[ 50.839156][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.852278][ T1164] device veth1_macvtap left promiscuous mode [ 50.858486][ T1164] device veth0_macvtap left promiscuous mode [ 50.865020][ T1164] device veth1_vlan left promiscuous mode [ 50.870982][ T1164] device veth0_vlan left promiscuous mode [ 50.956958][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 50.969834][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 50.980103][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.992400][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.026421][ T1164] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.180' (ECDSA) to the list of known hosts. 2023/02/18 05:26:07 ignoring optional flag "sandboxArg"="0" 2023/02/18 05:26:07 parsed 1 programs 2023/02/18 05:26:07 executed programs: 0 [ 64.913683][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.921563][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.929067][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.937684][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.945303][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.952717][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.061551][ T5487] chnl_net:caif_netlink_parms(): no params data found [ 65.104394][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.111691][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.119492][ T5487] device bridge_slave_0 entered promiscuous mode [ 65.127958][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.135121][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.143023][ T5487] device bridge_slave_1 entered promiscuous mode [ 65.164693][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.175779][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.201237][ T5487] team0: Port device team_slave_0 added [ 65.208679][ T5487] team0: Port device team_slave_1 added [ 65.229963][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.237937][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.265746][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.278227][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.286358][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.313795][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.343359][ T5487] device hsr_slave_0 entered promiscuous mode [ 65.349964][ T5487] device hsr_slave_1 entered promiscuous mode [ 66.361334][ T5487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.371753][ T5487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.381662][ T5487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.390613][ T5487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.439131][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.452290][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.460151][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.472314][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.481845][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.491428][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.499753][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.506999][ T5080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.524045][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.533062][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.542456][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.551771][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.558840][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.566816][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.576483][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.585246][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.595127][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.611174][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.619042][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.627999][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.636845][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.645303][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.653718][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.663055][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.671993][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.824228][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.831897][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.844796][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.863175][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.872507][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.890733][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.899066][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.909531][ T5487] device veth0_vlan entered promiscuous mode [ 66.918137][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.926979][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.937607][ T5487] device veth1_vlan entered promiscuous mode [ 66.957435][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.966912][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.975560][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.985068][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.995773][ T5487] device veth0_macvtap entered promiscuous mode [ 67.007402][ T5487] device veth1_macvtap entered promiscuous mode [ 67.022580][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.030019][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.038762][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.048414][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.051182][ T4390] Bluetooth: hci0: command 0x0409 tx timeout [ 67.057125][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.074402][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.083705][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.093783][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.104906][ T5487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.115348][ T5487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.125269][ T5487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.135399][ T5487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.186716][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.206086][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.226549][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.237052][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.246151][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.257710][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.120788][ T47] Bluetooth: hci0: command 0x041b tx timeout 2023/02/18 05:26:12 executed programs: 9 [ 70.482368][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.483630][ T3651] cfg80211: failed to load regulatory.db [ 70.488818][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.200395][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 73.280373][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 73.402877][ T1164] ================================================================== [ 73.411009][ T1164] BUG: KASAN: vmalloc-out-of-bounds in __ebt_unregister_table+0xc0d/0xd00 [ 73.419530][ T1164] Read of size 4 at addr ffffc9000309c000 by task kworker/u4:5/1164 [ 73.427518][ T1164] [ 73.429938][ T1164] CPU: 0 PID: 1164 Comm: kworker/u4:5 Not tainted 6.2.0-rc8-syzkaller-00083-g3ac88fa4605e-dirty #0 [ 73.440630][ T1164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 73.450710][ T1164] Workqueue: netns cleanup_net [ 73.455493][ T1164] Call Trace: [ 73.458773][ T1164] [ 73.461704][ T1164] dump_stack_lvl+0xd1/0x138 [ 73.466299][ T1164] print_report+0x15e/0x45d [ 73.470799][ T1164] ? __ebt_unregister_table+0xc0d/0xd00 [ 73.476332][ T1164] kasan_report+0xbf/0x1f0 [ 73.480742][ T1164] ? __ebt_unregister_table+0xc0d/0xd00 [ 73.486274][ T1164] __ebt_unregister_table+0xc0d/0xd00 [ 73.491716][ T1164] ? wait_for_completion_io_timeout+0x20/0x20 [ 73.497775][ T1164] ? __ebt_find_table+0xe9/0x470 [ 73.502695][ T1164] ? lock_downgrade+0x6e0/0x6e0 [ 73.507539][ T1164] ? ebt_do_table+0x1d90/0x1d90 [ 73.512551][ T1164] ebt_unregister_table+0x3a/0x50 [ 73.517560][ T1164] ? frame_filter_table_init+0x30/0x30 [ 73.523001][ T1164] ops_exit_list+0xb0/0x170 [ 73.527489][ T1164] cleanup_net+0x4ee/0xb10 [ 73.531977][ T1164] ? unregister_pernet_device+0x80/0x80 [ 73.537510][ T1164] process_one_work+0x9bf/0x1710 [ 73.542439][ T1164] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 73.547797][ T1164] ? rwlock_bug.part.0+0x90/0x90 [ 73.552718][ T1164] ? _raw_spin_lock_irq+0x45/0x50 [ 73.557731][ T1164] worker_thread+0x669/0x1090 [ 73.562404][ T1164] ? __kthread_parkme+0x163/0x220 [ 73.567423][ T1164] ? process_one_work+0x1710/0x1710 [ 73.572607][ T1164] kthread+0x2e8/0x3a0 [ 73.576662][ T1164] ? kthread_complete_and_exit+0x40/0x40 [ 73.582335][ T1164] ret_from_fork+0x1f/0x30 [ 73.586745][ T1164] [ 73.589747][ T1164] [ 73.592058][ T1164] Memory state around the buggy address: [ 73.597668][ T1164] ffffc9000309bf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 73.605717][ T1164] ffffc9000309bf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 73.613765][ T1164] >ffffc9000309c000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 73.621806][ T1164] ^ [ 73.625938][ T1164] ffffc9000309c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 73.634075][ T1164] ffffc9000309c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 73.642115][ T1164] ================================================================== [ 73.668751][ T1164] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.676006][ T1164] CPU: 1 PID: 1164 Comm: kworker/u4:5 Not tainted 6.2.0-rc8-syzkaller-00083-g3ac88fa4605e-dirty #0 [ 73.686695][ T1164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 73.696851][ T1164] Workqueue: netns cleanup_net [ 73.701642][ T1164] Call Trace: [ 73.704927][ T1164] [ 73.707857][ T1164] dump_stack_lvl+0xd1/0x138 [ 73.712456][ T1164] panic+0x2cc/0x626 [ 73.716358][ T1164] ? panic_print_sys_info.part.0+0x110/0x110 [ 73.722345][ T1164] ? preempt_schedule_thunk+0x1a/0x20 [ 73.727760][ T1164] ? preempt_schedule_common+0x59/0xc0 [ 73.733228][ T1164] check_panic_on_warn.cold+0x19/0x35 [ 73.738605][ T1164] end_report.part.0+0x36/0x73 [ 73.743376][ T1164] ? __ebt_unregister_table+0xc0d/0xd00 [ 73.748921][ T1164] kasan_report.cold+0xa/0xf [ 73.753522][ T1164] ? __ebt_unregister_table+0xc0d/0xd00 [ 73.759072][ T1164] __ebt_unregister_table+0xc0d/0xd00 [ 73.764447][ T1164] ? wait_for_completion_io_timeout+0x20/0x20 [ 73.770528][ T1164] ? __ebt_find_table+0xe9/0x470 [ 73.775465][ T1164] ? lock_downgrade+0x6e0/0x6e0 [ 73.780326][ T1164] ? ebt_do_table+0x1d90/0x1d90 [ 73.785181][ T1164] ebt_unregister_table+0x3a/0x50 [ 73.790290][ T1164] ? frame_filter_table_init+0x30/0x30 [ 73.795749][ T1164] ops_exit_list+0xb0/0x170 [ 73.800257][ T1164] cleanup_net+0x4ee/0xb10 [ 73.804675][ T1164] ? unregister_pernet_device+0x80/0x80 [ 73.810223][ T1164] process_one_work+0x9bf/0x1710 [ 73.815164][ T1164] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 73.820539][ T1164] ? rwlock_bug.part.0+0x90/0x90 [ 73.825482][ T1164] ? _raw_spin_lock_irq+0x45/0x50 [ 73.830514][ T1164] worker_thread+0x669/0x1090 [ 73.835199][ T1164] ? __kthread_parkme+0x163/0x220 [ 73.840228][ T1164] ? process_one_work+0x1710/0x1710 [ 73.845433][ T1164] kthread+0x2e8/0x3a0 [ 73.849503][ T1164] ? kthread_complete_and_exit+0x40/0x40 [ 73.855138][ T1164] ret_from_fork+0x1f/0x30 [ 73.859562][ T1164] [ 73.863445][ T1164] Kernel Offset: disabled [ 73.867770][ T1164] Rebooting in 86400 seconds..