Warning: Permanently added '10.128.10.56' (ECDSA) to the list of known hosts. 2020/02/08 04:49:51 parsed 1 programs 2020/02/08 04:49:51 executed programs: 0 [ 96.041226] IPVS: ftp: loaded support on port[0] = 21 [ 96.089103] IPVS: ftp: loaded support on port[0] = 21 [ 96.092144] IPVS: ftp: loaded support on port[0] = 21 [ 96.109023] IPVS: ftp: loaded support on port[0] = 21 [ 96.110126] IPVS: ftp: loaded support on port[0] = 21 [ 96.126727] IPVS: ftp: loaded support on port[0] = 21 [ 96.243248] chnl_net:caif_netlink_parms(): no params data found [ 96.298777] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.305624] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.312797] device bridge_slave_0 entered promiscuous mode [ 96.321813] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.328797] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.336211] device bridge_slave_1 entered promiscuous mode [ 96.374804] chnl_net:caif_netlink_parms(): no params data found [ 96.401999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.413646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.489446] team0: Port device team_slave_0 added [ 96.533458] team0: Port device team_slave_1 added [ 96.550911] chnl_net:caif_netlink_parms(): no params data found [ 96.559553] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.566393] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.573417] device bridge_slave_0 entered promiscuous mode [ 96.587775] chnl_net:caif_netlink_parms(): no params data found [ 96.658201] device hsr_slave_0 entered promiscuous mode [ 96.725851] device hsr_slave_1 entered promiscuous mode [ 96.794197] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.800882] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.808103] device bridge_slave_1 entered promiscuous mode [ 96.832334] chnl_net:caif_netlink_parms(): no params data found [ 96.902232] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.908995] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.916374] device bridge_slave_0 entered promiscuous mode [ 96.943861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.959095] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.965665] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.973202] device bridge_slave_1 entered promiscuous mode [ 96.985643] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.992106] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.999774] device bridge_slave_0 entered promiscuous mode [ 97.010795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.019492] chnl_net:caif_netlink_parms(): no params data found [ 97.029222] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.036495] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.043694] device bridge_slave_0 entered promiscuous mode [ 97.056333] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.062744] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.070383] device bridge_slave_1 entered promiscuous mode [ 97.078732] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.085203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.092717] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.099270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.118971] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.125353] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.133592] device bridge_slave_1 entered promiscuous mode [ 97.157047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.184045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.199552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.209749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.220520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.231391] team0: Port device team_slave_0 added [ 97.241686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.266457] team0: Port device team_slave_1 added [ 97.299879] team0: Port device team_slave_0 added [ 97.311065] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.320039] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.333532] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.340434] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.348217] device bridge_slave_0 entered promiscuous mode [ 97.398486] device hsr_slave_0 entered promiscuous mode [ 97.445963] device hsr_slave_1 entered promiscuous mode [ 97.485688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.493974] Cannot create hsr debugfs directory [ 97.509009] team0: Port device team_slave_0 added [ 97.517356] team0: Port device team_slave_1 added [ 97.524601] team0: Port device team_slave_0 added [ 97.530188] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.536710] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.543829] device bridge_slave_1 entered promiscuous mode [ 97.551776] team0: Port device team_slave_1 added [ 97.562804] team0: Port device team_slave_1 added [ 97.592900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.615108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.668346] device hsr_slave_0 entered promiscuous mode [ 97.726175] device hsr_slave_1 entered promiscuous mode [ 97.755607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.762500] Cannot create hsr debugfs directory [ 97.828623] device hsr_slave_0 entered promiscuous mode [ 97.886015] device hsr_slave_1 entered promiscuous mode [ 97.945712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.952627] Cannot create hsr debugfs directory [ 97.986105] team0: Port device team_slave_0 added [ 98.028492] device hsr_slave_0 entered promiscuous mode [ 98.075936] device hsr_slave_1 entered promiscuous mode [ 98.115621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.122640] Cannot create hsr debugfs directory [ 98.132371] team0: Port device team_slave_1 added [ 98.165299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.258570] device hsr_slave_0 entered promiscuous mode [ 98.306140] device hsr_slave_1 entered promiscuous mode [ 98.355698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.362597] Cannot create hsr debugfs directory [ 98.396827] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.417234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.425151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.464709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.474334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.483214] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.489855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.532021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.540737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.549529] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.555959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.579383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.595972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.603910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.612348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.622414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.630655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.639245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.648944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.656922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.669108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.681966] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.691789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.703613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.711120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.721468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.735054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.751586] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.777848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.784918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.792839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.802654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.810573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.818902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.827533] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.833904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.841009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.849964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.857915] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.864475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.871668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.879471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.887611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.894598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.902042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.926063] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.936670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.951338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.959784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.967822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.976804] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.983189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.990686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.998104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.005155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.013413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.021168] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.027612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.034739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.043660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.052322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.060532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.068604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.076708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.085208] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.091646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.119164] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.131981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.142614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.156427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.163771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.171145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.178504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.186933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.195080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.203034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.211447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.219409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.227784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.236159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.243802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.251927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.260026] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.266448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.273478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.280705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.292686] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.305043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.316174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.323240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.335333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.344458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.353493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.361445] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.368277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.401356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.409448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.418466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.427237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.434911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.443485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.451757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.459866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.467900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.477742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.485572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.494480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.502381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.510783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.518886] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.525267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.532387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.540382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.548987] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.556019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.562806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.570826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.579137] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.585795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.593064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.601017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.608900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.616936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.624829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.633600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.641391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.648766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.661517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.672033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.717710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.724167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.733170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.752162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.760184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.768609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.776731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.784661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.802005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.811347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.833800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.842514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.889785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.914126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.922632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.930951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.939038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.947928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.955706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.964972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.972651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.980817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.996133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.007008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.030771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.039203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.057669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.082222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.134927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.219026] ================================================================== [ 100.226567] BUG: KASAN: slab-out-of-bounds in hci_event_packet+0x7fcf/0x9a96 [ 100.233767] Read of size 1 at addr ffff88808b1f7c00 by task kworker/u5:3/7927 [ 100.241041] [ 100.242675] CPU: 0 PID: 7927 Comm: kworker/u5:3 Not tainted 5.5.0-syzkaller #0 [ 100.255077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.264451] Workqueue: hci2 hci_rx_work [ 100.268563] Call Trace: [ 100.271164] dump_stack+0x12d/0x187 [ 100.274845] print_address_description.constprop.8.cold.10+0x9/0x31d [ 100.281355] ? hci_event_packet+0x7fcf/0x9a96 [ 100.285861] __kasan_report.cold.11+0x1b/0x32 [ 100.290382] ? hci_event_packet+0x7fcf/0x9a96 [ 100.294904] ? hci_event_packet+0x7fcf/0x9a96 [ 100.299564] kasan_report+0x12/0x20 [ 100.303202] __asan_report_load1_noabort+0x14/0x20 [ 100.308152] hci_event_packet+0x7fcf/0x9a96 [ 100.313557] ? hci_cmd_complete_evt+0xb690/0xb690 [ 100.318426] ? unwind_next_frame+0x3e/0x50 [ 100.322764] ? profile_setup.cold.14+0xa0/0xa0 [ 100.327356] ? arch_stack_walk+0x8a/0xf0 [ 100.331414] ? ret_from_fork+0x3a/0x50 [ 100.335441] ? stack_trace_save+0x82/0xb0 [ 100.339600] ? stack_trace_consume_entry+0x170/0x170 [ 100.345674] ? profile_setup.cold.14+0xa0/0xa0 [ 100.355572] ? __kasan_check_write+0x14/0x20 [ 100.359998] ? save_trace+0x45/0x9a0 [ 100.363707] ? __lock_acquire+0x2cd5/0x4ef0 [ 100.368039] ? __kasan_check_read+0x11/0x20 [ 100.372374] ? mark_lock+0xc5/0x11d0 [ 100.376104] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 100.381734] ? skb_dequeue+0x11d/0x1b0 [ 100.385603] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 100.390165] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 100.395285] ? trace_hardirqs_on+0x28/0x1b0 [ 100.399612] hci_rx_work+0x18e/0x940 [ 100.403393] ? hci_rx_work+0x18e/0x940 [ 100.407281] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 100.412650] ? trace_hardirqs_on+0x28/0x1b0 [ 100.416982] process_one_work+0x891/0x1690 [ 100.421239] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 100.425934] worker_thread+0x85/0xb60 [ 100.429741] ? __kthread_parkme+0x47/0x1a0 [ 100.433984] kthread+0x334/0x3f0 [ 100.437363] ? process_one_work+0x1690/0x1690 [ 100.441866] ? kthread_mod_delayed_work+0x190/0x190 [ 100.447167] ret_from_fork+0x3a/0x50 [ 100.450882] [ 100.452492] Allocated by task 7926: [ 100.456106] save_stack+0x21/0x90 [ 100.459542] __kasan_kmalloc.constprop.9+0xc7/0xd0 [ 100.467780] kasan_kmalloc+0x9/0x10 [ 100.471392] __kmalloc_node_track_caller+0x4d/0x70 [ 100.476440] __kmalloc_reserve.isra.47+0x2c/0xc0 [ 100.481212] __alloc_skb+0xd7/0x570 [ 100.484830] vhci_write+0xa8/0x3e0 [ 100.488375] new_sync_write+0x402/0x7e0 [ 100.492346] __vfs_write+0x97/0x110 [ 100.495962] vfs_write+0x18a/0x520 [ 100.499627] ksys_write+0x105/0x220 [ 100.503262] __x64_sys_write+0x6e/0xb0 [ 100.507138] do_syscall_64+0xd0/0x600 [ 100.510969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.516151] [ 100.517782] Freed by task 0: [ 100.520799] (stack is not available) [ 100.524504] [ 100.526127] The buggy address belongs to the object at ffff88808b1f7800 [ 100.526127] which belongs to the cache kmalloc-1k of size 1024 [ 100.538778] The buggy address is located 0 bytes to the right of [ 100.538778] 1024-byte region [ffff88808b1f7800, ffff88808b1f7c00) [ 100.551173] The buggy address belongs to the page: [ 100.556094] page:ffffea00022c7dc0 refcount:1 mapcount:0 mapping:ffff8880aa800c40 index:0x0 [ 100.564491] flags: 0x1fffc0000000200(slab) [ 100.568718] raw: 01fffc0000000200 ffffea0001f87ec8 ffffea00028ff508 ffff8880aa800c40 [ 100.576590] raw: 0000000000000000 ffff88808b1f7000 0000000100000002 0000000000000000 [ 100.584500] page dumped because: kasan: bad access detected [ 100.590239] [ 100.591854] Memory state around the buggy address: [ 100.596763] ffff88808b1f7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.604838] ffff88808b1f7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.612226] >ffff88808b1f7c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.619584] ^ [ 100.622942] ffff88808b1f7c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.630315] ffff88808b1f7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.637689] ================================================================== [ 100.645053] Disabling lock debugging due to kernel taint [ 100.658739] Kernel panic - not syncing: panic_on_warn set ... [ 100.664667] CPU: 0 PID: 7927 Comm: kworker/u5:3 Tainted: G B 5.5.0-syzkaller #0 [ 100.673412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.682778] Workqueue: hci2 hci_rx_work [ 100.686842] Call Trace: [ 100.689434] dump_stack+0x12d/0x187 [ 100.693063] ? hci_event_packet+0x7f40/0x9a96 [ 100.697792] panic+0x22a/0x4f5 [ 100.700997] ? add_taint.cold.7+0x11/0x11 [ 100.705148] ? ___preempt_schedule+0x16/0x18 [ 100.709575] ? hci_event_packet+0x7fcf/0x9a96 [ 100.714177] end_report+0x47/0x4f [ 100.717629] __kasan_report.cold.11+0xe/0x32 [ 100.722042] ? hci_event_packet+0x7fcf/0x9a96 [ 100.726582] ? hci_event_packet+0x7fcf/0x9a96 [ 100.731091] kasan_report+0x12/0x20 [ 100.734725] __asan_report_load1_noabort+0x14/0x20 [ 100.739785] hci_event_packet+0x7fcf/0x9a96 [ 100.744121] ? hci_cmd_complete_evt+0xb690/0xb690 [ 100.749009] ? unwind_next_frame+0x3e/0x50 [ 100.753272] ? profile_setup.cold.14+0xa0/0xa0 [ 100.757858] ? arch_stack_walk+0x8a/0xf0 [ 100.761937] ? ret_from_fork+0x3a/0x50 [ 100.765841] ? stack_trace_save+0x82/0xb0 [ 100.769999] ? stack_trace_consume_entry+0x170/0x170 [ 100.775109] ? profile_setup.cold.14+0xa0/0xa0 [ 100.779726] ? __kasan_check_write+0x14/0x20 [ 100.784151] ? save_trace+0x45/0x9a0 [ 100.787878] ? __lock_acquire+0x2cd5/0x4ef0 [ 100.792213] ? __kasan_check_read+0x11/0x20 [ 100.796573] ? mark_lock+0xc5/0x11d0 [ 100.800298] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 100.805410] ? skb_dequeue+0x11d/0x1b0 [ 100.809331] ? lockdep_hardirqs_on+0x42d/0x5d0 [ 100.814109] ? _raw_spin_unlock_irqrestore+0x7d/0xd0 [ 100.819245] ? trace_hardirqs_on+0x28/0x1b0 [ 100.823575] hci_rx_work+0x18e/0x940 [ 100.827425] ? hci_rx_work+0x18e/0x940 [ 100.831321] ? rcu_read_lock_any_held.part.10+0x50/0x50 [ 100.836730] ? trace_hardirqs_on+0x28/0x1b0 [ 100.841063] process_one_work+0x891/0x1690 [ 100.845352] ? pwq_dec_nr_in_flight+0x2c0/0x2c0 [ 100.850037] worker_thread+0x85/0xb60 [ 100.853825] ? __kthread_parkme+0x47/0x1a0 [ 100.858053] kthread+0x334/0x3f0 [ 100.861416] ? process_one_work+0x1690/0x1690 [ 100.865910] ? kthread_mod_delayed_work+0x190/0x190 [ 100.870931] ret_from_fork+0x3a/0x50 [ 100.875976] Kernel Offset: disabled [ 100.879732] Rebooting in 86400 seconds..