Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts.
2025/03/04 06:54:14 ignoring optional flag "sandboxArg"="0"
2025/03/04 06:54:14 ignoring optional flag "type"="gce"
2025/03/04 06:54:15 parsed 1 programs
[ 81.991319][ T908] cfg80211: failed to load regulatory.db
2025/03/04 06:54:16 executed programs: 0
[ 82.760017][ T6117] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.805436][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.814244][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.823172][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.831391][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.839110][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.846626][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.938941][ T6124] chnl_net:caif_netlink_parms(): no params data found
[ 82.982575][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.989957][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.997119][ T6124] bridge_slave_0: entered allmulticast mode
[ 83.004103][ T6124] bridge_slave_0: entered promiscuous mode
[ 83.011722][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.018844][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.026420][ T6124] bridge_slave_1: entered allmulticast mode
[ 83.033742][ T6124] bridge_slave_1: entered promiscuous mode
[ 83.054758][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.065630][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.089722][ T6124] team0: Port device team_slave_0 added
[ 83.096854][ T6124] team0: Port device team_slave_1 added
[ 83.116072][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.123430][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.149578][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.161632][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.168683][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.195514][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.225204][ T6124] hsr_slave_0: entered promiscuous mode
[ 83.231757][ T6124] hsr_slave_1: entered promiscuous mode
[ 83.777795][ T6124] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.790394][ T6124] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.801687][ T6124] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.813743][ T6124] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.843599][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.850784][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.858330][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.865520][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.917054][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.932719][ T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.943028][ T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.962244][ T6124] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.976976][ T73] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.984152][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.013544][ T73] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.020716][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.047046][ T6124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 84.063092][ T6124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 84.216028][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.251499][ T6124] veth0_vlan: entered promiscuous mode
[ 84.266577][ T6124] veth1_vlan: entered promiscuous mode
[ 84.296191][ T6124] veth0_macvtap: entered promiscuous mode
[ 84.306504][ T6124] veth1_macvtap: entered promiscuous mode
[ 84.327919][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.344649][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.357608][ T6124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.367183][ T6124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.377668][ T6124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.387220][ T6124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.454969][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.465769][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.492537][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.502921][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.586152][ T6193] jffs2: notice: (6193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 84.668216][ T6200] jffs2: notice: (6200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 84.686806][ T6195] ==================================================================
[ 84.694902][ T6195] BUG: KASAN: slab-use-after-free in __mutex_lock+0x163/0x1010
[ 84.702480][ T6195] Read of size 8 at addr ffff888069a26130 by task jffs2_gcd_mtd0/6195
[ 84.710615][ T6195]
[ 84.712971][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: jffs2_gcd_mtd0 Not tainted 6.14.0-rc5-syzkaller-g99fa936e8e4f #0
[ 84.712986][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 84.712997][ T6195] Call Trace:
[ 84.713003][ T6195]
[ 84.713009][ T6195] dump_stack_lvl+0x241/0x360
[ 84.713026][ T6195] ? __pfx_dump_stack_lvl+0x10/0x10
[ 84.713038][ T6195] ? __pfx__printk+0x10/0x10
[ 84.713056][ T6195] ? _printk+0xd5/0x120
[ 84.713072][ T6195] ? __virt_addr_valid+0x183/0x530
[ 84.713090][ T6195] ? __virt_addr_valid+0x183/0x530
[ 84.713107][ T6195] print_report+0x16e/0x5b0
[ 84.713124][ T6195] ? __virt_addr_valid+0x183/0x530
[ 84.713139][ T6195] ? __virt_addr_valid+0x183/0x530
[ 84.713155][ T6195] ? __virt_addr_valid+0x45f/0x530
[ 84.713171][ T6195] ? __phys_addr+0xba/0x170
[ 84.713188][ T6195] ? __mutex_lock+0x163/0x1010
[ 84.713203][ T6195] kasan_report+0x143/0x180
[ 84.713220][ T6195] ? __mutex_lock+0x163/0x1010
[ 84.713237][ T6195] __mutex_lock+0x163/0x1010
[ 84.713256][ T6195] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 84.713276][ T6195] ? __pfx___mutex_lock+0x10/0x10
[ 84.713294][ T6195] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 84.713311][ T6195] ? _raw_spin_lock_irq+0xdf/0x120
[ 84.713327][ T6195] jffs2_garbage_collect_pass+0xae/0x2120
[ 84.713341][ T6195] ? lockdep_hardirqs_on+0x99/0x150
[ 84.713357][ T6195] ? _raw_spin_unlock_irq+0x2e/0x50
[ 84.713369][ T6195] ? __set_current_blocked+0x310/0x380
[ 84.713385][ T6195] ? __pfx___set_current_blocked+0x10/0x10
[ 84.713398][ T6195] ? schedule+0x90/0x320
[ 84.713410][ T6195] ? schedule+0x155/0x320
[ 84.713423][ T6195] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 84.713438][ T6195] ? schedule_timeout+0x1ad/0x290
[ 84.713451][ T6195] ? sigprocmask+0x228/0x280
[ 84.713464][ T6195] ? __pfx_sigprocmask+0x10/0x10
[ 84.713476][ T6195] ? do_raw_spin_unlock+0x13c/0x8b0
[ 84.713492][ T6195] jffs2_garbage_collect_thread+0x64b/0x6e0
[ 84.713510][ T6195] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 84.713527][ T6195] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 84.713542][ T6195] ? __kthread_parkme+0x169/0x1d0
[ 84.713558][ T6195] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 84.713573][ T6195] kthread+0x7a9/0x920
[ 84.713588][ T6195] ? __pfx_kthread+0x10/0x10
[ 84.713604][ T6195] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 84.713620][ T6195] ? __pfx_kthread+0x10/0x10
[ 84.713635][ T6195] ? __pfx_kthread+0x10/0x10
[ 84.713651][ T6195] ? __pfx_kthread+0x10/0x10
[ 84.713666][ T6195] ? _raw_spin_unlock_irq+0x23/0x50
[ 84.713679][ T6195] ? lockdep_hardirqs_on+0x99/0x150
[ 84.713693][ T6195] ? __pfx_kthread+0x10/0x10
[ 84.713709][ T6195] ret_from_fork+0x4b/0x80
[ 84.713723][ T6195] ? __pfx_kthread+0x10/0x10
[ 84.713739][ T6195] ret_from_fork_asm+0x1a/0x30
[ 84.713756][ T6195]
[ 84.713761][ T6195]
[ 84.988825][ T6195] Allocated by task 6193:
[ 84.993140][ T6195] kasan_save_track+0x3f/0x80
[ 84.997814][ T6195] __kasan_kmalloc+0x98/0xb0
[ 85.002503][ T6195] __kmalloc_cache_noprof+0x243/0x390
[ 85.007860][ T6195] jffs2_init_fs_context+0x4f/0xc0
[ 85.013052][ T6195] alloc_fs_context+0x68a/0x800
[ 85.017891][ T6195] do_new_mount+0x160/0xb40
[ 85.022390][ T6195] __se_sys_mount+0x2d6/0x3c0
[ 85.027054][ T6195] do_syscall_64+0xf3/0x230
[ 85.031549][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.037436][ T6195]
[ 85.039745][ T6195] Freed by task 6124:
[ 85.043705][ T6195] kasan_save_track+0x3f/0x80
[ 85.048375][ T6195] kasan_save_free_info+0x40/0x50
[ 85.053478][ T6195] __kasan_slab_free+0x59/0x70
[ 85.058231][ T6195] kfree+0x196/0x430
[ 85.062119][ T6195] deactivate_locked_super+0xc4/0x130
[ 85.067478][ T6195] cleanup_mnt+0x41f/0x4b0
[ 85.071878][ T6195] task_work_run+0x24f/0x310
[ 85.076462][ T6195] syscall_exit_to_user_mode+0x13f/0x340
[ 85.082089][ T6195] do_syscall_64+0x100/0x230
[ 85.086673][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.092559][ T6195]
[ 85.094900][ T6195] The buggy address belongs to the object at ffff888069a26000
[ 85.094900][ T6195] which belongs to the cache kmalloc-4k of size 4096
[ 85.109053][ T6195] The buggy address is located 304 bytes inside of
[ 85.109053][ T6195] freed 4096-byte region [ffff888069a26000, ffff888069a27000)
[ 85.122927][ T6195]
[ 85.125242][ T6195] The buggy address belongs to the physical page:
[ 85.131756][ T6195] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69a20
[ 85.140791][ T6195] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 85.149280][ T6195] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 85.156823][ T6195] page_type: f5(slab)
[ 85.160795][ T6195] raw: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000
[ 85.169451][ T6195] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 85.178117][ T6195] head: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000
[ 85.186806][ T6195] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 85.195474][ T6195] head: 00fff00000000003 ffffea0001a68801 ffffffffffffffff 0000000000000000
[ 85.204147][ T6195] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 85.212812][ T6195] page dumped because: kasan: bad access detected
[ 85.219252][ T6195] page_owner tracks the page as allocated
[ 85.224956][ T6195] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6191, tgid 6191 (syz-executor.0), ts 84581765209, free_ts 84320554960
[ 85.245713][ T6195] post_alloc_hook+0x1f4/0x240
[ 85.250596][ T6195] get_page_from_freelist+0x3651/0x37a0
[ 85.256247][ T6195] __alloc_frozen_pages_noprof+0x292/0x710
[ 85.262065][ T6195] alloc_pages_mpol+0x311/0x660
[ 85.266931][ T6195] allocate_slab+0x8f/0x3a0
[ 85.271460][ T6195] ___slab_alloc+0xc27/0x14a0
[ 85.276135][ T6195] __slab_alloc+0x58/0xa0
[ 85.280459][ T6195] __kmalloc_noprof+0x2e6/0x4c0
[ 85.285302][ T6195] tomoyo_realpath_from_path+0xcf/0x5e0
[ 85.290839][ T6195] tomoyo_path_perm+0x2c0/0x610
[ 85.295685][ T6195] tomoyo_path_symlink+0xde/0x120
[ 85.300699][ T6195] security_path_symlink+0x16f/0x370
[ 85.305970][ T6195] do_symlinkat+0x136/0x3a0
[ 85.310547][ T6195] __x64_sys_symlinkat+0x95/0xb0
[ 85.315487][ T6195] do_syscall_64+0xf3/0x230
[ 85.319979][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.325866][ T6195] page last free pid 6182 tgid 6182 stack trace:
[ 85.332201][ T6195] free_frozen_pages+0xe04/0x10e0
[ 85.337230][ T6195] __put_partials+0x160/0x1c0
[ 85.341905][ T6195] put_cpu_partial+0x17c/0x250
[ 85.346835][ T6195] __slab_free+0x290/0x380
[ 85.351504][ T6195] qlist_free_all+0x9a/0x140
[ 85.356084][ T6195] kasan_quarantine_reduce+0x14f/0x170
[ 85.361550][ T6195] __kasan_slab_alloc+0x23/0x80
[ 85.366397][ T6195] __kmalloc_noprof+0x236/0x4c0
[ 85.371237][ T6195] tomoyo_realpath_from_path+0xcf/0x5e0
[ 85.376778][ T6195] tomoyo_path_perm+0x2c0/0x610
[ 85.381627][ T6195] security_inode_getattr+0x130/0x330
[ 85.386995][ T6195] vfs_fstatat+0xa3/0x150
[ 85.391319][ T6195] __x64_sys_newfstatat+0x11d/0x1a0
[ 85.396515][ T6195] do_syscall_64+0xf3/0x230
[ 85.401014][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.406910][ T6195]
[ 85.409221][ T6195] Memory state around the buggy address:
[ 85.414834][ T6195] ffff888069a26000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.422969][ T6195] ffff888069a26080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.431020][ T6195] >ffff888069a26100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.439070][ T6195] ^
[ 85.444776][ T6195] ffff888069a26180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.452912][ T6195] ffff888069a26200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.460969][ T6195] ==================================================================
[ 85.489077][ T6195] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.496332][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: jffs2_gcd_mtd0 Not tainted 6.14.0-rc5-syzkaller-g99fa936e8e4f #0
[ 85.506933][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 85.517002][ T6195] Call Trace:
[ 85.520303][ T6195]
[ 85.523247][ T6195] dump_stack_lvl+0x241/0x360
[ 85.527944][ T6195] ? __pfx_dump_stack_lvl+0x10/0x10
[ 85.533252][ T6195] ? __pfx__printk+0x10/0x10
[ 85.537883][ T6195] ? preempt_schedule+0xe1/0xf0
[ 85.542846][ T6195] ? vscnprintf+0x5d/0x90
[ 85.547205][ T6195] panic+0x349/0x880
[ 85.551218][ T6195] ? check_panic_on_warn+0x21/0xb0
[ 85.556356][ T6195] ? __pfx_panic+0x10/0x10
[ 85.560804][ T6195] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 85.566810][ T6195] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 85.573171][ T6195] ? print_report+0x519/0x5b0
[ 85.577923][ T6195] check_panic_on_warn+0x86/0xb0
[ 85.583135][ T6195] ? __mutex_lock+0x163/0x1010
[ 85.588039][ T6195] end_report+0x77/0x160
[ 85.592311][ T6195] kasan_report+0x154/0x180
[ 85.596894][ T6195] ? __mutex_lock+0x163/0x1010
[ 85.601871][ T6195] __mutex_lock+0x163/0x1010
[ 85.606634][ T6195] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 85.612553][ T6195] ? __pfx___mutex_lock+0x10/0x10
[ 85.617608][ T6195] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 85.623941][ T6195] ? _raw_spin_lock_irq+0xdf/0x120
[ 85.629067][ T6195] jffs2_garbage_collect_pass+0xae/0x2120
[ 85.634804][ T6195] ? lockdep_hardirqs_on+0x99/0x150
[ 85.640113][ T6195] ? _raw_spin_unlock_irq+0x2e/0x50
[ 85.645340][ T6195] ? __set_current_blocked+0x310/0x380
[ 85.650817][ T6195] ? __pfx___set_current_blocked+0x10/0x10
[ 85.656643][ T6195] ? schedule+0x90/0x320
[ 85.660907][ T6195] ? schedule+0x155/0x320
[ 85.665232][ T6195] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 85.671475][ T6195] ? schedule_timeout+0x1ad/0x290
[ 85.676490][ T6195] ? sigprocmask+0x228/0x280
[ 85.681071][ T6195] ? __pfx_sigprocmask+0x10/0x10
[ 85.685999][ T6195] ? do_raw_spin_unlock+0x13c/0x8b0
[ 85.691189][ T6195] jffs2_garbage_collect_thread+0x64b/0x6e0
[ 85.697074][ T6195] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 85.703477][ T6195] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 85.709368][ T6195] ? __kthread_parkme+0x169/0x1d0
[ 85.714386][ T6195] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 85.720793][ T6195] kthread+0x7a9/0x920
[ 85.724853][ T6195] ? __pfx_kthread+0x10/0x10
[ 85.729433][ T6195] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 85.736099][ T6195] ? __pfx_kthread+0x10/0x10
[ 85.740682][ T6195] ? __pfx_kthread+0x10/0x10
[ 85.745295][ T6195] ? __pfx_kthread+0x10/0x10
[ 85.749966][ T6195] ? _raw_spin_unlock_irq+0x23/0x50
[ 85.755152][ T6195] ? lockdep_hardirqs_on+0x99/0x150
[ 85.760340][ T6195] ? __pfx_kthread+0x10/0x10
[ 85.764945][ T6195] ret_from_fork+0x4b/0x80
[ 85.769354][ T6195] ? __pfx_kthread+0x10/0x10
[ 85.773937][ T6195] ret_from_fork_asm+0x1a/0x30
[ 85.778704][ T6195]
[ 85.782001][ T6195] Kernel Offset: disabled
[ 85.786315][ T6195] Rebooting in 86400 seconds..