Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. 2024/05/28 03:16:57 ignoring optional flag "sandboxArg"="0" 2024/05/28 03:16:58 parsed 1 programs 2024/05/28 03:16:58 executed programs: 0 [ 65.092994][ T1995] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.068359][ T2002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.078995][ T2002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.089456][ T2002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.098191][ T2002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.990219][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.998676][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.008501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.016936][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.024934][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.032382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.084649][ T2716] loop0: detected capacity change from 0 to 2048 [ 69.163207][ T2716] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.171296][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 69.176143][ T2717] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.191198][ T2716] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 69.203365][ T2716] Remounting filesystem read-only [ 69.209750][ T2716] NILFS (loop0): mounting fs with errors [ 69.293031][ T2719] loop0: detected capacity change from 0 to 2048 [ 69.363196][ T2719] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.377481][ T2720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.378225][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 69.390369][ T2719] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 69.407608][ T2719] Remounting filesystem read-only [ 69.413497][ T2719] NILFS (loop0): mounting fs with errors [ 69.488645][ T2722] loop0: detected capacity change from 0 to 2048 [ 69.583356][ T2722] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.591366][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 69.595862][ T2723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.610817][ T2722] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 69.622108][ T2722] Remounting filesystem read-only [ 69.628078][ T2722] NILFS (loop0): mounting fs with errors [ 69.693436][ T2725] loop0: detected capacity change from 0 to 2048 [ 69.772935][ T2725] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.785577][ T2726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.798163][ T2725] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 69.809708][ T2725] Remounting filesystem read-only [ 69.815402][ T2725] NILFS (loop0): mounting fs with errors [ 69.891992][ T2728] loop0: detected capacity change from 0 to 2048 [ 69.963146][ T2728] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.971112][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 69.982425][ T2729] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.994000][ T2728] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 70.007566][ T2728] Remounting filesystem read-only [ 70.013415][ T2728] NILFS (loop0): mounting fs with errors [ 70.083136][ T2731] loop0: detected capacity change from 0 to 2048 [ 70.163694][ T2731] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.171760][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 70.176052][ T2732] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.190289][ T2731] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 70.202850][ T2731] Remounting filesystem read-only 2024/05/28 03:17:03 executed programs: 6 [ 70.208729][ T2731] NILFS (loop0): mounting fs with errors [ 70.268457][ T2734] loop0: detected capacity change from 0 to 2048 [ 70.345884][ T2734] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.358653][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 70.362675][ T2735] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.379884][ T2734] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 70.392568][ T2734] Remounting filesystem read-only [ 70.398462][ T2734] NILFS (loop0): mounting fs with errors [ 70.448361][ T2737] loop0: detected capacity change from 0 to 2048 [ 70.542984][ T2737] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.554263][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 70.555457][ T2738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.573449][ T2737] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 70.585472][ T2737] Remounting filesystem read-only [ 70.591145][ T2737] NILFS (loop0): mounting fs with errors [ 70.653374][ T2740] loop0: detected capacity change from 0 to 2048 [ 70.763481][ T2740] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.776230][ T2741] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.783904][ T2740] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 70.798326][ T2740] Remounting filesystem read-only [ 70.803990][ T2740] NILFS (loop0): mounting fs with errors [ 70.878744][ T2743] loop0: detected capacity change from 0 to 2048 [ 70.963131][ T2743] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 70.971326][ T2095] udevd[2095]: incorrect nilfs2 checksum on /dev/loop0 [ 70.980104][ T2744] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.991260][ T2743] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 71.006158][ T2743] Remounting filesystem read-only [ 71.012048][ T2743] NILFS (loop0): mounting fs with errors [ 76.112272][ C1] ================================================================== [ 76.120553][ C1] BUG: KASAN: use-after-free in __lock_acquire.constprop.0+0xabd/0xb30 [ 76.128877][ C1] Read of size 8 at addr ffff888118c1a600 by task swapper/1/0 [ 76.136311][ C1] [ 76.138632][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.160-syzkaller #0 [ 76.146409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 76.156477][ C1] Call Trace: [ 76.159846][ C1] [ 76.162958][ C1] dump_stack_lvl+0x8e/0xdd [ 76.167792][ C1] print_address_description.constprop.0.cold+0x6c/0x309 [ 76.175098][ C1] ? __lock_acquire.constprop.0+0xabd/0xb30 [ 76.180978][ C1] ? __lock_acquire.constprop.0+0xabd/0xb30 [ 76.186848][ C1] kasan_report.cold+0x83/0xdf [ 76.191593][ C1] ? __lock_acquire.constprop.0+0xabd/0xb30 [ 76.197469][ C1] __lock_acquire.constprop.0+0xabd/0xb30 [ 76.203358][ C1] ? is_dynamic_key+0x150/0x150 [ 76.208196][ C1] lock_acquire+0x11a/0x230 [ 76.212703][ C1] ? try_to_wake_up+0x8c/0xfd0 [ 76.217456][ C1] _raw_spin_lock_irqsave+0x26/0x40 [ 76.222927][ C1] ? try_to_wake_up+0x8c/0xfd0 [ 76.227866][ C1] try_to_wake_up+0x8c/0xfd0 [ 76.232545][ C1] ? push_cpu_stop+0x990/0x990 [ 76.237300][ C1] ? lock_acquire+0x11a/0x230 [ 76.241961][ C1] ? call_timer_fn+0xd4/0x400 [ 76.246718][ C1] ? nilfs_collect_file_node+0x50/0x50 [ 76.252247][ C1] call_timer_fn+0x184/0x400 [ 76.256827][ C1] ? msleep_interruptible+0x140/0x140 [ 76.262192][ C1] ? lock_downgrade+0x4f0/0x4f0 [ 76.267080][ C1] ? _raw_spin_lock_irqsave+0x2e/0x40 [ 76.272435][ C1] ? debug_object_deactivate+0x5a/0x270 [ 76.277992][ C1] ? nilfs_collect_file_node+0x50/0x50 [ 76.283438][ C1] __run_timers.part.0+0x549/0x870 [ 76.288898][ C1] ? call_timer_fn+0x400/0x400 [ 76.294092][ C1] ? lapic_next_event+0x4d/0x80 [ 76.299452][ C1] ? clockevents_program_event+0x255/0x2f0 [ 76.305259][ C1] ? tick_program_event+0xa8/0x130 [ 76.310403][ C1] run_timer_softirq+0x80/0x120 [ 76.315603][ C1] __do_softirq+0x14a/0x59a [ 76.320112][ C1] irq_exit_rcu+0xce/0x110 [ 76.324541][ C1] sysvec_apic_timer_interrupt+0x6f/0x90 [ 76.330170][ C1] [ 76.333087][ C1] [ 76.336100][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 76.342073][ C1] RIP: 0010:acpi_idle_do_entry+0x1f4/0x270 [ 76.347865][ C1] Code: eb 03 83 e3 01 89 de e8 7a c7 c7 fc 84 db 75 b0 e8 b1 ce c7 fc 66 90 e8 aa ce c7 fc 0f 00 2d e3 27 78 00 e8 9e ce c7 fc fb f4 eb 93 e8 94 ce c7 fc 48 89 ef e8 ac f4 ff ff 5b 5d e9 85 ce c7 [ 76.367540][ C1] RSP: 0018:ffffc900000efd18 EFLAGS: 00000293 [ 76.373695][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84958766 [ 76.381659][ C1] RDX: ffff8881002d9c40 RSI: ffffffff84958782 RDI: 0000000000000001 [ 76.389628][ C1] RBP: ffff8881069f4864 R08: 0000000000000000 R09: ffff8881002d9c47 [ 76.397851][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 76.405816][ C1] R13: ffff8881069f4800 R14: ffff8881069f4864 R15: ffff8881047f7804 [ 76.413805][ C1] ? acpi_idle_do_entry+0x1d6/0x270 [ 76.419088][ C1] ? acpi_idle_do_entry+0x1f2/0x270 [ 76.424321][ C1] ? acpi_idle_do_entry+0x1f2/0x270 [ 76.429517][ C1] acpi_idle_enter+0x33f/0x4a0 [ 76.434278][ C1] cpuidle_enter_state+0x1b4/0xcd0 [ 76.439389][ C1] ? kvm_sched_clock_read+0xd/0x20 [ 76.444591][ C1] cpuidle_enter+0x4a/0xa0 [ 76.449248][ C1] do_idle+0x381/0x500 [ 76.453323][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 76.458478][ C1] ? do_raw_spin_unlock+0x171/0x230 [ 76.463697][ C1] cpu_startup_entry+0x14/0x20 [ 76.468631][ C1] start_secondary+0x20d/0x2b0 [ 76.473517][ C1] ? set_cpu_sibling_map+0x1750/0x1750 [ 76.479153][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 76.485122][ C1] [ 76.488124][ C1] [ 76.490434][ C1] Allocated by task 2: [ 76.494477][ C1] kasan_save_stack+0x1b/0x40 [ 76.499147][ C1] __kasan_slab_alloc+0x61/0x80 [ 76.503991][ C1] kmem_cache_alloc_node+0x22b/0x340 [ 76.509808][ C1] copy_process+0x5d2/0x7d20 [ 76.514401][ C1] kernel_clone+0xe7/0xbd0 [ 76.518895][ C1] kernel_thread+0xb5/0xf0 [ 76.523296][ C1] kthreadd+0x469/0x680 [ 76.527464][ C1] ret_from_fork+0x1f/0x30 [ 76.532479][ C1] [ 76.534783][ C1] Freed by task 0: [ 76.538482][ C1] kasan_save_stack+0x1b/0x40 [ 76.543293][ C1] kasan_set_track+0x1c/0x30 [ 76.547971][ C1] kasan_set_free_info+0x20/0x30 [ 76.553324][ C1] __kasan_slab_free+0xe0/0x110 [ 76.558346][ C1] kmem_cache_free+0x7e/0x450 [ 76.563125][ C1] __put_task_struct+0x1e0/0x340 [ 76.568230][ C1] delayed_put_task_struct+0x192/0x1f0 [ 76.574204][ C1] rcu_core+0x58c/0x1190 [ 76.578437][ C1] __do_softirq+0x14a/0x59a [ 76.583035][ C1] [ 76.585694][ C1] Last potentially related work creation: [ 76.591389][ C1] kasan_save_stack+0x1b/0x40 [ 76.596063][ C1] kasan_record_aux_stack+0xc5/0xf0 [ 76.601262][ C1] call_rcu+0x98/0x6d0 [ 76.605490][ C1] put_task_struct_rcu_user+0x7f/0xb0 [ 76.610855][ C1] __schedule+0x895/0x1d80 [ 76.615357][ C1] __cond_resched+0x3e/0x70 [ 76.619872][ C1] gc_worker+0xa28/0x1470 [ 76.625015][ C1] process_one_work+0x8d5/0x1260 [ 76.630888][ C1] worker_thread+0x552/0xf40 [ 76.635483][ C1] kthread+0x327/0x3e0 [ 76.639563][ C1] ret_from_fork+0x1f/0x30 [ 76.643982][ C1] [ 76.646285][ C1] Second to last potentially related work creation: [ 76.652974][ C1] kasan_save_stack+0x1b/0x40 [ 76.657665][ C1] kasan_record_aux_stack+0xc5/0xf0 [ 76.662914][ C1] call_rcu+0x98/0x6d0 [ 76.667113][ C1] put_task_struct_rcu_user+0x7f/0xb0 [ 76.672474][ C1] release_task+0xc10/0x14a0 [ 76.677300][ C1] wait_consider_task+0x2ae5/0x33c0 [ 76.682583][ C1] do_wait+0x5b8/0xb00 [ 76.686750][ C1] kernel_wait+0x9c/0x150 [ 76.691065][ C1] call_usermodehelper_exec_work+0xf5/0x180 [ 76.697545][ C1] process_one_work+0x8d5/0x1260 [ 76.702574][ C1] worker_thread+0x552/0xf40 [ 76.707229][ C1] kthread+0x327/0x3e0 [ 76.711279][ C1] ret_from_fork+0x1f/0x30 [ 76.715689][ C1] [ 76.717986][ C1] The buggy address belongs to the object at ffff888118c19c40 [ 76.717986][ C1] which belongs to the cache task_struct of size 6976 [ 76.732635][ C1] The buggy address is located 2496 bytes inside of [ 76.732635][ C1] 6976-byte region [ffff888118c19c40, ffff888118c1b780) [ 76.746167][ C1] The buggy address belongs to the page: [ 76.751773][ C1] page:ffffea0004630600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118c18 [ 76.762477][ C1] head:ffffea0004630600 order:3 compound_mapcount:0 compound_pincount:0 [ 76.770925][ C1] flags: 0x200000000010200(slab|head|node=0|zone=2) [ 76.777627][ C1] raw: 0200000000010200 0000000000000000 0000000100000001 ffff8881001903c0 [ 76.786298][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 76.795410][ C1] page dumped because: kasan: bad access detected [ 76.802031][ C1] page_owner tracks the page as allocated [ 76.807735][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, ts 44953836694, free_ts 44936699509 [ 76.826988][ C1] get_page_from_freelist+0x165a/0x2900 [ 76.832520][ C1] __alloc_pages+0x2b3/0x590 [ 76.837235][ C1] alloc_pages+0x16f/0x3d0 [ 76.841737][ C1] allocate_slab+0x2eb/0x430 [ 76.846319][ C1] ___slab_alloc+0xb1c/0xf80 [ 76.851974][ C1] kmem_cache_alloc_node+0x2e3/0x340 [ 76.857753][ C1] copy_process+0x5d2/0x7d20 [ 76.862546][ C1] kernel_clone+0xe7/0xbd0 [ 76.867154][ C1] kernel_thread+0xb5/0xf0 [ 76.871990][ C1] call_usermodehelper_exec_work+0x69/0x180 [ 76.878261][ C1] process_one_work+0x8d5/0x1260 [ 76.883209][ C1] worker_thread+0x552/0xf40 [ 76.888368][ C1] kthread+0x327/0x3e0 [ 76.892433][ C1] ret_from_fork+0x1f/0x30 [ 76.896932][ C1] page last free stack trace: [ 76.901653][ C1] free_pcp_prepare+0x34e/0x730 [ 76.906516][ C1] free_unref_page+0x19/0x4b0 [ 76.911276][ C1] __unfreeze_partials+0x27d/0x2a0 [ 76.916557][ C1] qlist_free_all+0x68/0x110 [ 76.921158][ C1] kasan_quarantine_reduce+0x180/0x1f0 [ 76.926612][ C1] __kasan_slab_alloc+0x73/0x80 [ 76.931462][ C1] kmem_cache_alloc+0x211/0x310 [ 76.936400][ C1] vm_area_alloc+0x1c/0x110 [ 76.941002][ C1] mmap_region+0x81a/0x1350 [ 76.945948][ C1] do_mmap+0x869/0xfc0 [ 76.950024][ C1] vm_mmap_pgoff+0x1b7/0x280 [ 76.954641][ C1] ksys_mmap_pgoff+0x417/0x560 [ 76.959394][ C1] do_syscall_64+0x33/0xb0 [ 76.963793][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.969765][ C1] [ 76.972069][ C1] Memory state around the buggy address: [ 76.977689][ C1] ffff888118c1a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.986253][ C1] ffff888118c1a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.994604][ C1] >ffff888118c1a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.002937][ C1] ^ [ 77.007299][ C1] ffff888118c1a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.015466][ C1] ffff888118c1a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.024211][ C1] ================================================================== [ 77.032977][ C1] Disabling lock debugging due to kernel taint [ 77.039357][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.046917][ C1] Kernel Offset: disabled [ 77.051271][ C1] Rebooting in 86400 seconds..