Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. 2024/12/01 05:19:37 ignoring optional flag "sandboxArg"="0" 2024/12/01 05:19:38 parsed 1 programs [ 101.063977][ T6261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.703239][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.712822][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.722043][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.733579][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.741336][ T5166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.749699][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.527633][ T6301] chnl_net:caif_netlink_parms(): no params data found [ 104.590551][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.597702][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.605562][ T6301] bridge_slave_0: entered allmulticast mode [ 104.612937][ T6301] bridge_slave_0: entered promiscuous mode [ 104.620687][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.627773][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.635073][ T6301] bridge_slave_1: entered allmulticast mode [ 104.641864][ T6301] bridge_slave_1: entered promiscuous mode [ 104.666224][ T6301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.677656][ T6301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.708597][ T6301] team0: Port device team_slave_0 added [ 104.717108][ T6301] team0: Port device team_slave_1 added [ 104.741751][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.748758][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.774919][ T6301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.786923][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.793952][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.819912][ T6301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.848479][ T6301] hsr_slave_0: entered promiscuous mode [ 104.855139][ T6301] hsr_slave_1: entered promiscuous mode [ 105.308829][ T6301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.321697][ T6301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.331926][ T6301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.342469][ T6301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.365487][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.372702][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.380173][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.387317][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.442515][ T6301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.460839][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.471190][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.488706][ T6301] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.502582][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.509773][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.526938][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.534193][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.728535][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.774177][ T6301] veth0_vlan: entered promiscuous mode [ 105.786601][ T6301] veth1_vlan: entered promiscuous mode [ 105.818755][ T6301] veth0_macvtap: entered promiscuous mode [ 105.828448][ T6301] veth1_macvtap: entered promiscuous mode [ 105.852891][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.867908][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.887544][ T6301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.897694][ T6301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.908900][ T6301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.918848][ T6301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.075555][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.147522][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.251948][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.329797][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.400522][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.411025][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.446961][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.456274][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/12/01 05:19:48 executed programs: 0 [ 107.909930][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.918722][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.927519][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.937236][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.945099][ T5166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.952663][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.125734][ T6462] chnl_net:caif_netlink_parms(): no params data found [ 108.210562][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.218031][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.228501][ T6462] bridge_slave_0: entered allmulticast mode [ 108.236094][ T6462] bridge_slave_0: entered promiscuous mode [ 108.246785][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.254646][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.265042][ T6462] bridge_slave_1: entered allmulticast mode [ 108.272559][ T6462] bridge_slave_1: entered promiscuous mode [ 108.308596][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.321017][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.360323][ T6462] team0: Port device team_slave_0 added [ 108.368576][ T6462] team0: Port device team_slave_1 added [ 108.402485][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.411915][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.440818][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.455058][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.463756][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.491101][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.533707][ T6462] hsr_slave_0: entered promiscuous mode [ 108.541617][ T6462] hsr_slave_1: entered promiscuous mode [ 108.548165][ T6462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.560273][ T6462] Cannot create hsr debugfs directory [ 108.725873][ T11] bridge_slave_1: left allmulticast mode [ 108.732229][ T11] bridge_slave_1: left promiscuous mode [ 108.738097][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.748866][ T11] bridge_slave_0: left allmulticast mode [ 108.754816][ T11] bridge_slave_0: left promiscuous mode [ 108.761232][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.961559][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.972983][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.984552][ T11] bond0 (unregistering): Released all slaves [ 109.105426][ T11] hsr_slave_0: left promiscuous mode [ 109.112575][ T11] hsr_slave_1: left promiscuous mode [ 109.118619][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.126771][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.135149][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.146991][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.165546][ T11] veth1_macvtap: left promiscuous mode [ 109.173738][ T11] veth0_macvtap: left promiscuous mode [ 109.179456][ T11] veth1_vlan: left promiscuous mode [ 109.184786][ T11] veth0_vlan: left promiscuous mode [ 109.633347][ T11] team0 (unregistering): Port device team_slave_1 removed [ 109.675027][ T11] team0 (unregistering): Port device team_slave_0 removed [ 110.019821][ T54] Bluetooth: hci0: command tx timeout [ 110.361128][ T6462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.377217][ T6462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.397991][ T6462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.414230][ T6462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.728581][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.755768][ T6462] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.778858][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.786077][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.798463][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.805665][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.218722][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.298319][ T6462] veth0_vlan: entered promiscuous mode [ 111.330645][ T6462] veth1_vlan: entered promiscuous mode [ 111.386770][ T6462] veth0_macvtap: entered promiscuous mode [ 111.414597][ T6462] veth1_macvtap: entered promiscuous mode [ 111.433007][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.448006][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.473108][ T6462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.484768][ T6462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.494978][ T6462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.504858][ T6462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.592668][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.605892][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.632151][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.640157][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.715849][ T6613] ================================================================== [ 111.723957][ T6613] BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 [ 111.730682][ T6613] Read of size 1 at addr ffff8880301c98c8 by task syz.0.15/6613 [ 111.738334][ T6613] [ 111.740695][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.0.15 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 111.750862][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.760943][ T6613] Call Trace: [ 111.764234][ T6613] [ 111.767181][ T6613] dump_stack_lvl+0x241/0x360 [ 111.771886][ T6613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.777107][ T6613] ? __pfx__printk+0x10/0x10 [ 111.781735][ T6613] ? _printk+0xd5/0x120 [ 111.785923][ T6613] ? __virt_addr_valid+0x183/0x530 [ 111.791063][ T6613] ? __virt_addr_valid+0x183/0x530 [ 111.796201][ T6613] print_report+0x169/0x550 [ 111.800733][ T6613] ? __virt_addr_valid+0x183/0x530 [ 111.805869][ T6613] ? __virt_addr_valid+0x183/0x530 [ 111.811009][ T6613] ? __virt_addr_valid+0x45f/0x530 [ 111.816159][ T6613] ? __phys_addr+0xba/0x170 [ 111.820704][ T6613] ? strlen+0x58/0x70 [ 111.824713][ T6613] kasan_report+0x143/0x180 [ 111.829249][ T6613] ? strlen+0x58/0x70 [ 111.833288][ T6613] strlen+0x58/0x70 [ 111.837124][ T6613] kstrdup+0x21/0xb0 [ 111.841068][ T6613] led_tg_check+0x18b/0x3c0 [ 111.845600][ T6613] xt_check_target+0x3b9/0xa40 [ 111.850488][ T6613] ? __pfx_xt_check_target+0x10/0x10 [ 111.855811][ T6613] ? kasan_save_track+0x51/0x80 [ 111.860772][ T6613] ? nft_target_init+0x174/0xc30 [ 111.865739][ T6613] nft_target_init+0x82d/0xc30 [ 111.870526][ T6613] ? __pfx_nft_target_init+0x10/0x10 [ 111.875843][ T6613] ? rcu_is_watching+0x15/0xb0 [ 111.880638][ T6613] ? trace_kmalloc+0x1f/0xd0 [ 111.885256][ T6613] ? nf_tables_newrule+0x1609/0x2980 [ 111.890567][ T6613] nf_tables_newrule+0x185e/0x2980 [ 111.895705][ T6613] ? __pfx_nf_tables_newrule+0x10/0x10 [ 111.901192][ T6613] ? __nla_parse+0x40/0x60 [ 111.905632][ T6613] nfnetlink_rcv+0x14e3/0x2ab0 [ 111.910442][ T6613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.915598][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.920837][ T6613] ? skb_clone+0x240/0x390 [ 111.925283][ T6613] ? __pfx_lock_release+0x10/0x10 [ 111.930431][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.935660][ T6613] netlink_unicast+0x7f6/0x990 [ 111.940552][ T6613] ? __pfx_netlink_unicast+0x10/0x10 [ 111.945868][ T6613] ? __virt_addr_valid+0x183/0x530 [ 111.951002][ T6613] ? __check_object_size+0x48e/0x900 [ 111.956366][ T6613] netlink_sendmsg+0x8e4/0xcb0 [ 111.961170][ T6613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.966563][ T6613] ? aa_sock_msg_perm+0x91/0x160 [ 111.971541][ T6613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.976864][ T6613] __sock_sendmsg+0x221/0x270 [ 111.981961][ T6613] ____sys_sendmsg+0x52a/0x7e0 [ 111.986938][ T6613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.992252][ T6613] ? __fget_files+0x2a/0x410 [ 111.996877][ T6613] ? __fget_files+0x2a/0x410 [ 112.001594][ T6613] __sys_sendmsg+0x269/0x350 [ 112.006212][ T6613] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.011361][ T6613] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.017718][ T6613] ? do_syscall_64+0x100/0x230 [ 112.022511][ T6613] ? do_syscall_64+0xb6/0x230 [ 112.027223][ T6613] do_syscall_64+0xf3/0x230 [ 112.031772][ T6613] ? clear_bhb_loop+0x35/0x90 [ 112.036542][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.042470][ T6613] RIP: 0033:0x7f41ed57e719 [ 112.046927][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.066581][ T6613] RSP: 002b:00007f41ee369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.075030][ T6613] RAX: ffffffffffffffda RBX: 00007f41ed735f80 RCX: 00007f41ed57e719 [ 112.083289][ T6613] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 112.091286][ T6613] RBP: 00007f41ed5f175e R08: 0000000000000000 R09: 0000000000000000 [ 112.099282][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.107278][ T6613] R13: 0000000000000000 R14: 00007f41ed735f80 R15: 00007fff5d8d6f68 [ 112.115384][ T6613] [ 112.118522][ T6613] [ 112.120857][ T6613] Allocated by task 6613: [ 112.125205][ T6613] kasan_save_track+0x3f/0x80 [ 112.129915][ T6613] __kasan_kmalloc+0x98/0xb0 [ 112.134626][ T6613] __kmalloc_noprof+0x285/0x4c0 [ 112.139542][ T6613] nf_tables_newrule+0x1609/0x2980 [ 112.144720][ T6613] nfnetlink_rcv+0x14e3/0x2ab0 [ 112.149514][ T6613] netlink_unicast+0x7f6/0x990 [ 112.154312][ T6613] netlink_sendmsg+0x8e4/0xcb0 [ 112.159106][ T6613] __sock_sendmsg+0x221/0x270 [ 112.163818][ T6613] ____sys_sendmsg+0x52a/0x7e0 [ 112.168652][ T6613] __sys_sendmsg+0x269/0x350 [ 112.173351][ T6613] do_syscall_64+0xf3/0x230 [ 112.177876][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.183796][ T6613] [ 112.186134][ T6613] The buggy address belongs to the object at ffff8880301c9880 [ 112.186134][ T6613] which belongs to the cache kmalloc-cg-96 of size 96 [ 112.200445][ T6613] The buggy address is located 0 bytes to the right of [ 112.200445][ T6613] allocated 72-byte region [ffff8880301c9880, ffff8880301c98c8) [ 112.214911][ T6613] [ 112.217264][ T6613] The buggy address belongs to the physical page: [ 112.223702][ T6613] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x301c9 [ 112.232511][ T6613] memcg:ffff888030d63a01 [ 112.236772][ T6613] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 112.244262][ T6613] page_type: f5(slab) [ 112.248310][ T6613] raw: 00fff00000000000 ffff88801ac4d640 ffffea0000d308c0 0000000000000003 [ 112.256935][ T6613] raw: 0000000000000000 0000000080200020 00000001f5000000 ffff888030d63a01 [ 112.265541][ T6613] page dumped because: kasan: bad access detected [ 112.272002][ T6613] page_owner tracks the page as allocated [ 112.277735][ T6613] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1161, tgid 1161 (kworker/u8:6), ts 66924062275, free_ts 66895525139 [ 112.297046][ T6613] post_alloc_hook+0x1f3/0x230 [ 112.301938][ T6613] get_page_from_freelist+0x3649/0x3790 [ 112.307514][ T6613] __alloc_pages_noprof+0x292/0x710 [ 112.312832][ T6613] alloc_pages_mpol_noprof+0x3e8/0x680 [ 112.318341][ T6613] alloc_slab_page+0x6a/0x140 [ 112.323047][ T6613] allocate_slab+0x5a/0x2f0 [ 112.327660][ T6613] ___slab_alloc+0xcd1/0x14b0 [ 112.332369][ T6613] __slab_alloc+0x58/0xa0 [ 112.336737][ T6613] __kmalloc_node_noprof+0x2ee/0x4d0 [ 112.342058][ T6613] __kvmalloc_node_noprof+0x72/0x190 [ 112.347383][ T6613] __nf_hook_entries_try_shrink+0x330/0x730 [ 112.353310][ T6613] __nf_unregister_net_hook+0x5cf/0x800 [ 112.358888][ T6613] nf_unregister_net_hooks+0xd0/0x140 [ 112.364318][ T6613] cleanup_net+0x615/0xcc0 [ 112.368768][ T6613] process_scheduled_works+0xa63/0x1850 [ 112.374437][ T6613] worker_thread+0x870/0xd30 [ 112.379048][ T6613] page last free pid 5875 tgid 5875 stack trace: [ 112.385393][ T6613] free_unref_page+0xdf9/0x1140 [ 112.390286][ T6613] tlb_finish_mmu+0x11f/0x200 [ 112.394990][ T6613] exit_mmap+0x496/0xc40 [ 112.399265][ T6613] __mmput+0x115/0x3c0 [ 112.403377][ T6613] exit_mm+0x220/0x310 [ 112.407537][ T6613] do_exit+0x9b2/0x28e0 [ 112.411732][ T6613] do_group_exit+0x207/0x2c0 [ 112.416429][ T6613] get_signal+0x16b2/0x1750 [ 112.420958][ T6613] arch_do_signal_or_restart+0x96/0x860 [ 112.426537][ T6613] syscall_exit_to_user_mode+0xce/0x340 [ 112.432156][ T6613] do_syscall_64+0x100/0x230 [ 112.436771][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.442689][ T6613] [ 112.445029][ T6613] Memory state around the buggy address: [ 112.450683][ T6613] ffff8880301c9780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 112.458776][ T6613] ffff8880301c9800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 112.466862][ T6613] >ffff8880301c9880: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 112.474961][ T6613] ^ [ 112.481394][ T6613] ffff8880301c9900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 112.489474][ T6613] ffff8880301c9980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 112.497570][ T6613] ================================================================== [ 112.518410][ T54] Bluetooth: hci0: command tx timeout [ 112.524188][ T6613] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.531409][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.0.15 Not tainted 6.12.0-syzkaller-10681-g65ae975e97d5 #0 [ 112.541585][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.551661][ T6613] Call Trace: [ 112.554958][ T6613] [ 112.557908][ T6613] dump_stack_lvl+0x241/0x360 [ 112.562611][ T6613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.567923][ T6613] ? __pfx__printk+0x10/0x10 [ 112.572548][ T6613] ? preempt_schedule+0xe1/0xf0 [ 112.577423][ T6613] ? vscnprintf+0x5d/0x90 [ 112.581779][ T6613] panic+0x349/0x880 [ 112.585702][ T6613] ? check_panic_on_warn+0x21/0xb0 [ 112.590847][ T6613] ? __pfx_panic+0x10/0x10 [ 112.595381][ T6613] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 112.601384][ T6613] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 112.607737][ T6613] ? print_report+0x502/0x550 [ 112.612455][ T6613] check_panic_on_warn+0x86/0xb0 [ 112.617511][ T6613] ? strlen+0x58/0x70 [ 112.621613][ T6613] end_report+0x77/0x160 [ 112.625891][ T6613] kasan_report+0x154/0x180 [ 112.630425][ T6613] ? strlen+0x58/0x70 [ 112.634411][ T6613] strlen+0x58/0x70 [ 112.638213][ T6613] kstrdup+0x21/0xb0 [ 112.642106][ T6613] led_tg_check+0x18b/0x3c0 [ 112.646615][ T6613] xt_check_target+0x3b9/0xa40 [ 112.651378][ T6613] ? __pfx_xt_check_target+0x10/0x10 [ 112.656662][ T6613] ? kasan_save_track+0x51/0x80 [ 112.661502][ T6613] ? nft_target_init+0x174/0xc30 [ 112.666429][ T6613] nft_target_init+0x82d/0xc30 [ 112.671190][ T6613] ? __pfx_nft_target_init+0x10/0x10 [ 112.676475][ T6613] ? rcu_is_watching+0x15/0xb0 [ 112.681321][ T6613] ? trace_kmalloc+0x1f/0xd0 [ 112.685912][ T6613] ? nf_tables_newrule+0x1609/0x2980 [ 112.691191][ T6613] nf_tables_newrule+0x185e/0x2980 [ 112.696300][ T6613] ? __pfx_nf_tables_newrule+0x10/0x10 [ 112.701754][ T6613] ? __nla_parse+0x40/0x60 [ 112.706250][ T6613] nfnetlink_rcv+0x14e3/0x2ab0 [ 112.711019][ T6613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 112.716154][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.721364][ T6613] ? skb_clone+0x240/0x390 [ 112.725866][ T6613] ? __pfx_lock_release+0x10/0x10 [ 112.730980][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.736174][ T6613] netlink_unicast+0x7f6/0x990 [ 112.741013][ T6613] ? __pfx_netlink_unicast+0x10/0x10 [ 112.746290][ T6613] ? __virt_addr_valid+0x183/0x530 [ 112.751421][ T6613] ? __check_object_size+0x48e/0x900 [ 112.756704][ T6613] netlink_sendmsg+0x8e4/0xcb0 [ 112.761469][ T6613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.766749][ T6613] ? aa_sock_msg_perm+0x91/0x160 [ 112.771687][ T6613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.776975][ T6613] __sock_sendmsg+0x221/0x270 [ 112.781650][ T6613] ____sys_sendmsg+0x52a/0x7e0 [ 112.786409][ T6613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.791776][ T6613] ? __fget_files+0x2a/0x410 [ 112.796359][ T6613] ? __fget_files+0x2a/0x410 [ 112.800974][ T6613] __sys_sendmsg+0x269/0x350 [ 112.805582][ T6613] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.810798][ T6613] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.817134][ T6613] ? do_syscall_64+0x100/0x230 [ 112.821889][ T6613] ? do_syscall_64+0xb6/0x230 [ 112.826558][ T6613] do_syscall_64+0xf3/0x230 [ 112.831141][ T6613] ? clear_bhb_loop+0x35/0x90 [ 112.835838][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.841747][ T6613] RIP: 0033:0x7f41ed57e719 [ 112.846168][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.865779][ T6613] RSP: 002b:00007f41ee369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.874296][ T6613] RAX: ffffffffffffffda RBX: 00007f41ed735f80 RCX: 00007f41ed57e719 [ 112.882349][ T6613] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 112.890332][ T6613] RBP: 00007f41ed5f175e R08: 0000000000000000 R09: 0000000000000000 [ 112.898309][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.906557][ T6613] R13: 0000000000000000 R14: 00007f41ed735f80 R15: 00007fff5d8d6f68 [ 112.914633][ T6613] [ 112.918008][ T6613] Kernel Offset: disabled [ 112.922322][ T6613] Rebooting in 86400 seconds..