[ 97.016519][ T43] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts.
2025/07/04 09:38:16 ignoring optional flag "sandboxArg"="0"
2025/07/04 09:38:18 parsed 1 programs
[ 104.373911][ T5864] cgroup: Unknown subsys name 'net'
[ 104.508976][ T5864] cgroup: Unknown subsys name 'cpuset'
[ 104.518216][ T5864] cgroup: Unknown subsys name 'rlimit'
[ 106.318202][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 109.141318][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 110.793118][ T5894] chnl_net:caif_netlink_parms(): no params data found
[ 110.876584][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.884105][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.891359][ T5894] bridge_slave_0: entered allmulticast mode
[ 110.898830][ T5894] bridge_slave_0: entered promiscuous mode
[ 110.908403][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.915672][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.922821][ T5894] bridge_slave_1: entered allmulticast mode
[ 110.930528][ T5894] bridge_slave_1: entered promiscuous mode
[ 110.963233][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.975857][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.012363][ T5894] team0: Port device team_slave_0 added
[ 111.020396][ T5894] team0: Port device team_slave_1 added
[ 111.049155][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.056528][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.082522][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.096054][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.103031][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.129064][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.179928][ T5894] hsr_slave_0: entered promiscuous mode
[ 111.186497][ T5894] hsr_slave_1: entered promiscuous mode
[ 111.351315][ T5894] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.364169][ T5894] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.376351][ T5894] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.387110][ T5894] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.424255][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.431595][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.439523][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.446685][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.510585][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.533011][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.541810][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.560136][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.575294][ T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.582419][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.597486][ T143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.604688][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.827138][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.876572][ T5894] veth0_vlan: entered promiscuous mode
[ 111.888924][ T5894] veth1_vlan: entered promiscuous mode
[ 111.925861][ T5894] veth0_macvtap: entered promiscuous mode
[ 111.936907][ T5894] veth1_macvtap: entered promiscuous mode
[ 111.957277][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.972101][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.987406][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.998303][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.007101][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.015908][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.178813][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.247235][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.341616][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.424705][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.805486][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.813511][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.849594][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.858512][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.332345][ T5172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.340939][ T5172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.349062][ T5172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.358265][ T5172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.367658][ T5172] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.425493][ T60] bridge_slave_1: left allmulticast mode
[ 114.433290][ T60] bridge_slave_1: left promiscuous mode
[ 114.440863][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.455958][ T60] bridge_slave_0: left allmulticast mode
[ 114.461660][ T60] bridge_slave_0: left promiscuous mode
[ 114.468185][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
2025/07/04 09:38:32 executed programs: 0
[ 114.619242][ T5172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.631941][ T5172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.646492][ T5172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.655970][ T5172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.663735][ T5172] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.783736][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 114.796753][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 114.807064][ T60] bond0 (unregistering): Released all slaves
[ 114.938010][ T60] hsr_slave_0: left promiscuous mode
[ 114.946499][ T60] hsr_slave_1: left promiscuous mode
[ 114.952681][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.961659][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.972434][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.981110][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 115.004709][ T60] veth1_macvtap: left promiscuous mode
[ 115.010452][ T60] veth0_macvtap: left promiscuous mode
[ 115.023551][ T60] veth1_vlan: left promiscuous mode
[ 115.029309][ T60] veth0_vlan: left promiscuous mode
[ 115.517001][ T60] team0 (unregistering): Port device team_slave_1 removed
[ 115.555878][ T60] team0 (unregistering): Port device team_slave_0 removed
[ 115.980596][ T5958] chnl_net:caif_netlink_parms(): no params data found
[ 116.131479][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.140483][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.150207][ T5958] bridge_slave_0: entered allmulticast mode
[ 116.158647][ T5958] bridge_slave_0: entered promiscuous mode
[ 116.174720][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.182155][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.190735][ T5958] bridge_slave_1: entered allmulticast mode
[ 116.199930][ T5958] bridge_slave_1: entered promiscuous mode
[ 116.271162][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.291746][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.695373][ T51] Bluetooth: hci0: command tx timeout
[ 116.837428][ T5958] team0: Port device team_slave_0 added
[ 116.858997][ T5958] team0: Port device team_slave_1 added
[ 116.928993][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.936836][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.965224][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 117.003719][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 117.010806][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 117.037259][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 117.163758][ T5958] hsr_slave_0: entered promiscuous mode
[ 117.175227][ T5958] hsr_slave_1: entered promiscuous mode
[ 117.947341][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 117.961528][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 117.973943][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 117.990084][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.123998][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.156793][ T5958] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.173504][ T143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.180794][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.208679][ T143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.216049][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.547663][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.613933][ T5958] veth0_vlan: entered promiscuous mode
[ 118.630212][ T5958] veth1_vlan: entered promiscuous mode
[ 118.681470][ T5958] veth0_macvtap: entered promiscuous mode
[ 118.693737][ T5958] veth1_macvtap: entered promiscuous mode
[ 118.719786][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.738882][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.760041][ T5958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.770457][ T5958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.774531][ T51] Bluetooth: hci0: command tx timeout
[ 118.780736][ T5958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.794746][ T5958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.894445][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.902342][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.953072][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.965843][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/04 09:38:37 executed programs: 9
[ 120.854358][ T51] Bluetooth: hci0: command tx timeout
[ 122.945132][ T51] Bluetooth: hci0: command tx timeout
2025/07/04 09:38:42 executed programs: 163
2025/07/04 09:38:47 executed programs: 392
[ 134.334227][ T5172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 134.349276][ T5172] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 134.362474][ T5172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 134.372127][ T5172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 134.380647][ T5172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 134.488252][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.545436][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.600582][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.632811][ T6682] chnl_net:caif_netlink_parms(): no params data found
[ 134.663662][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.747018][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.754296][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.761476][ T6682] bridge_slave_0: entered allmulticast mode
[ 134.770106][ T6682] bridge_slave_0: entered promiscuous mode
[ 134.792924][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.800265][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.808246][ T6682] bridge_slave_1: entered allmulticast mode
[ 134.815829][ T6682] bridge_slave_1: entered promiscuous mode
[ 134.912948][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.922868][ T13] bridge_slave_1: left allmulticast mode
[ 134.929948][ T13] bridge_slave_1: left promiscuous mode
[ 134.935885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.947514][ T13] bridge_slave_0: left allmulticast mode
[ 134.953193][ T13] bridge_slave_0: left promiscuous mode
[ 134.959108][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 135.190485][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 135.201384][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 135.211720][ T13] bond0 (unregistering): Released all slaves
[ 135.229178][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 135.272679][ T6682] team0: Port device team_slave_0 added
[ 135.301106][ T6682] team0: Port device team_slave_1 added
[ 135.354466][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 135.361496][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 135.389476][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 135.415710][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 135.422736][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 135.449998][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.594538][ T6682] hsr_slave_0: entered promiscuous mode
[ 135.601355][ T6682] hsr_slave_1: entered promiscuous mode
[ 135.613387][ T6682] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 135.623815][ T6682] Cannot create hsr debugfs directory
[ 135.662316][ T13] hsr_slave_0: left promiscuous mode
[ 135.668912][ T13] hsr_slave_1: left promiscuous mode
[ 135.675935][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 135.683441][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 135.693085][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 135.700905][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 135.722744][ T13] veth1_macvtap: left promiscuous mode
[ 135.728529][ T13] veth0_macvtap: left promiscuous mode
[ 135.734807][ T13] veth1_vlan: left promiscuous mode
[ 135.740199][ T13] veth0_vlan: left promiscuous mode
[ 136.185042][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 136.213762][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 136.454491][ T5172] Bluetooth: hci1: command tx timeout
[ 137.063996][ T6682] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 137.076928][ T6682] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 137.088056][ T6682] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 137.102854][ T6682] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 137.206352][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 137.230602][ T6682] 8021q: adding VLAN 0 to HW filter on device team0
[ 137.245815][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.252979][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 137.277177][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.284408][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 137.581309][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 137.652815][ T6682] veth0_vlan: entered promiscuous mode
[ 137.670226][ T6682] veth1_vlan: entered promiscuous mode
[ 137.720593][ T6682] veth0_macvtap: entered promiscuous mode
[ 137.731531][ T6682] veth1_macvtap: entered promiscuous mode
[ 137.757398][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 137.772484][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 137.790415][ T6682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.799682][ T6682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.809259][ T6682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.818433][ T6682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.913366][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 137.922032][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/04 09:38:55 executed programs: 602
[ 137.965118][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 137.973002][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 137.982718][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 137.993276][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.062972][ T6743] ==================================================================
[ 138.071114][ T6743] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340
[ 138.079058][ T6743] Read of size 8 at addr ffff888025726000 by task syz.0.616/6743
[ 138.086800][ T6743]
[ 138.089159][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.0.616 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 138.089190][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 138.089208][ T6743] Call Trace:
[ 138.089216][ T6743]
[ 138.089227][ T6743] dump_stack_lvl+0x116/0x1f0
[ 138.089270][ T6743] print_report+0xcd/0x680
[ 138.089300][ T6743] ? __virt_addr_valid+0x81/0x610
[ 138.089326][ T6743] ? __phys_addr+0xe8/0x180
[ 138.089352][ T6743] ? force_devcd_write+0x312/0x340
[ 138.089373][ T6743] kasan_report+0xe0/0x110
[ 138.089398][ T6743] ? force_devcd_write+0x312/0x340
[ 138.089423][ T6743] force_devcd_write+0x312/0x340
[ 138.089445][ T6743] ? __pfx_force_devcd_write+0x10/0x10
[ 138.089468][ T6743] ? __debugfs_file_get+0x1fe/0x840
[ 138.089492][ T6743] ? __pfx___debugfs_file_get+0x10/0x10
[ 138.089525][ T6743] full_proxy_write+0x13c/0x200
[ 138.089550][ T6743] ? __pfx_full_proxy_write+0x10/0x10
[ 138.089573][ T6743] vfs_write+0x29d/0x1150
[ 138.089612][ T6743] ? __pfx_vfs_write+0x10/0x10
[ 138.089658][ T6743] ? do_futex+0x122/0x350
[ 138.089688][ T6743] ? __pfx_do_futex+0x10/0x10
[ 138.089717][ T6743] ? find_held_lock+0x2b/0x80
[ 138.089742][ T6743] ? handle_mm_fault+0x2ab/0xd10
[ 138.089776][ T6743] ? __x64_sys_futex+0x1e0/0x4c0
[ 138.089805][ T6743] ? __x64_sys_futex+0x1e9/0x4c0
[ 138.089837][ T6743] ksys_write+0x12a/0x250
[ 138.089871][ T6743] ? __pfx_ksys_write+0x10/0x10
[ 138.089910][ T6743] do_syscall_64+0xcd/0x490
[ 138.089948][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.089972][ T6743] RIP: 0033:0x7f8d06f8e929
[ 138.089994][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 138.090020][ T6743] RSP: 002b:00007fff1271b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 138.090042][ T6743] RAX: ffffffffffffffda RBX: 00007f8d071b5fa0 RCX: 00007f8d06f8e929
[ 138.090058][ T6743] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 138.090072][ T6743] RBP: 00007f8d07010b39 R08: 0000000000000000 R09: 0000000000000000
[ 138.090086][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 138.090099][ T6743] R13: 00007f8d071b5fa0 R14: 00007f8d071b5fa0 R15: 0000000000000003
[ 138.090122][ T6743]
[ 138.090129][ T6743]
[ 138.318180][ T6743] Allocated by task 5958:
[ 138.322521][ T6743] kasan_save_stack+0x33/0x60
[ 138.327246][ T6743] kasan_save_track+0x14/0x30
[ 138.331961][ T6743] __kasan_kmalloc+0xaa/0xb0
[ 138.336585][ T6743] vhci_open+0x4c/0x430
[ 138.340780][ T6743] misc_open+0x35a/0x420
[ 138.345062][ T6743] chrdev_open+0x231/0x6a0
[ 138.349499][ T6743] do_dentry_open+0x744/0x1c10
[ 138.354332][ T6743] vfs_open+0x82/0x3f0
[ 138.358427][ T6743] path_openat+0x1de4/0x2cb0
[ 138.363050][ T6743] do_filp_open+0x20b/0x470
[ 138.367594][ T6743] do_sys_openat2+0x11b/0x1d0
[ 138.372312][ T6743] __x64_sys_openat+0x174/0x210
[ 138.377197][ T6743] do_syscall_64+0xcd/0x490
[ 138.381756][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.387680][ T6743]
[ 138.390018][ T6743] Freed by task 5958:
[ 138.394011][ T6743] kasan_save_stack+0x33/0x60
[ 138.398733][ T6743] kasan_save_track+0x14/0x30
[ 138.403445][ T6743] kasan_save_free_info+0x3b/0x60
[ 138.408501][ T6743] __kasan_slab_free+0x51/0x70
[ 138.413287][ T6743] kfree+0x2b4/0x4d0
[ 138.417216][ T6743] vhci_release+0xbb/0xf0
[ 138.421581][ T6743] __fput+0x402/0xb70
[ 138.425605][ T6743] task_work_run+0x14d/0x240
[ 138.430241][ T6743] do_exit+0x86c/0x2bd0
[ 138.434433][ T6743] do_group_exit+0xd3/0x2a0
[ 138.438977][ T6743] get_signal+0x2673/0x26d0
[ 138.443508][ T6743] arch_do_signal_or_restart+0x8f/0x790
[ 138.449082][ T6743] exit_to_user_mode_loop+0x84/0x110
[ 138.454414][ T6743] do_syscall_64+0x3f6/0x490
[ 138.459044][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.464960][ T6743]
[ 138.467294][ T6743] The buggy address belongs to the object at ffff888025726000
[ 138.467294][ T6743] which belongs to the cache kmalloc-1k of size 1024
[ 138.481383][ T6743] The buggy address is located 0 bytes inside of
[ 138.481383][ T6743] freed 1024-byte region [ffff888025726000, ffff888025726400)
[ 138.495124][ T6743]
[ 138.497468][ T6743] The buggy address belongs to the physical page:
[ 138.503899][ T6743] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25720
[ 138.512690][ T6743] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 138.521211][ T6743] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 138.528783][ T6743] page_type: f5(slab)
[ 138.532788][ T6743] raw: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122
[ 138.541400][ T6743] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 138.550012][ T6743] head: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122
[ 138.558724][ T6743] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 138.567430][ T6743] head: 00fff00000000003 ffffea000095c801 00000000ffffffff 00000000ffffffff
[ 138.576149][ T6743] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 138.584836][ T6743] page dumped because: kasan: bad access detected
[ 138.591282][ T6743] page_owner tracks the page as allocated
[ 138.597008][ T6743] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5605, tgid 5605 (dhcpcd-run-hook), ts 69092117143, free_ts 69052522693
[ 138.618665][ T6743] post_alloc_hook+0x1c0/0x230
[ 138.623488][ T6743] get_page_from_freelist+0x1321/0x3890
[ 138.629071][ T6743] __alloc_frozen_pages_noprof+0x261/0x23f0
[ 138.635015][ T6743] alloc_pages_mpol+0x1fb/0x550
[ 138.639893][ T6743] new_slab+0x23b/0x330
[ 138.644076][ T6743] ___slab_alloc+0xd9c/0x1940
[ 138.648776][ T6743] __slab_alloc.constprop.0+0x56/0xb0
[ 138.654187][ T6743] __kmalloc_noprof+0x2f2/0x510
[ 138.659080][ T6743] load_elf_phdrs+0x102/0x210
[ 138.663786][ T6743] load_elf_binary+0x14c1/0x4f00
[ 138.668765][ T6743] bprm_execve+0x8c3/0x1650
[ 138.673303][ T6743] do_execveat_common.isra.0+0x4a5/0x610
[ 138.678976][ T6743] __x64_sys_execve+0x8e/0xb0
[ 138.683692][ T6743] do_syscall_64+0xcd/0x490
[ 138.688242][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.694164][ T6743] page last free pid 5601 tgid 5601 stack trace:
[ 138.700505][ T6743] __free_frozen_pages+0x7fe/0x1180
[ 138.705739][ T6743] __put_partials+0x16d/0x1c0
[ 138.710448][ T6743] qlist_free_all+0x4d/0x120
[ 138.715070][ T6743] kasan_quarantine_reduce+0x195/0x1e0
[ 138.720590][ T6743] __kasan_slab_alloc+0x69/0x90
[ 138.725464][ T6743] __kmalloc_noprof+0x1d4/0x510
[ 138.730422][ T6743] tomoyo_realpath_from_path+0xc2/0x6e0
[ 138.736012][ T6743] tomoyo_path_perm+0x274/0x460
[ 138.740889][ T6743] security_inode_getattr+0x116/0x290
[ 138.746327][ T6743] vfs_fstat+0x4b/0xe0
[ 138.750423][ T6743] __do_sys_newfstat+0x87/0x100
[ 138.755305][ T6743] do_syscall_64+0xcd/0x490
[ 138.759850][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.765786][ T6743]
[ 138.768127][ T6743] Memory state around the buggy address:
[ 138.773776][ T6743] ffff888025725f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 138.781856][ T6743] ffff888025725f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 138.789941][ T6743] >ffff888025726000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.798027][ T6743] ^
[ 138.802105][ T6743] ffff888025726080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.810202][ T6743] ffff888025726100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.818286][ T6743] ==================================================================
[ 138.860330][ T5172] Bluetooth: hci1: command tx timeout
[ 138.874437][ T6743] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 138.881695][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.0.616 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 138.893630][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 138.903726][ T6743] Call Trace:
[ 138.907051][ T6743]
[ 138.910023][ T6743] dump_stack_lvl+0x3d/0x1f0
[ 138.914683][ T6743] panic+0x71c/0x800
[ 138.918699][ T6743] ? __pfx_panic+0x10/0x10
[ 138.923173][ T6743] ? mark_held_locks+0x49/0x80
[ 138.927998][ T6743] ? preempt_schedule_thunk+0x16/0x30
[ 138.933427][ T6743] ? force_devcd_write+0x312/0x340
[ 138.938592][ T6743] ? preempt_schedule_common+0x44/0xc0
[ 138.944116][ T6743] ? check_panic_on_warn+0x1f/0xb0
[ 138.949294][ T6743] ? force_devcd_write+0x312/0x340
[ 138.954432][ T6743] check_panic_on_warn+0xab/0xb0
[ 138.959406][ T6743] end_report+0x107/0x170
[ 138.963855][ T6743] kasan_report+0xee/0x110
[ 138.968300][ T6743] ? force_devcd_write+0x312/0x340
[ 138.973441][ T6743] force_devcd_write+0x312/0x340
[ 138.978402][ T6743] ? __pfx_force_devcd_write+0x10/0x10
[ 138.983889][ T6743] ? __debugfs_file_get+0x1fe/0x840
[ 138.989116][ T6743] ? __pfx___debugfs_file_get+0x10/0x10
[ 138.994694][ T6743] full_proxy_write+0x13c/0x200
[ 138.999567][ T6743] ? __pfx_full_proxy_write+0x10/0x10
[ 139.004975][ T6743] vfs_write+0x29d/0x1150
[ 139.009352][ T6743] ? __pfx_vfs_write+0x10/0x10
[ 139.014153][ T6743] ? do_futex+0x122/0x350
[ 139.018517][ T6743] ? __pfx_do_futex+0x10/0x10
[ 139.023229][ T6743] ? find_held_lock+0x2b/0x80
[ 139.027939][ T6743] ? handle_mm_fault+0x2ab/0xd10
[ 139.032911][ T6743] ? __x64_sys_futex+0x1e0/0x4c0
[ 139.037880][ T6743] ? __x64_sys_futex+0x1e9/0x4c0
[ 139.042846][ T6743] ksys_write+0x12a/0x250
[ 139.047211][ T6743] ? __pfx_ksys_write+0x10/0x10
[ 139.052104][ T6743] do_syscall_64+0xcd/0x490
[ 139.056652][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.062568][ T6743] RIP: 0033:0x7f8d06f8e929
[ 139.067003][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 139.087079][ T6743] RSP: 002b:00007fff1271b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 139.095534][ T6743] RAX: ffffffffffffffda RBX: 00007f8d071b5fa0 RCX: 00007f8d06f8e929
[ 139.103535][ T6743] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 139.111800][ T6743] RBP: 00007f8d07010b39 R08: 0000000000000000 R09: 0000000000000000
[ 139.119830][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 139.127919][ T6743] R13: 00007f8d071b5fa0 R14: 00007f8d071b5fa0 R15: 0000000000000003
[ 139.135931][ T6743]
[ 139.139109][ T6743] Kernel Offset: disabled
[ 139.143444][ T6743] Rebooting in 86400 seconds..