Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts.
[ 71.192471][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.204607][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.216945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 71.230016][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
executing program
[ 71.238085][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.246540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 71.275437][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.282039][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.432027][ T4254] loop0: detected capacity change from 0 to 32768
[ 71.439341][ T4254] =======================================================
[ 71.439341][ T4254] WARNING: The mand mount option has been deprecated and
[ 71.439341][ T4254] and is ignored by this kernel. Remove the mand
[ 71.439341][ T4254] option from the mount to silence this warning.
[ 71.439341][ T4254] =======================================================
[ 71.489495][ T4254] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 71.504355][ T4254] ==================================================================
[ 71.512509][ T4254] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 71.520549][ T4254] Read of size 2 at addr ffff88806e1298c9 by task syz-executor283/4254
[ 71.528808][ T4254]
[ 71.531164][ T4254] CPU: 0 PID: 4254 Comm: syz-executor283 Not tainted 6.1.128-syzkaller #0
[ 71.539709][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 71.549879][ T4254] Call Trace:
[ 71.553160][ T4254]
[ 71.556086][ T4254] dump_stack_lvl+0x1e3/0x2cb
[ 71.561326][ T4254] ? nf_tcp_handle_invalid+0x642/0x642
[ 71.566795][ T4254] ? panic+0x764/0x764
[ 71.570881][ T4254] ? _printk+0xd1/0x111
[ 71.575036][ T4254] ? __virt_addr_valid+0x17f/0x530
[ 71.580159][ T4254] ? __virt_addr_valid+0x17f/0x530
[ 71.585290][ T4254] print_report+0x15f/0x4f0
[ 71.589793][ T4254] ? __virt_addr_valid+0x17f/0x530
[ 71.594908][ T4254] ? __virt_addr_valid+0x17f/0x530
[ 71.600016][ T4254] ? __virt_addr_valid+0x45b/0x530
[ 71.605126][ T4254] ? __phys_addr+0xb6/0x170
[ 71.609643][ T4254] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 71.615274][ T4254] kasan_report+0x136/0x160
[ 71.619773][ T4254] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 71.625442][ T4254] ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 71.630901][ T4254] ? __lock_acquire+0x1f80/0x1f80
[ 71.635929][ T4254] ? ocfs2_dir_foreach+0x270/0x270
[ 71.641034][ T4254] ? ocfs2_should_update_atime+0x29b/0x550
[ 71.646835][ T4254] ? ocfs2_inode_lock_atime+0x25b/0x5a0
[ 71.652412][ T4254] ? ocfs2_inode_lock_with_page+0x1c0/0x1c0
[ 71.658314][ T4254] ? read_lock_is_recursive+0x10/0x10
[ 71.663693][ T4254] ocfs2_readdir+0x28a/0x620
[ 71.668281][ T4254] ? ocfs2_dir_foreach_blk+0x1e10/0x1e10
[ 71.673933][ T4254] ? common_file_perm+0x17d/0x1d0
[ 71.679046][ T4254] ? iterate_dir+0x131/0x560
[ 71.683632][ T4254] iterate_dir+0x224/0x560
[ 71.688045][ T4254] __se_sys_getdents+0x1eb/0x4c0
[ 71.692976][ T4254] ? __x64_sys_getdents+0x80/0x80
[ 71.698014][ T4254] ? fillonedir+0x4c0/0x4c0
[ 71.702511][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230
[ 71.708486][ T4254] ? lockdep_hardirqs_on+0x94/0x130
[ 71.713683][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230
[ 71.719661][ T4254] do_syscall_64+0x3b/0xb0
[ 71.724085][ T4254] ? clear_bhb_loop+0x45/0xa0
[ 71.728753][ T4254] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 71.734663][ T4254] RIP: 0033:0x7f7046d96419
[ 71.739078][ T4254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 71.758684][ T4254] RSP: 002b:00007ffdaff35b08 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 71.767092][ T4254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7046d96419
[ 71.775073][ T4254] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 71.783041][ T4254] RBP: 00007f7046dda276 R08: 00007f7046dda2a6 R09: 00007f7046dda2a6
[ 71.791037][ T4254] R10: 00007f7046dda2a6 R11: 0000000000000246 R12: 00007f7046dda1de
[ 71.799001][ T4254] R13: 0000000000000003 R14: 0000000000050012 R15: 000000000000000d
[ 71.806970][ T4254]
[ 71.809980][ T4254]
[ 71.812290][ T4254] The buggy address belongs to the physical page:
[ 71.818695][ T4254] page:ffffea0001b84a40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6e129
[ 71.828855][ T4254] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 71.835965][ T4254] raw: 00fff00000000000 ffffea0001b84a88 ffffea0001b84a08 0000000000000000
[ 71.844542][ T4254] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 71.853117][ T4254] page dumped because: kasan: bad access detected
[ 71.859521][ T4254] page_owner tracks the page as freed
[ 71.864873][ T4254] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 20169792806, free_ts 21577595776
[ 71.879822][ T4254] post_alloc_hook+0x18d/0x1b0
[ 71.884582][ T4254] split_map_pages+0x246/0x510
[ 71.889344][ T4254] isolate_freepages_range+0x47c/0x4e0
[ 71.894802][ T4254] alloc_contig_range+0x62a/0x990
[ 71.899819][ T4254] alloc_contig_pages+0x3f0/0x4e0
[ 71.904837][ T4254] debug_vm_pgtable_alloc_huge_page+0xb9/0x108
[ 71.911004][ T4254] init_args+0xc92/0x1022
[ 71.915326][ T4254] debug_vm_pgtable+0xaa/0x46b
[ 71.920105][ T4254] do_one_initcall+0x265/0x8f0
[ 71.924869][ T4254] do_initcall_level+0x157/0x207
[ 71.929805][ T4254] do_initcalls+0x49/0x86
[ 71.934123][ T4254] kernel_init_freeable+0x45c/0x60f
[ 71.939320][ T4254] kernel_init+0x19/0x290
[ 71.943668][ T4254] ret_from_fork+0x1f/0x30
[ 71.948094][ T4254] page last free stack trace:
[ 71.952761][ T4254] free_unref_page_prepare+0x12a6/0x15b0
[ 71.958385][ T4254] free_unref_page+0x33/0x3e0
[ 71.963065][ T4254] free_contig_range+0x9a/0x150
[ 71.967914][ T4254] destroy_args+0xfe/0x997
[ 71.972322][ T4254] debug_vm_pgtable+0x416/0x46b
[ 71.977173][ T4254] do_one_initcall+0x265/0x8f0
[ 71.981947][ T4254] do_initcall_level+0x157/0x207
[ 71.986871][ T4254] do_initcalls+0x49/0x86
[ 71.991186][ T4254] kernel_init_freeable+0x45c/0x60f
[ 71.996384][ T4254] kernel_init+0x19/0x290
[ 72.000719][ T4254] ret_from_fork+0x1f/0x30
[ 72.005145][ T4254]
[ 72.007455][ T4254] Memory state around the buggy address:
[ 72.013078][ T4254] ffff88806e129780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.021165][ T4254] ffff88806e129800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.029224][ T4254] >ffff88806e129880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.037300][ T4254] ^
[ 72.043706][ T4254] ffff88806e129900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.051767][ T4254] ffff88806e129980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 72.059822][ T4254] ==================================================================
[ 72.070144][ T4254] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 72.077377][ T4254] CPU: 0 PID: 4254 Comm: syz-executor283 Not tainted 6.1.128-syzkaller #0
[ 72.085895][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 72.096031][ T4254] Call Trace:
[ 72.099301][ T4254]
[ 72.102225][ T4254] dump_stack_lvl+0x1e3/0x2cb
[ 72.106902][ T4254] ? nf_tcp_handle_invalid+0x642/0x642
[ 72.112369][ T4254] ? panic+0x764/0x764
[ 72.116460][ T4254] ? preempt_schedule_common+0xa6/0xd0
[ 72.121915][ T4254] ? vscnprintf+0x59/0x80
[ 72.126246][ T4254] panic+0x318/0x764
[ 72.130161][ T4254] ? check_panic_on_warn+0x1d/0xa0
[ 72.135273][ T4254] ? memcpy_page_flushcache+0xfc/0xfc
[ 72.140641][ T4254] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 72.146627][ T4254] ? _raw_spin_unlock+0x40/0x40
[ 72.151492][ T4254] ? print_report+0x4a3/0x4f0
[ 72.156164][ T4254] check_panic_on_warn+0x7e/0xa0
[ 72.161126][ T4254] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.166759][ T4254] end_report+0x66/0x110
[ 72.170999][ T4254] kasan_report+0x143/0x160
[ 72.175501][ T4254] ? ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.181172][ T4254] ocfs2_dir_foreach_blk+0x14f8/0x1e10
[ 72.186723][ T4254] ? __lock_acquire+0x1f80/0x1f80
[ 72.191768][ T4254] ? ocfs2_dir_foreach+0x270/0x270
[ 72.196971][ T4254] ? ocfs2_should_update_atime+0x29b/0x550
[ 72.202796][ T4254] ? ocfs2_inode_lock_atime+0x25b/0x5a0
[ 72.208365][ T4254] ? ocfs2_inode_lock_with_page+0x1c0/0x1c0
[ 72.214282][ T4254] ? read_lock_is_recursive+0x10/0x10
[ 72.219708][ T4254] ocfs2_readdir+0x28a/0x620
[ 72.224313][ T4254] ? ocfs2_dir_foreach_blk+0x1e10/0x1e10
[ 72.229953][ T4254] ? common_file_perm+0x17d/0x1d0
[ 72.234987][ T4254] ? iterate_dir+0x131/0x560
[ 72.239624][ T4254] iterate_dir+0x224/0x560
[ 72.244046][ T4254] __se_sys_getdents+0x1eb/0x4c0
[ 72.249009][ T4254] ? __x64_sys_getdents+0x80/0x80
[ 72.254035][ T4254] ? fillonedir+0x4c0/0x4c0
[ 72.258541][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230
[ 72.264526][ T4254] ? lockdep_hardirqs_on+0x94/0x130
[ 72.269754][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230
[ 72.275738][ T4254] do_syscall_64+0x3b/0xb0
[ 72.280163][ T4254] ? clear_bhb_loop+0x45/0xa0
[ 72.284931][ T4254] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 72.290835][ T4254] RIP: 0033:0x7f7046d96419
[ 72.295250][ T4254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 72.314888][ T4254] RSP: 002b:00007ffdaff35b08 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 72.323308][ T4254] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7046d96419
[ 72.331282][ T4254] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 72.339273][ T4254] RBP: 00007f7046dda276 R08: 00007f7046dda2a6 R09: 00007f7046dda2a6
[ 72.347245][ T4254] R10: 00007f7046dda2a6 R11: 0000000000000246 R12: 00007f7046dda1de
[ 72.355239][ T4254] R13: 0000000000000003 R14: 0000000000050012 R15: 000000000000000d
[ 72.363241][ T4254]
[ 72.366596][ T4254] Kernel Offset: disabled
[ 72.370944][ T4254] Rebooting in 86400 seconds..