Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts.
2024/05/17 02:18:01 ignoring optional flag "sandboxArg"="0"
2024/05/17 02:18:02 parsed 1 programs
2024/05/17 02:18:03 executed programs: 0
[ 85.355375][ T5418] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 85.411894][ T4469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.420650][ T4469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.429046][ T4469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.437044][ T4469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.445494][ T4469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.452866][ T4469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.569307][ T5424] chnl_net:caif_netlink_parms(): no params data found
[ 85.620221][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.627366][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.635123][ T5424] bridge_slave_0: entered allmulticast mode
[ 85.643072][ T5424] bridge_slave_0: entered promiscuous mode
[ 85.651428][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.659335][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.666503][ T5424] bridge_slave_1: entered allmulticast mode
[ 85.673533][ T5424] bridge_slave_1: entered promiscuous mode
[ 85.698372][ T5424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.710713][ T5424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.737949][ T5424] team0: Port device team_slave_0 added
[ 85.746785][ T5424] team0: Port device team_slave_1 added
[ 85.769449][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.776511][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.803045][ T5424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.816057][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.823477][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.849498][ T5424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.886457][ T5424] hsr_slave_0: entered promiscuous mode
[ 85.892817][ T5424] hsr_slave_1: entered promiscuous mode
[ 86.448905][ T5424] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.460343][ T5424] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.472647][ T5424] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.483732][ T5424] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.516081][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.523327][ T5424] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.531023][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.538229][ T5424] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.617049][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.625917][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.670900][ T5424] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.694978][ T5424] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.712432][ T927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.719657][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.740303][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.747471][ T5462] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.807157][ T5424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 86.987911][ T5424] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.046415][ T5424] veth0_vlan: entered promiscuous mode
[ 87.065174][ T5424] veth1_vlan: entered promiscuous mode
[ 87.109658][ T5424] veth0_macvtap: entered promiscuous mode
[ 87.121783][ T5424] veth1_macvtap: entered promiscuous mode
[ 87.151426][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.173362][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.187791][ T5424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.199967][ T5424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.210684][ T5424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.219863][ T5424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.302554][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.324520][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.364336][ T2490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.373661][ T2490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.482502][ T4469] Bluetooth: hci0: command tx timeout
[ 87.790322][ T5492] loop0: detected capacity change from 0 to 32768
[ 87.825092][ T5492] lv: ffffc900028520b0 offset:0 diWrite
[ 87.833683][ T5492] lv: ffffc900028520b2 offset:6 diWrite
[ 87.840019][ T5492] lv: ffffc900028520b4 offset:0 diWrite
[ 87.845820][ T5492] lv: ffffc900028520b6 offset:0 diWrite
[ 87.855605][ T5492] ==================================================================
[ 87.863802][ T5492] BUG: KASAN: slab-out-of-bounds in jfs_readdir+0x1b79/0x4660
[ 87.871284][ T5492] Read of size 1 at addr ffff888076df3d15 by task syz-executor.0/5492
[ 87.879555][ T5492]
[ 87.881895][ T5492] CPU: 0 PID: 5492 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-dirty #0
[ 87.891219][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 87.901418][ T5492] Call Trace:
[ 87.904717][ T5492]
[ 87.907660][ T5492] dump_stack_lvl+0x241/0x360
[ 87.912364][ T5492] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.917594][ T5492] ? __pfx__printk+0x10/0x10
[ 87.922214][ T5492] ? _printk+0xd5/0x120
[ 87.926399][ T5492] ? __virt_addr_valid+0x183/0x520
[ 87.931546][ T5492] ? __virt_addr_valid+0x183/0x520
[ 87.936694][ T5492] print_report+0x169/0x550
[ 87.941229][ T5492] ? __virt_addr_valid+0x183/0x520
[ 87.946453][ T5492] ? __virt_addr_valid+0x183/0x520
[ 87.951729][ T5492] ? __virt_addr_valid+0x44e/0x520
[ 87.956961][ T5492] ? __phys_addr+0xba/0x170
[ 87.961496][ T5492] ? jfs_readdir+0x1b79/0x4660
[ 87.966283][ T5492] kasan_report+0x143/0x180
[ 87.970816][ T5492] ? jfs_readdir+0x1b79/0x4660
[ 87.975606][ T5492] jfs_readdir+0x1b79/0x4660
[ 87.980241][ T5492] ? __pfx_jfs_readdir+0x10/0x10
[ 87.985319][ T5492] ? __pfx___down_write_common+0x10/0x10
[ 87.990981][ T5492] ? __pfx___mutex_lock+0x10/0x10
[ 87.996116][ T5492] ? __pfx_jfs_readdir+0x10/0x10
[ 88.001074][ T5492] wrap_directory_iterator+0x94/0xe0
[ 88.006388][ T5492] iterate_dir+0x539/0x6f0
[ 88.010843][ T5492] __se_sys_getdents64+0x20d/0x4f0
[ 88.015996][ T5492] ? __pfx___se_sys_getdents64+0x10/0x10
[ 88.021665][ T5492] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 88.027934][ T5492] ? __pfx_filldir64+0x10/0x10
[ 88.032731][ T5492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 88.039522][ T5492] ? do_syscall_64+0x102/0x240
[ 88.044318][ T5492] ? do_syscall_64+0xb6/0x240
[ 88.049029][ T5492] do_syscall_64+0xf5/0x240
[ 88.053557][ T5492] ? clear_bhb_loop+0x35/0x90
[ 88.058347][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.064267][ T5492] RIP: 0033:0x7f8966e7dea9
[ 88.068737][ T5492] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 88.088471][ T5492] RSP: 002b:00007f89669ff0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 88.096921][ T5492] RAX: ffffffffffffffda RBX: 00007f8966fabf80 RCX: 00007f8966e7dea9
[ 88.105005][ T5492] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005
[ 88.113002][ T5492] RBP: 00007f8966eca4a4 R08: 0000000000000000 R09: 0000000000000000
[ 88.120998][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.128991][ T5492] R13: 000000000000000b R14: 00007f8966fabf80 R15: 00007ffe3b2048e8
[ 88.136992][ T5492]
[ 88.140026][ T5492]
[ 88.142372][ T5492] The buggy address belongs to the object at ffff888076df3780
[ 88.142372][ T5492] which belongs to the cache jfs_ip of size 2240
[ 88.156093][ T5492] The buggy address is located 1429 bytes inside of
[ 88.156093][ T5492] allocated 2240-byte region [ffff888076df3780, ffff888076df4040)
[ 88.170470][ T5492]
[ 88.172808][ T5492] The buggy address belongs to the physical page:
[ 88.179315][ T5492] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76df0
[ 88.188099][ T5492] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 88.195662][ T5492] memcg:ffff88802aef9f01
[ 88.200000][ T5492] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[ 88.207998][ T5492] page_type: 0xffffffff()
[ 88.212438][ T5492] raw: 00fff80000000840 ffff8880197418c0 dead000000000122 0000000000000000
[ 88.221217][ T5492] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88802aef9f01
[ 88.229829][ T5492] head: 00fff80000000840 ffff8880197418c0 dead000000000122 0000000000000000
[ 88.238525][ T5492] head: 0000000000000000 00000000800d000d 00000001ffffffff ffff88802aef9f01
[ 88.247215][ T5492] head: 00fff80000000003 ffffea0001db7c01 dead000000000122 00000000ffffffff
[ 88.255908][ T5492] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[ 88.264591][ T5492] page dumped because: kasan: bad access detected
[ 88.271017][ T5492] page_owner tracks the page as allocated
[ 88.276838][ T5492] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5490, tgid 1905245577 (syz-executor.0), ts 5492, free_ts 87323640300
[ 88.300656][ T5492] post_alloc_hook+0x1ea/0x210
[ 88.305454][ T5492] get_page_from_freelist+0x3410/0x35b0
[ 88.311033][ T5492] __alloc_pages+0x256/0x6c0
[ 88.315653][ T5492] alloc_slab_page+0x5f/0x160
[ 88.320359][ T5492] new_slab+0x84/0x2f0
[ 88.324443][ T5492] ___slab_alloc+0xc73/0x1260
[ 88.329197][ T5492] kmem_cache_alloc_lru+0x253/0x350
[ 88.334454][ T5492] jfs_alloc_inode+0x28/0x70
[ 88.339063][ T5492] new_inode_pseudo+0x69/0x1e0
[ 88.343854][ T5492] new_inode+0x22/0x1d0
[ 88.348040][ T5492] jfs_fill_super+0x408/0xc50
[ 88.352737][ T5492] mount_bdev+0x20a/0x2d0
[ 88.357091][ T5492] legacy_get_tree+0xee/0x190
[ 88.361878][ T5492] vfs_get_tree+0x90/0x2a0
[ 88.366314][ T5492] do_new_mount+0x2be/0xb40
[ 88.370846][ T5492] __se_sys_mount+0x2d9/0x3c0
[ 88.375542][ T5492] page last free pid 4525 tgid 4525 stack trace:
[ 88.381882][ T5492] free_unref_page_prepare+0x97b/0xaa0
[ 88.387372][ T5492] free_unref_page+0x37/0x3f0
[ 88.392077][ T5492] __put_partials+0xeb/0x130
[ 88.396688][ T5492] put_cpu_partial+0x17c/0x250
[ 88.401492][ T5492] __slab_free+0x2ea/0x3d0
[ 88.406025][ T5492] qlist_free_all+0x5e/0xc0
[ 88.410569][ T5492] kasan_quarantine_reduce+0x14f/0x170
[ 88.416055][ T5492] __kasan_slab_alloc+0x23/0x80
[ 88.420953][ T5492] kmem_cache_alloc+0x174/0x340
[ 88.425840][ T5492] security_file_alloc+0x28/0x130
[ 88.431237][ T5492] init_file+0x99/0x200
[ 88.435424][ T5492] alloc_empty_file+0xb8/0x1d0
[ 88.440210][ T5492] path_openat+0xfb/0x3240
[ 88.444651][ T5492] do_filp_open+0x235/0x490
[ 88.449179][ T5492] do_sys_openat2+0x13e/0x1d0
[ 88.453878][ T5492] __x64_sys_openat+0x247/0x2a0
[ 88.458747][ T5492]
[ 88.461082][ T5492] Memory state around the buggy address:
[ 88.466896][ T5492] ffff888076df3c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.474982][ T5492] ffff888076df3c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.483331][ T5492] >ffff888076df3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.491420][ T5492] ^
[ 88.496024][ T5492] ffff888076df3d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.504105][ T5492] ffff888076df3e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.512181][ T5492] ==================================================================
[ 88.542292][ T5492] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.549620][ T5492] CPU: 0 PID: 5492 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-dirty #0
[ 88.558843][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 88.569094][ T5492] Call Trace:
[ 88.572395][ T5492]
[ 88.575618][ T5492] dump_stack_lvl+0x241/0x360
[ 88.580334][ T5492] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.585739][ T5492] ? __pfx__printk+0x10/0x10
[ 88.590367][ T5492] ? preempt_schedule+0xe1/0xf0
[ 88.595343][ T5492] ? vscnprintf+0x5d/0x90
[ 88.599699][ T5492] panic+0x349/0x860
[ 88.603714][ T5492] ? check_panic_on_warn+0x21/0xb0
[ 88.608865][ T5492] ? __pfx_panic+0x10/0x10
[ 88.613419][ T5492] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 88.619604][ T5492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 88.625969][ T5492] ? print_report+0x502/0x550
[ 88.630679][ T5492] check_panic_on_warn+0x86/0xb0
[ 88.635646][ T5492] ? jfs_readdir+0x1b79/0x4660
[ 88.640611][ T5492] end_report+0x77/0x160
[ 88.644884][ T5492] kasan_report+0x154/0x180
[ 88.649673][ T5492] ? jfs_readdir+0x1b79/0x4660
[ 88.654440][ T5492] jfs_readdir+0x1b79/0x4660
[ 88.659121][ T5492] ? __pfx_jfs_readdir+0x10/0x10
[ 88.664147][ T5492] ? __pfx___down_write_common+0x10/0x10
[ 88.669883][ T5492] ? __pfx___mutex_lock+0x10/0x10
[ 88.674901][ T5492] ? __pfx_jfs_readdir+0x10/0x10
[ 88.679861][ T5492] wrap_directory_iterator+0x94/0xe0
[ 88.685145][ T5492] iterate_dir+0x539/0x6f0
[ 88.689753][ T5492] __se_sys_getdents64+0x20d/0x4f0
[ 88.694946][ T5492] ? __pfx___se_sys_getdents64+0x10/0x10
[ 88.700833][ T5492] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 88.706826][ T5492] ? __pfx_filldir64+0x10/0x10
[ 88.711604][ T5492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 88.717932][ T5492] ? do_syscall_64+0x102/0x240
[ 88.722789][ T5492] ? do_syscall_64+0xb6/0x240
[ 88.727490][ T5492] do_syscall_64+0xf5/0x240
[ 88.731990][ T5492] ? clear_bhb_loop+0x35/0x90
[ 88.736754][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 88.742738][ T5492] RIP: 0033:0x7f8966e7dea9
[ 88.747146][ T5492] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 88.766921][ T5492] RSP: 002b:00007f89669ff0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 88.775420][ T5492] RAX: ffffffffffffffda RBX: 00007f8966fabf80 RCX: 00007f8966e7dea9
[ 88.783472][ T5492] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005
[ 88.791468][ T5492] RBP: 00007f8966eca4a4 R08: 0000000000000000 R09: 0000000000000000
[ 88.799432][ T5492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 88.807393][ T5492] R13: 000000000000000b R14: 00007f8966fabf80 R15: 00007ffe3b2048e8
[ 88.815547][ T5492]
[ 88.819016][ T5492] Kernel Offset: disabled
[ 88.823347][ T5492] Rebooting in 86400 seconds..