Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts.
2024/04/13 08:38:48 ignoring optional flag "sandboxArg"="0"
2024/04/13 08:38:48 parsed 1 programs
2024/04/13 08:38:50 executed programs: 0
[ 90.024531][ T5436] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.080549][ T4485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.088660][ T4485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.097084][ T4485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.105031][ T4485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.113638][ T4485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.121172][ T4485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.234486][ T5442] chnl_net:caif_netlink_parms(): no params data found
[ 90.287443][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.294600][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.302133][ T5442] bridge_slave_0: entered allmulticast mode
[ 90.309213][ T5442] bridge_slave_0: entered promiscuous mode
[ 90.317594][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.324683][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.332193][ T5442] bridge_slave_1: entered allmulticast mode
[ 90.339041][ T5442] bridge_slave_1: entered promiscuous mode
[ 90.364910][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.377311][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.404273][ T5442] team0: Port device team_slave_0 added
[ 90.413020][ T5442] team0: Port device team_slave_1 added
[ 90.434472][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.441846][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.468128][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.480345][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.487555][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.514340][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.549744][ T5442] hsr_slave_0: entered promiscuous mode
[ 90.556717][ T5442] hsr_slave_1: entered promiscuous mode
[ 91.108349][ T5442] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.120699][ T5442] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.132491][ T5442] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.144015][ T5442] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.178643][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.185947][ T5442] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.193460][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.200789][ T5442] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.281154][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.291113][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.316463][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.343275][ T5442] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.357648][ T782] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.364806][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.393517][ T782] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.400814][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.609346][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.667139][ T5442] veth0_vlan: entered promiscuous mode
[ 91.682374][ T5442] veth1_vlan: entered promiscuous mode
[ 91.722654][ T5442] veth0_macvtap: entered promiscuous mode
[ 91.733612][ T5442] veth1_macvtap: entered promiscuous mode
[ 91.762659][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.783532][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.801576][ T5442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.812542][ T5442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.824691][ T5442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.833995][ T5442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.940872][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.957991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.999866][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.010311][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.091327][ T5511] loop0: detected capacity change from 0 to 512
[ 92.107781][ T5511] =======================================================
[ 92.107781][ T5511] WARNING: The mand mount option has been deprecated and
[ 92.107781][ T5511] and is ignored by this kernel. Remove the mand
[ 92.107781][ T5511] option from the mount to silence this warning.
[ 92.107781][ T5511] =======================================================
[ 92.157018][ T53] Bluetooth: hci0: command tx timeout
[ 92.171404][ T5511] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 92.185057][ T5511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 92.224224][ T5511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set
[ 92.245352][ T5511] Quota error (device loop0): write_blk: dquota write failed
[ 92.254461][ T5511] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 92.266321][ T5511] EXT4-fs error (device loop0): ext4_acquire_dquot:6882: comm syz-executor.0: Failed to acquire dquot type 1
[ 92.284554][ T5511] EXT4-fs (loop0): 1 truncate cleaned up
[ 92.292645][ T5511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 92.310010][ T5511] ext4 filesystem being mounted at /root/syzkaller-testdir3307886416/syzkaller.KVURgl/0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 92.369816][ T5442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 92.379357][ T62] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5
[ 92.404445][ T62] EXT4-fs error (device loop0): ext4_release_dquot:6905: comm kworker/u8:4: Failed to release dquot type 1
[ 92.419452][ T62] ==================================================================
[ 92.427554][ T62] BUG: KASAN: slab-use-after-free in fsnotify+0x3e5/0x1f00
[ 92.434862][ T62] Read of size 8 at addr ffff88802d133300 by task kworker/u8:4/62
[ 92.442686][ T62]
[ 92.445019][ T62] CPU: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.9.0-rc3-next-20240410-syzkaller-dirty #0
[ 92.455096][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 92.465174][ T62] Workqueue: events_unbound quota_release_workfn
[ 92.471536][ T62] Call Trace:
[ 92.474827][ T62]
[ 92.477769][ T62] dump_stack_lvl+0x241/0x360
[ 92.482461][ T62] ? __pfx_dump_stack_lvl+0x10/0x10
[ 92.487861][ T62] ? __pfx__printk+0x10/0x10
[ 92.492562][ T62] ? _printk+0xd5/0x120
[ 92.496739][ T62] ? __virt_addr_valid+0x183/0x520
[ 92.501880][ T62] ? __virt_addr_valid+0x183/0x520
[ 92.507018][ T62] print_report+0x169/0x550
[ 92.511547][ T62] ? __virt_addr_valid+0x183/0x520
[ 92.516713][ T62] ? __virt_addr_valid+0x183/0x520
[ 92.521842][ T62] ? __virt_addr_valid+0x44e/0x520
[ 92.526987][ T62] ? __phys_addr+0xba/0x170
[ 92.531519][ T62] ? fsnotify+0x3e5/0x1f00
[ 92.536056][ T62] kasan_report+0x143/0x180
[ 92.540686][ T62] ? fsnotify+0x3e5/0x1f00
[ 92.545398][ T62] fsnotify+0x3e5/0x1f00
[ 92.549678][ T62] ? _printk+0xd5/0x120
[ 92.553857][ T62] ? fsnotify+0x338/0x1f00
[ 92.558306][ T62] ? __pfx_fsnotify+0x10/0x10
[ 92.563017][ T62] ? rcu_is_watching+0x15/0xb0
[ 92.567812][ T62] __ext4_error+0x255/0x3b0
[ 92.572469][ T62] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 92.578477][ T62] ? __pfx___ext4_error+0x10/0x10
[ 92.583537][ T62] ? dquot_release+0x173/0x5c0
[ 92.588336][ T62] ext4_release_dquot+0x326/0x450
[ 92.593399][ T62] quota_release_workfn+0x39f/0x650
[ 92.598653][ T62] ? __pfx_quota_release_workfn+0x10/0x10
[ 92.604584][ T62] ? process_scheduled_works+0x945/0x1830
[ 92.610373][ T62] process_scheduled_works+0xa2c/0x1830
[ 92.616171][ T62] ? __pfx_process_scheduled_works+0x10/0x10
[ 92.622186][ T62] ? assign_work+0x364/0x3d0
[ 92.626807][ T62] worker_thread+0x86d/0xd70
[ 92.631519][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 92.637554][ T62] ? __kthread_parkme+0x169/0x1d0
[ 92.642619][ T62] ? __pfx_worker_thread+0x10/0x10
[ 92.647857][ T62] kthread+0x2f0/0x390
[ 92.652069][ T62] ? __pfx_worker_thread+0x10/0x10
[ 92.657211][ T62] ? __pfx_kthread+0x10/0x10
[ 92.661835][ T62] ret_from_fork+0x4b/0x80
[ 92.666285][ T62] ? __pfx_kthread+0x10/0x10
[ 92.670906][ T62] ret_from_fork_asm+0x1a/0x30
[ 92.675711][ T62]
[ 92.678934][ T62]
[ 92.681274][ T62] Allocated by task 5511:
[ 92.685617][ T62] kasan_save_track+0x3f/0x80
[ 92.690342][ T62] __kasan_kmalloc+0x98/0xb0
[ 92.694956][ T62] kmalloc_trace_noprof+0x19c/0x2b0
[ 92.700182][ T62] fsnotify_add_mark_locked+0x3b2/0xe60
[ 92.705751][ T62] fanotify_add_mark+0xbbd/0x1330
[ 92.710884][ T62] do_fanotify_mark+0xbcc/0xd90
[ 92.715753][ T62] __x64_sys_fanotify_mark+0xb5/0xd0
[ 92.721226][ T62] do_syscall_64+0xf5/0x240
[ 92.725748][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.731775][ T62]
[ 92.734112][ T62] Freed by task 5442:
[ 92.738103][ T62] kasan_save_track+0x3f/0x80
[ 92.742802][ T62] kasan_save_free_info+0x40/0x50
[ 92.747846][ T62] poison_slab_object+0xe0/0x150
[ 92.752948][ T62] __kasan_slab_free+0x37/0x60
[ 92.757741][ T62] kfree+0x149/0x350
[ 92.761657][ T62] fsnotify_sb_delete+0x692/0x6f0
[ 92.766812][ T62] generic_shutdown_super+0xa5/0x2d0
[ 92.772123][ T62] kill_block_super+0x44/0x90
[ 92.776836][ T62] ext4_kill_sb+0x68/0xa0
[ 92.781187][ T62] deactivate_locked_super+0xc4/0x130
[ 92.786674][ T62] cleanup_mnt+0x426/0x4c0
[ 92.791194][ T62] task_work_run+0x24f/0x310
[ 92.795816][ T62] syscall_exit_to_user_mode+0x168/0x370
[ 92.801483][ T62] do_syscall_64+0x102/0x240
[ 92.806129][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.812052][ T62]
[ 92.814384][ T62] The buggy address belongs to the object at ffff88802d133300
[ 92.814384][ T62] which belongs to the cache kmalloc-32 of size 32
[ 92.828280][ T62] The buggy address is located 0 bytes inside of
[ 92.828280][ T62] freed 32-byte region [ffff88802d133300, ffff88802d133320)
[ 92.842103][ T62]
[ 92.844435][ T62] The buggy address belongs to the physical page:
[ 92.850939][ T62] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802d133180 pfn:0x2d133
[ 92.861106][ T62] flags: 0xfff80000000200(workingset|node=0|zone=1|lastcpupid=0xfff)
[ 92.869370][ T62] page_type: 0xffffefff(slab)
[ 92.874252][ T62] raw: 00fff80000000200 ffff888015041500 ffffea00007c7590 ffffea0001aa96d0
[ 92.883030][ T62] raw: ffff88802d133180 000000000040003d 00000001ffffefff 0000000000000000
[ 92.891642][ T62] page dumped because: kasan: bad access detected
[ 92.898161][ T62] page_owner tracks the page as allocated
[ 92.903979][ T62] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 177503641 (swapper/0), ts 1, free_ts 13042593494
[ 92.921367][ T62] post_alloc_hook+0x1f3/0x230
[ 92.926162][ T62] get_page_from_freelist+0x2ce2/0x2d90
[ 92.931735][ T62] __alloc_pages_noprof+0x256/0x6c0
[ 92.936969][ T62] alloc_slab_page+0x5f/0x120
[ 92.941670][ T62] allocate_slab+0x5a/0x2e0
[ 92.946366][ T62] ___slab_alloc+0xcd1/0x14b0
[ 92.951071][ T62] __slab_alloc+0x58/0xa0
[ 92.955433][ T62] kmalloc_node_track_caller_noprof+0x286/0x440
[ 92.961817][ T62] krealloc_noprof+0x7d/0x120
[ 92.966523][ T62] add_sysfs_param+0x137/0x7f0
[ 92.971316][ T62] kernel_add_sysfs_param+0xb4/0x130
[ 92.976628][ T62] param_sysfs_builtin+0x16e/0x1f0
[ 92.981763][ T62] param_sysfs_builtin_init+0x31/0x40
[ 92.987164][ T62] do_one_initcall+0x248/0x880
[ 92.991944][ T62] do_initcall_level+0x157/0x210
[ 92.996935][ T62] do_initcalls+0x3f/0x80
[ 93.001277][ T62] page last free pid 782 tgid 782 stack trace:
[ 93.007436][ T62] free_unref_page+0xd22/0xea0
[ 93.012235][ T62] vfree+0x186/0x2e0
[ 93.016158][ T62] delayed_vfree_work+0x56/0x80
[ 93.021024][ T62] process_scheduled_works+0xa2c/0x1830
[ 93.026697][ T62] worker_thread+0x86d/0xd70
[ 93.031422][ T62] kthread+0x2f0/0x390
[ 93.035524][ T62] ret_from_fork+0x4b/0x80
[ 93.040055][ T62] ret_from_fork_asm+0x1a/0x30
[ 93.044850][ T62]
[ 93.047194][ T62] Memory state around the buggy address:
[ 93.052923][ T62] ffff88802d133200: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc
[ 93.061006][ T62] ffff88802d133280: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc
[ 93.069169][ T62] >ffff88802d133300: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[ 93.077327][ T62] ^
[ 93.081417][ T62] ffff88802d133380: 00 00 00 fc fc fc fc fc 00 00 00 04 fc fc fc fc
[ 93.089495][ T62] ffff88802d133400: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc
[ 93.097653][ T62] ==================================================================
[ 93.137735][ T62] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.144988][ T62] CPU: 1 PID: 62 Comm: kworker/u8:4 Not tainted 6.9.0-rc3-next-20240410-syzkaller-dirty #0
[ 93.155159][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 93.165325][ T62] Workqueue: events_unbound quota_release_workfn
[ 93.171778][ T62] Call Trace:
[ 93.175083][ T62]
[ 93.178028][ T62] dump_stack_lvl+0x241/0x360
[ 93.182730][ T62] ? __pfx_dump_stack_lvl+0x10/0x10
[ 93.187958][ T62] ? __pfx__printk+0x10/0x10
[ 93.192573][ T62] ? preempt_schedule+0xe1/0xf0
[ 93.197482][ T62] ? vscnprintf+0x5d/0x90
[ 93.201835][ T62] panic+0x349/0x860
[ 93.205757][ T62] ? check_panic_on_warn+0x21/0xb0
[ 93.210900][ T62] ? __pfx_panic+0x10/0x10
[ 93.215344][ T62] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 93.221510][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 93.227847][ T62] ? print_report+0x502/0x550
[ 93.232551][ T62] check_panic_on_warn+0x86/0xb0
[ 93.237591][ T62] ? fsnotify+0x3e5/0x1f00
[ 93.242017][ T62] end_report+0x77/0x160
[ 93.246267][ T62] kasan_report+0x154/0x180
[ 93.250780][ T62] ? fsnotify+0x3e5/0x1f00
[ 93.255213][ T62] fsnotify+0x3e5/0x1f00
[ 93.259471][ T62] ? _printk+0xd5/0x120
[ 93.263626][ T62] ? fsnotify+0x338/0x1f00
[ 93.268053][ T62] ? __pfx_fsnotify+0x10/0x10
[ 93.272741][ T62] ? rcu_is_watching+0x15/0xb0
[ 93.277512][ T62] __ext4_error+0x255/0x3b0
[ 93.282038][ T62] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 93.288033][ T62] ? __pfx___ext4_error+0x10/0x10
[ 93.293163][ T62] ? dquot_release+0x173/0x5c0
[ 93.297940][ T62] ext4_release_dquot+0x326/0x450
[ 93.303155][ T62] quota_release_workfn+0x39f/0x650
[ 93.308354][ T62] ? __pfx_quota_release_workfn+0x10/0x10
[ 93.314077][ T62] ? process_scheduled_works+0x945/0x1830
[ 93.319791][ T62] process_scheduled_works+0xa2c/0x1830
[ 93.325341][ T62] ? __pfx_process_scheduled_works+0x10/0x10
[ 93.331314][ T62] ? assign_work+0x364/0x3d0
[ 93.335894][ T62] worker_thread+0x86d/0xd70
[ 93.340739][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 93.346627][ T62] ? __kthread_parkme+0x169/0x1d0
[ 93.351646][ T62] ? __pfx_worker_thread+0x10/0x10
[ 93.356752][ T62] kthread+0x2f0/0x390
[ 93.360817][ T62] ? __pfx_worker_thread+0x10/0x10
[ 93.366094][ T62] ? __pfx_kthread+0x10/0x10
[ 93.370678][ T62] ret_from_fork+0x4b/0x80
[ 93.375104][ T62] ? __pfx_kthread+0x10/0x10
[ 93.379707][ T62] ret_from_fork_asm+0x1a/0x30
[ 93.384469][ T62]
[ 93.387659][ T62] Kernel Offset: disabled
[ 93.391969][ T62] Rebooting in 86400 seconds..