Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts. 2022/08/17 11:50:57 ignoring optional flag "sandboxArg"="0" 2022/08/17 11:50:57 parsed 1 programs 2022/08/17 11:50:58 executed programs: 0 [ 76.286011][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.294200][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.302552][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.310719][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.319686][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.327015][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.403937][ T4062] chnl_net:caif_netlink_parms(): no params data found [ 76.442790][ T145] cfg80211: failed to load regulatory.db [ 76.456241][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.463494][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.471947][ T4062] device bridge_slave_0 entered promiscuous mode [ 76.480875][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.489678][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.498153][ T4062] device bridge_slave_1 entered promiscuous mode [ 76.530702][ T4062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.543126][ T4062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.576776][ T4062] team0: Port device team_slave_0 added [ 76.585417][ T4062] team0: Port device team_slave_1 added [ 76.610925][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.618057][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.644855][ T4062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.658605][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.666703][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.693277][ T4062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.728905][ T4062] device hsr_slave_0 entered promiscuous mode [ 76.735825][ T4062] device hsr_slave_1 entered promiscuous mode [ 76.833502][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.840644][ T4062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.848103][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.855238][ T4062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.916174][ T4062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.932315][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.942657][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.950543][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.959464][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.973983][ T4062] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.986997][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.996449][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.003571][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.023702][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.032204][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.039468][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.048493][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.059797][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.067911][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.083670][ T4062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.094284][ T4062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.108778][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.117945][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.126607][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.140550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.148791][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.160345][ T4062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.362109][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.370937][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.380054][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.388443][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.397072][ T4062] device veth0_vlan entered promiscuous mode [ 77.409164][ T4062] device veth1_vlan entered promiscuous mode [ 77.428733][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.437414][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.448514][ T4062] device veth0_macvtap entered promiscuous mode [ 77.459196][ T4062] device veth1_macvtap entered promiscuous mode [ 77.473058][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.480824][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.490077][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.498648][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.507752][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.519324][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.527062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.535812][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.586471][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.594678][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.608263][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.621148][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.629204][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.638349][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.672000][ T4082] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.844446][ C1] ================================================================== [ 77.844458][ T4090] BUG: unable to handle page fault for address: ffffc9000484a330 [ 77.852519][ C1] BUG: KASAN: vmalloc-out-of-bounds in kvm_arch_hardware_enable+0x281/0x840 [ 77.860214][ T4090] #PF: supervisor read access in kernel mode [ 77.868941][ C1] Read of size 4 at addr ffffc9000484a330 by task kvm/4091 [ 77.874900][ T4090] #PF: error_code(0x0000) - not-present page [ 77.882065][ C1] [ 77.882073][ C1] CPU: 1 PID: 4091 Comm: kvm Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7-dirty #0 [ 77.888017][ T4090] PGD 11800067 [ 77.890331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 77.900022][ T4090] P4D 11800067 [ 77.903456][ C1] Call Trace: [ 77.903466][ C1] [ 77.913489][ T4090] PUD 119c9067 [ 77.916931][ C1] dump_stack_lvl+0xcd/0x134 [ 77.920194][ T4090] PMD 1e9bb067 [ 77.923021][ C1] ? kvm_arch_hardware_enable+0x281/0x840 [ 77.926467][ T4090] PTE 0 [ 77.931026][ C1] print_report.cold+0x59/0x719 [ 77.934464][ T4090] Oops: 0000 [#1] PREEMPT SMP KASAN [ 77.940415][ C1] ? kvm_arch_hardware_enable+0x281/0x840 [ 77.943152][ T4090] CPU: 0 PID: 4090 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7-dirty #0 [ 77.948063][ C1] kasan_report+0xb1/0x1e0 [ 77.953238][ T4090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 77.958953][ C1] ? kvm_arch_hardware_enable+0x281/0x840 [ 77.969522][ T4090] RIP: 0010:kvm_arch_hardware_enable+0x2ab/0x840 [ 77.974270][ C1] kasan_check_range+0x13d/0x180 [ 77.984343][ T4090] Code: 48 89 e8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ed 04 00 00 <41> 8b 95 30 13 00 00 4d 8d b5 40 12 00 00 b9 08 00 00 00 4c 89 fe [ 77.990036][ C1] kvm_arch_hardware_enable+0x281/0x840 [ 77.996332][ T4090] RSP: 0018:ffffc9000507fb48 EFLAGS: 00010082 [ 78.001254][ C1] ? kvm_arch_vcpu_destroy+0x330/0x330 [ 78.020936][ T4090] [ 78.020946][ T4090] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81120fe0 [ 78.026479][ C1] ? sched_clock_cpu+0x69/0x2b0 [ 78.032514][ T4090] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000484a330 [ 78.038301][ C1] ? cpuacct_all_seq_show+0x520/0x520 [ 78.040603][ T4090] RBP: ffffc9000484a330 R08: 0000000000000000 R09: 0000000000000003 [ 78.048647][ C1] hardware_enable_nolock+0xa7/0x140 [ 78.053469][ T4090] R10: fffff52000909466 R11: 0000000000000000 R12: 0000000000000000 [ 78.061425][ C1] __flush_smp_call_function_queue+0x205/0x9a0 [ 78.066765][ T4090] R13: ffffc90004849000 R14: 0023001000000000 R15: ffffc9000507fba0 [ 78.074725][ C1] ? vm_stat_fops_open+0x40/0x40 [ 78.079983][ T4090] FS: 00007f45b38a9700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 78.088211][ C1] __sysvec_call_function_single+0x95/0x3d0 [ 78.094428][ T4090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.102635][ C1] sysvec_call_function_single+0x8e/0xc0 [ 78.107545][ T4090] CR2: ffffc9000484a330 CR3: 000000007a237000 CR4: 00000000003526f0 [ 78.116720][ C1] [ 78.122582][ T4090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.129163][ C1] [ 78.134973][ T4090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.142934][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 78.145938][ T4090] Call Trace: [ 78.145948][ T4090] [ 78.154020][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 78.156979][ T4090] ? _flat_send_IPI_mask+0x53/0x60 [ 78.164929][ C1] Code: 74 24 10 e8 8a 76 dd f7 48 89 ef e8 12 f8 dd f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 13 b9 d0 f7 65 8b 05 3c 72 80 76 85 c0 74 0a 5b 5d c3 e8 30 81 [ 78.171070][ T4090] ? kvm_arch_vcpu_destroy+0x330/0x330 [ 78.174328][ C1] RSP: 0018:ffffc90004effeb8 EFLAGS: 00000206 [ 78.177239][ T4090] ? send_call_function_single_ipi+0x1b5/0x320 [ 78.183645][ C1] [ 78.183654][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1bbcaf1 [ 78.188770][ T4090] ? sched_ttwu_pending+0x550/0x550 [ 78.208437][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 78.213880][ T4090] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 78.219916][ C1] RBP: ffff88807a672718 R08: 0000000000000001 R09: 0000000000000001 [ 78.226133][ T4090] hardware_enable_nolock+0xa7/0x140 [ 78.228435][ C1] R10: ffffed100f4ce4e3 R11: 0000000000000000 R12: ffff88807a671d80 [ 78.236385][ T4090] smp_call_function_many_cond+0x10e2/0x1430 [ 78.241572][ C1] R13: ffffed100f4ce691 R14: 0000000000000003 R15: 0000000000000293 [ 78.249526][ T4090] ? vm_stat_fops_open+0x40/0x40 [ 78.255312][ C1] __kthread_parkme+0xce/0x220 [ 78.263257][ T4090] ? smp_call_on_cpu+0x270/0x270 [ 78.268537][ C1] ? worker_thread+0x1080/0x1080 [ 78.276573][ T4090] ? lockdep_init_map_type+0x21a/0x7f0 [ 78.282524][ C1] kthread+0x2df/0x3a0 [ 78.290482][ T4090] ? do_raw_spin_lock+0x120/0x2a0 [ 78.295405][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 78.300326][ T4090] ? rwlock_bug.part.0+0x90/0x90 [ 78.305237][ C1] ret_from_fork+0x1f/0x30 [ 78.310339][ T4090] ? vm_stat_fops_open+0x40/0x40 [ 78.315775][ C1] [ 78.319841][ T4090] on_each_cpu_cond_mask+0x56/0xa0 [ 78.324941][ C1] [ 78.324950][ C1] Memory state around the buggy address: [ 78.330571][ T4090] kvm_dev_ioctl+0x131b/0x1ce0 [ 78.335496][ C1] ffffc9000484a200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 78.339983][ T4090] ? kvm_stat_data_open+0x380/0x380 [ 78.344992][ C1] ffffc9000484a280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 78.347996][ T4090] ? __fget_files+0x26a/0x440 [ 78.353085][ C1] >ffffc9000484a300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 78.355390][ T4090] ? bpf_lsm_file_ioctl+0x5/0x10 [ 78.361462][ C1] ^ [ 78.361474][ C1] ffffc9000484a380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 78.366557][ T4090] ? kvm_stat_data_open+0x380/0x380 [ 78.374685][ C1] ffffc9000484a400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 78.379941][ T4090] __x64_sys_ioctl+0x193/0x200 [ 78.387988][ C1] ================================================================== [ 78.387998][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 78.392644][ T4090] do_syscall_64+0x35/0xb0 [ 78.400795][ T4090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.405824][ T4090] RIP: 0033:0x7f45b2689279 [ 78.411630][ T4090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.419871][ T4090] RSP: 002b:00007f45b38a9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.433314][ T4090] RAX: ffffffffffffffda RBX: 00007f45b279bf80 RCX: 00007f45b2689279 [ 78.438098][ T4090] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 78.446315][ T4090] RBP: 00007f45b38a91d0 R08: 0000000000000000 R09: 0000000000000000 [ 78.452894][ T4090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.457306][ T4090] R13: 00007fff8cb22fbf R14: 00007f45b38a9300 R15: 0000000000022000 [ 78.463277][ T4090] [ 78.467679][ T4090] Modules linked in: [ 78.495786][ T4090] CR2: ffffc9000484a330 [ 78.512038][ T4090] ---[ end trace 0000000000000000 ]--- [ 78.519996][ T4090] RIP: 0010:kvm_arch_hardware_enable+0x2ab/0x840 [ 78.527974][ T4090] Code: 48 89 e8 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 0f b6 14 08 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ed 04 00 00 <41> 8b 95 30 13 00 00 4d 8d b5 40 12 00 00 b9 08 00 00 00 4c 89 fe [ 78.535940][ T4090] RSP: 0018:ffffc9000507fb48 EFLAGS: 00010082 [ 78.543891][ T4090] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81120fe0 [ 78.548055][ T4090] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000484a330 [ 78.553601][ T4090] RBP: ffffc9000484a330 R08: 0000000000000000 R09: 0000000000000003 [ 78.559923][ T4090] R10: fffff52000909466 R11: 0000000000000000 R12: 0000000000000000 [ 78.580737][ T4090] R13: ffffc90004849000 R14: 0023001000000000 R15: ffffc9000507fba0 [ 78.586788][ T4090] FS: 00007f45b38a9700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 78.594757][ T4090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.602761][ T4090] CR2: ffffc9000484a330 CR3: 000000007a237000 CR4: 00000000003526f0 [ 78.610809][ T4090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.618776][ T4090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.473958][ C1] Shutting down cpus with NMI [ 79.520407][ C1] Kernel Offset: disabled [ 79.524728][ C1] Rebooting in 86400 seconds..