Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. [ 75.930436][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.946087][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.953862][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.962578][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.970398][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.977809][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.089030][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 76.147275][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.154918][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.162641][ T5034] bridge_slave_0: entered allmulticast mode [ 76.169524][ T5034] bridge_slave_0: entered promiscuous mode [ 76.179341][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.186551][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.193697][ T5034] bridge_slave_1: entered allmulticast mode [ 76.201220][ T5034] bridge_slave_1: entered promiscuous mode [ 76.225469][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.237703][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.266333][ T5034] team0: Port device team_slave_0 added [ 76.273866][ T5034] team0: Port device team_slave_1 added [ 76.295175][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.302659][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.328911][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.341920][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.348991][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.374982][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.411205][ T5034] hsr_slave_0: entered promiscuous mode [ 76.417873][ T5034] hsr_slave_1: entered promiscuous mode [ 76.528787][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.529087][ T5034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.535393][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.552617][ T5034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.563010][ T5034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.572930][ T5034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.599743][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.607070][ T5034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.614874][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.622425][ T5034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.679626][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.698259][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.707284][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.724623][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.738109][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.745241][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.769017][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.776194][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.805473][ T5034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.836999][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.875924][ T5034] veth0_vlan: entered promiscuous mode [ 76.888207][ T5034] veth1_vlan: entered promiscuous mode [ 76.914135][ T5034] veth0_macvtap: entered promiscuous mode [ 76.929771][ T5034] veth1_macvtap: entered promiscuous mode [ 76.949898][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.963169][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.976595][ T5034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.985517][ T5034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.994937][ T5034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.004745][ T5034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081404][ T1780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.097369][ T1780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 77.123434][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.132553][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.148145][ T5034] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5034 'syz-executor184' [ 77.182261][ T5034] loop0: detected capacity change from 0 to 2048 [ 77.197307][ T5034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.381414][ T5034] ================================================================== [ 77.389541][ T5034] BUG: KASAN: use-after-free in udf_close_lvid+0x508/0x5c0 [ 77.396763][ T5034] Write of size 1 at addr ffff888186962cd8 by task syz-executor184/5034 [ 77.405113][ T5034] [ 77.407465][ T5034] CPU: 0 PID: 5034 Comm: syz-executor184 Not tainted 6.5.0-rc2-next-20230721-syzkaller #0 [ 77.417402][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 77.427461][ T5034] Call Trace: [ 77.430743][ T5034] [ 77.433684][ T5034] dump_stack_lvl+0xd9/0x1b0 [ 77.438327][ T5034] print_report+0xc4/0x620 [ 77.442800][ T5034] ? __virt_addr_valid+0x5e/0x2d0 [ 77.447867][ T5034] ? __phys_addr+0xc6/0x140 [ 77.452433][ T5034] kasan_report+0xda/0x110 [ 77.456999][ T5034] ? udf_close_lvid+0x508/0x5c0 [ 77.462125][ T5034] ? udf_close_lvid+0x508/0x5c0 [ 77.467017][ T5034] udf_close_lvid+0x508/0x5c0 [ 77.471729][ T5034] udf_put_super+0x19c/0x200 [ 77.476387][ T5034] ? udf_close_lvid+0x5c0/0x5c0 [ 77.481249][ T5034] generic_shutdown_super+0x158/0x480 [ 77.486647][ T5034] kill_block_super+0x64/0xb0 [ 77.491363][ T5034] deactivate_locked_super+0x9a/0x170 [ 77.496755][ T5034] deactivate_super+0xde/0x100 [ 77.501535][ T5034] cleanup_mnt+0x222/0x3d0 [ 77.505966][ T5034] task_work_run+0x14d/0x240 [ 77.510579][ T5034] ? task_work_cancel+0x30/0x30 [ 77.515453][ T5034] do_exit+0xa99/0x2a20 [ 77.519626][ T5034] ? do_group_exit+0x1c5/0x2a0 [ 77.524430][ T5034] ? reacquire_held_locks+0x4b0/0x4b0 [ 77.529823][ T5034] ? do_raw_spin_lock+0x12e/0x2b0 [ 77.534879][ T5034] ? mm_update_next_owner+0x850/0x850 [ 77.540278][ T5034] ? spin_bug+0x1d0/0x1d0 [ 77.544635][ T5034] do_group_exit+0xd4/0x2a0 [ 77.549185][ T5034] __x64_sys_exit_group+0x3e/0x50 [ 77.554231][ T5034] do_syscall_64+0x38/0xb0 [ 77.558691][ T5034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.564611][ T5034] RIP: 0033:0x7f3651c6b5b9 [ 77.569032][ T5034] Code: Unable to access opcode bytes at 0x7f3651c6b58f. [ 77.576067][ T5034] RSP: 002b:00007ffef36888d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 77.584486][ T5034] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3651c6b5b9 [ 77.592468][ T5034] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 77.600445][ T5034] RBP: 00007f3651cf63b0 R08: ffffffffffffffb0 R09: 0000000000000000 [ 77.608441][ T5034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3651cf63b0 [ 77.616421][ T5034] R13: 0000000000000000 R14: 00007f3651cf91e0 R15: 00007f3651c2e720 [ 77.624409][ T5034] [ 77.627517][ T5034] [ 77.629838][ T5034] The buggy address belongs to the physical page: [ 77.636253][ T5034] page:ffffea00061a5880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x186962 [ 77.646516][ T5034] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 77.653713][ T5034] page_type: 0xffffffff() [ 77.658049][ T5034] raw: 057ff00000000000 ffffea00061a5888 ffffea00061a5888 0000000000000000 [ 77.666640][ T5034] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 77.675226][ T5034] page dumped because: kasan: bad access detected [ 77.681647][ T5034] page_owner info is not present (never set?) [ 77.687739][ T5034] [ 77.690063][ T5034] Memory state around the buggy address: [ 77.695704][ T5034] ffff888186962b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.703769][ T5034] ffff888186962c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.711852][ T5034] >ffff888186962c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.719915][ T5034] ^ [ 77.726849][ T5034] ffff888186962d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.734912][ T5034] ffff888186962d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.742978][ T5034] ================================================================== [ 77.762599][ T5034] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.769894][ T5034] CPU: 1 PID: 5034 Comm: syz-executor184 Not tainted 6.5.0-rc2-next-20230721-syzkaller #0 [ 77.779795][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 77.789858][ T5034] Call Trace: [ 77.793153][ T5034] [ 77.796087][ T5034] dump_stack_lvl+0xd9/0x1b0 [ 77.800706][ T5034] panic+0x6a4/0x750 [ 77.804646][ T5034] ? panic_smp_self_stop+0xa0/0xa0 [ 77.809784][ T5034] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.816004][ T5034] ? preempt_schedule_thunk+0x1a/0x30 [ 77.821485][ T5034] ? preempt_schedule_common+0x45/0xc0 [ 77.826977][ T5034] check_panic_on_warn+0xab/0xb0 [ 77.831927][ T5034] end_report+0x108/0x150 [ 77.836357][ T5034] kasan_report+0xea/0x110 [ 77.840816][ T5034] ? udf_close_lvid+0x508/0x5c0 [ 77.845699][ T5034] ? udf_close_lvid+0x508/0x5c0 [ 77.850619][ T5034] udf_close_lvid+0x508/0x5c0 [ 77.855316][ T5034] udf_put_super+0x19c/0x200 [ 77.859917][ T5034] ? udf_close_lvid+0x5c0/0x5c0 [ 77.864777][ T5034] generic_shutdown_super+0x158/0x480 [ 77.870168][ T5034] kill_block_super+0x64/0xb0 [ 77.874859][ T5034] deactivate_locked_super+0x9a/0x170 [ 77.880260][ T5034] deactivate_super+0xde/0x100 [ 77.885064][ T5034] cleanup_mnt+0x222/0x3d0 [ 77.889508][ T5034] task_work_run+0x14d/0x240 [ 77.894160][ T5034] ? task_work_cancel+0x30/0x30 [ 77.899041][ T5034] do_exit+0xa99/0x2a20 [ 77.903218][ T5034] ? do_group_exit+0x1c5/0x2a0 [ 77.908003][ T5034] ? reacquire_held_locks+0x4b0/0x4b0 [ 77.913391][ T5034] ? do_raw_spin_lock+0x12e/0x2b0 [ 77.918435][ T5034] ? mm_update_next_owner+0x850/0x850 [ 77.923831][ T5034] ? spin_bug+0x1d0/0x1d0 [ 77.928198][ T5034] do_group_exit+0xd4/0x2a0 [ 77.932722][ T5034] __x64_sys_exit_group+0x3e/0x50 [ 77.937768][ T5034] do_syscall_64+0x38/0xb0 [ 77.942209][ T5034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.948124][ T5034] RIP: 0033:0x7f3651c6b5b9 [ 77.952548][ T5034] Code: Unable to access opcode bytes at 0x7f3651c6b58f. [ 77.959567][ T5034] RSP: 002b:00007ffef36888d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 77.967996][ T5034] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f3651c6b5b9 [ 77.975989][ T5034] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 77.983967][ T5034] RBP: 00007f3651cf63b0 R08: ffffffffffffffb0 R09: 0000000000000000 [ 77.991971][ T5034] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3651cf63b0 [ 77.999963][ T5034] R13: 0000000000000000 R14: 00007f3651cf91e0 R15: 00007f3651c2e720 [ 78.007972][ T5034] [ 78.011288][ T5034] Kernel Offset: disabled [ 78.015625][ T5034] Rebooting in 86400 seconds..