Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts.
2023/12/02 14:35:52 ignoring optional flag "sandboxArg"="0"
2023/12/02 14:35:53 parsed 1 programs
2023/12/02 14:35:54 executed programs: 0
[ 90.443804][ T5396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.494538][ T4444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.503913][ T4444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.511886][ T4444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.520595][ T4444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.528817][ T4444] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.536218][ T4444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.652920][ T5403] chnl_net:caif_netlink_parms(): no params data found
[ 90.704499][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.711848][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.719188][ T5403] bridge_slave_0: entered allmulticast mode
[ 90.726838][ T5403] bridge_slave_0: entered promiscuous mode
[ 90.734539][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.742139][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.749630][ T5403] bridge_slave_1: entered allmulticast mode
[ 90.756719][ T5403] bridge_slave_1: entered promiscuous mode
[ 90.781922][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.794300][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.823112][ T5403] team0: Port device team_slave_0 added
[ 90.831005][ T5403] team0: Port device team_slave_1 added
[ 90.855070][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.862138][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.888787][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.901456][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.908572][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.936320][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.972860][ T5403] hsr_slave_0: entered promiscuous mode
[ 90.979836][ T5403] hsr_slave_1: entered promiscuous mode
[ 91.717622][ T5403] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.729339][ T5403] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.743405][ T5403] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.755266][ T5403] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.852942][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.884404][ T5403] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.898819][ T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.906175][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.931031][ T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.938374][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.140527][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.193060][ T5403] veth0_vlan: entered promiscuous mode
[ 92.207729][ T5403] veth1_vlan: entered promiscuous mode
[ 92.245888][ T5403] veth0_macvtap: entered promiscuous mode
[ 92.256931][ T5403] veth1_macvtap: entered promiscuous mode
[ 92.279480][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.297150][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.310373][ T5403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.319877][ T5403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.330783][ T5403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.340725][ T5403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.417407][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.441003][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.475194][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.483069][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.574800][ T5050] Bluetooth: hci0: command 0x0409 tx timeout
[ 93.398636][ T5467] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[ 94.301620][ T5521] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[ 94.644187][ T5050] Bluetooth: hci0: command 0x041b tx timeout
[ 95.231209][ T5574] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
2023/12/02 14:36:00 executed programs: 4
[ 96.133558][ T5630] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[ 96.723845][ T5050] Bluetooth: hci0: command 0x040f tx timeout
[ 97.035704][ T5687] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[ 97.047401][ T5687] ==================================================================
[ 97.055620][ T5687] BUG: KASAN: slab-use-after-free in nfc_alloc_send_skb+0x149/0x1c0
[ 97.063963][ T5687] Read of size 4 at addr ffff8880213d0548 by task syz-executor.0/5687
[ 97.072359][ T5687]
[ 97.074865][ T5687] CPU: 0 PID: 5687 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00686-g7453d7a633d0 #0
[ 97.086167][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 97.096348][ T5687] Call Trace:
[ 97.099628][ T5687]
[ 97.102640][ T5687] dump_stack_lvl+0x1e7/0x2d0
[ 97.107419][ T5687] ? tcp_gro_dev_warn+0x250/0x250
[ 97.112664][ T5687] ? panic+0x850/0x850
[ 97.116847][ T5687] ? _printk+0xd5/0x120
[ 97.121122][ T5687] print_report+0x163/0x540
[ 97.125661][ T5687] ? __virt_addr_valid+0x22f/0x2e0
[ 97.130804][ T5687] ? __phys_addr+0xba/0x170
[ 97.135345][ T5687] ? nfc_alloc_send_skb+0x149/0x1c0
[ 97.140649][ T5687] kasan_report+0x142/0x170
[ 97.145241][ T5687] ? nfc_alloc_send_skb+0x149/0x1c0
[ 97.150460][ T5687] nfc_alloc_send_skb+0x149/0x1c0
[ 97.155735][ T5687] nfc_llcp_send_ui_frame+0x2ac/0x670
[ 97.161363][ T5687] ? nfc_llcp_send_i_frame+0x4f0/0x4f0
[ 97.166843][ T5687] ? llcp_sock_sendmsg+0x1fc/0x390
[ 97.171981][ T5687] ? nfc_llcp_getsockopt+0x560/0x560
[ 97.177293][ T5687] ____sys_sendmsg+0x592/0x890
[ 97.182522][ T5687] ? __sys_sendmsg_sock+0x30/0x30
[ 97.187741][ T5687] ? __fget_files+0x3fe/0x480
[ 97.192818][ T5687] __sys_sendmmsg+0x3b2/0x730
[ 97.197525][ T5687] ? __ia32_sys_sendmsg+0x90/0x90
[ 97.202874][ T5687] ? try_to_wake_up+0x994/0x1440
[ 97.207903][ T5687] ? __lock_acquire+0x7fb0/0x7fb0
[ 97.213185][ T5687] ? plist_check_list+0x20d/0x220
[ 97.218228][ T5687] ? __might_sleep+0xc0/0xc0
[ 97.222959][ T5687] ? __might_fault+0xa5/0x120
[ 97.227626][ T5687] ? __lock_acquire+0x7fb0/0x7fb0
[ 97.232996][ T5687] ? __might_fault+0xa5/0x120
[ 97.237684][ T5687] ? print_irqtrace_events+0x220/0x220
[ 97.243153][ T5687] ? syscall_enter_from_user_mode+0x32/0x230
[ 97.249234][ T5687] __x64_sys_sendmmsg+0xa0/0xb0
[ 97.254192][ T5687] do_syscall_64+0x44/0x110
[ 97.258971][ T5687] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 97.264866][ T5687] RIP: 0033:0x7fa12c27cae9
[ 97.269301][ T5687] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 97.288991][ T5687] RSP: 002b:00007fa12d00b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 97.297578][ T5687] RAX: ffffffffffffffda RBX: 00007fa12c39bf80 RCX: 00007fa12c27cae9
[ 97.305638][ T5687] RDX: 0000000000000001 RSI: 00000000200013c0 RDI: 0000000000000004
[ 97.313808][ T5687] RBP: 00007fa12c2c847a R08: 0000000000000000 R09: 0000000000000000
[ 97.321799][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 97.329967][ T5687] R13: 000000000000000b R14: 00007fa12c39bf80 R15: 00007ffd319ae358
[ 97.337968][ T5687]
[ 97.341151][ T5687]
[ 97.343503][ T5687] Allocated by task 5687:
[ 97.348007][ T5687] kasan_set_track+0x4f/0x70
[ 97.354823][ T5687] __kasan_kmalloc+0x98/0xb0
[ 97.359436][ T5687] nfc_allocate_device+0x12f/0x520
[ 97.364747][ T5687] nci_allocate_device+0x1e2/0x360
[ 97.370072][ T5687] virtual_ncidev_open+0x75/0x1b0
[ 97.375209][ T5687] misc_open+0x30b/0x380
[ 97.379642][ T5687] chrdev_open+0x5ab/0x630
[ 97.384212][ T5687] do_dentry_open+0x8fd/0x1590
[ 97.388998][ T5687] path_openat+0x2845/0x3280
[ 97.393702][ T5687] do_filp_open+0x234/0x490
[ 97.398313][ T5687] do_sys_openat2+0x13e/0x1d0
[ 97.403011][ T5687] __x64_sys_openat+0x247/0x290
[ 97.408567][ T5687] do_syscall_64+0x44/0x110
[ 97.413359][ T5687] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 97.419367][ T5687]
[ 97.421704][ T5687] Freed by task 5686:
[ 97.425904][ T5687] kasan_set_track+0x4f/0x70
[ 97.430553][ T5687] kasan_save_free_info+0x28/0x40
[ 97.435771][ T5687] ____kasan_slab_free+0xd6/0x120
[ 97.441005][ T5687] __kmem_cache_free+0x263/0x3a0
[ 97.445986][ T5687] device_release+0x95/0x1c0
[ 97.450770][ T5687] kobject_put+0x1ee/0x430
[ 97.455214][ T5687] nci_free_device+0x38/0x50
[ 97.460046][ T5687] virtual_ncidev_close+0x70/0x90
[ 97.465200][ T5687] __fput+0x3cc/0xa10
[ 97.469906][ T5687] __se_sys_close+0x15f/0x220
[ 97.474607][ T5687] do_syscall_64+0x44/0x110
[ 97.479135][ T5687] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 97.485133][ T5687]
[ 97.487465][ T5687] Last potentially related work creation:
[ 97.493360][ T5687] kasan_save_stack+0x3f/0x60
[ 97.498239][ T5687] __kasan_record_aux_stack+0xad/0xc0
[ 97.503630][ T5687] call_rcu+0x167/0xa70
[ 97.507909][ T5687] netlink_release+0x162a/0x1b00
[ 97.513070][ T5687] sock_close+0xb8/0x230
[ 97.517777][ T5687] __fput+0x3cc/0xa10
[ 97.521822][ T5687] task_work_run+0x24a/0x300
[ 97.526528][ T5687] do_exit+0xa34/0x2750
[ 97.530809][ T5687] do_group_exit+0x206/0x2c0
[ 97.535753][ T5687] __x64_sys_exit_group+0x3f/0x40
[ 97.540908][ T5687] do_syscall_64+0x44/0x110
[ 97.545789][ T5687] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 97.551703][ T5687]
[ 97.554225][ T5687] The buggy address belongs to the object at ffff8880213d0000
[ 97.554225][ T5687] which belongs to the cache kmalloc-2k of size 2048
[ 97.568655][ T5687] The buggy address is located 1352 bytes inside of
[ 97.568655][ T5687] freed 2048-byte region [ffff8880213d0000, ffff8880213d0800)
[ 97.583109][ T5687]
[ 97.585445][ T5687] The buggy address belongs to the physical page:
[ 97.591868][ T5687] page:ffffea000084f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x213d0
[ 97.602050][ T5687] head:ffffea000084f400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 97.611179][ T5687] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 97.619791][ T5687] page_type: 0xffffffff()
[ 97.624179][ T5687] raw: 00fff00000000840 ffff888012c42000 0000000000000000 dead000000000001
[ 97.633045][ T5687] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 97.642083][ T5687] page dumped because: kasan: bad access detected
[ 97.648679][ T5687] page_owner tracks the page as allocated
[ 97.654417][ T5687] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4501, tgid 4501 (udevd), ts 68833145467, free_ts 66934106075
[ 97.677013][ T5687] post_alloc_hook+0x1e6/0x210
[ 97.681812][ T5687] get_page_from_freelist+0x339a/0x3530
[ 97.687989][ T5687] __alloc_pages+0x255/0x670
[ 97.692870][ T5687] alloc_pages_mpol+0x3de/0x640
[ 97.697749][ T5687] alloc_slab_page+0x6a/0x160
[ 97.702477][ T5687] new_slab+0x84/0x2f0
[ 97.706663][ T5687] ___slab_alloc+0xc85/0x1310
[ 97.711371][ T5687] __kmem_cache_alloc_node+0x21d/0x300
[ 97.716853][ T5687] __kmalloc+0xa8/0x230
[ 97.721052][ T5687] sk_prot_alloc+0xe0/0x210
[ 97.725687][ T5687] sk_alloc+0x38/0x370
[ 97.729821][ T5687] __netlink_create+0x6b/0x2c0
[ 97.734882][ T5687] netlink_create+0x3d4/0x590
[ 97.739590][ T5687] __sock_create+0x48c/0x910
[ 97.744211][ T5687] __sys_socket+0x14f/0x3b0
[ 97.748849][ T5687] __x64_sys_socket+0x7a/0x90
[ 97.753557][ T5687] page last free stack trace:
[ 97.758497][ T5687] free_unref_page_prepare+0x958/0xa70
[ 97.763985][ T5687] free_unref_page+0x37/0x3f0
[ 97.768955][ T5687] __unfreeze_partials+0x1dc/0x220
[ 97.774095][ T5687] put_cpu_partial+0x17b/0x250
[ 97.778978][ T5687] __slab_free+0x2b6/0x390
[ 97.783800][ T5687] qlist_free_all+0x75/0xe0
[ 97.788747][ T5687] kasan_quarantine_reduce+0x14b/0x160
[ 97.794320][ T5687] __kasan_slab_alloc+0x23/0x70
[ 97.799279][ T5687] slab_post_alloc_hook+0x6c/0x3c0
[ 97.804813][ T5687] kmem_cache_alloc+0x1be/0x350
[ 97.809688][ T5687] getname_flags+0xbc/0x4f0
[ 97.814303][ T5687] vfs_fstatat+0x11c/0x190
[ 97.819176][ T5687] __x64_sys_newfstatat+0x117/0x190
[ 97.824492][ T5687] do_syscall_64+0x44/0x110
[ 97.829240][ T5687] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 97.835176][ T5687]
[ 97.837509][ T5687] Memory state around the buggy address:
[ 97.843270][ T5687] ffff8880213d0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.851433][ T5687] ffff8880213d0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.859527][ T5687] >ffff8880213d0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.867781][ T5687] ^
[ 97.874555][ T5687] ffff8880213d0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.882806][ T5687] ffff8880213d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 97.891149][ T5687] ==================================================================
[ 97.906662][ T5687] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 97.914423][ T5687] CPU: 0 PID: 5687 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00686-g7453d7a633d0 #0
[ 97.924964][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 97.935127][ T5687] Call Trace:
[ 97.938764][ T5687]
[ 97.941707][ T5687] dump_stack_lvl+0x1e7/0x2d0
[ 97.946414][ T5687] ? tcp_gro_dev_warn+0x250/0x250
[ 97.951641][ T5687] ? panic+0x850/0x850
[ 97.955905][ T5687] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 97.962181][ T5687] ? vscnprintf+0x5d/0x80
[ 97.966538][ T5687] panic+0x349/0x850
[ 97.970467][ T5687] ? check_panic_on_warn+0x21/0xa0
[ 97.975692][ T5687] ? __memcpy_flushcache+0x2b0/0x2b0
[ 97.981096][ T5687] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 97.987218][ T5687] ? _raw_spin_unlock+0x40/0x40
[ 97.992105][ T5687] check_panic_on_warn+0x82/0xa0
[ 97.997113][ T5687] ? nfc_alloc_send_skb+0x149/0x1c0
[ 98.002425][ T5687] end_report+0x6e/0x130
[ 98.006783][ T5687] kasan_report+0x153/0x170
[ 98.011287][ T5687] ? nfc_alloc_send_skb+0x149/0x1c0
[ 98.016484][ T5687] nfc_alloc_send_skb+0x149/0x1c0
[ 98.021894][ T5687] nfc_llcp_send_ui_frame+0x2ac/0x670
[ 98.027447][ T5687] ? nfc_llcp_send_i_frame+0x4f0/0x4f0
[ 98.032990][ T5687] ? llcp_sock_sendmsg+0x1fc/0x390
[ 98.038181][ T5687] ? nfc_llcp_getsockopt+0x560/0x560
[ 98.043678][ T5687] ____sys_sendmsg+0x592/0x890
[ 98.048541][ T5687] ? __sys_sendmsg_sock+0x30/0x30
[ 98.053754][ T5687] ? __fget_files+0x3fe/0x480
[ 98.058537][ T5687] __sys_sendmmsg+0x3b2/0x730
[ 98.063229][ T5687] ? __ia32_sys_sendmsg+0x90/0x90
[ 98.068693][ T5687] ? try_to_wake_up+0x994/0x1440
[ 98.073641][ T5687] ? __lock_acquire+0x7fb0/0x7fb0
[ 98.078750][ T5687] ? plist_check_list+0x20d/0x220
[ 98.083874][ T5687] ? __might_sleep+0xc0/0xc0
[ 98.088664][ T5687] ? __might_fault+0xa5/0x120
[ 98.093345][ T5687] ? __lock_acquire+0x7fb0/0x7fb0
[ 98.098457][ T5687] ? __might_fault+0xa5/0x120
[ 98.103222][ T5687] ? print_irqtrace_events+0x220/0x220
[ 98.108695][ T5687] ? syscall_enter_from_user_mode+0x32/0x230
[ 98.114760][ T5687] __x64_sys_sendmmsg+0xa0/0xb0
[ 98.119954][ T5687] do_syscall_64+0x44/0x110
[ 98.124453][ T5687] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 98.130522][ T5687] RIP: 0033:0x7fa12c27cae9
[ 98.134925][ T5687] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 98.156343][ T5687] RSP: 002b:00007fa12d00b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 98.165446][ T5687] RAX: ffffffffffffffda RBX: 00007fa12c39bf80 RCX: 00007fa12c27cae9
[ 98.173674][ T5687] RDX: 0000000000000001 RSI: 00000000200013c0 RDI: 0000000000000004
[ 98.181649][ T5687] RBP: 00007fa12c2c847a R08: 0000000000000000 R09: 0000000000000000
[ 98.189613][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.197752][ T5687] R13: 000000000000000b R14: 00007fa12c39bf80 R15: 00007ffd319ae358
[ 98.205731][ T5687]
[ 98.209058][ T5687] Kernel Offset: disabled
[ 98.213399][ T5687] Rebooting in 86400 seconds..