Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. 2024/08/19 08:37:13 ignoring optional flag "sandboxArg"="0" 2024/08/19 08:37:14 parsed 1 programs 2024/08/19 08:37:16 executed programs: 0 [ 101.157747][ T5515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.225478][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.233366][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.241165][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.249456][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.257803][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.265191][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.437102][ T5534] chnl_net:caif_netlink_parms(): no params data found [ 101.518306][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.525598][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.532926][ T5534] bridge_slave_0: entered allmulticast mode [ 101.540143][ T5534] bridge_slave_0: entered promiscuous mode [ 101.548964][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.556204][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.564568][ T5534] bridge_slave_1: entered allmulticast mode [ 101.572136][ T5534] bridge_slave_1: entered promiscuous mode [ 101.607978][ T5534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.620323][ T5534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.658937][ T5534] team0: Port device team_slave_0 added [ 101.667659][ T5534] team0: Port device team_slave_1 added [ 101.699511][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.706582][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.733123][ T5534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.748830][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.755891][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.782137][ T5534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.830204][ T5534] hsr_slave_0: entered promiscuous mode [ 101.837169][ T5534] hsr_slave_1: entered promiscuous mode [ 102.625629][ T5534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.640280][ T5534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.655363][ T5534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.670659][ T5534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.798043][ T5534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.830082][ T5534] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.848794][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.856045][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.888543][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.895796][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.159487][ T5534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.230653][ T5534] veth0_vlan: entered promiscuous mode [ 103.248624][ T5534] veth1_vlan: entered promiscuous mode [ 103.300689][ T5534] veth0_macvtap: entered promiscuous mode [ 103.315446][ T5534] veth1_macvtap: entered promiscuous mode [ 103.331878][ T4615] Bluetooth: hci0: command tx timeout [ 103.354368][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.375699][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.390335][ T5534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.403514][ T5534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.412749][ T5534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.421565][ T5534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.508426][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.522083][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.557640][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.574850][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.401567][ T5235] Bluetooth: hci0: command tx timeout 2024/08/19 08:37:21 executed programs: 3 [ 107.491090][ T5235] Bluetooth: hci0: command 0x040f tx timeout [ 109.561690][ T5235] Bluetooth: hci0: command 0x040f tx timeout 2024/08/19 08:37:26 executed programs: 9 [ 111.642169][ T5235] Bluetooth: hci0: command 0x040f tx timeout [ 113.721324][ T5235] Bluetooth: hci0: command 0x040f tx timeout 2024/08/19 08:37:31 executed programs: 15 2024/08/19 08:37:37 executed programs: 21 2024/08/19 08:37:42 executed programs: 27 2024/08/19 08:37:47 executed programs: 33 [ 132.366844][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.373539][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 2024/08/19 08:37:52 executed programs: 39 2024/08/19 08:37:57 executed programs: 45 [ 143.882406][ T9] ================================================================== [ 143.890512][ T9] BUG: KASAN: slab-out-of-bounds in sco_sock_timeout+0x8b/0x270 [ 143.898174][ T9] Write of size 4 at addr ffff88802c533080 by task kworker/0:1/9 [ 143.905891][ T9] [ 143.908207][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc4-syzkaller-g47ac09b91bef #0 [ 143.918446][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 143.928501][ T9] Workqueue: events sco_sock_timeout [ 143.933802][ T9] Call Trace: [ 143.937077][ T9] [ 143.940002][ T9] dump_stack_lvl+0x241/0x360 [ 143.944690][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.949906][ T9] ? __pfx__printk+0x10/0x10 [ 143.954521][ T9] ? _printk+0xd5/0x120 [ 143.958695][ T9] ? __virt_addr_valid+0x183/0x530 [ 143.963904][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.969549][ T9] print_report+0x169/0x550 [ 143.974406][ T9] ? __virt_addr_valid+0x183/0x530 [ 143.979548][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.985188][ T9] ? __virt_addr_valid+0x45f/0x530 [ 143.990477][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 143.996295][ T9] ? __phys_addr+0xba/0x170 [ 144.000890][ T9] ? sco_sock_timeout+0x8b/0x270 [ 144.005837][ T9] kasan_report+0x143/0x180 [ 144.010353][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 144.015387][ T9] ? sco_sock_timeout+0x8b/0x270 [ 144.020336][ T9] kasan_check_range+0x282/0x290 [ 144.025290][ T9] sco_sock_timeout+0x8b/0x270 [ 144.030059][ T9] ? process_scheduled_works+0x945/0x1830 [ 144.035783][ T9] process_scheduled_works+0xa2e/0x1830 [ 144.041353][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.047344][ T9] ? assign_work+0x364/0x3d0 [ 144.051943][ T9] worker_thread+0x86d/0xd40 [ 144.056553][ T9] ? __kthread_parkme+0x169/0x1d0 [ 144.061589][ T9] ? __pfx_worker_thread+0x10/0x10 [ 144.066706][ T9] kthread+0x2f2/0x390 [ 144.070787][ T9] ? __pfx_worker_thread+0x10/0x10 [ 144.075906][ T9] ? __pfx_kthread+0x10/0x10 [ 144.080519][ T9] ret_from_fork+0x4d/0x80 [ 144.084955][ T9] ? __pfx_kthread+0x10/0x10 [ 144.089562][ T9] ret_from_fork_asm+0x1a/0x30 [ 144.094350][ T9] [ 144.097363][ T9] [ 144.099681][ T9] Allocated by task 5545: [ 144.103998][ T9] kasan_save_track+0x3f/0x80 [ 144.108684][ T9] __kasan_kmalloc+0x98/0xb0 [ 144.113282][ T9] __kmalloc_cache_noprof+0x19c/0x2c0 [ 144.118656][ T9] uevent_show+0x160/0x320 [ 144.123096][ T9] dev_attr_show+0x57/0xc0 [ 144.127521][ T9] sysfs_kf_seq_show+0x333/0x4c0 [ 144.132459][ T9] seq_read_iter+0x447/0xd60 [ 144.137052][ T9] vfs_read+0x9bf/0xbc0 [ 144.141211][ T9] ksys_read+0x1a0/0x2c0 [ 144.145457][ T9] do_syscall_64+0xf3/0x230 [ 144.149959][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.155856][ T9] [ 144.158169][ T9] Freed by task 5545: [ 144.162137][ T9] kasan_save_track+0x3f/0x80 [ 144.166821][ T9] kasan_save_free_info+0x40/0x50 [ 144.171847][ T9] poison_slab_object+0xe0/0x150 [ 144.176793][ T9] __kasan_slab_free+0x37/0x60 [ 144.181563][ T9] kfree+0x149/0x360 [ 144.185455][ T9] uevent_show+0x1da/0x320 [ 144.189876][ T9] dev_attr_show+0x57/0xc0 [ 144.194302][ T9] sysfs_kf_seq_show+0x333/0x4c0 [ 144.199238][ T9] seq_read_iter+0x447/0xd60 [ 144.203827][ T9] vfs_read+0x9bf/0xbc0 [ 144.207984][ T9] ksys_read+0x1a0/0x2c0 [ 144.212317][ T9] do_syscall_64+0xf3/0x230 [ 144.216816][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.222712][ T9] [ 144.225023][ T9] The buggy address belongs to the object at ffff88802c532000 [ 144.225023][ T9] which belongs to the cache kmalloc-4k of size 4096 [ 144.239077][ T9] The buggy address is located 128 bytes to the right of [ 144.239077][ T9] allocated 4096-byte region [ffff88802c532000, ffff88802c533000) [ 144.253836][ T9] [ 144.256152][ T9] The buggy address belongs to the physical page: [ 144.262555][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c530 [ 144.271314][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 144.279803][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 144.287347][ T9] page_type: 0xfdffffff(slab) [ 144.292022][ T9] raw: 00fff00000000040 ffff888015842140 dead000000000122 0000000000000000 [ 144.300611][ T9] raw: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 [ 144.309206][ T9] head: 00fff00000000040 ffff888015842140 dead000000000122 0000000000000000 [ 144.317880][ T9] head: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 [ 144.326554][ T9] head: 00fff00000000003 ffffea0000b14c01 ffffffffffffffff 0000000000000000 [ 144.335239][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 144.343898][ T9] page dumped because: kasan: bad access detected [ 144.350298][ T9] page_owner tracks the page as allocated [ 144.356003][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5545, tgid 5545 (udevd), ts 135523330670, free_ts 135514156899 [ 144.377552][ T9] post_alloc_hook+0x1f3/0x230 [ 144.382331][ T9] get_page_from_freelist+0x2e4c/0x2f10 [ 144.387889][ T9] __alloc_pages_noprof+0x256/0x6c0 [ 144.393102][ T9] alloc_slab_page+0x5f/0x120 [ 144.397793][ T9] allocate_slab+0x5a/0x2f0 [ 144.402309][ T9] ___slab_alloc+0xcd1/0x14b0 [ 144.407074][ T9] __slab_alloc+0x58/0xa0 [ 144.411410][ T9] __kmalloc_noprof+0x25a/0x400 [ 144.416256][ T9] tomoyo_realpath_from_path+0xcf/0x5e0 [ 144.421808][ T9] tomoyo_path_perm+0x2b7/0x740 [ 144.426659][ T9] security_inode_getattr+0xda/0x130 [ 144.431942][ T9] vfs_getattr+0x45/0x430 [ 144.436268][ T9] vfs_fstatat+0xe4/0x190 [ 144.440593][ T9] __x64_sys_newfstatat+0x11d/0x1a0 [ 144.445786][ T9] do_syscall_64+0xf3/0x230 [ 144.450285][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.456177][ T9] page last free pid 4677 tgid 4677 stack trace: [ 144.462499][ T9] free_unref_page+0xd22/0xea0 [ 144.467273][ T9] __slab_free+0x31b/0x3d0 [ 144.471692][ T9] qlist_free_all+0x9e/0x140 [ 144.476286][ T9] kasan_quarantine_reduce+0x14f/0x170 [ 144.481749][ T9] __kasan_slab_alloc+0x23/0x80 [ 144.486603][ T9] kmem_cache_alloc_noprof+0x135/0x2a0 [ 144.492060][ T9] getname_flags+0xb7/0x540 [ 144.496560][ T9] do_sys_openat2+0xd2/0x1d0 [ 144.501152][ T9] __x64_sys_openat+0x247/0x2a0 [ 144.506002][ T9] do_syscall_64+0xf3/0x230 [ 144.510616][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.516518][ T9] [ 144.518840][ T9] Memory state around the buggy address: [ 144.524549][ T9] ffff88802c532f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 144.532607][ T9] ffff88802c533000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.540659][ T9] >ffff88802c533080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.548795][ T9] ^ [ 144.552851][ T9] ffff88802c533100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.560905][ T9] ffff88802c533180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.568960][ T9] ================================================================== [ 144.577825][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.585039][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc4-syzkaller-g47ac09b91bef #0 [ 144.595040][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 144.605106][ T9] Workqueue: events sco_sock_timeout [ 144.610414][ T9] Call Trace: [ 144.613692][ T9] [ 144.616618][ T9] dump_stack_lvl+0x241/0x360 [ 144.621394][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.626603][ T9] ? __pfx__printk+0x10/0x10 [ 144.631215][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.637209][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.642886][ T9] ? vscnprintf+0x5d/0x90 [ 144.647245][ T9] panic+0x349/0x860 [ 144.651168][ T9] ? check_panic_on_warn+0x21/0xb0 [ 144.656288][ T9] ? __pfx_panic+0x10/0x10 [ 144.660721][ T9] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 144.666630][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 144.672286][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 144.678194][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.684541][ T9] check_panic_on_warn+0x86/0xb0 [ 144.689487][ T9] ? sco_sock_timeout+0x8b/0x270 [ 144.694525][ T9] end_report+0x77/0x160 [ 144.698781][ T9] kasan_report+0x154/0x180 [ 144.703301][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 144.708428][ T9] ? sco_sock_timeout+0x8b/0x270 [ 144.713384][ T9] kasan_check_range+0x282/0x290 [ 144.718343][ T9] sco_sock_timeout+0x8b/0x270 [ 144.723118][ T9] ? process_scheduled_works+0x945/0x1830 [ 144.728849][ T9] process_scheduled_works+0xa2e/0x1830 [ 144.734422][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.740416][ T9] ? assign_work+0x364/0x3d0 [ 144.745017][ T9] worker_thread+0x86d/0xd40 [ 144.749627][ T9] ? __kthread_parkme+0x169/0x1d0 [ 144.754667][ T9] ? __pfx_worker_thread+0x10/0x10 [ 144.759783][ T9] kthread+0x2f2/0x390 [ 144.763867][ T9] ? __pfx_worker_thread+0x10/0x10 [ 144.768987][ T9] ? __pfx_kthread+0x10/0x10 [ 144.773591][ T9] ret_from_fork+0x4d/0x80 [ 144.778018][ T9] ? __pfx_kthread+0x10/0x10 [ 144.782620][ T9] ret_from_fork_asm+0x1a/0x30 [ 144.787406][ T9] [ 144.790690][ T9] Kernel Offset: disabled [ 144.795005][ T9] Rebooting in 86400 seconds..