Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts.
2025/03/17 12:43:43 ignoring optional flag "sandboxArg"="0"
2025/03/17 12:43:44 parsed 1 programs
[ 293.931139][ T5864] cgroup: Unknown subsys name 'net'
[ 294.088286][ T5864] cgroup: Unknown subsys name 'cpuset'
[ 294.097536][ T5864] cgroup: Unknown subsys name 'rlimit'
[ 295.870957][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 298.477984][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 301.355847][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 301.370809][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 301.378986][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 301.387651][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 301.396513][ T5928] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 301.404063][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 301.785724][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 301.794375][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 301.828531][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 301.839652][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 302.364357][ T5947] chnl_net:caif_netlink_parms(): no params data found
[ 302.468862][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state
[ 302.480630][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[ 302.489017][ T5947] bridge_slave_0: entered allmulticast mode
[ 302.497989][ T5947] bridge_slave_0: entered promiscuous mode
[ 302.517687][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state
[ 302.525158][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[ 302.532365][ T5947] bridge_slave_1: entered allmulticast mode
[ 302.539645][ T5947] bridge_slave_1: entered promiscuous mode
[ 302.572690][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 302.587088][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 302.618077][ T5947] team0: Port device team_slave_0 added
[ 302.627527][ T5947] team0: Port device team_slave_1 added
[ 302.658803][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 302.666224][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 302.692335][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 302.705809][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 302.712801][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 302.739689][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 302.778459][ T5947] hsr_slave_0: entered promiscuous mode
[ 302.785330][ T5947] hsr_slave_1: entered promiscuous mode
[ 302.916749][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 302.927907][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 302.938443][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 302.948790][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 303.027328][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[ 303.049930][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[ 303.062869][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 303.070315][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 303.087366][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 303.094574][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 303.275886][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 303.315630][ T5947] veth0_vlan: entered promiscuous mode
[ 303.328940][ T5947] veth1_vlan: entered promiscuous mode
[ 303.359706][ T5947] veth0_macvtap: entered promiscuous mode
[ 303.369815][ T5947] veth1_macvtap: entered promiscuous mode
[ 303.388886][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 303.402708][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 303.417926][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 303.427771][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 303.436966][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 303.445994][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 303.651789][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 303.732721][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 303.788866][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 303.894102][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/03/17 12:43:59 executed programs: 0
[ 304.751810][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 304.762174][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 304.771317][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 304.781087][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 304.789800][ T5928] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 304.798370][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 304.931027][ T5971] chnl_net:caif_netlink_parms(): no params data found
[ 304.996854][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 305.004714][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[ 305.011919][ T5971] bridge_slave_0: entered allmulticast mode
[ 305.019173][ T5971] bridge_slave_0: entered promiscuous mode
[ 305.031246][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 305.038745][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[ 305.047122][ T5971] bridge_slave_1: entered allmulticast mode
[ 305.054178][ T5971] bridge_slave_1: entered promiscuous mode
[ 305.080973][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 305.092543][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 305.129892][ T5971] team0: Port device team_slave_0 added
[ 305.138889][ T5971] team0: Port device team_slave_1 added
[ 305.161625][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 305.169122][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 305.195642][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 305.209600][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 305.216928][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 305.244318][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 305.283198][ T5971] hsr_slave_0: entered promiscuous mode
[ 305.289952][ T5971] hsr_slave_1: entered promiscuous mode
[ 305.296398][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 305.304536][ T5971] Cannot create hsr debugfs directory
[ 306.864632][ T5928] Bluetooth: hci0: command tx timeout
[ 306.968611][ T36] bridge_slave_1: left allmulticast mode
[ 306.978174][ T36] bridge_slave_1: left promiscuous mode
[ 306.987024][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 307.007453][ T36] bridge_slave_0: left allmulticast mode
[ 307.013184][ T36] bridge_slave_0: left promiscuous mode
[ 307.022662][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 307.418640][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 307.431905][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 307.444911][ T36] bond0 (unregistering): Released all slaves
[ 307.570308][ T36] hsr_slave_0: left promiscuous mode
[ 307.579020][ T36] hsr_slave_1: left promiscuous mode
[ 307.595413][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 307.603032][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 307.614100][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 307.621577][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 307.645171][ T36] veth1_macvtap: left promiscuous mode
[ 307.651246][ T36] veth0_macvtap: left promiscuous mode
[ 307.657593][ T36] veth1_vlan: left promiscuous mode
[ 307.665067][ T36] veth0_vlan: left promiscuous mode
[ 308.161081][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 308.199298][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 308.691756][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 308.710320][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 308.720100][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 308.731584][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 308.843058][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0
[ 308.882714][ T5971] 8021q: adding VLAN 0 to HW filter on device team0
[ 308.899586][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 308.906863][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 308.930350][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 308.937593][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 308.953666][ T5928] Bluetooth: hci0: command tx timeout
[ 309.006911][ T5971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 309.257742][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 309.324385][ T5971] veth0_vlan: entered promiscuous mode
[ 309.348637][ T5971] veth1_vlan: entered promiscuous mode
[ 309.402408][ T5971] veth0_macvtap: entered promiscuous mode
[ 309.412713][ T5971] veth1_macvtap: entered promiscuous mode
[ 309.436080][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 309.453092][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 309.468895][ T5971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 309.480710][ T5971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 309.490059][ T5971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 309.501285][ T5971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 309.604988][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 309.612857][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 309.655631][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 309.664383][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/03/17 12:44:04 executed programs: 2
[ 311.034084][ T5928] Bluetooth: hci0: command tx timeout
[ 313.104549][ T5928] Bluetooth: hci0: command tx timeout
2025/03/17 12:44:09 executed programs: 219
2025/03/17 12:44:14 executed programs: 467
[ 322.576740][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 322.587187][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 322.596864][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 322.606125][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 322.614644][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 322.623006][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 322.751159][ T6656] chnl_net:caif_netlink_parms(): no params data found
[ 322.786578][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 322.793192][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 322.821638][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 322.862650][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 322.870023][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state
[ 322.877781][ T6656] bridge_slave_0: entered allmulticast mode
[ 322.885470][ T6656] bridge_slave_0: entered promiscuous mode
[ 322.894399][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state
[ 322.901723][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state
[ 322.910314][ T6656] bridge_slave_1: entered allmulticast mode
[ 322.917366][ T6656] bridge_slave_1: entered promiscuous mode
[ 322.934258][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 322.965187][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 322.976972][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 323.007983][ T6656] team0: Port device team_slave_0 added
[ 323.016762][ T6656] team0: Port device team_slave_1 added
[ 323.034355][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 323.065968][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 323.072958][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 323.099147][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 323.112879][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 323.120647][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 323.146677][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 323.169837][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 323.215964][ T6656] hsr_slave_0: entered promiscuous mode
[ 323.222260][ T6656] hsr_slave_1: entered promiscuous mode
[ 323.332894][ T13] bridge_slave_1: left allmulticast mode
[ 323.339740][ T13] bridge_slave_1: left promiscuous mode
[ 323.356411][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 323.366948][ T13] bridge_slave_0: left allmulticast mode
[ 323.372623][ T13] bridge_slave_0: left promiscuous mode
[ 323.379500][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 323.643990][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 323.656561][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 323.666820][ T13] bond0 (unregistering): Released all slaves
[ 324.019250][ T13] hsr_slave_0: left promiscuous mode
[ 324.030358][ T13] hsr_slave_1: left promiscuous mode
[ 324.037289][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 324.047824][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 324.056499][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 324.069219][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 324.091335][ T13] veth1_macvtap: left promiscuous mode
[ 324.097126][ T13] veth0_macvtap: left promiscuous mode
[ 324.106598][ T13] veth1_vlan: left promiscuous mode
[ 324.112817][ T13] veth0_vlan: left promiscuous mode
[ 324.494794][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 324.529848][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 324.706455][ T5928] Bluetooth: hci1: command tx timeout
[ 325.010963][ T6656] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 325.031029][ T6656] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 325.041335][ T6656] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 325.054887][ T6656] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 325.170996][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0
[ 325.215431][ T6656] 8021q: adding VLAN 0 to HW filter on device team0
[ 325.236709][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 325.243915][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 325.270159][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 325.277362][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 325.487863][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 325.523011][ T6656] veth0_vlan: entered promiscuous mode
[ 325.533711][ T6656] veth1_vlan: entered promiscuous mode
[ 325.561391][ T6656] veth0_macvtap: entered promiscuous mode
[ 325.571642][ T6656] veth1_macvtap: entered promiscuous mode
[ 325.587665][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 325.601163][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 325.612599][ T6656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 325.621590][ T6656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 325.631845][ T6656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 325.640921][ T6656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 325.702455][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 325.712113][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 325.741407][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2025/03/17 12:44:20 executed programs: 602
[ 325.751054][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 325.820171][ T6700] ==================================================================
[ 325.828366][ T6700] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330
[ 325.836385][ T6700] Read of size 8 at addr ffff888029675000 by task syz.0.616/6700
[ 325.844132][ T6700]
[ 325.846510][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.0.616 Not tainted 6.14.0-rc7-syzkaller #0
[ 325.846545][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 325.846572][ T6700] Call Trace:
[ 325.846580][ T6700]
[ 325.846589][ T6700] dump_stack_lvl+0x116/0x1f0
[ 325.846628][ T6700] print_report+0xc3/0x670
[ 325.846648][ T6700] ? __virt_addr_valid+0x5e/0x590
[ 325.846670][ T6700] ? __phys_addr+0xc6/0x150
[ 325.846693][ T6700] kasan_report+0xd9/0x110
[ 325.846712][ T6700] ? force_devcd_write+0x317/0x330
[ 325.846744][ T6700] ? force_devcd_write+0x317/0x330
[ 325.846777][ T6700] force_devcd_write+0x317/0x330
[ 325.846807][ T6700] ? __pfx_force_devcd_write+0x10/0x10
[ 325.846838][ T6700] ? __debugfs_file_get+0x1ff/0x850
[ 325.846868][ T6700] ? __pfx___debugfs_file_get+0x10/0x10
[ 325.846909][ T6700] ? rcu_is_watching+0x12/0xc0
[ 325.846932][ T6700] ? trace_lock_acquire+0x14e/0x1f0
[ 325.846961][ T6700] full_proxy_write+0x13c/0x200
[ 325.846991][ T6700] ? __pfx_full_proxy_write+0x10/0x10
[ 325.847020][ T6700] vfs_write+0x24c/0x1150
[ 325.847054][ T6700] ? __pfx_vfs_write+0x10/0x10
[ 325.847083][ T6700] ? do_futex+0x123/0x350
[ 325.847109][ T6700] ? __pfx_do_futex+0x10/0x10
[ 325.847139][ T6700] ? __x64_sys_futex+0x1e1/0x4c0
[ 325.847166][ T6700] ? __x64_sys_futex+0x1ea/0x4c0
[ 325.847194][ T6700] ksys_write+0x12b/0x250
[ 325.847224][ T6700] ? __pfx_ksys_write+0x10/0x10
[ 325.847258][ T6700] do_syscall_64+0xcd/0x250
[ 325.847291][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 325.847324][ T6700] RIP: 0033:0x7f02add8d169
[ 325.847341][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 325.847365][ T6700] RSP: 002b:00007ffd3d736fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 325.847385][ T6700] RAX: ffffffffffffffda RBX: 00007f02adfa5fa0 RCX: 00007f02add8d169
[ 325.847400][ T6700] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 325.847414][ T6700] RBP: 00007f02ade0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 325.847427][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 325.847440][ T6700] R13: 00007f02adfa5fa0 R14: 00007f02adfa5fa0 R15: 0000000000000003
[ 325.847460][ T6700]
[ 325.847467][ T6700]
[ 326.072678][ T6700] Allocated by task 5971:
[ 326.077119][ T6700] kasan_save_stack+0x33/0x60
[ 326.081835][ T6700] kasan_save_track+0x14/0x30
[ 326.086570][ T6700] __kasan_kmalloc+0xaa/0xb0
[ 326.091318][ T6700] vhci_open+0x4c/0x430
[ 326.095515][ T6700] misc_open+0x35a/0x420
[ 326.099772][ T6700] chrdev_open+0x237/0x6a0
[ 326.104230][ T6700] do_dentry_open+0x735/0x1c40
[ 326.109046][ T6700] vfs_open+0x82/0x3f0
[ 326.113190][ T6700] path_openat+0x1e88/0x2d80
[ 326.117858][ T6700] do_filp_open+0x20c/0x470
[ 326.122408][ T6700] do_sys_openat2+0x17a/0x1e0
[ 326.127140][ T6700] __x64_sys_openat+0x175/0x210
[ 326.132167][ T6700] do_syscall_64+0xcd/0x250
[ 326.136729][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 326.142676][ T6700]
[ 326.145048][ T6700] Freed by task 5971:
[ 326.149060][ T6700] kasan_save_stack+0x33/0x60
[ 326.153768][ T6700] kasan_save_track+0x14/0x30
[ 326.158475][ T6700] kasan_save_free_info+0x3b/0x60
[ 326.163524][ T6700] __kasan_slab_free+0x51/0x70
[ 326.168411][ T6700] kfree+0x2c4/0x4d0
[ 326.172339][ T6700] vhci_release+0xbb/0xf0
[ 326.176705][ T6700] __fput+0x3ff/0xb70
[ 326.180698][ T6700] task_work_run+0x14e/0x250
[ 326.185322][ T6700] do_exit+0xad8/0x2d70
[ 326.189611][ T6700] do_group_exit+0xd3/0x2a0
[ 326.194132][ T6700] get_signal+0x24ed/0x26c0
[ 326.198684][ T6700] arch_do_signal_or_restart+0x90/0x7e0
[ 326.204244][ T6700] syscall_exit_to_user_mode+0x150/0x2a0
[ 326.209905][ T6700] do_syscall_64+0xda/0x250
[ 326.214433][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 326.220380][ T6700]
[ 326.222709][ T6700] The buggy address belongs to the object at ffff888029675000
[ 326.222709][ T6700] which belongs to the cache kmalloc-1k of size 1024
[ 326.236805][ T6700] The buggy address is located 0 bytes inside of
[ 326.236805][ T6700] freed 1024-byte region [ffff888029675000, ffff888029675400)
[ 326.250541][ T6700]
[ 326.252928][ T6700] The buggy address belongs to the physical page:
[ 326.259367][ T6700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29670
[ 326.268670][ T6700] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 326.277191][ T6700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 326.284765][ T6700] page_type: f5(slab)
[ 326.288809][ T6700] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[ 326.297426][ T6700] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 326.306035][ T6700] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122
[ 326.314818][ T6700] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 326.323636][ T6700] head: 00fff00000000003 ffffea0000a59c01 ffffffffffffffff 0000000000000000
[ 326.332336][ T6700] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 326.341025][ T6700] page dumped because: kasan: bad access detected
[ 326.347457][ T6700] page_owner tracks the page as allocated
[ 326.353186][ T6700] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5503, tgid 5503 (dhcpcd), ts 61530609715, free_ts 61393388948
[ 326.372496][ T6700] post_alloc_hook+0x181/0x1b0
[ 326.377309][ T6700] get_page_from_freelist+0xfce/0x2f80
[ 326.382890][ T6700] __alloc_frozen_pages_noprof+0x221/0x2470
[ 326.389033][ T6700] alloc_pages_mpol+0x1fc/0x540
[ 326.393930][ T6700] new_slab+0x23d/0x330
[ 326.398143][ T6700] ___slab_alloc+0xc5d/0x1720
[ 326.402866][ T6700] __slab_alloc.constprop.0+0x56/0xb0
[ 326.408358][ T6700] __kmalloc_noprof+0x2ec/0x510
[ 326.413255][ T6700] ___neigh_create+0x14ee/0x28e0
[ 326.418208][ T6700] ip6_finish_output2+0x130c/0x20a0
[ 326.423438][ T6700] ip6_finish_output+0x3f9/0x1360
[ 326.428503][ T6700] ip6_output+0x1f8/0x540
[ 326.432860][ T6700] ip6_local_out+0xcd/0x4a0
[ 326.437378][ T6700] ip6_send_skb+0x112/0x460
[ 326.441904][ T6700] ip6_push_pending_frames+0xe0/0x110
[ 326.447394][ T6700] rawv6_sendmsg+0x2f95/0x4610
[ 326.452174][ T6700] page last free pid 5634 tgid 5634 stack trace:
[ 326.458509][ T6700] free_frozen_pages+0x6db/0xfb0
[ 326.463522][ T6700] __put_partials+0x14c/0x170
[ 326.468259][ T6700] qlist_free_all+0x4e/0x120
[ 326.472883][ T6700] kasan_quarantine_reduce+0x195/0x1e0
[ 326.478372][ T6700] __kasan_slab_alloc+0x69/0x90
[ 326.483273][ T6700] kmem_cache_alloc_noprof+0x226/0x3d0
[ 326.488787][ T6700] mas_alloc_nodes+0x18b/0x8b0
[ 326.493581][ T6700] mas_node_count_gfp+0x105/0x130
[ 326.498631][ T6700] mas_preallocate+0x53f/0xce0
[ 326.503454][ T6700] commit_merge+0x61d/0xec0
[ 326.508022][ T6700] vma_expand+0x3fd/0x9c0
[ 326.512381][ T6700] relocate_vma_down+0x216/0x480
[ 326.517339][ T6700] setup_arg_pages+0x56e/0xcd0
[ 326.522121][ T6700] load_elf_binary+0xaf8/0x4fc0
[ 326.526994][ T6700] bprm_execve+0x8dd/0x16d0
[ 326.531522][ T6700] do_execveat_common.isra.0+0x4a2/0x610
[ 326.537188][ T6700]
[ 326.539515][ T6700] Memory state around the buggy address:
[ 326.545165][ T6700] ffff888029674f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 326.553282][ T6700] ffff888029674f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 326.561362][ T6700] >ffff888029675000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 326.569466][ T6700] ^
[ 326.573571][ T6700] ffff888029675080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 326.581662][ T6700] ffff888029675100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 326.589730][ T6700] ==================================================================
[ 326.602054][ T6700] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 326.609308][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.0.616 Not tainted 6.14.0-rc7-syzkaller #0
[ 326.618289][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 326.628544][ T6700] Call Trace:
[ 326.631840][ T6700]
[ 326.634791][ T6700] dump_stack_lvl+0x3d/0x1f0
[ 326.639691][ T6700] panic+0x71d/0x800
[ 326.643708][ T6700] ? __pfx_panic+0x10/0x10
[ 326.648239][ T6700] ? preempt_schedule_thunk+0x1a/0x30
[ 326.653739][ T6700] ? preempt_schedule_common+0x44/0xc0
[ 326.659237][ T6700] ? check_panic_on_warn+0x1f/0xb0
[ 326.664379][ T6700] check_panic_on_warn+0xab/0xb0
[ 326.669347][ T6700] end_report+0x117/0x180
[ 326.673721][ T6700] kasan_report+0xe9/0x110
[ 326.678179][ T6700] ? force_devcd_write+0x317/0x330
[ 326.683336][ T6700] ? force_devcd_write+0x317/0x330
[ 326.688488][ T6700] force_devcd_write+0x317/0x330
[ 326.693469][ T6700] ? __pfx_force_devcd_write+0x10/0x10
[ 326.699057][ T6700] ? __debugfs_file_get+0x1ff/0x850
[ 326.704292][ T6700] ? __pfx___debugfs_file_get+0x10/0x10
[ 326.710046][ T6700] ? rcu_is_watching+0x12/0xc0
[ 326.714841][ T6700] ? trace_lock_acquire+0x14e/0x1f0
[ 326.720069][ T6700] full_proxy_write+0x13c/0x200
[ 326.724954][ T6700] ? __pfx_full_proxy_write+0x10/0x10
[ 326.730361][ T6700] vfs_write+0x24c/0x1150
[ 326.734733][ T6700] ? __pfx_vfs_write+0x10/0x10
[ 326.739534][ T6700] ? do_futex+0x123/0x350
[ 326.743895][ T6700] ? __pfx_do_futex+0x10/0x10
[ 326.748693][ T6700] ? __x64_sys_futex+0x1e1/0x4c0
[ 326.753745][ T6700] ? __x64_sys_futex+0x1ea/0x4c0
[ 326.758713][ T6700] ksys_write+0x12b/0x250
[ 326.763077][ T6700] ? __pfx_ksys_write+0x10/0x10
[ 326.767971][ T6700] do_syscall_64+0xcd/0x250
[ 326.772511][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 326.778440][ T6700] RIP: 0033:0x7f02add8d169
[ 326.782871][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 326.802527][ T6700] RSP: 002b:00007ffd3d736fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 326.810997][ T6700] RAX: ffffffffffffffda RBX: 00007f02adfa5fa0 RCX: 00007f02add8d169
[ 326.819010][ T6700] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 326.827011][ T6700] RBP: 00007f02ade0e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 326.835033][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 326.843025][ T6700] R13: 00007f02adfa5fa0 R14: 00007f02adfa5fa0 R15: 0000000000000003
[ 326.851044][ T6700]
[ 326.854405][ T6700] Kernel Offset: disabled
[ 326.858753][ T6700] Rebooting in 86400 seconds..