Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. 2024/12/21 21:40:55 ignoring optional flag "sandboxArg"="0" 2024/12/21 21:40:56 parsed 1 programs [ 82.706852][ T5828] cgroup: Unknown subsys name 'net' [ 82.881509][ T5828] cgroup: Unknown subsys name 'cpuset' [ 82.891032][ T5828] cgroup: Unknown subsys name 'rlimit' [ 84.205533][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.393499][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.149179][ T976] cfg80211: failed to load regulatory.db [ 87.454722][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.466016][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.480882][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.489106][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.496766][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.504288][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.766624][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.779082][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.806857][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.815603][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.427798][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 88.490855][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.498945][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.506101][ T5878] bridge_slave_0: entered allmulticast mode [ 88.513867][ T5878] bridge_slave_0: entered promiscuous mode [ 88.523087][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.530291][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.537463][ T5878] bridge_slave_1: entered allmulticast mode [ 88.548805][ T5878] bridge_slave_1: entered promiscuous mode [ 88.572406][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.583724][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.606948][ T5878] team0: Port device team_slave_0 added [ 88.614529][ T5878] team0: Port device team_slave_1 added [ 88.646548][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.653718][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.679838][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.693787][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.700865][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.727164][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.761822][ T5878] hsr_slave_0: entered promiscuous mode [ 88.768310][ T5878] hsr_slave_1: entered promiscuous mode [ 88.852229][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.862635][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.871541][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.883211][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.905034][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.912227][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.920295][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.927561][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.971068][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.985134][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.994934][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.013397][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.025511][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.032626][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.044807][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.052102][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.172319][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.201984][ T5878] veth0_vlan: entered promiscuous mode [ 89.214118][ T5878] veth1_vlan: entered promiscuous mode [ 89.236315][ T5878] veth0_macvtap: entered promiscuous mode [ 89.245117][ T5878] veth1_macvtap: entered promiscuous mode [ 89.259778][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.274342][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.285439][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.294900][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.303959][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.313044][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.442587][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.559214][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.643489][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.726104][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.328371][ T5920] percpu: allocation failed, size=32 align=4 atomic=1, atomic alloc failed, no space left 2024/12/21 21:41:06 executed programs: 0 [ 90.901334][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.911615][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.920954][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.930522][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.938663][ T5144] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.945962][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.044073][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 91.099167][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.106294][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.113783][ T5923] bridge_slave_0: entered allmulticast mode [ 91.120929][ T5923] bridge_slave_0: entered promiscuous mode [ 91.128731][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.135933][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.144010][ T5923] bridge_slave_1: entered allmulticast mode [ 91.151468][ T5923] bridge_slave_1: entered promiscuous mode [ 91.180521][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.193070][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.217635][ T5923] team0: Port device team_slave_0 added [ 91.225199][ T5923] team0: Port device team_slave_1 added [ 91.245743][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.253073][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.279496][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.292396][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.299657][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.325845][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.357625][ T5923] hsr_slave_0: entered promiscuous mode [ 91.363991][ T5923] hsr_slave_1: entered promiscuous mode [ 91.370507][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.378705][ T5923] Cannot create hsr debugfs directory [ 92.299819][ T11] bridge_slave_1: left allmulticast mode [ 92.305684][ T11] bridge_slave_1: left promiscuous mode [ 92.316429][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.335382][ T11] bridge_slave_0: left allmulticast mode [ 92.341700][ T11] bridge_slave_0: left promiscuous mode [ 92.350176][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.709676][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.721372][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.731662][ T11] bond0 (unregistering): Released all slaves [ 92.846560][ T11] hsr_slave_0: left promiscuous mode [ 92.853468][ T11] hsr_slave_1: left promiscuous mode [ 92.861982][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.869631][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.879278][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.886838][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.909403][ T11] veth1_macvtap: left promiscuous mode [ 92.915371][ T11] veth0_macvtap: left promiscuous mode [ 92.923910][ T11] veth1_vlan: left promiscuous mode [ 92.929712][ T11] veth0_vlan: left promiscuous mode [ 92.978991][ T5144] Bluetooth: hci0: command tx timeout [ 93.324876][ T11] team0 (unregistering): Port device team_slave_1 removed [ 93.356098][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.769914][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.784826][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.811820][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.825883][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.903883][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.924182][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.964305][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.971497][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.981412][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.988587][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.016242][ T5923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.032757][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.464643][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.606772][ T5923] veth0_vlan: entered promiscuous mode [ 94.650766][ T5923] veth1_vlan: entered promiscuous mode [ 94.712108][ T5923] veth0_macvtap: entered promiscuous mode [ 94.732117][ T5923] veth1_macvtap: entered promiscuous mode [ 94.774646][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.799334][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.820852][ T5923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839482][ T5923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.848382][ T5923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.857115][ T5923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.938339][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.949471][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.983224][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.991446][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.057831][ T5144] Bluetooth: hci0: command tx timeout 2024/12/21 21:41:11 executed programs: 44 [ 97.138364][ T5144] Bluetooth: hci0: command tx timeout [ 99.218045][ T5144] Bluetooth: hci0: command tx timeout 2024/12/21 21:41:16 executed programs: 321 [ 105.860102][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.870521][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.883338][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.894189][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.902127][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.910218][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.004802][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 106.067127][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.082142][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.089362][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.096968][ T6612] bridge_slave_0: entered allmulticast mode [ 106.106918][ T6612] bridge_slave_0: entered promiscuous mode [ 106.114820][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.124352][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.132638][ T6612] bridge_slave_1: entered allmulticast mode [ 106.139634][ T6612] bridge_slave_1: entered promiscuous mode [ 106.155242][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.184051][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.194861][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.223085][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.245300][ T6612] team0: Port device team_slave_0 added [ 106.253890][ T6612] team0: Port device team_slave_1 added [ 106.272210][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.279690][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.305964][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.328385][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.341576][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.349622][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.375721][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.419684][ T6612] hsr_slave_0: entered promiscuous mode [ 106.425826][ T6612] hsr_slave_1: entered promiscuous mode [ 106.504509][ T11] bridge_slave_1: left allmulticast mode [ 106.510741][ T11] bridge_slave_1: left promiscuous mode [ 106.517079][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.526616][ T11] bridge_slave_0: left allmulticast mode [ 106.533113][ T11] bridge_slave_0: left promiscuous mode [ 106.539282][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.760189][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.770932][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.781709][ T11] bond0 (unregistering): Released all slaves [ 107.135376][ T11] hsr_slave_0: left promiscuous mode [ 107.141506][ T11] hsr_slave_1: left promiscuous mode [ 107.147440][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.155727][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.164589][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.172569][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.187351][ T11] veth1_macvtap: left promiscuous mode [ 107.192994][ T11] veth0_macvtap: left promiscuous mode [ 107.198632][ T11] veth1_vlan: left promiscuous mode [ 107.203895][ T11] veth0_vlan: left promiscuous mode [ 107.485517][ T11] team0 (unregistering): Port device team_slave_1 removed [ 107.517437][ T11] team0 (unregistering): Port device team_slave_0 removed [ 107.948061][ T5144] Bluetooth: hci1: command tx timeout [ 107.948266][ T6612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.971014][ T6612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.986455][ T6612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.999644][ T6612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.074164][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.103043][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.127156][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.134312][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.151056][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.158221][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.366659][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.412623][ T6612] veth0_vlan: entered promiscuous mode [ 108.427766][ T6612] veth1_vlan: entered promiscuous mode [ 108.454793][ T6612] veth0_macvtap: entered promiscuous mode [ 108.464123][ T6612] veth1_macvtap: entered promiscuous mode [ 108.485204][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.503149][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.516489][ T6612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.527289][ T6612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.537383][ T6612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.548541][ T6612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.624682][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.641014][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/12/21 21:41:24 executed programs: 602 [ 108.672703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.681723][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.736911][ T6668] ================================================================== [ 108.745027][ T6668] BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350 [ 108.752955][ T6668] Read of size 8 at addr ffff88807f7cb000 by task syz.0.616/6668 [ 108.760700][ T6668] [ 108.763065][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.0.616 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 108.773670][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.783729][ T6668] Call Trace: [ 108.786999][ T6668] [ 108.789932][ T6668] dump_stack_lvl+0x116/0x1f0 [ 108.794631][ T6668] print_report+0xc3/0x620 [ 108.799061][ T6668] ? __virt_addr_valid+0x5e/0x590 [ 108.804093][ T6668] ? __phys_addr+0xc6/0x150 [ 108.808600][ T6668] kasan_report+0xd9/0x110 [ 108.813023][ T6668] ? force_devcd_write+0x31f/0x350 [ 108.818134][ T6668] ? force_devcd_write+0x31f/0x350 [ 108.823250][ T6668] force_devcd_write+0x31f/0x350 [ 108.828187][ T6668] ? __pfx_force_devcd_write+0x10/0x10 [ 108.833642][ T6668] ? debugfs_file_get+0x21c/0x5c0 [ 108.838670][ T6668] ? __pfx_debugfs_file_get+0x10/0x10 [ 108.844045][ T6668] ? rcu_is_watching+0x12/0xc0 [ 108.848827][ T6668] ? trace_lock_acquire+0x14e/0x1f0 [ 108.854061][ T6668] full_proxy_write+0xfb/0x1b0 [ 108.858841][ T6668] ? __pfx_full_proxy_write+0x10/0x10 [ 108.864217][ T6668] vfs_write+0x24c/0x1150 [ 108.868553][ T6668] ? __pfx_vfs_write+0x10/0x10 [ 108.873316][ T6668] ? do_futex+0x123/0x350 [ 108.877651][ T6668] ? __pfx_do_futex+0x10/0x10 [ 108.882342][ T6668] ? __x64_sys_futex+0x1e1/0x4c0 [ 108.887282][ T6668] ? __x64_sys_futex+0x1ea/0x4c0 [ 108.892225][ T6668] ksys_write+0x12b/0x250 [ 108.896553][ T6668] ? __pfx_ksys_write+0x10/0x10 [ 108.901407][ T6668] do_syscall_64+0xcd/0x250 [ 108.905915][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.911835][ T6668] RIP: 0033:0x7f3545d85d29 [ 108.916266][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.935897][ T6668] RSP: 002b:00007ffef86ff5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.944314][ T6668] RAX: ffffffffffffffda RBX: 00007f3545f75fa0 RCX: 00007f3545d85d29 [ 108.952281][ T6668] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 108.960245][ T6668] RBP: 00007f3545e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 108.968215][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.976182][ T6668] R13: 00007f3545f75fa0 R14: 00007f3545f75fa0 R15: 00000000000018c5 [ 108.984159][ T6668] [ 108.987171][ T6668] [ 108.989487][ T6668] Allocated by task 5923: [ 108.993822][ T6668] kasan_save_stack+0x33/0x60 [ 108.998525][ T6668] kasan_save_track+0x14/0x30 [ 109.003211][ T6668] __kasan_kmalloc+0xaa/0xb0 [ 109.007804][ T6668] vhci_open+0x4c/0x430 [ 109.011956][ T6668] misc_open+0x35a/0x420 [ 109.016196][ T6668] chrdev_open+0x237/0x6a0 [ 109.020632][ T6668] do_dentry_open+0xf59/0x1ea0 [ 109.025411][ T6668] vfs_open+0x82/0x3f0 [ 109.029491][ T6668] path_openat+0x1e6a/0x2d60 [ 109.034088][ T6668] do_filp_open+0x20c/0x470 [ 109.038591][ T6668] do_sys_openat2+0x17a/0x1e0 [ 109.043273][ T6668] __x64_sys_openat+0x175/0x210 [ 109.048128][ T6668] do_syscall_64+0xcd/0x250 [ 109.052634][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.058531][ T6668] [ 109.060846][ T6668] Freed by task 5923: [ 109.064816][ T6668] kasan_save_stack+0x33/0x60 [ 109.069499][ T6668] kasan_save_track+0x14/0x30 [ 109.074176][ T6668] kasan_save_free_info+0x3b/0x60 [ 109.079195][ T6668] __kasan_slab_free+0x51/0x70 [ 109.083959][ T6668] kfree+0x14f/0x4b0 [ 109.087857][ T6668] vhci_release+0xbb/0xf0 [ 109.092192][ T6668] __fput+0x3f8/0xb60 [ 109.096176][ T6668] task_work_run+0x14e/0x250 [ 109.100771][ T6668] do_exit+0xad8/0x2d70 [ 109.104945][ T6668] do_group_exit+0xd3/0x2a0 [ 109.109469][ T6668] get_signal+0x2576/0x2610 [ 109.113981][ T6668] arch_do_signal_or_restart+0x90/0x7e0 [ 109.119535][ T6668] syscall_exit_to_user_mode+0x150/0x2a0 [ 109.125170][ T6668] do_syscall_64+0xda/0x250 [ 109.129677][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.135573][ T6668] [ 109.137894][ T6668] The buggy address belongs to the object at ffff88807f7cb000 [ 109.137894][ T6668] which belongs to the cache kmalloc-1k of size 1024 [ 109.151941][ T6668] The buggy address is located 0 bytes inside of [ 109.151941][ T6668] freed 1024-byte region [ffff88807f7cb000, ffff88807f7cb400) [ 109.165645][ T6668] [ 109.167962][ T6668] The buggy address belongs to the physical page: [ 109.174374][ T6668] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f7c8 [ 109.183132][ T6668] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.191623][ T6668] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 109.199160][ T6668] page_type: f5(slab) [ 109.203145][ T6668] raw: 00fff00000000040 ffff88801ac41dc0 ffffea00009b4200 dead000000000002 [ 109.211725][ T6668] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 109.220305][ T6668] head: 00fff00000000040 ffff88801ac41dc0 ffffea00009b4200 dead000000000002 [ 109.228970][ T6668] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 109.237635][ T6668] head: 00fff00000000003 ffffea0001fdf201 ffffffffffffffff 0000000000000000 [ 109.246298][ T6668] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 109.254958][ T6668] page dumped because: kasan: bad access detected [ 109.261366][ T6668] page_owner tracks the page as allocated [ 109.267068][ T6668] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5499, tgid 5499 (dhcpcd), ts 44142227843, free_ts 44110456073 [ 109.287305][ T6668] post_alloc_hook+0x2d1/0x350 [ 109.292079][ T6668] get_page_from_freelist+0xfce/0x2f80 [ 109.297543][ T6668] __alloc_pages_noprof+0x223/0x25b0 [ 109.302836][ T6668] alloc_pages_mpol_noprof+0x2c9/0x610 [ 109.308307][ T6668] new_slab+0x2c9/0x410 [ 109.312462][ T6668] ___slab_alloc+0xce2/0x1650 [ 109.317137][ T6668] __slab_alloc.constprop.0+0x56/0xb0 [ 109.322508][ T6668] __kmalloc_node_track_caller_noprof+0x2ee/0x520 [ 109.328925][ T6668] kmalloc_reserve+0xef/0x2c0 [ 109.333598][ T6668] __alloc_skb+0x164/0x380 [ 109.338022][ T6668] inet6_rt_notify+0xc7/0x260 [ 109.342705][ T6668] fib6_add+0x251d/0x4b20 [ 109.347034][ T6668] ip6_route_add+0x8d/0x1c0 [ 109.351539][ T6668] addrconf_prefix_route+0x2fe/0x510 [ 109.356834][ T6668] inet6_addr_add+0x698/0xbc0 [ 109.361515][ T6668] inet6_rtm_newaddr+0x11e9/0x1ad0 [ 109.366626][ T6668] page last free pid 5621 tgid 5621 stack trace: [ 109.372951][ T6668] free_unref_page+0x661/0x1080 [ 109.377807][ T6668] __put_partials+0x14c/0x170 [ 109.382497][ T6668] qlist_free_all+0x4e/0x120 [ 109.387089][ T6668] kasan_quarantine_reduce+0x195/0x1e0 [ 109.392550][ T6668] __kasan_slab_alloc+0x69/0x90 [ 109.397426][ T6668] __kmalloc_cache_node_noprof+0x1ee/0x3f0 [ 109.403245][ T6668] __get_vm_area_node+0x101/0x2f0 [ 109.408274][ T6668] __vmalloc_node_range_noprof+0x26a/0x1530 [ 109.414170][ T6668] __vmalloc_noprof+0x6d/0x90 [ 109.418852][ T6668] bpf_prog_alloc_no_stats+0x54/0x630 [ 109.424235][ T6668] bpf_prog_alloc+0x3b/0x230 [ 109.428828][ T6668] __get_filter+0x112/0x2b0 [ 109.433338][ T6668] sk_attach_filter+0x1e/0x180 [ 109.438104][ T6668] sk_setsockopt+0x2207/0x3e40 [ 109.442876][ T6668] do_sock_setsockopt+0x3f4/0x480 [ 109.447895][ T6668] __sys_setsockopt+0x1a0/0x230 [ 109.452746][ T6668] [ 109.455061][ T6668] Memory state around the buggy address: [ 109.460682][ T6668] ffff88807f7caf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.468736][ T6668] ffff88807f7caf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.476792][ T6668] >ffff88807f7cb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.484849][ T6668] ^ [ 109.488917][ T6668] ffff88807f7cb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.496973][ T6668] ffff88807f7cb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.505024][ T6668] ================================================================== [ 109.529807][ T6668] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.537061][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.0.616 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 109.547673][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.557748][ T6668] Call Trace: [ 109.561029][ T6668] [ 109.563957][ T6668] dump_stack_lvl+0x3d/0x1f0 [ 109.568553][ T6668] panic+0x71d/0x800 [ 109.572455][ T6668] ? __pfx_panic+0x10/0x10 [ 109.576877][ T6668] ? preempt_schedule_thunk+0x1a/0x30 [ 109.582252][ T6668] ? preempt_schedule_common+0x44/0xc0 [ 109.587718][ T6668] ? check_panic_on_warn+0x1f/0xb0 [ 109.592852][ T6668] check_panic_on_warn+0xab/0xb0 [ 109.597805][ T6668] end_report+0x117/0x180 [ 109.602144][ T6668] kasan_report+0xe9/0x110 [ 109.606565][ T6668] ? force_devcd_write+0x31f/0x350 [ 109.611681][ T6668] ? force_devcd_write+0x31f/0x350 [ 109.616792][ T6668] force_devcd_write+0x31f/0x350 [ 109.621729][ T6668] ? __pfx_force_devcd_write+0x10/0x10 [ 109.627189][ T6668] ? debugfs_file_get+0x21c/0x5c0 [ 109.632216][ T6668] ? __pfx_debugfs_file_get+0x10/0x10 [ 109.637589][ T6668] ? rcu_is_watching+0x12/0xc0 [ 109.642359][ T6668] ? trace_lock_acquire+0x14e/0x1f0 [ 109.647564][ T6668] full_proxy_write+0xfb/0x1b0 [ 109.652333][ T6668] ? __pfx_full_proxy_write+0x10/0x10 [ 109.657712][ T6668] vfs_write+0x24c/0x1150 [ 109.662046][ T6668] ? __pfx_vfs_write+0x10/0x10 [ 109.666809][ T6668] ? do_futex+0x123/0x350 [ 109.671147][ T6668] ? __pfx_do_futex+0x10/0x10 [ 109.675831][ T6668] ? __x64_sys_futex+0x1e1/0x4c0 [ 109.680781][ T6668] ? __x64_sys_futex+0x1ea/0x4c0 [ 109.685737][ T6668] ksys_write+0x12b/0x250 [ 109.690069][ T6668] ? __pfx_ksys_write+0x10/0x10 [ 109.694924][ T6668] do_syscall_64+0xcd/0x250 [ 109.699432][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.705329][ T6668] RIP: 0033:0x7f3545d85d29 [ 109.709746][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.729356][ T6668] RSP: 002b:00007ffef86ff5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.737771][ T6668] RAX: ffffffffffffffda RBX: 00007f3545f75fa0 RCX: 00007f3545d85d29 [ 109.745750][ T6668] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 109.753717][ T6668] RBP: 00007f3545e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 109.761682][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.769651][ T6668] R13: 00007f3545f75fa0 R14: 00007f3545f75fa0 R15: 00000000000018c5 [ 109.777623][ T6668] [ 109.780879][ T6668] Kernel Offset: disabled [ 109.785191][ T6668] Rebooting in 86400 seconds..