Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts.
2023/10/10 00:02:40 ignoring optional flag "sandboxArg"="0"
2023/10/10 00:02:40 parsed 1 programs
2023/10/10 00:02:42 executed programs: 0
[ 106.444089][ T5387] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 106.503427][ T5393] 0000000000000000, 8, hci_register_dev
[ 106.509143][ T5393] ffff888016b70be0, 8, hci0, hci_register_dev
[ 106.522581][ T4435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.530637][ T4435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.538744][ T4435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.546970][ T4435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.555448][ T4435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 106.563662][ T4435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.721777][ T5393] chnl_net:caif_netlink_parms(): no params data found
[ 106.794158][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.801616][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.808910][ T5393] bridge_slave_0: entered allmulticast mode
[ 106.815973][ T5393] bridge_slave_0: entered promiscuous mode
[ 106.824587][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.831951][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.839559][ T5393] bridge_slave_1: entered allmulticast mode
[ 106.846756][ T5393] bridge_slave_1: entered promiscuous mode
[ 106.878677][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.890734][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 106.925698][ T5393] team0: Port device team_slave_0 added
[ 106.934211][ T5393] team0: Port device team_slave_1 added
[ 106.962678][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 106.969824][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 106.996635][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.009792][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.016798][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 107.043060][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.089410][ T5393] hsr_slave_0: entered promiscuous mode
[ 107.096488][ T5393] hsr_slave_1: entered promiscuous mode
[ 107.963079][ T5393] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.980097][ T5393] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.991725][ T5393] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.005796][ T5393] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.119865][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.151644][ T5393] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.166778][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.174067][ T5050] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.201576][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.208844][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.461732][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.531253][ T5393] veth0_vlan: entered promiscuous mode
[ 108.551975][ T5393] veth1_vlan: entered promiscuous mode
[ 108.594751][ T5393] veth0_macvtap: entered promiscuous mode
[ 108.610604][ T5393] veth1_macvtap: entered promiscuous mode
[ 108.639099][ T5040] Bluetooth: hci0: command 0x0409 tx timeout
[ 108.646974][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.666172][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.685152][ T5393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.694084][ T5393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.705745][ T5393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.716196][ T5393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.821123][ T4776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.837840][ T4776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.880966][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.890817][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.953323][ T5457] 8, 8, create_monitor_event, ffff888016b70be0
[ 108.960232][ T5457] ==================================================================
[ 108.968336][ T5457] BUG: KASAN: slab-out-of-bounds in create_monitor_event+0x976/0x9c0
[ 108.976444][ T5457] Read of size 8 at addr ffff888016b70be7 by task syz-executor.0/5457
[ 108.984716][ T5457]
[ 108.987058][ T5457] CPU: 0 PID: 5457 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00158-gf291209eca5e-dirty #0
[ 108.997975][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 109.008064][ T5457] Call Trace:
[ 109.011719][ T5457]
[ 109.014679][ T5457] dump_stack_lvl+0x1e7/0x2d0
[ 109.019396][ T5457] ? nf_tcp_handle_invalid+0x650/0x650
[ 109.024890][ T5457] ? panic+0x770/0x770
[ 109.029003][ T5457] ? _printk+0xd5/0x120
[ 109.033207][ T5457] print_report+0x163/0x540
[ 109.037752][ T5457] ? __virt_addr_valid+0x22f/0x2e0
[ 109.042902][ T5457] ? __phys_addr+0xba/0x170
[ 109.047457][ T5457] ? create_monitor_event+0x976/0x9c0
[ 109.052867][ T5457] kasan_report+0x175/0x1b0
[ 109.057428][ T5457] ? create_monitor_event+0x976/0x9c0
[ 109.062857][ T5457] create_monitor_event+0x976/0x9c0
[ 109.068108][ T5457] send_monitor_replay+0x7a/0x5d0
[ 109.073177][ T5457] hci_sock_bind+0x85c/0x1140
[ 109.077893][ T5457] ? __fget_files+0x28/0x4a0
[ 109.082531][ T5457] ? __might_fault+0xa5/0x120
[ 109.087259][ T5457] ? hci_sock_release+0x4f0/0x4f0
[ 109.092330][ T5457] ? bpf_lsm_socket_bind+0x9/0x10
[ 109.097487][ T5457] ? security_socket_bind+0x81/0xa0
[ 109.102748][ T5457] __sys_bind+0x23a/0x2e0
[ 109.107202][ T5457] ? __ia32_sys_socketpair+0xb0/0xb0
[ 109.112539][ T5457] ? syscall_enter_from_user_mode+0x32/0x230
[ 109.118568][ T5457] ? lockdep_hardirqs_on+0x98/0x140
[ 109.123820][ T5457] __x64_sys_bind+0x7a/0x90
[ 109.128363][ T5457] do_syscall_64+0x41/0xc0
[ 109.132819][ T5457] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 109.138753][ T5457] RIP: 0033:0x7f3616e7cae9
[ 109.143201][ T5457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 109.162838][ T5457] RSP: 002b:00007f3617b2a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 109.171290][ T5457] RAX: ffffffffffffffda RBX: 00007f3616f9bf80 RCX: 00007f3616e7cae9
[ 109.179383][ T5457] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
[ 109.187385][ T5457] RBP: 00007f3616ec847a R08: 0000000000000000 R09: 0000000000000000
[ 109.195483][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.203488][ T5457] R13: 000000000000000b R14: 00007f3616f9bf80 R15: 00007ffd3cce9288
[ 109.211531][ T5457]
[ 109.214580][ T5457]
[ 109.216927][ T5457] Allocated by task 5393:
[ 109.221277][ T5457] kasan_set_track+0x4f/0x70
[ 109.225909][ T5457] __kasan_kmalloc+0x98/0xb0
[ 109.230723][ T5457] __kmalloc_node_track_caller+0xb6/0x230
[ 109.236486][ T5457] kvasprintf+0xdf/0x190
[ 109.240771][ T5457] kobject_set_name_vargs+0x61/0x120
[ 109.246108][ T5457] dev_set_name+0xd5/0x120
[ 109.250569][ T5457] hci_register_dev+0x154/0xaf0
[ 109.255473][ T5457] vhci_create_device+0x3ba/0x720
[ 109.260545][ T5457] vhci_write+0x3c7/0x480
[ 109.264913][ T5457] vfs_write+0x782/0xaf0
[ 109.269198][ T5457] ksys_write+0x1a0/0x2c0
[ 109.273667][ T5457] do_syscall_64+0x41/0xc0
[ 109.278114][ T5457] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 109.284049][ T5457]
[ 109.286391][ T5457] The buggy address belongs to the object at ffff888016b70be0
[ 109.286391][ T5457] which belongs to the cache kmalloc-8 of size 8
[ 109.300128][ T5457] The buggy address is located 2 bytes to the right of
[ 109.300128][ T5457] allocated 5-byte region [ffff888016b70be0, ffff888016b70be5)
[ 109.314571][ T5457]
[ 109.316921][ T5457] The buggy address belongs to the physical page:
[ 109.323443][ T5457] page:ffffea00005adc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16b70
[ 109.333717][ T5457] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 109.341314][ T5457] page_type: 0xffffffff()
[ 109.345676][ T5457] raw: 00fff00000000800 ffff888012841280 ffffea000050a580 dead000000000002
[ 109.354294][ T5457] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000
[ 109.362905][ T5457] page dumped because: kasan: bad access detected
[ 109.369346][ T5457] page_owner tracks the page as allocated
[ 109.375088][ T5457] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 8209251422, free_ts 8189848851
[ 109.392489][ T5457] post_alloc_hook+0x1e6/0x210
[ 109.397394][ T5457] get_page_from_freelist+0x31db/0x3360
[ 109.402992][ T5457] __alloc_pages+0x255/0x670
[ 109.407638][ T5457] alloc_page_interleave+0x22/0x1d0
[ 109.412885][ T5457] alloc_slab_page+0x6a/0x160
[ 109.417780][ T5457] new_slab+0x84/0x2f0
[ 109.421895][ T5457] ___slab_alloc+0xc85/0x1310
[ 109.426640][ T5457] __kmem_cache_alloc_node+0x1af/0x270
[ 109.432146][ T5457] __kmalloc_node_track_caller+0xa5/0x230
[ 109.437915][ T5457] kstrdup+0x3a/0x70
[ 109.441845][ T5457] __kernfs_new_node+0x9d/0x870
[ 109.446735][ T5457] kernfs_create_dir_ns+0x94/0x230
[ 109.452057][ T5457] sysfs_create_dir_ns+0x189/0x390
[ 109.457217][ T5457] kobject_add_internal+0x61d/0xc30
[ 109.462470][ T5457] kobject_add+0x152/0x210
[ 109.467128][ T5457] device_add+0x4b5/0xd30
[ 109.471676][ T5457] page last free stack trace:
[ 109.476467][ T5457] free_unref_page_prepare+0x8c3/0x9f0
[ 109.482072][ T5457] free_unref_page+0x37/0x3f0
[ 109.486850][ T5457] vfree+0x186/0x2e0
[ 109.490782][ T5457] delayed_vfree_work+0x56/0x80
[ 109.495683][ T5457] process_scheduled_works+0x90f/0x1400
[ 109.501268][ T5457] worker_thread+0xa5f/0xff0
[ 109.505903][ T5457] kthread+0x2d3/0x370
[ 109.510096][ T5457] ret_from_fork+0x48/0x80
[ 109.514647][ T5457] ret_from_fork_asm+0x11/0x20
[ 109.519462][ T5457]
[ 109.521811][ T5457] Memory state around the buggy address:
[ 109.527473][ T5457] ffff888016b70a80: fc fc fc fc 04 fc fc fc fc 00 fc fc fc fc 05 fc
[ 109.535656][ T5457] ffff888016b70b00: fc fc fc 06 fc fc fc fc 06 fc fc fc fc 06 fc fc
[ 109.543762][ T5457] >ffff888016b70b80: fc fc 04 fc fc fc fc 05 fc fc fc fc 05 fc fc fc
[ 109.552004][ T5457] ^
[ 109.559319][ T5457] ffff888016b70c00: fc 06 fc fc fc fc 06 fc fc fc fc 06 fc fc fc fc
[ 109.567596][ T5457] ffff888016b70c80: 04 fc fc fc fc fa fc fc fc fc fa fc fc fc fc 06
[ 109.576037][ T5457] ==================================================================
[ 109.584453][ T5457] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 109.591685][ T5457] CPU: 0 PID: 5457 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-00158-gf291209eca5e-dirty #0
[ 109.602572][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 109.612759][ T5457] Call Trace:
[ 109.616171][ T5457]
[ 109.619232][ T5457] dump_stack_lvl+0x1e7/0x2d0
[ 109.624221][ T5457] ? nf_tcp_handle_invalid+0x650/0x650
[ 109.630507][ T5457] ? panic+0x770/0x770
[ 109.634709][ T5457] ? lock_release+0xbf/0x9d0
[ 109.639357][ T5457] ? vscnprintf+0x5d/0x80
[ 109.643738][ T5457] panic+0x30f/0x770
[ 109.647775][ T5457] ? check_panic_on_warn+0x21/0xa0
[ 109.652940][ T5457] ? __memcpy_flushcache+0x2b0/0x2b0
[ 109.658275][ T5457] ? _raw_spin_unlock_irqrestore+0xd8/0x140
[ 109.664222][ T5457] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 109.670169][ T5457] ? _raw_spin_unlock+0x40/0x40
[ 109.675074][ T5457] ? print_report+0x4fb/0x540
[ 109.679945][ T5457] check_panic_on_warn+0x82/0xa0
[ 109.685026][ T5457] ? create_monitor_event+0x976/0x9c0
[ 109.690454][ T5457] end_report+0x6e/0x130
[ 109.694810][ T5457] kasan_report+0x186/0x1b0
[ 109.699365][ T5457] ? create_monitor_event+0x976/0x9c0
[ 109.704784][ T5457] create_monitor_event+0x976/0x9c0
[ 109.710291][ T5457] send_monitor_replay+0x7a/0x5d0
[ 109.715459][ T5457] hci_sock_bind+0x85c/0x1140
[ 109.720272][ T5457] ? __fget_files+0x28/0x4a0
[ 109.724944][ T5457] ? __might_fault+0xa5/0x120
[ 109.729806][ T5457] ? hci_sock_release+0x4f0/0x4f0
[ 109.734884][ T5457] ? bpf_lsm_socket_bind+0x9/0x10
[ 109.739981][ T5457] ? security_socket_bind+0x81/0xa0
[ 109.745238][ T5457] __sys_bind+0x23a/0x2e0
[ 109.749719][ T5457] ? __ia32_sys_socketpair+0xb0/0xb0
[ 109.755239][ T5457] ? syscall_enter_from_user_mode+0x32/0x230
[ 109.761532][ T5457] ? lockdep_hardirqs_on+0x98/0x140
[ 109.766807][ T5457] __x64_sys_bind+0x7a/0x90
[ 109.771375][ T5457] do_syscall_64+0x41/0xc0
[ 109.776005][ T5457] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 109.781956][ T5457] RIP: 0033:0x7f3616e7cae9
[ 109.786414][ T5457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 109.806252][ T5457] RSP: 002b:00007f3617b2a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 109.814798][ T5457] RAX: ffffffffffffffda RBX: 00007f3616f9bf80 RCX: 00007f3616e7cae9
[ 109.822899][ T5457] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004
[ 109.830908][ T5457] RBP: 00007f3616ec847a R08: 0000000000000000 R09: 0000000000000000
[ 109.838969][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.847082][ T5457] R13: 000000000000000b R14: 00007f3616f9bf80 R15: 00007ffd3cce9288
[ 109.855109][ T5457]
[ 109.858413][ T5457] Kernel Offset: disabled
[ 109.862787][ T5457] Rebooting in 86400 seconds..