Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. 2023/07/31 10:42:01 ignoring optional flag "sandboxArg"="0" 2023/07/31 10:42:01 parsed 1 programs [ 43.630784][ T3669] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 2023/07/31 10:42:01 executed programs: 0 [ 43.796687][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.798544][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.800420][ T3677] device bridge_slave_0 entered promiscuous mode [ 43.802580][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.804103][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.805842][ T3677] device bridge_slave_1 entered promiscuous mode [ 43.970852][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.972403][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.973970][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.975539][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.274018][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.276033][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.278314][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.280076][ T3426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.326146][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.328616][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.330049][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.331712][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.333570][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.334988][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.336643][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.338787][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.639042][ T95] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.643234][ T3677] device veth0_vlan entered promiscuous mode [ 44.645995][ T3677] device veth1_vlan entered promiscuous mode [ 44.648014][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.649860][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.651814][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.653601][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.660210][ T95] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.661986][ T95] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.664657][ T3677] device veth0_macvtap entered promiscuous mode [ 44.716430][ T95] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.719132][ T95] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.721132][ T95] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.186835][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.546850][ T95] usb 1-1: New USB device found, idVendor=047d, idProduct=5002, bcdDevice=b9.5b [ 45.548871][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.551306][ T95] usb 1-1: config 0 descriptor?? [ 45.599930][ T95] gspca_main: se401-2.14.0 probing 047d:5002 [ 45.966805][ T95] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 46.166793][ T95] usb 1-1: device descriptor read/64, error -32 [ 46.436761][ T95] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 46.626776][ T95] usb 1-1: device descriptor read/64, error -32 [ 46.896920][ T95] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 47.006944][ T95] usb 1-1: Using ep0 maxpacket: 16 [ 47.086810][ T95] usb 1-1: device descriptor read/all, error 1 [ 47.236779][ T95] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 47.346817][ T95] usb 1-1: device descriptor read/8, error -71 [ 47.467076][ T95] gspca_se401: read req failed req 0x06 error -19 [ 47.469033][ T95] usb 1-1: USB disconnect, device number 2 [ 47.469512][ T3822] ================================================================== [ 47.472126][ T3822] BUG: KASAN: slab-out-of-bounds in read_descriptors+0x23c/0x290 [ 47.473910][ T3822] Read of size 2 at addr ffff0000d717baaa by task udevd/3822 [ 47.475431][ T3822] [ 47.475914][ T3822] CPU: 1 PID: 3822 Comm: udevd Not tainted 6.1.42-syzkaller #0 [ 47.477587][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 47.479794][ T3822] Call trace: [ 47.480510][ T3822] dump_backtrace+0x1c8/0x1f4 [ 47.481493][ T3822] show_stack+0x2c/0x3c [ 47.482332][ T3822] dump_stack_lvl+0xc0/0x104 [ 47.483296][ T3822] print_report+0x174/0x4c0 [ 47.484269][ T3822] kasan_report+0xcc/0x124 [ 47.485252][ T3822] __asan_report_load2_noabort+0x2c/0x38 [ 47.486522][ T3822] read_descriptors+0x23c/0x290 [ 47.487592][ T3822] sysfs_kf_bin_read+0x19c/0x1d4 [ 47.488688][ T3822] kernfs_fop_read_iter+0x318/0x4e8 [ 47.489827][ T3822] vfs_read+0x5bc/0x8ac [ 47.490691][ T3822] ksys_read+0x15c/0x26c [ 47.491638][ T3822] __arm64_sys_read+0x7c/0x90 [ 47.492697][ T3822] invoke_syscall+0x98/0x2c0 [ 47.493793][ T3822] el0_svc_common+0x134/0x24c [ 47.494824][ T3822] do_el0_svc+0x64/0x218 [ 47.495802][ T3822] el0_svc+0x34/0x100 [ 47.496695][ T3822] el0t_64_sync_handler+0x84/0xf0 [ 47.497879][ T3822] el0t_64_sync+0x18c/0x190 [ 47.498861][ T3822] [ 47.499318][ T3822] Allocated by task 95: [ 47.500203][ T3822] kasan_set_track+0x4c/0x80 [ 47.501158][ T3822] kasan_save_alloc_info+0x24/0x30 [ 47.502302][ T3822] __kasan_kmalloc+0xac/0xc4 [ 47.503333][ T3822] __kmalloc+0xc4/0x118 [ 47.504371][ T3822] usb_get_configuration+0xec/0x3d10 [ 47.505531][ T3822] usb_new_device+0x134/0x13c4 [ 47.506530][ T3822] hub_event+0x23f4/0x4494 [ 47.507554][ T3822] process_one_work+0x698/0xc7c [ 47.508606][ T3822] worker_thread+0x860/0xea4 [ 47.509585][ T3822] kthread+0x200/0x260 [ 47.510486][ T3822] ret_from_fork+0x10/0x20 [ 47.511386][ T3822] [ 47.511885][ T3822] The buggy address belongs to the object at ffff0000d717b800 [ 47.511885][ T3822] which belongs to the cache kmalloc-1k of size 1024 [ 47.514906][ T3822] The buggy address is located 682 bytes inside of [ 47.514906][ T3822] 1024-byte region [ffff0000d717b800, ffff0000d717bc00) [ 47.517897][ T3822] [ 47.518386][ T3822] The buggy address belongs to the physical page: [ 47.519917][ T3822] page:00000000be4ef3ca refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117178 [ 47.522091][ T3822] head:00000000be4ef3ca order:3 compound_mapcount:0 compound_pincount:0 [ 47.523860][ T3822] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 47.525613][ T3822] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002780 [ 47.527497][ T3822] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 47.529456][ T3822] page dumped because: kasan: bad access detected [ 47.530859][ T3822] [ 47.531418][ T3822] Memory state around the buggy address: [ 47.532549][ T3822] ffff0000d717b980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.534327][ T3822] ffff0000d717ba00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.536086][ T3822] >ffff0000d717ba80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 47.537906][ T3822] ^ [ 47.539081][ T3822] ffff0000d717bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.540995][ T3822] ffff0000d717bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.542754][ T3822] ================================================================== [ 47.544747][ T3822] Disabling lock debugging due to kernel taint [ 47.547639][ T95] Unable to handle kernel paging request at virtual address 0013da0a15b38008 [ 47.549691][ T95] Mem abort info: [ 47.550467][ T95] ESR = 0x0000000096000004 [ 47.551515][ T95] EC = 0x25: DABT (current EL), IL = 32 bits [ 47.552817][ T95] SET = 0, FnV = 0 [ 47.553558][ T95] EA = 0, S1PTW = 0 [ 47.554367][ T95] FSC = 0x04: level 0 translation fault [ 47.555547][ T95] Data abort info: [ 47.556384][ T95] ISV = 0, ISS = 0x00000004 [ 47.557469][ T95] CM = 0, WnR = 0 [ 47.558260][ T95] [0013da0a15b38008] address between user and kernel address ranges [ 47.559975][ T95] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 47.561529][ T95] Modules linked in: [ 47.562335][ T95] CPU: 0 PID: 95 Comm: kworker/0:2 Tainted: G B 6.1.42-syzkaller #0 [ 47.564494][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 47.566548][ T95] Workqueue: usb_hub_wq hub_event [ 47.567743][ T95] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 47.569432][ T95] pc : kfree+0x4c/0xb8 [ 47.570281][ T95] lr : kfree+0x38/0xb8 [ 47.571160][ T95] sp : ffff800014ff7550 [ 47.572040][ T95] x29: ffff800014ff7550 x28: ffff0000d70f8548 x27: ffff0000d72b8e00 [ 47.573795][ T95] x26: 0000000000000011 x25: dfff800000000000 x24: 1fffe0001ae1f0a7 [ 47.575501][ T95] x23: 0000000000000080 x22: ffff0000d70f8539 x21: 0000000000040000 [ 47.577143][ T95] x20: ffff80000be09af8 x19: 04f702840000005f x18: ffff0000d473f590 [ 47.578886][ T95] x17: ffff80000f157a08 x16: ffff80000f156708 x15: ffff80000a91be94 [ 47.580622][ T95] x14: ffff80000f153074 x13: ffff80000a9294c8 x12: 0000000000000001 [ 47.582320][ T95] x11: ff8080000808c060 x10: 0000000000000000 x9 : 0013de0a15b38000 [ 47.583998][ T95] x8 : 0013da0a15b38000 x7 : ffff80000bdde818 x6 : ffff80000bdcee40 [ 47.585762][ T95] x5 : ffff0000cdacff80 x4 : ffff800014ff72b8 x3 : ffff80000be09af0 [ 47.587478][ T95] x2 : 0000000000000000 x1 : 04f802840000005f x0 : 04f78285ace0005f [ 47.589275][ T95] Call trace: [ 47.589987][ T95] kfree+0x4c/0xb8 [ 47.590793][ T95] usb_destroy_configuration+0xd8/0x4f8 [ 47.592012][ T95] usb_release_dev+0x48/0xcc [ 47.592960][ T95] device_release+0x8c/0x154 [ 47.593913][ T95] kobject_put+0x234/0x3b4 [ 47.594809][ T95] put_device+0x28/0x40 [ 47.595821][ T95] usb_disconnect+0x618/0x7b0 [ 47.596881][ T95] hub_event+0x17b0/0x4494 [ 47.597827][ T95] process_one_work+0x698/0xc7c [ 47.598995][ T95] worker_thread+0xae8/0xea4 [ 47.600071][ T95] kthread+0x200/0x260 [ 47.600925][ T95] ret_from_fork+0x10/0x20 [ 47.601885][ T95] Code: b25657e8 927acd29 cb151929 8b080128 (f9400509) [ 47.603440][ T95] ---[ end trace 0000000000000000 ]--- [ 47.913148][ T95] Kernel panic - not syncing: Oops: Fatal exception [ 47.914726][ T95] SMP: stopping secondary CPUs [ 47.915850][ T95] Kernel Offset: disabled [ 47.916714][ T95] CPU features: 0x00000,02070084,26017203 [ 47.918050][ T95] Memory Limit: none [ 48.233764][ T95] Rebooting in 86400 seconds..