Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. 2023/10/03 12:13:54 ignoring optional flag "sandboxArg"="0" 2023/10/03 12:13:55 parsed 1 programs 2023/10/03 12:13:57 executed programs: 0 [ 109.301991][ T5383] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.368163][ T5039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.377530][ T5039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.385994][ T5039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.395254][ T5039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.403858][ T5039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.411566][ T5039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.575789][ T5389] chnl_net:caif_netlink_parms(): no params data found [ 109.651044][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.658471][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.666824][ T5389] bridge_slave_0: entered allmulticast mode [ 109.675068][ T5389] bridge_slave_0: entered promiscuous mode [ 109.684319][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.692191][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.705038][ T5389] bridge_slave_1: entered allmulticast mode [ 109.712795][ T5389] bridge_slave_1: entered promiscuous mode [ 109.746149][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.759383][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.796762][ T5389] team0: Port device team_slave_0 added [ 109.805742][ T5389] team0: Port device team_slave_1 added [ 109.835712][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.843116][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.870362][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.883682][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.890775][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.917387][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.965173][ T5389] hsr_slave_0: entered promiscuous mode [ 109.972286][ T5389] hsr_slave_1: entered promiscuous mode [ 110.732667][ T5389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.746559][ T5389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.761299][ T5389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.774442][ T5389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.897755][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.928481][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.945281][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.952580][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.983888][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.991223][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.244727][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.314804][ T5389] veth0_vlan: entered promiscuous mode [ 111.333382][ T5389] veth1_vlan: entered promiscuous mode [ 111.380901][ T5389] veth0_macvtap: entered promiscuous mode [ 111.394880][ T5389] veth1_macvtap: entered promiscuous mode [ 111.430812][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.450189][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.470145][ T4433] Bluetooth: hci0: command 0x0409 tx timeout [ 111.477500][ T5389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.488555][ T5389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.503266][ T5389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.513702][ T5389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.624074][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.643888][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.682613][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.692056][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.246857][ T5448] loop0: detected capacity change from 0 to 32768 [ 112.278268][ T5448] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 112.290844][ T5448] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 112.316957][ T5448] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 112.332742][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 112.341315][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 112.423485][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 82ms [ 112.440791][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 112.449847][ T5448] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 112.519149][ C1] ffff88807634e000, ffff88807bf08000, gfs2_qd_dealloc [ 112.646559][ T5389] free_sbd [ 113.352081][ T5480] loop0: detected capacity change from 0 to 32768 [ 113.366975][ T5480] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 113.377905][ T5480] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 113.394153][ T5480] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 113.412479][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 113.421756][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 113.504294][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 82ms [ 113.516242][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 113.524595][ T5480] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 113.558982][ T4433] Bluetooth: hci0: command 0x041b tx timeout [ 113.589074][ C0] ffff888067526000, ffff88807bf0c000, gfs2_qd_dealloc [ 113.653023][ T5389] free_sbd [ 114.343214][ T5512] loop0: detected capacity change from 0 to 32768 [ 114.355718][ T5512] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 114.370444][ T5512] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 114.385088][ T5512] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 114.397710][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 114.406032][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... 2023/10/03 12:14:02 executed programs: 3 [ 114.491210][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 85ms [ 114.503261][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 114.511054][ T5512] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 114.569015][ C0] ffff888067526150, ffff888025424000, gfs2_qd_dealloc [ 114.657999][ T5389] free_sbd [ 115.314178][ T5545] loop0: detected capacity change from 0 to 32768 [ 115.332412][ T5545] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 115.342606][ T5545] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 115.355731][ T5545] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 115.366690][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 115.376451][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 115.473341][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 96ms [ 115.486700][ T28] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 115.494751][ T5545] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 115.549010][ C1] ffff88807634e150, ffff88807f6dc000, gfs2_qd_dealloc [ 115.609754][ T5389] free_sbd [ 115.631798][ T4433] Bluetooth: hci0: command 0x040f tx timeout [ 116.275245][ T5577] loop0: detected capacity change from 0 to 32768 [ 116.292524][ T5577] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 116.304178][ T5577] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 116.319713][ T5577] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 116.331968][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 116.340660][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 116.425771][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 85ms [ 116.438454][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 116.446288][ T5577] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 116.518839][ C1] ffff88807634e2a0, ffff8880796d4000, gfs2_qd_dealloc [ 116.583110][ T5389] free_sbd [ 117.241138][ T5607] loop0: detected capacity change from 0 to 32768 [ 117.254570][ T5607] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 117.264795][ T5607] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 117.281161][ T5607] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 117.293174][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 117.302053][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 117.386786][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 84ms [ 117.397457][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 117.405251][ T5607] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 117.449002][ C1] ffff88807634e3f0, ffff8880796d0000, gfs2_qd_dealloc [ 117.516658][ T5389] free_sbd [ 117.712565][ T4433] Bluetooth: hci0: command 0x0419 tx timeout [ 118.161036][ T5639] loop0: detected capacity change from 0 to 32768 [ 118.174438][ T5639] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 118.184567][ T5639] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 118.204772][ T5639] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 118.217448][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 118.225565][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 118.307947][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 82ms [ 118.318523][ T779] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 118.341494][ T5639] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 118.428939][ C1] ffff88807634e540, ffff8880791dc000, gfs2_qd_dealloc [ 118.475367][ T5389] free_sbd [ 119.171261][ T5672] loop0: detected capacity change from 0 to 32768 [ 119.189504][ T5672] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 119.200740][ T5672] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 119.214393][ T5672] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 119.226867][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 119.237322][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 119.318564][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 81ms [ 119.330224][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 119.337560][ T5672] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 119.408778][ C1] ffff88807634e690, ffff88807e430000, gfs2_qd_dealloc [ 119.445676][ T5389] free_sbd [ 120.160264][ T5704] loop0: detected capacity change from 0 to 32768 [ 120.175198][ T5704] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 120.188322][ T5704] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 120.203726][ T5704] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 120.214820][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 120.224473][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... 2023/10/03 12:14:08 executed programs: 9 [ 120.306418][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 81ms [ 120.317881][ T23] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 120.326134][ T5704] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 120.369194][ C1] ffff88807634e7e0, ffff88807e434000, gfs2_qd_dealloc [ 120.473323][ T5389] free_sbd [ 121.134025][ T5739] loop0: detected capacity change from 0 to 32768 [ 121.147304][ T5739] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 121.161737][ T5739] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 121.175334][ T5739] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 121.187682][ T55] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 121.196359][ T55] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 121.270198][ T55] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 73ms [ 121.282404][ T55] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 121.289107][ T5739] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 121.359177][ C0] ffff8880675262a0, ffff888029d54000, gfs2_qd_dealloc [ 121.409555][ T5389] free_sbd [ 122.010106][ T5765] loop0: detected capacity change from 0 to 32768 [ 122.025700][ T5765] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 122.039642][ T5765] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 122.054794][ T5765] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 122.066526][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 122.075031][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 122.152681][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 77ms [ 122.165055][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 122.171987][ T5765] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 122.248740][ C0] ffff8880675263f0, ffff88807ba54000, gfs2_qd_dealloc [ 122.293334][ T5389] free_sbd [ 122.754363][ T5794] loop0: detected capacity change from 0 to 32768 [ 122.764871][ T5794] gfs2: fsid=„½%b­i’~N-SS“: Trying to join cluster "lock_nolock", "„½%b­i’~N-SS“" [ 122.776862][ T5794] gfs2: fsid=„½%b­i’~N-SS“: Now mounting FS (format 1801)... [ 122.790928][ T5794] gfs2: fsid=„½%b­i’~N-SS“.0: journal 0 mapped with 18 extents in 0ms [ 122.801478][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0, already locked for use [ 122.809219][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Looking at journal... [ 122.859035][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Journal head lookup took 49ms [ 122.869432][ T9] gfs2: fsid=„½%b­i’~N-SS“.0: jid=0: Done [ 122.876207][ T5794] gfs2: fsid=„½%b­i’~N-SS“.0: first mount done, others may mount [ 122.956569][ T5389] free_sbd [ 122.958695][ C1] ffff88807634e930, ffff88807f6d8000, gfs2_qd_dealloc [ 122.967069][ C1] ================================================================== [ 122.975682][ C1] BUG: KASAN: slab-use-after-free in gfs2_qd_dealloc+0x9a/0x100 [ 122.983382][ C1] Write of size 4 at addr ffff88807f6d8a78 by task swapper/1/0 [ 122.991343][ C1] [ 122.993963][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.0-rc3-syzkaller-dirty #0 [ 123.002611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 123.013057][ C1] Call Trace: [ 123.016373][ C1] [ 123.019419][ C1] dump_stack_lvl+0x1e7/0x2d0 [ 123.024149][ C1] ? nf_tcp_handle_invalid+0x650/0x650 [ 123.029849][ C1] ? panic+0x770/0x770 [ 123.033972][ C1] ? _printk+0xd5/0x120 [ 123.038251][ C1] print_report+0x163/0x540 [ 123.042791][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 123.048842][ C1] ? __virt_addr_valid+0x22f/0x2e0 [ 123.054257][ C1] ? __phys_addr+0xba/0x170 [ 123.058891][ C1] ? gfs2_qd_dealloc+0x9a/0x100 [ 123.063868][ C1] kasan_report+0x175/0x1b0 [ 123.068431][ C1] ? gfs2_qd_dealloc+0x9a/0x100 [ 123.073331][ C1] kasan_check_range+0x27e/0x290 [ 123.078494][ C1] gfs2_qd_dealloc+0x9a/0x100 [ 123.083316][ C1] ? gfs2_qd_dispose+0x5b0/0x5b0 [ 123.088295][ C1] ? rcu_core+0xa61/0x1790 [ 123.092805][ C1] rcu_core+0xacf/0x1790 [ 123.097296][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 123.102785][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 123.108208][ C1] ? sched_clock+0x4a/0x60 [ 123.113105][ C1] ? sched_clock_cpu+0x76/0x490 [ 123.118109][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 123.124157][ C1] ? print_irqtrace_events+0x220/0x220 [ 123.129753][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 123.135173][ C1] __do_softirq+0x2ab/0x908 [ 123.139808][ C1] ? __irq_exit_rcu+0xf1/0x1b0 [ 123.144866][ C1] ? __lock_text_end+0xc/0xc [ 123.149838][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 123.155239][ C1] __irq_exit_rcu+0xf1/0x1b0 [ 123.160019][ C1] ? irq_exit_rcu+0x20/0x20 [ 123.164712][ C1] irq_exit_rcu+0x9/0x20 [ 123.169226][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 123.174979][ C1] [ 123.177916][ C1] [ 123.181051][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 123.187179][ C1] RIP: 0010:acpi_safe_halt+0x20/0x30 [ 123.192795][ C1] Code: 7f 04 eb 36 66 0f 1f 44 00 00 65 48 8b 05 e8 4b 36 75 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 76 a5 95 00 f3 0f 1e fa fb f4 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 fa ec 48 8b 05 [ 123.212962][ C1] RSP: 0018:ffffc90000187d08 EFLAGS: 00000246 [ 123.219055][ C1] RAX: ffff888016e43b80 RBX: ffff88801328a864 RCX: 000000000005ec31 [ 123.227385][ C1] RDX: 0000000000000001 RSI: ffff88801328a800 RDI: ffff88801328a864 [ 123.235456][ C1] RBP: 0000000000038df8 R08: ffff8880b9936bcb R09: 1ffff11017326d79 [ 123.243801][ C1] R10: dffffc0000000000 R11: ffffed1017326d7a R12: ffff888144eb8800 [ 123.252408][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8da1f720 [ 123.260585][ C1] acpi_idle_enter+0xe4/0x140 [ 123.265828][ C1] cpuidle_enter_state+0x10e/0x470 [ 123.270975][ C1] ? menu_enable_device+0x380/0x380 [ 123.276396][ C1] cpuidle_enter+0x5d/0x90 [ 123.281009][ C1] do_idle+0x374/0x5c0 [ 123.285188][ C1] ? print_irqtrace_events+0x220/0x220 [ 123.290661][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 123.296154][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 123.302098][ C1] ? complete+0xb4/0x1c0 [ 123.306486][ C1] cpu_startup_entry+0x41/0x60 [ 123.311281][ C1] start_secondary+0xee/0xf0 [ 123.315972][ C1] secondary_startup_64_no_verify+0x167/0x16b [ 123.322408][ C1] [ 123.325441][ C1] [ 123.327872][ C1] Allocated by task 5794: [ 123.332287][ C1] kasan_set_track+0x4f/0x70 [ 123.336984][ C1] __kasan_kmalloc+0x98/0xb0 [ 123.341588][ C1] gfs2_fill_super+0x138/0x25f0 [ 123.346624][ C1] get_tree_bdev+0x416/0x5b0 [ 123.351502][ C1] gfs2_get_tree+0x54/0x210 [ 123.356360][ C1] vfs_get_tree+0x8c/0x280 [ 123.361243][ C1] do_new_mount+0x28f/0xae0 [ 123.366364][ C1] __se_sys_mount+0x2d9/0x3c0 [ 123.371742][ C1] do_syscall_64+0x41/0xc0 [ 123.376340][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.382943][ C1] [ 123.385461][ C1] Freed by task 5389: [ 123.389447][ C1] kasan_set_track+0x4f/0x70 [ 123.394493][ C1] kasan_save_free_info+0x28/0x40 [ 123.400224][ C1] ____kasan_slab_free+0xd6/0x120 [ 123.405964][ C1] __kmem_cache_free+0x25f/0x3b0 [ 123.411614][ C1] generic_shutdown_super+0x13a/0x2c0 [ 123.417464][ C1] kill_block_super+0x41/0x70 [ 123.422365][ C1] deactivate_locked_super+0xa4/0x110 [ 123.428929][ C1] cleanup_mnt+0x426/0x4c0 [ 123.433674][ C1] task_work_run+0x24a/0x300 [ 123.438305][ C1] exit_to_user_mode_loop+0xde/0x100 [ 123.444158][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 123.450153][ C1] syscall_exit_to_user_mode+0x64/0x280 [ 123.456346][ C1] do_syscall_64+0x4d/0xc0 [ 123.461054][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.467315][ C1] [ 123.469658][ C1] The buggy address belongs to the object at ffff88807f6d8000 [ 123.469658][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 123.484839][ C1] The buggy address is located 2680 bytes inside of [ 123.484839][ C1] freed 8192-byte region [ffff88807f6d8000, ffff88807f6da000) [ 123.499563][ C1] [ 123.502288][ C1] The buggy address belongs to the physical page: [ 123.508841][ C1] page:ffffea0001fdb600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f6d8 [ 123.520852][ C1] head:ffffea0001fdb600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 123.530514][ C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 123.538858][ C1] page_type: 0xffffffff() [ 123.543285][ C1] raw: 00fff00000000840 ffff888012842280 ffffea0001e53e00 0000000000000004 [ 123.552250][ C1] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 123.561295][ C1] page dumped because: kasan: bad access detected [ 123.567710][ C1] page_owner tracks the page as allocated [ 123.573735][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4697, tgid 4697 (dhcpcd), ts 88292863172, free_ts 88259942267 [ 123.599261][ C1] post_alloc_hook+0x1e6/0x210 [ 123.604433][ C1] get_page_from_freelist+0x31db/0x3360 [ 123.610860][ C1] __alloc_pages+0x255/0x670 [ 123.616230][ C1] alloc_slab_page+0x6a/0x160 [ 123.621924][ C1] new_slab+0x84/0x2f0 [ 123.627855][ C1] ___slab_alloc+0xc85/0x1310 [ 123.632980][ C1] __kmem_cache_alloc_node+0x1af/0x270 [ 123.638943][ C1] __kmalloc_node_track_caller+0xa5/0x230 [ 123.645215][ C1] kmalloc_reserve+0xf3/0x260 [ 123.650007][ C1] __alloc_skb+0x1b1/0x420 [ 123.654437][ C1] netlink_dump+0x20b/0xcc0 [ 123.659257][ C1] netlink_recvmsg+0x6b9/0x11d0 [ 123.664270][ C1] ____sys_recvmsg+0x2a4/0x580 [ 123.669136][ C1] __sys_recvmsg+0x2f0/0x3d0 [ 123.674052][ C1] do_syscall_64+0x41/0xc0 [ 123.678946][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.685997][ C1] page last free stack trace: [ 123.691213][ C1] free_unref_page_prepare+0x8c3/0x9f0 [ 123.697148][ C1] free_unref_page+0x37/0x3f0 [ 123.702388][ C1] __unfreeze_partials+0x1dc/0x220 [ 123.707792][ C1] put_cpu_partial+0x17b/0x250 [ 123.712605][ C1] __slab_free+0x2b6/0x390 [ 123.717226][ C1] qlist_free_all+0x75/0xe0 [ 123.722348][ C1] kasan_quarantine_reduce+0x14b/0x160 [ 123.728445][ C1] __kasan_slab_alloc+0x23/0x70 [ 123.733605][ C1] slab_post_alloc_hook+0x67/0x3d0 [ 123.738990][ C1] kmem_cache_alloc+0x123/0x300 [ 123.744054][ C1] getname_flags+0xbc/0x4e0 [ 123.748928][ C1] vfs_fstatat+0x11c/0x190 [ 123.753573][ C1] __x64_sys_newfstatat+0x117/0x190 [ 123.759324][ C1] do_syscall_64+0x41/0xc0 [ 123.764360][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.770876][ C1] [ 123.773645][ C1] Memory state around the buggy address: [ 123.779798][ C1] ffff88807f6d8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.788299][ C1] ffff88807f6d8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.796920][ C1] >ffff88807f6d8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.805272][ C1] ^ [ 123.813707][ C1] ffff88807f6d8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.822389][ C1] ffff88807f6d8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.831261][ C1] ================================================================== [ 123.839439][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.846752][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.0-rc3-syzkaller-dirty #0 [ 123.856179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 123.866798][ C1] Call Trace: [ 123.870433][ C1] [ 123.873847][ C1] dump_stack_lvl+0x1e7/0x2d0 [ 123.879916][ C1] ? nf_tcp_handle_invalid+0x650/0x650 [ 123.886088][ C1] ? panic+0x770/0x770 [ 123.890329][ C1] ? vscnprintf+0x5d/0x80 [ 123.895154][ C1] panic+0x30f/0x770 [ 123.899637][ C1] ? check_panic_on_warn+0x21/0xa0 [ 123.904890][ C1] ? __memcpy_flushcache+0x2b0/0x2b0 [ 123.910588][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 123.916809][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 123.922858][ C1] ? _raw_spin_unlock+0x40/0x40 [ 123.928508][ C1] ? print_report+0x4fb/0x540 [ 123.933444][ C1] check_panic_on_warn+0x82/0xa0 [ 123.938822][ C1] ? gfs2_qd_dealloc+0x9a/0x100 [ 123.944175][ C1] end_report+0x6e/0x130 [ 123.948558][ C1] kasan_report+0x186/0x1b0 [ 123.953300][ C1] ? gfs2_qd_dealloc+0x9a/0x100 [ 123.958308][ C1] kasan_check_range+0x27e/0x290 [ 123.963917][ C1] gfs2_qd_dealloc+0x9a/0x100 [ 123.968846][ C1] ? gfs2_qd_dispose+0x5b0/0x5b0 [ 123.974031][ C1] ? rcu_core+0xa61/0x1790 [ 123.978750][ C1] rcu_core+0xacf/0x1790 [ 123.983515][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 123.990147][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 123.995832][ C1] ? sched_clock+0x4a/0x60 [ 124.000732][ C1] ? sched_clock_cpu+0x76/0x490 [ 124.006009][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 124.012737][ C1] ? print_irqtrace_events+0x220/0x220 [ 124.018436][ C1] ? do_raw_spin_unlock+0x13b/0x8b0 [ 124.023710][ C1] __do_softirq+0x2ab/0x908 [ 124.028726][ C1] ? __irq_exit_rcu+0xf1/0x1b0 [ 124.033721][ C1] ? __lock_text_end+0xc/0xc [ 124.039089][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 124.044350][ C1] __irq_exit_rcu+0xf1/0x1b0 [ 124.049000][ C1] ? irq_exit_rcu+0x20/0x20 [ 124.053561][ C1] irq_exit_rcu+0x9/0x20 [ 124.057851][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 124.063557][ C1] [ 124.066610][ C1] [ 124.069925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.076426][ C1] RIP: 0010:acpi_safe_halt+0x20/0x30 [ 124.081946][ C1] Code: 7f 04 eb 36 66 0f 1f 44 00 00 65 48 8b 05 e8 4b 36 75 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 76 a5 95 00 f3 0f 1e fa fb f4 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 fa ec 48 8b 05 [ 124.102386][ C1] RSP: 0018:ffffc90000187d08 EFLAGS: 00000246 [ 124.108600][ C1] RAX: ffff888016e43b80 RBX: ffff88801328a864 RCX: 000000000005ec31 [ 124.116823][ C1] RDX: 0000000000000001 RSI: ffff88801328a800 RDI: ffff88801328a864 [ 124.125036][ C1] RBP: 0000000000038df8 R08: ffff8880b9936bcb R09: 1ffff11017326d79 [ 124.133327][ C1] R10: dffffc0000000000 R11: ffffed1017326d7a R12: ffff888144eb8800 [ 124.141888][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8da1f720 [ 124.150013][ C1] acpi_idle_enter+0xe4/0x140 [ 124.155076][ C1] cpuidle_enter_state+0x10e/0x470 [ 124.160439][ C1] ? menu_enable_device+0x380/0x380 [ 124.165898][ C1] cpuidle_enter+0x5d/0x90 [ 124.171008][ C1] do_idle+0x374/0x5c0 [ 124.175219][ C1] ? print_irqtrace_events+0x220/0x220 [ 124.180830][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 124.186255][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 124.192233][ C1] ? complete+0xb4/0x1c0 [ 124.196825][ C1] cpu_startup_entry+0x41/0x60 [ 124.201815][ C1] start_secondary+0xee/0xf0 [ 124.206619][ C1] secondary_startup_64_no_verify+0x167/0x16b [ 124.213545][ C1] [ 124.217045][ C1] Kernel Offset: disabled [ 124.221464][ C1] Rebooting in 86400 seconds..