Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts.
[ 70.702861][ T4253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.711796][ T4253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.720599][ T4253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.729628][ T4253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.737778][ T4253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 70.745368][ T4253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.851417][ T4249] chnl_net:caif_netlink_parms(): no params data found
[ 70.903813][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.911547][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.920403][ T4249] device bridge_slave_0 entered promiscuous mode
[ 70.929780][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.937064][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.945177][ T4249] device bridge_slave_1 entered promiscuous mode
[ 70.970021][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.981280][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.007824][ T4249] team0: Port device team_slave_0 added
[ 71.015235][ T4249] team0: Port device team_slave_1 added
[ 71.036350][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.043327][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.069375][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.082356][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.089418][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.115527][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.150027][ T4249] device hsr_slave_0 entered promiscuous mode
[ 71.157129][ T4249] device hsr_slave_1 entered promiscuous mode
[ 71.256014][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.268029][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.278329][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.288401][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.297488][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.304007][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.329253][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.336512][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.344672][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.352067][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.402860][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0
[ 71.417421][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 71.427384][ T33] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.436512][ T33] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.445349][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 71.459697][ T4249] 8021q: adding VLAN 0 to HW filter on device team0
[ 71.472217][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 71.481477][ T33] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.488641][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.500276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 71.509202][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.516311][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.538031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 71.547562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 71.561761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 71.575334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 71.588731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 71.600604][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 71.619145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 71.627246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 71.640910][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 71.662341][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 71.683034][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 71.692246][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 71.701329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 71.712288][ T4249] device veth0_vlan entered promiscuous mode
[ 71.725783][ T4249] device veth1_vlan entered promiscuous mode
[ 71.748800][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 71.757134][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 71.765953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 71.776826][ T4249] device veth0_macvtap entered promiscuous mode
[ 71.787609][ T4249] device veth1_macvtap entered promiscuous mode
[ 71.806290][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 71.815536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 71.825730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 71.840704][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 71.848348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 71.857558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
executing program
[ 71.869702][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.880219][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.889023][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.898343][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.126757][ T4249] loop0: detected capacity change from 0 to 32768
[ 72.142990][ T4249] =======================================================
[ 72.142990][ T4249] WARNING: The mand mount option has been deprecated and
[ 72.142990][ T4249] and is ignored by this kernel. Remove the mand
[ 72.142990][ T4249] option from the mount to silence this warning.
[ 72.142990][ T4249] =======================================================
[ 72.201627][ T4249] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 72.223293][ T4249] ==================================================================
[ 72.231408][ T4249] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.239459][ T4249] Read of size 2 at addr ffff88806ecc88c9 by task syz-executor260/4249
[ 72.247717][ T4249]
[ 72.250053][ T4249] CPU: 1 PID: 4249 Comm: syz-executor260 Not tainted 6.1.128-syzkaller #0
[ 72.258689][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 72.268968][ T4249] Call Trace:
[ 72.272346][ T4249]
[ 72.275287][ T4249] dump_stack_lvl+0x1e3/0x2cb
[ 72.279996][ T4249] ? nf_tcp_handle_invalid+0x642/0x642
[ 72.285461][ T4249] ? panic+0x764/0x764
[ 72.289535][ T4249] ? _printk+0xd1/0x111
[ 72.293689][ T4249] ? __virt_addr_valid+0x17f/0x530
[ 72.298798][ T4249] ? __virt_addr_valid+0x17f/0x530
[ 72.303909][ T4249] print_report+0x15f/0x4f0
[ 72.308406][ T4249] ? __virt_addr_valid+0x17f/0x530
[ 72.313525][ T4249] ? __virt_addr_valid+0x17f/0x530
[ 72.318635][ T4249] ? __virt_addr_valid+0x45b/0x530
[ 72.323755][ T4249] ? __phys_addr+0xb6/0x170
[ 72.328280][ T4249] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.334011][ T4249] kasan_report+0x136/0x160
[ 72.338695][ T4249] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.344349][ T4249] ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.349903][ T4249] ? __lock_acquire+0x1f80/0x1f80
[ 72.354948][ T4249] ? ocfs2_dir_foreach+0x270/0x270
[ 72.360151][ T4249] ? ocfs2_should_update_atime+0x29b/0x550
[ 72.365967][ T4249] ? ocfs2_inode_lock_atime+0x25b/0x5a0
[ 72.371531][ T4249] ? ocfs2_inode_lock_with_page+0x1c0/0x1c0
[ 72.377789][ T4249] ? read_lock_is_recursive+0x10/0x10
[ 72.383178][ T4249] ocfs2_readdir+0x28a/0x620
[ 72.387783][ T4249] ? ocfs2_dir_foreach_blk+0x1e10/0x1e10
[ 72.393530][ T4249] ? common_file_perm+0x17d/0x1d0
[ 72.398758][ T4249] ? iterate_dir+0x131/0x560
[ 72.403494][ T4249] iterate_dir+0x224/0x560
[ 72.407923][ T4249] __se_sys_getdents+0x1eb/0x4c0
[ 72.412956][ T4249] ? __x64_sys_getdents+0x80/0x80
[ 72.418066][ T4249] ? fillonedir+0x4c0/0x4c0
[ 72.422573][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230
[ 72.428650][ T4249] ? lockdep_hardirqs_on+0x94/0x130
[ 72.433967][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230
[ 72.439958][ T4249] do_syscall_64+0x3b/0xb0
[ 72.444378][ T4249] ? clear_bhb_loop+0x45/0xa0
[ 72.449173][ T4249] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 72.455181][ T4249] RIP: 0033:0x7f697ab7e0e9
[ 72.459653][ T4249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 72.479367][ T4249] RSP: 002b:00007ffe36559f78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 72.487879][ T4249] RAX: ffffffffffffffda RBX: 6f6c666c61636f6c RCX: 00007f697ab7e0e9
[ 72.495855][ T4249] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 72.503827][ T4249] RBP: 00007f697abcb5e7 R08: 0000000000000004 R09: 0000000000000004
[ 72.511803][ T4249] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f697abcb568
[ 72.519799][ T4249] R13: 00007ffe3655a000 R14: 00007f697ac05740 R15: 00007ffe36559fd8
[ 72.527869][ T4249]
[ 72.530889][ T4249]
[ 72.533216][ T4249] The buggy address belongs to the physical page:
[ 72.539814][ T4249] page:ffffea0001bb3200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6ecc8
[ 72.549974][ T4249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 72.557097][ T4249] raw: 00fff00000000000 ffffea0001bb3248 ffffea0001bb31c8 0000000000000000
[ 72.565887][ T4249] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 72.574484][ T4249] page dumped because: kasan: bad access detected
[ 72.581077][ T4249] page_owner tracks the page as freed
[ 72.586632][ T4249] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 19735888832, free_ts 21162749813
[ 72.602205][ T4249] post_alloc_hook+0x18d/0x1b0
[ 72.607090][ T4249] split_map_pages+0x246/0x510
[ 72.611875][ T4249] isolate_freepages_range+0x47c/0x4e0
[ 72.617348][ T4249] alloc_contig_range+0x62a/0x990
[ 72.622384][ T4249] alloc_contig_pages+0x3f0/0x4e0
[ 72.627434][ T4249] debug_vm_pgtable_alloc_huge_page+0xb9/0x108
[ 72.633603][ T4249] init_args+0xc92/0x1022
[ 72.637936][ T4249] debug_vm_pgtable+0xaa/0x46b
[ 72.642751][ T4249] do_one_initcall+0x265/0x8f0
[ 72.647566][ T4249] do_initcall_level+0x157/0x207
[ 72.652702][ T4249] do_initcalls+0x49/0x86
[ 72.657159][ T4249] kernel_init_freeable+0x45c/0x60f
[ 72.662397][ T4249] kernel_init+0x19/0x290
[ 72.666757][ T4249] ret_from_fork+0x1f/0x30
[ 72.671195][ T4249] page last free stack trace:
[ 72.675864][ T4249] free_unref_page_prepare+0x12a6/0x15b0
[ 72.681499][ T4249] free_unref_page+0x33/0x3e0
[ 72.686178][ T4249] free_contig_range+0x9a/0x150
[ 72.691029][ T4249] destroy_args+0xfe/0x997
[ 72.695453][ T4249] debug_vm_pgtable+0x416/0x46b
[ 72.700355][ T4249] do_one_initcall+0x265/0x8f0
[ 72.705130][ T4249] do_initcall_level+0x157/0x207
[ 72.710157][ T4249] do_initcalls+0x49/0x86
[ 72.714574][ T4249] kernel_init_freeable+0x45c/0x60f
[ 72.720161][ T4249] kernel_init+0x19/0x290
[ 72.724499][ T4249] ret_from_fork+0x1f/0x30
[ 72.728925][ T4249]
[ 72.731247][ T4249] Memory state around the buggy address:
[ 72.737845][ T4249] ffff88806ecc8780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.746024][ T4249] ffff88806ecc8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.754364][ T4249] >ffff88806ecc8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.762449][ T4249] ^
[ 72.768868][ T4249] ffff88806ecc8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.776957][ T4249] ffff88806ecc8980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.785032][ T4249] ==================================================================
[ 72.805086][ T4253] Bluetooth: hci0: command 0x0409 tx timeout
[ 72.806160][ T4249] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 72.806175][ T4249] CPU: 0 PID: 4249 Comm: syz-executor260 Not tainted 6.1.128-syzkaller #0
[ 72.806200][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 72.806212][ T4249] Call Trace:
[ 72.806219][ T4249]
[ 72.806227][ T4249] dump_stack_lvl+0x1e3/0x2cb
[ 72.806255][ T4249] ? nf_tcp_handle_invalid+0x642/0x642
[ 72.806277][ T4249] ? panic+0x764/0x764
[ 72.806299][ T4249] ? preempt_schedule_common+0xa6/0xd0
[ 72.806326][ T4249] ? vscnprintf+0x59/0x80
[ 72.806353][ T4249] panic+0x318/0x764
[ 72.806376][ T4249] ? check_panic_on_warn+0x1d/0xa0
[ 72.806402][ T4249] ? memcpy_page_flushcache+0xfc/0xfc
[ 72.806439][ T4249] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 72.806470][ T4249] ? _raw_spin_unlock+0x40/0x40
[ 72.806497][ T4249] ? print_report+0x4a3/0x4f0
[ 72.806523][ T4249] check_panic_on_warn+0x7e/0xa0
[ 72.806547][ T4249] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.806578][ T4249] end_report+0x66/0x110
[ 72.806598][ T4249] kasan_report+0x143/0x160
[ 72.806620][ T4249] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.806652][ T4249] ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.806681][ T4249] ? __lock_acquire+0x1f80/0x1f80
[ 72.806721][ T4249] ? ocfs2_dir_foreach+0x270/0x270
[ 72.806749][ T4249] ? ocfs2_should_update_atime+0x29b/0x550
[ 72.806777][ T4249] ? ocfs2_inode_lock_atime+0x25b/0x5a0
[ 72.806812][ T4249] ? ocfs2_inode_lock_with_page+0x1c0/0x1c0
[ 72.806848][ T4249] ? read_lock_is_recursive+0x10/0x10
[ 72.806884][ T4249] ocfs2_readdir+0x28a/0x620
[ 72.806913][ T4249] ? ocfs2_dir_foreach_blk+0x1e10/0x1e10
[ 72.806942][ T4249] ? common_file_perm+0x17d/0x1d0
[ 72.806972][ T4249] ? iterate_dir+0x131/0x560
[ 72.806994][ T4249] iterate_dir+0x224/0x560
[ 72.807017][ T4249] __se_sys_getdents+0x1eb/0x4c0
[ 72.807043][ T4249] ? __x64_sys_getdents+0x80/0x80
[ 72.807063][ T4249] ? fillonedir+0x4c0/0x4c0
[ 72.807087][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230
[ 72.807113][ T4249] ? lockdep_hardirqs_on+0x94/0x130
[ 72.807138][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230
[ 72.807167][ T4249] do_syscall_64+0x3b/0xb0
[ 72.807186][ T4249] ? clear_bhb_loop+0x45/0xa0
[ 72.807207][ T4249] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 72.807241][ T4249] RIP: 0033:0x7f697ab7e0e9
[ 72.807259][ T4249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 72.807277][ T4249] RSP: 002b:00007ffe36559f78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 72.807301][ T4249] RAX: ffffffffffffffda RBX: 6f6c666c61636f6c RCX: 00007f697ab7e0e9
[ 72.807318][ T4249] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 72.807331][ T4249] RBP: 00007f697abcb5e7 R08: 0000000000000004 R09: 0000000000000004
[ 72.807345][ T4249] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f697abcb568
[ 72.807359][ T4249] R13: 00007ffe3655a000 R14: 00007f697ac05740 R15: 00007ffe36559fd8
[ 72.807382][ T4249]
[ 72.811494][ T4249] Kernel Offset: disabled
[ 73.113860][ T4249] Rebooting in 86400 seconds..