Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. 2023/07/22 07:32:24 ignoring optional flag "sandboxArg"="0" 2023/07/22 07:32:24 parsed 1 programs 2023/07/22 07:32:25 executed programs: 0 [ 61.765762][ T5371] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.804693][ T4430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.812190][ T4430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.819793][ T4430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.827313][ T4430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.839618][ T4430] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.847727][ T4430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.914949][ T5379] chnl_net:caif_netlink_parms(): no params data found [ 61.941522][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.949309][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.956355][ T5379] bridge_slave_0: entered allmulticast mode [ 61.963206][ T5379] bridge_slave_0: entered promiscuous mode [ 61.970422][ T5379] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.977576][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.984641][ T5379] bridge_slave_1: entered allmulticast mode [ 61.991085][ T5379] bridge_slave_1: entered promiscuous mode [ 62.005324][ T5379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.015538][ T5379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.032741][ T5379] team0: Port device team_slave_0 added [ 62.039428][ T5379] team0: Port device team_slave_1 added [ 62.052595][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.059652][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.085646][ T5379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.097771][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.104704][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.130801][ T5379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.152782][ T5379] hsr_slave_0: entered promiscuous mode [ 62.158895][ T5379] hsr_slave_1: entered promiscuous mode [ 62.678631][ T5379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.687337][ T5379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.696993][ T5379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.706350][ T5379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.724840][ T5379] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.731941][ T5379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.739367][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.746438][ T5379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.786705][ T5379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.802149][ T913] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.811532][ T913] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.826728][ T5379] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.839238][ T913] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.846480][ T913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.870664][ T913] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.877755][ T913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.894578][ T5379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.014431][ T5379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.051910][ T5379] veth0_vlan: entered promiscuous mode [ 63.063258][ T5379] veth1_vlan: entered promiscuous mode [ 63.083171][ T5379] veth0_macvtap: entered promiscuous mode [ 63.093991][ T5379] veth1_macvtap: entered promiscuous mode [ 63.107689][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.120693][ T5379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.131762][ T5379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.142386][ T5379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.151481][ T5379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.161560][ T5379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.208052][ T5041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.215880][ T5041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.239044][ T913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.246866][ T913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.568406][ T913] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.887730][ T5030] Bluetooth: hci0: command 0x0409 tx timeout [ 63.969861][ T913] usb 1-1: New USB device found, idVendor=047d, idProduct=5002, bcdDevice=b9.5b [ 63.979526][ T913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.004588][ T913] usb 1-1: config 0 descriptor?? [ 64.070555][ T913] gspca_main: se401-2.14.0 probing 047d:5002 [ 64.467744][ T913] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 64.657967][ T913] usb 1-1: device descriptor read/64, error -32 [ 64.937516][ T913] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 65.147570][ T913] usb 1-1: device descriptor read/64, error -32 [ 65.427556][ T913] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 65.527989][ T913] usb 1-1: Using ep0 maxpacket: 16 [ 65.618361][ T913] usb 1-1: device descriptor read/all, error 1 [ 65.778449][ T913] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 65.897548][ T913] usb 1-1: device descriptor read/8, error -71 [ 65.958016][ T5030] Bluetooth: hci0: command 0x041b tx timeout [ 66.029689][ T913] gspca_se401: read req failed req 0x06 error -19 [ 66.041257][ T5373] ================================================================== [ 66.049326][ T5373] BUG: KASAN: slab-out-of-bounds in read_descriptors+0x27e/0x290 [ 66.057057][ T5373] Read of size 8 at addr ffff8880233787b0 by task udevd/5373 [ 66.064421][ T5373] [ 66.066743][ T5373] CPU: 0 PID: 5373 Comm: udevd Not tainted 6.5.0-rc2-syzkaller-00307-gd192f5382581 #0 [ 66.076296][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 66.086344][ T5373] Call Trace: [ 66.089618][ T5373] [ 66.092550][ T5373] dump_stack_lvl+0xd9/0x1b0 [ 66.097142][ T5373] print_report+0xc4/0x620 [ 66.101653][ T5373] ? __virt_addr_valid+0x5e/0x2d0 [ 66.106682][ T5373] ? __phys_addr+0xc6/0x140 [ 66.111190][ T5373] kasan_report+0xda/0x110 [ 66.115614][ T5373] ? read_descriptors+0x27e/0x290 [ 66.120648][ T5373] ? read_descriptors+0x27e/0x290 [ 66.125678][ T5373] read_descriptors+0x27e/0x290 [ 66.130540][ T5373] sysfs_kf_bin_read+0x1a0/0x270 [ 66.135494][ T5373] ? urbnum_show+0x80/0x80 [ 66.139914][ T5373] ? kernfs_create_link+0x230/0x230 [ 66.145123][ T5373] kernfs_fop_read_iter+0x37c/0x680 [ 66.150334][ T5373] vfs_read+0x4e0/0x930 [ 66.154503][ T5373] ? kernel_read+0x1b0/0x1b0 [ 66.159105][ T5373] ? build_open_flags+0x690/0x690 [ 66.164133][ T5373] ? putname+0x101/0x140 [ 66.168389][ T5373] ? __fget_light+0x1fc/0x260 [ 66.173073][ T5373] ksys_read+0x12f/0x250 [ 66.177432][ T5373] ? vfs_write+0xe40/0xe40 [ 66.181858][ T5373] ? syscall_enter_from_user_mode+0x26/0x80 [ 66.187761][ T5373] do_syscall_64+0x38/0xb0 [ 66.192179][ T5373] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.198168][ T5373] RIP: 0033:0x7fd25df16b6a [ 66.202581][ T5373] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 66.222186][ T5373] RSP: 002b:00007ffc5bf2f2a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.230602][ T5373] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd25df16b6a [ 66.238656][ T5373] RDX: 0000000000010011 RSI: 00007ffc5bf2f2d7 RDI: 0000000000000008 [ 66.246611][ T5373] RBP: 0000000000000008 R08: 0000000000000003 R09: f56e56060ec02cc3 [ 66.254585][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564e35a09550 [ 66.262543][ T5373] R13: 00007ffc5bf3f9b8 R14: 00007ffc5bf40008 R15: 00007ffc5bf2f2d7 [ 66.270541][ T5373] [ 66.273543][ T5373] [ 66.275846][ T5373] Allocated by task 913: [ 66.280063][ T5373] kasan_save_stack+0x33/0x50 [ 66.284733][ T5373] kasan_set_track+0x25/0x30 [ 66.289309][ T5373] __kasan_kmalloc+0xa2/0xb0 [ 66.293972][ T5373] __kmalloc+0x5d/0x100 [ 66.298119][ T5373] usb_get_configuration+0x191/0x5640 [ 66.303478][ T5373] usb_new_device+0x1115/0x1960 [ 66.308317][ T5373] hub_event+0x307f/0x5230 [ 66.312723][ T5373] process_one_work+0xaa2/0x16f0 [ 66.317654][ T5373] worker_thread+0x687/0x1110 [ 66.322320][ T5373] kthread+0x33a/0x430 [ 66.326372][ T5373] ret_from_fork+0x2c/0x70 [ 66.330779][ T5373] ret_from_fork_asm+0x11/0x20 [ 66.335533][ T5373] [ 66.337841][ T5373] The buggy address belongs to the object at ffff8880233787a8 [ 66.337841][ T5373] which belongs to the cache kmalloc-8 of size 8 [ 66.351546][ T5373] The buggy address is located 0 bytes to the right of [ 66.351546][ T5373] allocated 8-byte region [ffff8880233787a8, ffff8880233787b0) [ 66.365867][ T5373] [ 66.368177][ T5373] The buggy address belongs to the physical page: [ 66.374565][ T5373] page:ffffea00008cde00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23378 [ 66.384783][ T5373] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 66.392314][ T5373] page_type: 0xffffffff() [ 66.396628][ T5373] raw: 00fff00000000200 ffff888012841280 ffffea000065ba80 dead000000000002 [ 66.405194][ T5373] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000 [ 66.413759][ T5373] page dumped because: kasan: bad access detected [ 66.420155][ T5373] page_owner tracks the page as allocated [ 66.425847][ T5373] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 6444209836, free_ts 0 [ 66.442235][ T5373] post_alloc_hook+0x2d2/0x350 [ 66.446992][ T5373] get_page_from_freelist+0x10a9/0x31e0 [ 66.452529][ T5373] __alloc_pages+0x1d0/0x4a0 [ 66.457124][ T5373] alloc_page_interleave+0x1e/0x250 [ 66.462311][ T5373] alloc_pages+0x22a/0x270 [ 66.466712][ T5373] allocate_slab+0x24e/0x380 [ 66.471373][ T5373] ___slab_alloc+0x8bc/0x1570 [ 66.476036][ T5373] __slab_alloc.constprop.0+0x56/0xa0 [ 66.481394][ T5373] __kmem_cache_alloc_node+0x137/0x350 [ 66.486848][ T5373] __kmalloc+0x4c/0x100 [ 66.491078][ T5373] usb_set_configuration+0x240/0x1c40 [ 66.496434][ T5373] usb_generic_driver_probe+0xca/0x130 [ 66.502057][ T5373] usb_probe_device+0xda/0x2c0 [ 66.506804][ T5373] really_probe+0x234/0xc90 [ 66.511299][ T5373] __driver_probe_device+0x1de/0x4b0 [ 66.516579][ T5373] driver_probe_device+0x4c/0x1a0 [ 66.521604][ T5373] page_owner free stack trace missing [ 66.526952][ T5373] [ 66.529255][ T5373] Memory state around the buggy address: [ 66.534865][ T5373] ffff888023378680: fc fc 06 fc fc fc fc 06 fc fc fc fc fa fc fc fc [ 66.542910][ T5373] ffff888023378700: fc fa fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc [ 66.550953][ T5373] >ffff888023378780: fa fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 [ 66.558993][ T5373] ^ [ 66.564599][ T5373] ffff888023378800: fc fc fc fc 00 fc fc fc fc fa fc fc fc fc fa fc [ 66.572640][ T5373] ffff888023378880: fc fc fc 06 fc fc fc fc 04 fc fc fc fc fa fc fc [ 66.580681][ T5373] ================================================================== [ 66.604699][ T913] usb 1-1: USB disconnect, device number 2 [ 66.614409][ T5373] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.621611][ T5373] CPU: 0 PID: 5373 Comm: udevd Not tainted 6.5.0-rc2-syzkaller-00307-gd192f5382581 #0 [ 66.631144][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 66.641194][ T5373] Call Trace: [ 66.644470][ T5373] [ 66.647399][ T5373] dump_stack_lvl+0xd9/0x1b0 [ 66.651994][ T5373] panic+0x6a4/0x750 [ 66.655893][ T5373] ? panic_smp_self_stop+0xa0/0xa0 [ 66.661095][ T5373] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.667250][ T5373] ? preempt_schedule_thunk+0x1a/0x30 [ 66.672634][ T5373] ? preempt_schedule_common+0x45/0xc0 [ 66.678184][ T5373] check_panic_on_warn+0xab/0xb0 [ 66.683128][ T5373] end_report+0x108/0x150 [ 66.687465][ T5373] kasan_report+0xea/0x110 [ 66.691888][ T5373] ? read_descriptors+0x27e/0x290 [ 66.696917][ T5373] ? read_descriptors+0x27e/0x290 [ 66.701950][ T5373] read_descriptors+0x27e/0x290 [ 66.706808][ T5373] sysfs_kf_bin_read+0x1a0/0x270 [ 66.711764][ T5373] ? urbnum_show+0x80/0x80 [ 66.716192][ T5373] ? kernfs_create_link+0x230/0x230 [ 66.721484][ T5373] kernfs_fop_read_iter+0x37c/0x680 [ 66.726691][ T5373] vfs_read+0x4e0/0x930 [ 66.730862][ T5373] ? kernel_read+0x1b0/0x1b0 [ 66.735462][ T5373] ? build_open_flags+0x690/0x690 [ 66.740497][ T5373] ? putname+0x101/0x140 [ 66.744754][ T5373] ? __fget_light+0x1fc/0x260 [ 66.749528][ T5373] ksys_read+0x12f/0x250 [ 66.753781][ T5373] ? vfs_write+0xe40/0xe40 [ 66.758203][ T5373] ? syscall_enter_from_user_mode+0x26/0x80 [ 66.764105][ T5373] do_syscall_64+0x38/0xb0 [ 66.768522][ T5373] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.774426][ T5373] RIP: 0033:0x7fd25df16b6a [ 66.778838][ T5373] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 66.798533][ T5373] RSP: 002b:00007ffc5bf2f2a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.806942][ T5373] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd25df16b6a [ 66.814914][ T5373] RDX: 0000000000010011 RSI: 00007ffc5bf2f2d7 RDI: 0000000000000008 [ 66.822887][ T5373] RBP: 0000000000000008 R08: 0000000000000003 R09: f56e56060ec02cc3 [ 66.830861][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000564e35a09550 [ 66.838832][ T5373] R13: 00007ffc5bf3f9b8 R14: 00007ffc5bf40008 R15: 00007ffc5bf2f2d7 [ 66.846810][ T5373] [ 66.850933][ T5373] Kernel Offset: disabled [ 66.855236][ T5373] Rebooting in 86400 seconds..