[ 81.925091][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts.
2023/11/14 15:21:31 ignoring optional flag "sandboxArg"="0"
2023/11/14 15:21:31 parsed 1 programs
2023/11/14 15:21:31 executed programs: 0
[ 82.789331][ T5059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.797599][ T5059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.805647][ T5059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.814370][ T5059] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.822036][ T5059] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.829888][ T5059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.951803][ T5408] chnl_net:caif_netlink_parms(): no params data found
[ 83.011646][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.018988][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.026277][ T5408] bridge_slave_0: entered allmulticast mode
[ 83.033606][ T5408] bridge_slave_0: entered promiscuous mode
[ 83.041638][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.049134][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.057211][ T5408] bridge_slave_1: entered allmulticast mode
[ 83.064477][ T5408] bridge_slave_1: entered promiscuous mode
[ 83.089394][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.100839][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.128604][ T5408] team0: Port device team_slave_0 added
[ 83.136427][ T5408] team0: Port device team_slave_1 added
[ 83.159720][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.167345][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.193865][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.206559][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.214239][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.241192][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.277946][ T5408] hsr_slave_0: entered promiscuous mode
[ 83.284679][ T5408] hsr_slave_1: entered promiscuous mode
[ 83.989746][ T5408] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.001529][ T5408] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.013939][ T5408] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.025882][ T5408] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.126767][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.153950][ T5408] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.167092][ T23] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.174373][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.195864][ T23] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.203247][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.408510][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.461331][ T5408] veth0_vlan: entered promiscuous mode
[ 84.482504][ T5408] veth1_vlan: entered promiscuous mode
[ 84.521626][ T5408] veth0_macvtap: entered promiscuous mode
[ 84.536014][ T5408] veth1_macvtap: entered promiscuous mode
[ 84.561578][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.578951][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.592960][ T5408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.601886][ T5408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.614950][ T5408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.624243][ T5408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.717683][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.738667][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.771606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.779867][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.884952][ T4454] Bluetooth: hci0: command 0x0409 tx timeout
[ 84.927818][ T5471] loop0: detected capacity change from 0 to 8192
[ 84.946997][ T5471] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 84.962883][ T5471] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 84.973264][ T5471] REISERFS (device loop0): using ordered data mode
[ 84.980098][ T5471] reiserfs: using flush barriers
[ 84.989063][ T5471] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 85.007643][ T5471] REISERFS (device loop0): checking transaction log (loop0)
[ 85.021602][ T5471] REISERFS (device loop0): Using r5 hash to sort names
[ 85.032771][ T5471] ==================================================================
[ 85.040960][ T5471] BUG: KASAN: use-after-free in strlen+0x58/0x70
[ 85.047675][ T5471] Read of size 1 at addr ffff88806f5fa0c4 by task syz-executor.0/5471
[ 85.055933][ T5471]
[ 85.058369][ T5471] CPU: 0 PID: 5471 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0
[ 85.068995][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[ 85.079153][ T5471] Call Trace:
[ 85.082454][ T5471]
[ 85.085397][ T5471] dump_stack_lvl+0x1e7/0x2d0
[ 85.090810][ T5471] ? nf_tcp_handle_invalid+0x650/0x650
[ 85.096296][ T5471] ? panic+0x850/0x850
[ 85.100390][ T5471] ? _printk+0xd5/0x120
[ 85.104575][ T5471] print_report+0x163/0x540
[ 85.109968][ T5471] ? __virt_addr_valid+0x22f/0x2e0
[ 85.115279][ T5471] ? __phys_addr+0xba/0x170
[ 85.119809][ T5471] ? strlen+0x58/0x70
[ 85.123908][ T5471] kasan_report+0x142/0x170
[ 85.128607][ T5471] ? strlen+0x58/0x70
[ 85.132624][ T5471] strlen+0x58/0x70
[ 85.136587][ T5471] reiserfs_find_entry+0x982/0x19b0
[ 85.142079][ T5471] ? reiserfs_get_parent+0x2d0/0x2d0
[ 85.147588][ T5471] ? __d_lookup_rcu+0x3b8/0x4c0
[ 85.152470][ T5471] ? do_raw_spin_unlock+0x13b/0x8b0
[ 85.157747][ T5471] reiserfs_lookup+0x1e2/0x580
[ 85.162543][ T5471] ? reiserfs_init_priv_inode+0x150/0x150
[ 85.168392][ T5471] ? __init_waitqueue_head+0xae/0x150
[ 85.173791][ T5471] __lookup_slow+0x282/0x3e0
[ 85.178416][ T5471] ? lookup_one_len+0x2c0/0x2c0
[ 85.183467][ T5471] lookup_one_len+0x188/0x2c0
[ 85.188251][ T5471] ? lookup_one_common+0x460/0x460
[ 85.193495][ T5471] reiserfs_lookup_privroot+0x89/0x180
[ 85.198989][ T5471] reiserfs_fill_super+0x195b/0x2620
[ 85.204331][ T5471] ? reiserfs_kill_sb+0x150/0x150
[ 85.209387][ T5471] ? __down_write_common+0x161/0x200
[ 85.214748][ T5471] mount_bdev+0x237/0x300
[ 85.219119][ T5471] ? reiserfs_kill_sb+0x150/0x150
[ 85.224189][ T5471] ? get_tree_bdev+0x5b0/0x5b0
[ 85.229065][ T5471] ? vfs_parse_fs_string+0x190/0x230
[ 85.234598][ T5471] ? vfs_parse_fs_param+0x410/0x410
[ 85.239836][ T5471] ? cap_capable+0x1b4/0x240
[ 85.244458][ T5471] legacy_get_tree+0xef/0x190
[ 85.249256][ T5471] ? remove_save_link+0x540/0x540
[ 85.254313][ T5471] vfs_get_tree+0x8c/0x2a0
[ 85.258841][ T5471] do_new_mount+0x28f/0xae0
[ 85.263719][ T5471] ? do_move_mount_old+0x170/0x170
[ 85.268866][ T5471] __se_sys_mount+0x2d9/0x3c0
[ 85.273591][ T5471] ? __x64_sys_mount+0xc0/0xc0
[ 85.278554][ T5471] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 85.284573][ T5471] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 85.290587][ T5471] ? __x64_sys_mount+0x20/0xc0
[ 85.295468][ T5471] do_syscall_64+0x45/0x110
[ 85.300049][ T5471] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 85.306764][ T5471] RIP: 0033:0x7f05c407dfda
[ 85.311214][ T5471] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 85.331281][ T5471] RSP: 002b:00007f05c4db3ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 85.339904][ T5471] RAX: ffffffffffffffda RBX: 00007f05c4db3f80 RCX: 00007f05c407dfda
[ 85.348075][ T5471] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007f05c4db3f40
[ 85.356162][ T5471] RBP: 00000000200000c0 R08: 00007f05c4db3f80 R09: 0000000000008001
[ 85.364342][ T5471] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000020000040
[ 85.372342][ T5471] R13: 00007f05c4db3f40 R14: 0000000000001120 R15: 0000000020000300
[ 85.380340][ T5471]
[ 85.383375][ T5471]
[ 85.385707][ T5471] The buggy address belongs to the physical page:
[ 85.392133][ T5471] page:ffffea0001bd7e80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6f5fa
[ 85.402388][ T5471] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 85.409610][ T5471] page_type: 0xffffffff()
[ 85.414063][ T5471] raw: 00fff00000000000 ffffea0001bd7ec8 ffff8880b9842270 0000000000000000
[ 85.422681][ T5471] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 85.431462][ T5471] page dumped because: kasan: bad access detected
[ 85.437895][ T5471] page_owner tracks the page as freed
[ 85.443364][ T5471] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5470, tgid 5470 (sed), ts 84873630473, free_ts 84876669786
[ 85.461446][ T5471] post_alloc_hook+0x1e6/0x210
[ 85.466238][ T5471] get_page_from_freelist+0x33ea/0x3570
[ 85.471815][ T5471] __alloc_pages+0x255/0x680
[ 85.476536][ T5471] alloc_pages_mpol+0x3de/0x640
[ 85.481413][ T5471] vma_alloc_folio+0xf3/0x3f0
[ 85.486121][ T5471] handle_mm_fault+0x238a/0x6680
[ 85.491253][ T5471] exc_page_fault+0x456/0x870
[ 85.496006][ T5471] asm_exc_page_fault+0x26/0x30
[ 85.500884][ T5471] page last free stack trace:
[ 85.505570][ T5471] free_unref_page_prepare+0x931/0xa60
[ 85.511052][ T5471] free_unref_page_list+0x5a0/0x840
[ 85.516271][ T5471] release_pages+0x2117/0x2400
[ 85.521343][ T5471] tlb_flush_mmu+0x34c/0x4e0
[ 85.526037][ T5471] tlb_finish_mmu+0xd4/0x1f0
[ 85.530666][ T5471] exit_mmap+0x4d3/0xc60
[ 85.534946][ T5471] __mmput+0x115/0x3c0
[ 85.539134][ T5471] exit_mm+0x21f/0x300
[ 85.543235][ T5471] do_exit+0x9b7/0x2750
[ 85.547424][ T5471] do_group_exit+0x206/0x2c0
[ 85.552132][ T5471] __x64_sys_exit_group+0x3f/0x40
[ 85.557198][ T5471] do_syscall_64+0x45/0x110
[ 85.561992][ T5471] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 85.568002][ T5471]
[ 85.570335][ T5471] Memory state around the buggy address:
[ 85.575985][ T5471] ffff88806f5f9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 85.584155][ T5471] ffff88806f5fa000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 85.592242][ T5471] >ffff88806f5fa080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 85.600321][ T5471] ^
[ 85.606579][ T5471] ffff88806f5fa100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 85.614663][ T5471] ffff88806f5fa180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 85.622827][ T5471] ==================================================================
[ 85.643523][ T5471] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.650762][ T5471] CPU: 0 PID: 5471 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7 #0
[ 85.661191][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[ 85.671721][ T5471] Call Trace:
[ 85.675022][ T5471]
[ 85.678028][ T5471] dump_stack_lvl+0x1e7/0x2d0
[ 85.682843][ T5471] ? nf_tcp_handle_invalid+0x650/0x650
[ 85.688334][ T5471] ? panic+0x850/0x850
[ 85.692611][ T5471] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 85.698626][ T5471] ? vscnprintf+0x5d/0x80
[ 85.703378][ T5471] panic+0x349/0x850
[ 85.707312][ T5471] ? check_panic_on_warn+0x21/0xa0
[ 85.712538][ T5471] ? __memcpy_flushcache+0x2b0/0x2b0
[ 85.717885][ T5471] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 85.723991][ T5471] ? _raw_spin_unlock+0x40/0x40
[ 85.729043][ T5471] check_panic_on_warn+0x82/0xa0
[ 85.734012][ T5471] ? strlen+0x58/0x70
[ 85.738012][ T5471] end_report+0x6e/0x140
[ 85.742266][ T5471] kasan_report+0x153/0x170
[ 85.746764][ T5471] ? strlen+0x58/0x70
[ 85.750753][ T5471] strlen+0x58/0x70
[ 85.754556][ T5471] reiserfs_find_entry+0x982/0x19b0
[ 85.760017][ T5471] ? reiserfs_get_parent+0x2d0/0x2d0
[ 85.765381][ T5471] ? __d_lookup_rcu+0x3b8/0x4c0
[ 85.770306][ T5471] ? do_raw_spin_unlock+0x13b/0x8b0
[ 85.775513][ T5471] reiserfs_lookup+0x1e2/0x580
[ 85.780272][ T5471] ? reiserfs_init_priv_inode+0x150/0x150
[ 85.785997][ T5471] ? __init_waitqueue_head+0xae/0x150
[ 85.791365][ T5471] __lookup_slow+0x282/0x3e0
[ 85.796035][ T5471] ? lookup_one_len+0x2c0/0x2c0
[ 85.800932][ T5471] lookup_one_len+0x188/0x2c0
[ 85.805642][ T5471] ? lookup_one_common+0x460/0x460
[ 85.810957][ T5471] reiserfs_lookup_privroot+0x89/0x180
[ 85.816436][ T5471] reiserfs_fill_super+0x195b/0x2620
[ 85.821756][ T5471] ? reiserfs_kill_sb+0x150/0x150
[ 85.826896][ T5471] ? __down_write_common+0x161/0x200
[ 85.832182][ T5471] mount_bdev+0x237/0x300
[ 85.836512][ T5471] ? reiserfs_kill_sb+0x150/0x150
[ 85.841640][ T5471] ? get_tree_bdev+0x5b0/0x5b0
[ 85.846480][ T5471] ? vfs_parse_fs_string+0x190/0x230
[ 85.852283][ T5471] ? vfs_parse_fs_param+0x410/0x410
[ 85.857558][ T5471] ? cap_capable+0x1b4/0x240
[ 85.862144][ T5471] legacy_get_tree+0xef/0x190
[ 85.867167][ T5471] ? remove_save_link+0x540/0x540
[ 85.872187][ T5471] vfs_get_tree+0x8c/0x2a0
[ 85.876632][ T5471] do_new_mount+0x28f/0xae0
[ 85.881219][ T5471] ? do_move_mount_old+0x170/0x170
[ 85.886325][ T5471] __se_sys_mount+0x2d9/0x3c0
[ 85.891082][ T5471] ? __x64_sys_mount+0xc0/0xc0
[ 85.895854][ T5471] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 85.901829][ T5471] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 85.907827][ T5471] ? __x64_sys_mount+0x20/0xc0
[ 85.912688][ T5471] do_syscall_64+0x45/0x110
[ 85.917266][ T5471] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 85.923185][ T5471] RIP: 0033:0x7f05c407dfda
[ 85.927697][ T5471] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 85.947734][ T5471] RSP: 002b:00007f05c4db3ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 85.956163][ T5471] RAX: ffffffffffffffda RBX: 00007f05c4db3f80 RCX: 00007f05c407dfda
[ 85.964138][ T5471] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007f05c4db3f40
[ 85.972534][ T5471] RBP: 00000000200000c0 R08: 00007f05c4db3f80 R09: 0000000000008001
[ 85.980771][ T5471] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000020000040
[ 85.988823][ T5471] R13: 00007f05c4db3f40 R14: 0000000000001120 R15: 0000000020000300
[ 85.996794][ T5471]
[ 86.000222][ T5471] Kernel Offset: disabled
[ 86.004554][ T5471] Rebooting in 86400 seconds..