[ 46.250605][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.290043][ T785] device veth1_macvtap left promiscuous mode [ 46.290156][ T785] device veth0_macvtap left promiscuous mode [ 46.290264][ T785] device veth1_vlan left promiscuous mode [ 46.291251][ T785] device veth0_vlan left promiscuous mode [ 46.439829][ T785] team0 (unregistering): Port device team_slave_1 removed [ 46.446135][ T785] team0 (unregistering): Port device team_slave_0 removed [ 46.467931][ T785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.472430][ T785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.530443][ T785] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.39' (ECDSA) to the list of known hosts. 2022/06/24 12:00:56 parsed 1 programs 2022/06/24 12:00:56 executed programs: 0 [ 60.143540][ T4049] cgroup: Unknown subsys name 'net' [ 60.149455][ T4049] cgroup: Unknown subsys name 'rlimit' [ 63.343908][ T3615] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 66.547050][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.547089][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.503973][ T3615] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 71.664127][ T3615] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 71.669800][ T14] cfg80211: failed to load regulatory.db [ 73.749212][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.750650][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.751199][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.752080][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.753301][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.753673][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.847958][ T4081] chnl_net:caif_netlink_parms(): no params data found [ 73.880889][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.880967][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.881490][ T4081] device bridge_slave_0 entered promiscuous mode [ 73.883374][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.883440][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.884684][ T4081] device bridge_slave_1 entered promiscuous mode [ 73.918467][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.921852][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.952475][ T4081] team0: Port device team_slave_0 added [ 73.953578][ T4081] team0: Port device team_slave_1 added [ 73.972791][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.972798][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.972803][ T4081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.976261][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.976268][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.976275][ T4081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.063308][ T4081] device hsr_slave_0 entered promiscuous mode [ 74.064091][ T4081] device hsr_slave_1 entered promiscuous mode [ 74.128268][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.128315][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.128427][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.128465][ T4081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.169761][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.176719][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.180759][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.189714][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.204851][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.210119][ T4081] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.221706][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.222125][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.222176][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.226004][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.226725][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.226769][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.243265][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.244497][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.251891][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.259503][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.265874][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.268704][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.281789][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.281911][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.292418][ T4081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.474110][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.480742][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.481337][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.481630][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.485102][ T4081] device veth0_vlan entered promiscuous mode [ 74.490733][ T4081] device veth1_vlan entered promiscuous mode [ 74.511398][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.511950][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.512551][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.519400][ T4081] device veth0_macvtap entered promiscuous mode [ 74.522512][ T4081] device veth1_macvtap entered promiscuous mode [ 74.548486][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.548592][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.552898][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.559818][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.560098][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.635216][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.635226][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.637036][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.655801][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.655815][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.657713][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.710273][ T4100] FAULT_INJECTION: forcing a failure. [ 74.710273][ T4100] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.710290][ T4100] CPU: 0 PID: 4100 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller #0 [ 74.710297][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.710302][ T4100] Call Trace: [ 74.710305][ T4100] [ 74.710309][ T4100] dump_stack_lvl+0x57/0x7d [ 74.710325][ T4100] should_fail.cold+0x5/0xa [ 74.710338][ T4100] _copy_from_user+0x25/0xe0 [ 74.710350][ T4100] raw_ioctl_init+0x8c/0x7b0 [ 74.710362][ T4100] ? gadget_ep_complete+0x160/0x160 [ 74.710371][ T4100] ? tomoyo_execute_permission+0x470/0x470 [ 74.710395][ T4100] ? vfs_fileattr_set+0x9f0/0x9f0 [ 74.710417][ T4100] raw_ioctl+0x78e/0x2270 [ 74.710429][ T4100] ? gadget_suspend+0x10/0x10 [ 74.710443][ T4100] __x64_sys_ioctl+0x11f/0x190 [ 74.710452][ T4100] do_syscall_64+0x35/0xb0 [ 74.710462][ T4100] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 74.710469][ T4100] RIP: 0033:0x7f1b3a488ec7 [ 74.710477][ T4100] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.710482][ T4100] RSP: 002b:00007f1b3b63a098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.710491][ T4100] RAX: ffffffffffffffda RBX: 00007f1b3b63b110 RCX: 00007f1b3a488ec7 [ 74.710495][ T4100] RDX: 00007f1b3b63b110 RSI: 0000000041015500 RDI: 0000000000000004 [ 74.710499][ T4100] RBP: 0000000000000004 R08: 000000000000ffff R09: 000000000000000b [ 74.710502][ T4100] R10: 00007f1b3b63a140 R11: 0000000000000246 R12: 00007f1b3b63a0e0 [ 74.710506][ T4100] R13: 0000000000000000 R14: 0000000020000000 R15: 0000000000000000 [ 74.710524][ T4100] 2022/06/24 12:01:11 executed programs: 1 [ 75.233021][ T4101] ================================================================== [ 75.233026][ T4101] BUG: KASAN: null-ptr-deref in ida_free+0x135/0x210 [ 75.233038][ T4101] Read of size 8 at addr 0000000000000000 by task syz-executor.0/4101 [ 75.233042][ T4101] [ 75.233044][ T4101] CPU: 0 PID: 4101 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller #0 [ 75.233049][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.233052][ T4101] Call Trace: [ 75.233054][ T4101] [ 75.233057][ T4101] dump_stack_lvl+0x57/0x7d [ 75.233066][ T4101] kasan_report.cold+0x61/0x1c6 [ 75.233072][ T4101] ? ida_free+0x135/0x210 [ 75.233076][ T4101] kasan_check_range+0x13d/0x180 [ 75.233083][ T4101] ida_free+0x135/0x210 [ 75.233086][ T4101] ? ida_destroy+0x2b0/0x2b0 [ 75.233090][ T4101] ? lock_downgrade+0x6e0/0x6e0 [ 75.233102][ T4101] dev_free+0xd3/0x680 [ 75.233110][ T4101] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 75.233119][ T4101] raw_release+0x165/0x1e0 [ 75.233125][ T4101] __fput+0x1f5/0x8c0 [ 75.233133][ T4101] task_work_run+0xc0/0x160 [ 75.233143][ T4101] exit_to_user_mode_prepare+0x23c/0x250 [ 75.233150][ T4101] syscall_exit_to_user_mode+0x19/0x50 [ 75.233159][ T4101] do_syscall_64+0x42/0xb0 [ 75.233166][ T4101] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 75.233172][ T4101] RIP: 0033:0x7f1b3a43bd4b [ 75.233178][ T4101] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 75.233183][ T4101] RSP: 002b:00007ffc96461180 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 75.233192][ T4101] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f1b3a43bd4b [ 75.233196][ T4101] RDX: ffffffffffffffb8 RSI: ffffffffffffffff RDI: 0000000000000004 [ 75.233200][ T4101] RBP: 00007f1b3a59d960 R08: 0000000000000000 R09: 00007f1b3a5a0910 [ 75.233204][ T4101] R10: 00007ffc96461280 R11: 0000000000000293 R12: 00000000000125c4 [ 75.233208][ T4101] R13: 00007ffc96461280 R14: 00007f1b3a59bf60 R15: 0000000000000bea [ 75.233215][ T4101] [ 75.233218][ T4101] ================================================================== [ 75.233220][ T4101] Kernel panic - not syncing: panic_on_warn set ... [ 75.451206][ T4101] CPU: 0 PID: 4101 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller #0 [ 75.460059][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.470152][ T4101] Call Trace: [ 75.473454][ T4101] [ 75.476387][ T4101] dump_stack_lvl+0x57/0x7d [ 75.480905][ T4101] panic+0x227/0x47a [ 75.484788][ T4101] ? panic_print_sys_info.part.0+0x69/0x69 [ 75.490686][ T4101] ? ida_free+0x135/0x210 [ 75.495092][ T4101] end_report.part.0+0x3f/0x7c [ 75.499855][ T4101] kasan_report.cold+0x93/0x1c6 [ 75.504717][ T4101] ? ida_free+0x135/0x210 [ 75.509051][ T4101] kasan_check_range+0x13d/0x180 [ 75.514006][ T4101] ida_free+0x135/0x210 [ 75.518165][ T4101] ? ida_destroy+0x2b0/0x2b0 [ 75.522780][ T4101] ? lock_downgrade+0x6e0/0x6e0 [ 75.527621][ T4101] dev_free+0xd3/0x680 [ 75.531687][ T4101] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 75.537497][ T4101] raw_release+0x165/0x1e0 [ 75.541949][ T4101] __fput+0x1f5/0x8c0 [ 75.545917][ T4101] task_work_run+0xc0/0x160 [ 75.550415][ T4101] exit_to_user_mode_prepare+0x23c/0x250 [ 75.556469][ T4101] syscall_exit_to_user_mode+0x19/0x50 [ 75.561949][ T4101] do_syscall_64+0x42/0xb0 [ 75.566358][ T4101] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 75.572228][ T4101] RIP: 0033:0x7f1b3a43bd4b [ 75.576623][ T4101] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 75.596228][ T4101] RSP: 002b:00007ffc96461180 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 75.604684][ T4101] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f1b3a43bd4b [ 75.612748][ T4101] RDX: ffffffffffffffb8 RSI: ffffffffffffffff RDI: 0000000000000004 [ 75.620863][ T4101] RBP: 00007f1b3a59d960 R08: 0000000000000000 R09: 00007f1b3a5a0910 [ 75.628842][ T4101] R10: 00007ffc96461280 R11: 0000000000000293 R12: 00000000000125c4 [ 75.636917][ T4101] R13: 00007ffc96461280 R14: 00007f1b3a59bf60 R15: 0000000000000bea [ 75.644931][ T4101] [ 75.648040][ T4101] Kernel Offset: disabled [ 75.652374][ T4101] Rebooting in 86400 seconds..