Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts.
Setting up swapspace version 1, size = 127995904 bytes
[   71.518762][ T4242] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   71.545011][ T4245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.552777][ T4245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.560185][ T4245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.568790][ T4248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.576475][ T4248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.584013][ T4248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.674163][ T4244] chnl_net:caif_netlink_parms(): no params data found
[   71.723002][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.730469][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.738676][ T4244] device bridge_slave_0 entered promiscuous mode
[   71.747793][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.755033][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.762958][ T4244] device bridge_slave_1 entered promiscuous mode
[   71.787064][ T4244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.798197][ T4244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.824449][ T4244] team0: Port device team_slave_0 added
[   71.831858][ T4244] team0: Port device team_slave_1 added
[   71.851530][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.858533][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.884483][ T4244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.897975][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.905013][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.931110][ T4244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.966047][ T4244] device hsr_slave_0 entered promiscuous mode
[   71.972981][ T4244] device hsr_slave_1 entered promiscuous mode
[   72.071870][ T4244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.082466][ T4244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.091506][ T4244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.100665][ T4244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.125471][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.132777][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.140487][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.147653][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.199550][ T4244] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.214578][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.225006][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.234345][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.243468][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   72.257024][ T4244] 8021q: adding VLAN 0 to HW filter on device team0
[   72.269054][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.280304][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.287439][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.300527][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.309168][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.316325][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.336676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.345473][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.358692][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.371055][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.384787][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.395721][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.414167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.421618][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.434927][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.455533][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.474282][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.483934][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.491696][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.503612][ T4244] device veth0_vlan entered promiscuous mode
[   72.515473][ T4244] device veth1_vlan entered promiscuous mode
[   72.535122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.544947][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.553415][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.566662][ T4244] device veth0_macvtap entered promiscuous mode
[   72.576017][ T4244] device veth1_macvtap entered promiscuous mode
[   72.593703][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.601221][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.610936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.623172][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.630771][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.641748][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.651246][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.660316][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.669758][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.733897][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.742262][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.754856][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.771802][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
executing program
[   72.779848][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.789656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.816583][ T4256] loop0: detected capacity change from 0 to 128
[   72.829228][ T4256] VFS: Found a Xenix FS (block size = 1024) on device loop0
[   72.840392][ T4256] syz-executor242: attempt to access beyond end of device
[   72.840392][ T4256] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128
[   72.856038][ T4256] Buffer I/O error on dev loop0, logical block 3245768, async page read
[   72.865182][ T4256] ==================================================================
[   72.873244][ T4256] BUG: KASAN: use-after-free in sysv_new_inode+0x107e/0x1210
[   72.880630][ T4256] Read of size 2 at addr ffff8880673371ce by task syz-executor242/4256
[   72.888865][ T4256] 
[   72.891211][ T4256] CPU: 0 PID: 4256 Comm: syz-executor242 Not tainted 6.1.114-syzkaller #0
[   72.899699][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   72.909749][ T4256] Call Trace:
[   72.913032][ T4256]  <TASK>
[   72.915957][ T4256]  dump_stack_lvl+0x1e3/0x2cb
[   72.920635][ T4256]  ? nf_tcp_handle_invalid+0x642/0x642
[   72.926088][ T4256]  ? panic+0x764/0x764
[   72.930150][ T4256]  ? _printk+0xd1/0x111
[   72.934305][ T4256]  ? __virt_addr_valid+0x17f/0x530
[   72.939416][ T4256]  ? __virt_addr_valid+0x17f/0x530
[   72.944530][ T4256]  print_report+0x15f/0x4f0
[   72.949031][ T4256]  ? __virt_addr_valid+0x17f/0x530
[   72.954150][ T4256]  ? __virt_addr_valid+0x17f/0x530
[   72.959276][ T4256]  ? __virt_addr_valid+0x45b/0x530
[   72.964386][ T4256]  ? __phys_addr+0xb6/0x170
[   72.968905][ T4256]  ? sysv_new_inode+0x107e/0x1210
[   72.973935][ T4256]  kasan_report+0x136/0x160
[   72.978432][ T4256]  ? sysv_new_inode+0x107e/0x1210
[   72.983454][ T4256]  sysv_new_inode+0x107e/0x1210
[   72.988307][ T4256]  ? from_kgid+0x1a3/0x730
[   72.992723][ T4256]  ? make_kgid+0x6f0/0x6f0
[   72.997159][ T4256]  ? sysv_free_inode+0x840/0x840
[   73.002105][ T4256]  ? generic_permission+0x27c/0x4f0
[   73.007317][ T4256]  sysv_symlink+0x9b/0x180
[   73.011732][ T4256]  vfs_symlink+0x247/0x3d0
[   73.016146][ T4256]  do_symlinkat+0x21e/0x390
[   73.020646][ T4256]  ? __check_object_size+0x4dd/0xa30
[   73.025945][ T4256]  ? vfs_symlink+0x3d0/0x3d0
[   73.030535][ T4256]  ? getname_flags+0x1f9/0x4f0
[   73.035293][ T4256]  ? lockdep_hardirqs_on+0x94/0x130
[   73.040507][ T4256]  __x64_sys_symlink+0x7a/0x90
[   73.045300][ T4256]  do_syscall_64+0x3b/0xb0
[   73.049706][ T4256]  ? clear_bhb_loop+0x45/0xa0
[   73.054370][ T4256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.060264][ T4256] RIP: 0033:0x7f11d1247209
[   73.064687][ T4256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   73.084290][ T4256] RSP: 002b:00007f11d09f6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   73.092718][ T4256] RAX: ffffffffffffffda RBX: 00007f11d12d26c8 RCX: 00007f11d1247209
[   73.100707][ T4256] RDX: 00007f11d1247209 RSI: 0000000020000000 RDI: 0000000020000080
[   73.108688][ T4256] RBP: 00007f11d12d26c0 R08: 00007f11d09f66c0 R09: 0000000000000000
[   73.116672][ T4256] R10: 0000000000009e89 R11: 0000000000000246 R12: 00007f11d12d26cc
[   73.124637][ T4256] R13: 0000000000000010 R14: 00007ffd0640ff40 R15: 00007ffd06410028
[   73.132623][ T4256]  </TASK>
[   73.135632][ T4256] 
[   73.137943][ T4256] The buggy address belongs to the physical page:
[   73.144348][ T4256] page:ffffea00019ccdc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x67337
[   73.154518][ T4256] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   73.161630][ T4256] raw: 00fff00000000000 ffffea00019cce08 ffffea00019ccd88 0000000000000000
[   73.170203][ T4256] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[   73.178776][ T4256] page dumped because: kasan: bad access detected
[   73.185201][ T4256] page_owner tracks the page as freed
[   73.190554][ T4256] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 19369862993, free_ts 20595765712
[   73.205500][ T4256]  post_alloc_hook+0x18d/0x1b0
[   73.210277][ T4256]  split_map_pages+0x246/0x510
[   73.215038][ T4256]  isolate_freepages_range+0x47c/0x4e0
[   73.220495][ T4256]  alloc_contig_range+0x62a/0x990
[   73.225535][ T4256]  alloc_contig_pages+0x3f0/0x4e0
[   73.230555][ T4256]  debug_vm_pgtable_alloc_huge_page+0xb9/0x108
[   73.236707][ T4256]  init_args+0xc92/0x1022
[   73.241032][ T4256]  debug_vm_pgtable+0xaa/0x46b
[   73.245811][ T4256]  do_one_initcall+0x265/0x8f0
[   73.250610][ T4256]  do_initcall_level+0x157/0x207
[   73.255543][ T4256]  do_initcalls+0x49/0x86
[   73.259862][ T4256]  kernel_init_freeable+0x45c/0x60f
[   73.265053][ T4256]  kernel_init+0x19/0x290
[   73.269420][ T4256]  ret_from_fork+0x1f/0x30
[   73.273836][ T4256] page last free stack trace:
[   73.278579][ T4256]  free_unref_page_prepare+0xf63/0x1120
[   73.284119][ T4256]  free_unref_page+0x33/0x3e0
[   73.288788][ T4256]  free_contig_range+0x9a/0x150
[   73.293651][ T4256]  destroy_args+0xfe/0x997
[   73.298064][ T4256]  debug_vm_pgtable+0x416/0x46b
[   73.302906][ T4256]  do_one_initcall+0x265/0x8f0
[   73.307665][ T4256]  do_initcall_level+0x157/0x207
[   73.312593][ T4256]  do_initcalls+0x49/0x86
[   73.316910][ T4256]  kernel_init_freeable+0x45c/0x60f
[   73.322107][ T4256]  kernel_init+0x19/0x290
[   73.326437][ T4256]  ret_from_fork+0x1f/0x30
[   73.330852][ T4256] 
[   73.333170][ T4256] Memory state around the buggy address:
[   73.338787][ T4256]  ffff888067337080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   73.346839][ T4256]  ffff888067337100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   73.354887][ T4256] >ffff888067337180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   73.362933][ T4256]                                               ^
[   73.369336][ T4256]  ffff888067337200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   73.377387][ T4256]  ffff888067337280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   73.385434][ T4256] ==================================================================
[   73.402417][ T4256] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   73.409650][ T4256] CPU: 1 PID: 4256 Comm: syz-executor242 Not tainted 6.1.114-syzkaller #0
[   73.418180][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   73.428253][ T4256] Call Trace:
[   73.431532][ T4256]  <TASK>
[   73.434469][ T4256]  dump_stack_lvl+0x1e3/0x2cb
[   73.439145][ T4256]  ? nf_tcp_handle_invalid+0x642/0x642
[   73.444598][ T4256]  ? panic+0x764/0x764
[   73.448662][ T4256]  ? preempt_schedule_common+0xa6/0xd0
[   73.454113][ T4256]  ? vscnprintf+0x59/0x80
[   73.458437][ T4256]  panic+0x318/0x764
[   73.462333][ T4256]  ? check_panic_on_warn+0x1d/0xa0
[   73.467469][ T4256]  ? memcpy_page_flushcache+0xfc/0xfc
[   73.472852][ T4256]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[   73.478830][ T4256]  ? _raw_spin_unlock+0x40/0x40
[   73.483680][ T4256]  ? print_report+0x4a3/0x4f0
[   73.488398][ T4256]  check_panic_on_warn+0x7e/0xa0
[   73.493353][ T4256]  ? sysv_new_inode+0x107e/0x1210
[   73.498377][ T4256]  end_report+0x66/0x110
[   73.502624][ T4256]  kasan_report+0x143/0x160
[   73.507130][ T4256]  ? sysv_new_inode+0x107e/0x1210
[   73.512164][ T4256]  sysv_new_inode+0x107e/0x1210
[   73.516379][ T4244] syz-executor242 (4244) used greatest stack depth: 19608 bytes left
[   73.525071][ T4256]  ? from_kgid+0x1a3/0x730
[   73.529486][ T4256]  ? make_kgid+0x6f0/0x6f0
[   73.533896][ T4256]  ? sysv_free_inode+0x840/0x840
[   73.538833][ T4256]  ? generic_permission+0x27c/0x4f0
[   73.544029][ T4256]  sysv_symlink+0x9b/0x180
[   73.548443][ T4256]  vfs_symlink+0x247/0x3d0
[   73.552860][ T4256]  do_symlinkat+0x21e/0x390
[   73.557358][ T4256]  ? __check_object_size+0x4dd/0xa30
[   73.562641][ T4256]  ? vfs_symlink+0x3d0/0x3d0
[   73.567254][ T4256]  ? getname_flags+0x1f9/0x4f0
[   73.572015][ T4256]  ? lockdep_hardirqs_on+0x94/0x130
[   73.577225][ T4256]  __x64_sys_symlink+0x7a/0x90
[   73.581985][ T4256]  do_syscall_64+0x3b/0xb0
[   73.586400][ T4256]  ? clear_bhb_loop+0x45/0xa0
[   73.591066][ T4256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.596979][ T4256] RIP: 0033:0x7f11d1247209
[   73.601383][ T4256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   73.620986][ T4256] RSP: 002b:00007f11d09f6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[   73.629393][ T4256] RAX: ffffffffffffffda RBX: 00007f11d12d26c8 RCX: 00007f11d1247209
[   73.637463][ T4256] RDX: 00007f11d1247209 RSI: 0000000020000000 RDI: 0000000020000080
[   73.645424][ T4256] RBP: 00007f11d12d26c0 R08: 00007f11d09f66c0 R09: 0000000000000000
[   73.653381][ T4256] R10: 0000000000009e89 R11: 0000000000000246 R12: 00007f11d12d26cc
[   73.661373][ T4256] R13: 0000000000000010 R14: 00007ffd0640ff40 R15: 00007ffd06410028
[   73.663771][ T4248] Bluetooth: hci0: command tx timeout
[   73.674701][ T4256]  </TASK>
[   73.677870][ T4256] Kernel Offset: disabled
[   73.682190][ T4256] Rebooting in 86400 seconds..