Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts.
2025/02/09 17:33:47 ignoring optional flag "sandboxArg"="0"
2025/02/09 17:33:48 parsed 1 programs
[ 260.883749][ T5858] cgroup: Unknown subsys name 'net'
[ 260.996310][ T5858] cgroup: Unknown subsys name 'cpuset'
[ 261.004683][ T5858] cgroup: Unknown subsys name 'rlimit'
[ 262.380353][ T5858] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 265.040477][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 266.057439][ T5891] chnl_net:caif_netlink_parms(): no params data found
[ 266.126753][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 266.134455][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 266.141577][ T5891] bridge_slave_0: entered allmulticast mode
[ 266.148586][ T5891] bridge_slave_0: entered promiscuous mode
[ 266.158052][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 266.165262][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 266.172925][ T5891] bridge_slave_1: entered allmulticast mode
[ 266.180446][ T5891] bridge_slave_1: entered promiscuous mode
[ 266.203492][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 266.214360][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 266.238270][ T5891] team0: Port device team_slave_0 added
[ 266.247073][ T5891] team0: Port device team_slave_1 added
[ 266.282254][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 266.289225][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 266.316660][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 266.333499][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 266.340595][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 266.367487][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 266.402062][ T5891] hsr_slave_0: entered promiscuous mode
[ 266.408260][ T5891] hsr_slave_1: entered promiscuous mode
[ 266.517365][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 266.526749][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 266.536380][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 266.545961][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 266.568165][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 266.575337][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 266.583304][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 266.590423][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 266.636534][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[ 266.655894][ T277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 266.665936][ T277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 266.679993][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[ 266.692773][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 266.700000][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 266.713528][ T277] bridge0: port 2(bridge_slave_1) entered blocking state
[ 266.720628][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 266.838715][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 266.870599][ T5891] veth0_vlan: entered promiscuous mode
[ 266.881057][ T5891] veth1_vlan: entered promiscuous mode
[ 266.905247][ T5891] veth0_macvtap: entered promiscuous mode
[ 266.914247][ T5891] veth1_macvtap: entered promiscuous mode
[ 266.931947][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 266.947654][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 266.958436][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 266.967971][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 266.977325][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 266.987896][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 267.135886][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 267.187577][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 267.247727][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 267.329464][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 267.903171][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 267.911475][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 267.920285][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 267.928621][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 267.936961][ T5933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 267.944573][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 268.193726][ T5119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 268.201717][ T5119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 268.234756][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 268.243064][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/02/09 17:33:59 executed programs: 0
[ 269.398041][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 269.407320][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 269.416347][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 269.424499][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 269.432890][ T5933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 269.440198][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 269.548213][ T5966] chnl_net:caif_netlink_parms(): no params data found
[ 269.595456][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state
[ 269.602699][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 269.609842][ T5966] bridge_slave_0: entered allmulticast mode
[ 269.617091][ T5966] bridge_slave_0: entered promiscuous mode
[ 269.624792][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state
[ 269.633108][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[ 269.640671][ T5966] bridge_slave_1: entered allmulticast mode
[ 269.647512][ T5966] bridge_slave_1: entered promiscuous mode
[ 269.671993][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 269.683627][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 269.707947][ T5966] team0: Port device team_slave_0 added
[ 269.715367][ T5966] team0: Port device team_slave_1 added
[ 269.738050][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 269.745430][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 269.772487][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 269.784943][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 269.791992][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 269.818308][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 269.850930][ T5966] hsr_slave_0: entered promiscuous mode
[ 269.857565][ T5966] hsr_slave_1: entered promiscuous mode
[ 269.863779][ T5966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 269.871570][ T5966] Cannot create hsr debugfs directory
[ 270.033607][ T66] bridge_slave_1: left allmulticast mode
[ 270.042785][ T66] bridge_slave_1: left promiscuous mode
[ 270.050754][ T66] bridge0: port 2(bridge_slave_1) entered disabled state
[ 270.068785][ T66] bridge_slave_0: left allmulticast mode
[ 270.075037][ T66] bridge_slave_0: left promiscuous mode
[ 270.080888][ T66] bridge0: port 1(bridge_slave_0) entered disabled state
[ 270.444423][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 270.457307][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 270.468035][ T66] bond0 (unregistering): Released all slaves
[ 270.574032][ T66] hsr_slave_0: left promiscuous mode
[ 270.580074][ T66] hsr_slave_1: left promiscuous mode
[ 270.589853][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 270.597949][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 270.609022][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 270.616562][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 270.637402][ T66] veth1_macvtap: left promiscuous mode
[ 270.646070][ T66] veth0_macvtap: left promiscuous mode
[ 270.651725][ T66] veth1_vlan: left promiscuous mode
[ 270.658116][ T66] veth0_vlan: left promiscuous mode
[ 271.060310][ T66] team0 (unregistering): Port device team_slave_1 removed
[ 271.088545][ T66] team0 (unregistering): Port device team_slave_0 removed
[ 271.549440][ T5933] Bluetooth: hci0: command tx timeout
[ 271.553120][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 271.591876][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 271.602043][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 271.614096][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 271.750909][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0
[ 271.775215][ T5966] 8021q: adding VLAN 0 to HW filter on device team0
[ 271.790898][ T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 271.798090][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 271.838567][ T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 271.845756][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 272.386029][ T5966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 272.719341][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 272.828933][ T5966] veth0_vlan: entered promiscuous mode
[ 272.904124][ T5966] veth1_vlan: entered promiscuous mode
[ 272.940083][ T5966] veth0_macvtap: entered promiscuous mode
[ 272.950894][ T5966] veth1_macvtap: entered promiscuous mode
[ 272.987961][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 273.007871][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 273.021118][ T5966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 273.034757][ T5966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 273.044292][ T5966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 273.053219][ T5966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 273.135658][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 273.162781][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 273.198807][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 273.212106][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 273.612395][ T5933] Bluetooth: hci0: command tx timeout
2025/02/09 17:34:04 executed programs: 38
[ 275.702390][ T5933] Bluetooth: hci0: command tx timeout
[ 277.772771][ T5933] Bluetooth: hci0: command tx timeout
2025/02/09 17:34:09 executed programs: 299
2025/02/09 17:34:14 executed programs: 570
[ 285.050733][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 285.058976][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 285.068276][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 285.076793][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 285.086047][ T5149] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 285.093577][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 285.187317][ T6681] chnl_net:caif_netlink_parms(): no params data found
[ 285.216890][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 285.266728][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 285.286385][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 285.294059][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 285.301189][ T6681] bridge_slave_0: entered allmulticast mode
[ 285.308295][ T6681] bridge_slave_0: entered promiscuous mode
[ 285.315783][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state
[ 285.325491][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 285.333843][ T6681] bridge_slave_1: entered allmulticast mode
[ 285.340376][ T6681] bridge_slave_1: entered promiscuous mode
[ 285.356452][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 285.386162][ T6681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 285.397664][ T6681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 285.424826][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 285.445159][ T6681] team0: Port device team_slave_0 added
[ 285.452950][ T6681] team0: Port device team_slave_1 added
[ 285.477128][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 285.484205][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 285.510501][ T6681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 285.523196][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 285.530163][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 285.556128][ T6681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 285.630709][ T52] bridge_slave_1: left allmulticast mode
[ 285.638046][ T52] bridge_slave_1: left promiscuous mode
[ 285.646383][ T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 285.655669][ T52] bridge_slave_0: left allmulticast mode
[ 285.661310][ T52] bridge_slave_0: left promiscuous mode
[ 285.667455][ T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 285.887004][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 285.897571][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 285.908046][ T52] bond0 (unregistering): Released all slaves
[ 285.919471][ T6681] hsr_slave_0: entered promiscuous mode
[ 285.926020][ T6681] hsr_slave_1: entered promiscuous mode
[ 286.167273][ T52] hsr_slave_0: left promiscuous mode
[ 286.174170][ T52] hsr_slave_1: left promiscuous mode
[ 286.180031][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 286.190380][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 286.198578][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 286.209134][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 286.236727][ T52] veth1_macvtap: left promiscuous mode
[ 286.243252][ T52] veth0_macvtap: left promiscuous mode
[ 286.248893][ T52] veth1_vlan: left promiscuous mode
[ 286.254956][ T52] veth0_vlan: left promiscuous mode
[ 286.565354][ T52] team0 (unregistering): Port device team_slave_1 removed
[ 286.600335][ T52] team0 (unregistering): Port device team_slave_0 removed
[ 287.051568][ T6681] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 287.081413][ T6681] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 287.099159][ T6681] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 287.124342][ T6681] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 287.132460][ T5933] Bluetooth: hci1: command tx timeout
[ 287.226949][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0
[ 287.248247][ T6681] 8021q: adding VLAN 0 to HW filter on device team0
[ 287.260132][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state
[ 287.267968][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 287.285082][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 287.292195][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 287.416968][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 287.446166][ T6681] veth0_vlan: entered promiscuous mode
[ 287.455681][ T6681] veth1_vlan: entered promiscuous mode
[ 287.477727][ T6681] veth0_macvtap: entered promiscuous mode
[ 287.486817][ T6681] veth1_macvtap: entered promiscuous mode
[ 287.500105][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 287.511739][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 287.523670][ T6681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 287.533570][ T6681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 287.542410][ T6681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 287.551214][ T6681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 287.599517][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 287.611500][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 287.631629][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 287.640917][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 287.693461][ T6725] ==================================================================
[ 287.701562][ T6725] BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350
[ 287.709473][ T6725] Read of size 8 at addr ffff888033eb5800 by task syz.0.616/6725
[ 287.717197][ T6725]
[ 287.719520][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.0.616 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0
[ 287.719536][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 287.719550][ T6725] Call Trace:
[ 287.719554][ T6725]
[ 287.719562][ T6725] dump_stack_lvl+0x116/0x1f0
[ 287.719589][ T6725] print_report+0xc3/0x620
[ 287.719605][ T6725] ? __virt_addr_valid+0x5e/0x590
[ 287.719617][ T6725] ? __phys_addr+0xc6/0x150
[ 287.719628][ T6725] kasan_report+0xd9/0x110
[ 287.719642][ T6725] ? force_devcd_write+0x31f/0x350
[ 287.719658][ T6725] ? force_devcd_write+0x31f/0x350
[ 287.719674][ T6725] force_devcd_write+0x31f/0x350
[ 287.719689][ T6725] ? __pfx_force_devcd_write+0x10/0x10
[ 287.719704][ T6725] ? __debugfs_file_get+0x1ff/0x850
[ 287.719724][ T6725] ? __pfx___debugfs_file_get+0x10/0x10
[ 287.719743][ T6725] ? rcu_is_watching+0x12/0xc0
[ 287.719761][ T6725] ? trace_lock_acquire+0x14e/0x1f0
[ 287.719774][ T6725] full_proxy_write+0x13c/0x200
[ 287.719798][ T6725] ? __pfx_full_proxy_write+0x10/0x10
[ 287.719817][ T6725] vfs_write+0x24c/0x1150
[ 287.719831][ T6725] ? __pfx_vfs_write+0x10/0x10
[ 287.719842][ T6725] ? do_futex+0x123/0x350
[ 287.719856][ T6725] ? __pfx_do_futex+0x10/0x10
[ 287.719869][ T6725] ? __x64_sys_futex+0x1e1/0x4c0
[ 287.719881][ T6725] ? __x64_sys_futex+0x1ea/0x4c0
[ 287.719894][ T6725] ksys_write+0x12b/0x250
[ 287.719906][ T6725] ? __pfx_ksys_write+0x10/0x10
[ 287.719919][ T6725] do_syscall_64+0xcd/0x250
[ 287.719932][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 287.719950][ T6725] RIP: 0033:0x7f377bb8cde9
[ 287.719961][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 287.719972][ T6725] RSP: 002b:00007ffd04e89158 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 287.719984][ T6725] RAX: ffffffffffffffda RBX: 00007f377bda5fa0 RCX: 00007f377bb8cde9
[ 287.719993][ T6725] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 287.720000][ T6725] RBP: 00007f377bc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 287.720007][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 287.720014][ T6725] R13: 00007f377bda5fa0 R14: 00007f377bda5fa0 R15: 0000000000000003
[ 287.720025][ T6725]
[ 287.720029][ T6725]
[ 287.945677][ T6725] Allocated by task 5966:
[ 287.949992][ T6725] kasan_save_stack+0x33/0x60
[ 287.954678][ T6725] kasan_save_track+0x14/0x30
[ 287.959367][ T6725] __kasan_kmalloc+0xaa/0xb0
[ 287.964044][ T6725] vhci_open+0x4c/0x430
[ 287.968207][ T6725] misc_open+0x35a/0x420
[ 287.972461][ T6725] chrdev_open+0x237/0x6a0
[ 287.976886][ T6725] do_dentry_open+0x735/0x1c40
[ 287.981728][ T6725] vfs_open+0x82/0x3f0
[ 287.985793][ T6725] path_openat+0x1e88/0x2d80
[ 287.990374][ T6725] do_filp_open+0x20c/0x470
[ 287.994868][ T6725] do_sys_openat2+0x17a/0x1e0
[ 287.999542][ T6725] __x64_sys_openat+0x175/0x210
[ 288.004391][ T6725] do_syscall_64+0xcd/0x250
[ 288.008885][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 288.014780][ T6725]
[ 288.017093][ T6725] Freed by task 5966:
[ 288.021058][ T6725] kasan_save_stack+0x33/0x60
[ 288.025748][ T6725] kasan_save_track+0x14/0x30
[ 288.030524][ T6725] kasan_save_free_info+0x3b/0x60
[ 288.035561][ T6725] __kasan_slab_free+0x51/0x70
[ 288.040327][ T6725] kfree+0x2c4/0x4d0
[ 288.044219][ T6725] vhci_release+0xbb/0xf0
[ 288.048555][ T6725] __fput+0x3ff/0xb70
[ 288.052548][ T6725] task_work_run+0x14e/0x250
[ 288.057137][ T6725] do_exit+0xad8/0x2d70
[ 288.061282][ T6725] do_group_exit+0xd3/0x2a0
[ 288.065778][ T6725] get_signal+0x2576/0x2610
[ 288.070279][ T6725] arch_do_signal_or_restart+0x90/0x7e0
[ 288.075819][ T6725] syscall_exit_to_user_mode+0x150/0x2a0
[ 288.081451][ T6725] do_syscall_64+0xda/0x250
[ 288.085947][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 288.091841][ T6725]
[ 288.094152][ T6725] The buggy address belongs to the object at ffff888033eb5800
[ 288.094152][ T6725] which belongs to the cache kmalloc-1k of size 1024
[ 288.108194][ T6725] The buggy address is located 0 bytes inside of
[ 288.108194][ T6725] freed 1024-byte region [ffff888033eb5800, ffff888033eb5c00)
[ 288.121893][ T6725]
[ 288.124210][ T6725] The buggy address belongs to the physical page:
[ 288.130616][ T6725] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33eb0
[ 288.139363][ T6725] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 288.147852][ T6725] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 288.155394][ T6725] page_type: f5(slab)
[ 288.159377][ T6725] raw: 00fff00000000040 ffff88801b041dc0 ffffea000181ea00 dead000000000002
[ 288.167951][ T6725] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 288.176531][ T6725] head: 00fff00000000040 ffff88801b041dc0 ffffea000181ea00 dead000000000002
[ 288.185194][ T6725] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 288.193855][ T6725] head: 00fff00000000003 ffffea0000cfac01 ffffffffffffffff 0000000000000000
[ 288.202516][ T6725] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 288.211173][ T6725] page dumped because: kasan: bad access detected
[ 288.217760][ T6725] page_owner tracks the page as allocated
[ 288.223458][ T6725] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5618, tgid 5618 (dhcpcd), ts 48235078577, free_ts 48204639393
[ 288.244306][ T6725] post_alloc_hook+0x181/0x1b0
[ 288.249072][ T6725] get_page_from_freelist+0xfce/0x2f80
[ 288.254528][ T6725] __alloc_frozen_pages_noprof+0x221/0x2470
[ 288.260418][ T6725] alloc_pages_mpol+0x1fc/0x540
[ 288.265271][ T6725] new_slab+0x23d/0x330
[ 288.269418][ T6725] ___slab_alloc+0xbfa/0x1600
[ 288.274091][ T6725] __slab_alloc.constprop.0+0x56/0xb0
[ 288.279458][ T6725] __kmalloc_noprof+0x2de/0x4f0
[ 288.284304][ T6725] load_elf_phdrs+0x103/0x210
[ 288.288981][ T6725] load_elf_binary+0x1518/0x4ff0
[ 288.293917][ T6725] bprm_execve+0x8dd/0x16d0
[ 288.298409][ T6725] do_execveat_common.isra.0+0x4a2/0x610
[ 288.304032][ T6725] __x64_sys_execve+0x8c/0xb0
[ 288.308725][ T6725] do_syscall_64+0xcd/0x250
[ 288.313224][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 288.319121][ T6725] page last free pid 5613 tgid 5613 stack trace:
[ 288.325433][ T6725] free_frozen_pages+0x6db/0xfb0
[ 288.330365][ T6725] __put_partials+0x14c/0x170
[ 288.335040][ T6725] qlist_free_all+0x4e/0x120
[ 288.339623][ T6725] kasan_quarantine_reduce+0x195/0x1e0
[ 288.345074][ T6725] __kasan_slab_alloc+0x69/0x90
[ 288.349920][ T6725] kmem_cache_alloc_node_noprof+0x1ca/0x3b0
[ 288.355807][ T6725] copy_process+0x49c/0x6f20
[ 288.360395][ T6725] kernel_clone+0xfd/0x960
[ 288.364810][ T6725] __do_sys_clone+0xba/0x100
[ 288.369404][ T6725] do_syscall_64+0xcd/0x250
[ 288.373902][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 288.379808][ T6725]
[ 288.382123][ T6725] Memory state around the buggy address:
[ 288.387746][ T6725] ffff888033eb5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 288.395800][ T6725] ffff888033eb5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 288.403851][ T6725] >ffff888033eb5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 288.411900][ T6725] ^
[ 288.415953][ T6725] ffff888033eb5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 288.424004][ T6725] ffff888033eb5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 288.432052][ T6725] ==================================================================
[ 288.451222][ T6725] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 288.458466][ T6725] CPU: 1 UID: 0 PID: 6725 Comm: syz.0.616 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0
[ 288.469067][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 288.479117][ T6725] Call Trace:
[ 288.482387][ T6725]
[ 288.485309][ T6725] dump_stack_lvl+0x3d/0x1f0
[ 288.489905][ T6725] panic+0x71d/0x800
[ 288.493797][ T6725] ? __pfx_panic+0x10/0x10
[ 288.498208][ T6725] ? preempt_schedule_thunk+0x1a/0x30
[ 288.503578][ T6725] ? preempt_schedule_common+0x44/0xc0
[ 288.509037][ T6725] ? check_panic_on_warn+0x1f/0xb0
[ 288.514140][ T6725] check_panic_on_warn+0xab/0xb0
[ 288.519069][ T6725] end_report+0x117/0x180
[ 288.523394][ T6725] kasan_report+0xe9/0x110
[ 288.527817][ T6725] ? force_devcd_write+0x31f/0x350
[ 288.532924][ T6725] ? force_devcd_write+0x31f/0x350
[ 288.538031][ T6725] force_devcd_write+0x31f/0x350
[ 288.542965][ T6725] ? __pfx_force_devcd_write+0x10/0x10
[ 288.548420][ T6725] ? __debugfs_file_get+0x1ff/0x850
[ 288.553624][ T6725] ? __pfx___debugfs_file_get+0x10/0x10
[ 288.559169][ T6725] ? rcu_is_watching+0x12/0xc0
[ 288.563933][ T6725] ? trace_lock_acquire+0x14e/0x1f0
[ 288.569127][ T6725] full_proxy_write+0x13c/0x200
[ 288.573998][ T6725] ? __pfx_full_proxy_write+0x10/0x10
[ 288.579370][ T6725] vfs_write+0x24c/0x1150
[ 288.583699][ T6725] ? __pfx_vfs_write+0x10/0x10
[ 288.588454][ T6725] ? do_futex+0x123/0x350
[ 288.592781][ T6725] ? __pfx_do_futex+0x10/0x10
[ 288.597474][ T6725] ? __x64_sys_futex+0x1e1/0x4c0
[ 288.602404][ T6725] ? __x64_sys_futex+0x1ea/0x4c0
[ 288.607336][ T6725] ksys_write+0x12b/0x250
[ 288.611662][ T6725] ? __pfx_ksys_write+0x10/0x10
[ 288.616509][ T6725] do_syscall_64+0xcd/0x250
[ 288.621007][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 288.626903][ T6725] RIP: 0033:0x7f377bb8cde9
[ 288.631331][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 288.650933][ T6725] RSP: 002b:00007ffd04e89158 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 288.659340][ T6725] RAX: ffffffffffffffda RBX: 00007f377bda5fa0 RCX: 00007f377bb8cde9
[ 288.667305][ T6725] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 288.675527][ T6725] RBP: 00007f377bc0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 288.683491][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 288.691452][ T6725] R13: 00007f377bda5fa0 R14: 00007f377bda5fa0 R15: 0000000000000003
[ 288.699432][ T6725]
[ 288.702724][ T6725] Kernel Offset: disabled
[ 288.707041][ T6725] Rebooting in 86400 seconds..