Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts.
2024/12/24 01:56:55 ignoring optional flag "sandboxArg"="0"
2024/12/24 01:56:55 ignoring optional flag "type"="gce"
2024/12/24 01:56:55 parsed 1 programs
[ 81.988593][ T58] cfg80211: failed to load regulatory.db
2024/12/24 01:56:57 executed programs: 0
[ 82.250437][ T6113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.302068][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.311100][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.319143][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.327104][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.335552][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.343954][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.436626][ T6122] chnl_net:caif_netlink_parms(): no params data found
[ 82.482286][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.489669][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.496967][ T6122] bridge_slave_0: entered allmulticast mode
[ 82.503863][ T6122] bridge_slave_0: entered promiscuous mode
[ 82.512219][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.519568][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.527046][ T6122] bridge_slave_1: entered allmulticast mode
[ 82.533983][ T6122] bridge_slave_1: entered promiscuous mode
[ 82.553436][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.564919][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.589927][ T6122] team0: Port device team_slave_0 added
[ 82.597269][ T6122] team0: Port device team_slave_1 added
[ 82.614427][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.621536][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.648274][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.660265][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.667263][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.693468][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.722116][ T6122] hsr_slave_0: entered promiscuous mode
[ 82.728481][ T6122] hsr_slave_1: entered promiscuous mode
[ 83.222506][ T6122] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.239348][ T6122] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.250241][ T6122] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.261964][ T6122] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.290635][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.297938][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.305438][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.312640][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.376809][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.395563][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.406076][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.429253][ T6122] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.446784][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.454633][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.476400][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.483599][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.663512][ T6122] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.712826][ T6122] veth0_vlan: entered promiscuous mode
[ 83.728990][ T6122] veth1_vlan: entered promiscuous mode
[ 83.753440][ T6122] veth0_macvtap: entered promiscuous mode
[ 83.763633][ T6122] veth1_macvtap: entered promiscuous mode
[ 83.782038][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.800144][ T6122] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.813149][ T6122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.824865][ T6122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.834760][ T6122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.845631][ T6122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.926328][ T768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.944057][ T768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.976053][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.984665][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.047212][ T6189] jffs2: notice: (6189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 84.114571][ T6195] jffs2: notice: (6195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 84.142602][ T6191] ==================================================================
[ 84.150723][ T6191] BUG: KASAN: slab-use-after-free in __mutex_lock+0x173/0xee0
[ 84.158319][ T6191] Read of size 8 at addr ffff888031448130 by task jffs2_gcd_mtd0/6191
[ 84.166577][ T6191]
[ 84.168920][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: jffs2_gcd_mtd0 Not tainted 6.13.0-rc4-syzkaller-gf07044dd0df0 #0
[ 84.179500][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 84.189570][ T6191] Call Trace:
[ 84.192839][ T6191]
[ 84.195757][ T6191] dump_stack_lvl+0x241/0x360
[ 84.200537][ T6191] ? __pfx_dump_stack_lvl+0x10/0x10
[ 84.205735][ T6191] ? __pfx__printk+0x10/0x10
[ 84.210405][ T6191] ? _printk+0xd5/0x120
[ 84.214857][ T6191] ? __virt_addr_valid+0x183/0x530
[ 84.219999][ T6191] ? __virt_addr_valid+0x183/0x530
[ 84.225226][ T6191] print_report+0x169/0x550
[ 84.229849][ T6191] ? __virt_addr_valid+0x183/0x530
[ 84.234989][ T6191] ? __virt_addr_valid+0x183/0x530
[ 84.240126][ T6191] ? __virt_addr_valid+0x45f/0x530
[ 84.245276][ T6191] ? __phys_addr+0xba/0x170
[ 84.249810][ T6191] ? __mutex_lock+0x173/0xee0
[ 84.254518][ T6191] kasan_report+0x143/0x180
[ 84.259127][ T6191] ? __mutex_lock+0x173/0xee0
[ 84.263943][ T6191] __mutex_lock+0x173/0xee0
[ 84.268500][ T6191] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 84.274524][ T6191] ? __pfx___mutex_lock+0x10/0x10
[ 84.279568][ T6191] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 84.286007][ T6191] ? _raw_spin_lock_irq+0xdf/0x120
[ 84.291152][ T6191] jffs2_garbage_collect_pass+0xae/0x2120
[ 84.296905][ T6191] ? lockdep_hardirqs_on+0x99/0x150
[ 84.302118][ T6191] ? _raw_spin_unlock_irq+0x2e/0x50
[ 84.307317][ T6191] ? __set_current_blocked+0x310/0x380
[ 84.312778][ T6191] ? __pfx___set_current_blocked+0x10/0x10
[ 84.318585][ T6191] ? schedule+0x90/0x320
[ 84.322827][ T6191] ? schedule+0x155/0x320
[ 84.327149][ T6191] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 84.333386][ T6191] ? schedule_timeout+0x1ad/0x290
[ 84.338409][ T6191] ? sigprocmask+0x228/0x280
[ 84.343012][ T6191] ? __pfx_sigprocmask+0x10/0x10
[ 84.347944][ T6191] ? do_raw_spin_unlock+0x13c/0x8b0
[ 84.353146][ T6191] jffs2_garbage_collect_thread+0x64b/0x6e0
[ 84.359057][ T6191] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 84.365506][ T6191] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 84.371445][ T6191] ? __kthread_parkme+0x169/0x1d0
[ 84.376478][ T6191] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 84.382901][ T6191] kthread+0x2f0/0x390
[ 84.386973][ T6191] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 84.393391][ T6191] ? __pfx_kthread+0x10/0x10
[ 84.397978][ T6191] ret_from_fork+0x4b/0x80
[ 84.402391][ T6191] ? __pfx_kthread+0x10/0x10
[ 84.406974][ T6191] ret_from_fork_asm+0x1a/0x30
[ 84.411740][ T6191]
[ 84.414748][ T6191]
[ 84.417061][ T6191] Allocated by task 6189:
[ 84.421377][ T6191] kasan_save_track+0x3f/0x80
[ 84.426050][ T6191] __kasan_kmalloc+0x98/0xb0
[ 84.430631][ T6191] __kmalloc_cache_noprof+0x243/0x390
[ 84.435994][ T6191] jffs2_init_fs_context+0x4f/0xc0
[ 84.441107][ T6191] alloc_fs_context+0x68a/0x800
[ 84.445957][ T6191] do_new_mount+0x160/0xb40
[ 84.450458][ T6191] __se_sys_mount+0x2d6/0x3c0
[ 84.455651][ T6191] do_syscall_64+0xf3/0x230
[ 84.460187][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.466086][ T6191]
[ 84.468403][ T6191] Freed by task 6122:
[ 84.472373][ T6191] kasan_save_track+0x3f/0x80
[ 84.477044][ T6191] kasan_save_free_info+0x40/0x50
[ 84.482068][ T6191] __kasan_slab_free+0x59/0x70
[ 84.486829][ T6191] kfree+0x196/0x430
[ 84.490988][ T6191] deactivate_locked_super+0xc4/0x130
[ 84.496385][ T6191] cleanup_mnt+0x41f/0x4b0
[ 84.500794][ T6191] task_work_run+0x24f/0x310
[ 84.505377][ T6191] syscall_exit_to_user_mode+0x13f/0x340
[ 84.511006][ T6191] do_syscall_64+0x100/0x230
[ 84.515597][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.521485][ T6191]
[ 84.523805][ T6191] The buggy address belongs to the object at ffff888031448000
[ 84.523805][ T6191] which belongs to the cache kmalloc-4k of size 4096
[ 84.537942][ T6191] The buggy address is located 304 bytes inside of
[ 84.537942][ T6191] freed 4096-byte region [ffff888031448000, ffff888031449000)
[ 84.551829][ T6191]
[ 84.554174][ T6191] The buggy address belongs to the physical page:
[ 84.560597][ T6191] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31448
[ 84.569440][ T6191] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 84.577925][ T6191] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 84.585557][ T6191] page_type: f5(slab)
[ 84.589534][ T6191] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000
[ 84.598107][ T6191] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 84.606683][ T6191] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000
[ 84.615345][ T6191] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 84.624110][ T6191] head: 00fff00000000003 ffffea0000c51201 ffffffffffffffff 0000000000000000
[ 84.632954][ T6191] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 84.641614][ T6191] page dumped because: kasan: bad access detected
[ 84.648040][ T6191] page_owner tracks the page as allocated
[ 84.653923][ T6191] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6189, tgid 6188 (syz-executor.0), ts 84046321704, free_ts 84030143617
[ 84.675632][ T6191] post_alloc_hook+0x1f3/0x230
[ 84.680413][ T6191] get_page_from_freelist+0x3651/0x37a0
[ 84.685974][ T6191] __alloc_pages_noprof+0x292/0x710
[ 84.691178][ T6191] alloc_pages_mpol_noprof+0x3e8/0x680
[ 84.696640][ T6191] alloc_slab_page+0x6a/0x110
[ 84.701315][ T6191] allocate_slab+0x5a/0x2b0
[ 84.705821][ T6191] ___slab_alloc+0xc27/0x14a0
[ 84.710495][ T6191] __slab_alloc+0x58/0xa0
[ 84.714820][ T6191] __kmalloc_cache_noprof+0x27b/0x390
[ 84.720182][ T6191] jffs2_init_fs_context+0x4f/0xc0
[ 84.725290][ T6191] alloc_fs_context+0x68a/0x800
[ 84.730134][ T6191] do_new_mount+0x160/0xb40
[ 84.734636][ T6191] __se_sys_mount+0x2d6/0x3c0
[ 84.739313][ T6191] do_syscall_64+0xf3/0x230
[ 84.743814][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.749728][ T6191] page last free pid 35 tgid 35 stack trace:
[ 84.755737][ T6191] free_unref_page+0xd2c/0x1000
[ 84.760601][ T6191] __slab_free+0x2c2/0x380
[ 84.765018][ T6191] qlist_free_all+0x9a/0x140
[ 84.769602][ T6191] kasan_quarantine_reduce+0x14f/0x170
[ 84.775052][ T6191] __kasan_kmalloc_large+0x1a/0xa0
[ 84.780157][ T6191] ___kmalloc_large_node+0x133/0x1d0
[ 84.785431][ T6191] __kmalloc_large_noprof+0x1f/0x80
[ 84.790620][ T6191] __sta_info_alloc+0xf05/0x1ea0
[ 84.795558][ T6191] ieee80211_ibss_add_sta+0x5ad/0x860
[ 84.800961][ T6191] ieee80211_ibss_rx_queued_mgmt+0x15c0/0x2d70
[ 84.807143][ T6191] ieee80211_iface_work+0x8a5/0xf20
[ 84.812365][ T6191] cfg80211_wiphy_work+0x2db/0x480
[ 84.817473][ T6191] process_scheduled_works+0xa66/0x1840
[ 84.823026][ T6191] worker_thread+0x870/0xd30
[ 84.827693][ T6191] kthread+0x2f0/0x390
[ 84.831755][ T6191] ret_from_fork+0x4b/0x80
[ 84.836171][ T6191]
[ 84.838487][ T6191] Memory state around the buggy address:
[ 84.844108][ T6191] ffff888031448000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.852249][ T6191] ffff888031448080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.860301][ T6191] >ffff888031448100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.868353][ T6191] ^
[ 84.873969][ T6191] ffff888031448180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.882019][ T6191] ffff888031448200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.890157][ T6191] ==================================================================
[ 84.909434][ T6191] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.916673][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: jffs2_gcd_mtd0 Not tainted 6.13.0-rc4-syzkaller-gf07044dd0df0 #0
[ 84.927188][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 84.937338][ T6191] Call Trace:
[ 84.940636][ T6191]
[ 84.943587][ T6191] dump_stack_lvl+0x241/0x360
[ 84.948293][ T6191] ? __pfx_dump_stack_lvl+0x10/0x10
[ 84.953522][ T6191] ? __pfx__printk+0x10/0x10
[ 84.958131][ T6191] ? preempt_schedule+0xe1/0xf0
[ 84.963004][ T6191] ? vscnprintf+0x5d/0x90
[ 84.967353][ T6191] panic+0x349/0x880
[ 84.971267][ T6191] ? check_panic_on_warn+0x21/0xb0
[ 84.976407][ T6191] ? __pfx_panic+0x10/0x10
[ 84.980845][ T6191] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 84.986933][ T6191] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 84.993289][ T6191] ? print_report+0x502/0x550
[ 84.998080][ T6191] check_panic_on_warn+0x86/0xb0
[ 85.003038][ T6191] ? __mutex_lock+0x173/0xee0
[ 85.007741][ T6191] end_report+0x77/0x160
[ 85.012014][ T6191] kasan_report+0x154/0x180
[ 85.016545][ T6191] ? __mutex_lock+0x173/0xee0
[ 85.021263][ T6191] __mutex_lock+0x173/0xee0
[ 85.025809][ T6191] ? jffs2_garbage_collect_pass+0xae/0x2120
[ 85.031733][ T6191] ? __pfx___mutex_lock+0x10/0x10
[ 85.036800][ T6191] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 85.043167][ T6191] ? _raw_spin_lock_irq+0xdf/0x120
[ 85.048405][ T6191] jffs2_garbage_collect_pass+0xae/0x2120
[ 85.054158][ T6191] ? lockdep_hardirqs_on+0x99/0x150
[ 85.059401][ T6191] ? _raw_spin_unlock_irq+0x2e/0x50
[ 85.064640][ T6191] ? __set_current_blocked+0x310/0x380
[ 85.070134][ T6191] ? __pfx___set_current_blocked+0x10/0x10
[ 85.075978][ T6191] ? schedule+0x90/0x320
[ 85.080248][ T6191] ? schedule+0x155/0x320
[ 85.084618][ T6191] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 85.090889][ T6191] ? schedule_timeout+0x1ad/0x290
[ 85.095944][ T6191] ? sigprocmask+0x228/0x280
[ 85.100569][ T6191] ? __pfx_sigprocmask+0x10/0x10
[ 85.105623][ T6191] ? do_raw_spin_unlock+0x13c/0x8b0
[ 85.110855][ T6191] jffs2_garbage_collect_thread+0x64b/0x6e0
[ 85.116776][ T6191] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 85.123229][ T6191] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 85.129154][ T6191] ? __kthread_parkme+0x169/0x1d0
[ 85.134219][ T6191] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 85.140662][ T6191] kthread+0x2f0/0x390
[ 85.144757][ T6191] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 85.151199][ T6191] ? __pfx_kthread+0x10/0x10
[ 85.155826][ T6191] ret_from_fork+0x4b/0x80
[ 85.160278][ T6191] ? __pfx_kthread+0x10/0x10
[ 85.164900][ T6191] ret_from_fork_asm+0x1a/0x30
[ 85.169705][ T6191]
[ 85.173053][ T6191] Kernel Offset: disabled
[ 85.177498][ T6191] Rebooting in 86400 seconds..