[ 59.660609][ T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.687486][ T56] device veth1_macvtap left promiscuous mode
[ 59.695050][ T56] device veth0_macvtap left promiscuous mode
[ 59.701294][ T56] device veth1_vlan left promiscuous mode
[ 59.710277][ T56] device veth0_vlan left promiscuous mode
[ 59.999718][ T56] team0 (unregistering): Port device team_slave_1 removed
[ 60.019869][ T56] team0 (unregistering): Port device team_slave_0 removed
[ 60.037381][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 60.056252][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 60.112147][ T56] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts.
2022/07/11 11:50:06 parsed 1 programs
2022/07/11 11:50:06 executed programs: 0
[ 75.823913][ T4055] cgroup: Unknown subsys name 'net'
[ 75.832336][ T4055] cgroup: Unknown subsys name 'rlimit'
[ 76.725100][ T1156] cfg80211: failed to load regulatory.db
[ 76.968963][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 76.977211][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 76.985782][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 76.994659][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.002229][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.010169][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 77.109892][ T4064] chnl_net:caif_netlink_parms(): no params data found
[ 77.150837][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.158184][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.166430][ T4064] device bridge_slave_0 entered promiscuous mode
[ 77.175464][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.182679][ T4064] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.190954][ T4064] device bridge_slave_1 entered promiscuous mode
[ 77.211807][ T4064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.225572][ T4064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.247911][ T4064] team0: Port device team_slave_0 added
[ 77.255543][ T4064] team0: Port device team_slave_1 added
[ 77.273237][ T4064] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.280296][ T4064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.306508][ T4064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.319433][ T4064] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.326547][ T4064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.352743][ T4064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.378835][ T4064] device hsr_slave_0 entered promiscuous mode
[ 77.386168][ T4064] device hsr_slave_1 entered promiscuous mode
[ 77.449965][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.457134][ T4064] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.464882][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.472006][ T4064] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.518108][ T4064] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.530755][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.540885][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.550267][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.558612][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 77.572322][ T4064] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.582683][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.593900][ T26] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.601130][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.613464][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.621873][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.629088][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.654227][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.662690][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.671590][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.680016][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.689436][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.698891][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.714200][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.721616][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.735958][ T4064] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.749589][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.767990][ T4064] device veth0_vlan entered promiscuous mode
[ 77.776309][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.785555][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.793670][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.805269][ T4064] device veth1_vlan entered promiscuous mode
[ 77.816634][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.824548][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.841948][ T4064] device veth0_macvtap entered promiscuous mode
[ 77.850789][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.859887][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.869954][ T4064] device veth1_macvtap entered promiscuous mode
[ 77.887307][ T4064] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.895713][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.908700][ T4064] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.917093][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.970050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.986882][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.998693][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.000710][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 78.007201][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.024135][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 79.054317][ T3621] Bluetooth: hci0: command 0x0409 tx timeout
[ 79.093108][ T3621] ==================================================================
[ 79.101220][ T3621] BUG: KASAN: use-after-free in kill_fasync+0x45e/0x470
[ 79.108408][ T3621] Read of size 8 at addr ffff88807d1e9168 by task kworker/1:3/3621
[ 79.116412][ T3621]
[ 79.118753][ T3621] CPU: 1 PID: 3621 Comm: kworker/1:3 Not tainted 5.19.0-rc4-next-20220628-syzkaller-dirty #0
[ 79.128950][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 79.139212][ T3621] Workqueue: events key_garbage_collector
[ 79.144945][ T3621] Call Trace:
[ 79.148217][ T3621]
[ 79.151145][ T3621] dump_stack_lvl+0xcd/0x134
[ 79.155737][ T3621] print_report.cold+0x2ba/0x719
[ 79.160681][ T3621] ? kill_fasync+0x45e/0x470
[ 79.165305][ T3621] kasan_report+0xbe/0x1f0
[ 79.170198][ T3621] ? kill_fasync+0x45e/0x470
[ 79.174810][ T3621] kill_fasync+0x45e/0x470
[ 79.179333][ T3621] post_one_notification.isra.0+0x71a/0x9d0
[ 79.185331][ T3621] remove_watch_from_object+0x35a/0x9d0
[ 79.190897][ T3621] ? __post_watch_notification+0x840/0x840
[ 79.196741][ T3621] ? do_raw_spin_lock+0x120/0x2a0
[ 79.201795][ T3621] key_gc_unused_keys.constprop.0+0x2e5/0x600
[ 79.207956][ T3621] key_garbage_collector+0x3d7/0x920
[ 79.213362][ T3621] process_one_work+0x991/0x1610
[ 79.218316][ T3621] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 79.223798][ T3621] ? rwlock_bug.part.0+0x90/0x90
[ 79.228826][ T3621] ? _raw_spin_lock_irq+0x41/0x50
[ 79.233864][ T3621] worker_thread+0x665/0x1080
[ 79.238555][ T3621] ? __kthread_parkme+0x15f/0x220
[ 79.243760][ T3621] ? process_one_work+0x1610/0x1610
[ 79.249048][ T3621] kthread+0x2e9/0x3a0
[ 79.253117][ T3621] ? kthread_complete_and_exit+0x40/0x40
[ 79.258754][ T3621] ret_from_fork+0x1f/0x30
[ 79.263178][ T3621]
[ 79.266189][ T3621]
[ 79.268686][ T3621] Allocated by task 4105:
[ 79.273114][ T3621] kasan_save_stack+0x1e/0x40
[ 79.277788][ T3621] __kasan_kmalloc+0xa9/0xd0
[ 79.282383][ T3621] alloc_pipe_info+0x105/0x590
[ 79.287145][ T3621] create_pipe_files+0x8d/0x880
[ 79.291991][ T3621] do_pipe2+0x96/0x1b0
[ 79.296050][ T3621] __x64_sys_pipe2+0x50/0x70
[ 79.300634][ T3621] do_syscall_64+0x35/0xb0
[ 79.305045][ T3621] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 79.310949][ T3621]
[ 79.313283][ T3621] Freed by task 4104:
[ 79.317333][ T3621] kasan_save_stack+0x1e/0x40
[ 79.322376][ T3621] kasan_set_track+0x21/0x30
[ 79.327127][ T3621] kasan_set_free_info+0x20/0x30
[ 79.332066][ T3621] ____kasan_slab_free+0x166/0x1c0
[ 79.337173][ T3621] slab_free_freelist_hook+0x8b/0x1c0
[ 79.342635][ T3621] kfree+0xe2/0x4d0
[ 79.346446][ T3621] pipe_release+0x2b6/0x310
[ 79.350943][ T3621] __fput+0x277/0x9d0
[ 79.354920][ T3621] task_work_run+0xdd/0x1a0
[ 79.359424][ T3621] exit_to_user_mode_prepare+0x23c/0x250
[ 79.365049][ T3621] syscall_exit_to_user_mode+0x19/0x50
[ 79.370523][ T3621] do_syscall_64+0x42/0xb0
[ 79.374954][ T3621] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 79.380884][ T3621]
[ 79.383203][ T3621] The buggy address belongs to the object at ffff88807d1e9000
[ 79.383203][ T3621] which belongs to the cache kmalloc-cg-512 of size 512
[ 79.397531][ T3621] The buggy address is located 360 bytes inside of
[ 79.397531][ T3621] 512-byte region [ffff88807d1e9000, ffff88807d1e9200)
[ 79.410814][ T3621]
[ 79.413152][ T3621] The buggy address belongs to the physical page:
[ 79.419552][ T3621] page:ffffea0001f47a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d1e8
[ 79.430013][ T3621] head:ffffea0001f47a00 order:2 compound_mapcount:0 compound_pincount:0
[ 79.438557][ T3621] memcg:ffff88807c9f0b01
[ 79.442879][ T3621] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 79.450874][ T3621] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888011842dc0
[ 79.459463][ T3621] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88807c9f0b01
[ 79.468045][ T3621] page dumped because: kasan: bad access detected
[ 79.474446][ T3621] page_owner tracks the page as allocated
[ 79.480153][ T3621] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2958, tgid 2958 (klogd), ts 15679614274, free_ts 14007295278
[ 79.501300][ T3621] get_page_from_freelist+0x210d/0x3a30
[ 79.506862][ T3621] __alloc_pages+0x1c7/0x510
[ 79.511466][ T3621] alloc_pages+0x1aa/0x310
[ 79.515880][ T3621] allocate_slab+0x27e/0x3d0
[ 79.520576][ T3621] ___slab_alloc+0x89d/0xef0
[ 79.525173][ T3621] __slab_alloc.constprop.0+0x4d/0xa0
[ 79.530555][ T3621] __kmalloc_node_track_caller+0x360/0x480
[ 79.536451][ T3621] __alloc_skb+0xd9/0x340
[ 79.540839][ T3621] alloc_skb_with_frags+0x93/0x6d0
[ 79.546014][ T3621] sock_alloc_send_pskb+0x793/0x920
[ 79.551232][ T3621] unix_dgram_sendmsg+0x415/0x1b60
[ 79.556375][ T3621] sock_sendmsg+0xcf/0x120
[ 79.560816][ T3621] __sys_sendto+0x21a/0x320
[ 79.565769][ T3621] __x64_sys_sendto+0xdd/0x1b0
[ 79.570550][ T3621] do_syscall_64+0x35/0xb0
[ 79.575004][ T3621] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 79.580914][ T3621] page last free stack trace:
[ 79.585582][ T3621] free_pcp_prepare+0x5e4/0xd20
[ 79.590523][ T3621] free_unref_page+0x19/0x4d0
[ 79.595288][ T3621] free_contig_range+0xb1/0x180
[ 79.600139][ T3621] destroy_args+0xa8/0x64c
[ 79.604562][ T3621] debug_vm_pgtable+0x2954/0x29e5
[ 79.609616][ T3621] do_one_initcall+0xfe/0x650
[ 79.614297][ T3621] kernel_init_freeable+0x6b1/0x73a
[ 79.619500][ T3621] kernel_init+0x1a/0x1d0
[ 79.623969][ T3621] ret_from_fork+0x1f/0x30
[ 79.628406][ T3621]
[ 79.630857][ T3621] Memory state around the buggy address:
[ 79.636481][ T3621] ffff88807d1e9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.644813][ T3621] ffff88807d1e9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.652867][ T3621] >ffff88807d1e9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.660961][ T3621] ^
[ 79.668421][ T3621] ffff88807d1e9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.676478][ T3621] ffff88807d1e9200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.684619][ T3621] ==================================================================
[ 79.711121][ T3621] Kernel panic - not syncing: panic_on_warn set ...
[ 79.717757][ T3621] CPU: 1 PID: 3621 Comm: kworker/1:3 Not tainted 5.19.0-rc4-next-20220628-syzkaller-dirty #0
[ 79.727907][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 79.737958][ T3621] Workqueue: events key_garbage_collector
[ 79.743868][ T3621] Call Trace:
[ 79.747137][ T3621]
[ 79.750061][ T3621] dump_stack_lvl+0xcd/0x134
[ 79.754692][ T3621] panic+0x2d7/0x636
[ 79.758611][ T3621] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 79.764855][ T3621] ? preempt_schedule_common+0x59/0xc0
[ 79.770316][ T3621] ? preempt_schedule_thunk+0x16/0x18
[ 79.775692][ T3621] ? kill_fasync+0x45e/0x470
[ 79.780283][ T3621] end_report.part.0+0x3f/0x7c
[ 79.785050][ T3621] kasan_report.cold+0x8/0x12
[ 79.789730][ T3621] ? kill_fasync+0x45e/0x470
[ 79.794343][ T3621] kill_fasync+0x45e/0x470
[ 79.798769][ T3621] post_one_notification.isra.0+0x71a/0x9d0
[ 79.804752][ T3621] remove_watch_from_object+0x35a/0x9d0
[ 79.810383][ T3621] ? __post_watch_notification+0x840/0x840
[ 79.816271][ T3621] ? do_raw_spin_lock+0x120/0x2a0
[ 79.821297][ T3621] key_gc_unused_keys.constprop.0+0x2e5/0x600
[ 79.827371][ T3621] key_garbage_collector+0x3d7/0x920
[ 79.832836][ T3621] process_one_work+0x991/0x1610
[ 79.837949][ T3621] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 79.843334][ T3621] ? rwlock_bug.part.0+0x90/0x90
[ 79.848360][ T3621] ? _raw_spin_lock_irq+0x41/0x50
[ 79.853490][ T3621] worker_thread+0x665/0x1080
[ 79.858178][ T3621] ? __kthread_parkme+0x15f/0x220
[ 79.863198][ T3621] ? process_one_work+0x1610/0x1610
[ 79.868408][ T3621] kthread+0x2e9/0x3a0
[ 79.872477][ T3621] ? kthread_complete_and_exit+0x40/0x40
[ 79.878110][ T3621] ret_from_fork+0x1f/0x30
[ 79.882536][ T3621]
[ 79.885730][ T3621] Kernel Offset: disabled
[ 79.890178][ T3621] Rebooting in 86400 seconds..