Warning: Permanently added '10.128.0.230' (ECDSA) to the list of known hosts.
[ 66.517374][ T4989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 66.525267][ T4989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 66.533190][ T4989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 66.541150][ T4989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 66.549231][ T4989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 66.556572][ T4989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 66.637837][ T4986] chnl_net:caif_netlink_parms(): no params data found
[ 66.678354][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.686192][ T4986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.694727][ T4986] bridge_slave_0: entered allmulticast mode
[ 66.701344][ T4986] bridge_slave_0: entered promiscuous mode
[ 66.709407][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.716683][ T4986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.723988][ T4986] bridge_slave_1: entered allmulticast mode
[ 66.730492][ T4986] bridge_slave_1: entered promiscuous mode
[ 66.750007][ T4986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 66.761151][ T4986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 66.784235][ T4986] team0: Port device team_slave_0 added
[ 66.792509][ T4986] team0: Port device team_slave_1 added
[ 66.808724][ T4986] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 66.815750][ T4986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.846598][ T4986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 66.859504][ T4986] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 66.867086][ T4986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.893198][ T4986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 66.921086][ T4986] hsr_slave_0: entered promiscuous mode
[ 66.927276][ T4986] hsr_slave_1: entered promiscuous mode
[ 67.007823][ T4986] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 67.017758][ T4986] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 67.026753][ T4986] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 67.036147][ T4986] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 67.057803][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.065103][ T4986] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.073198][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.080292][ T4986] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.122464][ T4986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.135004][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 67.145418][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.154854][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.163731][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 67.175961][ T4986] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.187709][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 67.196728][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.203934][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.216438][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 67.225299][ T4988] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.232425][ T4988] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.255671][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 67.265605][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 67.274443][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 67.286554][ T4986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 67.298851][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 67.307676][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 67.315585][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 67.334837][ T4986] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 67.342962][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 67.350429][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 67.368082][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 67.386286][ T4986] veth0_vlan: entered promiscuous mode
[ 67.393318][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 67.402814][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 67.410486][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 67.425339][ T4986] veth1_vlan: entered promiscuous mode
[ 67.442502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 67.450527][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 67.458931][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 67.469385][ T4986] veth0_macvtap: entered promiscuous mode
[ 67.477946][ T4986] veth1_macvtap: entered promiscuous mode
[ 67.493377][ T4986] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.501021][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 67.510081][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 67.522639][ T4986] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.530372][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 67.542479][ T4986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.552764][ T4986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.561556][ T4986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.570283][ T4986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.622196][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.630413][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.647628][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 67.657133][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
executing program
[ 67.666257][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.676387][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 67.687709][ T4986] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4986 'syz-executor715'
[ 67.715141][ T4986] loop0: detected capacity change from 0 to 2048
[ 67.726510][ T4986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 67.883994][ T4986] ==================================================================
[ 67.892093][ T4986] BUG: KASAN: use-after-free in udf_close_lvid+0x6a8/0x9a0
[ 67.899290][ T4986] Write of size 1 at addr ffff8880af976068 by task syz-executor715/4986
[ 67.907599][ T4986]
[ 67.909919][ T4986] CPU: 1 PID: 4986 Comm: syz-executor715 Not tainted 6.3.0-syzkaller-11025-g89d77f71f493 #0
[ 67.919966][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 67.930007][ T4986] Call Trace:
[ 67.933273][ T4986]
[ 67.936192][ T4986] dump_stack_lvl+0x1e7/0x2d0
[ 67.940873][ T4986] ? irq_work_queue+0xca/0x150
[ 67.945641][ T4986] ? nf_tcp_handle_invalid+0x650/0x650
[ 67.951146][ T4986] ? panic+0x770/0x770
[ 67.955211][ T4986] ? _printk+0xd5/0x120
[ 67.959366][ T4986] print_report+0x163/0x540
[ 67.963979][ T4986] ? __lock_acquire+0x2000/0x2000
[ 67.969009][ T4986] ? __virt_addr_valid+0x22f/0x2e0
[ 67.974128][ T4986] ? __phys_addr+0xba/0x170
[ 67.978628][ T4986] ? udf_close_lvid+0x6a8/0x9a0
[ 67.983467][ T4986] kasan_report+0x176/0x1b0
[ 67.987988][ T4986] ? udf_close_lvid+0x6a8/0x9a0
[ 67.992844][ T4986] udf_close_lvid+0x6a8/0x9a0
[ 67.997617][ T4986] ? hook_inode_free_security+0xb0/0xb0
[ 68.003165][ T4986] ? udf_open_lvid+0x5b0/0x5b0
[ 68.007963][ T4986] ? iput+0x37e/0x8f0
[ 68.011939][ T4986] ? clear_inode+0x150/0x150
[ 68.016529][ T4986] ? module_put+0x144/0x2e0
[ 68.021020][ T4986] udf_put_super+0xcd/0x160
[ 68.025531][ T4986] ? udf_free_in_core_inode+0x30/0x30
[ 68.030935][ T4986] generic_shutdown_super+0x134/0x340
[ 68.036305][ T4986] kill_block_super+0x84/0xf0
[ 68.041058][ T4986] deactivate_locked_super+0xa4/0x110
[ 68.046429][ T4986] cleanup_mnt+0x426/0x4c0
[ 68.050837][ T4986] ? _raw_spin_unlock_irq+0x23/0x50
[ 68.056028][ T4986] task_work_run+0x24a/0x300
[ 68.060604][ T4986] ? kasan_quarantine_put+0xd8/0x230
[ 68.065906][ T4986] ? task_work_cancel+0x2b0/0x2b0
[ 68.070935][ T4986] ? kmem_cache_free+0x297/0x520
[ 68.075866][ T4986] ? do_exit+0x68a/0x2290
[ 68.080186][ T4986] do_exit+0x68f/0x2290
[ 68.084330][ T4986] ? put_task_struct+0x80/0x80
[ 68.089080][ T4986] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 68.095065][ T4986] ? print_irqtrace_events+0x220/0x220
[ 68.100525][ T4986] ? _raw_spin_unlock_irq+0x23/0x50
[ 68.105712][ T4986] ? lockdep_hardirqs_on+0x98/0x140
[ 68.110924][ T4986] do_group_exit+0x206/0x2c0
[ 68.115503][ T4986] __x64_sys_exit_group+0x3f/0x40
[ 68.120512][ T4986] do_syscall_64+0x41/0xc0
[ 68.124916][ T4986] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 68.130800][ T4986] RIP: 0033:0x7f3a11d39549
[ 68.135202][ T4986] Code: Unable to access opcode bytes at 0x7f3a11d3951f.
[ 68.142215][ T4986] RSP: 002b:00007fff11cd9a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 68.150637][ T4986] RAX: ffffffffffffffda RBX: 00007f3a11dcd450 RCX: 00007f3a11d39549
[ 68.158597][ T4986] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 68.166561][ T4986] RBP: 0000000000000001 R08: ffffffffffffffb8 R09: 0000000000000031
[ 68.174520][ T4986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a11dcd450
[ 68.182504][ T4986] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 68.190479][ T4986]
[ 68.193504][ T4986]
[ 68.195818][ T4986] The buggy address belongs to the physical page:
[ 68.202322][ T4986] page:ffffea0002be5d80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xaf976
[ 68.212476][ T4986] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 68.219568][ T4986] page_type: 0xffffffff()
[ 68.223883][ T4986] raw: 00fff00000000000 ffffea0002be5d88 ffffea0002be5d88 0000000000000000
[ 68.232449][ T4986] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 68.241046][ T4986] page dumped because: kasan: bad access detected
[ 68.247463][ T4986] page_owner info is not present (never set?)
[ 68.253623][ T4986]
[ 68.255991][ T4986] Memory state around the buggy address:
[ 68.261650][ T4986] ffff8880af975f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.269702][ T4986] ffff8880af975f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.277767][ T4986] >ffff8880af976000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.285827][ T4986] ^
[ 68.293283][ T4986] ffff8880af976080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.301386][ T4986] ffff8880af976100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.309434][ T4986] ==================================================================
[ 68.319141][ T4986] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 68.326371][ T4986] CPU: 0 PID: 4986 Comm: syz-executor715 Not tainted 6.3.0-syzkaller-11025-g89d77f71f493 #0
[ 68.336603][ T4986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 68.346645][ T4986] Call Trace:
[ 68.349940][ T4986]
[ 68.352858][ T4986] dump_stack_lvl+0x1e7/0x2d0
[ 68.357531][ T4986] ? nf_tcp_handle_invalid+0x650/0x650
[ 68.363008][ T4986] ? panic+0x770/0x770
[ 68.367098][ T4986] ? preempt_schedule_common+0x83/0xc0
[ 68.372892][ T4986] ? vscnprintf+0x5d/0x80
[ 68.377213][ T4986] panic+0x30f/0x770
[ 68.381121][ T4986] ? check_panic_on_warn+0x21/0xa0
[ 68.386311][ T4986] ? __memcpy_flushcache+0x2b0/0x2b0
[ 68.391588][ T4986] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 68.397567][ T4986] ? _raw_spin_unlock+0x40/0x40
[ 68.402421][ T4986] ? print_report+0x4fb/0x540
[ 68.407121][ T4986] check_panic_on_warn+0x82/0xa0
[ 68.412165][ T4986] ? udf_close_lvid+0x6a8/0x9a0
[ 68.417007][ T4986] end_report+0x63/0x110
[ 68.421244][ T4986] kasan_report+0x183/0x1b0
[ 68.425749][ T4986] ? udf_close_lvid+0x6a8/0x9a0
[ 68.430597][ T4986] udf_close_lvid+0x6a8/0x9a0
[ 68.435267][ T4986] ? hook_inode_free_security+0xb0/0xb0
[ 68.440807][ T4986] ? udf_open_lvid+0x5b0/0x5b0
[ 68.445559][ T4986] ? iput+0x37e/0x8f0
[ 68.449545][ T4986] ? clear_inode+0x150/0x150
[ 68.454122][ T4986] ? module_put+0x144/0x2e0
[ 68.458613][ T4986] udf_put_super+0xcd/0x160
[ 68.463107][ T4986] ? udf_free_in_core_inode+0x30/0x30
[ 68.468474][ T4986] generic_shutdown_super+0x134/0x340
[ 68.473853][ T4986] kill_block_super+0x84/0xf0
[ 68.478536][ T4986] deactivate_locked_super+0xa4/0x110
[ 68.483914][ T4986] cleanup_mnt+0x426/0x4c0
[ 68.488329][ T4986] ? _raw_spin_unlock_irq+0x23/0x50
[ 68.493522][ T4986] task_work_run+0x24a/0x300
[ 68.498131][ T4986] ? kasan_quarantine_put+0xd8/0x230
[ 68.503433][ T4986] ? task_work_cancel+0x2b0/0x2b0
[ 68.508450][ T4986] ? kmem_cache_free+0x297/0x520
[ 68.513374][ T4986] ? do_exit+0x68a/0x2290
[ 68.517712][ T4986] do_exit+0x68f/0x2290
[ 68.521857][ T4986] ? put_task_struct+0x80/0x80
[ 68.526610][ T4986] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 68.532592][ T4986] ? print_irqtrace_events+0x220/0x220
[ 68.538071][ T4986] ? _raw_spin_unlock_irq+0x23/0x50
[ 68.543262][ T4986] ? lockdep_hardirqs_on+0x98/0x140
[ 68.548475][ T4986] do_group_exit+0x206/0x2c0
[ 68.553054][ T4986] __x64_sys_exit_group+0x3f/0x40
[ 68.558071][ T4986] do_syscall_64+0x41/0xc0
[ 68.562490][ T4986] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 68.568446][ T4986] RIP: 0033:0x7f3a11d39549
[ 68.572853][ T4986] Code: Unable to access opcode bytes at 0x7f3a11d3951f.
[ 68.579856][ T4986] RSP: 002b:00007fff11cd9a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 68.588278][ T4986] RAX: ffffffffffffffda RBX: 00007f3a11dcd450 RCX: 00007f3a11d39549
[ 68.596239][ T4986] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 68.604198][ T4986] RBP: 0000000000000001 R08: ffffffffffffffb8 R09: 0000000000000031
[ 68.612156][ T4986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a11dcd450
[ 68.620115][ T4986] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 68.628080][ T4986]
[ 68.631257][ T4986] Kernel Offset: disabled
[ 68.635581][ T4986] Rebooting in 86400 seconds..