Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. 2023/10/08 01:23:16 ignoring optional flag "sandboxArg"="0" 2023/10/08 01:23:17 parsed 1 programs 2023/10/08 01:23:17 executed programs: 0 [ 80.468203][ T4434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.476856][ T4434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.485412][ T4434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.492930][ T4434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.501235][ T4434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.509718][ T4434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.627085][ T5381] chnl_net:caif_netlink_parms(): no params data found [ 80.679624][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.687081][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.694392][ T5381] bridge_slave_0: entered allmulticast mode [ 80.701340][ T5381] bridge_slave_0: entered promiscuous mode [ 80.709652][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.717097][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.724755][ T5381] bridge_slave_1: entered allmulticast mode [ 80.731460][ T5381] bridge_slave_1: entered promiscuous mode [ 80.756495][ T5381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.768632][ T5381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.795597][ T5381] team0: Port device team_slave_0 added [ 80.803203][ T5381] team0: Port device team_slave_1 added [ 80.825960][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.833102][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.859512][ T5381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.871898][ T5381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.879391][ T5381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.905926][ T5381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.941006][ T5381] hsr_slave_0: entered promiscuous mode [ 80.947992][ T5381] hsr_slave_1: entered promiscuous mode [ 81.677828][ T5381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.691374][ T5381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.703478][ T5381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.714265][ T5381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.818808][ T5381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.844073][ T5381] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.862850][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.870076][ T5031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.890294][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.897585][ T5031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.935244][ T779] cfg80211: failed to load regulatory.db [ 82.120257][ T5381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.181694][ T5381] veth0_vlan: entered promiscuous mode [ 82.201535][ T5381] veth1_vlan: entered promiscuous mode [ 82.244180][ T5381] veth0_macvtap: entered promiscuous mode [ 82.257640][ T5381] veth1_macvtap: entered promiscuous mode [ 82.284398][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.303668][ T5381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.319546][ T5381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.330936][ T5381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341021][ T5381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.351203][ T5381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.441335][ T5031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.457867][ T5031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.495458][ T5031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.503412][ T5031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.566288][ T5033] Bluetooth: hci0: command 0x0409 tx timeout [ 82.597772][ T5445] loop0: detected capacity change from 0 to 2048 [ 82.636802][ T5445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.693338][ T5445] ================================================================== [ 82.701539][ T5445] BUG: KASAN: slab-use-after-free in ext4_convert_inline_data_nolock+0x31a/0xd80 [ 82.710944][ T5445] Read of size 20 at addr ffff88807e67f1a3 by task syz-executor.0/5445 [ 82.719666][ T5445] [ 82.722008][ T5445] CPU: 1 PID: 5445 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 [ 82.732603][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 82.749476][ T5445] Call Trace: [ 82.752830][ T5445] [ 82.755862][ T5445] dump_stack_lvl+0x1e7/0x2d0 [ 82.760824][ T5445] ? nf_tcp_handle_invalid+0x650/0x650 [ 82.766414][ T5445] ? panic+0x770/0x770 [ 82.770515][ T5445] ? _printk+0xd5/0x120 [ 82.774700][ T5445] print_report+0x163/0x540 [ 82.779236][ T5445] ? __virt_addr_valid+0x22f/0x2e0 [ 82.784554][ T5445] ? __phys_addr+0xba/0x170 [ 82.789083][ T5445] ? ext4_convert_inline_data_nolock+0x31a/0xd80 [ 82.795532][ T5445] kasan_report+0x175/0x1b0 [ 82.800074][ T5445] ? ext4_convert_inline_data_nolock+0x31a/0xd80 [ 82.806446][ T5445] kasan_check_range+0x27e/0x290 [ 82.811512][ T5445] ? ext4_convert_inline_data_nolock+0x31a/0xd80 [ 82.817879][ T5445] __asan_memcpy+0x29/0x70 [ 82.822671][ T5445] ext4_convert_inline_data_nolock+0x31a/0xd80 [ 82.829115][ T5445] ? read_lock_is_recursive+0x20/0x20 [ 82.834596][ T5445] ? __down_write_common+0x161/0x200 [ 82.839995][ T5445] ? ext4_add_dirent_to_inline+0x4c0/0x4c0 [ 82.845834][ T5445] ? ext4_journal_check_start+0x175/0x240 [ 82.851670][ T5445] ? __ext4_journal_start_sb+0x26b/0x5a0 [ 82.857590][ T5445] ext4_convert_inline_data+0x4da/0x620 [ 82.863168][ T5445] ? ext4_inline_data_truncate+0xcc0/0xcc0 [ 82.869235][ T5445] ext4_fallocate+0x14f/0x1f50 [ 82.874146][ T5445] ? rcu_read_lock_any_held+0xb7/0x160 [ 82.879635][ T5445] ? ext4_ext_truncate+0x2b0/0x2b0 [ 82.884871][ T5445] vfs_fallocate+0x551/0x6b0 [ 82.889491][ T5445] __x64_sys_fallocate+0xbd/0x100 [ 82.894635][ T5445] do_syscall_64+0x41/0xc0 [ 82.899194][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.905136][ T5445] RIP: 0033:0x7f535b27c8d9 [ 82.909577][ T5445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 82.929470][ T5445] RSP: 002b:00007f535c0890c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 82.937995][ T5445] RAX: ffffffffffffffda RBX: 00007f535b39bf80 RCX: 00007f535b27c8d9 [ 82.945986][ T5445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 82.953975][ T5445] RBP: 00007f535b2d8b20 R08: 0000000000000000 R09: 0000000000000000 [ 82.962053][ T5445] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 82.970319][ T5445] R13: 000000000000000b R14: 00007f535b39bf80 R15: 00007ffe73e9d1f8 [ 82.978400][ T5445] [ 82.981440][ T5445] [ 82.984108][ T5445] Allocated by task 5189: [ 82.988526][ T5445] kasan_set_track+0x4f/0x70 [ 82.993144][ T5445] __kasan_slab_alloc+0x66/0x70 [ 82.998031][ T5445] slab_post_alloc_hook+0x67/0x3d0 [ 83.003152][ T5445] kmem_cache_alloc+0x123/0x300 [ 83.008020][ T5445] getname_flags+0xbc/0x4e0 [ 83.012622][ T5445] vfs_fstatat+0x11c/0x190 [ 83.017057][ T5445] __x64_sys_newfstatat+0x117/0x190 [ 83.022276][ T5445] do_syscall_64+0x41/0xc0 [ 83.026795][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.032795][ T5445] [ 83.035216][ T5445] Freed by task 5189: [ 83.039200][ T5445] kasan_set_track+0x4f/0x70 [ 83.043811][ T5445] kasan_save_free_info+0x28/0x40 [ 83.048856][ T5445] ____kasan_slab_free+0xd6/0x120 [ 83.053902][ T5445] kmem_cache_free+0x292/0x500 [ 83.058855][ T5445] vfs_fstatat+0x13f/0x190 [ 83.063732][ T5445] __x64_sys_newfstatat+0x117/0x190 [ 83.068953][ T5445] do_syscall_64+0x41/0xc0 [ 83.073386][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.079313][ T5445] [ 83.081739][ T5445] The buggy address belongs to the object at ffff88807e67e600 [ 83.081739][ T5445] which belongs to the cache names_cache of size 4096 [ 83.100705][ T5445] The buggy address is located 2979 bytes inside of [ 83.100705][ T5445] freed 4096-byte region [ffff88807e67e600, ffff88807e67f600) [ 83.114780][ T5445] [ 83.117113][ T5445] The buggy address belongs to the physical page: [ 83.123618][ T5445] page:ffffea0001f99e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e678 [ 83.133787][ T5445] head:ffffea0001f99e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.143182][ T5445] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 83.151878][ T5445] page_type: 0xffffffff() [ 83.156374][ T5445] raw: 00fff00000000840 ffff888014a448c0 0000000000000000 dead000000000001 [ 83.165341][ T5445] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 83.173936][ T5445] page dumped because: kasan: bad access detected [ 83.180448][ T5445] page_owner tracks the page as allocated [ 83.186179][ T5445] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4473, tgid 4473 (S02sysctl), ts 19715788349, free_ts 17610907747 [ 83.208165][ T5445] post_alloc_hook+0x1e6/0x210 [ 83.213042][ T5445] get_page_from_freelist+0x31db/0x3360 [ 83.218620][ T5445] __alloc_pages+0x255/0x670 [ 83.223235][ T5445] alloc_slab_page+0x6a/0x160 [ 83.228013][ T5445] new_slab+0x84/0x2f0 [ 83.232133][ T5445] ___slab_alloc+0xc85/0x1310 [ 83.236912][ T5445] kmem_cache_alloc+0x1bf/0x300 [ 83.241783][ T5445] getname_flags+0xbc/0x4e0 [ 83.246384][ T5445] do_sys_openat2+0xd2/0x1d0 [ 83.250994][ T5445] __x64_sys_openat+0x247/0x290 [ 83.255872][ T5445] do_syscall_64+0x41/0xc0 [ 83.260307][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.266325][ T5445] page last free stack trace: [ 83.271045][ T5445] free_unref_page_prepare+0x8c3/0x9f0 [ 83.276526][ T5445] free_unref_page+0x37/0x3f0 [ 83.281395][ T5445] free_contig_range+0x9e/0x150 [ 83.286529][ T5445] destroy_args+0x95/0x7c0 [ 83.291069][ T5445] debug_vm_pgtable+0x4ba/0x540 [ 83.296111][ T5445] do_one_initcall+0x23d/0x7d0 [ 83.300897][ T5445] do_initcall_level+0x157/0x210 [ 83.305903][ T5445] do_initcalls+0x3f/0x80 [ 83.310551][ T5445] kernel_init_freeable+0x429/0x5c0 [ 83.315864][ T5445] kernel_init+0x1d/0x2a0 [ 83.320213][ T5445] ret_from_fork+0x48/0x80 [ 83.324656][ T5445] ret_from_fork_asm+0x11/0x20 [ 83.329529][ T5445] [ 83.331862][ T5445] Memory state around the buggy address: [ 83.337676][ T5445] ffff88807e67f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.345933][ T5445] ffff88807e67f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.354029][ T5445] >ffff88807e67f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.362280][ T5445] ^ [ 83.367416][ T5445] ffff88807e67f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.375668][ T5445] ffff88807e67f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.383744][ T5445] ================================================================== [ 83.450145][ T5445] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.457386][ T5445] CPU: 0 PID: 5445 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00284-gb9ddbb0cde2a #0 [ 83.467792][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 83.477922][ T5445] Call Trace: [ 83.481193][ T5445] [ 83.484118][ T5445] dump_stack_lvl+0x1e7/0x2d0 [ 83.488794][ T5445] ? nf_tcp_handle_invalid+0x650/0x650 [ 83.494244][ T5445] ? panic+0x770/0x770 [ 83.498479][ T5445] ? preempt_schedule_common+0x83/0xc0 [ 83.504046][ T5445] ? vscnprintf+0x5d/0x80 [ 83.508456][ T5445] panic+0x30f/0x770 [ 83.512612][ T5445] ? check_panic_on_warn+0x21/0xa0 [ 83.517712][ T5445] ? __memcpy_flushcache+0x2b0/0x2b0 [ 83.523035][ T5445] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 83.529005][ T5445] ? _raw_spin_unlock+0x40/0x40 [ 83.533843][ T5445] ? print_report+0x4fb/0x540 [ 83.538516][ T5445] check_panic_on_warn+0x82/0xa0 [ 83.543537][ T5445] ? ext4_convert_inline_data_nolock+0x31a/0xd80 [ 83.550120][ T5445] end_report+0x6e/0x130 [ 83.554381][ T5445] kasan_report+0x186/0x1b0 [ 83.558899][ T5445] ? ext4_convert_inline_data_nolock+0x31a/0xd80 [ 83.565235][ T5445] kasan_check_range+0x27e/0x290 [ 83.570176][ T5445] ? ext4_convert_inline_data_nolock+0x31a/0xd80 [ 83.576499][ T5445] __asan_memcpy+0x29/0x70 [ 83.580913][ T5445] ext4_convert_inline_data_nolock+0x31a/0xd80 [ 83.587145][ T5445] ? read_lock_is_recursive+0x20/0x20 [ 83.592505][ T5445] ? __down_write_common+0x161/0x200 [ 83.598038][ T5445] ? ext4_add_dirent_to_inline+0x4c0/0x4c0 [ 83.604185][ T5445] ? ext4_journal_check_start+0x175/0x240 [ 83.609891][ T5445] ? __ext4_journal_start_sb+0x26b/0x5a0 [ 83.615605][ T5445] ext4_convert_inline_data+0x4da/0x620 [ 83.621145][ T5445] ? ext4_inline_data_truncate+0xcc0/0xcc0 [ 83.627053][ T5445] ext4_fallocate+0x14f/0x1f50 [ 83.631811][ T5445] ? rcu_read_lock_any_held+0xb7/0x160 [ 83.637258][ T5445] ? ext4_ext_truncate+0x2b0/0x2b0 [ 83.642360][ T5445] vfs_fallocate+0x551/0x6b0 [ 83.646943][ T5445] __x64_sys_fallocate+0xbd/0x100 [ 83.651960][ T5445] do_syscall_64+0x41/0xc0 [ 83.656368][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 83.662425][ T5445] RIP: 0033:0x7f535b27c8d9 [ 83.666917][ T5445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.686618][ T5445] RSP: 002b:00007f535c0890c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 83.695031][ T5445] RAX: ffffffffffffffda RBX: 00007f535b39bf80 RCX: 00007f535b27c8d9 [ 83.703014][ T5445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 83.711060][ T5445] RBP: 00007f535b2d8b20 R08: 0000000000000000 R09: 0000000000000000 [ 83.719066][ T5445] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 83.727378][ T5445] R13: 000000000000000b R14: 00007f535b39bf80 R15: 00007ffe73e9d1f8 [ 83.735433][ T5445] [ 83.738792][ T5445] Kernel Offset: disabled [ 83.743135][ T5445] Rebooting in 86400 seconds..