Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
2023/12/12 05:21:23 ignoring optional flag "sandboxArg"="0"
2023/12/12 05:21:23 parsed 1 programs
2023/12/12 05:21:23 executed programs: 0
[ 79.031918][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.039913][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.048943][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.057276][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.066163][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 79.074231][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.190406][ T5419] chnl_net:caif_netlink_parms(): no params data found
[ 79.243809][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.253639][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.261170][ T5419] bridge_slave_0: entered allmulticast mode
[ 79.268073][ T5419] bridge_slave_0: entered promiscuous mode
[ 79.276582][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.284347][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.291993][ T5419] bridge_slave_1: entered allmulticast mode
[ 79.298707][ T5419] bridge_slave_1: entered promiscuous mode
[ 79.326245][ T5419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.338085][ T5419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.365393][ T5419] team0: Port device team_slave_0 added
[ 79.373570][ T5419] team0: Port device team_slave_1 added
[ 79.395259][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.403016][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.430477][ T5419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.443533][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.450857][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.478164][ T5419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.514336][ T5419] hsr_slave_0: entered promiscuous mode
[ 79.520766][ T5419] hsr_slave_1: entered promiscuous mode
[ 80.192558][ T5419] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.208250][ T5419] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.226117][ T5419] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.237835][ T5419] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.344831][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.369635][ T5419] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.384742][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.392358][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.423739][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.431146][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.633749][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.688041][ T5419] veth0_vlan: entered promiscuous mode
[ 80.706594][ T5419] veth1_vlan: entered promiscuous mode
[ 80.746640][ T5419] veth0_macvtap: entered promiscuous mode
[ 80.758183][ T5419] veth1_macvtap: entered promiscuous mode
[ 80.784242][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.802838][ T5419] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.817915][ T5419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.831541][ T5419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.840293][ T5419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.851967][ T5419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.949143][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.969605][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.006696][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.020624][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.092458][ T50] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.465584][ T5485] loop0: detected capacity change from 0 to 32768
[ 81.982802][ T1139] cfg80211: failed to load regulatory.db
[ 82.313634][ T5508] loop0: detected capacity change from 0 to 32768
[ 83.100240][ T5532] loop0: detected capacity change from 0 to 32768
[ 83.171306][ T50] Bluetooth: hci0: command 0x041b tx timeout
[ 83.863839][ T5561] loop0: detected capacity change from 0 to 32768
[ 84.752707][ T5590] loop0: detected capacity change from 0 to 32768
2023/12/12 05:21:29 executed programs: 5
[ 85.251291][ T50] Bluetooth: hci0: command 0x040f tx timeout
[ 85.594051][ T5626] loop0: detected capacity change from 0 to 32768
[ 86.406913][ T5657] loop0: detected capacity change from 0 to 32768
[ 87.181882][ T5691] loop0: detected capacity change from 0 to 32768
[ 87.331152][ T50] Bluetooth: hci0: command 0x0419 tx timeout
[ 88.055313][ T5718] loop0: detected capacity change from 0 to 32768
[ 88.874475][ T5751] loop0: detected capacity change from 0 to 32768
[ 89.663804][ T5783] loop0: detected capacity change from 0 to 32768
2023/12/12 05:21:34 executed programs: 12
[ 90.206929][ T5813] loop0: detected capacity change from 0 to 32768
[ 90.651743][ T5819] loop0: detected capacity change from 0 to 32768
[ 91.115616][ T5823] loop0: detected capacity change from 0 to 32768
[ 91.562437][ T5827] loop0: detected capacity change from 0 to 32768
[ 92.036595][ T5831] loop0: detected capacity change from 0 to 32768
[ 92.499803][ T5835] loop0: detected capacity change from 0 to 32768
[ 92.946842][ T5839] loop0: detected capacity change from 0 to 32768
[ 93.409162][ T5843] loop0: detected capacity change from 0 to 32768
[ 93.890716][ T5847] loop0: detected capacity change from 0 to 32768
[ 94.325823][ T5851] loop0: detected capacity change from 0 to 32768
[ 94.789433][ T5855] loop0: detected capacity change from 0 to 32768
2023/12/12 05:21:39 executed programs: 23
[ 95.237987][ T5859] loop0: detected capacity change from 0 to 32768
[ 95.665339][ T5863] loop0: detected capacity change from 0 to 32768
[ 96.168371][ T5867] loop0: detected capacity change from 0 to 32768
[ 96.635275][ T5872] loop0: detected capacity change from 0 to 32768
[ 97.086074][ T5876] loop0: detected capacity change from 0 to 32768
[ 97.540818][ T5881] loop0: detected capacity change from 0 to 32768
[ 98.019297][ T5887] loop0: detected capacity change from 0 to 32768
[ 98.475555][ T5891] loop0: detected capacity change from 0 to 32768
[ 98.944478][ T5896] loop0: detected capacity change from 0 to 32768
[ 99.424045][ T5900] loop0: detected capacity change from 0 to 32768
[ 99.899558][ T5905] loop0: detected capacity change from 0 to 32768
2023/12/12 05:21:44 executed programs: 34
[ 100.376787][ T5909] loop0: detected capacity change from 0 to 32768
[ 100.923048][ T5913] loop0: detected capacity change from 0 to 32768
[ 101.387343][ T5917] loop0: detected capacity change from 0 to 32768
[ 101.865414][ T5921] loop0: detected capacity change from 0 to 32768
[ 102.292845][ T5925] loop0: detected capacity change from 0 to 32768
[ 102.762260][ T5929] loop0: detected capacity change from 0 to 32768
[ 103.227518][ T5933] loop0: detected capacity change from 0 to 32768
[ 103.696412][ T5937] loop0: detected capacity change from 0 to 32768
[ 104.051254][ T107] ==================================================================
[ 104.059372][ T107] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x7de/0xb70
[ 104.067206][ T107] Read of size 4 at addr ffff888076ff3a94 by task jfsCommit/107
[ 104.074851][ T107]
[ 104.077187][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0
[ 104.087005][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 104.097169][ T107] Call Trace:
[ 104.100548][ T107]
[ 104.103582][ T107] dump_stack_lvl+0x1e7/0x2d0
[ 104.108865][ T107] ? nf_tcp_handle_invalid+0x650/0x650
[ 104.114382][ T107] ? panic+0x850/0x850
[ 104.118577][ T107] ? _printk+0xd5/0x120
[ 104.122927][ T107] print_report+0x163/0x540
[ 104.127453][ T107] ? preempt_schedule_common+0x83/0xc0
[ 104.132949][ T107] ? __virt_addr_valid+0x22f/0x2e0
[ 104.138075][ T107] ? __phys_addr+0xba/0x170
[ 104.142691][ T107] ? jfs_lazycommit+0x7de/0xb70
[ 104.147567][ T107] kasan_report+0x142/0x170
[ 104.152088][ T107] ? _raw_spin_lock_irqsave+0xe1/0x120
[ 104.157759][ T107] ? jfs_lazycommit+0x7de/0xb70
[ 104.162723][ T107] jfs_lazycommit+0x7de/0xb70
[ 104.167425][ T107] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 104.173346][ T107] ? lockdep_hardirqs_on+0x98/0x140
[ 104.178785][ T107] ? txFreelock+0x580/0x580
[ 104.184186][ T107] ? do_task_dead+0xd0/0xd0
[ 104.188983][ T107] kthread+0x2d3/0x370
[ 104.193169][ T107] ? txFreelock+0x580/0x580
[ 104.197799][ T107] ? kthread_blkcg+0xd0/0xd0
[ 104.202409][ T107] ret_from_fork+0x48/0x80
[ 104.206939][ T107] ? kthread_blkcg+0xd0/0xd0
[ 104.211978][ T107] ret_from_fork_asm+0x11/0x20
[ 104.216782][ T107]
[ 104.219835][ T107]
[ 104.222193][ T107] Allocated by task 5937:
[ 104.226712][ T107] kasan_set_track+0x4f/0x70
[ 104.231497][ T107] __kasan_kmalloc+0x98/0xb0
[ 104.236205][ T107] jfs_fill_super+0xff/0xc50
[ 104.240816][ T107] mount_bdev+0x237/0x300
[ 104.245251][ T107] legacy_get_tree+0xef/0x190
[ 104.249949][ T107] vfs_get_tree+0x8c/0x2a0
[ 104.254567][ T107] do_new_mount+0x28f/0xae0
[ 104.259168][ T107] __se_sys_mount+0x2d9/0x3c0
[ 104.263879][ T107] do_syscall_64+0x45/0x110
[ 104.268378][ T107] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 104.274270][ T107]
[ 104.276580][ T107] Freed by task 5938:
[ 104.280542][ T107] kasan_set_track+0x4f/0x70
[ 104.285118][ T107] kasan_save_free_info+0x28/0x40
[ 104.290326][ T107] ____kasan_slab_free+0xd6/0x120
[ 104.295372][ T107] __kmem_cache_free+0x263/0x3a0
[ 104.301130][ T107] generic_shutdown_super+0x13a/0x2c0
[ 104.306498][ T107] kill_block_super+0x44/0x90
[ 104.311422][ T107] deactivate_locked_super+0xc1/0x130
[ 104.317072][ T107] cleanup_mnt+0x426/0x4c0
[ 104.321491][ T107] task_work_run+0x24a/0x300
[ 104.326090][ T107] do_exit+0xa34/0x2750
[ 104.330347][ T107] do_group_exit+0x206/0x2c0
[ 104.335025][ T107] get_signal+0x1769/0x1840
[ 104.339522][ T107] arch_do_signal_or_restart+0x96/0x860
[ 104.345067][ T107] exit_to_user_mode_loop+0x6a/0x100
[ 104.350354][ T107] exit_to_user_mode_prepare+0xb1/0x150
[ 104.355905][ T107] irqentry_exit_to_user_mode+0xa/0x50
[ 104.361353][ T107] exc_page_fault+0x57e/0x870
[ 104.366018][ T107] asm_exc_page_fault+0x26/0x30
[ 104.371048][ T107]
[ 104.374410][ T107] The buggy address belongs to the object at ffff888076ff3a00
[ 104.374410][ T107] which belongs to the cache kmalloc-256 of size 256
[ 104.388812][ T107] The buggy address is located 148 bytes inside of
[ 104.388812][ T107] freed 256-byte region [ffff888076ff3a00, ffff888076ff3b00)
[ 104.402801][ T107]
[ 104.405243][ T107] The buggy address belongs to the physical page:
[ 104.411746][ T107] page:ffffea0001dbfc80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76ff2
[ 104.421898][ T107] head:ffffea0001dbfc80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 104.430914][ T107] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 104.439073][ T107] page_type: 0xffffffff()
[ 104.443435][ T107] raw: 00fff00000000840 ffff888012c41b40 dead000000000122 0000000000000000
[ 104.452108][ T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 104.460814][ T107] page dumped because: kasan: bad access detected
[ 104.467573][ T107] page_owner tracks the page as allocated
[ 104.473277][ T107] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5418, tgid 5418 (udevd), ts 103567606781, free_ts 103538051111
[ 104.495640][ T107] post_alloc_hook+0x1e6/0x210
[ 104.500532][ T107] get_page_from_freelist+0x33ea/0x3570
[ 104.506084][ T107] __alloc_pages+0x255/0x680
[ 104.510906][ T107] alloc_pages_mpol+0x3de/0x640
[ 104.515875][ T107] alloc_slab_page+0x6a/0x170
[ 104.520988][ T107] new_slab+0x84/0x2f0
[ 104.525238][ T107] ___slab_alloc+0xc8a/0x1330
[ 104.529909][ T107] __kmem_cache_alloc_node+0x21d/0x300
[ 104.535533][ T107] kmalloc_trace+0x2a/0x60
[ 104.540021][ T107] smk_fetch+0x92/0x140
[ 104.544165][ T107] smack_d_instantiate+0x841/0xa50
[ 104.549350][ T107] security_d_instantiate+0x9b/0xf0
[ 104.554622][ T107] d_instantiate+0x55/0x90
[ 104.559131][ T107] shmem_mknod+0x191/0x1c0
[ 104.563553][ T107] path_openat+0x13fa/0x3290
[ 104.568144][ T107] do_filp_open+0x234/0x490
[ 104.572640][ T107] page last free stack trace:
[ 104.577385][ T107] free_unref_page_prepare+0x931/0xa60
[ 104.582916][ T107] free_unref_page+0x37/0x3f0
[ 104.587576][ T107] __slab_free+0x2f6/0x390
[ 104.592323][ T107] qlist_free_all+0x75/0xe0
[ 104.596836][ T107] kasan_quarantine_reduce+0x14b/0x160
[ 104.602300][ T107] __kasan_slab_alloc+0x23/0x70
[ 104.607149][ T107] slab_post_alloc_hook+0x6c/0x3c0
[ 104.612253][ T107] kmem_cache_alloc+0x19e/0x2b0
[ 104.617115][ T107] getname_flags+0xbc/0x4f0
[ 104.621647][ T107] user_path_at_empty+0x2c/0x60
[ 104.626551][ T107] __se_sys_inotify_add_watch+0x1ab/0x10a0
[ 104.632532][ T107] do_syscall_64+0x45/0x110
[ 104.637028][ T107] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 104.642919][ T107]
[ 104.645227][ T107] Memory state around the buggy address:
[ 104.650846][ T107] ffff888076ff3980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.658937][ T107] ffff888076ff3a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.667488][ T107] >ffff888076ff3a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.675571][ T107] ^
[ 104.680145][ T107] ffff888076ff3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.688213][ T107] ffff888076ff3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.696456][ T107] ==================================================================
[ 104.704710][ T107] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.712078][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0
[ 104.721901][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 104.732049][ T107] Call Trace:
[ 104.735341][ T107]
[ 104.738527][ T107] dump_stack_lvl+0x1e7/0x2d0
[ 104.743293][ T107] ? nf_tcp_handle_invalid+0x650/0x650
[ 104.749614][ T107] ? panic+0x850/0x850
[ 104.753759][ T107] ? rcu_is_watching+0x15/0xb0
[ 104.758784][ T107] ? lock_release+0xbf/0x9c0
[ 104.763885][ T107] ? vscnprintf+0x5d/0x80
[ 104.768296][ T107] panic+0x349/0x850
[ 104.772267][ T107] ? check_panic_on_warn+0x21/0xa0
[ 104.777454][ T107] ? __memcpy_flushcache+0x2b0/0x2b0
[ 104.782817][ T107] ? do_raw_spin_unlock+0x13b/0x8b0
[ 104.788008][ T107] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 104.793915][ T107] ? _raw_spin_unlock+0x40/0x40
[ 104.798849][ T107] ? print_report+0x4fb/0x540
[ 104.803957][ T107] check_panic_on_warn+0x82/0xa0
[ 104.808890][ T107] ? jfs_lazycommit+0x7de/0xb70
[ 104.813822][ T107] end_report+0x6e/0x140
[ 104.818177][ T107] kasan_report+0x153/0x170
[ 104.822781][ T107] ? _raw_spin_lock_irqsave+0xe1/0x120
[ 104.828349][ T107] ? jfs_lazycommit+0x7de/0xb70
[ 104.833546][ T107] jfs_lazycommit+0x7de/0xb70
[ 104.838213][ T107] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 104.844107][ T107] ? lockdep_hardirqs_on+0x98/0x140
[ 104.849297][ T107] ? txFreelock+0x580/0x580
[ 104.853964][ T107] ? do_task_dead+0xd0/0xd0
[ 104.858461][ T107] kthread+0x2d3/0x370
[ 104.862693][ T107] ? txFreelock+0x580/0x580
[ 104.867274][ T107] ? kthread_blkcg+0xd0/0xd0
[ 104.871966][ T107] ret_from_fork+0x48/0x80
[ 104.876573][ T107] ? kthread_blkcg+0xd0/0xd0
[ 104.881326][ T107] ret_from_fork_asm+0x11/0x20
[ 104.886199][ T107]
[ 104.889484][ T107] Kernel Offset: disabled
[ 104.893804][ T107] Rebooting in 86400 seconds..