[ 76.979601][ T24] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts.
2024/04/22 05:45:32 ignoring optional flag "sandboxArg"="0"
2024/04/22 05:45:32 parsed 1 programs
2024/04/22 05:45:33 executed programs: 0
[ 83.941245][ T5422] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 83.995269][ T4475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.004935][ T4475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.012898][ T4475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.022672][ T4475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.031512][ T4475] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 84.039095][ T4475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 84.159583][ T5428] chnl_net:caif_netlink_parms(): no params data found
[ 84.212149][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.220343][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.227572][ T5428] bridge_slave_0: entered allmulticast mode
[ 84.235172][ T5428] bridge_slave_0: entered promiscuous mode
[ 84.243057][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.251050][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.258590][ T5428] bridge_slave_1: entered allmulticast mode
[ 84.265377][ T5428] bridge_slave_1: entered promiscuous mode
[ 84.290217][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.302867][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.331164][ T5428] team0: Port device team_slave_0 added
[ 84.340512][ T5428] team0: Port device team_slave_1 added
[ 84.363049][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.370622][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.398414][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.411342][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.418859][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.445844][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.483424][ T5428] hsr_slave_0: entered promiscuous mode
[ 84.490315][ T5428] hsr_slave_1: entered promiscuous mode
[ 85.025772][ T5428] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.037764][ T5428] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.051926][ T5428] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.064134][ T5428] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.096493][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.103897][ T5428] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.111523][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.118828][ T5428] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.138991][ T783] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.148349][ T783] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.226963][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.252166][ T5428] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.272039][ T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.280041][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.317068][ T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.324465][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.542212][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.596968][ T5428] veth0_vlan: entered promiscuous mode
[ 85.615458][ T5428] veth1_vlan: entered promiscuous mode
[ 85.656410][ T5428] veth0_macvtap: entered promiscuous mode
[ 85.667284][ T5428] veth1_macvtap: entered promiscuous mode
[ 85.692999][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.712498][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.726319][ T5428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.739954][ T5428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.753232][ T5428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.762806][ T5428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.849909][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.857764][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.899311][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.907194][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.996339][ T5492] loop0: detected capacity change from 0 to 2048
[ 86.014205][ T5492] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 86.054846][ T5492] jffs2: notice: (5492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 86.100322][ T4475] Bluetooth: hci0: command tx timeout
[ 86.162908][ T5499] loop0: detected capacity change from 0 to 2048
[ 86.172596][ T5495] ==================================================================
[ 86.180714][ T5495] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70
[ 86.188415][ T5495] Read of size 8 at addr ffff88802f3a8130 by task jffs2_gcd_mtd0/5495
[ 86.196673][ T5495]
[ 86.199194][ T5495] CPU: 0 PID: 5495 Comm: jffs2_gcd_mtd0 Not tainted 6.9.0-rc5-syzkaller-ged30a4a51bb1-dirty #0
[ 86.209543][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 86.219711][ T5495] Call Trace:
[ 86.223010][ T5495]
[ 86.227864][ T5495] dump_stack_lvl+0x241/0x360
[ 86.232830][ T5495] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.234381][ T5499] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 86.238049][ T5495] ? __pfx__printk+0x10/0x10
[ 86.238076][ T5495] ? _printk+0xd5/0x120
[ 86.238095][ T5495] ? __virt_addr_valid+0x183/0x520
[ 86.261706][ T5495] ? __virt_addr_valid+0x183/0x520
[ 86.266942][ T5495] print_report+0x169/0x550
[ 86.271574][ T5495] ? __virt_addr_valid+0x183/0x520
[ 86.276728][ T5495] ? __virt_addr_valid+0x183/0x520
[ 86.282010][ T5495] ? __virt_addr_valid+0x44e/0x520
[ 86.287223][ T5495] ? __phys_addr+0xba/0x170
[ 86.291840][ T5495] ? __mutex_lock+0xfe/0xd70
[ 86.296611][ T5495] kasan_report+0x143/0x180
[ 86.301116][ T5495] ? __mutex_lock+0xfe/0xd70
[ 86.305738][ T5495] __mutex_lock+0xfe/0xd70
[ 86.310169][ T5495] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 86.316058][ T5495] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 86.321427][ T5495] ? __pfx___mutex_lock+0x10/0x10
[ 86.326470][ T5495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 86.332995][ T5495] ? _raw_spin_lock_irq+0xdf/0x120
[ 86.338116][ T5495] jffs2_garbage_collect_pass+0xae/0x2120
[ 86.343845][ T5495] ? lockdep_hardirqs_on+0x99/0x150
[ 86.349040][ T5495] ? _raw_spin_unlock_irq+0x2e/0x50
[ 86.354227][ T5495] ? __set_current_blocked+0x310/0x380
[ 86.359698][ T5495] ? __pfx___set_current_blocked+0x10/0x10
[ 86.365513][ T5495] ? schedule+0x90/0x320
[ 86.370042][ T5495] ? schedule+0x155/0x320
[ 86.374385][ T5495] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 86.381151][ T5495] ? schedule_timeout+0x21a/0x310
[ 86.386378][ T5495] ? sigprocmask+0x228/0x280
[ 86.390984][ T5495] ? __pfx_sigprocmask+0x10/0x10
[ 86.395946][ T5495] ? do_raw_spin_unlock+0x13c/0x8b0
[ 86.402236][ T5495] jffs2_garbage_collect_thread+0x651/0x6e0
[ 86.408511][ T5495] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 86.415192][ T5495] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 86.421172][ T5495] ? __kthread_parkme+0x169/0x1d0
[ 86.426363][ T5495] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 86.432901][ T5495] kthread+0x2f0/0x390
[ 86.437076][ T5495] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 86.443676][ T5495] ? __pfx_kthread+0x10/0x10
[ 86.448264][ T5495] ret_from_fork+0x4b/0x80
[ 86.452782][ T5495] ? __pfx_kthread+0x10/0x10
[ 86.457378][ T5495] ret_from_fork_asm+0x1a/0x30
[ 86.462147][ T5495]
[ 86.465154][ T5495]
[ 86.467481][ T5495] Allocated by task 5492:
[ 86.471901][ T5495] kasan_save_track+0x3f/0x80
[ 86.477103][ T5495] __kasan_kmalloc+0x98/0xb0
[ 86.481862][ T5495] kmalloc_trace+0x1db/0x360
[ 86.486617][ T5495] jffs2_init_fs_context+0x4f/0xc0
[ 86.491896][ T5495] alloc_fs_context+0x68a/0x800
[ 86.497089][ T5495] do_new_mount+0x160/0xb40
[ 86.501590][ T5495] __se_sys_mount+0x2d9/0x3c0
[ 86.506353][ T5495] do_syscall_64+0xf5/0x240
[ 86.510846][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.516898][ T5495]
[ 86.519215][ T5495] Freed by task 5428:
[ 86.523186][ T5495] kasan_save_track+0x3f/0x80
[ 86.528919][ T5495] kasan_save_free_info+0x40/0x50
[ 86.533979][ T5495] poison_slab_object+0xa6/0xe0
[ 86.539017][ T5495] __kasan_slab_free+0x37/0x60
[ 86.543784][ T5495] kfree+0x153/0x3a0
[ 86.547671][ T5495] deactivate_locked_super+0xc4/0x130
[ 86.553048][ T5495] cleanup_mnt+0x426/0x4c0
[ 86.557477][ T5495] task_work_run+0x24f/0x310
[ 86.562162][ T5495] syscall_exit_to_user_mode+0x168/0x370
[ 86.567793][ T5495] do_syscall_64+0x102/0x240
[ 86.572380][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.578360][ T5495]
[ 86.580682][ T5495] The buggy address belongs to the object at ffff88802f3a8000
[ 86.580682][ T5495] which belongs to the cache kmalloc-4k of size 4096
[ 86.594980][ T5495] The buggy address is located 304 bytes inside of
[ 86.594980][ T5495] freed 4096-byte region [ffff88802f3a8000, ffff88802f3a9000)
[ 86.608935][ T5495]
[ 86.611246][ T5495] The buggy address belongs to the physical page:
[ 86.617643][ T5495] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f3a8
[ 86.626476][ T5495] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 86.634030][ T5495] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[ 86.642177][ T5495] page_type: 0xffffffff()
[ 86.646501][ T5495] raw: 00fff80000000840 ffff888015042140 dead000000000100 dead000000000122
[ 86.655071][ T5495] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 86.663646][ T5495] head: 00fff80000000840 ffff888015042140 dead000000000100 dead000000000122
[ 86.672478][ T5495] head: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 86.681142][ T5495] head: 00fff80000000003 ffffea0000bcea01 ffffea0000bcea48 00000000ffffffff
[ 86.689804][ T5495] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[ 86.698460][ T5495] page dumped because: kasan: bad access detected
[ 86.704859][ T5495] page_owner tracks the page as allocated
[ 86.710572][ T5495] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4825, tgid 890569257 (dhcpcd), ts 4825, free_ts 35233298414
[ 86.730534][ T5495] post_alloc_hook+0x1ea/0x210
[ 86.735293][ T5495] get_page_from_freelist+0x3410/0x35b0
[ 86.740910][ T5495] __alloc_pages+0x256/0x6c0
[ 86.745488][ T5495] alloc_slab_page+0x5f/0x160
[ 86.750157][ T5495] new_slab+0x84/0x2f0
[ 86.754298][ T5495] ___slab_alloc+0xc73/0x1260
[ 86.758960][ T5495] kmalloc_trace+0x269/0x360
[ 86.763536][ T5495] tomoyo_find_next_domain+0x15b/0x1cf0
[ 86.769157][ T5495] tomoyo_bprm_check_security+0x115/0x180
[ 86.774956][ T5495] security_bprm_check+0x65/0x90
[ 86.779891][ T5495] bprm_execve+0xa56/0x17c0
[ 86.784385][ T5495] do_execveat_common+0x553/0x700
[ 86.789397][ T5495] __x64_sys_execve+0x92/0xb0
[ 86.794061][ T5495] do_syscall_64+0xf5/0x240
[ 86.798569][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.804452][ T5495] page last free pid 4743 tgid 4743 stack trace:
[ 86.810854][ T5495] free_unref_page_prepare+0x97b/0xaa0
[ 86.816391][ T5495] free_unref_page+0x37/0x3f0
[ 86.821071][ T5495] __put_partials+0xeb/0x130
[ 86.825647][ T5495] put_cpu_partial+0x17c/0x250
[ 86.830403][ T5495] __slab_free+0x2ea/0x3d0
[ 86.834807][ T5495] qlist_free_all+0x5e/0xc0
[ 86.839300][ T5495] kasan_quarantine_reduce+0x14f/0x170
[ 86.844749][ T5495] __kasan_slab_alloc+0x23/0x80
[ 86.849608][ T5495] kmem_cache_alloc_node+0x194/0x380
[ 86.854885][ T5495] __alloc_skb+0x1c3/0x440
[ 86.859375][ T5495] netlink_ack+0x399/0x12b0
[ 86.863871][ T5495] netlink_rcv_skb+0x262/0x430
[ 86.868632][ T5495] genl_rcv+0x28/0x40
[ 86.872605][ T5495] netlink_unicast+0x7ea/0x980
[ 86.877383][ T5495] netlink_sendmsg+0x8e1/0xcb0
[ 86.882147][ T5495] __sock_sendmsg+0x221/0x270
[ 86.886815][ T5495]
[ 86.889127][ T5495] Memory state around the buggy address:
[ 86.894741][ T5495] ffff88802f3a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.902787][ T5495] ffff88802f3a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.910919][ T5495] >ffff88802f3a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.918982][ T5495] ^
[ 86.924608][ T5495] ffff88802f3a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.932772][ T5495] ffff88802f3a8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.940854][ T5495] ==================================================================
[ 86.990034][ T5495] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 86.997366][ T5495] CPU: 0 PID: 5495 Comm: jffs2_gcd_mtd0 Not tainted 6.9.0-rc5-syzkaller-ged30a4a51bb1-dirty #0
[ 87.007711][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 87.017791][ T5495] Call Trace:
[ 87.021086][ T5495]
[ 87.024046][ T5495] dump_stack_lvl+0x241/0x360
[ 87.028856][ T5495] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.034086][ T5495] ? __pfx__printk+0x10/0x10
[ 87.038710][ T5495] ? preempt_schedule+0xe1/0xf0
[ 87.043591][ T5495] ? vscnprintf+0x5d/0x90
[ 87.047948][ T5495] panic+0x349/0x860
[ 87.052049][ T5495] ? check_panic_on_warn+0x21/0xb0
[ 87.057285][ T5495] ? __pfx_panic+0x10/0x10
[ 87.061742][ T5495] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 87.067760][ T5495] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 87.074220][ T5495] ? print_report+0x502/0x550
[ 87.078991][ T5495] check_panic_on_warn+0x86/0xb0
[ 87.085133][ T5495] ? __mutex_lock+0xfe/0xd70
[ 87.089765][ T5495] end_report+0x77/0x160
[ 87.094042][ T5495] kasan_report+0x154/0x180
[ 87.098582][ T5495] ? __mutex_lock+0xfe/0xd70
[ 87.103312][ T5495] __mutex_lock+0xfe/0xd70
[ 87.108026][ T5495] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 87.113946][ T5495] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 87.119356][ T5495] ? __pfx___mutex_lock+0x10/0x10
[ 87.124597][ T5495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 87.131043][ T5495] ? _raw_spin_lock_irq+0xdf/0x120
[ 87.136310][ T5495] jffs2_garbage_collect_pass+0xae/0x2120
[ 87.142061][ T5495] ? lockdep_hardirqs_on+0x99/0x150
[ 87.147292][ T5495] ? _raw_spin_unlock_irq+0x2e/0x50
[ 87.152610][ T5495] ? __set_current_blocked+0x310/0x380
[ 87.158126][ T5495] ? __pfx___set_current_blocked+0x10/0x10
[ 87.164134][ T5495] ? schedule+0x90/0x320
[ 87.168597][ T5495] ? schedule+0x155/0x320
[ 87.173099][ T5495] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 87.179635][ T5495] ? schedule_timeout+0x21a/0x310
[ 87.184891][ T5495] ? sigprocmask+0x228/0x280
[ 87.189519][ T5495] ? __pfx_sigprocmask+0x10/0x10
[ 87.194664][ T5495] ? do_raw_spin_unlock+0x13c/0x8b0
[ 87.199906][ T5495] jffs2_garbage_collect_thread+0x651/0x6e0
[ 87.206104][ T5495] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 87.212557][ T5495] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 87.218484][ T5495] ? __kthread_parkme+0x169/0x1d0
[ 87.223544][ T5495] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 87.230337][ T5495] kthread+0x2f0/0x390
[ 87.234454][ T5495] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 87.242289][ T5495] ? __pfx_kthread+0x10/0x10
[ 87.246911][ T5495] ret_from_fork+0x4b/0x80
[ 87.251364][ T5495] ? __pfx_kthread+0x10/0x10
[ 87.255983][ T5495] ret_from_fork_asm+0x1a/0x30
[ 87.260783][ T5495]
[ 87.264358][ T5495] Kernel Offset: disabled
[ 87.268697][ T5495] Rebooting in 86400 seconds..