Warning: Permanently added '10.128.0.35' (ECDSA) to the list of known hosts. 2023/02/06 09:14:08 ignoring optional flag "sandboxArg"="0" 2023/02/06 09:14:08 parsed 1 programs 2023/02/06 09:14:08 executed programs: 0 [ 72.713282][ T4391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.722250][ T4391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.731894][ T4391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.739955][ T4391] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.748342][ T4391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.896558][ T5521] chnl_net:caif_netlink_parms(): no params data found [ 72.962917][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.971492][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.980026][ T5521] device bridge_slave_0 entered promiscuous mode [ 72.990051][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.997925][ T5521] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.006237][ T5521] device bridge_slave_1 entered promiscuous mode [ 73.031472][ T5521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.043202][ T5521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.075820][ T5521] team0: Port device team_slave_0 added [ 73.085170][ T5521] team0: Port device team_slave_1 added [ 73.109769][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.117004][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.144781][ T5521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.163211][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.170963][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.197895][ T5521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.229578][ T5521] device hsr_slave_0 entered promiscuous mode [ 73.236319][ T5521] device hsr_slave_1 entered promiscuous mode [ 73.780405][ T5521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.792324][ T5521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.802853][ T5521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.816113][ T5521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.842178][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.849382][ T5521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.856841][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.863984][ T5521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.877050][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.888742][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.959048][ T5521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.982358][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.991708][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.004733][ T5521] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.017204][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.027116][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.036219][ T5562] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.043305][ T5562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.064740][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.073599][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.082642][ T5562] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.090022][ T5562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.098337][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.107729][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.127160][ T2275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.138135][ T2275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.147654][ T2275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.158581][ T2275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.167496][ T2275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.177843][ T2275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.191097][ T5521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.207338][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.217684][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.227756][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.237286][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.413126][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.421637][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.436350][ T5521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.460410][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.471630][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.496353][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.506850][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.518299][ T5521] device veth0_vlan entered promiscuous mode [ 74.527964][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.536656][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.550606][ T5521] device veth1_vlan entered promiscuous mode [ 74.579719][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.591553][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.602732][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.613329][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.624588][ T5521] device veth0_macvtap entered promiscuous mode [ 74.633992][ T5521] device veth1_macvtap entered promiscuous mode [ 74.656943][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.666852][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.676579][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.686837][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.696821][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.710388][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.720281][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.731256][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.742687][ T5521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.754167][ T5521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763413][ T5521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.774672][ T5521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.828683][ T5074] Bluetooth: hci0: command 0x0409 tx timeout [ 74.847044][ T2832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.856687][ T2832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.869287][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.897821][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.907563][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.921961][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.983389][ T27] audit: type=1804 audit(1675674850.932:2): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3352992093/syzkaller.jS6fAi/0/bus" dev="sda1" ino=1148 res=1 errno=0 [ 75.025927][ T27] audit: type=1800 audit(1675674850.972:3): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1148 res=0 errno=0 [ 75.176706][ T27] audit: type=1804 audit(1675674851.132:4): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3352992093/syzkaller.jS6fAi/1/bus" dev="sda1" ino=1148 res=1 errno=0 [ 75.204646][ T27] audit: type=1800 audit(1675674851.132:5): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1148 res=0 errno=0 [ 75.331906][ T27] audit: type=1804 audit(1675674851.282:6): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3352992093/syzkaller.jS6fAi/2/bus" dev="sda1" ino=1148 res=1 errno=0 [ 75.357554][ T27] audit: type=1800 audit(1675674851.282:7): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1148 res=0 errno=0 [ 75.493133][ T27] audit: type=1804 audit(1675674851.442:8): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3352992093/syzkaller.jS6fAi/3/bus" dev="sda1" ino=1148 res=1 errno=0 [ 75.520040][ T27] audit: type=1800 audit(1675674851.442:9): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1148 res=0 errno=0 [ 75.639429][ T27] audit: type=1804 audit(1675674851.592:10): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3352992093/syzkaller.jS6fAi/4/bus" dev="sda1" ino=1148 res=1 errno=0 [ 75.667651][ T27] audit: type=1800 audit(1675674851.622:11): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1148 res=0 errno=0 [ 75.950108][ T5657] page:ffffea0001c2c940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x1a pfn:0x70b25 [ 75.960809][ T5657] memcg:ffff888140140000 [ 75.965361][ T5657] anon flags: 0xfff000000a0014(uptodate|lru|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 75.976288][ T5657] raw: 00fff000000a0014 ffffea0001bce248 ffffea0001bb9408 ffff888027cceaa1 [ 75.987579][ T5657] raw: 000000000000001a 0000000000000000 00000001ffffffff ffff888140140000 [ 75.996306][ T5657] page dumped because: VM_BUG_ON_PAGE(batch->nr > batch->max) [ 76.003775][ T5657] page_owner tracks the page as allocated [ 76.009800][ T5657] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5657, tgid 5657 (dhcpcd-run-hook), ts 75946716246, free_ts 75942517157 [ 76.027861][ T5657] get_page_from_freelist+0x119c/0x2ce0 [ 76.033423][ T5657] __alloc_pages+0x1cb/0x5b0 [ 76.038097][ T5657] __folio_alloc+0x16/0x40 [ 76.042614][ T5657] vma_alloc_folio+0x11a/0x690 [ 76.048191][ T5657] do_wp_page+0x595/0x2a60 [ 76.052667][ T5657] __handle_mm_fault+0x112e/0x2d80 [ 76.058651][ T5657] handle_mm_fault+0x17b/0x640 [ 76.063535][ T5657] do_user_addr_fault+0x2da/0xcf0 [ 76.068632][ T5657] exc_page_fault+0x5e/0xc0 [ 76.073340][ T5657] asm_exc_page_fault+0x26/0x30 [ 76.078276][ T5657] page last free stack trace: [ 76.083023][ T5657] free_pcp_prepare+0x65c/0xc00 [ 76.087943][ T5657] free_unref_page_list+0x176/0xcd0 [ 76.093177][ T5657] release_pages+0x320/0x10d0 [ 76.098568][ T5657] tlb_batch_pages_flush+0x85/0x160 [ 76.103803][ T5657] tlb_finish_mmu+0x114/0x6c0 [ 76.108604][ T5657] exit_mmap+0x1cd/0x620 [ 76.112870][ T5657] __mmput+0xf3/0x440 [ 76.117390][ T5657] do_exit+0x877/0x2460 [ 76.121652][ T5657] do_group_exit+0xb4/0x250 [ 76.126246][ T5657] __x64_sys_exit_group+0x39/0x40 [ 76.131303][ T5657] do_syscall_64+0x39/0xb0 [ 76.135924][ T5657] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.141883][ T5657] ------------[ cut here ]------------ [ 76.147523][ T5657] kernel BUG at mm/mmu_gather.c:139! [ 76.152828][ T5657] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 76.158977][ T5657] CPU: 0 PID: 5657 Comm: dhcpcd-run-hook Not tainted 6.2.0-rc5-syzkaller #0 [ 76.167703][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 76.177765][ T5657] RIP: 0010:__tlb_remove_page_size+0x1e2/0x3f0 [ 76.183925][ T5657] Code: 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 8b 45 0c e9 21 ff ff ff 0f 0b 4c 89 ef 48 c7 c6 a0 d9 76 89 48 83 e7 fc e8 0e 21 fb ff <0f> 0b 4c 8d 73 24 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea [ 76.203524][ T5657] RSP: 0018:ffffc900048bf648 EFLAGS: 00010283 [ 76.209592][ T5657] RAX: 0000000000000000 RBX: ffffc900048bf9e8 RCX: ffffc900048bf518 [ 76.217644][ T5657] RDX: 1ffff1100f545c25 RSI: ffffffff896b87a0 RDI: ffffffff89c27080 [ 76.225592][ T5657] RBP: ffff888023efe000 R08: 0000000000000000 R09: 0000000000000000 [ 76.233540][ T5657] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 76.241488][ T5657] R13: ffffea0001c2c940 R14: 0000000000000001 R15: ffffc900048bfa10 [ 76.249467][ T5657] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 76.258381][ T5657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.265030][ T5657] CR2: 00007f98ab9359ee CR3: 000000001d782000 CR4: 00000000003506f0 [ 76.273064][ T5657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.281011][ T5657] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.288955][ T5657] Call Trace: [ 76.292223][ T5657] [ 76.295139][ T5657] unmap_page_range+0xdfa/0x2d70 [ 76.300151][ T5657] ? vm_normal_page_pmd+0x490/0x490 [ 76.305323][ T5657] ? unmap_single_vma+0xb7/0x240 [ 76.310232][ T5657] unmap_vmas+0x21b/0x360 [ 76.314603][ T5657] ? unmap_single_vma+0x240/0x240 [ 76.319601][ T5657] ? find_held_lock+0x2d/0x110 [ 76.325139][ T5657] ? lock_downgrade+0x6e0/0x6e0 [ 76.329992][ T5657] exit_mmap+0x169/0x620 [ 76.334226][ T5657] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 76.340200][ T5657] __mmput+0xf3/0x440 [ 76.344172][ T5657] begin_new_exec+0xd54/0x28a0 [ 76.349005][ T5657] load_elf_binary+0x677/0x4370 [ 76.353866][ T5657] ? find_held_lock+0x2d/0x110 [ 76.358721][ T5657] ? bprm_execve+0x64d/0x1560 [ 76.363473][ T5657] ? elf_map+0x240/0x240 [ 76.367870][ T5657] ? do_raw_read_unlock+0x3f/0x70 [ 76.373153][ T5657] ? _raw_read_unlock+0x28/0x40 [ 76.378006][ T5657] ? load_misc_binary+0x6b1/0x950 [ 76.383020][ T5657] bprm_execve+0x669/0x1560 [ 76.387720][ T5657] ? copy_strings.isra.0+0x300/0x300 [ 76.393011][ T5657] ? copy_strings.isra.0+0x29a/0x300 [ 76.398298][ T5657] do_execveat_common+0x5fa/0x7b0 [ 76.403313][ T5657] ? bprm_execve+0x1560/0x1560 [ 76.408049][ T5657] ? strncpy_from_user+0x6d/0x2d0 [ 76.413412][ T5657] __x64_sys_execve+0x8e/0xc0 [ 76.418065][ T5657] do_syscall_64+0x39/0xb0 [ 76.422546][ T5657] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.428429][ T5657] RIP: 0033:0x7f98ab882337 [ 76.432827][ T5657] Code: Unable to access opcode bytes at 0x7f98ab88230d. [ 76.439818][ T5657] RSP: 002b:00007ffdff710ce8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 76.448206][ T5657] RAX: ffffffffffffffda RBX: 000055ddde16de60 RCX: 00007f98ab882337 [ 76.456242][ T5657] RDX: 000055ddde16de80 RSI: 000055ddde16de60 RDI: 000055ddde16df08 [ 76.464197][ T5657] RBP: 000055ddde16df08 R08: 000055ddde16df0d R09: 0000000000000000 [ 76.472159][ T5657] R10: 0000000000000008 R11: 0000000000000246 R12: 000055ddde16de80 [ 76.480129][ T5657] R13: 00007f98aba27ff4 R14: 000055ddde16de80 R15: 0000000000000000 [ 76.488177][ T5657] [ 76.491175][ T5657] Modules linked in: [ 76.495105][ T5657] ---[ end trace 0000000000000000 ]--- [ 76.500567][ T5657] RIP: 0010:__tlb_remove_page_size+0x1e2/0x3f0 [ 76.506849][ T5657] Code: 03 38 d0 7c 08 84 d2 0f 85 a9 01 00 00 8b 45 0c e9 21 ff ff ff 0f 0b 4c 89 ef 48 c7 c6 a0 d9 76 89 48 83 e7 fc e8 0e 21 fb ff <0f> 0b 4c 8d 73 24 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea [ 76.526676][ T5657] RSP: 0018:ffffc900048bf648 EFLAGS: 00010283 [ 76.532741][ T5657] RAX: 0000000000000000 RBX: ffffc900048bf9e8 RCX: ffffc900048bf518 [ 76.540797][ T5657] RDX: 1ffff1100f545c25 RSI: ffffffff896b87a0 RDI: ffffffff89c27080 [ 76.549000][ T5657] RBP: ffff888023efe000 R08: 0000000000000000 R09: 0000000000000000 [ 76.557005][ T5657] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 76.565025][ T5657] R13: ffffea0001c2c940 R14: 0000000000000001 R15: ffffc900048bfa10 [ 76.573031][ T5657] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 76.582165][ T5657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.588889][ T5657] CR2: 00007f98ab88230d CR3: 000000001d782000 CR4: 00000000003506f0 [ 76.596917][ T5657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.605018][ T5657] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.612995][ T5657] Kernel panic - not syncing: Fatal exception [ 76.619228][ T5657] Kernel Offset: disabled [ 76.623548][ T5657] Rebooting in 86400 seconds..