[ 45.704753][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.718029][ T40] device veth1_macvtap left promiscuous mode [ 45.724340][ T40] device veth0_macvtap left promiscuous mode [ 45.730409][ T40] device veth1_vlan left promiscuous mode [ 45.737524][ T40] device veth0_vlan left promiscuous mode [ 45.843491][ T40] team0 (unregistering): Port device team_slave_1 removed [ 45.854225][ T40] team0 (unregistering): Port device team_slave_0 removed [ 45.863952][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.875192][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.907718][ T40] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.131' (ECDSA) to the list of known hosts. 2023/02/18 14:04:36 ignoring optional flag "sandboxArg"="0" 2023/02/18 14:04:36 parsed 1 programs 2023/02/18 14:04:36 executed programs: 0 [ 60.559625][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.567310][ T4389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.575284][ T4389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.582825][ T4389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.590062][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.678241][ T5528] chnl_net:caif_netlink_parms(): no params data found [ 60.717555][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.725324][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.733372][ T5528] device bridge_slave_0 entered promiscuous mode [ 60.741003][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.748496][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.756749][ T5528] device bridge_slave_1 entered promiscuous mode [ 60.781473][ T5528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.792900][ T5528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.817172][ T5528] team0: Port device team_slave_0 added [ 60.824435][ T5528] team0: Port device team_slave_1 added [ 60.839889][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.846897][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.873015][ T5528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.884893][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.891961][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.917995][ T5528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.941051][ T5528] device hsr_slave_0 entered promiscuous mode [ 60.947613][ T5528] device hsr_slave_1 entered promiscuous mode [ 61.804554][ T5528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.815066][ T5528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.824507][ T5528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.834555][ T5528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.888985][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.900692][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.909375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.919536][ T5528] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.930752][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.940479][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.949782][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.956913][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.974724][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.984104][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.993528][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.004142][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.011243][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.019242][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.028938][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.043762][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.053036][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.061496][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.073041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.081560][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.090984][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.102408][ T5528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.113898][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.122386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.130239][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.139218][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.288556][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.296628][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.307116][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.326294][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.335472][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.356740][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.365886][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.375371][ T5528] device veth0_vlan entered promiscuous mode [ 62.383350][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.391167][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.402498][ T5528] device veth1_vlan entered promiscuous mode [ 62.420805][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.429038][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.438126][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.447243][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.458273][ T5528] device veth0_macvtap entered promiscuous mode [ 62.468915][ T5528] device veth1_macvtap entered promiscuous mode [ 62.484205][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.491464][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.500667][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.508658][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.518678][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.529348][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.539213][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.548041][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.558718][ T5528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.568530][ T5528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.578275][ T5528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.587555][ T5528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.642211][ T4389] Bluetooth: hci0: command 0x0409 tx timeout [ 62.645992][ T3167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.671444][ T3167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.686689][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.694045][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.703820][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.714948][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.731785][ T5068] Bluetooth: hci0: command 0x041b tx timeout 2023/02/18 14:04:41 executed programs: 11 [ 66.802007][ T5068] Bluetooth: hci0: command 0x040f tx timeout [ 68.882071][ T5068] Bluetooth: hci0: command 0x0419 tx timeout [ 68.929946][ T3167] ================================================================== [ 68.938075][ T3167] BUG: KASAN: vmalloc-out-of-bounds in __ebt_unregister_table+0xf43/0xfc0 [ 68.946600][ T3167] Read of size 4 at addr ffffc90003263000 by task kworker/u4:6/3167 [ 68.954675][ T3167] [ 68.956999][ T3167] CPU: 0 PID: 3167 Comm: kworker/u4:6 Not tainted 6.2.0-rc8-syzkaller-00083-g3ac88fa4605e-dirty #0 [ 68.967683][ T3167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 68.977848][ T3167] Workqueue: netns cleanup_net [ 68.982621][ T3167] Call Trace: [ 68.985974][ T3167] [ 68.988888][ T3167] dump_stack_lvl+0xd1/0x138 [ 68.993477][ T3167] print_report+0x15e/0x45d [ 68.997974][ T3167] ? __ebt_unregister_table+0xf43/0xfc0 [ 69.003509][ T3167] kasan_report+0xbf/0x1f0 [ 69.007945][ T3167] ? __ebt_unregister_table+0xf43/0xfc0 [ 69.013492][ T3167] __ebt_unregister_table+0xf43/0xfc0 [ 69.018946][ T3167] ? wait_for_completion_io_timeout+0x20/0x20 [ 69.025029][ T3167] ? __ebt_find_table+0xe4/0x320 [ 69.029956][ T3167] ? lock_downgrade+0x6e0/0x6e0 [ 69.034889][ T3167] ? update_counters+0x200/0x200 [ 69.039819][ T3167] ebt_unregister_table+0x35/0x40 [ 69.044830][ T3167] ? frame_filter_table_init+0x30/0x30 [ 69.050274][ T3167] ops_exit_list+0xb0/0x170 [ 69.054774][ T3167] cleanup_net+0x4ee/0xb10 [ 69.059179][ T3167] ? unregister_pernet_device+0x80/0x80 [ 69.064710][ T3167] process_one_work+0x9bf/0x1710 [ 69.069644][ T3167] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 69.075004][ T3167] ? rwlock_bug.part.0+0x90/0x90 [ 69.079923][ T3167] ? _raw_spin_lock_irq+0x45/0x50 [ 69.084936][ T3167] worker_thread+0x669/0x1090 [ 69.089603][ T3167] ? __kthread_parkme+0x163/0x220 [ 69.094706][ T3167] ? process_one_work+0x1710/0x1710 [ 69.099896][ T3167] kthread+0x2e8/0x3a0 [ 69.103946][ T3167] ? kthread_complete_and_exit+0x40/0x40 [ 69.109565][ T3167] ret_from_fork+0x1f/0x30 [ 69.113983][ T3167] [ 69.116987][ T3167] [ 69.119295][ T3167] Memory state around the buggy address: [ 69.124907][ T3167] ffffc90003262f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 69.132952][ T3167] ffffc90003262f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 69.141199][ T3167] >ffffc90003263000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 69.149241][ T3167] ^ [ 69.153375][ T3167] ffffc90003263080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 69.161415][ T3167] ffffc90003263100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 69.169455][ T3167] ================================================================== [ 69.181223][ T3167] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.188426][ T3167] CPU: 1 PID: 3167 Comm: kworker/u4:6 Not tainted 6.2.0-rc8-syzkaller-00083-g3ac88fa4605e-dirty #0 [ 69.199081][ T3167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 69.209209][ T3167] Workqueue: netns cleanup_net [ 69.213969][ T3167] Call Trace: [ 69.217230][ T3167] [ 69.220144][ T3167] dump_stack_lvl+0xd1/0x138 [ 69.224735][ T3167] panic+0x2cc/0x626 [ 69.228635][ T3167] ? panic_print_sys_info.part.0+0x110/0x110 [ 69.234694][ T3167] ? preempt_schedule_thunk+0x1a/0x20 [ 69.240082][ T3167] ? preempt_schedule_common+0x59/0xc0 [ 69.245534][ T3167] check_panic_on_warn.cold+0x19/0x35 [ 69.250895][ T3167] end_report.part.0+0x36/0x73 [ 69.255651][ T3167] ? __ebt_unregister_table+0xf43/0xfc0 [ 69.261188][ T3167] kasan_report.cold+0xa/0xf [ 69.265767][ T3167] ? __ebt_unregister_table+0xf43/0xfc0 [ 69.271297][ T3167] __ebt_unregister_table+0xf43/0xfc0 [ 69.276653][ T3167] ? wait_for_completion_io_timeout+0x20/0x20 [ 69.282717][ T3167] ? __ebt_find_table+0xe4/0x320 [ 69.287641][ T3167] ? lock_downgrade+0x6e0/0x6e0 [ 69.292483][ T3167] ? update_counters+0x200/0x200 [ 69.297493][ T3167] ebt_unregister_table+0x35/0x40 [ 69.302499][ T3167] ? frame_filter_table_init+0x30/0x30 [ 69.307940][ T3167] ops_exit_list+0xb0/0x170 [ 69.312431][ T3167] cleanup_net+0x4ee/0xb10 [ 69.317089][ T3167] ? unregister_pernet_device+0x80/0x80 [ 69.322639][ T3167] process_one_work+0x9bf/0x1710 [ 69.327580][ T3167] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 69.332965][ T3167] ? rwlock_bug.part.0+0x90/0x90 [ 69.337886][ T3167] ? _raw_spin_lock_irq+0x45/0x50 [ 69.342986][ T3167] worker_thread+0x669/0x1090 [ 69.347650][ T3167] ? __kthread_parkme+0x163/0x220 [ 69.352666][ T3167] ? process_one_work+0x1710/0x1710 [ 69.357936][ T3167] kthread+0x2e8/0x3a0 [ 69.361984][ T3167] ? kthread_complete_and_exit+0x40/0x40 [ 69.367600][ T3167] ret_from_fork+0x1f/0x30 [ 69.372011][ T3167] [ 69.376035][ T3167] Kernel Offset: disabled [ 69.380342][ T3167] Rebooting in 86400 seconds..