Warning: Permanently added '10.128.10.29' (ECDSA) to the list of known hosts.
2022/06/12 21:42:40 parsed 1 programs
2022/06/12 21:42:40 executed programs: 0
[ 67.085618][ T4026] cgroup: Unknown subsys name 'net'
[ 67.088262][ T4026] cgroup: Unknown subsys name 'rlimit'
[ 70.239344][ T3621] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 71.201371][ T23] cfg80211: failed to load regulatory.db
[ 72.324124][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 72.325079][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 72.325440][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 72.326176][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 72.326848][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 72.327356][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 72.408935][ T4081] chnl_net:caif_netlink_parms(): no params data found
[ 72.442680][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.442745][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.443226][ T4081] device bridge_slave_0 entered promiscuous mode
[ 72.444399][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.444456][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.444909][ T4081] device bridge_slave_1 entered promiscuous mode
[ 72.466931][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.468883][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.511545][ T4081] team0: Port device team_slave_0 added
[ 72.512702][ T4081] team0: Port device team_slave_1 added
[ 72.532722][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.532728][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.532734][ T4081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.534439][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.534444][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.534449][ T4081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.618657][ T4081] device hsr_slave_0 entered promiscuous mode
[ 72.626831][ T4081] device hsr_slave_1 entered promiscuous mode
[ 72.680675][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.680707][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.680788][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.680821][ T4081] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.715440][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.723879][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 72.727580][ T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.736152][ T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.750578][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 72.753634][ T4081] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.766929][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 72.767341][ T4089] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.767381][ T4089] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.767632][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.767944][ T4089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.768002][ T4089] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.776214][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.776700][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.781246][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.785625][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.793258][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.795959][ T4081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.808926][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.809000][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.816814][ T4081] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.080498][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 73.080871][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 73.081876][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 73.082135][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 73.084067][ T4081] device veth0_vlan entered promiscuous mode
[ 73.087124][ T4081] device veth1_vlan entered promiscuous mode
[ 73.099348][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 73.099755][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 73.100355][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 73.103032][ T4081] device veth0_macvtap entered promiscuous mode
[ 73.105793][ T4081] device veth1_macvtap entered promiscuous mode
[ 73.118125][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 73.118201][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 73.124528][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 73.128105][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 73.128295][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 73.207765][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 73.207775][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 73.209692][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 73.226646][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 73.226656][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 73.228289][ T2940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 74.124964][ T4103] ==================================================================
[ 74.124969][ T4103] BUG: KASAN: use-after-free in __vma_adjust+0x1d53/0x1e90
[ 74.124978][ T4103] Read of size 8 at addr ffff88802190e088 by task syz-executor.0/4103
[ 74.124982][ T4103]
[ 74.124985][ T4103] CPU: 1 PID: 4103 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller #0
[ 74.124989][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 74.124992][ T4103] Call Trace:
[ 74.124994][ T4103]
[ 74.124996][ T4103] dump_stack_lvl+0x57/0x7d
[ 74.125004][ T4103] print_address_description.constprop.0.cold+0xeb/0x495
[ 74.125011][ T4103] ? __vma_adjust+0x1d53/0x1e90
[ 74.125014][ T4103] kasan_report.cold+0xf4/0x1c6
[ 74.125019][ T4103] ? __vma_adjust+0x1d53/0x1e90
[ 74.125022][ T4103] __vma_adjust+0x1d53/0x1e90
[ 74.125027][ T4103] ? vma_mas_store+0x280/0x280
[ 74.125031][ T4103] ? anon_vma_name+0x7a/0x160
[ 74.125038][ T4103] vma_merge+0xa8d/0x12f0
[ 74.125042][ T4103] ? __vma_adjust+0x1e90/0x1e90
[ 74.125044][ T4103] ? down_write+0xde/0x150
[ 74.125050][ T4103] userfaultfd_release+0x318/0x610
[ 74.125057][ T4103] ? find_held_lock+0x2d/0x110
[ 74.125063][ T4103] ? userfaultfd_event_wait_completion+0xa30/0xa30
[ 74.125069][ T4103] __fput+0x1f5/0x8c0
[ 74.125074][ T4103] task_work_run+0xc0/0x160
[ 74.125080][ T4103] get_signal+0x19b/0x2030
[ 74.125085][ T4103] ? exit_signals+0x6f0/0x6f0
[ 74.125088][ T4103] ? userfaultfd_release+0x610/0x610
[ 74.125092][ T4103] ? __fget_files+0x1a7/0x3a0
[ 74.125097][ T4103] arch_do_signal_or_restart+0x82/0x2300
[ 74.125103][ T4103] ? wake_up_q+0xf0/0xf0
[ 74.125107][ T4103] ? get_sigframe_size+0x10/0x10
[ 74.125111][ T4103] ? kick_process+0xf2/0x190
[ 74.125116][ T4103] ? task_work_add+0x13b/0x160
[ 74.125120][ T4103] ? fput+0xa0/0x120
[ 74.125122][ T4103] ? ksys_read+0x188/0x1c0
[ 74.125128][ T4103] exit_to_user_mode_prepare+0x15f/0x250
[ 74.125132][ T4103] syscall_exit_to_user_mode+0x19/0x50
[ 74.125136][ T4103] do_syscall_64+0x42/0xb0
[ 74.125139][ T4103] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 74.125144][ T4103] RIP: 0033:0x7f26de689109
[ 74.125148][ T4103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 74.125151][ T4103] RSP: 002b:00007f26df78b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 74.125156][ T4103] RAX: fffffffffffffe00 RBX: 00007f26de79bf60 RCX: 00007f26de689109
[ 74.125159][ T4103] RDX: 000000000000003c RSI: 0000000020000180 RDI: 0000000000000003
[ 74.125161][ T4103] RBP: 00007f26df78b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 74.125162][ T4103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 74.125164][ T4103] R13: 00007fff7693e3ef R14: 00007f26df78b300 R15: 0000000000022000
[ 74.125168][ T4103]
[ 74.125170][ T4103]
[ 74.125171][ T4103] Allocated by task 4081:
[ 74.125173][ T4103] kasan_save_stack+0x1e/0x40
[ 74.125178][ T4103] __kasan_slab_alloc+0x90/0xc0
[ 74.125180][ T4103] kmem_cache_alloc+0x204/0x3b0
[ 74.125184][ T4103] vm_area_dup+0x83/0x380
[ 74.125187][ T4103] dup_mm+0x56a/0x11d0
[ 74.125190][ T4103] copy_process+0x349a/0x6690
[ 74.125193][ T4103] kernel_clone+0xb8/0x7f0
[ 74.125195][ T4103] __do_sys_clone+0xa1/0xe0
[ 74.125198][ T4103] do_syscall_64+0x35/0xb0
[ 74.125200][ T4103] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 74.125204][ T4103]
[ 74.125205][ T4103] Freed by task 4103:
[ 74.125206][ T4103] kasan_save_stack+0x1e/0x40
[ 74.125209][ T4103] kasan_set_track+0x21/0x30
[ 74.125213][ T4103] kasan_set_free_info+0x20/0x30
[ 74.125216][ T4103] ____kasan_slab_free+0x166/0x1a0
[ 74.125219][ T4103] slab_free_freelist_hook+0x8b/0x1c0
[ 74.125223][ T4103] kmem_cache_free+0xdd/0x5a0
[ 74.125226][ T4103] __vma_adjust+0x82f/0x1e90
[ 74.125228][ T4103] vma_merge+0xa8d/0x12f0
[ 74.125230][ T4103] userfaultfd_release+0x318/0x610
[ 74.125233][ T4103] __fput+0x1f5/0x8c0
[ 74.125235][ T4103] task_work_run+0xc0/0x160
[ 74.125239][ T4103] get_signal+0x19b/0x2030
[ 74.125241][ T4103] arch_do_signal_or_restart+0x82/0x2300
[ 74.125244][ T4103] exit_to_user_mode_prepare+0x15f/0x250
[ 74.125247][ T4103] syscall_exit_to_user_mode+0x19/0x50
[ 74.125250][ T4103] do_syscall_64+0x42/0xb0
[ 74.125252][ T4103] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 74.125255][ T4103]
[ 74.125256][ T4103] The buggy address belongs to the object at ffff88802190e000
[ 74.125256][ T4103] which belongs to the cache vm_area_struct of size 200
[ 74.125258][ T4103] The buggy address is located 136 bytes inside of
[ 74.125258][ T4103] 200-byte region [ffff88802190e000, ffff88802190e0c8)
[ 74.125261][ T4103]
[ 74.125262][ T4103] The buggy address belongs to the physical page:
[ 74.125264][ T4103] page:ffffea0000864380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2190e
[ 74.125268][ T4103] memcg:ffff8880732cd401
[ 74.125269][ T4103] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 74.125276][ T4103] raw: 00fff00000000200 ffffea00006afa00 dead000000000002 ffff888140006b40
[ 74.125279][ T4103] raw: 0000000000000000 00000000000f000f 00000001ffffffff ffff8880732cd401
[ 74.125280][ T4103] page dumped because: kasan: bad access detected
[ 74.125282][ T4103] page_owner tracks the page as allocated
[ 74.125284][ T4103] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3832, tgid 3832 (sed), ts 55499849782, free_ts 55494875223
[ 74.125290][ T4103] get_page_from_freelist+0xa64/0x3d10
[ 74.125293][ T4103] __alloc_pages+0x1c7/0x510
[ 74.125296][ T4103] allocate_slab+0x26c/0x3c0
[ 74.125299][ T4103] ___slab_alloc+0x950/0xd90
[ 74.125302][ T4103] __slab_alloc.constprop.0+0x4d/0xa0
[ 74.125305][ T4103] kmem_cache_alloc+0x360/0x3b0
[ 74.125308][ T4103] vm_area_alloc+0x17/0xf0
[ 74.125311][ T4103] mmap_region+0x6c8/0x11d0
[ 74.125313][ T4103] do_mmap+0x5ca/0xd80
[ 74.125315][ T4103] vm_mmap_pgoff+0x163/0x210
[ 74.125319][ T4103] ksys_mmap_pgoff+0x2e8/0x490
[ 74.125322][ T4103] do_syscall_64+0x35/0xb0
[ 74.125324][ T4103] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 74.125327][ T4103] page last free stack trace:
[ 74.125328][ T4103] free_pcp_prepare+0x549/0xd20
[ 74.125331][ T4103] free_unref_page_list+0x184/0x1530
[ 74.125334][ T4103] release_pages+0x6f1/0x1780
[ 74.125337][ T4103] tlb_batch_pages_flush+0x85/0x160
[ 74.125340][ T4103] tlb_finish_mmu+0x110/0x6c0
[ 74.125343][ T4103] exit_mmap+0x19d/0x540
[ 74.125345][ T4103] __mmput+0xf3/0x440
[ 74.125347][ T4103] begin_new_exec+0xda0/0x2940
[ 74.125352][ T4103] load_elf_binary+0xf64/0x4180
[ 74.125355][ T4103] bprm_execve+0x669/0x14e0
[ 74.125358][ T4103] do_execveat_common+0x5fd/0x7b0
[ 74.125362][ T4103] __x64_sys_execve+0x8a/0xb0
[ 74.125365][ T4103] do_syscall_64+0x35/0xb0
[ 74.125367][ T4103] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 74.125371][ T4103]
[ 74.125371][ T4103] Memory state around the buggy address:
[ 74.125373][ T4103] ffff88802190df80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 74.125375][ T4103] ffff88802190e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 74.125377][ T4103] >ffff88802190e080: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc
[ 74.125378][ T4103] ^
[ 74.125379][ T4103] ffff88802190e100: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 74.125381][ T4103] ffff88802190e180: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 74.125383][ T4103] ==================================================================
[ 74.125385][ T4103] Kernel panic - not syncing: panic_on_warn set ...
[ 74.854347][ T4103] CPU: 1 PID: 4103 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller #0
[ 74.862992][ T4103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 74.873016][ T4103] Call Trace:
[ 74.876275][ T4103]
[ 74.879187][ T4103] dump_stack_lvl+0x57/0x7d
[ 74.883669][ T4103] panic+0x227/0x466
[ 74.887549][ T4103] ? panic_print_sys_info.part.0+0x69/0x69
[ 74.893341][ T4103] ? mark_held_locks+0x9f/0xe0
[ 74.898090][ T4103] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 74.903965][ T4103] ? __vma_adjust+0x1d53/0x1e90
[ 74.908786][ T4103] end_report.part.0+0x3f/0x7c
[ 74.913546][ T4103] kasan_report.cold+0x93/0x1c6
[ 74.918377][ T4103] ? __vma_adjust+0x1d53/0x1e90
[ 74.923197][ T4103] __vma_adjust+0x1d53/0x1e90
[ 74.927855][ T4103] ? vma_mas_store+0x280/0x280
[ 74.932592][ T4103] ? anon_vma_name+0x7a/0x160
[ 74.937265][ T4103] vma_merge+0xa8d/0x12f0
[ 74.941602][ T4103] ? __vma_adjust+0x1e90/0x1e90
[ 74.946442][ T4103] ? down_write+0xde/0x150
[ 74.950830][ T4103] userfaultfd_release+0x318/0x610
[ 74.955915][ T4103] ? find_held_lock+0x2d/0x110
[ 74.960650][ T4103] ? userfaultfd_event_wait_completion+0xa30/0xa30
[ 74.967219][ T4103] __fput+0x1f5/0x8c0
[ 74.971193][ T4103] task_work_run+0xc0/0x160
[ 74.975691][ T4103] get_signal+0x19b/0x2030
[ 74.980124][ T4103] ? exit_signals+0x6f0/0x6f0
[ 74.984859][ T4103] ? userfaultfd_release+0x610/0x610
[ 74.990116][ T4103] ? __fget_files+0x1a7/0x3a0
[ 74.994764][ T4103] arch_do_signal_or_restart+0x82/0x2300
[ 75.000381][ T4103] ? wake_up_q+0xf0/0xf0
[ 75.004603][ T4103] ? get_sigframe_size+0x10/0x10
[ 75.009510][ T4103] ? kick_process+0xf2/0x190
[ 75.014075][ T4103] ? task_work_add+0x13b/0x160
[ 75.018900][ T4103] ? fput+0xa0/0x120
[ 75.022944][ T4103] ? ksys_read+0x188/0x1c0
[ 75.027361][ T4103] exit_to_user_mode_prepare+0x15f/0x250
[ 75.032965][ T4103] syscall_exit_to_user_mode+0x19/0x50
[ 75.038405][ T4103] do_syscall_64+0x42/0xb0
[ 75.042791][ T4103] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 75.048657][ T4103] RIP: 0033:0x7f26de689109
[ 75.053044][ T4103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 75.072620][ T4103] RSP: 002b:00007f26df78b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 75.081030][ T4103] RAX: fffffffffffffe00 RBX: 00007f26de79bf60 RCX: 00007f26de689109
[ 75.089587][ T4103] RDX: 000000000000003c RSI: 0000000020000180 RDI: 0000000000000003
[ 75.097533][ T4103] RBP: 00007f26df78b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 75.105502][ T4103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 75.113455][ T4103] R13: 00007fff7693e3ef R14: 00007f26df78b300 R15: 0000000000022000
[ 75.121419][ T4103]
[ 75.124492][ T4103] Kernel Offset: disabled
[ 75.128793][ T4103] Rebooting in 86400 seconds..