[ 81.083040][ T921] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.254' (ED25519) to the list of known hosts.
2024/10/01 20:09:46 ignoring optional flag "sandboxArg"="0"
2024/10/01 20:09:46 ignoring optional flag "type"="gce"
2024/10/01 20:09:46 parsed 1 programs
2024/10/01 20:09:48 executed programs: 0
[ 86.443965][ T5396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.506104][ T4494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.514159][ T4494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.522044][ T4494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.530069][ T4494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.538571][ T4494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.545958][ T4494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.667363][ T5404] chnl_net:caif_netlink_parms(): no params data found
[ 86.719999][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.727386][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.734773][ T5404] bridge_slave_0: entered allmulticast mode
[ 86.741845][ T5404] bridge_slave_0: entered promiscuous mode
[ 86.750590][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.757755][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.765352][ T5404] bridge_slave_1: entered allmulticast mode
[ 86.772314][ T5404] bridge_slave_1: entered promiscuous mode
[ 86.797794][ T5404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.809240][ T5404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.836040][ T5404] team0: Port device team_slave_0 added
[ 86.844434][ T5404] team0: Port device team_slave_1 added
[ 86.866451][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.874047][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.900133][ T5404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.912402][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.919365][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.945921][ T5404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.981052][ T5404] hsr_slave_0: entered promiscuous mode
[ 86.987463][ T5404] hsr_slave_1: entered promiscuous mode
[ 87.463952][ T5404] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.475493][ T5404] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.486498][ T5404] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.496470][ T5404] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.524192][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.531365][ T5404] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.538773][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.545959][ T5404] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.610149][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.628565][ T956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.638409][ T956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.659036][ T5404] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.677569][ T956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.684738][ T956] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.702098][ T956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.709213][ T956] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.904134][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.949689][ T5404] veth0_vlan: entered promiscuous mode
[ 87.966010][ T5404] veth1_vlan: entered promiscuous mode
[ 88.003533][ T5404] veth0_macvtap: entered promiscuous mode
[ 88.013459][ T5404] veth1_macvtap: entered promiscuous mode
[ 88.035302][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.052457][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.066822][ T5404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.078422][ T5404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.088454][ T5404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.097948][ T5404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.163915][ T956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.181195][ T956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.207591][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.216413][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.601498][ T4494] Bluetooth: hci0: command tx timeout
[ 90.681807][ T4494] Bluetooth: hci0: command 0x041b tx timeout
2024/10/01 20:09:53 executed programs: 4
[ 92.770568][ T4494] Bluetooth: hci0: command 0x041b tx timeout
[ 94.840408][ T54] Bluetooth: hci0: command 0x041b tx timeout
[ 96.920445][ T4494] Bluetooth: hci0: command 0x041b tx timeout
2024/10/01 20:09:58 executed programs: 11
[ 99.001686][ T54] Bluetooth: hci0: command 0x041b tx timeout
2024/10/01 20:10:03 executed programs: 17
2024/10/01 20:10:08 executed programs: 23
2024/10/01 20:10:14 executed programs: 29
2024/10/01 20:10:19 executed programs: 35
2024/10/01 20:10:24 executed programs: 41
2024/10/01 20:10:29 executed programs: 47
[ 128.441323][ T25] ==================================================================
[ 128.449759][ T25] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270
[ 128.457522][ T25] Write of size 4 at addr ffff888022136080 by task kworker/1:0/25
[ 128.465316][ T25]
[ 128.467634][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7-dirty #0
[ 128.478209][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 128.488269][ T25] Workqueue: events sco_sock_timeout
[ 128.493568][ T25] Call Trace:
[ 128.496837][ T25]
[ 128.499761][ T25] dump_stack_lvl+0x241/0x360
[ 128.504447][ T25] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.509656][ T25] ? __pfx__printk+0x10/0x10
[ 128.514259][ T25] ? _printk+0xd5/0x120
[ 128.518424][ T25] ? __virt_addr_valid+0x183/0x530
[ 128.523538][ T25] ? srso_alias_return_thunk+0x5/0xfbef5
[ 128.529184][ T25] print_report+0x169/0x550
[ 128.533784][ T25] ? __virt_addr_valid+0x183/0x530
[ 128.538899][ T25] ? srso_alias_return_thunk+0x5/0xfbef5
[ 128.544545][ T25] ? __virt_addr_valid+0x45f/0x530
[ 128.549658][ T25] ? srso_alias_return_thunk+0x5/0xfbef5
[ 128.555390][ T25] ? __phys_addr+0xba/0x170
[ 128.559898][ T25] ? sco_sock_timeout+0x8b/0x270
[ 128.564849][ T25] kasan_report+0x143/0x180
[ 128.569446][ T25] ? __pfx_lock_acquire+0x10/0x10
[ 128.574484][ T25] ? sco_sock_timeout+0x8b/0x270
[ 128.579437][ T25] kasan_check_range+0x282/0x290
[ 128.584559][ T25] sco_sock_timeout+0x8b/0x270
[ 128.589338][ T25] ? process_scheduled_works+0x976/0x1850
[ 128.595071][ T25] process_scheduled_works+0xa65/0x1850
[ 128.600649][ T25] ? __pfx_process_scheduled_works+0x10/0x10
[ 128.606728][ T25] ? assign_work+0x364/0x3d0
[ 128.611332][ T25] worker_thread+0x870/0xd30
[ 128.615938][ T25] ? __kthread_parkme+0x169/0x1d0
[ 128.620974][ T25] ? __pfx_worker_thread+0x10/0x10
[ 128.626094][ T25] kthread+0x2f2/0x390
[ 128.630170][ T25] ? __pfx_worker_thread+0x10/0x10
[ 128.635292][ T25] ? __pfx_kthread+0x10/0x10
[ 128.639882][ T25] ret_from_fork+0x4d/0x80
[ 128.644313][ T25] ? __pfx_kthread+0x10/0x10
[ 128.648903][ T25] ret_from_fork_asm+0x1a/0x30
[ 128.653686][ T25]
[ 128.656701][ T25]
[ 128.659015][ T25] Allocated by task 4550:
[ 128.663347][ T25] kasan_save_track+0x3f/0x80
[ 128.668144][ T25] __kasan_kmalloc+0x98/0xb0
[ 128.672756][ T25] __kmalloc_noprof+0x1fc/0x400
[ 128.677633][ T25] tomoyo_realpath_from_path+0xcf/0x5e0
[ 128.683230][ T25] tomoyo_check_open_permission+0x255/0x500
[ 128.689225][ T25] security_file_open+0x777/0x990
[ 128.694303][ T25] do_dentry_open+0x369/0x1460
[ 128.699087][ T25] vfs_open+0x3e/0x330
[ 128.703179][ T25] path_openat+0x2c84/0x3590
[ 128.707776][ T25] do_filp_open+0x235/0x490
[ 128.712287][ T25] do_sys_openat2+0x13e/0x1d0
[ 128.716979][ T25] __x64_sys_openat+0x247/0x2a0
[ 128.721842][ T25] do_syscall_64+0xf3/0x230
[ 128.726358][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.732268][ T25]
[ 128.734593][ T25] Freed by task 4550:
[ 128.738563][ T25] kasan_save_track+0x3f/0x80
[ 128.743248][ T25] kasan_save_free_info+0x40/0x50
[ 128.748374][ T25] __kasan_slab_free+0x59/0x70
[ 128.753154][ T25] kfree+0x1a0/0x440
[ 128.757057][ T25] tomoyo_realpath_from_path+0x5a9/0x5e0
[ 128.762699][ T25] tomoyo_check_open_permission+0x255/0x500
[ 128.768595][ T25] security_file_open+0x777/0x990
[ 128.773633][ T25] do_dentry_open+0x369/0x1460
[ 128.778405][ T25] vfs_open+0x3e/0x330
[ 128.782480][ T25] path_openat+0x2c84/0x3590
[ 128.787157][ T25] do_filp_open+0x235/0x490
[ 128.791749][ T25] do_sys_openat2+0x13e/0x1d0
[ 128.796448][ T25] __x64_sys_openat+0x247/0x2a0
[ 128.801314][ T25] do_syscall_64+0xf3/0x230
[ 128.805824][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.811722][ T25]
[ 128.814037][ T25] The buggy address belongs to the object at ffff888022136000
[ 128.814037][ T25] which belongs to the cache kmalloc-4k of size 4096
[ 128.828369][ T25] The buggy address is located 128 bytes inside of
[ 128.828369][ T25] freed 4096-byte region [ffff888022136000, ffff888022137000)
[ 128.842360][ T25]
[ 128.844684][ T25] The buggy address belongs to the physical page:
[ 128.851089][ T25] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22130
[ 128.859873][ T25] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 128.868458][ T25] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 128.876005][ T25] page_type: f5(slab)
[ 128.879987][ T25] raw: 00fff00000000040 ffff888015442140 dead000000000122 0000000000000000
[ 128.888570][ T25] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 128.897155][ T25] head: 00fff00000000040 ffff888015442140 dead000000000122 0000000000000000
[ 128.905828][ T25] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000
[ 128.914847][ T25] head: 00fff00000000003 ffffea0000884c01 ffffffffffffffff 0000000000000000
[ 128.923518][ T25] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 128.932181][ T25] page dumped because: kasan: bad access detected
[ 128.938583][ T25] page_owner tracks the page as allocated
[ 128.944289][ T25] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4550, tgid 4550 (udevd), ts 121918980453, free_ts 121043303487
[ 128.965224][ T25] post_alloc_hook+0x1f3/0x230
[ 128.970006][ T25] get_page_from_freelist+0x3045/0x3190
[ 128.975556][ T25] __alloc_pages_noprof+0x256/0x6c0
[ 128.980761][ T25] alloc_pages_mpol_noprof+0x3e8/0x680
[ 128.986226][ T25] alloc_slab_page+0x6a/0x120
[ 128.991256][ T25] allocate_slab+0x5a/0x2f0
[ 128.995760][ T25] ___slab_alloc+0xcd1/0x14b0
[ 129.000447][ T25] __slab_alloc+0x58/0xa0
[ 129.004872][ T25] __kmalloc_cache_noprof+0x1d5/0x2c0
[ 129.010384][ T25] kernfs_iop_get_link+0x67/0x5a0
[ 129.015417][ T25] vfs_readlink+0x170/0x3b0
[ 129.019926][ T25] do_readlinkat+0x249/0x3a0
[ 129.024516][ T25] __x64_sys_readlink+0x7f/0x90
[ 129.029365][ T25] do_syscall_64+0xf3/0x230
[ 129.033959][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.039857][ T25] page last free pid 54 tgid 54 stack trace:
[ 129.045827][ T25] free_unref_page+0xcfb/0xf20
[ 129.050589][ T25] __slab_free+0x31b/0x3d0
[ 129.055004][ T25] qlist_free_all+0x9a/0x140
[ 129.059593][ T25] kasan_quarantine_reduce+0x14f/0x170
[ 129.065052][ T25] __kasan_slab_alloc+0x23/0x80
[ 129.069904][ T25] __kmalloc_cache_noprof+0x132/0x2c0
[ 129.075285][ T25] hci_cmd_sync_submit+0xcb/0x2f0
[ 129.080955][ T25] process_scheduled_works+0xa65/0x1850
[ 129.086509][ T25] worker_thread+0x870/0xd30
[ 129.091123][ T25] kthread+0x2f2/0x390
[ 129.095191][ T25] ret_from_fork+0x4d/0x80
[ 129.099620][ T25] ret_from_fork_asm+0x1a/0x30
[ 129.104486][ T25]
[ 129.106812][ T25] Memory state around the buggy address:
[ 129.112959][ T25] ffff888022135f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 129.121017][ T25] ffff888022136000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.129070][ T25] >ffff888022136080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.137130][ T25] ^
[ 129.141195][ T25] ffff888022136100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.149255][ T25] ffff888022136180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.157309][ T25] ==================================================================
[ 129.165694][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 129.172908][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7-dirty #0
[ 129.183610][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 129.193687][ T25] Workqueue: events sco_sock_timeout
[ 129.199000][ T25] Call Trace:
[ 129.202279][ T25]
[ 129.205217][ T25] dump_stack_lvl+0x241/0x360
[ 129.209906][ T25] ? __pfx_dump_stack_lvl+0x10/0x10
[ 129.215119][ T25] ? __pfx__printk+0x10/0x10
[ 129.219716][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 129.225719][ T25] ? srso_alias_return_thunk+0x5/0xfbef5
[ 129.231369][ T25] ? vscnprintf+0x5d/0x90
[ 129.235711][ T25] panic+0x349/0x880
[ 129.239614][ T25] ? check_panic_on_warn+0x21/0xb0
[ 129.244739][ T25] ? __pfx_panic+0x10/0x10
[ 129.249167][ T25] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 129.255085][ T25] ? srso_alias_return_thunk+0x5/0xfbef5
[ 129.260749][ T25] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 129.266662][ T25] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 129.273010][ T25] check_panic_on_warn+0x86/0xb0
[ 129.277954][ T25] ? sco_sock_timeout+0x8b/0x270
[ 129.282904][ T25] end_report+0x77/0x160
[ 129.287181][ T25] kasan_report+0x154/0x180
[ 129.291691][ T25] ? __pfx_lock_acquire+0x10/0x10
[ 129.296726][ T25] ? sco_sock_timeout+0x8b/0x270
[ 129.301680][ T25] kasan_check_range+0x282/0x290
[ 129.306626][ T25] sco_sock_timeout+0x8b/0x270
[ 129.311407][ T25] ? process_scheduled_works+0x976/0x1850
[ 129.317140][ T25] process_scheduled_works+0xa65/0x1850
[ 129.322797][ T25] ? __pfx_process_scheduled_works+0x10/0x10
[ 129.328791][ T25] ? assign_work+0x364/0x3d0
[ 129.333400][ T25] worker_thread+0x870/0xd30
[ 129.338005][ T25] ? __kthread_parkme+0x169/0x1d0
[ 129.343042][ T25] ? __pfx_worker_thread+0x10/0x10
[ 129.348163][ T25] kthread+0x2f2/0x390
[ 129.352234][ T25] ? __pfx_worker_thread+0x10/0x10
[ 129.357354][ T25] ? __pfx_kthread+0x10/0x10
[ 129.362068][ T25] ret_from_fork+0x4d/0x80
[ 129.366507][ T25] ? __pfx_kthread+0x10/0x10
[ 129.371100][ T25] ret_from_fork_asm+0x1a/0x30
[ 129.375904][ T25]
[ 129.379222][ T25] Kernel Offset: disabled
[ 129.383567][ T25] Rebooting in 86400 seconds..