Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts.
2025/12/20 08:58:37 ignoring optional flag "type"="gce"
2025/12/20 08:58:37 parsed 1 programs
2025/12/20 08:58:40 executed programs: 0
[ 110.713487][ T5951] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 110.809518][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 110.811852][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 110.813053][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 110.828970][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 110.829656][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 111.173550][ T5986] chnl_net:caif_netlink_parms(): no params data found
[ 111.526014][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.526142][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.526251][ T5986] bridge_slave_0: entered allmulticast mode
[ 111.527746][ T5986] bridge_slave_0: entered promiscuous mode
[ 111.529813][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.529965][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.530061][ T5986] bridge_slave_1: entered allmulticast mode
[ 111.531453][ T5986] bridge_slave_1: entered promiscuous mode
[ 111.728321][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 111.731519][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.868452][ T5986] team0: Port device team_slave_0 added
[ 111.870701][ T5986] team0: Port device team_slave_1 added
[ 112.006035][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.006048][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.006062][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.008010][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.008026][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.008048][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.430951][ T5986] hsr_slave_0: entered promiscuous mode
[ 112.431772][ T5986] hsr_slave_1: entered promiscuous mode
[ 112.914183][ T61] Bluetooth: hci0: command tx timeout
[ 113.852574][ T5986] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.888113][ T5986] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.927831][ T5986] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.970810][ T5986] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.148462][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.171658][ T5986] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.182684][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.194318][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.202051][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.202133][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.521801][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.598255][ T5986] veth0_vlan: entered promiscuous mode
[ 114.628098][ T5986] veth1_vlan: entered promiscuous mode
[ 114.673366][ T5986] veth0_macvtap: entered promiscuous mode
[ 114.690301][ T5986] veth1_macvtap: entered promiscuous mode
[ 114.720001][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.741701][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.766187][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.766646][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.767590][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.767628][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.996501][ T61] Bluetooth: hci0: command tx timeout
[ 115.051150][ T6085] jffs2: notice: (6085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 115.124257][ T6087] ==================================================================
[ 115.124275][ T6087] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.124319][ T6087] Read of size 1 at addr ffff88803c2aa128 by task jffs2_gcd_mtd0/6087
[ 115.124335][ T6087]
[ 115.124356][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: jffs2_gcd_mtd0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 115.124377][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 115.124395][ T6087] Call Trace:
[ 115.124408][ T6087]
[ 115.124416][ T6087] dump_stack_lvl+0x189/0x250
[ 115.124440][ T6087] ? __virt_addr_valid+0x1c8/0x5c0
[ 115.124464][ T6087] ? rcu_is_watching+0x15/0xb0
[ 115.124481][ T6087] ? __pfx_dump_stack_lvl+0x10/0x10
[ 115.124502][ T6087] ? rcu_is_watching+0x15/0xb0
[ 115.124517][ T6087] ? lock_release+0x4b/0x3b0
[ 115.124538][ T6087] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 115.124557][ T6087] ? __virt_addr_valid+0x1c8/0x5c0
[ 115.124581][ T6087] ? __virt_addr_valid+0x4a5/0x5c0
[ 115.124604][ T6087] print_report+0xca/0x240
[ 115.124625][ T6087] ? mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.124648][ T6087] kasan_report+0x118/0x150
[ 115.124667][ T6087] ? mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.124692][ T6087] ? jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.124714][ T6087] __kasan_check_byte+0x2a/0x40
[ 115.124739][ T6087] lock_acquire+0x84/0x340
[ 115.124761][ T6087] ? do_raw_spin_lock+0x121/0x290
[ 115.124781][ T6087] ? jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.124801][ T6087] mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.124824][ T6087] ? jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.124845][ T6087] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 115.124864][ T6087] jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.124886][ T6087] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 115.124903][ T6087] ? rt_spin_lock+0x1c1/0x3e0
[ 115.124927][ T6087] ? rt_mutex_slowunlock+0x493/0x8a0
[ 115.124950][ T6087] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 115.124971][ T6087] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 115.124997][ T6087] ? rt_spin_unlock+0x161/0x200
[ 115.125019][ T6087] ? sigprocmask+0x1df/0x220
[ 115.125041][ T6087] jffs2_garbage_collect_thread+0x613/0x6b0
[ 115.125071][ T6087] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 115.125098][ T6087] ? __kthread_parkme+0x7b/0x200
[ 115.125119][ T6087] ? __kthread_parkme+0x1a1/0x200
[ 115.125143][ T6087] kthread+0x711/0x8a0
[ 115.125168][ T6087] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 115.125192][ T6087] ? __pfx_kthread+0x10/0x10
[ 115.125221][ T6087] ? rt_spin_unlock+0x150/0x200
[ 115.125245][ T6087] ? rt_spin_unlock+0x161/0x200
[ 115.125266][ T6087] ? __pfx_kthread+0x10/0x10
[ 115.125289][ T6087] ret_from_fork+0x599/0xb30
[ 115.125309][ T6087] ? __pfx_ret_from_fork+0x10/0x10
[ 115.125333][ T6087] ? __switch_to_asm+0x39/0x70
[ 115.125355][ T6087] ? __switch_to_asm+0x33/0x70
[ 115.125377][ T6087] ? __pfx_kthread+0x10/0x10
[ 115.125401][ T6087] ret_from_fork_asm+0x1a/0x30
[ 115.125432][ T6087]
[ 115.125439][ T6087]
[ 115.125443][ T6087] Allocated by task 6085:
[ 115.125451][ T6087] kasan_save_track+0x3e/0x80
[ 115.125473][ T6087] __kasan_kmalloc+0x93/0xb0
[ 115.125492][ T6087] __kmalloc_cache_noprof+0x1fb/0x6d0
[ 115.125509][ T6087] jffs2_init_fs_context+0x4f/0xc0
[ 115.125526][ T6087] alloc_fs_context+0x4ab/0x5a0
[ 115.125545][ T6087] do_new_mount+0x172/0xa10
[ 115.125560][ T6087] __se_sys_mount+0x313/0x410
[ 115.125576][ T6087] do_syscall_64+0xfa/0xf80
[ 115.125592][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.125609][ T6087]
[ 115.125613][ T6087] Freed by task 5986:
[ 115.125621][ T6087] kasan_save_track+0x3e/0x80
[ 115.125642][ T6087] kasan_save_free_info+0x46/0x50
[ 115.125660][ T6087] __kasan_slab_free+0x5c/0x80
[ 115.125681][ T6087] kfree+0x1bd/0x900
[ 115.125700][ T6087] deactivate_locked_super+0xbc/0x130
[ 115.125718][ T6087] cleanup_mnt+0x425/0x4c0
[ 115.125734][ T6087] task_work_run+0x1d4/0x260
[ 115.125757][ T6087] exit_to_user_mode_loop+0xff/0x4f0
[ 115.125778][ T6087] do_syscall_64+0x2d0/0xf80
[ 115.125792][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.125807][ T6087]
[ 115.125812][ T6087] The buggy address belongs to the object at ffff88803c2aa000
[ 115.125812][ T6087] which belongs to the cache kmalloc-4k of size 4096
[ 115.125826][ T6087] The buggy address is located 296 bytes inside of
[ 115.125826][ T6087] freed 4096-byte region [ffff88803c2aa000, ffff88803c2ab000)
[ 115.125845][ T6087]
[ 115.125850][ T6087] The buggy address belongs to the physical page:
[ 115.125866][ T6087] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c2a8
[ 115.125883][ T6087] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 115.125898][ T6087] ksm flags: 0x80000000000040(head|node=0|zone=1)
[ 115.125919][ T6087] page_type: f5(slab)
[ 115.125938][ T6087] raw: 0080000000000040 ffff88813ff27140 ffffea0000c59e00 0000000000000003
[ 115.125952][ T6087] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 115.125967][ T6087] head: 0080000000000040 ffff88813ff27140 ffffea0000c59e00 0000000000000003
[ 115.125980][ T6087] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 115.125996][ T6087] head: 0080000000000003 ffffea0000f0aa01 00000000ffffffff 00000000ffffffff
[ 115.126011][ T6087] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 115.126019][ T6087] page dumped because: kasan: bad access detected
[ 115.126032][ T6087] page_owner tracks the page as allocated
[ 115.126038][ T6087] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5772, tgid 5772 (sed), ts 69293660131, free_ts 69079758502
[ 115.126068][ T6087] post_alloc_hook+0x234/0x290
[ 115.126089][ T6087] get_page_from_freelist+0x28c0/0x2960
[ 115.126105][ T6087] __alloc_frozen_pages_noprof+0x181/0x370
[ 115.126121][ T6087] alloc_pages_mpol+0xd1/0x380
[ 115.126137][ T6087] allocate_slab+0x86/0x3b0
[ 115.126154][ T6087] ___slab_alloc+0xb10/0x1400
[ 115.126169][ T6087] __slab_alloc+0xc6/0x1f0
[ 115.126184][ T6087] __kmalloc_noprof+0x15f/0x7e0
[ 115.126206][ T6087] tomoyo_realpath_from_path+0xe3/0x5d0
[ 115.126233][ T6087] tomoyo_check_open_permission+0x1c1/0x3b0
[ 115.126254][ T6087] security_file_open+0xb1/0x270
[ 115.126275][ T6087] do_dentry_open+0x35c/0x1270
[ 115.126290][ T6087] vfs_open+0x3b/0x350
[ 115.126302][ T6087] path_openat+0x342a/0x3df0
[ 115.126320][ T6087] do_filp_open+0x1fa/0x410
[ 115.126337][ T6087] do_sys_openat2+0x121/0x200
[ 115.126352][ T6087] page last free pid 5468 tgid 5468 stack trace:
[ 115.126360][ T6087] __free_frozen_pages+0xfe1/0x1170
[ 115.126379][ T6087] __slab_free+0x1c3/0x210
[ 115.126395][ T6087] qlist_free_all+0x97/0x100
[ 115.126415][ T6087] kasan_quarantine_reduce+0x148/0x160
[ 115.126436][ T6087] __kasan_slab_alloc+0x22/0x80
[ 115.126458][ T6087] kmem_cache_alloc_node_noprof+0x23c/0x6f0
[ 115.126480][ T6087] __alloc_skb+0x255/0x430
[ 115.126497][ T6087] alloc_skb_with_frags+0xca/0x890
[ 115.126515][ T6087] sock_alloc_send_pskb+0x859/0x990
[ 115.126531][ T6087] unix_dgram_sendmsg+0x454/0x1840
[ 115.126550][ T6087] __sock_sendmsg+0x21c/0x270
[ 115.126572][ T6087] sock_write_iter+0x27f/0x370
[ 115.126593][ T6087] vfs_write+0x5d5/0xb40
[ 115.126613][ T6087] ksys_write+0x14b/0x260
[ 115.126633][ T6087] do_syscall_64+0xfa/0xf80
[ 115.126648][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.126663][ T6087]
[ 115.126667][ T6087] Memory state around the buggy address:
[ 115.126677][ T6087] ffff88803c2aa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 115.126689][ T6087] ffff88803c2aa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 115.126700][ T6087] >ffff88803c2aa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 115.126708][ T6087] ^
[ 115.126718][ T6087] ffff88803c2aa180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 115.126729][ T6087] ffff88803c2aa200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 115.126738][ T6087] ==================================================================
[ 115.126750][ T6087] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 115.126770][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: jffs2_gcd_mtd0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 115.126790][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 115.126801][ T6087] Call Trace:
[ 115.126808][ T6087]
[ 115.126816][ T6087] dump_stack_lvl+0x99/0x250
[ 115.126837][ T6087] ? __asan_memcpy+0x40/0x70
[ 115.126859][ T6087] ? __pfx_dump_stack_lvl+0x10/0x10
[ 115.126878][ T6087] ? __pfx__printk+0x10/0x10
[ 115.126899][ T6087] vpanic+0x237/0x6d0
[ 115.126919][ T6087] ? __pfx_vpanic+0x10/0x10
[ 115.126944][ T6087] panic+0xb9/0xc0
[ 115.126963][ T6087] ? __pfx_panic+0x10/0x10
[ 115.126982][ T6087] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 115.127001][ T6087] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 115.127019][ T6087] ? is_module_address+0x17/0xf0
[ 115.127040][ T6087] ? mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.127062][ T6087] check_panic_on_warn+0x89/0xb0
[ 115.127087][ T6087] ? mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.127110][ T6087] end_report+0x6f/0x140
[ 115.127124][ T6087] kasan_report+0x129/0x150
[ 115.127142][ T6087] ? mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.127168][ T6087] ? jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.127189][ T6087] __kasan_check_byte+0x2a/0x40
[ 115.127222][ T6087] lock_acquire+0x84/0x340
[ 115.127245][ T6087] ? do_raw_spin_lock+0x121/0x290
[ 115.127267][ T6087] ? jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.127291][ T6087] mutex_lock_interruptible_nested+0x5a/0x1d0
[ 115.127313][ T6087] ? jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.127334][ T6087] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 115.127352][ T6087] jffs2_garbage_collect_pass+0xad/0x20e0
[ 115.127374][ T6087] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 115.127391][ T6087] ? rt_spin_lock+0x1c1/0x3e0
[ 115.127416][ T6087] ? rt_mutex_slowunlock+0x493/0x8a0
[ 115.127440][ T6087] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10
[ 115.127460][ T6087] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 115.127485][ T6087] ? rt_spin_unlock+0x161/0x200
[ 115.127507][ T6087] ? sigprocmask+0x1df/0x220
[ 115.127528][ T6087] jffs2_garbage_collect_thread+0x613/0x6b0
[ 115.127559][ T6087] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 115.127584][ T6087] ? __kthread_parkme+0x7b/0x200
[ 115.127604][ T6087] ? __kthread_parkme+0x1a1/0x200
[ 115.127626][ T6087] kthread+0x711/0x8a0
[ 115.127648][ T6087] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10
[ 115.127670][ T6087] ? __pfx_kthread+0x10/0x10
[ 115.127691][ T6087] ? rt_spin_unlock+0x150/0x200
[ 115.127715][ T6087] ? rt_spin_unlock+0x161/0x200
[ 115.127735][ T6087] ? __pfx_kthread+0x10/0x10
[ 115.127758][ T6087] ret_from_fork+0x599/0xb30
[ 115.127777][ T6087] ? __pfx_ret_from_fork+0x10/0x10
[ 115.127799][ T6087] ? __switch_to_asm+0x39/0x70
[ 115.127822][ T6087] ? __switch_to_asm+0x33/0x70
[ 115.127846][ T6087] ? __pfx_kthread+0x10/0x10
[ 115.127869][ T6087] ret_from_fork_asm+0x1a/0x30
[ 115.127898][ T6087]
[ 115.128380][ T6087] Kernel Offset: disabled