x440
[ 86.728401][ T5448] kasan_check_range+0x27e/0x290
[ 86.733368][ T5448] ? hfs_bnode_read_key+0x314/0x440
[ 86.738785][ T5448] __asan_memcpy+0x40/0x70
[ 86.743489][ T5448] hfs_bnode_read_key+0x314/0x440
[ 86.748628][ T5448] hfs_brec_insert+0x6a1/0xbd0
[ 86.753441][ T5448] ? hfs_brec_keylen+0x360/0x360
[ 86.758561][ T5448] ? __asan_memset+0x23/0x40
[ 86.764053][ T5448] ? hfs_cat_build_record+0x242/0x800
[ 86.769629][ T5448] hfs_cat_create+0x5c0/0x970
[ 86.774344][ T5448] ? hfs_cat_build_key+0x170/0x170
[ 86.779669][ T5448] ? _raw_spin_unlock+0x28/0x40
[ 86.784550][ T5448] ? hfs_new_inode+0x88c/0xac0
[ 86.789347][ T5448] hfs_create+0x66/0xd0
[ 86.793542][ T5448] ? hfs_lookup+0x2f0/0x2f0
[ 86.798072][ T5448] path_openat+0x13e7/0x3180
[ 86.802891][ T5448] ? do_filp_open+0x490/0x490
[ 86.807689][ T5448] do_filp_open+0x234/0x490
[ 86.812400][ T5448] ? vfs_tmpfile+0x4b0/0x4b0
[ 86.817208][ T5448] ? _raw_spin_unlock+0x28/0x40
[ 86.822280][ T5448] ? alloc_fd+0x59c/0x640
[ 86.826635][ T5448] do_sys_openat2+0x13e/0x1d0
[ 86.831343][ T5448] ? do_sys_open+0x230/0x230
[ 86.836156][ T5448] ? xfd_validate_state+0x6e/0x150
[ 86.841466][ T5448] ? restore_fpregs_from_fpstate+0x100/0x250
[ 86.847476][ T5448] __x64_sys_openat+0x247/0x290
[ 86.852359][ T5448] ? __ia32_sys_open+0x270/0x270
[ 86.857516][ T5448] ? syscall_enter_from_user_mode+0x32/0x230
[ 86.863611][ T5448] ? lockdep_hardirqs_on+0x98/0x140
[ 86.868850][ T5448] ? syscall_enter_from_user_mode+0x32/0x230
[ 86.874863][ T5448] do_syscall_64+0x41/0xc0
[ 86.879479][ T5448] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.885574][ T5448] RIP: 0033:0x7f749e07c959
[ 86.890103][ T5448] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 86.910430][ T5448] RSP: 002b:00007f749d3fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 86.919523][ T5448] RAX: ffffffffffffffda RBX: 00007f749e19bf80 RCX: 00007f749e07c959
[ 86.927777][ T5448] RDX: 0000000000141842 RSI: 0000000020000380 RDI: ffffffffffffff9c
[ 86.936336][ T5448] RBP: 00007f749e0d8c88 R08: 0000000000000000 R09: 0000000000000000
[ 86.944764][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.952945][ T5448] R13: 000000000000000b R14: 00007f749e19bf80 R15: 00007ffce4dccf98
[ 86.961034][ T5448]
[ 86.964372][ T5448] Kernel Offset: disabled
[ 86.968691][ T5448] Rebooting in 86400 seconds..