Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
2023/10/02 06:37:07 ignoring optional flag "sandboxArg"="0"
2023/10/02 06:37:07 parsed 1 programs
2023/10/02 06:37:09 executed programs: 0
[  102.429377][ T5411] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  102.498743][ T5067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.507957][ T5067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.516104][ T5067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.524202][ T5067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.532623][ T5067] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  102.540773][ T5067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.699362][ T5418] chnl_net:caif_netlink_parms(): no params data found
[  102.782390][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.789760][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.797236][ T5418] bridge_slave_0: entered allmulticast mode
[  102.805595][ T5418] bridge_slave_0: entered promiscuous mode
[  102.815198][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.822558][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.830697][ T5418] bridge_slave_1: entered allmulticast mode
[  102.838086][ T5418] bridge_slave_1: entered promiscuous mode
[  102.871028][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.883171][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.919594][ T5418] team0: Port device team_slave_0 added
[  102.928245][ T5418] team0: Port device team_slave_1 added
[  102.958755][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.965793][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.993253][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.006917][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.013883][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.040605][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.086999][ T5418] hsr_slave_0: entered promiscuous mode
[  103.096305][ T5418] hsr_slave_1: entered promiscuous mode
[  104.101081][ T5418] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.116620][ T5418] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.130726][ T5418] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.146341][ T5418] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  104.293709][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.336882][ T5418] 8021q: adding VLAN 0 to HW filter on device team0
[  104.358100][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.365432][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.396108][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.403831][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.636452][ T5067] Bluetooth: hci0: command 0x0409 tx timeout
[  104.698960][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.773873][ T5418] veth0_vlan: entered promiscuous mode
[  104.794257][ T5418] veth1_vlan: entered promiscuous mode
[  104.855442][ T5418] veth0_macvtap: entered promiscuous mode
[  104.880280][ T5418] veth1_macvtap: entered promiscuous mode
[  104.914532][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.942154][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.962097][ T5418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.971682][ T5418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.982776][ T5418] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.993284][ T5418] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.103125][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.128934][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.178147][  T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.187293][  T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.383462][ T5488] loop0: detected capacity change from 0 to 8192
[  105.402132][ T5488] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  105.417249][ T5488] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  105.429547][ T5488] REISERFS (device loop0): using ordered data mode
[  105.436568][ T5488] reiserfs: using flush barriers
[  105.446985][ T5488] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  105.464390][ T5488] REISERFS (device loop0): checking transaction log (loop0)
[  105.581845][ T5488] REISERFS (device loop0): Using r5 hash to sort names
[  105.602174][ T5488] ==================================================================
[  105.612129][ T5488] BUG: KASAN: use-after-free in reiserfs_readdir_inode+0xce1/0x14b0
[  105.620734][ T5488] Read of size 8 at addr ffff8880742bf000 by task syz-executor.0/5488
[  105.629695][ T5488] 
[  105.632040][ T5488] CPU: 1 PID: 5488 Comm: syz-executor.0 Not tainted 6.6.0-rc3-next-20230929-syzkaller-08790-gdf964ce9ef9f #0
[  105.644129][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[  105.655260][ T5488] Call Trace:
[  105.658553][ T5488]  <TASK>
[  105.661507][ T5488]  dump_stack_lvl+0xd9/0x1b0
[  105.666231][ T5488]  print_report+0xc4/0x620
[  105.670695][ T5488]  ? __virt_addr_valid+0x5e/0x2d0
[  105.675853][ T5488]  ? __phys_addr+0xc6/0x140
[  105.680409][ T5488]  kasan_report+0xda/0x110
[  105.685144][ T5488]  ? reiserfs_readdir_inode+0xce1/0x14b0
[  105.691018][ T5488]  ? reiserfs_readdir_inode+0xce1/0x14b0
[  105.696698][ T5488]  kasan_check_range+0xef/0x190
[  105.701691][ T5488]  reiserfs_readdir_inode+0xce1/0x14b0
[  105.707379][ T5488]  ? reiserfs_dir_fsync+0x140/0x140
[  105.712784][ T5488]  ? down_read_killable+0x222/0x4b0
[  105.718117][ T5488]  ? fsnotify_perm.part.0+0x268/0x630
[  105.723738][ T5488]  ? apparmor_file_permission+0x21f/0x4f0
[  105.730207][ T5488]  iterate_dir+0x1e5/0x5f0
[  105.734910][ T5488]  __x64_sys_getdents64+0x14f/0x2e0
[  105.740551][ T5488]  ? __ia32_sys_getdents+0x2d0/0x2d0
[  105.745942][ T5488]  ? folio_memcg_unlock+0x2d0/0x2d0
[  105.752522][ T5488]  ? fillonedir+0x400/0x400
[  105.757082][ T5488]  ? syscall_enter_from_user_mode+0x26/0x80
[  105.763033][ T5488]  ? lockdep_hardirqs_on+0x7d/0x100
[  105.768286][ T5488]  do_syscall_64+0x38/0xb0
[  105.772745][ T5488]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  105.778867][ T5488] RIP: 0033:0x7fb48c07cb29
[  105.783319][ T5488] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  105.803320][ T5488] RSP: 002b:00007fb48ccec0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  105.812030][ T5488] RAX: ffffffffffffffda RBX: 00007fb48c19bf80 RCX: 00007fb48c07cb29
[  105.820064][ T5488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  105.828071][ T5488] RBP: 00007fb48c0c847a R08: 0000000000000000 R09: 0000000000000000
[  105.836380][ T5488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.844815][ T5488] R13: 000000000000000b R14: 00007fb48c19bf80 R15: 00007ffca996cc68
[  105.853102][ T5488]  </TASK>
[  105.857658][ T5488] 
[  105.860084][ T5488] The buggy address belongs to the physical page:
[  105.867042][ T5488] page:ffffea0001d0afc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x742bf
[  105.877492][ T5488] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  105.884728][ T5488] page_type: 0xffffffff()
[  105.889303][ T5488] raw: 00fff00000000000 ffffea0001cc6208 ffffea0001cc55c8 0000000000000000
[  105.898534][ T5488] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  105.907235][ T5488] page dumped because: kasan: bad access detected
[  105.913712][ T5488] page_owner tracks the page as freed
[  105.919192][ T5488] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5497, tgid 5497 (rm), ts 105557840285, free_ts 105567939060
[  105.937810][ T5488]  post_alloc_hook+0x2cf/0x340
[  105.943049][ T5488]  get_page_from_freelist+0x98f/0x32a0
[  105.948838][ T5488]  __alloc_pages+0x1d0/0x4a0
[  105.953822][ T5488]  __folio_alloc+0x16/0x40
[  105.958538][ T5488]  vma_alloc_folio+0x156/0x890
[  105.963344][ T5488]  __handle_mm_fault+0xe06/0x3d60
[  105.968928][ T5488]  handle_mm_fault+0x478/0xa00
[  105.973908][ T5488]  do_user_addr_fault+0x30b/0x1000
[  105.979238][ T5488]  exc_page_fault+0x5c/0xd0
[  105.983789][ T5488]  asm_exc_page_fault+0x26/0x30
[  105.988674][ T5488] page last free stack trace:
[  105.993533][ T5488]  free_unref_page_prepare+0x476/0xa40
[  105.999135][ T5488]  free_unref_page_list+0xe6/0xb30
[  106.004288][ T5488]  release_pages+0x32a/0x14e0
[  106.009041][ T5488]  tlb_batch_pages_flush+0x9a/0x190
[  106.014269][ T5488]  tlb_finish_mmu+0x14b/0x6f0
[  106.018987][ T5488]  exit_mmap+0x38b/0xa60
[  106.023274][ T5488]  __mmput+0x12a/0x4d0
[  106.027370][ T5488]  mmput+0x62/0x70
[  106.031121][ T5488]  do_exit+0x9ad/0x2ae0
[  106.035311][ T5488]  do_group_exit+0xd4/0x2a0
[  106.039968][ T5488]  __x64_sys_exit_group+0x3e/0x50
[  106.045117][ T5488]  do_syscall_64+0x38/0xb0
[  106.050480][ T5488]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  106.056510][ T5488] 
[  106.058925][ T5488] Memory state around the buggy address:
[  106.064839][ T5488]  ffff8880742bef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  106.073199][ T5488]  ffff8880742bef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  106.081304][ T5488] >ffff8880742bf000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  106.089392][ T5488]                    ^
[  106.093492][ T5488]  ffff8880742bf080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  106.101680][ T5488]  ffff8880742bf100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  106.109856][ T5488] ==================================================================
[  106.126283][ T5488] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  106.133554][ T5488] CPU: 1 PID: 5488 Comm: syz-executor.0 Not tainted 6.6.0-rc3-next-20230929-syzkaller-08790-gdf964ce9ef9f #0
[  106.146817][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[  106.156891][ T5488] Call Trace:
[  106.160220][ T5488]  <TASK>
[  106.163195][ T5488]  dump_stack_lvl+0xd9/0x1b0
[  106.167929][ T5488]  panic+0x6dc/0x790
[  106.171973][ T5488]  ? panic_smp_self_stop+0xa0/0xa0
[  106.177379][ T5488]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.183955][ T5488]  ? preempt_schedule_thunk+0x1a/0x30
[  106.189465][ T5488]  ? preempt_schedule_common+0x45/0xc0
[  106.195236][ T5488]  ? check_panic_on_warn+0x1f/0xb0
[  106.200573][ T5488]  check_panic_on_warn+0xab/0xb0
[  106.206637][ T5488]  end_report+0x108/0x150
[  106.211976][ T5488]  kasan_report+0xea/0x110
[  106.216432][ T5488]  ? reiserfs_readdir_inode+0xce1/0x14b0
[  106.222275][ T5488]  ? reiserfs_readdir_inode+0xce1/0x14b0
[  106.228402][ T5488]  kasan_check_range+0xef/0x190
[  106.233316][ T5488]  reiserfs_readdir_inode+0xce1/0x14b0
[  106.239040][ T5488]  ? reiserfs_dir_fsync+0x140/0x140
[  106.244434][ T5488]  ? down_read_killable+0x222/0x4b0
[  106.249723][ T5488]  ? fsnotify_perm.part.0+0x268/0x630
[  106.255196][ T5488]  ? apparmor_file_permission+0x21f/0x4f0
[  106.261040][ T5488]  iterate_dir+0x1e5/0x5f0
[  106.265507][ T5488]  __x64_sys_getdents64+0x14f/0x2e0
[  106.270780][ T5488]  ? __ia32_sys_getdents+0x2d0/0x2d0
[  106.276362][ T5488]  ? folio_memcg_unlock+0x2d0/0x2d0
[  106.281648][ T5488]  ? fillonedir+0x400/0x400
[  106.286174][ T5488]  ? syscall_enter_from_user_mode+0x26/0x80
[  106.292186][ T5488]  ? lockdep_hardirqs_on+0x7d/0x100
[  106.297517][ T5488]  do_syscall_64+0x38/0xb0
[  106.302039][ T5488]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  106.308115][ T5488] RIP: 0033:0x7fb48c07cb29
[  106.312525][ T5488] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  106.332596][ T5488] RSP: 002b:00007fb48ccec0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  106.341104][ T5488] RAX: ffffffffffffffda RBX: 00007fb48c19bf80 RCX: 00007fb48c07cb29
[  106.349074][ T5488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  106.357039][ T5488] RBP: 00007fb48c0c847a R08: 0000000000000000 R09: 0000000000000000
[  106.365101][ T5488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.373151][ T5488] R13: 000000000000000b R14: 00007fb48c19bf80 R15: 00007ffca996cc68
[  106.381153][ T5488]  </TASK>
[  106.384612][ T5488] Kernel Offset: disabled
[  106.389021][ T5488] Rebooting in 86400 seconds..