Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts.
2025/02/21 05:59:59 ignoring optional flag "sandboxArg"="0"
2025/02/21 06:00:00 parsed 1 programs
[ 71.585878][ T5833] cgroup: Unknown subsys name 'net'
[ 71.694398][ T5833] cgroup: Unknown subsys name 'cpuset'
[ 71.702324][ T5833] cgroup: Unknown subsys name 'rlimit'
[ 73.027934][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 75.410612][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 77.551301][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.560866][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.569303][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.578031][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.587938][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.595482][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 77.835379][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.844031][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.866956][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.875233][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.496964][ T5920] chnl_net:caif_netlink_parms(): no params data found
[ 78.581412][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.589211][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.596457][ T5920] bridge_slave_0: entered allmulticast mode
[ 78.603584][ T5920] bridge_slave_0: entered promiscuous mode
[ 78.618506][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.628592][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.636241][ T5920] bridge_slave_1: entered allmulticast mode
[ 78.648640][ T5920] bridge_slave_1: entered promiscuous mode
[ 78.675994][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.688302][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.710339][ T5920] team0: Port device team_slave_0 added
[ 78.718573][ T5920] team0: Port device team_slave_1 added
[ 78.736122][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.743222][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.769186][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.783144][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.790113][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.817693][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.863057][ T5920] hsr_slave_0: entered promiscuous mode
[ 78.869119][ T5920] hsr_slave_1: entered promiscuous mode
[ 78.956764][ T5920] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.965818][ T5920] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.974459][ T5920] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.983854][ T5920] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.034083][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.057134][ T5920] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.067928][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.075175][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.088303][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.095402][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.212973][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.246535][ T5920] veth0_vlan: entered promiscuous mode
[ 79.256858][ T5920] veth1_vlan: entered promiscuous mode
[ 79.277971][ T5920] veth0_macvtap: entered promiscuous mode
[ 79.286774][ T5920] veth1_macvtap: entered promiscuous mode
[ 79.301252][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.312868][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.326250][ T5920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.335948][ T5920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.344910][ T5920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.354108][ T5920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.487846][ T1324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.556565][ T1324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.624914][ T1324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.709698][ T1324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/02/21 06:00:11 executed programs: 0
[ 79.980371][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.988960][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.997294][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.007651][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.015619][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.023180][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.120921][ T5942] chnl_net:caif_netlink_parms(): no params data found
[ 80.164547][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.171760][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.178843][ T5942] bridge_slave_0: entered allmulticast mode
[ 80.186379][ T5942] bridge_slave_0: entered promiscuous mode
[ 80.194920][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.202062][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.209176][ T5942] bridge_slave_1: entered allmulticast mode
[ 80.216214][ T5942] bridge_slave_1: entered promiscuous mode
[ 80.241425][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.252828][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.277171][ T5942] team0: Port device team_slave_0 added
[ 80.286368][ T5942] team0: Port device team_slave_1 added
[ 80.306356][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.313849][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.339820][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.353348][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.360302][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.386536][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.425137][ T5942] hsr_slave_0: entered promiscuous mode
[ 80.431126][ T5942] hsr_slave_1: entered promiscuous mode
[ 80.437566][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 80.445512][ T5942] Cannot create hsr debugfs directory
[ 82.115917][ T5146] Bluetooth: hci0: command tx timeout
[ 82.968695][ T1324] bridge_slave_1: left allmulticast mode
[ 82.975161][ T1324] bridge_slave_1: left promiscuous mode
[ 82.981503][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.004673][ T1324] bridge_slave_0: left allmulticast mode
[ 83.010325][ T1324] bridge_slave_0: left promiscuous mode
[ 83.016562][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.348083][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.358825][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.368799][ T1324] bond0 (unregistering): Released all slaves
[ 83.470581][ T1324] hsr_slave_0: left promiscuous mode
[ 83.478668][ T1324] hsr_slave_1: left promiscuous mode
[ 83.488499][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.496287][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.505140][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.514053][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.532067][ T1324] veth1_macvtap: left promiscuous mode
[ 83.538236][ T1324] veth0_macvtap: left promiscuous mode
[ 83.547765][ T1324] veth1_vlan: left promiscuous mode
[ 83.554703][ T1324] veth0_vlan: left promiscuous mode
[ 83.909562][ T1324] team0 (unregistering): Port device team_slave_1 removed
[ 83.937214][ T1324] team0 (unregistering): Port device team_slave_0 removed
[ 84.191834][ T5146] Bluetooth: hci0: command tx timeout
[ 84.385507][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.412056][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.425038][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.443802][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.592784][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.626997][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.639095][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.646266][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.684577][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.691745][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.899449][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.945466][ T5942] veth0_vlan: entered promiscuous mode
[ 84.959987][ T5942] veth1_vlan: entered promiscuous mode
[ 84.988470][ T5942] veth0_macvtap: entered promiscuous mode
[ 84.999050][ T5942] veth1_macvtap: entered promiscuous mode
[ 85.018630][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.037395][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.049611][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.061379][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.070691][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.082410][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.159571][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.180684][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.213214][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.221080][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/02/21 06:00:16 executed programs: 2
[ 86.282404][ T5146] Bluetooth: hci0: command tx timeout
[ 86.994986][ T3699] cfg80211: failed to load regulatory.db
[ 88.352518][ T5146] Bluetooth: hci0: command tx timeout
2025/02/21 06:00:21 executed programs: 253
2025/02/21 06:00:26 executed programs: 526
[ 96.760937][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 96.769678][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 96.777632][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 96.785732][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 96.794118][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 96.802241][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 96.889862][ T6642] chnl_net:caif_netlink_parms(): no params data found
[ 96.950223][ T2959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.964667][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.972426][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.979507][ T6642] bridge_slave_0: entered allmulticast mode
[ 96.987014][ T6642] bridge_slave_0: entered promiscuous mode
[ 96.994928][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.005897][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.013216][ T6642] bridge_slave_1: entered allmulticast mode
[ 97.019773][ T6642] bridge_slave_1: entered promiscuous mode
[ 97.033883][ T2959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.057984][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.069561][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.096103][ T2959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.117416][ T6642] team0: Port device team_slave_0 added
[ 97.125520][ T6642] team0: Port device team_slave_1 added
[ 97.154894][ T2959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.168371][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.176081][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.202303][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.214238][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.221184][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.247862][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.284989][ T6642] hsr_slave_0: entered promiscuous mode
[ 97.291129][ T6642] hsr_slave_1: entered promiscuous mode
[ 97.363025][ T2959] bridge_slave_1: left allmulticast mode
[ 97.368712][ T2959] bridge_slave_1: left promiscuous mode
[ 97.374789][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.384649][ T2959] bridge_slave_0: left allmulticast mode
[ 97.390335][ T2959] bridge_slave_0: left promiscuous mode
[ 97.396530][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.571532][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.582823][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.592994][ T2959] bond0 (unregistering): Released all slaves
[ 97.836211][ T2959] hsr_slave_0: left promiscuous mode
[ 97.845348][ T2959] hsr_slave_1: left promiscuous mode
[ 97.851178][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.865794][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.875221][ T2959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.883321][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.898483][ T2959] veth1_macvtap: left promiscuous mode
[ 97.904121][ T2959] veth0_macvtap: left promiscuous mode
[ 97.909709][ T2959] veth1_vlan: left promiscuous mode
[ 97.915612][ T2959] veth0_vlan: left promiscuous mode
[ 98.217753][ T2959] team0 (unregistering): Port device team_slave_1 removed
[ 98.246824][ T2959] team0 (unregistering): Port device team_slave_0 removed
[ 98.640030][ T6642] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.663817][ T6642] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.674776][ T6642] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.686165][ T6642] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.801001][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.816148][ T6642] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.827827][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.834953][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.842126][ T5146] Bluetooth: hci1: command tx timeout
[ 98.854716][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.861848][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.893746][ T6642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 98.983597][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.016972][ T6642] veth0_vlan: entered promiscuous mode
[ 99.025902][ T6642] veth1_vlan: entered promiscuous mode
[ 99.045878][ T6642] veth0_macvtap: entered promiscuous mode
[ 99.053924][ T6642] veth1_macvtap: entered promiscuous mode
[ 99.069162][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.081219][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.092017][ T6642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.100734][ T6642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.109462][ T6642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.118521][ T6642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.165664][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.178984][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.197997][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.206470][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.257317][ T6683] ==================================================================
[ 99.265384][ T6683] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330
[ 99.273279][ T6683] Read of size 8 at addr ffff8880296df800 by task syz.0.616/6683
[ 99.280992][ T6683]
[ 99.283312][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.0.616 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0
[ 99.283328][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 99.283339][ T6683] Call Trace:
[ 99.283344][ T6683]
[ 99.283351][ T6683] dump_stack_lvl+0x116/0x1f0
[ 99.283374][ T6683] print_report+0xc3/0x670
[ 99.283395][ T6683] ? __virt_addr_valid+0x5e/0x590
[ 99.283409][ T6683] ? __phys_addr+0xc6/0x150
[ 99.283422][ T6683] kasan_report+0xd9/0x110
[ 99.283433][ T6683] ? force_devcd_write+0x317/0x330
[ 99.283450][ T6683] ? force_devcd_write+0x317/0x330
[ 99.283467][ T6683] force_devcd_write+0x317/0x330
[ 99.283484][ T6683] ? __pfx_force_devcd_write+0x10/0x10
[ 99.283500][ T6683] ? __debugfs_file_get+0x1ff/0x850
[ 99.283517][ T6683] ? __pfx___debugfs_file_get+0x10/0x10
[ 99.283533][ T6683] ? rcu_is_watching+0x12/0xc0
[ 99.283547][ T6683] ? trace_lock_acquire+0x14e/0x1f0
[ 99.283563][ T6683] full_proxy_write+0x13c/0x200
[ 99.283580][ T6683] ? __pfx_full_proxy_write+0x10/0x10
[ 99.283597][ T6683] vfs_write+0x24c/0x1150
[ 99.283620][ T6683] ? __pfx_vfs_write+0x10/0x10
[ 99.283637][ T6683] ? do_futex+0x123/0x350
[ 99.283653][ T6683] ? __pfx_do_futex+0x10/0x10
[ 99.283670][ T6683] ? __x64_sys_futex+0x1e1/0x4c0
[ 99.283686][ T6683] ? __x64_sys_futex+0x1ea/0x4c0
[ 99.283702][ T6683] ksys_write+0x12b/0x250
[ 99.283719][ T6683] ? __pfx_ksys_write+0x10/0x10
[ 99.283738][ T6683] do_syscall_64+0xcd/0x250
[ 99.283756][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.283774][ T6683] RIP: 0033:0x7fc14298d0a9
[ 99.283785][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.283801][ T6683] RSP: 002b:00007fff43c45e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.283814][ T6683] RAX: ffffffffffffffda RBX: 00007fc142ba5fa0 RCX: 00007fc14298d0a9
[ 99.283823][ T6683] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 99.283830][ T6683] RBP: 00007fc142a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 99.283838][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.283846][ T6683] R13: 00007fc142ba5fa0 R14: 00007fc142ba5fa0 R15: 0000000000000003
[ 99.283858][ T6683]
[ 99.283862][ T6683]
[ 99.509373][ T6683] Allocated by task 5942:
[ 99.513683][ T6683] kasan_save_stack+0x33/0x60
[ 99.518367][ T6683] kasan_save_track+0x14/0x30
[ 99.523041][ T6683] __kasan_kmalloc+0xaa/0xb0
[ 99.527625][ T6683] vhci_open+0x4c/0x430
[ 99.531777][ T6683] misc_open+0x35a/0x420
[ 99.536019][ T6683] chrdev_open+0x237/0x6a0
[ 99.540424][ T6683] do_dentry_open+0x735/0x1c40
[ 99.545180][ T6683] vfs_open+0x82/0x3f0
[ 99.549229][ T6683] path_openat+0x1e88/0x2d80
[ 99.553812][ T6683] do_filp_open+0x20c/0x470
[ 99.558307][ T6683] do_sys_openat2+0x17a/0x1e0
[ 99.562969][ T6683] __x64_sys_openat+0x175/0x210
[ 99.567805][ T6683] do_syscall_64+0xcd/0x250
[ 99.572301][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.578204][ T6683]
[ 99.580508][ T6683] Freed by task 5942:
[ 99.584464][ T6683] kasan_save_stack+0x33/0x60
[ 99.589130][ T6683] kasan_save_track+0x14/0x30
[ 99.593796][ T6683] kasan_save_free_info+0x3b/0x60
[ 99.598807][ T6683] __kasan_slab_free+0x51/0x70
[ 99.603557][ T6683] kfree+0x2c4/0x4d0
[ 99.607443][ T6683] vhci_release+0xbb/0xf0
[ 99.611772][ T6683] __fput+0x3ff/0xb70
[ 99.615760][ T6683] task_work_run+0x14e/0x250
[ 99.620334][ T6683] do_exit+0xad8/0x2d70
[ 99.624473][ T6683] do_group_exit+0xd3/0x2a0
[ 99.628958][ T6683] get_signal+0x24ed/0x26c0
[ 99.633466][ T6683] arch_do_signal_or_restart+0x90/0x7e0
[ 99.639010][ T6683] syscall_exit_to_user_mode+0x150/0x2a0
[ 99.644637][ T6683] do_syscall_64+0xda/0x250
[ 99.649127][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.655010][ T6683]
[ 99.657316][ T6683] The buggy address belongs to the object at ffff8880296df800
[ 99.657316][ T6683] which belongs to the cache kmalloc-1k of size 1024
[ 99.671354][ T6683] The buggy address is located 0 bytes inside of
[ 99.671354][ T6683] freed 1024-byte region [ffff8880296df800, ffff8880296dfc00)
[ 99.685045][ T6683]
[ 99.687353][ T6683] The buggy address belongs to the physical page:
[ 99.693755][ T6683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x296d8
[ 99.702500][ T6683] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 99.710976][ T6683] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 99.718509][ T6683] page_type: f5(slab)
[ 99.722474][ T6683] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[ 99.731038][ T6683] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 99.739607][ T6683] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[ 99.748261][ T6683] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 99.756923][ T6683] head: 00fff00000000003 ffffea0000a5b601 ffffffffffffffff 0000000000000000
[ 99.765590][ T6683] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 99.774238][ T6683] page dumped because: kasan: bad access detected
[ 99.780638][ T6683] page_owner tracks the page as allocated
[ 99.786331][ T6683] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8, tgid 8 (kworker/0:0), ts 44352239192, free_ts 44340892027
[ 99.804979][ T6683] post_alloc_hook+0x181/0x1b0
[ 99.809735][ T6683] get_page_from_freelist+0xfce/0x2f80
[ 99.815184][ T6683] __alloc_frozen_pages_noprof+0x221/0x2470
[ 99.821066][ T6683] alloc_pages_mpol+0x1fc/0x540
[ 99.825897][ T6683] new_slab+0x23d/0x330
[ 99.830038][ T6683] ___slab_alloc+0xc5d/0x1720
[ 99.834703][ T6683] __slab_alloc.constprop.0+0x56/0xb0
[ 99.840064][ T6683] __kmalloc_noprof+0x2ec/0x510
[ 99.844907][ T6683] ___neigh_create+0x14ee/0x28e0
[ 99.849834][ T6683] ip6_finish_output2+0x130c/0x20a0
[ 99.855027][ T6683] ip6_finish_output+0x3f9/0x1360
[ 99.860035][ T6683] ip6_output+0x1f8/0x540
[ 99.864351][ T6683] mld_sendpack+0x9f0/0x11d0
[ 99.868928][ T6683] mld_ifc_work+0x740/0xca0
[ 99.873434][ T6683] process_one_work+0x9c5/0x1ba0
[ 99.878357][ T6683] worker_thread+0x6c8/0xf00
[ 99.882952][ T6683] page last free pid 5625 tgid 5625 stack trace:
[ 99.889256][ T6683] free_frozen_pages+0x6db/0xfb0
[ 99.894184][ T6683] qlist_free_all+0x4e/0x120
[ 99.898766][ T6683] kasan_quarantine_reduce+0x195/0x1e0
[ 99.904214][ T6683] __kasan_slab_alloc+0x69/0x90
[ 99.909054][ T6683] __kmalloc_noprof+0x1cd/0x510
[ 99.913896][ T6683] tomoyo_realpath_from_path+0xb9/0x720
[ 99.919430][ T6683] tomoyo_path_perm+0x276/0x460
[ 99.924262][ T6683] security_inode_getattr+0x116/0x290
[ 99.929619][ T6683] vfs_fstat+0x4b/0xd0
[ 99.933673][ T6683] vfs_fstatat+0xbc/0xf0
[ 99.937897][ T6683] __do_sys_newfstatat+0xa2/0x130
[ 99.942903][ T6683] do_syscall_64+0xcd/0x250
[ 99.947390][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.953281][ T6683]
[ 99.955598][ T6683] Memory state around the buggy address:
[ 99.961208][ T6683] ffff8880296df700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.969248][ T6683] ffff8880296df780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.977291][ T6683] >ffff8880296df800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 99.985336][ T6683] ^
[ 99.989389][ T6683] ffff8880296df880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 99.997432][ T6683] ffff8880296df900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 100.005474][ T6683] ==================================================================
[ 100.028036][ T6683] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.035258][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.0.616 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0
[ 100.045858][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 100.055917][ T6683] Call Trace:
[ 100.059180][ T6683]
[ 100.062095][ T6683] dump_stack_lvl+0x3d/0x1f0
[ 100.066672][ T6683] panic+0x71d/0x800
[ 100.070550][ T6683] ? __pfx_panic+0x10/0x10
[ 100.074953][ T6683] ? preempt_schedule_thunk+0x1a/0x30
[ 100.080322][ T6683] ? preempt_schedule_common+0x44/0xc0
[ 100.085769][ T6683] ? check_panic_on_warn+0x1f/0xb0
[ 100.090866][ T6683] check_panic_on_warn+0xab/0xb0
[ 100.095791][ T6683] end_report+0x117/0x180
[ 100.100116][ T6683] kasan_report+0xe9/0x110
[ 100.104525][ T6683] ? force_devcd_write+0x317/0x330
[ 100.109626][ T6683] ? force_devcd_write+0x317/0x330
[ 100.114728][ T6683] force_devcd_write+0x317/0x330
[ 100.119652][ T6683] ? __pfx_force_devcd_write+0x10/0x10
[ 100.125106][ T6683] ? __debugfs_file_get+0x1ff/0x850
[ 100.130306][ T6683] ? __pfx___debugfs_file_get+0x10/0x10
[ 100.135854][ T6683] ? rcu_is_watching+0x12/0xc0
[ 100.140614][ T6683] ? trace_lock_acquire+0x14e/0x1f0
[ 100.145812][ T6683] full_proxy_write+0x13c/0x200
[ 100.150665][ T6683] ? __pfx_full_proxy_write+0x10/0x10
[ 100.156038][ T6683] vfs_write+0x24c/0x1150
[ 100.160370][ T6683] ? __pfx_vfs_write+0x10/0x10
[ 100.165133][ T6683] ? do_futex+0x123/0x350
[ 100.169462][ T6683] ? __pfx_do_futex+0x10/0x10
[ 100.174144][ T6683] ? __x64_sys_futex+0x1e1/0x4c0
[ 100.179079][ T6683] ? __x64_sys_futex+0x1ea/0x4c0
[ 100.184022][ T6683] ksys_write+0x12b/0x250
[ 100.188353][ T6683] ? __pfx_ksys_write+0x10/0x10
[ 100.193207][ T6683] do_syscall_64+0xcd/0x250
[ 100.197709][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.203606][ T6683] RIP: 0033:0x7fc14298d0a9
[ 100.208015][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 100.227620][ T6683] RSP: 002b:00007fff43c45e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 100.236029][ T6683] RAX: ffffffffffffffda RBX: 00007fc142ba5fa0 RCX: 00007fc14298d0a9
[ 100.243995][ T6683] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 100.251960][ T6683] RBP: 00007fc142a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 100.259923][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.267886][ T6683] R13: 00007fc142ba5fa0 R14: 00007fc142ba5fa0 R15: 0000000000000003
[ 100.275855][ T6683]
[ 100.279089][ T6683] Kernel Offset: disabled
[ 100.283401][ T6683] Rebooting in 86400 seconds..