[ 82.302237][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts.
2024/04/27 10:32:36 ignoring optional flag "sandboxArg"="0"
2024/04/27 10:32:37 parsed 1 programs
2024/04/27 10:32:38 executed programs: 0
[ 89.068997][ T5415] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.130870][ T4469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.140026][ T4469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.148949][ T4469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.158913][ T4469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.167099][ T4469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 89.175682][ T4469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.302507][ T5421] chnl_net:caif_netlink_parms(): no params data found
[ 89.358333][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.365749][ T5421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.373800][ T5421] bridge_slave_0: entered allmulticast mode
[ 89.380748][ T5421] bridge_slave_0: entered promiscuous mode
[ 89.389649][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.397723][ T5421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.405617][ T5421] bridge_slave_1: entered allmulticast mode
[ 89.412890][ T5421] bridge_slave_1: entered promiscuous mode
[ 89.439817][ T5421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.451997][ T5421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.482228][ T5421] team0: Port device team_slave_0 added
[ 89.490034][ T5421] team0: Port device team_slave_1 added
[ 89.514382][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.521794][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.549310][ T5421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.563641][ T5421] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.571295][ T5421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.598063][ T5421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.633633][ T5421] hsr_slave_0: entered promiscuous mode
[ 89.640516][ T5421] hsr_slave_1: entered promiscuous mode
[ 90.187703][ T5421] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.198286][ T5421] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.210559][ T5421] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.223135][ T5421] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.256883][ T5421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.264496][ T5421] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.272140][ T5421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.279404][ T5421] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.302000][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.309860][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.378625][ T5421] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.411881][ T5421] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.427823][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.435429][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.453994][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.461327][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.687903][ T5421] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.737465][ T5421] veth0_vlan: entered promiscuous mode
[ 90.752272][ T5421] veth1_vlan: entered promiscuous mode
[ 90.789719][ T5421] veth0_macvtap: entered promiscuous mode
[ 90.802714][ T5421] veth1_macvtap: entered promiscuous mode
[ 90.827727][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.847222][ T5421] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.866297][ T5421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.877199][ T5421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.888520][ T5421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.898666][ T5421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.998915][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.015322][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.056561][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.066600][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.125232][ T5485] jffs2: notice: (5485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 91.212827][ T5491] jffs2: notice: (5491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 91.238935][ T5487] ==================================================================
[ 91.248088][ T5487] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70
[ 91.256453][ T5487] Read of size 8 at addr ffff88802e586130 by task jffs2_gcd_mtd0/5487
[ 91.261604][ T52] Bluetooth: hci0: command tx timeout
[ 91.264625][ T5487]
[ 91.264636][ T5487] CPU: 1 PID: 5487 Comm: jffs2_gcd_mtd0 Not tainted 6.9.0-rc5-syzkaller-00296-g5eb4573ea63d #0
[ 91.264654][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 91.293791][ T5487] Call Trace:
[ 91.297088][ T5487]
[ 91.300034][ T5487] dump_stack_lvl+0x241/0x360
[ 91.304754][ T5487] ? __pfx_dump_stack_lvl+0x10/0x10
[ 91.310070][ T5487] ? __pfx__printk+0x10/0x10
[ 91.314795][ T5487] ? _printk+0xd5/0x120
[ 91.318989][ T5487] ? __virt_addr_valid+0x183/0x520
[ 91.324202][ T5487] ? __virt_addr_valid+0x183/0x520
[ 91.329431][ T5487] print_report+0x169/0x550
[ 91.333974][ T5487] ? __virt_addr_valid+0x183/0x520
[ 91.339502][ T5487] ? __virt_addr_valid+0x183/0x520
[ 91.345159][ T5487] ? __virt_addr_valid+0x44e/0x520
[ 91.350378][ T5487] ? __phys_addr+0xba/0x170
[ 91.354962][ T5487] ? __mutex_lock+0xfe/0xd70
[ 91.359545][ T5487] kasan_report+0x143/0x180
[ 91.364491][ T5487] ? __mutex_lock+0xfe/0xd70
[ 91.369076][ T5487] __mutex_lock+0xfe/0xd70
[ 91.373487][ T5487] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 91.379569][ T5487] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 91.385032][ T5487] ? __pfx___mutex_lock+0x10/0x10
[ 91.390047][ T5487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 91.396363][ T5487] ? _raw_spin_lock_irq+0xdf/0x120
[ 91.401556][ T5487] jffs2_garbage_collect_pass+0xae/0x2120
[ 91.407266][ T5487] ? lockdep_hardirqs_on+0x99/0x150
[ 91.412547][ T5487] ? _raw_spin_unlock_irq+0x2e/0x50
[ 91.417842][ T5487] ? __set_current_blocked+0x310/0x380
[ 91.423296][ T5487] ? __pfx___set_current_blocked+0x10/0x10
[ 91.429177][ T5487] ? schedule+0x90/0x320
[ 91.433411][ T5487] ? schedule+0x155/0x320
[ 91.437733][ T5487] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 91.443966][ T5487] ? schedule_timeout+0x21a/0x310
[ 91.449092][ T5487] ? sigprocmask+0x228/0x280
[ 91.453710][ T5487] ? __pfx_sigprocmask+0x10/0x10
[ 91.458896][ T5487] ? do_raw_spin_unlock+0x13c/0x8b0
[ 91.464208][ T5487] jffs2_garbage_collect_thread+0x651/0x6e0
[ 91.470301][ T5487] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 91.476823][ T5487] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 91.483085][ T5487] ? __kthread_parkme+0x169/0x1d0
[ 91.488132][ T5487] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 91.494770][ T5487] kthread+0x2f0/0x390
[ 91.498848][ T5487] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 91.505351][ T5487] ? __pfx_kthread+0x10/0x10
[ 91.509936][ T5487] ret_from_fork+0x4b/0x80
[ 91.514575][ T5487] ? __pfx_kthread+0x10/0x10
[ 91.519278][ T5487] ret_from_fork_asm+0x1a/0x30
[ 91.524048][ T5487]
[ 91.527229][ T5487]
[ 91.529653][ T5487] Allocated by task 5485:
[ 91.533975][ T5487] kasan_save_track+0x3f/0x80
[ 91.538758][ T5487] __kasan_kmalloc+0x98/0xb0
[ 91.543514][ T5487] kmalloc_trace+0x1db/0x360
[ 91.548097][ T5487] jffs2_init_fs_context+0x4f/0xc0
[ 91.553291][ T5487] alloc_fs_context+0x68a/0x800
[ 91.558205][ T5487] do_new_mount+0x160/0xb40
[ 91.562696][ T5487] __se_sys_mount+0x2d9/0x3c0
[ 91.567366][ T5487] do_syscall_64+0xf5/0x240
[ 91.571869][ T5487] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.578187][ T5487]
[ 91.580530][ T5487] Freed by task 5421:
[ 91.584540][ T5487] kasan_save_track+0x3f/0x80
[ 91.589579][ T5487] kasan_save_free_info+0x40/0x50
[ 91.594807][ T5487] poison_slab_object+0xa6/0xe0
[ 91.599662][ T5487] __kasan_slab_free+0x37/0x60
[ 91.604414][ T5487] kfree+0x153/0x3a0
[ 91.608303][ T5487] deactivate_locked_super+0xc4/0x130
[ 91.613774][ T5487] cleanup_mnt+0x426/0x4c0
[ 91.618180][ T5487] task_work_run+0x24f/0x310
[ 91.622770][ T5487] syscall_exit_to_user_mode+0x168/0x370
[ 91.628482][ T5487] do_syscall_64+0x102/0x240
[ 91.633068][ T5487] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.638965][ T5487]
[ 91.641388][ T5487] The buggy address belongs to the object at ffff88802e586000
[ 91.641388][ T5487] which belongs to the cache kmalloc-4k of size 4096
[ 91.656069][ T5487] The buggy address is located 304 bytes inside of
[ 91.656069][ T5487] freed 4096-byte region [ffff88802e586000, ffff88802e587000)
[ 91.670343][ T5487]
[ 91.672678][ T5487] The buggy address belongs to the physical page:
[ 91.679077][ T5487] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e580
[ 91.688289][ T5487] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 91.695822][ T5487] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[ 91.704062][ T5487] page_type: 0xffffffff()
[ 91.708466][ T5487] raw: 00fff80000000840 ffff888015042140 dead000000000122 0000000000000000
[ 91.717037][ T5487] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 91.725613][ T5487] head: 00fff80000000840 ffff888015042140 dead000000000122 0000000000000000
[ 91.734532][ T5487] head: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 91.743198][ T5487] head: 00fff80000000003 ffffea0000b96001 ffffea0000b96048 00000000ffffffff
[ 91.751957][ T5487] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[ 91.760786][ T5487] page dumped because: kasan: bad access detected
[ 91.767481][ T5487] page_owner tracks the page as allocated
[ 91.773200][ T5487] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5484, tgid 923884588 (syz-executor.0), ts 5484, free_ts 90905667330
[ 91.795453][ T5487] post_alloc_hook+0x1ea/0x210
[ 91.800231][ T5487] get_page_from_freelist+0x3410/0x35b0
[ 91.805872][ T5487] __alloc_pages+0x256/0x6c0
[ 91.810473][ T5487] alloc_slab_page+0x5f/0x160
[ 91.815233][ T5487] new_slab+0x84/0x2f0
[ 91.819470][ T5487] ___slab_alloc+0xc73/0x1260
[ 91.824332][ T5487] __kmalloc+0x2e5/0x4a0
[ 91.828625][ T5487] tomoyo_realpath_from_path+0xcf/0x5e0
[ 91.834214][ T5487] tomoyo_path_perm+0x2b7/0x740
[ 91.839165][ T5487] tomoyo_path_symlink+0xde/0x120
[ 91.844214][ T5487] security_path_symlink+0xe3/0x140
[ 91.849573][ T5487] do_symlinkat+0x136/0x3a0
[ 91.854155][ T5487] __x64_sys_symlinkat+0x99/0xb0
[ 91.859119][ T5487] do_syscall_64+0xf5/0x240
[ 91.863670][ T5487] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.869563][ T5487] page last free pid 5476 tgid 5476 stack trace:
[ 91.876141][ T5487] free_unref_page_prepare+0x97b/0xaa0
[ 91.881695][ T5487] free_unref_page+0x37/0x3f0
[ 91.886388][ T5487] __put_partials+0xeb/0x130
[ 91.890973][ T5487] put_cpu_partial+0x17c/0x250
[ 91.895727][ T5487] __slab_free+0x2ea/0x3d0
[ 91.900131][ T5487] qlist_free_all+0x5e/0xc0
[ 91.904797][ T5487] kasan_quarantine_reduce+0x14f/0x170
[ 91.910339][ T5487] __kasan_slab_alloc+0x23/0x80
[ 91.915185][ T5487] __kmalloc+0x1e2/0x4a0
[ 91.919423][ T5487] tomoyo_realpath_from_path+0xcf/0x5e0
[ 91.924967][ T5487] tomoyo_path_perm+0x2b7/0x740
[ 91.929912][ T5487] security_inode_getattr+0xd8/0x130
[ 91.935187][ T5487] vfs_getattr+0x45/0x430
[ 91.939509][ T5487] vfs_fstatat+0xd6/0x190
[ 91.943844][ T5487] __x64_sys_newfstatat+0x117/0x190
[ 91.949127][ T5487] do_syscall_64+0xf5/0x240
[ 91.953629][ T5487]
[ 91.956133][ T5487] Memory state around the buggy address:
[ 91.962020][ T5487] ffff88802e586000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.970590][ T5487] ffff88802e586080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.978678][ T5487] >ffff88802e586100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.987275][ T5487] ^
[ 91.993209][ T5487] ffff88802e586180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 92.001359][ T5487] ffff88802e586200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 92.009505][ T5487] ==================================================================
[ 92.141302][ T5504] jffs2: notice: (5504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 92.167724][ T5487] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 92.175013][ T5487] CPU: 0 PID: 5487 Comm: jffs2_gcd_mtd0 Not tainted 6.9.0-rc5-syzkaller-00296-g5eb4573ea63d #0
[ 92.185731][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 92.196254][ T5487] Call Trace:
[ 92.199732][ T5487]
[ 92.202782][ T5487] dump_stack_lvl+0x241/0x360
[ 92.207676][ T5487] ? __pfx_dump_stack_lvl+0x10/0x10
[ 92.213174][ T5487] ? __pfx__printk+0x10/0x10
[ 92.217801][ T5487] ? preempt_schedule+0xe1/0xf0
[ 92.222704][ T5487] ? vscnprintf+0x5d/0x90
[ 92.227069][ T5487] panic+0x349/0x860
[ 92.230995][ T5487] ? check_panic_on_warn+0x21/0xb0
[ 92.236239][ T5487] ? __pfx_panic+0x10/0x10
[ 92.240688][ T5487] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 92.247073][ T5487] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 92.253615][ T5487] ? print_report+0x502/0x550
[ 92.258419][ T5487] check_panic_on_warn+0x86/0xb0
[ 92.263675][ T5487] ? __mutex_lock+0xfe/0xd70
[ 92.268381][ T5487] end_report+0x77/0x160
[ 92.272659][ T5487] kasan_report+0x154/0x180
[ 92.277189][ T5487] ? __mutex_lock+0xfe/0xd70
[ 92.281801][ T5487] __mutex_lock+0xfe/0xd70
[ 92.286239][ T5487] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 92.292160][ T5487] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 92.297655][ T5487] ? __pfx___mutex_lock+0x10/0x10
[ 92.304106][ T5487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 92.310598][ T5487] ? _raw_spin_lock_irq+0xdf/0x120
[ 92.315859][ T5487] jffs2_garbage_collect_pass+0xae/0x2120
[ 92.321709][ T5487] ? lockdep_hardirqs_on+0x99/0x150
[ 92.327127][ T5487] ? _raw_spin_unlock_irq+0x2e/0x50
[ 92.332544][ T5487] ? __set_current_blocked+0x310/0x380
[ 92.338221][ T5487] ? __pfx___set_current_blocked+0x10/0x10
[ 92.344412][ T5487] ? schedule+0x90/0x320
[ 92.348782][ T5487] ? schedule+0x155/0x320
[ 92.353168][ T5487] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 92.359702][ T5487] ? schedule_timeout+0x21a/0x310
[ 92.364865][ T5487] ? sigprocmask+0x228/0x280
[ 92.369784][ T5487] ? __pfx_sigprocmask+0x10/0x10
[ 92.375336][ T5487] ? do_raw_spin_unlock+0x13c/0x8b0
[ 92.380715][ T5487] jffs2_garbage_collect_thread+0x651/0x6e0
[ 92.386834][ T5487] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 92.393817][ T5487] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 92.400723][ T5487] ? __kthread_parkme+0x169/0x1d0
[ 92.405964][ T5487] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 92.412439][ T5487] kthread+0x2f0/0x390
[ 92.416821][ T5487] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 92.423372][ T5487] ? __pfx_kthread+0x10/0x10
[ 92.428052][ T5487] ret_from_fork+0x4b/0x80
[ 92.432592][ T5487] ? __pfx_kthread+0x10/0x10
[ 92.437211][ T5487] ret_from_fork_asm+0x1a/0x30
[ 92.442032][ T5487]
[ 92.445475][ T5487] Kernel Offset: disabled
[ 92.449972][ T5487] Rebooting in 86400 seconds..