Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts.
2025/01/06 11:32:24 ignoring optional flag "sandboxArg"="0"
2025/01/06 11:32:25 parsed 1 programs
[ 70.693046][ T5828] cgroup: Unknown subsys name 'net'
[ 70.857068][ T5828] cgroup: Unknown subsys name 'cpuset'
[ 70.865517][ T5828] cgroup: Unknown subsys name 'rlimit'
[ 71.735967][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.742451][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.232767][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.428499][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 75.562751][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.572938][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.581608][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.591667][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.600685][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.608053][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.895669][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 76.950310][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.957559][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.967081][ T5886] bridge_slave_0: entered allmulticast mode
[ 76.974271][ T5886] bridge_slave_0: entered promiscuous mode
[ 76.986543][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.993934][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.001047][ T5886] bridge_slave_1: entered allmulticast mode
[ 77.008483][ T5886] bridge_slave_1: entered promiscuous mode
[ 77.028720][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.039492][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.071445][ T5886] team0: Port device team_slave_0 added
[ 77.080194][ T5886] team0: Port device team_slave_1 added
[ 77.102951][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.110019][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.136100][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.149082][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.156108][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.183174][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.212857][ T5886] hsr_slave_0: entered promiscuous mode
[ 77.220337][ T5886] hsr_slave_1: entered promiscuous mode
[ 77.305225][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.315597][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.324928][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.334133][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.356031][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.363165][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.371115][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.378226][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.425449][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.441385][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.450702][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.465987][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.479515][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.486759][ T4652] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.500873][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.508005][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.628224][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.659982][ T5886] veth0_vlan: entered promiscuous mode
[ 77.671819][ T5886] veth1_vlan: entered promiscuous mode
[ 77.694879][ T5886] veth0_macvtap: entered promiscuous mode
[ 77.704545][ T5886] veth1_macvtap: entered promiscuous mode
[ 77.722098][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.738890][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.749907][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.759241][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.768226][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.777278][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.899243][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.960004][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.057796][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.121215][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.136506][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.144636][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.169836][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.178808][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/01/06 11:32:36 executed programs: 0
[ 78.792809][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 78.801688][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.810598][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.820593][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.828410][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 78.836033][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.940573][ T5921] chnl_net:caif_netlink_parms(): no params data found
[ 78.995374][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.002510][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.009853][ T5921] bridge_slave_0: entered allmulticast mode
[ 79.017159][ T5921] bridge_slave_0: entered promiscuous mode
[ 79.025567][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.032685][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.040156][ T5921] bridge_slave_1: entered allmulticast mode
[ 79.046936][ T5921] bridge_slave_1: entered promiscuous mode
[ 79.075263][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.086759][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.118037][ T5921] team0: Port device team_slave_0 added
[ 79.126983][ T5921] team0: Port device team_slave_1 added
[ 79.147845][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.155322][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.182470][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.196222][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.203976][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.230082][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.268771][ T5921] hsr_slave_0: entered promiscuous mode
[ 79.276139][ T5921] hsr_slave_1: entered promiscuous mode
[ 79.282159][ T5921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 79.290018][ T5921] Cannot create hsr debugfs directory
[ 80.853910][ T5864] Bluetooth: hci0: command tx timeout
[ 81.412831][ T11] bridge_slave_1: left allmulticast mode
[ 81.421276][ T11] bridge_slave_1: left promiscuous mode
[ 81.429555][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.458583][ T11] bridge_slave_0: left allmulticast mode
[ 81.464555][ T11] bridge_slave_0: left promiscuous mode
[ 81.470293][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.798465][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 81.809266][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 81.820620][ T11] bond0 (unregistering): Released all slaves
[ 81.910249][ T11] hsr_slave_0: left promiscuous mode
[ 81.918871][ T11] hsr_slave_1: left promiscuous mode
[ 81.925292][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 81.932773][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 81.942761][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 81.956146][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 81.980461][ T11] veth1_macvtap: left promiscuous mode
[ 81.984995][ T9] cfg80211: failed to load regulatory.db
[ 81.994378][ T11] veth0_macvtap: left promiscuous mode
[ 82.000617][ T11] veth1_vlan: left promiscuous mode
[ 82.010121][ T11] veth0_vlan: left promiscuous mode
[ 82.664828][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 82.690717][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 82.935495][ T5864] Bluetooth: hci0: command tx timeout
[ 83.047540][ T5921] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.058598][ T5921] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.085120][ T5921] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.096005][ T5921] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.191618][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.232836][ T5921] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.254773][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.261941][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.298728][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.305899][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.498330][ T5921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 83.827853][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.892954][ T5921] veth0_vlan: entered promiscuous mode
[ 83.908315][ T5921] veth1_vlan: entered promiscuous mode
[ 83.950946][ T5921] veth0_macvtap: entered promiscuous mode
[ 83.985231][ T5921] veth1_macvtap: entered promiscuous mode
[ 84.022906][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.046890][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.062351][ T5921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.073391][ T5921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.082140][ T5921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.092470][ T5921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.165730][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.179790][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/01/06 11:32:41 executed programs: 2
[ 84.211511][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.220203][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.016237][ T5864] Bluetooth: hci0: command tx timeout
[ 87.094755][ T5864] Bluetooth: hci0: command tx timeout
2025/01/06 11:32:46 executed programs: 234
2025/01/06 11:32:51 executed programs: 477
[ 96.953536][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 96.963587][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 96.973152][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 96.982452][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 96.990149][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 96.998465][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 97.089427][ T6608] chnl_net:caif_netlink_parms(): no params data found
[ 97.137975][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.165095][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.172267][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.180684][ T6608] bridge_slave_0: entered allmulticast mode
[ 97.188474][ T6608] bridge_slave_0: entered promiscuous mode
[ 97.204989][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.217971][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.225332][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.232505][ T6608] bridge_slave_1: entered allmulticast mode
[ 97.239399][ T6608] bridge_slave_1: entered promiscuous mode
[ 97.253561][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.280974][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.292331][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.320858][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.345743][ T6608] team0: Port device team_slave_0 added
[ 97.353453][ T6608] team0: Port device team_slave_1 added
[ 97.370578][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.377861][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.403823][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.416945][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.423987][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.449943][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.487175][ T6608] hsr_slave_0: entered promiscuous mode
[ 97.493832][ T6608] hsr_slave_1: entered promiscuous mode
[ 97.579100][ T11] bridge_slave_1: left allmulticast mode
[ 97.585454][ T11] bridge_slave_1: left promiscuous mode
[ 97.591117][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.600590][ T11] bridge_slave_0: left allmulticast mode
[ 97.607488][ T11] bridge_slave_0: left promiscuous mode
[ 97.613156][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.845828][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.856553][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.867793][ T11] bond0 (unregistering): Released all slaves
[ 98.145796][ T11] hsr_slave_0: left promiscuous mode
[ 98.151729][ T11] hsr_slave_1: left promiscuous mode
[ 98.160215][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 98.168442][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 98.176692][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 98.184980][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 98.205743][ T11] veth1_macvtap: left promiscuous mode
[ 98.211311][ T11] veth0_macvtap: left promiscuous mode
[ 98.218340][ T11] veth1_vlan: left promiscuous mode
[ 98.223771][ T11] veth0_vlan: left promiscuous mode
[ 98.536119][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 98.564277][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 98.953643][ T6608] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.969182][ T6608] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.979993][ T6608] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.994760][ T6608] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.088049][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.095043][ T5864] Bluetooth: hci1: command tx timeout
[ 99.126815][ T6608] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.150218][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.157374][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.169281][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.176462][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.216885][ T6608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 99.319847][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.348746][ T6608] veth0_vlan: entered promiscuous mode
[ 99.360207][ T6608] veth1_vlan: entered promiscuous mode
[ 99.380342][ T6608] veth0_macvtap: entered promiscuous mode
[ 99.389262][ T6608] veth1_macvtap: entered promiscuous mode
[ 99.401882][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.415490][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.427569][ T6608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.436564][ T6608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.446478][ T6608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.456083][ T6608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/01/06 11:32:56 executed programs: 602
[ 99.506565][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.519601][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.540391][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.548320][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.586057][ T6649] ==================================================================
[ 99.594162][ T6649] BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350
[ 99.602049][ T6649] Read of size 8 at addr ffff888012f68800 by task syz.0.616/6649
[ 99.609751][ T6649]
[ 99.612081][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.0.616 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[ 99.622654][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 99.632710][ T6649] Call Trace:
[ 99.635980][ T6649]
[ 99.638898][ T6649] dump_stack_lvl+0x116/0x1f0
[ 99.643583][ T6649] print_report+0xc3/0x620
[ 99.647996][ T6649] ? __virt_addr_valid+0x5e/0x590
[ 99.653011][ T6649] ? __phys_addr+0xc6/0x150
[ 99.657539][ T6649] kasan_report+0xd9/0x110
[ 99.661954][ T6649] ? force_devcd_write+0x31f/0x350
[ 99.667056][ T6649] ? force_devcd_write+0x31f/0x350
[ 99.672178][ T6649] force_devcd_write+0x31f/0x350
[ 99.677126][ T6649] ? __pfx_force_devcd_write+0x10/0x10
[ 99.682575][ T6649] ? debugfs_file_get+0x21c/0x5c0
[ 99.687602][ T6649] ? __pfx_debugfs_file_get+0x10/0x10
[ 99.692986][ T6649] ? rcu_is_watching+0x12/0xc0
[ 99.697755][ T6649] ? trace_lock_acquire+0x14e/0x1f0
[ 99.703045][ T6649] full_proxy_write+0xfb/0x1b0
[ 99.707814][ T6649] ? __pfx_full_proxy_write+0x10/0x10
[ 99.713190][ T6649] vfs_write+0x24c/0x1150
[ 99.717528][ T6649] ? __pfx_vfs_write+0x10/0x10
[ 99.722290][ T6649] ? do_futex+0x123/0x350
[ 99.726625][ T6649] ? __pfx_do_futex+0x10/0x10
[ 99.731309][ T6649] ? __x64_sys_futex+0x1e1/0x4c0
[ 99.736262][ T6649] ? __x64_sys_futex+0x1ea/0x4c0
[ 99.741203][ T6649] ksys_write+0x12b/0x250
[ 99.745555][ T6649] ? __pfx_ksys_write+0x10/0x10
[ 99.750419][ T6649] do_syscall_64+0xcd/0x250
[ 99.754938][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.760851][ T6649] RIP: 0033:0x7f9ad9f85d29
[ 99.765271][ T6649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.784894][ T6649] RSP: 002b:00007fff2b4c2db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.793310][ T6649] RAX: ffffffffffffffda RBX: 00007f9ada175fa0 RCX: 00007f9ad9f85d29
[ 99.801279][ T6649] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 99.809245][ T6649] RBP: 00007f9ada001b08 R08: 0000000000000000 R09: 0000000000000000
[ 99.817212][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.825179][ T6649] R13: 00007f9ada175fa0 R14: 00007f9ada175fa0 R15: 00000000000018c7
[ 99.833151][ T6649]
[ 99.836165][ T6649]
[ 99.838481][ T6649] Allocated by task 5921:
[ 99.842803][ T6649] kasan_save_stack+0x33/0x60
[ 99.847484][ T6649] kasan_save_track+0x14/0x30
[ 99.852168][ T6649] __kasan_kmalloc+0xaa/0xb0
[ 99.856759][ T6649] vhci_open+0x4c/0x430
[ 99.860916][ T6649] misc_open+0x35a/0x420
[ 99.865158][ T6649] chrdev_open+0x237/0x6a0
[ 99.869578][ T6649] do_dentry_open+0xf59/0x1ea0
[ 99.874445][ T6649] vfs_open+0x82/0x3f0
[ 99.878528][ T6649] path_openat+0x1e6a/0x2d60
[ 99.883132][ T6649] do_filp_open+0x20c/0x470
[ 99.887648][ T6649] do_sys_openat2+0x17a/0x1e0
[ 99.892336][ T6649] __x64_sys_openat+0x175/0x210
[ 99.897193][ T6649] do_syscall_64+0xcd/0x250
[ 99.901696][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.907590][ T6649]
[ 99.909909][ T6649] Freed by task 5921:
[ 99.913879][ T6649] kasan_save_stack+0x33/0x60
[ 99.918581][ T6649] kasan_save_track+0x14/0x30
[ 99.923272][ T6649] kasan_save_free_info+0x3b/0x60
[ 99.928300][ T6649] __kasan_slab_free+0x51/0x70
[ 99.933078][ T6649] kfree+0x14f/0x4b0
[ 99.936975][ T6649] vhci_release+0xbb/0xf0
[ 99.941302][ T6649] __fput+0x3f8/0xb60
[ 99.945290][ T6649] task_work_run+0x14e/0x250
[ 99.949919][ T6649] do_exit+0xad8/0x2d70
[ 99.954082][ T6649] do_group_exit+0xd3/0x2a0
[ 99.958597][ T6649] get_signal+0x2576/0x2610
[ 99.963105][ T6649] arch_do_signal_or_restart+0x90/0x7e0
[ 99.968659][ T6649] syscall_exit_to_user_mode+0x150/0x2a0
[ 99.974295][ T6649] do_syscall_64+0xda/0x250
[ 99.978802][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.984870][ T6649]
[ 99.987183][ T6649] The buggy address belongs to the object at ffff888012f68800
[ 99.987183][ T6649] which belongs to the cache kmalloc-1k of size 1024
[ 100.001256][ T6649] The buggy address is located 0 bytes inside of
[ 100.001256][ T6649] freed 1024-byte region [ffff888012f68800, ffff888012f68c00)
[ 100.014989][ T6649]
[ 100.017312][ T6649] The buggy address belongs to the physical page:
[ 100.023724][ T6649] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f68
[ 100.032484][ T6649] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 100.040979][ T6649] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 100.048517][ T6649] page_type: f5(slab)
[ 100.052499][ T6649] raw: 00fff00000000040 ffff88801ac41dc0 ffffea0001f28c00 dead000000000002
[ 100.061079][ T6649] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[ 100.069665][ T6649] head: 00fff00000000040 ffff88801ac41dc0 ffffea0001f28c00 dead000000000002
[ 100.078423][ T6649] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[ 100.087089][ T6649] head: 00fff00000000003 ffffea00004bda01 ffffffffffffffff 0000000000000000
[ 100.095756][ T6649] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 100.104412][ T6649] page dumped because: kasan: bad access detected
[ 100.110822][ T6649] page_owner tracks the page as allocated
[ 100.116524][ T6649] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1090, tgid 1090 (kworker/u8:5), ts 78783741408, free_ts 78782055239
[ 100.135809][ T6649] post_alloc_hook+0x2d1/0x350
[ 100.140585][ T6649] get_page_from_freelist+0xfce/0x2f80
[ 100.146043][ T6649] __alloc_pages_noprof+0x223/0x25b0
[ 100.151335][ T6649] alloc_pages_mpol_noprof+0x2c9/0x610
[ 100.156800][ T6649] new_slab+0x2c9/0x410
[ 100.160953][ T6649] ___slab_alloc+0xce2/0x1650
[ 100.165626][ T6649] __slab_alloc.constprop.0+0x56/0xb0
[ 100.170996][ T6649] __kmalloc_noprof+0x2de/0x4f0
[ 100.175849][ T6649] ___neigh_create+0x1530/0x2990
[ 100.180796][ T6649] ip6_finish_output2+0x111b/0x2070
[ 100.185996][ T6649] ip6_finish_output+0x3f9/0x1360
[ 100.191021][ T6649] ip6_output+0x1f8/0x540
[ 100.195350][ T6649] ndisc_send_skb+0xa69/0x1c50
[ 100.200115][ T6649] ndisc_send_rs+0x129/0x670
[ 100.204704][ T6649] addrconf_dad_completed+0x4a1/0x1060
[ 100.210161][ T6649] addrconf_dad_work+0x7fb/0x14d0
[ 100.215183][ T6649] page last free pid 1090 tgid 1090 stack trace:
[ 100.221499][ T6649] free_unref_page+0x661/0x1080
[ 100.226358][ T6649] __put_partials+0x14c/0x170
[ 100.231035][ T6649] qlist_free_all+0x4e/0x120
[ 100.235627][ T6649] kasan_quarantine_reduce+0x195/0x1e0
[ 100.241087][ T6649] __kasan_slab_alloc+0x69/0x90
[ 100.245941][ T6649] kmem_cache_alloc_node_noprof+0x1ca/0x3b0
[ 100.251838][ T6649] __alloc_skb+0x2b3/0x380
[ 100.256282][ T6649] alloc_skb_with_frags+0xe4/0x850
[ 100.261402][ T6649] sock_alloc_send_pskb+0x7f1/0x980
[ 100.266610][ T6649] mld_newpack.isra.0+0x1d4/0x820
[ 100.271636][ T6649] add_grhead+0x299/0x340
[ 100.275967][ T6649] add_grec+0x111e/0x1670
[ 100.280299][ T6649] mld_send_initial_cr.part.0+0xe2/0x260
[ 100.285943][ T6649] ipv6_mc_dad_complete+0x22c/0x2b0
[ 100.291146][ T6649] addrconf_dad_completed+0xd40/0x1060
[ 100.296607][ T6649] addrconf_dad_work+0x7fb/0x14d0
[ 100.301633][ T6649]
[ 100.303949][ T6649] Memory state around the buggy address:
[ 100.309569][ T6649] ffff888012f68700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 100.317626][ T6649] ffff888012f68780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 100.325683][ T6649] >ffff888012f68800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 100.333736][ T6649] ^
[ 100.337796][ T6649] ffff888012f68880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 100.345851][ T6649] ffff888012f68900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 100.353910][ T6649] ==================================================================
[ 100.364511][ T6649] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.371753][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.0.616 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0
[ 100.382371][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 100.392447][ T6649] Call Trace:
[ 100.395745][ T6649]
[ 100.398696][ T6649] dump_stack_lvl+0x3d/0x1f0
[ 100.403314][ T6649] panic+0x71d/0x800
[ 100.407221][ T6649] ? __pfx_panic+0x10/0x10
[ 100.411643][ T6649] ? preempt_schedule_thunk+0x1a/0x30
[ 100.417014][ T6649] ? preempt_schedule_common+0x44/0xc0
[ 100.422472][ T6649] ? check_panic_on_warn+0x1f/0xb0
[ 100.427588][ T6649] check_panic_on_warn+0xab/0xb0
[ 100.432529][ T6649] end_report+0x117/0x180
[ 100.436878][ T6649] kasan_report+0xe9/0x110
[ 100.441302][ T6649] ? force_devcd_write+0x31f/0x350
[ 100.446415][ T6649] ? force_devcd_write+0x31f/0x350
[ 100.451526][ T6649] force_devcd_write+0x31f/0x350
[ 100.456467][ T6649] ? __pfx_force_devcd_write+0x10/0x10
[ 100.461922][ T6649] ? debugfs_file_get+0x21c/0x5c0
[ 100.466950][ T6649] ? __pfx_debugfs_file_get+0x10/0x10
[ 100.472412][ T6649] ? rcu_is_watching+0x12/0xc0
[ 100.477181][ T6649] ? trace_lock_acquire+0x14e/0x1f0
[ 100.482384][ T6649] full_proxy_write+0xfb/0x1b0
[ 100.487153][ T6649] ? __pfx_full_proxy_write+0x10/0x10
[ 100.492527][ T6649] vfs_write+0x24c/0x1150
[ 100.496865][ T6649] ? __pfx_vfs_write+0x10/0x10
[ 100.501629][ T6649] ? do_futex+0x123/0x350
[ 100.505965][ T6649] ? __pfx_do_futex+0x10/0x10
[ 100.510649][ T6649] ? __x64_sys_futex+0x1e1/0x4c0
[ 100.515592][ T6649] ? __x64_sys_futex+0x1ea/0x4c0
[ 100.520546][ T6649] ksys_write+0x12b/0x250
[ 100.524876][ T6649] ? __pfx_ksys_write+0x10/0x10
[ 100.529730][ T6649] do_syscall_64+0xcd/0x250
[ 100.534245][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.540144][ T6649] RIP: 0033:0x7f9ad9f85d29
[ 100.544554][ T6649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 100.564171][ T6649] RSP: 002b:00007fff2b4c2db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 100.572588][ T6649] RAX: ffffffffffffffda RBX: 00007f9ada175fa0 RCX: 00007f9ad9f85d29
[ 100.580565][ T6649] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 100.588535][ T6649] RBP: 00007f9ada001b08 R08: 0000000000000000 R09: 0000000000000000
[ 100.596502][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.604466][ T6649] R13: 00007f9ada175fa0 R14: 00007f9ada175fa0 R15: 00000000000018c7
[ 100.612437][ T6649]
[ 100.615702][ T6649] Kernel Offset: disabled
[ 100.620013][ T6649] Rebooting in 86400 seconds..