Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts.
[ 60.331580][ T5052] chnl_net:caif_netlink_parms(): no params data found
[ 60.386618][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.394486][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.402515][ T5052] bridge_slave_0: entered allmulticast mode
[ 60.409271][ T5052] bridge_slave_0: entered promiscuous mode
[ 60.418422][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.425839][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.433320][ T5052] bridge_slave_1: entered allmulticast mode
[ 60.440167][ T5052] bridge_slave_1: entered promiscuous mode
[ 60.467206][ T5052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.479010][ T5052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.505452][ T5052] team0: Port device team_slave_0 added
[ 60.514215][ T5052] team0: Port device team_slave_1 added
[ 60.537819][ T5052] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.545181][ T5052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.571250][ T5052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.584599][ T5052] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.591786][ T5052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.619029][ T5052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.654731][ T5052] hsr_slave_0: entered promiscuous mode
[ 60.661462][ T5052] hsr_slave_1: entered promiscuous mode
[ 60.767822][ T5052] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 60.778946][ T5052] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 60.788556][ T5052] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 60.798798][ T5052] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 60.824818][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.832250][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.840127][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.847332][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.903672][ T5052] 8021q: adding VLAN 0 to HW filter on device bond0
[ 60.922048][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.932711][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.948880][ T5052] 8021q: adding VLAN 0 to HW filter on device team0
[ 60.963361][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.970981][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.994753][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.002097][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 61.054103][ T5052] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 61.094121][ T5052] veth0_vlan: entered promiscuous mode
[ 61.105034][ T5052] veth1_vlan: entered promiscuous mode
[ 61.133324][ T5052] veth0_macvtap: entered promiscuous mode
[ 61.143745][ T5052] veth1_macvtap: entered promiscuous mode
[ 61.163675][ T5052] batman_adv: batadv0: Interface activated: batadv_slave_0
executing program
[ 61.176884][ T5052] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 61.189976][ T5052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.200910][ T5052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.209929][ T5052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.219779][ T5052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.273729][ T5052] loop0: detected capacity change from 0 to 2048
[ 61.287625][ T5052] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 61.318216][ T5052] jffs2: notice: (5052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 61.391240][ T5063] ==================================================================
[ 61.401984][ T5063] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70
[ 61.409455][ T5063] Read of size 8 at addr ffff88807e402130 by task jffs2_gcd_mtd0/5063
[ 61.417808][ T5063]
[ 61.420130][ T5063] CPU: 0 PID: 5063 Comm: jffs2_gcd_mtd0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 61.430115][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 61.440160][ T5063] Call Trace:
[ 61.443442][ T5063]
[ 61.446374][ T5063] dump_stack_lvl+0x241/0x360
[ 61.451139][ T5063] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.456413][ T5063] ? __pfx__printk+0x10/0x10
[ 61.461017][ T5063] ? _printk+0xd5/0x120
[ 61.465340][ T5063] ? __virt_addr_valid+0x183/0x520
[ 61.470733][ T5063] ? __virt_addr_valid+0x183/0x520
[ 61.475857][ T5063] print_report+0x169/0x550
[ 61.480457][ T5063] ? __virt_addr_valid+0x183/0x520
[ 61.485766][ T5063] ? __virt_addr_valid+0x183/0x520
[ 61.490987][ T5063] ? __virt_addr_valid+0x44e/0x520
[ 61.496209][ T5063] ? __phys_addr+0xba/0x170
[ 61.500730][ T5063] ? __mutex_lock+0xfe/0xd70
[ 61.506121][ T5063] kasan_report+0x143/0x180
[ 61.510746][ T5063] ? __mutex_lock+0xfe/0xd70
[ 61.515859][ T5063] __mutex_lock+0xfe/0xd70
[ 61.520584][ T5063] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 61.527157][ T5063] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 61.532973][ T5063] ? __pfx___mutex_lock+0x10/0x10
[ 61.538126][ T5063] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 61.544923][ T5063] ? _raw_spin_lock_irq+0xdf/0x120
[ 61.550266][ T5063] jffs2_garbage_collect_pass+0xae/0x2120
[ 61.556438][ T5063] ? lockdep_hardirqs_on+0x99/0x150
[ 61.562889][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50
[ 61.568298][ T5063] ? __set_current_blocked+0x310/0x380
[ 61.574098][ T5063] ? __pfx___set_current_blocked+0x10/0x10
[ 61.580178][ T5063] ? schedule+0x90/0x320
[ 61.584521][ T5063] ? schedule+0x155/0x320
[ 61.589213][ T5063] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 61.595909][ T5063] ? schedule_timeout+0x21a/0x310
[ 61.601309][ T5063] ? sigprocmask+0x228/0x280
[ 61.606140][ T5063] ? __pfx_sigprocmask+0x10/0x10
[ 61.611366][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0
[ 61.618192][ T5063] jffs2_garbage_collect_thread+0x651/0x6e0
[ 61.624189][ T5063] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 61.630811][ T5063] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 61.638088][ T5063] ? __kthread_parkme+0x169/0x1d0
[ 61.643480][ T5063] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 61.651400][ T5063] kthread+0x2f0/0x390
[ 61.655652][ T5063] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 61.662236][ T5063] ? __pfx_kthread+0x10/0x10
[ 61.667609][ T5063] ret_from_fork+0x4b/0x80
[ 61.672020][ T5063] ? __pfx_kthread+0x10/0x10
[ 61.676601][ T5063] ret_from_fork_asm+0x1a/0x30
[ 61.681535][ T5063]
[ 61.684630][ T5063]
[ 61.687655][ T5063] Allocated by task 5052:
[ 61.692145][ T5063] kasan_save_track+0x3f/0x80
[ 61.697178][ T5063] __kasan_kmalloc+0x98/0xb0
[ 61.701785][ T5063] kmalloc_trace+0x1db/0x360
[ 61.707169][ T5063] jffs2_init_fs_context+0x4f/0xc0
[ 61.712550][ T5063] alloc_fs_context+0x68a/0x800
[ 61.717407][ T5063] do_new_mount+0x160/0xb40
[ 61.721996][ T5063] __se_sys_mount+0x2d9/0x3c0
[ 61.726862][ T5063] do_syscall_64+0xfb/0x240
[ 61.731614][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 61.738017][ T5063]
[ 61.740329][ T5063] Freed by task 5052:
[ 61.744293][ T5063] kasan_save_track+0x3f/0x80
[ 61.749220][ T5063] kasan_save_free_info+0x40/0x50
[ 61.754254][ T5063] poison_slab_object+0xa6/0xe0
[ 61.759300][ T5063] __kasan_slab_free+0x37/0x60
[ 61.764085][ T5063] kfree+0x14a/0x380
[ 61.768064][ T5063] deactivate_locked_super+0xc4/0x130
[ 61.773515][ T5063] cleanup_mnt+0x426/0x4c0
[ 61.778016][ T5063] task_work_run+0x24f/0x310
[ 61.782683][ T5063] do_exit+0xa1b/0x27e0
[ 61.786834][ T5063] do_group_exit+0x207/0x2c0
[ 61.791504][ T5063] __x64_sys_exit_group+0x3f/0x40
[ 61.796867][ T5063] do_syscall_64+0xfb/0x240
[ 61.802063][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 61.808069][ T5063]
[ 61.810403][ T5063] The buggy address belongs to the object at ffff88807e402000
[ 61.810403][ T5063] which belongs to the cache kmalloc-4k of size 4096
[ 61.824574][ T5063] The buggy address is located 304 bytes inside of
[ 61.824574][ T5063] freed 4096-byte region [ffff88807e402000, ffff88807e403000)
[ 61.838885][ T5063]
[ 61.841301][ T5063] The buggy address belongs to the physical page:
[ 61.847974][ T5063] page:ffffea0001f90000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e400
[ 61.858403][ T5063] head:ffffea0001f90000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 61.867608][ T5063] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 61.875944][ T5063] page_type: 0xffffffff()
[ 61.880665][ T5063] raw: 00fff00000000840 ffff888014c42140 ffffea0000937e00 0000000000000002
[ 61.889611][ T5063] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 61.898908][ T5063] page dumped because: kasan: bad access detected
[ 61.905393][ T5063] page_owner tracks the page as allocated
[ 61.911092][ T5063] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4727, tgid 4727 (dhcpcd), ts 35281916523, free_ts 35270327271
[ 61.931410][ T5063] post_alloc_hook+0x1ea/0x210
[ 61.936173][ T5063] get_page_from_freelist+0x33ea/0x3580
[ 61.941716][ T5063] __alloc_pages+0x256/0x680
[ 61.946582][ T5063] alloc_slab_page+0x5f/0x160
[ 61.951469][ T5063] new_slab+0x84/0x2f0
[ 61.955539][ T5063] ___slab_alloc+0xc73/0x1260
[ 61.960213][ T5063] __kmalloc+0x2e5/0x4a0
[ 61.964539][ T5063] tomoyo_realpath_from_path+0xcf/0x5e0
[ 61.970560][ T5063] tomoyo_check_open_permission+0x255/0x500
[ 61.976501][ T5063] security_file_open+0x69/0x570
[ 61.981553][ T5063] do_dentry_open+0x327/0x15a0
[ 61.986490][ T5063] path_openat+0x2860/0x3240
[ 61.991164][ T5063] do_filp_open+0x235/0x490
[ 61.995879][ T5063] do_sys_openat2+0x13e/0x1d0
[ 62.000814][ T5063] __x64_sys_openat+0x247/0x2a0
[ 62.005659][ T5063] do_syscall_64+0xfb/0x240
[ 62.010252][ T5063] page last free pid 4727 tgid 4727 stack trace:
[ 62.016565][ T5063] free_unref_page_prepare+0x95d/0xa80
[ 62.022101][ T5063] free_unref_page+0x37/0x3f0
[ 62.026856][ T5063] __put_partials+0xeb/0x130
[ 62.032308][ T5063] put_cpu_partial+0x17c/0x250
[ 62.037594][ T5063] __slab_free+0x2ea/0x3d0
[ 62.042460][ T5063] qlist_free_all+0x5e/0xc0
[ 62.046964][ T5063] kasan_quarantine_reduce+0x14f/0x170
[ 62.052608][ T5063] __kasan_slab_alloc+0x23/0x80
[ 62.057633][ T5063] kmem_cache_alloc+0x174/0x340
[ 62.062484][ T5063] getname_flags+0xbd/0x4f0
[ 62.067278][ T5063] vfs_fstatat+0x11c/0x190
[ 62.072204][ T5063] __x64_sys_newfstatat+0x117/0x190
[ 62.077866][ T5063] do_syscall_64+0xfb/0x240
[ 62.082651][ T5063] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 62.088717][ T5063]
[ 62.091063][ T5063] Memory state around the buggy address:
[ 62.096776][ T5063] ffff88807e402000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 62.105013][ T5063] ffff88807e402080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 62.115860][ T5063] >ffff88807e402100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 62.123905][ T5063] ^
[ 62.130061][ T5063] ffff88807e402180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 62.138458][ T5063] ffff88807e402200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 62.146770][ T5063] ==================================================================
[ 62.187955][ T5063] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 62.196366][ T5063] CPU: 0 PID: 5063 Comm: jffs2_gcd_mtd0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 62.206433][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 62.216896][ T5063] Call Trace:
[ 62.220380][ T5063]
[ 62.223407][ T5063] dump_stack_lvl+0x241/0x360
[ 62.228356][ T5063] ? __pfx_dump_stack_lvl+0x10/0x10
[ 62.233587][ T5063] ? __pfx__printk+0x10/0x10
[ 62.238443][ T5063] ? preempt_schedule+0xe1/0xf0
[ 62.243575][ T5063] ? vscnprintf+0x5d/0x90
[ 62.247928][ T5063] panic+0x349/0x860
[ 62.252043][ T5063] ? check_panic_on_warn+0x21/0xb0
[ 62.257159][ T5063] ? __pfx_panic+0x10/0x10
[ 62.261762][ T5063] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 62.267888][ T5063] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 62.274483][ T5063] ? print_report+0x502/0x550
[ 62.279326][ T5063] check_panic_on_warn+0x86/0xb0
[ 62.284257][ T5063] ? __mutex_lock+0xfe/0xd70
[ 62.288939][ T5063] end_report+0x6e/0x140
[ 62.293481][ T5063] kasan_report+0x154/0x180
[ 62.298087][ T5063] ? __mutex_lock+0xfe/0xd70
[ 62.302775][ T5063] __mutex_lock+0xfe/0xd70
[ 62.307324][ T5063] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 62.313540][ T5063] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 62.319295][ T5063] ? __pfx___mutex_lock+0x10/0x10
[ 62.324693][ T5063] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 62.331200][ T5063] ? _raw_spin_lock_irq+0xdf/0x120
[ 62.336313][ T5063] jffs2_garbage_collect_pass+0xae/0x2120
[ 62.342300][ T5063] ? lockdep_hardirqs_on+0x99/0x150
[ 62.347778][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50
[ 62.353165][ T5063] ? __set_current_blocked+0x310/0x380
[ 62.358740][ T5063] ? __pfx___set_current_blocked+0x10/0x10
[ 62.364559][ T5063] ? schedule+0x90/0x320
[ 62.369016][ T5063] ? schedule+0x155/0x320
[ 62.373709][ T5063] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 62.379949][ T5063] ? schedule_timeout+0x21a/0x310
[ 62.385229][ T5063] ? sigprocmask+0x228/0x280
[ 62.389981][ T5063] ? __pfx_sigprocmask+0x10/0x10
[ 62.395433][ T5063] ? do_raw_spin_unlock+0x13c/0x8b0
[ 62.400832][ T5063] jffs2_garbage_collect_thread+0x651/0x6e0
[ 62.406746][ T5063] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 62.413168][ T5063] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 62.419150][ T5063] ? __kthread_parkme+0x169/0x1d0
[ 62.424180][ T5063] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 62.430946][ T5063] kthread+0x2f0/0x390
[ 62.435107][ T5063] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 62.441602][ T5063] ? __pfx_kthread+0x10/0x10
[ 62.446364][ T5063] ret_from_fork+0x4b/0x80
[ 62.450862][ T5063] ? __pfx_kthread+0x10/0x10
[ 62.455528][ T5063] ret_from_fork_asm+0x1a/0x30
[ 62.460407][ T5063]
[ 62.464096][ T5063] Kernel Offset: disabled
[ 62.468502][ T5063] Rebooting in 86400 seconds..