Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts.
2024/10/24 01:32:09 ignoring optional flag "sandboxArg"="0"
2024/10/24 01:32:09 parsed 1 programs
[ 93.904544][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.492496][ T5666] chnl_net:caif_netlink_parms(): no params data found
[ 96.530509][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.537812][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.546389][ T5666] bridge_slave_0: entered allmulticast mode
[ 96.552868][ T5666] bridge_slave_0: entered promiscuous mode
[ 96.560527][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.567984][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.575314][ T5666] bridge_slave_1: entered allmulticast mode
[ 96.581858][ T5666] bridge_slave_1: entered promiscuous mode
[ 96.618107][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.629198][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.667665][ T5666] team0: Port device team_slave_0 added
[ 96.675225][ T5666] team0: Port device team_slave_1 added
[ 96.696978][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.703933][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.730565][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.742642][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.750042][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.776176][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.811650][ T5666] hsr_slave_0: entered promiscuous mode
[ 96.818244][ T5666] hsr_slave_1: entered promiscuous mode
[ 97.318917][ T5666] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.329599][ T5666] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.339194][ T5666] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.349857][ T5666] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.378385][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.385578][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.392980][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.400204][ T5666] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.458319][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.476953][ T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.490784][ T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.509845][ T5666] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.523168][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.530364][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.560934][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.568117][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.730588][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.775405][ T5666] veth0_vlan: entered promiscuous mode
[ 97.787405][ T5666] veth1_vlan: entered promiscuous mode
[ 97.822032][ T5666] veth0_macvtap: entered promiscuous mode
[ 97.832371][ T5666] veth1_macvtap: entered promiscuous mode
[ 97.850586][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.868376][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.881685][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.890962][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.901483][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.912328][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.057860][ T4625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.067356][ T4625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.075540][ T4625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.085451][ T4625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.093119][ T4625] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 98.101045][ T4625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.151910][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.238672][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.319265][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.380618][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.443973][ T3971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.453682][ T3971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.477239][ T3971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.485646][ T3971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/10/24 01:32:20 executed programs: 0
[ 100.411088][ T4625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.421572][ T4625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.431710][ T4625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.443214][ T4625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.452006][ T4625] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.459649][ T4625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.616759][ T5865] chnl_net:caif_netlink_parms(): no params data found
[ 100.759925][ T1103] bridge_slave_1: left allmulticast mode
[ 100.766083][ T1103] bridge_slave_1: left promiscuous mode
[ 100.772015][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.784681][ T1103] bridge_slave_0: left allmulticast mode
[ 100.790380][ T1103] bridge_slave_0: left promiscuous mode
[ 100.799037][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.129718][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.141507][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.152523][ T1103] bond0 (unregistering): Released all slaves
[ 101.176542][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.185321][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.192555][ T5865] bridge_slave_0: entered allmulticast mode
[ 101.203854][ T5865] bridge_slave_0: entered promiscuous mode
[ 101.222595][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.231255][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.240159][ T5865] bridge_slave_1: entered allmulticast mode
[ 101.248980][ T5865] bridge_slave_1: entered promiscuous mode
[ 101.268268][ T1103] hsr_slave_0: left promiscuous mode
[ 101.275869][ T1103] hsr_slave_1: left promiscuous mode
[ 101.281938][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.291717][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.302611][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.312377][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.332018][ T1103] veth1_macvtap: left promiscuous mode
[ 101.340822][ T1103] veth0_macvtap: left promiscuous mode
[ 101.347711][ T1103] veth1_vlan: left promiscuous mode
[ 101.353058][ T1103] veth0_vlan: left promiscuous mode
[ 101.738232][ T1103] team0 (unregistering): Port device team_slave_1 removed
[ 101.772257][ T1103] team0 (unregistering): Port device team_slave_0 removed
[ 102.031688][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.044953][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.093586][ T5865] team0: Port device team_slave_0 added
[ 102.108268][ T5865] team0: Port device team_slave_1 added
[ 102.148000][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.160443][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.189484][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.220768][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.230288][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.265887][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.307719][ T5865] hsr_slave_0: entered promiscuous mode
[ 102.314540][ T5865] hsr_slave_1: entered promiscuous mode
[ 102.544179][ T4625] Bluetooth: hci0: command tx timeout
[ 103.146365][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.156261][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.172833][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.187937][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.331749][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.376715][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.403083][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.410261][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.432254][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.439399][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.692769][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.732867][ T5865] veth0_vlan: entered promiscuous mode
[ 103.746848][ T5865] veth1_vlan: entered promiscuous mode
[ 103.778718][ T5865] veth0_macvtap: entered promiscuous mode
[ 103.788882][ T5865] veth1_macvtap: entered promiscuous mode
[ 103.809077][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.831964][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.845893][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.856876][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.867031][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.876134][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.943787][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.962658][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.989538][ T3971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.000866][ T3971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.380440][ T6007] loop0: detected capacity change from 0 to 32768
[ 104.463217][ T6007] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,reconstruct_alloc,version_upgrade=none
[ 104.486979][ T6007] bcachefs (loop0): recovering from clean shutdown, journal seq 8
[ 104.495805][ T6007] bcachefs (loop0): dropping and reconstructing all alloc info
[ 104.513666][ T6007] ==================================================================
[ 104.521766][ T6007] BUG: KASAN: slab-use-after-free in bch2_reconstruct_alloc+0x2aa/0xab0
[ 104.530134][ T6007] Read of size 8 at addr ffff88802912cf58 by task syz.0.15/6007
[ 104.537777][ T6007]
[ 104.540129][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.0.15 Not tainted 6.12.0-rc4-syzkaller-gc2ee9f594da8-dirty #0
[ 104.550640][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 104.560702][ T6007] Call Trace:
[ 104.563976][ T6007]
[ 104.566905][ T6007] dump_stack_lvl+0x241/0x360
[ 104.571577][ T6007] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.576766][ T6007] ? __pfx__printk+0x10/0x10
[ 104.581345][ T6007] ? _printk+0xd5/0x120
[ 104.585489][ T6007] ? __virt_addr_valid+0x183/0x530
[ 104.590587][ T6007] ? __virt_addr_valid+0x183/0x530
[ 104.595686][ T6007] print_report+0x169/0x550
[ 104.600180][ T6007] ? __virt_addr_valid+0x183/0x530
[ 104.605278][ T6007] ? __virt_addr_valid+0x183/0x530
[ 104.610372][ T6007] ? __virt_addr_valid+0x45f/0x530
[ 104.615488][ T6007] ? __phys_addr+0xba/0x170
[ 104.620004][ T6007] ? bch2_reconstruct_alloc+0x2aa/0xab0
[ 104.625551][ T6007] kasan_report+0x143/0x180
[ 104.630050][ T6007] ? bch2_reconstruct_alloc+0x2aa/0xab0
[ 104.635590][ T6007] bch2_reconstruct_alloc+0x2aa/0xab0
[ 104.640952][ T6007] ? __pfx_bch2_reconstruct_alloc+0x10/0x10
[ 104.646837][ T6007] ? __mutex_unlock_slowpath+0x21d/0x750
[ 104.652462][ T6007] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 104.658436][ T6007] ? bch2_get_next_dev+0x26/0x500
[ 104.663458][ T6007] ? bch2_journal_pos_from_member_info_resume+0x344/0x3a0
[ 104.670564][ T6007] ? __pfx_bch2_journal_pos_from_member_info_resume+0x10/0x10
[ 104.678019][ T6007] ? bch2_sb_field_get_id+0xd3/0x110
[ 104.683296][ T6007] ? bch2_blacklist_table_initialize+0x117/0x400
[ 104.689613][ T6007] ? bch2_latest_compatible_version+0x156/0x180
[ 104.695842][ T6007] ? bch2_recovery_passes_from_stable+0x128/0x140
[ 104.702244][ T6007] bch2_fs_recovery+0x12dd/0x39c0
[ 104.707263][ T6007] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 104.712631][ T6007] ? __pfx_lock_release+0x10/0x10
[ 104.717648][ T6007] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 104.723270][ T6007] ? __pfx_lock_release+0x10/0x10
[ 104.728293][ T6007] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 104.733917][ T6007] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 104.739627][ T6007] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 104.745273][ T6007] ? llist_reverse_order+0x72/0x90
[ 104.750385][ T6007] bch2_fs_start+0x356/0x5b0
[ 104.754972][ T6007] bch2_fs_get_tree+0xd68/0x1710
[ 104.759918][ T6007] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 104.765293][ T6007] ? generic_parse_monolithic+0x387/0x400
[ 104.771015][ T6007] ? apparmor_capable+0x13b/0x1b0
[ 104.776047][ T6007] vfs_get_tree+0x90/0x2b0
[ 104.780456][ T6007] do_new_mount+0x2be/0xb40
[ 104.784953][ T6007] ? __pfx_do_new_mount+0x10/0x10
[ 104.789967][ T6007] __se_sys_mount+0x2d6/0x3c0
[ 104.794636][ T6007] ? __pfx___se_sys_mount+0x10/0x10
[ 104.799827][ T6007] ? exc_page_fault+0x590/0x8c0
[ 104.804696][ T6007] ? __x64_sys_mount+0x20/0xc0
[ 104.809466][ T6007] do_syscall_64+0xf3/0x230
[ 104.813980][ T6007] ? clear_bhb_loop+0x35/0x90
[ 104.818656][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.824567][ T6007] RIP: 0033:0x7f8421f7f79a
[ 104.828980][ T6007] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 104.848582][ T6007] RSP: 002b:00007f8422d09e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 104.856990][ T6007] RAX: ffffffffffffffda RBX: 00007f8422d09ef0 RCX: 00007f8421f7f79a
[ 104.864952][ T6007] RDX: 0000000020005b00 RSI: 0000000020005b40 RDI: 00007f8422d09eb0
[ 104.872939][ T6007] RBP: 0000000020005b00 R08: 00007f8422d09ef0 R09: 0000000000000000
[ 104.880917][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005b40
[ 104.888891][ T6007] R13: 00007f8422d09eb0 R14: 0000000000005b2d R15: 00000000200003c0
[ 104.896864][ T6007]
[ 104.899874][ T6007]
[ 104.902185][ T6007] Allocated by task 6007:
[ 104.906499][ T6007] kasan_save_track+0x3f/0x80
[ 104.911342][ T6007] __kasan_kmalloc+0x98/0xb0
[ 104.915919][ T6007] __kmalloc_node_track_caller_noprof+0x225/0x440
[ 104.922354][ T6007] krealloc_noprof+0x88/0x120
[ 104.927064][ T6007] bch2_sb_realloc+0x2d2/0x660
[ 104.931814][ T6007] __copy_super+0x5dc/0xe70
[ 104.936305][ T6007] bch2_sb_to_fs+0xab/0x150
[ 104.940796][ T6007] bch2_fs_open+0x1693/0x2f80
[ 104.945463][ T6007] bch2_fs_get_tree+0x738/0x1710
[ 104.950392][ T6007] vfs_get_tree+0x90/0x2b0
[ 104.954801][ T6007] do_new_mount+0x2be/0xb40
[ 104.959294][ T6007] __se_sys_mount+0x2d6/0x3c0
[ 104.963972][ T6007] do_syscall_64+0xf3/0x230
[ 104.968468][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.974360][ T6007]
[ 104.976672][ T6007] Freed by task 6007:
[ 104.980722][ T6007] kasan_save_track+0x3f/0x80
[ 104.985389][ T6007] kasan_save_free_info+0x40/0x50
[ 104.990426][ T6007] __kasan_slab_free+0x59/0x70
[ 104.995200][ T6007] kfree+0x1a0/0x440
[ 104.999102][ T6007] krealloc_noprof+0xec/0x120
[ 105.003775][ T6007] bch2_sb_realloc+0x2d2/0x660
[ 105.008531][ T6007] bch2_sb_field_resize_id+0x140/0x7c0
[ 105.013979][ T6007] bch2_sb_counters_from_cpu+0xac/0x300
[ 105.019523][ T6007] bch2_write_super+0xe80/0x3c50
[ 105.024454][ T6007] bch2_reconstruct_alloc+0x291/0xab0
[ 105.029814][ T6007] bch2_fs_recovery+0x12dd/0x39c0
[ 105.034826][ T6007] bch2_fs_start+0x356/0x5b0
[ 105.039400][ T6007] bch2_fs_get_tree+0xd68/0x1710
[ 105.044326][ T6007] vfs_get_tree+0x90/0x2b0
[ 105.048728][ T6007] do_new_mount+0x2be/0xb40
[ 105.053222][ T6007] __se_sys_mount+0x2d6/0x3c0
[ 105.057887][ T6007] do_syscall_64+0xf3/0x230
[ 105.062378][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.068266][ T6007]
[ 105.070575][ T6007] The buggy address belongs to the object at ffff88802912c000
[ 105.070575][ T6007] which belongs to the cache kmalloc-4k of size 4096
[ 105.084625][ T6007] The buggy address is located 3928 bytes inside of
[ 105.084625][ T6007] freed 4096-byte region [ffff88802912c000, ffff88802912d000)
[ 105.098584][ T6007]
[ 105.100896][ T6007] The buggy address belongs to the physical page:
[ 105.107300][ T6007] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29128
[ 105.116054][ T6007] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 105.124541][ T6007] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 105.132162][ T6007] page_type: f5(slab)
[ 105.136138][ T6007] raw: 00fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122
[ 105.144710][ T6007] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 105.153278][ T6007] head: 00fff00000000040 ffff88801ac42140 dead000000000100 dead000000000122
[ 105.161936][ T6007] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 105.170593][ T6007] head: 00fff00000000003 ffffea0000a44a01 ffffffffffffffff 0000000000000000
[ 105.179347][ T6007] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 105.188009][ T6007] page dumped because: kasan: bad access detected
[ 105.195283][ T6007] page_owner tracks the page as allocated
[ 105.200983][ T6007] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4894, tgid 4894 (sh), ts 27374338740, free_ts 27344707881
[ 105.220684][ T6007] post_alloc_hook+0x1f3/0x230
[ 105.225449][ T6007] get_page_from_freelist+0x3045/0x3190
[ 105.230981][ T6007] __alloc_pages_noprof+0x292/0x710
[ 105.236168][ T6007] alloc_pages_mpol_noprof+0x3e8/0x680
[ 105.241640][ T6007] alloc_slab_page+0x6a/0x120
[ 105.246304][ T6007] allocate_slab+0x5a/0x2f0
[ 105.250817][ T6007] ___slab_alloc+0xcd1/0x14b0
[ 105.255486][ T6007] __slab_alloc+0x58/0xa0
[ 105.259833][ T6007] __kmalloc_noprof+0x25a/0x400
[ 105.264673][ T6007] tomoyo_realpath_from_path+0xcf/0x5e0
[ 105.270215][ T6007] tomoyo_realpath_nofollow+0xba/0x100
[ 105.275664][ T6007] tomoyo_find_next_domain+0x27c/0x1d40
[ 105.281204][ T6007] tomoyo_bprm_check_security+0x114/0x180
[ 105.286916][ T6007] security_bprm_check+0x86/0x250
[ 105.291928][ T6007] bprm_execve+0xa56/0x1770
[ 105.296417][ T6007] do_execveat_common+0x55f/0x6f0
[ 105.301440][ T6007] page last free pid 4893 tgid 4893 stack trace:
[ 105.307750][ T6007] free_unref_page+0xcfb/0xf20
[ 105.312509][ T6007] __put_partials+0xeb/0x130
[ 105.317090][ T6007] put_cpu_partial+0x17c/0x250
[ 105.321857][ T6007] __slab_free+0x2ea/0x3d0
[ 105.326275][ T6007] qlist_free_all+0x9a/0x140
[ 105.330859][ T6007] kasan_quarantine_reduce+0x14f/0x170
[ 105.336314][ T6007] __kasan_slab_alloc+0x23/0x80
[ 105.341159][ T6007] __kmalloc_noprof+0x1a6/0x400
[ 105.346010][ T6007] tomoyo_init_log+0x1b3d/0x2050
[ 105.350939][ T6007] tomoyo_supervisor+0x38a/0x11f0
[ 105.355951][ T6007] tomoyo_env_perm+0x178/0x210
[ 105.360706][ T6007] tomoyo_find_next_domain+0x146e/0x1d40
[ 105.366332][ T6007] tomoyo_bprm_check_security+0x114/0x180
[ 105.372041][ T6007] security_bprm_check+0x86/0x250
[ 105.377054][ T6007] bprm_execve+0xa56/0x1770
[ 105.381547][ T6007] do_execveat_common+0x55f/0x6f0
[ 105.386562][ T6007]
[ 105.388875][ T6007] Memory state around the buggy address:
[ 105.394491][ T6007] ffff88802912ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.402538][ T6007] ffff88802912ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.410583][ T6007] >ffff88802912cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.418626][ T6007] ^
[ 105.425546][ T6007] ffff88802912cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.433599][ T6007] ffff88802912d000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.441644][ T6007] ==================================================================
[ 105.455693][ T4625] Bluetooth: hci0: command tx timeout
[ 105.463084][ T6007] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.470306][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.0.15 Not tainted 6.12.0-rc4-syzkaller-gc2ee9f594da8-dirty #0
[ 105.480827][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 105.490907][ T6007] Call Trace:
[ 105.494201][ T6007]
[ 105.497146][ T6007] dump_stack_lvl+0x241/0x360
[ 105.501864][ T6007] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.507087][ T6007] ? __pfx__printk+0x10/0x10
[ 105.511703][ T6007] ? preempt_schedule+0xe1/0xf0
[ 105.516587][ T6007] ? vscnprintf+0x5d/0x90
[ 105.520948][ T6007] panic+0x349/0x880
[ 105.524864][ T6007] ? check_panic_on_warn+0x21/0xb0
[ 105.529999][ T6007] ? __pfx_panic+0x10/0x10
[ 105.534442][ T6007] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 105.540452][ T6007] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 105.546811][ T6007] ? print_report+0x502/0x550
[ 105.551517][ T6007] check_panic_on_warn+0x86/0xb0
[ 105.556479][ T6007] ? bch2_reconstruct_alloc+0x2aa/0xab0
[ 105.562052][ T6007] end_report+0x77/0x160
[ 105.566322][ T6007] kasan_report+0x154/0x180
[ 105.570852][ T6007] ? bch2_reconstruct_alloc+0x2aa/0xab0
[ 105.576434][ T6007] bch2_reconstruct_alloc+0x2aa/0xab0
[ 105.581840][ T6007] ? __pfx_bch2_reconstruct_alloc+0x10/0x10
[ 105.587768][ T6007] ? __mutex_unlock_slowpath+0x21d/0x750
[ 105.593429][ T6007] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 105.599480][ T6007] ? bch2_get_next_dev+0x26/0x500
[ 105.604535][ T6007] ? bch2_journal_pos_from_member_info_resume+0x344/0x3a0
[ 105.611676][ T6007] ? __pfx_bch2_journal_pos_from_member_info_resume+0x10/0x10
[ 105.619176][ T6007] ? bch2_sb_field_get_id+0xd3/0x110
[ 105.624495][ T6007] ? bch2_blacklist_table_initialize+0x117/0x400
[ 105.630846][ T6007] ? bch2_latest_compatible_version+0x156/0x180
[ 105.637111][ T6007] ? bch2_recovery_passes_from_stable+0x128/0x140
[ 105.643649][ T6007] bch2_fs_recovery+0x12dd/0x39c0
[ 105.648707][ T6007] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 105.654116][ T6007] ? __pfx_lock_release+0x10/0x10
[ 105.659174][ T6007] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 105.664835][ T6007] ? __pfx_lock_release+0x10/0x10
[ 105.669894][ T6007] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 105.675553][ T6007] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 105.681307][ T6007] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 105.686976][ T6007] ? llist_reverse_order+0x72/0x90
[ 105.692124][ T6007] bch2_fs_start+0x356/0x5b0
[ 105.696742][ T6007] bch2_fs_get_tree+0xd68/0x1710
[ 105.701757][ T6007] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 105.707162][ T6007] ? generic_parse_monolithic+0x387/0x400
[ 105.712924][ T6007] ? apparmor_capable+0x13b/0x1b0
[ 105.717997][ T6007] vfs_get_tree+0x90/0x2b0
[ 105.722440][ T6007] do_new_mount+0x2be/0xb40
[ 105.726965][ T6007] ? __pfx_do_new_mount+0x10/0x10
[ 105.732024][ T6007] __se_sys_mount+0x2d6/0x3c0
[ 105.736731][ T6007] ? __pfx___se_sys_mount+0x10/0x10
[ 105.741981][ T6007] ? exc_page_fault+0x590/0x8c0
[ 105.746865][ T6007] ? __x64_sys_mount+0x20/0xc0
[ 105.751649][ T6007] do_syscall_64+0xf3/0x230
[ 105.756175][ T6007] ? clear_bhb_loop+0x35/0x90
[ 105.760869][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.766916][ T6007] RIP: 0033:0x7f8421f7f79a
[ 105.771354][ T6007] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.790985][ T6007] RSP: 002b:00007f8422d09e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 105.799426][ T6007] RAX: ffffffffffffffda RBX: 00007f8422d09ef0 RCX: 00007f8421f7f79a
[ 105.807417][ T6007] RDX: 0000000020005b00 RSI: 0000000020005b40 RDI: 00007f8422d09eb0
[ 105.815410][ T6007] RBP: 0000000020005b00 R08: 00007f8422d09ef0 R09: 0000000000000000
[ 105.823402][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020005b40
[ 105.831388][ T6007] R13: 00007f8422d09eb0 R14: 0000000000005b2d R15: 00000000200003c0
[ 105.839386][ T6007]
[ 105.842647][ T6007] Kernel Offset: disabled
[ 105.846965][ T6007] Rebooting in 86400 seconds..