[ 76.587062][ T7] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts.
2023/08/21 20:00:14 ignoring optional flag "sandboxArg"="0"
2023/08/21 20:00:14 parsed 1 programs
2023/08/21 20:00:16 executed programs: 0
[ 80.257357][ T5373] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 80.312220][ T4432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.319979][ T4432] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.328201][ T4432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.335635][ T4432] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.343220][ T4432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.443646][ T5380] chnl_net:caif_netlink_parms(): no params data found
[ 80.484501][ T5380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.491686][ T5380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.498980][ T5380] bridge_slave_0: entered allmulticast mode
[ 80.505549][ T5380] bridge_slave_0: entered promiscuous mode
[ 80.513196][ T5380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.520376][ T5380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.527691][ T5380] bridge_slave_1: entered allmulticast mode
[ 80.534390][ T5380] bridge_slave_1: entered promiscuous mode
[ 80.554462][ T5380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.565412][ T5380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.589068][ T5380] team0: Port device team_slave_0 added
[ 80.597662][ T5380] team0: Port device team_slave_1 added
[ 80.615384][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.622400][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.648806][ T5380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.661470][ T5380] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.668438][ T5380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.694860][ T5380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.724810][ T5380] hsr_slave_0: entered promiscuous mode
[ 80.731485][ T5380] hsr_slave_1: entered promiscuous mode
[ 81.342330][ T5380] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 81.360233][ T5380] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 81.374657][ T5380] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 81.386209][ T5380] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 81.411256][ T5380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.418435][ T5380] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.426570][ T5380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.433799][ T5380] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.459905][ T26] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.468884][ T26] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.515341][ T5380] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.541510][ T5380] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.553827][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.561122][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.581205][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.588634][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.625988][ T5380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 81.640852][ T5380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 81.826436][ T5380] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 81.877836][ T5380] veth0_vlan: entered promiscuous mode
[ 81.893458][ T5380] veth1_vlan: entered promiscuous mode
[ 81.924865][ T5380] veth0_macvtap: entered promiscuous mode
[ 81.935417][ T5380] veth1_macvtap: entered promiscuous mode
[ 81.956224][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.975750][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.990546][ T5380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.000791][ T5380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.011226][ T5380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.020418][ T5380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.083711][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.097720][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.124783][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.133346][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.417433][ T4432] Bluetooth: hci0: command 0x0409 tx timeout
[ 84.497346][ T4432] Bluetooth: hci0: command 0x041b tx timeout
2023/08/21 20:00:21 executed programs: 4
[ 86.577043][ T4432] Bluetooth: hci0: command 0x040f tx timeout
[ 87.057668][ T5394] ==================================================================
[ 87.065780][ T5394] BUG: KASAN: slab-use-after-free in hci_send_acl+0xdf4/0xf30
[ 87.073268][ T5394] Read of size 8 at addr ffff888068e89118 by task kworker/1:3/5394
[ 87.081252][ T5394]
[ 87.083580][ T5394] CPU: 1 PID: 5394 Comm: kworker/1:3 Not tainted 6.5.0-rc5-syzkaller-01535-gf0835e7404b7-dirty #0
[ 87.094258][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 87.104330][ T5394] Workqueue: events l2cap_info_timeout
[ 87.109821][ T5394] Call Trace:
[ 87.113191][ T5394]
[ 87.116173][ T5394] dump_stack_lvl+0xd9/0x1b0
[ 87.120801][ T5394] print_report+0xc4/0x620
[ 87.125240][ T5394] ? __virt_addr_valid+0x5e/0x2d0
[ 87.130279][ T5394] ? __phys_addr+0xc6/0x140
[ 87.134807][ T5394] kasan_report+0xda/0x110
[ 87.139245][ T5394] ? hci_send_acl+0xdf4/0xf30
[ 87.143939][ T5394] ? hci_send_acl+0xdf4/0xf30
[ 87.148634][ T5394] hci_send_acl+0xdf4/0xf30
[ 87.153148][ T5394] ? __mutex_unlock_slowpath+0x165/0x640
[ 87.158792][ T5394] ? bit_wait_timeout+0x160/0x160
[ 87.164180][ T5394] l2cap_send_cmd+0x6dd/0x920
[ 87.168878][ T5394] l2cap_send_conn_req+0x1e5/0x260
[ 87.174019][ T5394] ? l2cap_connect+0x1280/0x1280
[ 87.178983][ T5394] l2cap_start_connection+0x11e/0x420
[ 87.184375][ T5394] l2cap_conn_start+0x7ae/0xa40
[ 87.189277][ T5394] ? l2cap_chan_timeout+0x2f0/0x2f0
[ 87.194496][ T5394] ? lock_sync+0x190/0x190
[ 87.198925][ T5394] ? reacquire_held_locks+0x4b0/0x4b0
[ 87.204318][ T5394] ? spin_bug+0x1d0/0x1d0
[ 87.208668][ T5394] process_one_work+0xaa2/0x16f0
[ 87.213620][ T5394] ? lock_sync+0x190/0x190
[ 87.218053][ T5394] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 87.223619][ T5394] ? spin_bug+0x1d0/0x1d0
[ 87.228063][ T5394] worker_thread+0x687/0x1110
[ 87.232851][ T5394] ? __kthread_parkme+0x152/0x220
[ 87.237885][ T5394] ? process_one_work+0x16f0/0x16f0
[ 87.243097][ T5394] kthread+0x33a/0x430
[ 87.247178][ T5394] ? kthread_complete_and_exit+0x40/0x40
[ 87.252823][ T5394] ret_from_fork+0x2c/0x70
[ 87.257283][ T5394] ? kthread_complete_and_exit+0x40/0x40
[ 87.262926][ T5394] ret_from_fork_asm+0x11/0x20
[ 87.267721][ T5394]
[ 87.270746][ T5394]
[ 87.273071][ T5394] Allocated by task 5435:
[ 87.277397][ T5394] kasan_save_stack+0x33/0x50
[ 87.282087][ T5394] kasan_set_track+0x25/0x30
[ 87.286685][ T5394] __kasan_kmalloc+0xa2/0xb0
[ 87.291297][ T5394] hci_chan_create+0xa6/0x3a0
[ 87.295983][ T5394] l2cap_conn_add.part.0+0x1a/0xdf0
[ 87.301205][ T5394] l2cap_chan_connect+0x15b9/0x2140
[ 87.306424][ T5394] lowpan_control_write+0x3d6/0x730
[ 87.311638][ T5394] full_proxy_write+0x124/0x190
[ 87.316499][ T5394] vfs_write+0x2a4/0xe40
[ 87.320754][ T5394] ksys_write+0x12f/0x250
[ 87.325095][ T5394] do_syscall_64+0x38/0xb0
[ 87.329530][ T5394] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 87.335442][ T5394]
[ 87.337766][ T5394] Freed by task 4432:
[ 87.341747][ T5394] kasan_save_stack+0x33/0x50
[ 87.346445][ T5394] kasan_set_track+0x25/0x30
[ 87.351046][ T5394] kasan_save_free_info+0x2b/0x40
[ 87.356085][ T5394] ____kasan_slab_free+0x15e/0x1b0
[ 87.361211][ T5394] slab_free_freelist_hook+0x10b/0x1e0
[ 87.366882][ T5394] __kmem_cache_free+0xb8/0x2f0
[ 87.371765][ T5394] hci_chan_list_flush+0x81/0xf0
[ 87.376716][ T5394] hci_conn_del+0x1fc/0xd10
[ 87.381233][ T5394] hci_abort_conn_sync+0xacb/0xe20
[ 87.386360][ T5394] abort_conn_sync+0x18e/0x3a0
[ 87.391141][ T5394] hci_cmd_sync_work+0x1a4/0x3c0
[ 87.396102][ T5394] process_one_work+0xaa2/0x16f0
[ 87.401057][ T5394] worker_thread+0x687/0x1110
[ 87.405757][ T5394] kthread+0x33a/0x430
[ 87.409844][ T5394] ret_from_fork+0x2c/0x70
[ 87.414282][ T5394] ret_from_fork_asm+0x11/0x20
[ 87.419074][ T5394]
[ 87.421404][ T5394] Last potentially related work creation:
[ 87.427120][ T5394] kasan_save_stack+0x33/0x50
[ 87.431821][ T5394] __kasan_record_aux_stack+0xbc/0xd0
[ 87.437221][ T5394] __call_rcu_common.constprop.0+0x9a/0x790
[ 87.443117][ T5394] resize+0x1d73/0x2250
[ 87.447277][ T5394] fib_remove_alias+0x324/0x480
[ 87.452131][ T5394] fib_table_delete+0x6d7/0x9f0
[ 87.456986][ T5394] fib_magic+0x329/0x560
[ 87.461228][ T5394] fib_del_ifaddr+0xb0d/0x14d0
[ 87.465989][ T5394] fib_inetaddr_event+0xb8/0x2a0
[ 87.470931][ T5394] notifier_call_chain+0xb6/0x3b0
[ 87.475957][ T5394] blocking_notifier_call_chain+0x69/0x90
[ 87.481680][ T5394] __inet_del_ifa+0x417/0x1030
[ 87.486445][ T5394] inetdev_event+0x5bb/0x1900
[ 87.491125][ T5394] notifier_call_chain+0xb6/0x3b0
[ 87.496149][ T5394] call_netdevice_notifiers_info+0xb9/0x130
[ 87.502041][ T5394] unregister_netdevice_many_notify+0x85f/0x1a20
[ 87.508375][ T5394] default_device_exit_batch+0x584/0x740
[ 87.514014][ T5394] ops_exit_list+0x125/0x170
[ 87.518605][ T5394] cleanup_net+0x505/0xb20
[ 87.523033][ T5394] process_one_work+0xaa2/0x16f0
[ 87.527985][ T5394] worker_thread+0x687/0x1110
[ 87.532669][ T5394] kthread+0x33a/0x430
[ 87.536753][ T5394] ret_from_fork+0x2c/0x70
[ 87.541185][ T5394] ret_from_fork_asm+0x11/0x20
[ 87.545960][ T5394]
[ 87.548277][ T5394] The buggy address belongs to the object at ffff888068e89100
[ 87.548277][ T5394] which belongs to the cache kmalloc-128 of size 128
[ 87.562335][ T5394] The buggy address is located 24 bytes inside of
[ 87.562335][ T5394] freed 128-byte region [ffff888068e89100, ffff888068e89180)
[ 87.576062][ T5394]
[ 87.578393][ T5394] The buggy address belongs to the physical page:
[ 87.584793][ T5394] page:ffffea0001a3a240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x68e89
[ 87.595028][ T5394] ksm flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 87.603192][ T5394] page_type: 0xffffffff()
[ 87.607524][ T5394] raw: 00fff00000000200 ffff8880128418c0 ffffea0000a71b40 dead000000000003
[ 87.616125][ T5394] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 87.624717][ T5394] page dumped because: kasan: bad access detected
[ 87.631126][ T5394] page_owner tracks the page as allocated
[ 87.636920][ T5394] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 9, tgid 9 (kworker/0:1), ts 54053813563, free_ts 14688260990
[ 87.654723][ T5394] post_alloc_hook+0x2d2/0x350
[ 87.659494][ T5394] get_page_from_freelist+0x10a9/0x31e0
[ 87.665045][ T5394] __alloc_pages+0x1d0/0x4a0
[ 87.669637][ T5394] alloc_pages+0x1a9/0x270
[ 87.674159][ T5394] allocate_slab+0x24e/0x380
[ 87.678768][ T5394] ___slab_alloc+0x8bc/0x1570
[ 87.683472][ T5394] __slab_alloc.constprop.0+0x56/0xa0
[ 87.688884][ T5394] __kmem_cache_alloc_node+0x137/0x350
[ 87.694362][ T5394] kmalloc_trace+0x25/0xe0
[ 87.698788][ T5394] __hw_addr_add_ex+0x3cb/0x7f0
[ 87.703650][ T5394] dev_mc_add+0xc3/0x110
[ 87.707892][ T5394] igmp6_group_added+0x375/0x420
[ 87.712845][ T5394] __ipv6_dev_mc_inc+0x72a/0xc40
[ 87.717807][ T5394] addrconf_dad_work+0x232/0x13e0
[ 87.722934][ T5394] process_one_work+0xaa2/0x16f0
[ 87.727868][ T5394] worker_thread+0x687/0x1110
[ 87.732543][ T5394] page last free stack trace:
[ 87.737207][ T5394] free_unref_page_prepare+0x508/0xb90
[ 87.742672][ T5394] free_unref_page+0x33/0x3b0
[ 87.747354][ T5394] free_contig_range+0xb6/0x190
[ 87.752206][ T5394] destroy_args+0x686/0x940
[ 87.756841][ T5394] debug_vm_pgtable+0x2339/0x3ff0
[ 87.761868][ T5394] do_one_initcall+0x117/0x630
[ 87.766722][ T5394] kernel_init_freeable+0x5bd/0x8f0
[ 87.771925][ T5394] kernel_init+0x1c/0x2a0
[ 87.776253][ T5394] ret_from_fork+0x2c/0x70
[ 87.780692][ T5394] ret_from_fork_asm+0x11/0x20
[ 87.785470][ T5394]
[ 87.787786][ T5394] Memory state around the buggy address:
[ 87.793439][ T5394] ffff888068e89000: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[ 87.801520][ T5394] ffff888068e89080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 87.809575][ T5394] >ffff888068e89100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 87.817632][ T5394] ^
[ 87.822471][ T5394] ffff888068e89180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 87.830539][ T5394] ffff888068e89200: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[ 87.838850][ T5394] ==================================================================
[ 87.909814][ T5394] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.917052][ T5394] CPU: 1 PID: 5394 Comm: kworker/1:3 Not tainted 6.5.0-rc5-syzkaller-01535-gf0835e7404b7-dirty #0
[ 87.927655][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 87.937727][ T5394] Workqueue: events l2cap_info_timeout
[ 87.943405][ T5394] Call Trace:
[ 87.946701][ T5394]
[ 87.949645][ T5394] dump_stack_lvl+0xd9/0x1b0
[ 87.954270][ T5394] panic+0x6a4/0x750
[ 87.958190][ T5394] ? panic_smp_self_stop+0xa0/0xa0
[ 87.963310][ T5394] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 87.969483][ T5394] ? preempt_schedule_thunk+0x1a/0x30
[ 87.974861][ T5394] ? preempt_schedule_common+0x45/0xc0
[ 87.980323][ T5394] check_panic_on_warn+0xab/0xb0
[ 87.985349][ T5394] end_report+0x108/0x150
[ 87.989884][ T5394] kasan_report+0xea/0x110
[ 87.994324][ T5394] ? hci_send_acl+0xdf4/0xf30
[ 87.998999][ T5394] ? hci_send_acl+0xdf4/0xf30
[ 88.003678][ T5394] hci_send_acl+0xdf4/0xf30
[ 88.008176][ T5394] ? __mutex_unlock_slowpath+0x165/0x640
[ 88.013815][ T5394] ? bit_wait_timeout+0x160/0x160
[ 88.018850][ T5394] l2cap_send_cmd+0x6dd/0x920
[ 88.023537][ T5394] l2cap_send_conn_req+0x1e5/0x260
[ 88.028653][ T5394] ? l2cap_connect+0x1280/0x1280
[ 88.033598][ T5394] l2cap_start_connection+0x11e/0x420
[ 88.038973][ T5394] l2cap_conn_start+0x7ae/0xa40
[ 88.043832][ T5394] ? l2cap_chan_timeout+0x2f0/0x2f0
[ 88.049044][ T5394] ? lock_sync+0x190/0x190
[ 88.053548][ T5394] ? reacquire_held_locks+0x4b0/0x4b0
[ 88.058924][ T5394] ? spin_bug+0x1d0/0x1d0
[ 88.063258][ T5394] process_one_work+0xaa2/0x16f0
[ 88.068197][ T5394] ? lock_sync+0x190/0x190
[ 88.073839][ T5394] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 88.079219][ T5394] ? spin_bug+0x1d0/0x1d0
[ 88.083554][ T5394] worker_thread+0x687/0x1110
[ 88.088235][ T5394] ? __kthread_parkme+0x152/0x220
[ 88.093255][ T5394] ? process_one_work+0x16f0/0x16f0
[ 88.098452][ T5394] kthread+0x33a/0x430
[ 88.102522][ T5394] ? kthread_complete_and_exit+0x40/0x40
[ 88.108154][ T5394] ret_from_fork+0x2c/0x70
[ 88.112568][ T5394] ? kthread_complete_and_exit+0x40/0x40
[ 88.118201][ T5394] ret_from_fork_asm+0x11/0x20
[ 88.122975][ T5394]
[ 88.126190][ T5394] Kernel Offset: disabled
[ 88.130526][ T5394] Rebooting in 86400 seconds..