Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts.
2023/12/19 08:45:12 ignoring optional flag "sandboxArg"="0"
2023/12/19 08:45:12 parsed 1 programs
[   82.001726][ T2518] cfg80211: failed to load regulatory.db
2023/12/19 08:45:14 executed programs: 0
[   82.756072][ T5406] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.811898][ T4456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.820277][ T4456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.828487][ T4456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.836473][ T4456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.844228][ T4456] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.851968][ T4456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.966154][ T5414] chnl_net:caif_netlink_parms(): no params data found
[   83.019512][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.027115][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.034354][ T5414] bridge_slave_0: entered allmulticast mode
[   83.041464][ T5414] bridge_slave_0: entered promiscuous mode
[   83.049646][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.056721][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.064233][ T5414] bridge_slave_1: entered allmulticast mode
[   83.071082][ T5414] bridge_slave_1: entered promiscuous mode
[   83.096617][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.108645][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.137284][ T5414] team0: Port device team_slave_0 added
[   83.145230][ T5414] team0: Port device team_slave_1 added
[   83.167222][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.174720][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.202002][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.214755][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.222376][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.249188][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.286646][ T5414] hsr_slave_0: entered promiscuous mode
[   83.293585][ T5414] hsr_slave_1: entered promiscuous mode
[   83.995413][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.022297][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.035382][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.052460][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.155834][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.183014][ T5414] 8021q: adding VLAN 0 to HW filter on device team0
[   84.201868][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.209244][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.231216][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.238791][ T5073] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.286252][ T5414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.296958][ T5414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.476746][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.534861][ T5414] veth0_vlan: entered promiscuous mode
[   84.551542][ T5414] veth1_vlan: entered promiscuous mode
[   84.590432][ T5414] veth0_macvtap: entered promiscuous mode
[   84.603228][ T5414] veth1_macvtap: entered promiscuous mode
[   84.629064][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.646658][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.662334][ T5414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.674811][ T5414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.685557][ T5414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.696320][ T5414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.789889][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.801847][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.836535][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.846188][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.892056][ T4456] Bluetooth: hci0: command 0x0409 tx timeout
[   85.210296][ T5480] loop0: detected capacity change from 0 to 32768
[   85.225782][ T5480] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5480)
[   85.255930][ T5480] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.268570][ T5480] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   85.278327][ T5480] BTRFS info (device loop0): enabling auto defrag
[   85.285974][ T5480] BTRFS info (device loop0): enabling disk space caching
[   85.299784][ T5480] BTRFS info (device loop0): max_inline at 0
[   85.306227][ T5480] BTRFS info (device loop0): force clearing of disk cache
[   85.313865][ T5480] BTRFS info (device loop0): turning on sync discard
[   85.327899][ T5480] BTRFS info (device loop0): disk space caching is enabled
[   85.376526][ T5480] BTRFS info (device loop0): enabling ssd optimizations
[   85.388681][ T5480] BTRFS info (device loop0): rebuilding free space tree
[   85.443413][ T5480] BTRFS info (device loop0): disabling free space tree
[   85.450874][ T5480] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   85.463945][ T5480] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.512829][ T5480] ==================================================================
[   85.521025][ T5480] BUG: KASAN: slab-out-of-bounds in btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   85.530150][ T5480] Read of size 1 at addr ffff888021b2a421 by task syz-executor.0/5480
[   85.538408][ T5480] 
[   85.540939][ T5480] CPU: 1 PID: 5480 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00200-g3bd7d7488169-dirty #0
[   85.551891][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   85.561983][ T5480] Call Trace:
[   85.565652][ T5480]  <TASK>
[   85.568787][ T5480]  dump_stack_lvl+0x1e7/0x2d0
[   85.573499][ T5480]  ? nf_tcp_handle_invalid+0x650/0x650
[   85.579166][ T5480]  ? panic+0x850/0x850
[   85.583376][ T5480]  ? _printk+0xd5/0x120
[   85.587684][ T5480]  print_report+0x163/0x540
[   85.592214][ T5480]  ? __virt_addr_valid+0x22f/0x2e0
[   85.597358][ T5480]  ? __phys_addr+0xba/0x170
[   85.601893][ T5480]  ? btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   85.607985][ T5480]  kasan_report+0x142/0x170
[   85.612541][ T5480]  ? btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   85.618640][ T5480]  btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   85.624564][ T5480]  ? btrfs_finish_block_group_to_copy+0x480/0x480
[   85.631177][ T5480]  ? btrfs_ioctl_dev_replace+0x2be/0x390
[   85.636834][ T5480]  ? do_raw_spin_lock+0x14e/0x370
[   85.641885][ T5480]  ? __lock_acquire+0x1fd0/0x1fd0
[   85.646942][ T5480]  ? do_raw_spin_unlock+0x13b/0x8b0
[   85.652168][ T5480]  btrfs_ioctl_dev_replace+0x2c9/0x390
[   85.657648][ T5480]  ? btrfs_ioctl_get_supported_features+0x50/0x50
[   85.664086][ T5480]  __se_sys_ioctl+0xf8/0x170
[   85.668714][ T5480]  do_syscall_64+0x45/0x110
[   85.673244][ T5480]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   85.679165][ T5480] RIP: 0033:0x7f695d67cba9
[   85.683601][ T5480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   85.703574][ T5480] RSP: 002b:00007f695e45a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.712117][ T5480] RAX: ffffffffffffffda RBX: 00007f695d79bf80 RCX: 00007f695d67cba9
[   85.720555][ T5480] RDX: 0000000020000540 RSI: 00000000ca289435 RDI: 0000000000000005
[   85.729157][ T5480] RBP: 00007f695d6c847a R08: 0000000000000000 R09: 0000000000000000
[   85.737263][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.745337][ T5480] R13: 000000000000000b R14: 00007f695d79bf80 R15: 00007ffe9e2e6458
[   85.753935][ T5480]  </TASK>
[   85.756974][ T5480] 
[   85.759481][ T5480] Allocated by task 5480:
[   85.763909][ T5480]  kasan_set_track+0x4f/0x70
[   85.768604][ T5480]  __kasan_kmalloc+0x98/0xb0
[   85.773222][ T5480]  __kmalloc_node_track_caller+0xb1/0x190
[   85.779153][ T5480]  memdup_user+0x2b/0xc0
[   85.783420][ T5480]  btrfs_ioctl_dev_replace+0xb8/0x390
[   85.788806][ T5480]  __se_sys_ioctl+0xf8/0x170
[   85.793495][ T5480]  do_syscall_64+0x45/0x110
[   85.798370][ T5480]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   85.804383][ T5480] 
[   85.806805][ T5480] The buggy address belongs to the object at ffff888021b2a000
[   85.806805][ T5480]  which belongs to the cache kmalloc-2k of size 2048
[   85.820876][ T5480] The buggy address is located 15 bytes to the right of
[   85.820876][ T5480]  allocated 1042-byte region [ffff888021b2a000, ffff888021b2a412)
[   85.836340][ T5480] 
[   85.838672][ T5480] The buggy address belongs to the physical page:
[   85.845086][ T5480] page:ffffea000086ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21b28
[   85.855255][ T5480] head:ffffea000086ca00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   85.865169][ T5480] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   85.873335][ T5480] page_type: 0xffffffff()
[   85.877696][ T5480] raw: 00fff00000000840 ffff888012c42000 dead000000000122 0000000000000000
[   85.886293][ T5480] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[   85.894974][ T5480] page dumped because: kasan: bad access detected
[   85.901396][ T5480] page_owner tracks the page as allocated
[   85.907126][ T5480] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4502, tgid 4502 (klogd), ts 85479727402, free_ts 85422702099
[   85.929460][ T5480]  post_alloc_hook+0x1e6/0x210
[   85.934263][ T5480]  get_page_from_freelist+0x33ea/0x3570
[   85.939978][ T5480]  __alloc_pages+0x255/0x680
[   85.944677][ T5480]  alloc_pages_mpol+0x3de/0x640
[   85.949616][ T5480]  alloc_slab_page+0x6a/0x170
[   85.954480][ T5480]  new_slab+0x84/0x2f0
[   85.958666][ T5480]  ___slab_alloc+0xc8a/0x1330
[   85.963530][ T5480]  __kmem_cache_alloc_node+0x21d/0x300
[   85.969027][ T5480]  kmalloc_trace+0x2a/0x60
[   85.974858][ T5480]  syslog_print+0x121/0x9b0
[   85.979563][ T5480]  do_syslog+0x505/0x890
[   85.983837][ T5480]  __x64_sys_syslog+0x7c/0x90
[   85.988817][ T5480]  do_syscall_64+0x45/0x110
[   85.993344][ T5480]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   85.999270][ T5480] page last free stack trace:
[   86.004125][ T5480]  free_unref_page_prepare+0x931/0xa60
[   86.009625][ T5480]  free_unref_page+0x37/0x3f0
[   86.014498][ T5480]  __unfreeze_partials+0x1e0/0x220
[   86.019626][ T5480]  put_cpu_partial+0x17b/0x250
[   86.024424][ T5480]  __slab_free+0x2b6/0x390
[   86.028858][ T5480]  qlist_free_all+0x75/0xe0
[   86.033397][ T5480]  kasan_quarantine_reduce+0x14b/0x160
[   86.039411][ T5480]  __kasan_slab_alloc+0x23/0x70
[   86.044281][ T5480]  slab_post_alloc_hook+0x6c/0x3c0
[   86.049415][ T5480]  kmem_cache_alloc+0x19e/0x2b0
[   86.054308][ T5480]  __btrfs_run_delayed_refs+0x14af/0x46c0
[   86.060176][ T5480]  btrfs_run_delayed_refs+0x188/0x2c0
[   86.065929][ T5480]  commit_cowonly_roots+0x66b/0x860
[   86.071154][ T5480]  btrfs_commit_transaction+0xff5/0x3740
[   86.077259][ T5480]  btrfs_rebuild_free_space_tree+0x1de/0x370
[   86.083400][ T5480]  btrfs_start_pre_rw_mount+0xef3/0x1340
[   86.089420][ T5480] 
[   86.091766][ T5480] Memory state around the buggy address:
[   86.097415][ T5480]  ffff888021b2a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   86.105933][ T5480]  ffff888021b2a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   86.114898][ T5480] >ffff888021b2a400: 00 00 02 fc fc fc fc fc fc fc fc fc fc fc fc fc
[   86.123241][ T5480]                                ^
[   86.128471][ T5480]  ffff888021b2a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   86.136643][ T5480]  ffff888021b2a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   86.144897][ T5480] ==================================================================
[   86.178959][ T5480] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   86.186279][ T5480] CPU: 0 PID: 5480 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00200-g3bd7d7488169-dirty #0
[   86.197544][ T5480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   86.208051][ T5480] Call Trace:
[   86.211371][ T5480]  <TASK>
[   86.214315][ T5480]  dump_stack_lvl+0x1e7/0x2d0
[   86.219014][ T5480]  ? nf_tcp_handle_invalid+0x650/0x650
[   86.224683][ T5480]  ? panic+0x850/0x850
[   86.228777][ T5480]  ? vscnprintf+0x5d/0x80
[   86.233218][ T5480]  panic+0x349/0x850
[   86.237309][ T5480]  ? check_panic_on_warn+0x21/0xa0
[   86.242449][ T5480]  ? __memcpy_flushcache+0x2b0/0x2b0
[   86.247759][ T5480]  ? _raw_spin_unlock_irqrestore+0x12c/0x140
[   86.253761][ T5480]  ? _raw_spin_unlock+0x40/0x40
[   86.258716][ T5480]  ? print_report+0x4fb/0x540
[   86.263512][ T5480]  check_panic_on_warn+0x82/0xa0
[   86.269139][ T5480]  ? btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   86.276654][ T5480]  end_report+0x6e/0x140
[   86.281451][ T5480]  kasan_report+0x153/0x170
[   86.285999][ T5480]  ? btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   86.292274][ T5480]  btrfs_dev_replace_by_ioctl+0x1dc5/0x2010
[   86.299075][ T5480]  ? btrfs_finish_block_group_to_copy+0x480/0x480
[   86.305526][ T5480]  ? btrfs_ioctl_dev_replace+0x2be/0x390
[   86.311190][ T5480]  ? do_raw_spin_lock+0x14e/0x370
[   86.316250][ T5480]  ? __lock_acquire+0x1fd0/0x1fd0
[   86.321311][ T5480]  ? do_raw_spin_unlock+0x13b/0x8b0
[   86.326726][ T5480]  btrfs_ioctl_dev_replace+0x2c9/0x390
[   86.332311][ T5480]  ? btrfs_ioctl_get_supported_features+0x50/0x50
[   86.338929][ T5480]  __se_sys_ioctl+0xf8/0x170
[   86.343720][ T5480]  do_syscall_64+0x45/0x110
[   86.348527][ T5480]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   86.354448][ T5480] RIP: 0033:0x7f695d67cba9
[   86.359139][ T5480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   86.379545][ T5480] RSP: 002b:00007f695e45a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.388241][ T5480] RAX: ffffffffffffffda RBX: 00007f695d79bf80 RCX: 00007f695d67cba9
[   86.396601][ T5480] RDX: 0000000020000540 RSI: 00000000ca289435 RDI: 0000000000000005
[   86.406115][ T5480] RBP: 00007f695d6c847a R08: 0000000000000000 R09: 0000000000000000
[   86.414469][ T5480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.422553][ T5480] R13: 000000000000000b R14: 00007f695d79bf80 R15: 00007ffe9e2e6458
[   86.431190][ T5480]  </TASK>
[   86.434613][ T5480] Kernel Offset: disabled
[   86.438966][ T5480] Rebooting in 86400 seconds..