Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. 2024/05/08 00:36:10 ignoring optional flag "sandboxArg"="0" 2024/05/08 00:36:10 parsed 1 programs 2024/05/08 00:36:10 executed programs: 0 [ 50.690679][ T1930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.717774][ T1264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.725120][ T1264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.732599][ T43] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.740316][ T43] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.748266][ T43] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.755568][ T43] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.837602][ T1945] modprobe (1945) used greatest stack depth: 21272 bytes left [ 50.934429][ T1936] chnl_net:caif_netlink_parms(): no params data found [ 52.492830][ T1936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.833800][ T43] Bluetooth: hci0: command 0x0409 tx timeout [ 53.581338][ T1936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.903749][ T43] Bluetooth: hci0: command 0x041b tx timeout [ 55.535779][ T2338] ================================================================== [ 55.544076][ T2338] BUG: KASAN: slab-out-of-bounds in hci_sock_setsockopt+0x9e4/0xe50 [ 55.552213][ T2338] Read of size 4 at addr ffff8881000aa2fb by task syz-executor.0/2338 [ 55.560736][ T2338] [ 55.563059][ T2338] CPU: 1 PID: 2338 Comm: syz-executor.0 Not tainted 6.5.0-rc5-syzkaller #0 [ 55.571648][ T2338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 55.581777][ T2338] Call Trace: [ 55.585126][ T2338] [ 55.588064][ T2338] dump_stack_lvl+0xf8/0x260 [ 55.592666][ T2338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 55.597985][ T2338] ? __pfx__printk+0x10/0x10 [ 55.602563][ T2338] ? vprintk_emit+0x119/0x1f0 [ 55.607230][ T2338] ? _printk+0xce/0x120 [ 55.611371][ T2338] print_report+0x167/0x540 [ 55.615940][ T2338] ? hci_sock_setsockopt+0x167/0xe50 [ 55.621259][ T2338] ? __pfx_lock_acquire+0x10/0x10 [ 55.626404][ T2338] ? hci_sock_setsockopt+0x9e4/0xe50 [ 55.631723][ T2338] kasan_report+0x175/0x1b0 [ 55.636220][ T2338] ? hci_sock_setsockopt+0x9e4/0xe50 [ 55.641517][ T2338] hci_sock_setsockopt+0x9e4/0xe50 [ 55.646734][ T2338] ? __pfx___cgroup_bpf_run_filter_setsockopt+0x10/0x10 [ 55.653765][ T2338] ? finish_task_switch+0x119/0x4b0 [ 55.659213][ T2338] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 55.665000][ T2338] ? security_socket_setsockopt+0x39/0x90 [ 55.670778][ T2338] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 55.676508][ T2338] __sys_setsockopt+0x45f/0x870 [ 55.681347][ T2338] ? __pfx___sys_setsockopt+0x10/0x10 [ 55.687239][ T2338] ? switch_fpu_return+0xcd/0x130 [ 55.692366][ T2338] __x64_sys_setsockopt+0xb0/0xd0 [ 55.697650][ T2338] do_syscall_64+0x46/0xc0 [ 55.702555][ T2338] entry_SYSCALL_64_after_hwframe+0x74/0xde [ 55.708536][ T2338] RIP: 0033:0x7f7bc107de69 [ 55.713392][ T2338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.733091][ T2338] RSP: 002b:00007f7bc1da20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 55.741663][ T2338] RAX: ffffffffffffffda RBX: 00007f7bc11abf80 RCX: 00007f7bc107de69 [ 55.749647][ T2338] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 55.757809][ T2338] RBP: 00007f7bc10ca47a R08: 0000000000000002 R09: 0000000000000000 [ 55.765876][ T2338] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 55.773921][ T2338] R13: 0000000000000006 R14: 00007f7bc11abf80 R15: 00007fff28398928 [ 55.782135][ T2338] [ 55.785162][ T2338] [ 55.787461][ T2338] Allocated by task 2338: [ 55.791760][ T2338] kasan_set_track+0x4f/0x80 [ 55.796336][ T2338] __kasan_kmalloc+0x98/0xb0 [ 55.800901][ T2338] __kmalloc+0xaa/0x1d0 [ 55.805117][ T2338] __cgroup_bpf_run_filter_setsockopt+0x924/0xbf0 [ 55.811598][ T2338] __sys_setsockopt+0x83e/0x870 [ 55.816685][ T2338] __x64_sys_setsockopt+0xb0/0xd0 [ 55.821733][ T2338] do_syscall_64+0x46/0xc0 [ 55.826145][ T2338] entry_SYSCALL_64_after_hwframe+0x74/0xde [ 55.832012][ T2338] [ 55.834425][ T2338] The buggy address belongs to the object at ffff8881000aa2f8 [ 55.834425][ T2338] which belongs to the cache kmalloc-8 of size 8 [ 55.848624][ T2338] The buggy address is located 1 bytes to the right of [ 55.848624][ T2338] allocated 2-byte region [ffff8881000aa2f8, ffff8881000aa2fa) [ 55.863396][ T2338] [ 55.865713][ T2338] The buggy address belongs to the physical page: [ 55.872377][ T2338] page:ffffea0004002a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1000aa [ 55.883168][ T2338] flags: 0x100000000000200(slab|node=0|zone=2) [ 55.889980][ T2338] page_type: 0xffffffff() [ 55.894515][ T2338] raw: 0100000000000200 ffff888100041280 ffffea000403b6c0 dead000000000002 [ 55.903185][ T2338] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 55.911950][ T2338] page dumped because: kasan: bad access detected [ 55.918608][ T2338] page_owner tracks the page as allocated [ 55.924557][ T2338] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 3596349800, free_ts 0 [ 55.941393][ T2338] post_alloc_hook+0x10f/0x130 [ 55.946330][ T2338] get_page_from_freelist+0x3f4f/0x4170 [ 55.952036][ T2338] __alloc_pages+0x255/0x650 [ 55.956600][ T2338] alloc_page_interleave+0xf/0x130 [ 55.961805][ T2338] alloc_slab_page+0x6a/0x170 [ 55.966587][ T2338] new_slab+0x70/0x270 [ 55.970838][ T2338] ___slab_alloc+0x834/0xd60 [ 55.975676][ T2338] __kmem_cache_alloc_node+0x1aa/0x260 [ 55.981370][ T2338] __kmalloc_node_track_caller+0x9a/0x1d0 [ 55.987126][ T2338] kstrdup+0x32/0x60 [ 55.991035][ T2338] kvasprintf_const+0x1f0/0x280 [ 55.996243][ T2338] kobject_set_name_vargs+0x5a/0xf0 [ 56.001507][ T2338] kobject_init_and_add+0xd8/0x160 [ 56.007514][ T2338] bus_add_driver+0x237/0x520 [ 56.012356][ T2338] driver_register+0x16d/0x2b0 [ 56.017257][ T2338] acpi_ec_init+0xbc/0xe0 [ 56.021605][ T2338] page_owner free stack trace missing [ 56.027078][ T2338] [ 56.029410][ T2338] Memory state around the buggy address: [ 56.035028][ T2338] ffff8881000aa180: fc fc 03 fc fc fc fc 05 fc fc fc fc 05 fc fc fc [ 56.043383][ T2338] ffff8881000aa200: fc 05 fc fc fc fc 05 fc fc fc fc 07 fc fc fc fc [ 56.051632][ T2338] >ffff8881000aa280: fb fc fc fc fc fb fc fc fc fc 07 fc fc fc fc 02 [ 56.059671][ T2338] ^ [ 56.067622][ T2338] ffff8881000aa300: fc fc fc fc fa fc fc fc fc fa fc fc fc fc 00 fc [ 56.075727][ T2338] ffff8881000aa380: fc fc fc fa fc fc fc fc 00 fc fc fc fc 00 fc fc [ 56.083973][ T2338] ================================================================== [ 56.092335][ T2338] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.100309][ T2338] Kernel Offset: disabled [ 56.104942][ T2338] Rebooting in 86400 seconds..