Warning: Permanently added '10.128.10.58' (ED25519) to the list of known hosts.
2024/05/08 14:10:40 ignoring optional flag "sandboxArg"="0"
2024/05/08 14:10:41 parsed 1 programs
2024/05/08 14:10:42 executed programs: 0
[ 94.681297][ T5422] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 94.735425][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.744040][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.752314][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.761477][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.769257][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 94.777276][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.893691][ T5429] chnl_net:caif_netlink_parms(): no params data found
[ 94.962927][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.970573][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.978372][ T5429] bridge_slave_0: entered allmulticast mode
[ 94.985667][ T5429] bridge_slave_0: entered promiscuous mode
[ 94.993680][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.001785][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.009316][ T5429] bridge_slave_1: entered allmulticast mode
[ 95.017679][ T5429] bridge_slave_1: entered promiscuous mode
[ 95.042299][ T5429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.054119][ T5429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.082190][ T5429] team0: Port device team_slave_0 added
[ 95.091280][ T5429] team0: Port device team_slave_1 added
[ 95.112991][ T5429] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.120171][ T5429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.146899][ T5429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.160714][ T5429] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.168197][ T5429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.194225][ T5429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.229685][ T5429] hsr_slave_0: entered promiscuous mode
[ 95.236412][ T5429] hsr_slave_1: entered promiscuous mode
[ 95.790686][ T5429] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.804012][ T5429] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.818342][ T5429] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.830168][ T5429] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.866027][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.873214][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.880763][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.888085][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.901147][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.911290][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.003700][ T5429] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.029731][ T5429] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.045407][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.052766][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.079760][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.087002][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.315556][ T5429] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.372778][ T5429] veth0_vlan: entered promiscuous mode
[ 96.389666][ T5429] veth1_vlan: entered promiscuous mode
[ 96.434367][ T5429] veth0_macvtap: entered promiscuous mode
[ 96.447377][ T5429] veth1_macvtap: entered promiscuous mode
[ 96.470482][ T5429] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.488609][ T5429] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.502452][ T5429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.513082][ T5429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.522306][ T5429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.532754][ T5429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.623316][ T2836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.637253][ T2836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.669615][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.679316][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.848073][ T52] Bluetooth: hci0: command tx timeout
[ 97.151453][ T5494] loop0: detected capacity change from 0 to 40427
[ 97.173112][ T5494] F2FS-fs (loop0): invalid crc value
[ 97.199167][ T5494] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 97.290619][ T5494] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 97.300402][ T5494] ==================================================================
[ 97.308600][ T5494] BUG: KASAN: slab-out-of-bounds in f2fs_get_node_info+0xece/0x1200
[ 97.316720][ T5494] Read of size 1 at addr ffff88802dbc276c by task syz-executor.0/5494
[ 97.324889][ T5494]
[ 97.327231][ T5494] CPU: 0 PID: 5494 Comm: syz-executor.0 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[ 97.337687][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 97.347763][ T5494] Call Trace:
[ 97.351071][ T5494]
[ 97.354119][ T5494] dump_stack_lvl+0x241/0x360
[ 97.358848][ T5494] ? __pfx_dump_stack_lvl+0x10/0x10
[ 97.364173][ T5494] ? __pfx__printk+0x10/0x10
[ 97.368812][ T5494] ? _printk+0xd5/0x120
[ 97.373043][ T5494] ? __virt_addr_valid+0x183/0x520
[ 97.378276][ T5494] ? __virt_addr_valid+0x183/0x520
[ 97.383508][ T5494] print_report+0x169/0x550
[ 97.389876][ T5494] ? __virt_addr_valid+0x183/0x520
[ 97.395371][ T5494] ? __virt_addr_valid+0x183/0x520
[ 97.400491][ T5494] ? __virt_addr_valid+0x44e/0x520
[ 97.405698][ T5494] ? __phys_addr+0xba/0x170
[ 97.410202][ T5494] ? f2fs_get_node_info+0xece/0x1200
[ 97.415490][ T5494] kasan_report+0x143/0x180
[ 97.420076][ T5494] ? f2fs_get_node_info+0xece/0x1200
[ 97.425363][ T5494] f2fs_get_node_info+0xece/0x1200
[ 97.430478][ T5494] f2fs_fiemap+0x55d/0x1ee0
[ 97.434987][ T5494] ? __pfx_f2fs_fiemap+0x10/0x10
[ 97.439943][ T5494] ? __might_fault+0xaa/0x120
[ 97.444741][ T5494] ? stack_depot_save_flags+0x29/0x830
[ 97.450403][ T5494] ? __pfx_lock_release+0x10/0x10
[ 97.455643][ T5494] ? kasan_save_track+0x51/0x80
[ 97.460500][ T5494] ? kasan_save_track+0x3f/0x80
[ 97.465348][ T5494] ? __might_fault+0xc6/0x120
[ 97.470023][ T5494] ? __pfx_f2fs_fiemap+0x10/0x10
[ 97.474951][ T5494] do_vfs_ioctl+0x1c07/0x2e50
[ 97.479632][ T5494] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 97.484831][ T5494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 97.491150][ T5494] ? tomoyo_path_number_perm+0x208/0x880
[ 97.496791][ T5494] ? __pfx_lock_release+0x10/0x10
[ 97.501807][ T5494] ? kfree+0x153/0x3b0
[ 97.505900][ T5494] ? tomoyo_path_number_perm+0x71a/0x880
[ 97.511528][ T5494] ? tomoyo_path_number_perm+0x208/0x880
[ 97.517184][ T5494] ? smack_log+0x123/0x540
[ 97.521730][ T5494] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 97.527789][ T5494] ? __pfx_smack_log+0x10/0x10
[ 97.532598][ T5494] ? smk_access+0x4ab/0x4e0
[ 97.537103][ T5494] ? smk_tskacc+0x300/0x370
[ 97.541606][ T5494] ? smack_file_ioctl+0x2fa/0x3a0
[ 97.546627][ T5494] ? __pfx_smack_file_ioctl+0x10/0x10
[ 97.552004][ T5494] ? bpf_lsm_file_ioctl+0x9/0x10
[ 97.557026][ T5494] ? security_file_ioctl+0x87/0xb0
[ 97.562160][ T5494] __se_sys_ioctl+0x81/0x170
[ 97.566766][ T5494] do_syscall_64+0xf5/0x240
[ 97.571274][ T5494] ? clear_bhb_loop+0x35/0x90
[ 97.576034][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.582105][ T5494] RIP: 0033:0x7f3b4067dea9
[ 97.586513][ T5494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 97.606201][ T5494] RSP: 002b:00007f3b413050c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 97.614608][ T5494] RAX: ffffffffffffffda RBX: 00007f3b407abf80 RCX: 00007f3b4067dea9
[ 97.622590][ T5494] RDX: 0000000020000040 RSI: 00000000c020660b RDI: 0000000000000004
[ 97.630556][ T5494] RBP: 00007f3b406ca4a4 R08: 0000000000000000 R09: 0000000000000000
[ 97.638541][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.646766][ T5494] R13: 000000000000000b R14: 00007f3b407abf80 R15: 00007ffcd9408458
[ 97.654747][ T5494]
[ 97.657753][ T5494]
[ 97.660237][ T5494] Allocated by task 5494:
[ 97.664634][ T5494] kasan_save_track+0x3f/0x80
[ 97.669478][ T5494] __kasan_kmalloc+0x98/0xb0
[ 97.674058][ T5494] __kmalloc_node_track_caller+0x24e/0x4f0
[ 97.679947][ T5494] kmemdup+0x2a/0x60
[ 97.684032][ T5494] f2fs_build_node_manager+0x8cc/0x2870
[ 97.689832][ T5494] f2fs_fill_super+0x583c/0x8120
[ 97.694888][ T5494] mount_bdev+0x20a/0x2d0
[ 97.699208][ T5494] legacy_get_tree+0xee/0x190
[ 97.703958][ T5494] vfs_get_tree+0x90/0x2a0
[ 97.708370][ T5494] do_new_mount+0x2be/0xb40
[ 97.712953][ T5494] __se_sys_mount+0x2d9/0x3c0
[ 97.717716][ T5494] do_syscall_64+0xf5/0x240
[ 97.722329][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.728212][ T5494]
[ 97.730521][ T5494] The buggy address belongs to the object at ffff88802dbc2700
[ 97.730521][ T5494] which belongs to the cache kmalloc-64 of size 64
[ 97.744648][ T5494] The buggy address is located 44 bytes to the right of
[ 97.744648][ T5494] allocated 64-byte region [ffff88802dbc2700, ffff88802dbc2740)
[ 97.759330][ T5494]
[ 97.761731][ T5494] The buggy address belongs to the physical page:
[ 97.768123][ T5494] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dbc2
[ 97.777170][ T5494] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 97.784876][ T5494] page_type: 0xffffffff()
[ 97.789191][ T5494] raw: 00fff00000000800 ffff888015041640 dead000000000100 dead000000000122
[ 97.797782][ T5494] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[ 97.806356][ T5494] page dumped because: kasan: bad access detected
[ 97.818832][ T5494] page_owner tracks the page as allocated
[ 97.824534][ T5494] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 61, tgid 1342475278 (kworker/u8:4), ts 61, free_ts 0
[ 97.841716][ T5494] post_alloc_hook+0x1ea/0x210
[ 97.846519][ T5494] get_page_from_freelist+0x3410/0x35b0
[ 97.852428][ T5494] __alloc_pages+0x256/0x6c0
[ 97.857051][ T5494] alloc_slab_page+0x5f/0x160
[ 97.861728][ T5494] new_slab+0x84/0x2f0
[ 97.865800][ T5494] ___slab_alloc+0xc73/0x1260
[ 97.870552][ T5494] __kmalloc_node+0x2db/0x4f0
[ 97.875237][ T5494] __vmalloc_node_range+0x5f9/0x1490
[ 97.880511][ T5494] dup_task_struct+0x3e9/0x7d0
[ 97.885354][ T5494] copy_process+0x5d1/0x3df0
[ 97.890044][ T5494] kernel_clone+0x223/0x870
[ 97.894562][ T5494] user_mode_thread+0x132/0x1a0
[ 97.899407][ T5494] call_usermodehelper_exec_work+0x5c/0x230
[ 97.905382][ T5494] process_scheduled_works+0xa10/0x17c0
[ 97.911015][ T5494] worker_thread+0x86d/0xd70
[ 97.915689][ T5494] kthread+0x2f0/0x390
[ 97.919751][ T5494] page_owner free stack trace missing
[ 97.925190][ T5494]
[ 97.927511][ T5494] Memory state around the buggy address:
[ 97.933129][ T5494] ffff88802dbc2600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 97.941675][ T5494] ffff88802dbc2680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 97.949845][ T5494] >ffff88802dbc2700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 97.958260][ T5494] ^
[ 97.965798][ T5494] ffff88802dbc2780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 97.974019][ T5494] ffff88802dbc2800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 97.982352][ T5494] ==================================================================
[ 97.999078][ T5494] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 98.006309][ T5494] CPU: 0 PID: 5494 Comm: syz-executor.0 Not tainted 6.9.0-rc7-syzkaller-00012-gdccb07f2914c #0
[ 98.016740][ T5494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 98.026854][ T5494] Call Trace:
[ 98.030159][ T5494]
[ 98.033118][ T5494] dump_stack_lvl+0x241/0x360
[ 98.037924][ T5494] ? __pfx_dump_stack_lvl+0x10/0x10
[ 98.043167][ T5494] ? __pfx__printk+0x10/0x10
[ 98.047883][ T5494] ? preempt_schedule+0xe1/0xf0
[ 98.052795][ T5494] ? vscnprintf+0x5d/0x90
[ 98.057246][ T5494] panic+0x349/0x860
[ 98.061173][ T5494] ? check_panic_on_warn+0x21/0xb0
[ 98.066477][ T5494] ? __pfx_panic+0x10/0x10
[ 98.070909][ T5494] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 98.076908][ T5494] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 98.083447][ T5494] ? print_report+0x502/0x550
[ 98.088152][ T5494] check_panic_on_warn+0x86/0xb0
[ 98.093112][ T5494] ? f2fs_get_node_info+0xece/0x1200
[ 98.098435][ T5494] end_report+0x77/0x160
[ 98.102685][ T5494] kasan_report+0x154/0x180
[ 98.107197][ T5494] ? f2fs_get_node_info+0xece/0x1200
[ 98.112568][ T5494] f2fs_get_node_info+0xece/0x1200
[ 98.117679][ T5494] f2fs_fiemap+0x55d/0x1ee0
[ 98.122194][ T5494] ? __pfx_f2fs_fiemap+0x10/0x10
[ 98.127139][ T5494] ? __might_fault+0xaa/0x120
[ 98.131836][ T5494] ? stack_depot_save_flags+0x29/0x830
[ 98.137301][ T5494] ? __pfx_lock_release+0x10/0x10
[ 98.142346][ T5494] ? kasan_save_track+0x51/0x80
[ 98.147194][ T5494] ? kasan_save_track+0x3f/0x80
[ 98.152224][ T5494] ? __might_fault+0xc6/0x120
[ 98.157454][ T5494] ? __pfx_f2fs_fiemap+0x10/0x10
[ 98.162431][ T5494] do_vfs_ioctl+0x1c07/0x2e50
[ 98.167209][ T5494] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 98.172329][ T5494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 98.178741][ T5494] ? tomoyo_path_number_perm+0x208/0x880
[ 98.184368][ T5494] ? __pfx_lock_release+0x10/0x10
[ 98.189493][ T5494] ? kfree+0x153/0x3b0
[ 98.193560][ T5494] ? tomoyo_path_number_perm+0x71a/0x880
[ 98.199194][ T5494] ? tomoyo_path_number_perm+0x208/0x880
[ 98.204844][ T5494] ? smack_log+0x123/0x540
[ 98.209266][ T5494] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 98.215236][ T5494] ? __pfx_smack_log+0x10/0x10
[ 98.220087][ T5494] ? smk_access+0x4ab/0x4e0
[ 98.224677][ T5494] ? smk_tskacc+0x300/0x370
[ 98.229208][ T5494] ? smack_file_ioctl+0x2fa/0x3a0
[ 98.234431][ T5494] ? __pfx_smack_file_ioctl+0x10/0x10
[ 98.239901][ T5494] ? bpf_lsm_file_ioctl+0x9/0x10
[ 98.245185][ T5494] ? security_file_ioctl+0x87/0xb0
[ 98.250301][ T5494] __se_sys_ioctl+0x81/0x170
[ 98.254912][ T5494] do_syscall_64+0xf5/0x240
[ 98.259433][ T5494] ? clear_bhb_loop+0x35/0x90
[ 98.264212][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.270103][ T5494] RIP: 0033:0x7f3b4067dea9
[ 98.274513][ T5494] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 98.294466][ T5494] RSP: 002b:00007f3b413050c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 98.302961][ T5494] RAX: ffffffffffffffda RBX: 00007f3b407abf80 RCX: 00007f3b4067dea9
[ 98.311104][ T5494] RDX: 0000000020000040 RSI: 00000000c020660b RDI: 0000000000000004
[ 98.319066][ T5494] RBP: 00007f3b406ca4a4 R08: 0000000000000000 R09: 0000000000000000
[ 98.327387][ T5494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.335935][ T5494] R13: 000000000000000b R14: 00007f3b407abf80 R15: 00007ffcd9408458
[ 98.344007][ T5494]
[ 98.347418][ T5494] Kernel Offset: disabled
[ 98.351813][ T5494] Rebooting in 86400 seconds..