Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. 2024/11/02 03:31:07 ignoring optional flag "sandboxArg"="0" 2024/11/02 03:31:07 parsed 1 programs [ 197.958928][ T5852] cgroup: Unknown subsys name 'net' [ 198.125576][ T5852] cgroup: Unknown subsys name 'cpuset' [ 198.133324][ T5852] cgroup: Unknown subsys name 'rlimit' [ 199.410340][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.097845][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.109404][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.132505][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.140422][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.173147][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 202.895537][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 202.970157][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.977587][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.986416][ T5882] bridge_slave_0: entered allmulticast mode [ 202.993310][ T5882] bridge_slave_0: entered promiscuous mode [ 203.001570][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.009063][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.016250][ T5882] bridge_slave_1: entered allmulticast mode [ 203.023022][ T5882] bridge_slave_1: entered promiscuous mode [ 203.045478][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.059232][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.084806][ T5882] team0: Port device team_slave_0 added [ 203.093991][ T5882] team0: Port device team_slave_1 added [ 203.122433][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.129449][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.155473][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.168325][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.175397][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.201890][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.236191][ T5882] hsr_slave_0: entered promiscuous mode [ 203.243672][ T5882] hsr_slave_1: entered promiscuous mode [ 203.329226][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.339263][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.348159][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.357226][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.409207][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.431641][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.443822][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.451125][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.465612][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.472770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.586613][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.617033][ T5882] veth0_vlan: entered promiscuous mode [ 203.626600][ T5882] veth1_vlan: entered promiscuous mode [ 203.649688][ T5882] veth0_macvtap: entered promiscuous mode [ 203.658117][ T5882] veth1_macvtap: entered promiscuous mode [ 203.674611][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.688804][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.699735][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.708838][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.718066][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.727007][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.848390][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.930409][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.004824][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.167415][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.074793][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.087263][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.095326][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.105129][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.113398][ T5939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.120636][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2024/11/02 03:31:17 executed programs: 0 [ 205.239808][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.250740][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.263627][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.278985][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.287499][ T5150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.294985][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.400872][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 205.446963][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.454187][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.461315][ T5944] bridge_slave_0: entered allmulticast mode [ 205.468126][ T5944] bridge_slave_0: entered promiscuous mode [ 205.475773][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.483063][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.490207][ T5944] bridge_slave_1: entered allmulticast mode [ 205.497316][ T5944] bridge_slave_1: entered promiscuous mode [ 205.522888][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.534445][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.557672][ T5944] team0: Port device team_slave_0 added [ 205.565156][ T5944] team0: Port device team_slave_1 added [ 205.584888][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.591855][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.618532][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.630298][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.637654][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.664574][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.693607][ T5944] hsr_slave_0: entered promiscuous mode [ 205.701734][ T5944] hsr_slave_1: entered promiscuous mode [ 205.708605][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.716430][ T5944] Cannot create hsr debugfs directory [ 207.343655][ T5150] Bluetooth: hci1: command tx timeout [ 207.461953][ T35] bridge_slave_1: left allmulticast mode [ 207.471335][ T35] bridge_slave_1: left promiscuous mode [ 207.483407][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.498443][ T35] bridge_slave_0: left allmulticast mode [ 207.507992][ T35] bridge_slave_0: left promiscuous mode [ 207.516664][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.839519][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.850708][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.861199][ T35] bond0 (unregistering): Released all slaves [ 207.966180][ T35] hsr_slave_0: left promiscuous mode [ 207.972290][ T35] hsr_slave_1: left promiscuous mode [ 207.978875][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.994828][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.004361][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.011803][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.037141][ T35] veth1_macvtap: left promiscuous mode [ 208.043375][ T35] veth0_macvtap: left promiscuous mode [ 208.048995][ T35] veth1_vlan: left promiscuous mode [ 208.057298][ T35] veth0_vlan: left promiscuous mode [ 208.411884][ T35] team0 (unregistering): Port device team_slave_1 removed [ 208.441449][ T35] team0 (unregistering): Port device team_slave_0 removed [ 208.793050][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.806753][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.834674][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.846585][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.977477][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.005993][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.020473][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.027706][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.062182][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.069411][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.423448][ T5150] Bluetooth: hci1: command tx timeout [ 209.656935][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.751112][ T5944] veth0_vlan: entered promiscuous mode [ 209.788671][ T5944] veth1_vlan: entered promiscuous mode [ 209.853257][ T5944] veth0_macvtap: entered promiscuous mode [ 209.869941][ T5944] veth1_macvtap: entered promiscuous mode [ 209.903669][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.938594][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.952034][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.962037][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.971908][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.980974][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.033137][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.041197][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.061751][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.073922][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/11/02 03:31:22 executed programs: 6 [ 211.502673][ T5150] Bluetooth: hci1: command tx timeout [ 213.583358][ T5150] Bluetooth: hci1: command tx timeout 2024/11/02 03:31:27 executed programs: 268 2024/11/02 03:31:32 executed programs: 541 [ 221.360579][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.369648][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.385453][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.396575][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.407708][ T5939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.426950][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.437465][ T6028] ================================================================== [ 221.445649][ T6028] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 221.453842][ T6028] Read of size 8 at addr ffff888028cb5308 by task kbnepd bnep0/6028 [ 221.461833][ T6028] [ 221.464188][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: kbnepd bnep0 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 221.475057][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.485141][ T6028] Call Trace: [ 221.488438][ T6028] [ 221.491381][ T6028] dump_stack_lvl+0x241/0x360 [ 221.496101][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.501316][ T6028] ? __pfx__printk+0x10/0x10 [ 221.505927][ T6028] ? _printk+0xd5/0x120 [ 221.510104][ T6028] ? __virt_addr_valid+0x183/0x530 [ 221.515233][ T6028] ? __virt_addr_valid+0x183/0x530 [ 221.520365][ T6028] print_report+0x169/0x550 [ 221.524897][ T6028] ? __virt_addr_valid+0x183/0x530 [ 221.530028][ T6028] ? __virt_addr_valid+0x183/0x530 [ 221.535156][ T6028] ? __virt_addr_valid+0x45f/0x530 [ 221.540385][ T6028] ? __phys_addr+0xba/0x170 [ 221.544906][ T6028] ? device_for_each_child+0xbb/0x1b0 [ 221.550297][ T6028] kasan_report+0x143/0x180 [ 221.554821][ T6028] ? device_for_each_child+0xbb/0x1b0 [ 221.560216][ T6028] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 221.565708][ T6028] device_for_each_child+0xbb/0x1b0 [ 221.570928][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.577279][ T6028] ? __pfx_device_for_each_child+0x10/0x10 [ 221.583109][ T6028] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.588325][ T6028] ? lockdep_hardirqs_on+0x99/0x150 [ 221.593545][ T6028] pm_runtime_set_memalloc_noio+0x114/0x260 [ 221.599469][ T6028] netdev_unregister_kobject+0x178/0x250 [ 221.605220][ T6028] unregister_netdevice_many_notify+0x1851/0x1da0 [ 221.612098][ T6028] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 221.618886][ T6028] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.624804][ T6028] ? rcu_is_watching+0x15/0xb0 [ 221.629675][ T6028] ? trace_contention_end+0x3c/0x120 [ 221.634981][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.642209][ T6028] unregister_netdevice_queue+0x303/0x370 [ 221.647957][ T6028] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 221.654224][ T6028] ? down_write+0x18c/0x220 [ 221.658746][ T6028] ? __pfx_down_write+0x10/0x10 [ 221.663640][ T6028] unregister_netdev+0x1c/0x30 [ 221.668425][ T6028] bnep_session+0x2e0e/0x3000 [ 221.673136][ T6028] ? __pfx_bnep_session+0x10/0x10 [ 221.678182][ T6028] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.684530][ T6028] ? __pfx_woken_wake_function+0x10/0x10 [ 221.690185][ T6028] ? __kthread_parkme+0x169/0x1d0 [ 221.695231][ T6028] ? __pfx_bnep_session+0x10/0x10 [ 221.700273][ T6028] kthread+0x2f0/0x390 [ 221.704358][ T6028] ? __pfx_bnep_session+0x10/0x10 [ 221.709396][ T6028] ? __pfx_kthread+0x10/0x10 [ 221.714012][ T6028] ret_from_fork+0x4b/0x80 [ 221.718452][ T6028] ? __pfx_kthread+0x10/0x10 [ 221.723061][ T6028] ret_from_fork_asm+0x1a/0x30 [ 221.727862][ T6028] [ 221.730894][ T6028] [ 221.733226][ T6028] Allocated by task 5944: [ 221.737557][ T6028] kasan_save_track+0x3f/0x80 [ 221.742253][ T6028] __kasan_kmalloc+0x98/0xb0 [ 221.746860][ T6028] __kmalloc_noprof+0x1fc/0x400 [ 221.751733][ T6028] hci_alloc_dev_priv+0x27/0x2030 [ 221.756784][ T6028] vhci_create_device+0x116/0x6a0 [ 221.761871][ T6028] vhci_write+0x3cf/0x490 [ 221.766226][ T6028] vfs_write+0xaeb/0xd30 [ 221.770494][ T6028] ksys_write+0x183/0x2b0 [ 221.774841][ T6028] do_syscall_64+0xf3/0x230 [ 221.779367][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.785279][ T6028] [ 221.787612][ T6028] Freed by task 5944: [ 221.791603][ T6028] kasan_save_track+0x3f/0x80 [ 221.796295][ T6028] kasan_save_free_info+0x40/0x50 [ 221.801343][ T6028] __kasan_slab_free+0x59/0x70 [ 221.806125][ T6028] kfree+0x1a0/0x440 [ 221.810042][ T6028] hci_release_dev+0x1525/0x16b0 [ 221.815002][ T6028] bt_host_release+0x83/0x90 [ 221.819624][ T6028] device_release+0x99/0x1c0 [ 221.824235][ T6028] kobject_put+0x22f/0x480 [ 221.828670][ T6028] vhci_release+0x88/0xd0 [ 221.833025][ T6028] __fput+0x23f/0x880 [ 221.837025][ T6028] task_work_run+0x24f/0x310 [ 221.841633][ T6028] do_exit+0xa2f/0x28e0 [ 221.845800][ T6028] do_group_exit+0x207/0x2c0 [ 221.850406][ T6028] get_signal+0x16a3/0x1740 [ 221.854923][ T6028] arch_do_signal_or_restart+0x96/0x860 [ 221.860485][ T6028] syscall_exit_to_user_mode+0xc9/0x370 [ 221.866052][ T6028] do_syscall_64+0x100/0x230 [ 221.870748][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.876664][ T6028] [ 221.878997][ T6028] Last potentially related work creation: [ 221.884716][ T6028] kasan_save_stack+0x3f/0x60 [ 221.889415][ T6028] __kasan_record_aux_stack+0xac/0xc0 [ 221.894827][ T6028] insert_work+0x3e/0x330 [ 221.899190][ T6028] __queue_work+0xc8b/0xf50 [ 221.903711][ T6028] queue_work_on+0x1c2/0x380 [ 221.908321][ T6028] l2cap_chan_send+0x3d6/0x2690 [ 221.913197][ T6028] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 221.918240][ T6028] __sock_sendmsg+0x221/0x270 [ 221.922935][ T6028] kernel_sendmsg+0x151/0x220 [ 221.927636][ T6028] bnep_session+0x287a/0x3000 [ 221.932327][ T6028] kthread+0x2f0/0x390 [ 221.936414][ T6028] ret_from_fork+0x4b/0x80 [ 221.940849][ T6028] ret_from_fork_asm+0x1a/0x30 [ 221.945643][ T6028] [ 221.947974][ T6028] Second to last potentially related work creation: [ 221.954570][ T6028] kasan_save_stack+0x3f/0x60 [ 221.959267][ T6028] __kasan_record_aux_stack+0xac/0xc0 [ 221.964666][ T6028] insert_work+0x3e/0x330 [ 221.969018][ T6028] __queue_work+0xc8b/0xf50 [ 221.973542][ T6028] queue_work_on+0x1c2/0x380 [ 221.978154][ T6028] l2cap_chan_send+0x3d6/0x2690 [ 221.983025][ T6028] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 221.988071][ T6028] __sock_sendmsg+0x221/0x270 [ 221.992779][ T6028] kernel_sendmsg+0x151/0x220 [ 221.997481][ T6028] bnep_session+0x287a/0x3000 [ 222.002176][ T6028] kthread+0x2f0/0x390 [ 222.006262][ T6028] ret_from_fork+0x4b/0x80 [ 222.010699][ T6028] ret_from_fork_asm+0x1a/0x30 [ 222.015483][ T6028] [ 222.017811][ T6028] The buggy address belongs to the object at ffff888028cb4000 [ 222.017811][ T6028] which belongs to the cache kmalloc-8k of size 8192 [ 222.031882][ T6028] The buggy address is located 4872 bytes inside of [ 222.031882][ T6028] freed 8192-byte region [ffff888028cb4000, ffff888028cb6000) [ 222.045877][ T6028] [ 222.048215][ T6028] The buggy address belongs to the physical page: [ 222.054643][ T6028] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28cb0 [ 222.063434][ T6028] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 222.071957][ T6028] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 222.079535][ T6028] page_type: f5(slab) [ 222.083543][ T6028] raw: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122 [ 222.092147][ T6028] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 222.100755][ T6028] head: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122 [ 222.109443][ T6028] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 222.118139][ T6028] head: 00fff00000000003 ffffea0000a32c01 ffffffffffffffff 0000000000000000 [ 222.126829][ T6028] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 222.135525][ T6028] page dumped because: kasan: bad access detected [ 222.141957][ T6028] page_owner tracks the page as allocated [ 222.147680][ T6028] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5506, tgid 5506 (dhcpcd), ts 36195735181, free_ts 36182338249 [ 222.168360][ T6028] post_alloc_hook+0x1f3/0x230 [ 222.173159][ T6028] get_page_from_freelist+0x303f/0x3190 [ 222.178745][ T6028] __alloc_pages_noprof+0x292/0x710 [ 222.183963][ T6028] alloc_pages_mpol_noprof+0x3e8/0x680 [ 222.189444][ T6028] alloc_slab_page+0x6a/0x120 [ 222.194142][ T6028] allocate_slab+0x5a/0x2f0 [ 222.198665][ T6028] ___slab_alloc+0xcd1/0x14b0 [ 222.203388][ T6028] __slab_alloc+0x58/0xa0 [ 222.207747][ T6028] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 222.214186][ T6028] kmalloc_reserve+0x111/0x2a0 [ 222.218970][ T6028] __alloc_skb+0x1f3/0x440 [ 222.223405][ T6028] netlink_dump+0x1f7/0xd80 [ 222.227927][ T6028] netlink_recvmsg+0x6bb/0x11d0 [ 222.232800][ T6028] sock_recvmsg+0x22f/0x280 [ 222.237336][ T6028] ____sys_recvmsg+0x1c6/0x480 [ 222.242126][ T6028] __sys_recvmsg+0x2e6/0x3d0 [ 222.246734][ T6028] page last free pid 5619 tgid 5619 stack trace: [ 222.253069][ T6028] free_unref_page+0xcfb/0xf20 [ 222.257857][ T6028] __put_partials+0xeb/0x130 [ 222.262468][ T6028] put_cpu_partial+0x17c/0x250 [ 222.267247][ T6028] __slab_free+0x2ea/0x3d0 [ 222.271682][ T6028] qlist_free_all+0x9a/0x140 [ 222.276291][ T6028] kasan_quarantine_reduce+0x14f/0x170 [ 222.281769][ T6028] __kasan_slab_alloc+0x23/0x80 [ 222.286643][ T6028] __kmalloc_noprof+0x1a6/0x400 [ 222.291503][ T6028] tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.297041][ T6028] tomoyo_path_perm+0x2b7/0x740 [ 222.301891][ T6028] security_inode_getattr+0x130/0x330 [ 222.307253][ T6028] vfs_getattr+0x45/0x430 [ 222.311567][ T6028] vfs_fstatat+0xe4/0x190 [ 222.315879][ T6028] __x64_sys_newfstatat+0x11d/0x1a0 [ 222.321061][ T6028] do_syscall_64+0xf3/0x230 [ 222.325551][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.331443][ T6028] [ 222.333752][ T6028] Memory state around the buggy address: [ 222.339367][ T6028] ffff888028cb5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.347419][ T6028] ffff888028cb5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.355483][ T6028] >ffff888028cb5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.363527][ T6028] ^ [ 222.367843][ T6028] ffff888028cb5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.375907][ T6028] ffff888028cb5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.383959][ T6028] ================================================================== [ 222.401020][ T6028] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 222.408252][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: kbnepd bnep0 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 222.419135][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.429184][ T6028] Call Trace: [ 222.432454][ T6028] [ 222.435411][ T6028] dump_stack_lvl+0x241/0x360 [ 222.440088][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.445274][ T6028] ? __pfx__printk+0x10/0x10 [ 222.449847][ T6028] ? preempt_schedule+0xe1/0xf0 [ 222.454684][ T6028] ? vscnprintf+0x5d/0x90 [ 222.459002][ T6028] panic+0x349/0x880 [ 222.462882][ T6028] ? check_panic_on_warn+0x21/0xb0 [ 222.467975][ T6028] ? __pfx_panic+0x10/0x10 [ 222.472382][ T6028] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 222.478360][ T6028] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.484671][ T6028] ? print_report+0x502/0x550 [ 222.489336][ T6028] check_panic_on_warn+0x86/0xb0 [ 222.494263][ T6028] ? device_for_each_child+0xbb/0x1b0 [ 222.499624][ T6028] end_report+0x77/0x160 [ 222.503858][ T6028] kasan_report+0x154/0x180 [ 222.508357][ T6028] ? device_for_each_child+0xbb/0x1b0 [ 222.513735][ T6028] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 222.519191][ T6028] device_for_each_child+0xbb/0x1b0 [ 222.524383][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.530710][ T6028] ? __pfx_device_for_each_child+0x10/0x10 [ 222.536512][ T6028] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.541703][ T6028] ? lockdep_hardirqs_on+0x99/0x150 [ 222.546902][ T6028] pm_runtime_set_memalloc_noio+0x114/0x260 [ 222.552800][ T6028] netdev_unregister_kobject+0x178/0x250 [ 222.558432][ T6028] unregister_netdevice_many_notify+0x1851/0x1da0 [ 222.564843][ T6028] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 222.571599][ T6028] ? __pfx___mutex_trylock_common+0x10/0x10 [ 222.577511][ T6028] ? rcu_is_watching+0x15/0xb0 [ 222.582270][ T6028] ? trace_contention_end+0x3c/0x120 [ 222.587548][ T6028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.593873][ T6028] unregister_netdevice_queue+0x303/0x370 [ 222.599602][ T6028] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 222.605847][ T6028] ? down_write+0x18c/0x220 [ 222.610354][ T6028] ? __pfx_down_write+0x10/0x10 [ 222.615202][ T6028] unregister_netdev+0x1c/0x30 [ 222.619962][ T6028] bnep_session+0x2e0e/0x3000 [ 222.624639][ T6028] ? __pfx_bnep_session+0x10/0x10 [ 222.629653][ T6028] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.635970][ T6028] ? __pfx_woken_wake_function+0x10/0x10 [ 222.641596][ T6028] ? __kthread_parkme+0x169/0x1d0 [ 222.646617][ T6028] ? __pfx_bnep_session+0x10/0x10 [ 222.651720][ T6028] kthread+0x2f0/0x390 [ 222.655787][ T6028] ? __pfx_bnep_session+0x10/0x10 [ 222.660870][ T6028] ? __pfx_kthread+0x10/0x10 [ 222.665473][ T6028] ret_from_fork+0x4b/0x80 [ 222.669902][ T6028] ? __pfx_kthread+0x10/0x10 [ 222.674488][ T6028] ret_from_fork_asm+0x1a/0x30 [ 222.679252][ T6028] [ 222.682521][ T6028] Kernel Offset: disabled [ 222.686828][ T6028] Rebooting in 86400 seconds..