Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts.
2025/05/18 03:50:25 ignoring optional flag "sandboxArg"="0"
2025/05/18 03:50:25 ignoring optional flag "type"="gce"
2025/05/18 03:50:25 parsed 1 programs
2025/05/18 03:50:27 executed programs: 0
[ 98.885089][ T6132] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 98.936372][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.944627][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.952814][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.961553][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.970445][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.105391][ T6139] chnl_net:caif_netlink_parms(): no params data found
[ 99.168729][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.175890][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.183488][ T6139] bridge_slave_0: entered allmulticast mode
[ 99.190672][ T6139] bridge_slave_0: entered promiscuous mode
[ 99.198724][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.205839][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.213072][ T6139] bridge_slave_1: entered allmulticast mode
[ 99.220105][ T6139] bridge_slave_1: entered promiscuous mode
[ 99.252159][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.263641][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.294914][ T6139] team0: Port device team_slave_0 added
[ 99.304279][ T6139] team0: Port device team_slave_1 added
[ 99.330424][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.338210][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.364184][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.376408][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.383435][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.409367][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.449308][ T6139] hsr_slave_0: entered promiscuous mode
[ 99.455516][ T6139] hsr_slave_1: entered promiscuous mode
[ 100.041904][ T6139] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.054062][ T6139] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.065067][ T6139] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.075750][ T6139] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.114368][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.121620][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.129162][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.136347][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.152293][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.160553][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.241516][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.266953][ T6139] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.280737][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.288015][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.314083][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.321382][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.591587][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.652209][ T6139] veth0_vlan: entered promiscuous mode
[ 100.665650][ T6139] veth1_vlan: entered promiscuous mode
[ 100.706108][ T6139] veth0_macvtap: entered promiscuous mode
[ 100.719277][ T6139] veth1_macvtap: entered promiscuous mode
[ 100.744786][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.764115][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.780499][ T6139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.792317][ T6139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.803176][ T6139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.814389][ T6139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.911091][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.929664][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.969573][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.978075][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.009338][ T54] Bluetooth: hci0: command tx timeout
[ 101.355041][ T6195] loop0: detected capacity change from 0 to 32768
[ 101.416709][ T6195] ==================================================================
[ 101.424824][ T6195] BUG: KASAN: use-after-free in diWrite+0x1209/0x1f40
[ 101.431642][ T6195] Write of size 32 at addr ffff8880720f40c0 by task syz-executor.0/6195
[ 101.439979][ T6195]
[ 101.442348][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz-executor.0 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full)
[ 101.442369][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 101.442385][ T6195] Call Trace:
[ 101.442391][ T6195]
[ 101.442401][ T6195] dump_stack_lvl+0x189/0x250
[ 101.442432][ T6195] ? rcu_is_watching+0x15/0xb0
[ 101.442454][ T6195] ? __kasan_check_byte+0x12/0x40
[ 101.442477][ T6195] ? __pfx_dump_stack_lvl+0x10/0x10
[ 101.442495][ T6195] ? rcu_is_watching+0x15/0xb0
[ 101.442514][ T6195] ? lock_release+0x4b/0x3e0
[ 101.442533][ T6195] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 101.442555][ T6195] ? __virt_addr_valid+0x18c/0x540
[ 101.442573][ T6195] ? __virt_addr_valid+0x469/0x540
[ 101.442592][ T6195] print_report+0xb4/0x290
[ 101.442609][ T6195] ? diWrite+0x1209/0x1f40
[ 101.442624][ T6195] kasan_report+0x118/0x150
[ 101.442648][ T6195] ? diWrite+0x1209/0x1f40
[ 101.442665][ T6195] kasan_check_range+0x29a/0x2b0
[ 101.442680][ T6195] ? diWrite+0x1209/0x1f40
[ 101.442697][ T6195] __asan_memcpy+0x40/0x70
[ 101.442718][ T6195] diWrite+0x1209/0x1f40
[ 101.442740][ T6195] txCommit+0x852/0x5430
[ 101.442762][ T6195] ? txLock+0xaf3/0x1cb0
[ 101.442780][ T6195] ? __pfx_txCommit+0x10/0x10
[ 101.442798][ T6195] ? rcu_is_watching+0x15/0xb0
[ 101.442818][ T6195] ? __mark_inode_dirty+0x3ab/0xdf0
[ 101.442838][ T6195] add_missing_indices+0x87d/0xbc0
[ 101.442863][ T6195] ? __pfx_add_missing_indices+0x10/0x10
[ 101.442883][ T6195] ? set_page_refcounted+0xa0/0x1e0
[ 101.442907][ T6195] ? alloc_pages_noprof+0xbe/0x190
[ 101.442924][ T6195] jfs_readdir+0x1da4/0x3ac0
[ 101.442956][ T6195] ? __lock_acquire+0xaac/0xd20
[ 101.442975][ T6195] ? __pfx_jfs_readdir+0x10/0x10
[ 101.443008][ T6195] ? down_write+0x162/0x1f0
[ 101.443029][ T6195] ? __pfx_down_write+0x10/0x10
[ 101.443052][ T6195] ? __pfx_jfs_readdir+0x10/0x10
[ 101.443072][ T6195] wrap_directory_iterator+0x93/0xe0
[ 101.443092][ T6195] iterate_dir+0x5ac/0x770
[ 101.443113][ T6195] __se_sys_getdents64+0xe4/0x260
[ 101.443135][ T6195] ? __pfx___se_sys_getdents64+0x10/0x10
[ 101.443154][ T6195] ? __pfx_filldir64+0x10/0x10
[ 101.443176][ T6195] ? do_syscall_64+0xba/0x210
[ 101.443197][ T6195] do_syscall_64+0xf6/0x210
[ 101.443217][ T6195] ? clear_bhb_loop+0x60/0xb0
[ 101.443236][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.443252][ T6195] RIP: 0033:0x7f94ea47dea9
[ 101.443276][ T6195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 101.443289][ T6195] RSP: 002b:00007f94e97fe0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 101.443306][ T6195] RAX: ffffffffffffffda RBX: 00007f94ea5abf80 RCX: 00007f94ea47dea9
[ 101.443319][ T6195] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005
[ 101.443330][ T6195] RBP: 00007f94ea4ca4a4 R08: 0000000000000000 R09: 0000000000000000
[ 101.443341][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.443352][ T6195] R13: 000000000000000b R14: 00007f94ea5abf80 R15: 00007ffe22974438
[ 101.443370][ T6195]
[ 101.443376][ T6195]
[ 101.747490][ T6195] The buggy address belongs to the physical page:
[ 101.753989][ T6195] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x720f4
[ 101.762748][ T6195] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 101.769875][ T6195] raw: 00fff00000000000 ffffea0001c83d48 ffffea0001e86448 0000000000000000
[ 101.778734][ T6195] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 101.787317][ T6195] page dumped because: kasan: bad access detected
[ 101.793810][ T6195] page_owner tracks the page as freed
[ 101.799168][ T6195] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 6191, tgid 6191 (dhcpcd-run-hook), ts 101272343039, free_ts 101328905071
[ 101.818279][ T6195] post_alloc_hook+0x1d8/0x230
[ 101.823118][ T6195] get_page_from_freelist+0x21c7/0x22a0
[ 101.828750][ T6195] __alloc_frozen_pages_noprof+0x181/0x370
[ 101.834663][ T6195] alloc_pages_mpol+0x232/0x4a0
[ 101.839548][ T6195] alloc_pages_noprof+0xa9/0x190
[ 101.844485][ T6195] __pmd_alloc+0x3a/0x350
[ 101.848808][ T6195] copy_pmd_range+0x6bf3/0x7000
[ 101.853641][ T6195] copy_page_range+0x95c/0xd40
[ 101.858395][ T6195] copy_mm+0x126a/0x2160
[ 101.862623][ T6195] copy_process+0x16d3/0x3b80
[ 101.867399][ T6195] kernel_clone+0x224/0x7f0
[ 101.871892][ T6195] __x64_sys_clone+0x18b/0x1e0
[ 101.876645][ T6195] do_syscall_64+0xf6/0x210
[ 101.881151][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.887036][ T6195] page last free pid 58 tgid 58 stack trace:
[ 101.892993][ T6195] __free_frozen_pages+0xb05/0xcd0
[ 101.898101][ T6195] __tlb_remove_table+0x2d2/0x3b0
[ 101.903151][ T6195] tlb_remove_table_rcu+0x85/0x100
[ 101.908273][ T6195] rcu_core+0xca5/0x1710
[ 101.912505][ T6195] handle_softirqs+0x283/0x870
[ 101.917258][ T6195] do_softirq+0xec/0x180
[ 101.921501][ T6195] __local_bh_enable_ip+0x17d/0x1c0
[ 101.926816][ T6195] ipv6_get_lladdr+0x2aa/0x3f0
[ 101.931569][ T6195] mld_newpack+0x420/0xc40
[ 101.935983][ T6195] add_grhead+0x5a/0x2a0
[ 101.940224][ T6195] add_grec+0x13b2/0x1670
[ 101.944536][ T6195] mld_ifc_work+0x6e6/0xde0
[ 101.949024][ T6195] process_scheduled_works+0xade/0x17a0
[ 101.954735][ T6195] worker_thread+0x8a0/0xda0
[ 101.959317][ T6195] kthread+0x711/0x8a0
[ 101.963386][ T6195] ret_from_fork+0x4b/0x80
[ 101.967796][ T6195]
[ 101.970109][ T6195] Memory state around the buggy address:
[ 101.975724][ T6195] ffff8880720f3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 101.983770][ T6195] ffff8880720f4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 101.991914][ T6195] >ffff8880720f4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 101.999959][ T6195] ^
[ 102.006178][ T6195] ffff8880720f4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.014222][ T6195] ffff8880720f4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.022354][ T6195] ==================================================================
[ 102.086073][ T6195] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.093330][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz-executor.0 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full)
[ 102.105668][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 102.115741][ T6195] Call Trace:
[ 102.119033][ T6195]
[ 102.122046][ T6195] dump_stack_lvl+0x99/0x250
[ 102.126900][ T6195] ? __asan_memcpy+0x40/0x70
[ 102.131700][ T6195] ? __pfx_dump_stack_lvl+0x10/0x10
[ 102.136913][ T6195] ? __pfx__printk+0x10/0x10
[ 102.141603][ T6195] panic+0x2db/0x790
[ 102.145503][ T6195] ? __pfx_preempt_schedule+0x10/0x10
[ 102.151000][ T6195] ? __pfx_panic+0x10/0x10
[ 102.155411][ T6195] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 102.161294][ T6195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 102.167699][ T6195] ? diWrite+0x1209/0x1f40
[ 102.172114][ T6195] check_panic_on_warn+0x89/0xb0
[ 102.177047][ T6195] ? diWrite+0x1209/0x1f40
[ 102.181453][ T6195] end_report+0x78/0x160
[ 102.185690][ T6195] kasan_report+0x129/0x150
[ 102.190188][ T6195] ? diWrite+0x1209/0x1f40
[ 102.194684][ T6195] kasan_check_range+0x29a/0x2b0
[ 102.199610][ T6195] ? diWrite+0x1209/0x1f40
[ 102.204018][ T6195] __asan_memcpy+0x40/0x70
[ 102.208427][ T6195] diWrite+0x1209/0x1f40
[ 102.212661][ T6195] txCommit+0x852/0x5430
[ 102.216898][ T6195] ? txLock+0xaf3/0x1cb0
[ 102.221238][ T6195] ? __pfx_txCommit+0x10/0x10
[ 102.225906][ T6195] ? rcu_is_watching+0x15/0xb0
[ 102.230810][ T6195] ? __mark_inode_dirty+0x3ab/0xdf0
[ 102.236014][ T6195] add_missing_indices+0x87d/0xbc0
[ 102.241130][ T6195] ? __pfx_add_missing_indices+0x10/0x10
[ 102.246752][ T6195] ? set_page_refcounted+0xa0/0x1e0
[ 102.251945][ T6195] ? alloc_pages_noprof+0xbe/0x190
[ 102.257042][ T6195] jfs_readdir+0x1da4/0x3ac0
[ 102.261634][ T6195] ? __lock_acquire+0xaac/0xd20
[ 102.266527][ T6195] ? __pfx_jfs_readdir+0x10/0x10
[ 102.271466][ T6195] ? down_write+0x162/0x1f0
[ 102.275962][ T6195] ? __pfx_down_write+0x10/0x10
[ 102.280899][ T6195] ? __pfx_jfs_readdir+0x10/0x10
[ 102.285829][ T6195] wrap_directory_iterator+0x93/0xe0
[ 102.291134][ T6195] iterate_dir+0x5ac/0x770
[ 102.295550][ T6195] __se_sys_getdents64+0xe4/0x260
[ 102.300568][ T6195] ? __pfx___se_sys_getdents64+0x10/0x10
[ 102.306199][ T6195] ? __pfx_filldir64+0x10/0x10
[ 102.311228][ T6195] ? do_syscall_64+0xba/0x210
[ 102.315904][ T6195] do_syscall_64+0xf6/0x210
[ 102.320397][ T6195] ? clear_bhb_loop+0x60/0xb0
[ 102.325158][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.331099][ T6195] RIP: 0033:0x7f94ea47dea9
[ 102.335515][ T6195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 102.355125][ T6195] RSP: 002b:00007f94e97fe0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 102.363530][ T6195] RAX: ffffffffffffffda RBX: 00007f94ea5abf80 RCX: 00007f94ea47dea9
[ 102.371579][ T6195] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005
[ 102.379565][ T6195] RBP: 00007f94ea4ca4a4 R08: 0000000000000000 R09: 0000000000000000
[ 102.387553][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.395610][ T6195] R13: 000000000000000b R14: 00007f94ea5abf80 R15: 00007ffe22974438
[ 102.403579][ T6195]
[ 102.407283][ T6195] Kernel Offset: disabled
[ 102.411650][ T6195] Rebooting in 86400 seconds..