[   82.169213][    T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts.
2024/04/22 05:22:21 ignoring optional flag "sandboxArg"="0"
2024/04/22 05:22:21 parsed 1 programs
2024/04/22 05:22:23 executed programs: 0
[   87.210226][ T5422] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.265982][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.274866][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.282922][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.291777][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.299720][   T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.307050][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.419623][ T5428] chnl_net:caif_netlink_parms(): no params data found
[   87.471764][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.480400][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.488045][ T5428] bridge_slave_0: entered allmulticast mode
[   87.494873][ T5428] bridge_slave_0: entered promiscuous mode
[   87.504136][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.511838][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.519810][ T5428] bridge_slave_1: entered allmulticast mode
[   87.526647][ T5428] bridge_slave_1: entered promiscuous mode
[   87.550835][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.562495][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.590501][ T5428] team0: Port device team_slave_0 added
[   87.599448][ T5428] team0: Port device team_slave_1 added
[   87.621036][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.628293][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.656694][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.669052][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.676151][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.703040][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.740109][ T5428] hsr_slave_0: entered promiscuous mode
[   87.746345][ T5428] hsr_slave_1: entered promiscuous mode
[   88.285606][ T5428] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.301333][ T5428] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.313413][ T5428] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.325669][ T5428] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.358209][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.365398][ T5428] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.373002][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.380306][ T5428] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.409039][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.416909][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.496782][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.520988][ T5428] 8021q: adding VLAN 0 to HW filter on device team0
[   88.533889][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.541207][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.561826][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.569052][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.794091][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.849407][ T5428] veth0_vlan: entered promiscuous mode
[   88.865888][ T5428] veth1_vlan: entered promiscuous mode
[   88.908879][ T5428] veth0_macvtap: entered promiscuous mode
[   88.922677][ T5428] veth1_macvtap: entered promiscuous mode
[   88.948438][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.966731][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.985383][ T5428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.995752][ T5428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.006301][ T5428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.017598][ T5428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.120855][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.142993][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.177845][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.185728][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.293360][ T5495] loop0: detected capacity change from 0 to 2048
[   89.317430][ T5495] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   89.366010][ T5495] jffs2: notice: (5495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   89.384381][   T52] Bluetooth: hci0: command tx timeout
[   89.484777][ T5501] ==================================================================
[   89.493594][ T5501] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70
[   89.501043][ T5501] Read of size 8 at addr ffff888061ba6130 by task jffs2_gcd_mtd0/5501
[   89.509220][ T5501] 
[   89.511638][ T5501] CPU: 0 PID: 5501 Comm: jffs2_gcd_mtd0 Not tainted 6.9.0-rc5-syzkaller-ged30a4a51bb1 #0
[   89.521550][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   89.531640][ T5501] Call Trace:
[   89.534951][ T5501]  <TASK>
[   89.537908][ T5501]  dump_stack_lvl+0x241/0x360
[   89.542967][ T5501]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.548295][ T5501]  ? __pfx__printk+0x10/0x10
[   89.553008][ T5501]  ? _printk+0xd5/0x120
[   89.557296][ T5501]  ? __virt_addr_valid+0x183/0x520
[   89.562542][ T5501]  ? __virt_addr_valid+0x183/0x520
[   89.567720][ T5501]  print_report+0x169/0x550
[   89.572335][ T5501]  ? __virt_addr_valid+0x183/0x520
[   89.577562][ T5501]  ? __virt_addr_valid+0x183/0x520
[   89.582703][ T5501]  ? __virt_addr_valid+0x44e/0x520
[   89.588164][ T5501]  ? __phys_addr+0xba/0x170
[   89.592790][ T5501]  ? __mutex_lock+0xfe/0xd70
[   89.597415][ T5501]  kasan_report+0x143/0x180
[   89.602126][ T5501]  ? __mutex_lock+0xfe/0xd70
[   89.606933][ T5501]  __mutex_lock+0xfe/0xd70
[   89.611649][ T5501]  ? jffs2_garbage_collect_pass+0xae/0x2120
[   89.617571][ T5501]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   89.622973][ T5501]  ? __pfx___mutex_lock+0x10/0x10
[   89.628091][ T5501]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   89.628321][ T5511] loop0: detected capacity change from 0 to 2048
[   89.634510][ T5501]  ? _raw_spin_lock_irq+0xdf/0x120
[   89.634535][ T5501]  jffs2_garbage_collect_pass+0xae/0x2120
[   89.634555][ T5501]  ? lockdep_hardirqs_on+0x99/0x150
[   89.644330][ T5511] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   89.645960][ T5501]  ? _raw_spin_unlock_irq+0x2e/0x50
[   89.645987][ T5501]  ? __set_current_blocked+0x310/0x380
[   89.671602][ T5511] jffs2: notice: (5511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   89.671962][ T5501]  ? __pfx___set_current_blocked+0x10/0x10
[   89.699845][ T5501]  ? schedule+0x90/0x320
[   89.704123][ T5501]  ? schedule+0x155/0x320
[   89.708490][ T5501]  ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[   89.714769][ T5501]  ? schedule_timeout+0x21a/0x310
[   89.720176][ T5501]  ? sigprocmask+0x228/0x280
[   89.724809][ T5501]  ? __pfx_sigprocmask+0x10/0x10
[   89.729948][ T5501]  ? do_raw_spin_unlock+0x13c/0x8b0
[   89.735360][ T5501]  jffs2_garbage_collect_thread+0x651/0x6e0
[   89.741492][ T5501]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[   89.747942][ T5501]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   89.753870][ T5501]  ? __kthread_parkme+0x169/0x1d0
[   89.758927][ T5501]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[   89.765376][ T5501]  kthread+0x2f0/0x390
[   89.769480][ T5501]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[   89.776110][ T5501]  ? __pfx_kthread+0x10/0x10
[   89.780740][ T5501]  ret_from_fork+0x4b/0x80
[   89.785198][ T5501]  ? __pfx_kthread+0x10/0x10
[   89.789817][ T5501]  ret_from_fork_asm+0x1a/0x30
[   89.794708][ T5501]  </TASK>
[   89.797742][ T5501] 
[   89.800078][ T5501] Allocated by task 5495:
[   89.804503][ T5501]  kasan_save_track+0x3f/0x80
[   89.809486][ T5501]  __kasan_kmalloc+0x98/0xb0
[   89.814109][ T5501]  kmalloc_trace+0x1db/0x360
[   89.818735][ T5501]  jffs2_init_fs_context+0x4f/0xc0
[   89.823886][ T5501]  alloc_fs_context+0x68a/0x800
[   89.828859][ T5501]  do_new_mount+0x160/0xb40
[   89.833420][ T5501]  __se_sys_mount+0x2d9/0x3c0
[   89.838323][ T5501]  do_syscall_64+0xf5/0x240
[   89.842855][ T5501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.848782][ T5501] 
[   89.851129][ T5501] Freed by task 5428:
[   89.855307][ T5501]  kasan_save_track+0x3f/0x80
[   89.860117][ T5501]  kasan_save_free_info+0x40/0x50
[   89.865607][ T5501]  poison_slab_object+0xa6/0xe0
[   89.870592][ T5501]  __kasan_slab_free+0x37/0x60
[   89.875382][ T5501]  kfree+0x153/0x3a0
[   89.879349][ T5501]  deactivate_locked_super+0xc4/0x130
[   89.884888][ T5501]  cleanup_mnt+0x426/0x4c0
[   89.889701][ T5501]  task_work_run+0x24f/0x310
[   89.894514][ T5501]  syscall_exit_to_user_mode+0x168/0x370
[   89.900491][ T5501]  do_syscall_64+0x102/0x240
[   89.905387][ T5501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.913059][ T5501] 
[   89.915440][ T5501] The buggy address belongs to the object at ffff888061ba6000
[   89.915440][ T5501]  which belongs to the cache kmalloc-4k of size 4096
[   89.929773][ T5501] The buggy address is located 304 bytes inside of
[   89.929773][ T5501]  freed 4096-byte region [ffff888061ba6000, ffff888061ba7000)
[   89.943689][ T5501] 
[   89.946115][ T5501] The buggy address belongs to the physical page:
[   89.952803][ T5501] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61ba0
[   89.961582][ T5501] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   89.969248][ T5501] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[   89.977474][ T5501] page_type: 0xffffffff()
[   89.981825][ T5501] raw: 00fff80000000840 ffff888015042140 dead000000000122 0000000000000000
[   89.991052][ T5501] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   90.000212][ T5501] head: 00fff80000000840 ffff888015042140 dead000000000122 0000000000000000
[   90.010064][ T5501] head: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[   90.020327][ T5501] head: 00fff80000000003 ffffea000186e801 dead000000000122 00000000ffffffff
[   90.029616][ T5501] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[   90.039090][ T5501] page dumped because: kasan: bad access detected
[   90.045886][ T5501] page_owner tracks the page as allocated
[   90.051819][ T5501] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5494, tgid -833224093 (syz-executor.0), ts 5495, free_ts 89333775363
[   90.075031][ T5501]  post_alloc_hook+0x1ea/0x210
[   90.080177][ T5501]  get_page_from_freelist+0x3410/0x35b0
[   90.086229][ T5501]  __alloc_pages+0x256/0x6c0
[   90.091873][ T5501]  alloc_slab_page+0x5f/0x160
[   90.096582][ T5501]  new_slab+0x84/0x2f0
[   90.101304][ T5501]  ___slab_alloc+0xc73/0x1260
[   90.106190][ T5501]  __kmalloc+0x2e5/0x4a0
[   90.110467][ T5501]  tomoyo_realpath_from_path+0xcf/0x5e0
[   90.116130][ T5501]  tomoyo_check_open_permission+0x255/0x500
[   90.122145][ T5501]  security_file_open+0x69/0x570
[   90.127150][ T5501]  do_dentry_open+0x327/0x15a0
[   90.131941][ T5501]  path_openat+0x2860/0x3240
[   90.136817][ T5501]  do_filp_open+0x235/0x490
[   90.141347][ T5501]  do_sys_openat2+0x13e/0x1d0
[   90.146217][ T5501]  __x64_sys_openat+0x247/0x2a0
[   90.151180][ T5501]  do_syscall_64+0xf5/0x240
[   90.155804][ T5501] page last free pid 5445 tgid 5445 stack trace:
[   90.162155][ T5501]  free_unref_page_prepare+0x97b/0xaa0
[   90.167906][ T5501]  free_unref_page+0x37/0x3f0
[   90.172611][ T5501]  __slab_free+0x31b/0x3d0
[   90.177138][ T5501]  qlist_free_all+0x5e/0xc0
[   90.181676][ T5501]  kasan_quarantine_reduce+0x14f/0x170
[   90.187345][ T5501]  __kasan_slab_alloc+0x23/0x80
[   90.192308][ T5501]  kmem_cache_alloc+0x174/0x340
[   90.197186][ T5501]  getname_flags+0xbd/0x4f0
[   90.201712][ T5501]  __x64_sys_rename+0x5f/0xa0
[   90.206429][ T5501]  do_syscall_64+0xf5/0x240
[   90.210963][ T5501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.217062][ T5501] 
[   90.219397][ T5501] Memory state around the buggy address:
[   90.225107][ T5501]  ffff888061ba6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   90.233278][ T5501]  ffff888061ba6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   90.241452][ T5501] >ffff888061ba6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   90.249620][ T5501]                                      ^
[   90.255271][ T5501]  ffff888061ba6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   90.263360][ T5501]  ffff888061ba6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   90.271526][ T5501] ==================================================================
[   90.338370][ T5501] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   90.345799][ T5501] CPU: 0 PID: 5501 Comm: jffs2_gcd_mtd0 Not tainted 6.9.0-rc5-syzkaller-ged30a4a51bb1 #0
[   90.355624][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   90.365711][ T5501] Call Trace:
[   90.369023][ T5501]  <TASK>
[   90.372144][ T5501]  dump_stack_lvl+0x241/0x360
[   90.376853][ T5501]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.382081][ T5501]  ? __pfx__printk+0x10/0x10
[   90.386870][ T5501]  ? preempt_schedule+0xe1/0xf0
[   90.391938][ T5501]  ? vscnprintf+0x5d/0x90
[   90.396402][ T5501]  panic+0x349/0x860
[   90.400324][ T5501]  ? check_panic_on_warn+0x21/0xb0
[   90.405462][ T5501]  ? __pfx_panic+0x10/0x10
[   90.410093][ T5501]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   90.416106][ T5501]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.422641][ T5501]  ? print_report+0x502/0x550
[   90.427547][ T5501]  check_panic_on_warn+0x86/0xb0
[   90.432616][ T5501]  ? __mutex_lock+0xfe/0xd70
[   90.437239][ T5501]  end_report+0x77/0x160
[   90.441684][ T5501]  kasan_report+0x154/0x180
[   90.446300][ T5501]  ? __mutex_lock+0xfe/0xd70
[   90.450925][ T5501]  __mutex_lock+0xfe/0xd70
[   90.455384][ T5501]  ? jffs2_garbage_collect_pass+0xae/0x2120
[   90.461425][ T5501]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   90.467010][ T5501]  ? __pfx___mutex_lock+0x10/0x10
[   90.472162][ T5501]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   90.478523][ T5501]  ? _raw_spin_lock_irq+0xdf/0x120
[   90.483672][ T5501]  jffs2_garbage_collect_pass+0xae/0x2120
[   90.489421][ T5501]  ? lockdep_hardirqs_on+0x99/0x150
[   90.494657][ T5501]  ? _raw_spin_unlock_irq+0x2e/0x50
[   90.499895][ T5501]  ? __set_current_blocked+0x310/0x380
[   90.505477][ T5501]  ? __pfx___set_current_blocked+0x10/0x10
[   90.511317][ T5501]  ? schedule+0x90/0x320
[   90.515610][ T5501]  ? schedule+0x155/0x320
[   90.520068][ T5501]  ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[   90.526525][ T5501]  ? schedule_timeout+0x21a/0x310
[   90.531632][ T5501]  ? sigprocmask+0x228/0x280
[   90.536433][ T5501]  ? __pfx_sigprocmask+0x10/0x10
[   90.541659][ T5501]  ? do_raw_spin_unlock+0x13c/0x8b0
[   90.546902][ T5501]  jffs2_garbage_collect_thread+0x651/0x6e0
[   90.553101][ T5501]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[   90.559721][ T5501]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   90.565648][ T5501]  ? __kthread_parkme+0x169/0x1d0
[   90.570707][ T5501]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[   90.577153][ T5501]  kthread+0x2f0/0x390
[   90.581420][ T5501]  ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[   90.588448][ T5501]  ? __pfx_kthread+0x10/0x10
[   90.593278][ T5501]  ret_from_fork+0x4b/0x80
[   90.597821][ T5501]  ? __pfx_kthread+0x10/0x10
[   90.602705][ T5501]  ret_from_fork_asm+0x1a/0x30
[   90.607516][ T5501]  </TASK>
[   90.610982][ T5501] Kernel Offset: disabled
[   90.615305][ T5501] Rebooting in 86400 seconds..