[ 82.269487][ T2524] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts.
2024/04/07 12:48:59 ignoring optional flag "sandboxArg"="0"
2024/04/07 12:48:59 parsed 1 programs
2024/04/07 12:49:01 executed programs: 0
[ 85.546535][ T5409] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 85.605324][ T4465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.614411][ T4465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.623081][ T4465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.632788][ T4465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.640547][ T4465] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.648451][ T4465] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.783047][ T5416] chnl_net:caif_netlink_parms(): no params data found
[ 85.838650][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.846812][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.854248][ T5416] bridge_slave_0: entered allmulticast mode
[ 85.861912][ T5416] bridge_slave_0: entered promiscuous mode
[ 85.870010][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.877745][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.885402][ T5416] bridge_slave_1: entered allmulticast mode
[ 85.892577][ T5416] bridge_slave_1: entered promiscuous mode
[ 85.918582][ T5416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.930523][ T5416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.960198][ T5416] team0: Port device team_slave_0 added
[ 85.968242][ T5416] team0: Port device team_slave_1 added
[ 85.992925][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.000428][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.027103][ T5416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.039530][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.046582][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.072623][ T5416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.109964][ T5416] hsr_slave_0: entered promiscuous mode
[ 86.116638][ T5416] hsr_slave_1: entered promiscuous mode
[ 86.740815][ T5416] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.751786][ T5416] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.764594][ T5416] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.777813][ T5416] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.808111][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.815443][ T5416] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.823394][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.830607][ T5416] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.850126][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.859504][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.940978][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.967728][ T5416] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.980803][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.988115][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.018351][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.025623][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.248338][ T5416] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.305707][ T5416] veth0_vlan: entered promiscuous mode
[ 87.321889][ T5416] veth1_vlan: entered promiscuous mode
[ 87.360827][ T5416] veth0_macvtap: entered promiscuous mode
[ 87.376296][ T5416] veth1_macvtap: entered promiscuous mode
[ 87.402680][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.424093][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.440310][ T5416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.454071][ T5416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.465447][ T5416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.474955][ T5416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.567359][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.580722][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.617037][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.627892][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.694924][ T4465] ==================================================================
[ 87.703078][ T4465] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0x383/0xb00
[ 87.712230][ T4465] Read of size 8 at addr ffff88801f0b4000 by task kworker/u9:1/4465
[ 87.720233][ T4465]
[ 87.722593][ T4465] CPU: 1 PID: 4465 Comm: kworker/u9:1 Not tainted 6.8.0-syzkaller-08073-g480e035fc4c7-dirty #0
[ 87.733379][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 87.743463][ T4465] Workqueue: hci0 hci_rx_work
[ 87.748181][ T4465] Call Trace:
[ 87.751492][ T4465]
[ 87.754511][ T4465] dump_stack_lvl+0x241/0x360
[ 87.759192][ T4465] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.764384][ T4465] ? __pfx__printk+0x10/0x10
[ 87.769007][ T4465] ? _printk+0xd5/0x120
[ 87.773407][ T4465] ? __virt_addr_valid+0x183/0x520
[ 87.778538][ T4465] ? __virt_addr_valid+0x183/0x520
[ 87.783676][ T4465] print_report+0x169/0x550
[ 87.788285][ T4465] ? __virt_addr_valid+0x183/0x520
[ 87.793432][ T4465] ? __virt_addr_valid+0x183/0x520
[ 87.798633][ T4465] ? __virt_addr_valid+0x44e/0x520
[ 87.803745][ T4465] ? __phys_addr+0xba/0x170
[ 87.808245][ T4465] ? hci_le_create_big_complete_evt+0x383/0xb00
[ 87.814493][ T4465] kasan_report+0x143/0x180
[ 87.819080][ T4465] ? hci_le_create_big_complete_evt+0x383/0xb00
[ 87.825313][ T4465] hci_le_create_big_complete_evt+0x383/0xb00
[ 87.831472][ T4465] ? __copy_skb_header+0x437/0x5b0
[ 87.836595][ T4465] ? hci_le_create_big_complete_evt+0xdb/0xb00
[ 87.842917][ T4465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10
[ 87.849590][ T4465] ? hci_le_meta_evt+0x366/0x580
[ 87.854568][ T4465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10
[ 87.861871][ T4465] hci_event_packet+0xa53/0x1540
[ 87.866816][ T4465] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 87.872096][ T4465] ? __pfx_hci_event_packet+0x10/0x10
[ 87.877551][ T4465] ? do_raw_spin_unlock+0x13c/0x8b0
[ 87.882839][ T4465] ? kcov_remote_start+0x9e/0x7e0
[ 87.887950][ T4465] ? hci_send_to_monitor+0xd8/0x7f0
[ 87.893229][ T4465] ? skb_dequeue+0x113/0x150
[ 87.897811][ T4465] hci_rx_work+0x3e8/0xca0
[ 87.902308][ T4465] ? process_scheduled_works+0x91b/0x1770
[ 87.908038][ T4465] process_scheduled_works+0xa00/0x1770
[ 87.913601][ T4465] ? __pfx_process_scheduled_works+0x10/0x10
[ 87.919666][ T4465] ? assign_work+0x364/0x3d0
[ 87.924336][ T4465] worker_thread+0x86d/0xd70
[ 87.929003][ T4465] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 87.934976][ T4465] ? __kthread_parkme+0x169/0x1d0
[ 87.939998][ T4465] ? __pfx_worker_thread+0x10/0x10
[ 87.945303][ T4465] kthread+0x2f0/0x390
[ 87.949409][ T4465] ? __pfx_worker_thread+0x10/0x10
[ 87.954817][ T4465] ? __pfx_kthread+0x10/0x10
[ 87.959485][ T4465] ret_from_fork+0x4b/0x80
[ 87.963923][ T4465] ? __pfx_kthread+0x10/0x10
[ 87.968604][ T4465] ret_from_fork_asm+0x1a/0x30
[ 87.973389][ T4465]
[ 87.976564][ T4465]
[ 87.978870][ T4465] Allocated by task 4465:
[ 87.983182][ T4465] kasan_save_track+0x3f/0x80
[ 87.987936][ T4465] __kasan_kmalloc+0x98/0xb0
[ 87.992516][ T4465] kmalloc_trace+0x1db/0x360
[ 87.997269][ T4465] hci_conn_add+0xc7/0x13a0
[ 88.001769][ T4465] hci_le_big_sync_established_evt+0x1cf/0xb90
[ 88.008006][ T4465] hci_event_packet+0xa53/0x1540
[ 88.012938][ T4465] hci_rx_work+0x3e8/0xca0
[ 88.017460][ T4465] process_scheduled_works+0xa00/0x1770
[ 88.023096][ T4465] worker_thread+0x86d/0xd70
[ 88.027706][ T4465] kthread+0x2f0/0x390
[ 88.031962][ T4465] ret_from_fork+0x4b/0x80
[ 88.036379][ T4465] ret_from_fork_asm+0x1a/0x30
[ 88.041423][ T4465]
[ 88.043830][ T4465] Freed by task 4465:
[ 88.048066][ T4465] kasan_save_track+0x3f/0x80
[ 88.052995][ T4465] kasan_save_free_info+0x40/0x50
[ 88.058017][ T4465] poison_slab_object+0xa6/0xe0
[ 88.063139][ T4465] __kasan_slab_free+0x37/0x60
[ 88.067924][ T4465] kfree+0x14a/0x380
[ 88.071934][ T4465] device_release+0x99/0x1c0
[ 88.076641][ T4465] kobject_put+0x22f/0x480
[ 88.081163][ T4465] hci_conn_del+0x900/0xc80
[ 88.085674][ T4465] hci_le_create_big_complete_evt+0x61b/0xb00
[ 88.092014][ T4465] hci_event_packet+0xa53/0x1540
[ 88.096947][ T4465] hci_rx_work+0x3e8/0xca0
[ 88.101362][ T4465] process_scheduled_works+0xa00/0x1770
[ 88.106912][ T4465] worker_thread+0x86d/0xd70
[ 88.111518][ T4465] kthread+0x2f0/0x390
[ 88.115971][ T4465] ret_from_fork+0x4b/0x80
[ 88.120384][ T4465] ret_from_fork_asm+0x1a/0x30
[ 88.125169][ T4465]
[ 88.127479][ T4465] The buggy address belongs to the object at ffff88801f0b4000
[ 88.127479][ T4465] which belongs to the cache kmalloc-8k of size 8192
[ 88.141785][ T4465] The buggy address is located 0 bytes inside of
[ 88.141785][ T4465] freed 8192-byte region [ffff88801f0b4000, ffff88801f0b6000)
[ 88.156095][ T4465]
[ 88.158492][ T4465] The buggy address belongs to the physical page:
[ 88.164886][ T4465] page:ffffea00007c2c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f0b0
[ 88.175106][ T4465] head:ffffea00007c2c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 88.184023][ T4465] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 88.192162][ T4465] page_type: 0xffffffff()
[ 88.196591][ T4465] raw: 00fff00000000840 ffff888014c42280 ffffea00007efc00 dead000000000002
[ 88.205266][ T4465] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[ 88.213838][ T4465] page dumped because: kasan: bad access detected
[ 88.220252][ T4465] page_owner tracks the page as allocated
[ 88.226048][ T4465] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4736, tgid 4736 (dhcpcd), ts 33772916994, free_ts 33772629416
[ 88.246703][ T4465] post_alloc_hook+0x1ea/0x210
[ 88.251471][ T4465] get_page_from_freelist+0x33ea/0x3580
[ 88.257006][ T4465] __alloc_pages+0x256/0x680
[ 88.261787][ T4465] alloc_slab_page+0x5f/0x160
[ 88.266801][ T4465] new_slab+0x84/0x2f0
[ 88.270859][ T4465] ___slab_alloc+0xc73/0x1260
[ 88.275522][ T4465] __kmalloc_node_track_caller+0x2d6/0x4e0
[ 88.281314][ T4465] kmalloc_reserve+0x111/0x2a0
[ 88.286155][ T4465] __alloc_skb+0x1f3/0x440
[ 88.290655][ T4465] netlink_dump+0x1e6/0xe50
[ 88.295270][ T4465] netlink_recvmsg+0x6bb/0x11d0
[ 88.300123][ T4465] sock_recvmsg+0x22f/0x280
[ 88.304742][ T4465] ____sys_recvmsg+0x1db/0x470
[ 88.309582][ T4465] __sys_recvmsg+0x2f0/0x3e0
[ 88.314164][ T4465] do_syscall_64+0xfb/0x240
[ 88.318664][ T4465] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 88.324547][ T4465] page last free pid 4736 tgid 4736 stack trace:
[ 88.333991][ T4465] free_unref_page_prepare+0x968/0xa90
[ 88.339456][ T4465] free_unref_page+0x37/0x3f0
[ 88.344139][ T4465] __put_partials+0xeb/0x130
[ 88.348719][ T4465] put_cpu_partial+0x17c/0x250
[ 88.353643][ T4465] __slab_free+0x2ea/0x3d0
[ 88.358406][ T4465] qlist_free_all+0x5e/0xc0
[ 88.362986][ T4465] kasan_quarantine_reduce+0x14f/0x170
[ 88.368430][ T4465] __kasan_slab_alloc+0x23/0x80
[ 88.373277][ T4465] kmem_cache_alloc_node+0x194/0x380
[ 88.378569][ T4465] kmalloc_reserve+0xa8/0x2a0
[ 88.383236][ T4465] __alloc_skb+0x1f3/0x440
[ 88.387731][ T4465] netlink_sendmsg+0x637/0xcb0
[ 88.392572][ T4465] __sock_sendmsg+0x221/0x270
[ 88.397242][ T4465] __sys_sendto+0x3a4/0x4f0
[ 88.401736][ T4465] __x64_sys_sendto+0xde/0x100
[ 88.406751][ T4465] do_syscall_64+0xfb/0x240
[ 88.411355][ T4465]
[ 88.413677][ T4465] Memory state around the buggy address:
[ 88.419313][ T4465] ffff88801f0b3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.427495][ T4465] ffff88801f0b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.435565][ T4465] >ffff88801f0b4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.444137][ T4465] ^
[ 88.448279][ T4465] ffff88801f0b4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.456332][ T4465] ffff88801f0b4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 88.464465][ T4465] ==================================================================
[ 88.476213][ T4465] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.483448][ T4465] CPU: 1 PID: 4465 Comm: kworker/u9:1 Not tainted 6.8.0-syzkaller-08073-g480e035fc4c7-dirty #0
[ 88.493885][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 88.504150][ T4465] Workqueue: hci0 hci_rx_work
[ 88.508876][ T4465] Call Trace:
[ 88.512271][ T4465]
[ 88.515242][ T4465] dump_stack_lvl+0x241/0x360
[ 88.519985][ T4465] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.525220][ T4465] ? __pfx__printk+0x10/0x10
[ 88.529923][ T4465] ? preempt_schedule+0xe1/0xf0
[ 88.534803][ T4465] ? vscnprintf+0x5d/0x90
[ 88.539253][ T4465] panic+0x349/0x860
[ 88.543528][ T4465] ? check_panic_on_warn+0x21/0xb0
[ 88.549812][ T4465] ? __pfx_panic+0x10/0x10
[ 88.554549][ T4465] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 88.560693][ T4465] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 88.567060][ T4465] ? print_report+0x502/0x550
[ 88.571895][ T4465] check_panic_on_warn+0x86/0xb0
[ 88.576950][ T4465] ? hci_le_create_big_complete_evt+0x383/0xb00
[ 88.583325][ T4465] end_report+0x6e/0x140
[ 88.587610][ T4465] kasan_report+0x154/0x180
[ 88.592323][ T4465] ? hci_le_create_big_complete_evt+0x383/0xb00
[ 88.598760][ T4465] hci_le_create_big_complete_evt+0x383/0xb00
[ 88.604837][ T4465] ? __copy_skb_header+0x437/0x5b0
[ 88.609949][ T4465] ? hci_le_create_big_complete_evt+0xdb/0xb00
[ 88.616184][ T4465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10
[ 88.622778][ T4465] ? hci_le_meta_evt+0x366/0x580
[ 88.627727][ T4465] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10
[ 88.634402][ T4465] hci_event_packet+0xa53/0x1540
[ 88.639342][ T4465] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 88.644707][ T4465] ? __pfx_hci_event_packet+0x10/0x10
[ 88.650068][ T4465] ? do_raw_spin_unlock+0x13c/0x8b0
[ 88.655261][ T4465] ? kcov_remote_start+0x9e/0x7e0
[ 88.660283][ T4465] ? hci_send_to_monitor+0xd8/0x7f0
[ 88.665564][ T4465] ? skb_dequeue+0x113/0x150
[ 88.670238][ T4465] hci_rx_work+0x3e8/0xca0
[ 88.674657][ T4465] ? process_scheduled_works+0x91b/0x1770
[ 88.680478][ T4465] process_scheduled_works+0xa00/0x1770
[ 88.686192][ T4465] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.692165][ T4465] ? assign_work+0x364/0x3d0
[ 88.696743][ T4465] worker_thread+0x86d/0xd70
[ 88.701415][ T4465] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 88.707740][ T4465] ? __kthread_parkme+0x169/0x1d0
[ 88.713106][ T4465] ? __pfx_worker_thread+0x10/0x10
[ 88.718248][ T4465] kthread+0x2f0/0x390
[ 88.722431][ T4465] ? __pfx_worker_thread+0x10/0x10
[ 88.727791][ T4465] ? __pfx_kthread+0x10/0x10
[ 88.732419][ T4465] ret_from_fork+0x4b/0x80
[ 88.736958][ T4465] ? __pfx_kthread+0x10/0x10
[ 88.741659][ T4465] ret_from_fork_asm+0x1a/0x30
[ 88.746439][ T4465]
[ 88.749684][ T4465] Kernel Offset: disabled
[ 88.754098][ T4465] Rebooting in 86400 seconds..