[ 82.067094][ T9] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts.
2023/11/14 12:29:26 ignoring optional flag "sandboxArg"="0"
2023/11/14 12:29:26 parsed 1 programs
2023/11/14 12:29:28 executed programs: 0
[ 88.406339][ T5407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 88.457325][ T4454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.465562][ T4454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.473436][ T4454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.482235][ T4454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.490241][ T4454] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 88.498211][ T4454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.616781][ T5414] chnl_net:caif_netlink_parms(): no params data found
[ 88.669138][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.676705][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.684419][ T5414] bridge_slave_0: entered allmulticast mode
[ 88.691611][ T5414] bridge_slave_0: entered promiscuous mode
[ 88.699838][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.707514][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.714965][ T5414] bridge_slave_1: entered allmulticast mode
[ 88.721883][ T5414] bridge_slave_1: entered promiscuous mode
[ 88.748943][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.760566][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.788906][ T5414] team0: Port device team_slave_0 added
[ 88.797590][ T5414] team0: Port device team_slave_1 added
[ 88.820282][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.827505][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.854277][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.866455][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.873512][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.899613][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.937306][ T5414] hsr_slave_0: entered promiscuous mode
[ 88.943953][ T5414] hsr_slave_1: entered promiscuous mode
[ 89.862016][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.876101][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.888046][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.900688][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.013330][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.042898][ T5414] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.059106][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.066348][ T5056] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.086149][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.093709][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.339767][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.405528][ T5414] veth0_vlan: entered promiscuous mode
[ 90.423514][ T5414] veth1_vlan: entered promiscuous mode
[ 90.469549][ T5414] veth0_macvtap: entered promiscuous mode
[ 90.483198][ T5414] veth1_macvtap: entered promiscuous mode
[ 90.508777][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.527968][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.545116][ T5060] Bluetooth: hci0: command 0x0409 tx timeout
[ 90.552414][ T5414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.563639][ T5414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.572834][ T5414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.586945][ T5414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.686133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.707001][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.741467][ T2818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.756254][ T2818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.688761][ T5492] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[ 92.595282][ T5548] ==================================================================
[ 92.603853][ T5548] BUG: KASAN: slab-use-after-free in nfc_alloc_send_skb+0x189/0x1c0
[ 92.611962][ T5548] Read of size 4 at addr ffff888028ecd548 by task syz-executor.0/5548
[ 92.620331][ T5548]
[ 92.622870][ T5548] CPU: 0 PID: 5548 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7-dirty #0
[ 92.634182][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[ 92.644361][ T5548] Call Trace:
[ 92.647677][ T5548]
[ 92.650628][ T5548] dump_stack_lvl+0x1e7/0x2d0
[ 92.655341][ T5548] ? nf_tcp_handle_invalid+0x650/0x650
[ 92.661203][ T5548] ? panic+0x850/0x850
[ 92.665357][ T5548] ? _printk+0xd5/0x120
[ 92.669831][ T5548] print_report+0x163/0x540
[ 92.674363][ T5548] ? __virt_addr_valid+0x22f/0x2e0
[ 92.679866][ T5548] ? __phys_addr+0xba/0x170
[ 92.684398][ T5548] ? nfc_alloc_send_skb+0x189/0x1c0
[ 92.689716][ T5548] kasan_report+0x142/0x170
[ 92.694259][ T5548] ? nfc_alloc_send_skb+0x189/0x1c0
[ 92.699749][ T5548] nfc_alloc_send_skb+0x189/0x1c0
[ 92.705073][ T5548] nfc_llcp_send_ui_frame+0x2ac/0x670
[ 92.710487][ T5548] ? nfc_llcp_send_i_frame+0x4f0/0x4f0
[ 92.715978][ T5548] ? do_raw_spin_unlock+0x13b/0x8b0
[ 92.721394][ T5548] llcp_sock_sendmsg+0x24d/0x380
[ 92.726534][ T5548] ? nfc_llcp_getsockopt+0x560/0x560
[ 92.732118][ T5548] ____sys_sendmsg+0x592/0x890
[ 92.737045][ T5548] ? __sys_sendmsg_sock+0x30/0x30
[ 92.742508][ T5548] ? __fget_files+0x3fe/0x480
[ 92.747316][ T5548] __sys_sendmmsg+0x3b2/0x730
[ 92.752023][ T5548] ? __ia32_sys_sendmsg+0x90/0x90
[ 92.757334][ T5548] ? try_to_wake_up+0x994/0x1440
[ 92.762303][ T5548] ? __lock_acquire+0x7f70/0x7f70
[ 92.767739][ T5548] ? plist_check_list+0x20d/0x220
[ 92.772810][ T5548] ? __might_sleep+0xc0/0xc0
[ 92.777430][ T5548] ? __might_fault+0xa5/0x120
[ 92.782146][ T5548] ? __lock_acquire+0x7f70/0x7f70
[ 92.787370][ T5548] ? __might_fault+0xa5/0x120
[ 92.792532][ T5548] ? print_irqtrace_events+0x220/0x220
[ 92.798233][ T5548] ? syscall_enter_from_user_mode+0x32/0x230
[ 92.804246][ T5548] __x64_sys_sendmmsg+0xa0/0xb0
[ 92.809382][ T5548] do_syscall_64+0x44/0x110
[ 92.813996][ T5548] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 92.820018][ T5548] RIP: 0033:0x7f47e707cae9
[ 92.824567][ T5548] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 92.845345][ T5548] RSP: 002b:00007f47e63fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 92.854061][ T5548] RAX: ffffffffffffffda RBX: 00007f47e719bf80 RCX: 00007f47e707cae9
[ 92.862065][ T5548] RDX: 0000000000000001 RSI: 00000000200013c0 RDI: 0000000000000004
[ 92.870157][ T5548] RBP: 00007f47e70c847a R08: 0000000000000000 R09: 0000000000000000
[ 92.878240][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.886237][ T5548] R13: 000000000000000b R14: 00007f47e719bf80 R15: 00007ffc0cfc6608
[ 92.894419][ T5548]
[ 92.897465][ T5548]
[ 92.899794][ T5548] Allocated by task 5548:
[ 92.904140][ T5548] kasan_set_track+0x4f/0x70
[ 92.908846][ T5548] __kasan_kmalloc+0x98/0xb0
[ 92.913455][ T5548] nfc_allocate_device+0x12f/0x520
[ 92.918597][ T5548] nci_allocate_device+0x1e2/0x360
[ 92.923733][ T5548] virtual_ncidev_open+0x75/0x1b0
[ 92.929224][ T5548] misc_open+0x30b/0x380
[ 92.933488][ T5548] chrdev_open+0x5ab/0x630
[ 92.937923][ T5548] do_dentry_open+0x8fd/0x1590
[ 92.942712][ T5548] path_openat+0x2845/0x3280
[ 92.947335][ T5548] do_filp_open+0x234/0x490
[ 92.951869][ T5548] do_sys_openat2+0x13e/0x1d0
[ 92.956571][ T5548] __x64_sys_openat+0x247/0x290
[ 92.961457][ T5548] do_syscall_64+0x44/0x110
[ 92.966163][ T5548] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 92.972084][ T5548]
[ 92.974421][ T5548] Freed by task 5547:
[ 92.978496][ T5548] kasan_set_track+0x4f/0x70
[ 92.983133][ T5548] kasan_save_free_info+0x28/0x40
[ 92.988187][ T5548] ____kasan_slab_free+0xd6/0x120
[ 92.993238][ T5548] __kmem_cache_free+0x263/0x3a0
[ 92.998210][ T5548] device_release+0x95/0x1c0
[ 93.002822][ T5548] kobject_put+0x1ee/0x430
[ 93.007267][ T5548] nci_free_device+0x38/0x50
[ 93.011886][ T5548] virtual_ncidev_close+0x70/0x90
[ 93.016940][ T5548] __fput+0x3cc/0xa10
[ 93.020946][ T5548] __se_sys_close+0x15f/0x220
[ 93.025646][ T5548] do_syscall_64+0x44/0x110
[ 93.030171][ T5548] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 93.036096][ T5548]
[ 93.038436][ T5548] The buggy address belongs to the object at ffff888028ecd000
[ 93.038436][ T5548] which belongs to the cache kmalloc-2k of size 2048
[ 93.052806][ T5548] The buggy address is located 1352 bytes inside of
[ 93.052806][ T5548] freed 2048-byte region [ffff888028ecd000, ffff888028ecd800)
[ 93.067350][ T5548]
[ 93.069693][ T5548] The buggy address belongs to the physical page:
[ 93.076137][ T5548] page:ffffea0000a3b200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28ec8
[ 93.086317][ T5548] head:ffffea0000a3b200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 93.095273][ T5548] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 93.103711][ T5548] page_type: 0xffffffff()
[ 93.108061][ T5548] raw: 00fff00000000840 ffff888012c42000 0000000000000000 0000000000000001
[ 93.116674][ T5548] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[ 93.125276][ T5548] page dumped because: kasan: bad access detected
[ 93.131706][ T5548] page_owner tracks the page as allocated
[ 93.137873][ T5548] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u4:0), ts 67750501743, free_ts 67716621887
[ 93.160917][ T5548] post_alloc_hook+0x1e6/0x210
[ 93.165745][ T5548] get_page_from_freelist+0x339a/0x3530
[ 93.171679][ T5548] __alloc_pages+0x255/0x670
[ 93.177091][ T5548] alloc_pages_mpol+0x3de/0x640
[ 93.182076][ T5548] alloc_slab_page+0x6a/0x160
[ 93.186908][ T5548] new_slab+0x84/0x2f0
[ 93.191182][ T5548] ___slab_alloc+0xc85/0x1310
[ 93.195884][ T5548] __kmem_cache_alloc_node+0x21d/0x300
[ 93.201373][ T5548] __kmalloc_node_track_caller+0xa5/0x230
[ 93.207553][ T5548] kmalloc_reserve+0xf3/0x260
[ 93.212341][ T5548] __alloc_skb+0x1b1/0x420
[ 93.216786][ T5548] rtmsg_ifinfo_build_skb+0x89/0x280
[ 93.222725][ T5548] unregister_netdevice_many_notify+0xe2a/0x1710
[ 93.229292][ T5548] default_device_exit_batch+0x5c4/0x630
[ 93.235135][ T5548] cleanup_net+0x767/0xb80
[ 93.239661][ T5548] process_scheduled_works+0x90f/0x1400
[ 93.245411][ T5548] page last free stack trace:
[ 93.250098][ T5548] free_unref_page_prepare+0x92a/0xa50
[ 93.255850][ T5548] free_unref_page+0x37/0x3f0
[ 93.260554][ T5548] __slab_free+0x2f6/0x390
[ 93.265002][ T5548] qlist_free_all+0x75/0xe0
[ 93.269526][ T5548] kasan_quarantine_reduce+0x14b/0x160
[ 93.275012][ T5548] __kasan_slab_alloc+0x23/0x70
[ 93.279972][ T5548] slab_post_alloc_hook+0x6c/0x3c0
[ 93.285157][ T5548] __kmem_cache_alloc_node+0x1d0/0x300
[ 93.290737][ T5548] kmalloc_trace+0x2a/0xe0
[ 93.295367][ T5548] netdevice_event+0x37d/0x950
[ 93.300181][ T5548] notifier_call_chain+0x18c/0x3a0
[ 93.305320][ T5548] unregister_netdevice_many_notify+0xd87/0x1710
[ 93.311682][ T5548] default_device_exit_batch+0x5c4/0x630
[ 93.317611][ T5548] cleanup_net+0x767/0xb80
[ 93.322235][ T5548] process_scheduled_works+0x90f/0x1400
[ 93.327832][ T5548] worker_thread+0xa5f/0xff0
[ 93.332459][ T5548]
[ 93.334796][ T5548] Memory state around the buggy address:
[ 93.340527][ T5548] ffff888028ecd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.348690][ T5548] ffff888028ecd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.356783][ T5548] >ffff888028ecd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.364862][ T5548] ^
[ 93.371292][ T5548] ffff888028ecd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.379376][ T5548] ffff888028ecd600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.387453][ T5548] ==================================================================
[ 93.402562][ T5060] Bluetooth: hci0: command 0x041b tx timeout
[ 93.410724][ T5548] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.417965][ T5548] CPU: 0 PID: 5548 Comm: syz-executor.0 Not tainted 6.7.0-rc1-syzkaller-00012-g9bacdd8996c7-dirty #0
[ 93.429091][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[ 93.439256][ T5548] Call Trace:
[ 93.442641][ T5548]
[ 93.445589][ T5548] dump_stack_lvl+0x1e7/0x2d0
[ 93.450292][ T5548] ? nf_tcp_handle_invalid+0x650/0x650
[ 93.455787][ T5548] ? panic+0x850/0x850
[ 93.459881][ T5548] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 93.465983][ T5548] ? vscnprintf+0x5d/0x80
[ 93.470339][ T5548] panic+0x349/0x850
[ 93.474437][ T5548] ? check_panic_on_warn+0x21/0xa0
[ 93.479666][ T5548] ? __memcpy_flushcache+0x2b0/0x2b0
[ 93.484984][ T5548] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 93.491159][ T5548] ? _raw_spin_unlock+0x40/0x40
[ 93.496046][ T5548] check_panic_on_warn+0x82/0xa0
[ 93.501139][ T5548] ? nfc_alloc_send_skb+0x189/0x1c0
[ 93.506625][ T5548] end_report+0x6e/0x130
[ 93.510891][ T5548] kasan_report+0x153/0x170
[ 93.515595][ T5548] ? nfc_alloc_send_skb+0x189/0x1c0
[ 93.521147][ T5548] nfc_alloc_send_skb+0x189/0x1c0
[ 93.526166][ T5548] nfc_llcp_send_ui_frame+0x2ac/0x670
[ 93.531625][ T5548] ? nfc_llcp_send_i_frame+0x4f0/0x4f0
[ 93.537101][ T5548] ? do_raw_spin_unlock+0x13b/0x8b0
[ 93.542303][ T5548] llcp_sock_sendmsg+0x24d/0x380
[ 93.547227][ T5548] ? nfc_llcp_getsockopt+0x560/0x560
[ 93.552509][ T5548] ____sys_sendmsg+0x592/0x890
[ 93.557359][ T5548] ? __sys_sendmsg_sock+0x30/0x30
[ 93.562484][ T5548] ? __fget_files+0x3fe/0x480
[ 93.567183][ T5548] __sys_sendmmsg+0x3b2/0x730
[ 93.571900][ T5548] ? __ia32_sys_sendmsg+0x90/0x90
[ 93.577020][ T5548] ? try_to_wake_up+0x994/0x1440
[ 93.581967][ T5548] ? __lock_acquire+0x7f70/0x7f70
[ 93.587587][ T5548] ? plist_check_list+0x20d/0x220
[ 93.592788][ T5548] ? __might_sleep+0xc0/0xc0
[ 93.597635][ T5548] ? __might_fault+0xa5/0x120
[ 93.602306][ T5548] ? __lock_acquire+0x7f70/0x7f70
[ 93.607325][ T5548] ? __might_fault+0xa5/0x120
[ 93.612516][ T5548] ? print_irqtrace_events+0x220/0x220
[ 93.618321][ T5548] ? syscall_enter_from_user_mode+0x32/0x230
[ 93.624991][ T5548] __x64_sys_sendmmsg+0xa0/0xb0
[ 93.629919][ T5548] do_syscall_64+0x44/0x110
[ 93.634426][ T5548] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 93.640319][ T5548] RIP: 0033:0x7f47e707cae9
[ 93.644896][ T5548] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 93.664749][ T5548] RSP: 002b:00007f47e63fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 93.673499][ T5548] RAX: ffffffffffffffda RBX: 00007f47e719bf80 RCX: 00007f47e707cae9
[ 93.681984][ T5548] RDX: 0000000000000001 RSI: 00000000200013c0 RDI: 0000000000000004
[ 93.690030][ T5548] RBP: 00007f47e70c847a R08: 0000000000000000 R09: 0000000000000000
[ 93.697996][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.707474][ T5548] R13: 000000000000000b R14: 00007f47e719bf80 R15: 00007ffc0cfc6608
[ 93.715440][ T5548]
[ 93.718870][ T5548] Kernel Offset: disabled
[ 93.723281][ T5548] Rebooting in 86400 seconds..