[ 76.029931][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. 2023/08/30 11:17:32 ignoring optional flag "sandboxArg"="0" 2023/08/30 11:17:32 parsed 1 programs 2023/08/30 11:17:33 executed programs: 0 [ 79.303492][ T5381] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.315541][ T5380] syz-execprog[5380]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.326000][ T5380] syz-execprog[5380]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.367268][ T5036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.374932][ T5036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.383013][ T5036] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.391309][ T5036] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.399090][ T5036] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.406589][ T5036] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.513748][ T5389] chnl_net:caif_netlink_parms(): no params data found [ 79.564214][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.571379][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.578747][ T5389] bridge_slave_0: entered allmulticast mode [ 79.585448][ T5389] bridge_slave_0: entered promiscuous mode [ 79.593437][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.600948][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.608133][ T5389] bridge_slave_1: entered allmulticast mode [ 79.614785][ T5389] bridge_slave_1: entered promiscuous mode [ 79.639789][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.650919][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.677561][ T5389] team0: Port device team_slave_0 added [ 79.685611][ T5389] team0: Port device team_slave_1 added [ 79.708252][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.715204][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.741126][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.753492][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.760546][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.787040][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.821836][ T5389] hsr_slave_0: entered promiscuous mode [ 79.828274][ T5389] hsr_slave_1: entered promiscuous mode [ 80.471571][ T5389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.486110][ T5389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.497206][ T5389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.509123][ T5389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.609850][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.635799][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.649036][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.656153][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.682287][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.689457][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.875680][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.930238][ T5389] veth0_vlan: entered promiscuous mode [ 80.943907][ T5389] veth1_vlan: entered promiscuous mode [ 80.981859][ T5389] veth0_macvtap: entered promiscuous mode [ 80.992123][ T5389] veth1_macvtap: entered promiscuous mode [ 81.021241][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.036826][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.050164][ T5389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.060829][ T5389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.075302][ T5389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.085543][ T5389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.165519][ T5049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.184878][ T5049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.219983][ T4449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.227797][ T4449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.286070][ T5454] syz-executor.0[5454]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.370479][ T5454] loop0: detected capacity change from 0 to 8192 [ 81.382767][ T5454] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.399759][ T5454] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 81.409831][ T5454] REISERFS (device loop0): using ordered data mode [ 81.416398][ T5454] reiserfs: using flush barriers [ 81.425586][ T5454] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.443481][ T5454] REISERFS (device loop0): checking transaction log (loop0) [ 81.479304][ T5036] Bluetooth: hci0: command 0x0409 tx timeout [ 81.547182][ T5454] REISERFS (device loop0): Using r5 hash to sort names [ 81.557136][ T5454] REISERFS (device loop0): using 3.5.x disk format [ 81.566578][ T5454] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 81.589360][ T26] audit: type=1800 audit(1693394255.853:2): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 81.616367][ T5389] ================================================================================ [ 81.627680][ T5389] UBSAN: array-index-out-of-bounds in fs/reiserfs/journal.c:4168:22 [ 81.632984][ T26] audit: type=1800 audit(1693394255.853:3): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 81.639280][ T5389] index 1 is out of range for type '__le32 [1]' [ 81.666060][ T5389] CPU: 0 PID: 5389 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-04808-g6c1b980a7e79 #0 [ 81.676135][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 81.686194][ T5389] Call Trace: [ 81.688085][ T26] audit: type=1800 audit(1693394255.853:4): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 81.689486][ T5389] [ 81.689494][ T5389] dump_stack_lvl+0x125/0x1b0 [ 81.717651][ T5389] __ubsan_handle_out_of_bounds+0x111/0x150 [ 81.723572][ T5389] do_journal_end+0x406d/0x4c80 [ 81.728491][ T5389] ? reiserfs_prepare_for_journal+0x2b0/0x2b0 [ 81.734581][ T5389] ? dquot_scan_active+0x2f0/0x2f0 [ 81.739710][ T5389] reiserfs_sync_fs+0x10e/0x140 [ 81.744576][ T5389] ? handle_quota_files+0x3b0/0x3b0 [ 81.749784][ T5389] ? get_nr_dirty_inodes+0x176/0x1e0 [ 81.755091][ T5389] ? handle_quota_files+0x3b0/0x3b0 [ 81.760413][ T5389] sync_filesystem+0x109/0x280 [ 81.765202][ T5389] generic_shutdown_super+0x7e/0x3c0 [ 81.770518][ T5389] kill_block_super+0x3b/0x70 [ 81.775206][ T5389] deactivate_locked_super+0x9a/0x170 [ 81.780596][ T5389] deactivate_super+0xde/0x100 [ 81.785371][ T5389] cleanup_mnt+0x222/0x3d0 [ 81.789800][ T5389] task_work_run+0x14d/0x240 [ 81.794406][ T5389] ? task_work_cancel+0x30/0x30 [ 81.799277][ T5389] ? __x64_sys_umount+0x128/0x1a0 [ 81.804320][ T5389] exit_to_user_mode_prepare+0x210/0x240 [ 81.809963][ T5389] syscall_exit_to_user_mode+0x1d/0x60 [ 81.815431][ T5389] do_syscall_64+0x44/0xb0 [ 81.819857][ T5389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.825760][ T5389] RIP: 0033:0x7fbec607de57 [ 81.830176][ T5389] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 81.849803][ T5389] RSP: 002b:00007fffffa9eae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.858232][ T5389] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbec607de57 [ 81.866216][ T5389] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fffffa9eba0 [ 81.874201][ T5389] RBP: 00007fffffa9eba0 R08: 0000000000000000 R09: 0000000000000000 [ 81.882181][ T5389] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffffa9fc60 [ 81.890157][ T5389] R13: 00007fbec60c73b9 R14: 0000000000013d5e R15: 0000000000000006 [ 81.898141][ T5389] [ 81.926635][ T5389] ================================================================================ [ 81.936025][ T5389] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 81.943215][ T5389] CPU: 0 PID: 5389 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-04808-g6c1b980a7e79 #0 [ 81.953190][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 81.963240][ T5389] Call Trace: [ 81.966517][ T5389] [ 81.969459][ T5389] dump_stack_lvl+0xd9/0x1b0 [ 81.974073][ T5389] panic+0x6a6/0x750 [ 81.977976][ T5389] ? panic_smp_self_stop+0xa0/0xa0 [ 81.983118][ T5389] ? syslog_print_all+0x3f0/0x3f0 [ 81.988174][ T5389] check_panic_on_warn+0xab/0xb0 [ 81.993127][ T5389] __ubsan_handle_out_of_bounds+0x139/0x150 [ 81.999039][ T5389] do_journal_end+0x406d/0x4c80 [ 82.003935][ T5389] ? reiserfs_prepare_for_journal+0x2b0/0x2b0 [ 82.010027][ T5389] ? dquot_scan_active+0x2f0/0x2f0 [ 82.015160][ T5389] reiserfs_sync_fs+0x10e/0x140 [ 82.020020][ T5389] ? handle_quota_files+0x3b0/0x3b0 [ 82.025228][ T5389] ? get_nr_dirty_inodes+0x176/0x1e0 [ 82.030556][ T5389] ? handle_quota_files+0x3b0/0x3b0 [ 82.035770][ T5389] sync_filesystem+0x109/0x280 [ 82.040554][ T5389] generic_shutdown_super+0x7e/0x3c0 [ 82.045855][ T5389] kill_block_super+0x3b/0x70 [ 82.050565][ T5389] deactivate_locked_super+0x9a/0x170 [ 82.055961][ T5389] deactivate_super+0xde/0x100 [ 82.060736][ T5389] cleanup_mnt+0x222/0x3d0 [ 82.065162][ T5389] task_work_run+0x14d/0x240 [ 82.069765][ T5389] ? task_work_cancel+0x30/0x30 [ 82.074630][ T5389] ? __x64_sys_umount+0x128/0x1a0 [ 82.080285][ T5389] exit_to_user_mode_prepare+0x210/0x240 [ 82.085929][ T5389] syscall_exit_to_user_mode+0x1d/0x60 [ 82.091391][ T5389] do_syscall_64+0x44/0xb0 [ 82.095818][ T5389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.101997][ T5389] RIP: 0033:0x7fbec607de57 [ 82.106427][ T5389] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 82.126043][ T5389] RSP: 002b:00007fffffa9eae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.134477][ T5389] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbec607de57 [ 82.142450][ T5389] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fffffa9eba0 [ 82.150426][ T5389] RBP: 00007fffffa9eba0 R08: 0000000000000000 R09: 0000000000000000 [ 82.158571][ T5389] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffffa9fc60 [ 82.166544][ T5389] R13: 00007fbec60c73b9 R14: 0000000000013d5e R15: 0000000000000006 [ 82.174543][ T5389] [ 82.178475][ T5389] Kernel Offset: disabled [ 82.182886][ T5389] Rebooting in 86400 seconds..