Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. 2023/10/09 14:36:13 ignoring optional flag "sandboxArg"="0" 2023/10/09 14:36:13 parsed 1 programs 2023/10/09 14:36:15 executed programs: 0 [ 106.714504][ T5386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.779831][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.787896][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.795667][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.803470][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.811673][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.819572][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.977482][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 107.046947][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.054225][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.061596][ T5392] bridge_slave_0: entered allmulticast mode [ 107.068798][ T5392] bridge_slave_0: entered promiscuous mode [ 107.079189][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.086483][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.093830][ T5392] bridge_slave_1: entered allmulticast mode [ 107.101196][ T5392] bridge_slave_1: entered promiscuous mode [ 107.131591][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.144486][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.180204][ T5392] team0: Port device team_slave_0 added [ 107.189102][ T5392] team0: Port device team_slave_1 added [ 107.219468][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.226529][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.252946][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.266206][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.273307][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.299553][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.345689][ T5392] hsr_slave_0: entered promiscuous mode [ 107.352521][ T5392] hsr_slave_1: entered promiscuous mode [ 108.203526][ T5392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.215815][ T5392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.228332][ T5392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.240456][ T5392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.362135][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.393374][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.411211][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.418452][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.439963][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.447232][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.707230][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.773510][ T5392] veth0_vlan: entered promiscuous mode [ 108.792621][ T5392] veth1_vlan: entered promiscuous mode [ 108.840024][ T5392] veth0_macvtap: entered promiscuous mode [ 108.847364][ T5039] Bluetooth: hci0: command 0x0409 tx timeout [ 108.853550][ T5392] veth1_macvtap: entered promiscuous mode [ 108.874892][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.895246][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.913005][ T5392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.924917][ T5392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.934830][ T5392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.946546][ T5392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.049720][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.059938][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.126510][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.134392][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.212455][ T5455] ================================================================== [ 109.220672][ T5455] BUG: KASAN: slab-out-of-bounds in create_monitor_event+0x88d/0x930 [ 109.229041][ T5455] Read of size 8 at addr ffff888016f7dbe7 by task syz-executor.0/5455 [ 109.237320][ T5455] [ 109.239716][ T5455] CPU: 1 PID: 5455 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00158-gf291209eca5e-dirty #0 [ 109.250701][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 109.260785][ T5455] Call Trace: [ 109.264096][ T5455] [ 109.267051][ T5455] dump_stack_lvl+0x1e7/0x2d0 [ 109.271768][ T5455] ? nf_tcp_handle_invalid+0x650/0x650 [ 109.277349][ T5455] ? panic+0x770/0x770 [ 109.281462][ T5455] ? _printk+0xd5/0x120 [ 109.285667][ T5455] print_report+0x163/0x540 [ 109.290210][ T5455] ? __virt_addr_valid+0x22f/0x2e0 [ 109.295459][ T5455] ? __phys_addr+0xba/0x170 [ 109.300040][ T5455] ? create_monitor_event+0x88d/0x930 [ 109.305452][ T5455] kasan_report+0x175/0x1b0 [ 109.310001][ T5455] ? create_monitor_event+0x88d/0x930 [ 109.315413][ T5455] create_monitor_event+0x88d/0x930 [ 109.320664][ T5455] send_monitor_replay+0x7a/0x5d0 [ 109.325732][ T5455] hci_sock_bind+0x85c/0x1140 [ 109.330481][ T5455] ? __fget_files+0x28/0x4a0 [ 109.335281][ T5455] ? __might_fault+0xa5/0x120 [ 109.339996][ T5455] ? hci_sock_release+0x4f0/0x4f0 [ 109.345242][ T5455] ? bpf_lsm_socket_bind+0x9/0x10 [ 109.350312][ T5455] ? security_socket_bind+0x81/0xa0 [ 109.355906][ T5455] __sys_bind+0x23a/0x2e0 [ 109.360277][ T5455] ? __ia32_sys_socketpair+0xb0/0xb0 [ 109.365615][ T5455] ? syscall_enter_from_user_mode+0x32/0x230 [ 109.371836][ T5455] ? lockdep_hardirqs_on+0x98/0x140 [ 109.377180][ T5455] __x64_sys_bind+0x7a/0x90 [ 109.381724][ T5455] do_syscall_64+0x41/0xc0 [ 109.386184][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 109.392120][ T5455] RIP: 0033:0x7ff10207cae9 [ 109.396573][ T5455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 109.416478][ T5455] RSP: 002b:00007ff102e640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 109.425029][ T5455] RAX: ffffffffffffffda RBX: 00007ff10219bf80 RCX: 00007ff10207cae9 [ 109.433041][ T5455] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 109.441065][ T5455] RBP: 00007ff1020c847a R08: 0000000000000000 R09: 0000000000000000 [ 109.449075][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.457106][ T5455] R13: 000000000000000b R14: 00007ff10219bf80 R15: 00007ffeb9dbb4d8 [ 109.465218][ T5455] [ 109.468269][ T5455] [ 109.470724][ T5455] Allocated by task 5392: [ 109.475076][ T5455] kasan_set_track+0x4f/0x70 [ 109.479707][ T5455] __kasan_kmalloc+0x98/0xb0 [ 109.484383][ T5455] __kmalloc_node_track_caller+0xb6/0x230 [ 109.490230][ T5455] kvasprintf+0xdf/0x190 [ 109.494509][ T5455] kobject_set_name_vargs+0x61/0x120 [ 109.500100][ T5455] dev_set_name+0xd5/0x120 [ 109.504559][ T5455] hci_register_dev+0x153/0xa40 [ 109.509451][ T5455] vhci_create_device+0x3ba/0x720 [ 109.514538][ T5455] vhci_write+0x3c7/0x480 [ 109.518933][ T5455] vfs_write+0x782/0xaf0 [ 109.523313][ T5455] ksys_write+0x1a0/0x2c0 [ 109.527775][ T5455] do_syscall_64+0x41/0xc0 [ 109.532225][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 109.538160][ T5455] [ 109.540505][ T5455] The buggy address belongs to the object at ffff888016f7dbe0 [ 109.540505][ T5455] which belongs to the cache kmalloc-8 of size 8 [ 109.554240][ T5455] The buggy address is located 2 bytes to the right of [ 109.554240][ T5455] allocated 5-byte region [ffff888016f7dbe0, ffff888016f7dbe5) [ 109.568687][ T5455] [ 109.571043][ T5455] The buggy address belongs to the physical page: [ 109.577481][ T5455] page:ffffea00005bdf40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16f7d [ 109.587666][ T5455] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 109.595242][ T5455] page_type: 0xffffffff() [ 109.599604][ T5455] raw: 00fff00000000800 ffff888012841280 ffffea0000753bc0 dead000000000002 [ 109.608308][ T5455] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000 [ 109.617012][ T5455] page dumped because: kasan: bad access detected [ 109.623459][ T5455] page_owner tracks the page as allocated [ 109.629198][ T5455] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 8220705871, free_ts 8218626819 [ 109.646715][ T5455] post_alloc_hook+0x1e6/0x210 [ 109.651530][ T5455] get_page_from_freelist+0x31db/0x3360 [ 109.657117][ T5455] __alloc_pages+0x255/0x670 [ 109.661836][ T5455] alloc_page_interleave+0x22/0x1d0 [ 109.667162][ T5455] alloc_slab_page+0x6a/0x160 [ 109.671872][ T5455] new_slab+0x84/0x2f0 [ 109.676007][ T5455] ___slab_alloc+0xc85/0x1310 [ 109.680759][ T5455] __kmem_cache_alloc_node+0x1af/0x270 [ 109.686251][ T5455] __kmalloc_node_track_caller+0xa5/0x230 [ 109.692109][ T5455] kstrdup+0x3a/0x70 [ 109.696044][ T5455] __kernfs_new_node+0x9d/0x870 [ 109.700932][ T5455] kernfs_create_dir_ns+0x94/0x230 [ 109.706086][ T5455] sysfs_create_dir_ns+0x189/0x390 [ 109.711236][ T5455] kobject_add_internal+0x61d/0xc30 [ 109.716474][ T5455] kobject_add+0x152/0x210 [ 109.720933][ T5455] device_add+0x4b5/0xd30 [ 109.725306][ T5455] page last free stack trace: [ 109.729999][ T5455] free_unref_page_prepare+0x8c3/0x9f0 [ 109.735514][ T5455] free_unref_page_list+0x596/0x830 [ 109.740750][ T5455] release_pages+0x2113/0x23f0 [ 109.745548][ T5455] tlb_flush_mmu+0x34c/0x4e0 [ 109.750173][ T5455] tlb_finish_mmu+0xd4/0x1f0 [ 109.754858][ T5455] exit_mmap+0x4d3/0xc50 [ 109.759151][ T5455] __mmput+0x115/0x3c0 [ 109.763259][ T5455] free_bprm+0x144/0x330 [ 109.767545][ T5455] kernel_execve+0x8f5/0xa10 [ 109.772276][ T5455] call_usermodehelper_exec_async+0x233/0x370 [ 109.778390][ T5455] ret_from_fork+0x48/0x80 [ 109.782846][ T5455] ret_from_fork_asm+0x11/0x20 [ 109.787654][ T5455] [ 109.789997][ T5455] Memory state around the buggy address: [ 109.795648][ T5455] ffff888016f7da80: fc fc fc fc 05 fc fc fc fc 00 fc fc fc fc 05 fc [ 109.803827][ T5455] ffff888016f7db00: fc fc fc 06 fc fc fc fc 06 fc fc fc fc 06 fc fc [ 109.811925][ T5455] >ffff888016f7db80: fc fc 05 fc fc fc fc 05 fc fc fc fc 05 fc fc fc [ 109.820100][ T5455] ^ [ 109.827326][ T5455] ffff888016f7dc00: fc 06 fc fc fc fc 06 fc fc fc fc 06 fc fc fc fc [ 109.835414][ T5455] ffff888016f7dc80: 05 fc fc fc fc fa fc fc fc fc fa fc fc fc fc 06 [ 109.843506][ T5455] ================================================================== [ 109.854627][ T5455] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.861951][ T5455] CPU: 1 PID: 5455 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00158-gf291209eca5e-dirty #0 [ 109.872891][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 109.883048][ T5455] Call Trace: [ 109.886340][ T5455] [ 109.889273][ T5455] dump_stack_lvl+0x1e7/0x2d0 [ 109.893960][ T5455] ? nf_tcp_handle_invalid+0x650/0x650 [ 109.899424][ T5455] ? panic+0x770/0x770 [ 109.903507][ T5455] ? lock_release+0xbf/0x9d0 [ 109.908238][ T5455] ? vscnprintf+0x5d/0x80 [ 109.912652][ T5455] panic+0x30f/0x770 [ 109.916558][ T5455] ? check_panic_on_warn+0x21/0xa0 [ 109.921676][ T5455] ? __memcpy_flushcache+0x2b0/0x2b0 [ 109.926969][ T5455] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 109.932980][ T5455] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 109.938981][ T5455] ? _raw_spin_unlock+0x40/0x40 [ 109.943979][ T5455] ? print_report+0x4fb/0x540 [ 109.948754][ T5455] check_panic_on_warn+0x82/0xa0 [ 109.953698][ T5455] ? create_monitor_event+0x88d/0x930 [ 109.959174][ T5455] end_report+0x6e/0x130 [ 109.963523][ T5455] kasan_report+0x186/0x1b0 [ 109.968066][ T5455] ? create_monitor_event+0x88d/0x930 [ 109.973450][ T5455] create_monitor_event+0x88d/0x930 [ 109.978664][ T5455] send_monitor_replay+0x7a/0x5d0 [ 109.983707][ T5455] hci_sock_bind+0x85c/0x1140 [ 109.988494][ T5455] ? __fget_files+0x28/0x4a0 [ 109.993098][ T5455] ? __might_fault+0xa5/0x120 [ 109.997796][ T5455] ? hci_sock_release+0x4f0/0x4f0 [ 110.002824][ T5455] ? bpf_lsm_socket_bind+0x9/0x10 [ 110.007857][ T5455] ? security_socket_bind+0x81/0xa0 [ 110.013255][ T5455] __sys_bind+0x23a/0x2e0 [ 110.017608][ T5455] ? __ia32_sys_socketpair+0xb0/0xb0 [ 110.022903][ T5455] ? syscall_enter_from_user_mode+0x32/0x230 [ 110.028910][ T5455] ? lockdep_hardirqs_on+0x98/0x140 [ 110.034121][ T5455] __x64_sys_bind+0x7a/0x90 [ 110.038654][ T5455] do_syscall_64+0x41/0xc0 [ 110.043082][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 110.048982][ T5455] RIP: 0033:0x7ff10207cae9 [ 110.053399][ T5455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 110.073270][ T5455] RSP: 002b:00007ff102e640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 110.081787][ T5455] RAX: ffffffffffffffda RBX: 00007ff10219bf80 RCX: 00007ff10207cae9 [ 110.089792][ T5455] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 110.097786][ T5455] RBP: 00007ff1020c847a R08: 0000000000000000 R09: 0000000000000000 [ 110.105764][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.113823][ T5455] R13: 000000000000000b R14: 00007ff10219bf80 R15: 00007ffeb9dbb4d8 [ 110.121917][ T5455] [ 110.125232][ T5455] Kernel Offset: disabled [ 110.129653][ T5455] Rebooting in 86400 seconds..