Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts.
2025/03/25 02:33:49 ignoring optional flag "sandboxArg"="0"
2025/03/25 02:33:50 parsed 1 programs
[ 262.042876][ T5858] cgroup: Unknown subsys name 'net'
[ 262.144674][ T5858] cgroup: Unknown subsys name 'cpuset'
[ 262.152400][ T5858] cgroup: Unknown subsys name 'rlimit'
[ 263.616099][ T5858] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 265.891709][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 268.619179][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 268.628881][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 268.637317][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 268.646148][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 268.654056][ T56] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 268.661773][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 268.949136][ T5931] chnl_net:caif_netlink_parms(): no params data found
[ 269.030219][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[ 269.041048][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[ 269.049882][ T5931] bridge_slave_0: entered allmulticast mode
[ 269.057364][ T5931] bridge_slave_0: entered promiscuous mode
[ 269.069997][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 269.077390][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[ 269.084547][ T5931] bridge_slave_1: entered allmulticast mode
[ 269.092655][ T5931] bridge_slave_1: entered promiscuous mode
[ 269.119523][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 269.130561][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 269.158850][ T5931] team0: Port device team_slave_0 added
[ 269.168250][ T5931] team0: Port device team_slave_1 added
[ 269.196903][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 269.203911][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 269.230696][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 269.244876][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 269.252123][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 269.278223][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 269.312679][ T5931] hsr_slave_0: entered promiscuous mode
[ 269.318977][ T5931] hsr_slave_1: entered promiscuous mode
[ 269.410999][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 269.420806][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 269.432837][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 269.443187][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 269.507195][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[ 269.530886][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[ 269.544789][ T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 269.552055][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 269.565861][ T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 269.573045][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 269.613159][ T5931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 269.718719][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 269.757336][ T5931] veth0_vlan: entered promiscuous mode
[ 269.767601][ T5931] veth1_vlan: entered promiscuous mode
[ 269.794434][ T5931] veth0_macvtap: entered promiscuous mode
[ 269.804881][ T5931] veth1_macvtap: entered promiscuous mode
[ 269.822524][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 269.838244][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 269.850830][ T5931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 269.860035][ T5931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 269.868846][ T5931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 269.877816][ T5931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 270.052459][ T3484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 270.123498][ T3484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 270.204753][ T3484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 270.259183][ T3484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 270.309084][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 270.317188][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 270.347780][ T5071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 270.355847][ T5071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/03/25 02:34:01 executed programs: 0
[ 270.777607][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 270.786196][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 270.794762][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 270.803624][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 270.811746][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 270.819912][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 270.932077][ T5965] chnl_net:caif_netlink_parms(): no params data found
[ 270.979132][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state
[ 270.986648][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[ 270.993786][ T5965] bridge_slave_0: entered allmulticast mode
[ 271.001151][ T5965] bridge_slave_0: entered promiscuous mode
[ 271.009783][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state
[ 271.018080][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[ 271.025488][ T5965] bridge_slave_1: entered allmulticast mode
[ 271.032557][ T5965] bridge_slave_1: entered promiscuous mode
[ 271.060535][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 271.072582][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 271.107414][ T5965] team0: Port device team_slave_0 added
[ 271.118711][ T5965] team0: Port device team_slave_1 added
[ 271.142621][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 271.150188][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 271.176542][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 271.189354][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 271.196532][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 271.222755][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 271.262344][ T5965] hsr_slave_0: entered promiscuous mode
[ 271.268803][ T5965] hsr_slave_1: entered promiscuous mode
[ 271.274766][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 271.282903][ T5965] Cannot create hsr debugfs directory
[ 272.917011][ T56] Bluetooth: hci0: command tx timeout
[ 273.397934][ T3484] bridge_slave_1: left allmulticast mode
[ 273.406805][ T3484] bridge_slave_1: left promiscuous mode
[ 273.413699][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state
[ 273.435685][ T3484] bridge_slave_0: left allmulticast mode
[ 273.442202][ T3484] bridge_slave_0: left promiscuous mode
[ 273.451372][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state
[ 273.804272][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 273.817821][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 273.829150][ T3484] bond0 (unregistering): Released all slaves
[ 273.957442][ T3484] hsr_slave_0: left promiscuous mode
[ 273.963582][ T3484] hsr_slave_1: left promiscuous mode
[ 273.972445][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 273.982032][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 273.996507][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 274.003967][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 274.022022][ T3484] veth1_macvtap: left promiscuous mode
[ 274.028111][ T3484] veth0_macvtap: left promiscuous mode
[ 274.037804][ T3484] veth1_vlan: left promiscuous mode
[ 274.043793][ T3484] veth0_vlan: left promiscuous mode
[ 274.449243][ T3484] team0 (unregistering): Port device team_slave_1 removed
[ 274.477715][ T3484] team0 (unregistering): Port device team_slave_0 removed
[ 274.924916][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 274.939079][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 274.954064][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 274.974668][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 274.997191][ T56] Bluetooth: hci0: command tx timeout
[ 275.090931][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0
[ 275.123810][ T5965] 8021q: adding VLAN 0 to HW filter on device team0
[ 275.248569][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 275.255699][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 275.271760][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 275.278941][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 275.624686][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 275.675440][ T5965] veth0_vlan: entered promiscuous mode
[ 275.691591][ T5965] veth1_vlan: entered promiscuous mode
[ 275.719505][ T5965] veth0_macvtap: entered promiscuous mode
[ 275.729770][ T5965] veth1_macvtap: entered promiscuous mode
[ 275.745960][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 275.763066][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 275.777944][ T5965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 275.790920][ T5965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 275.800001][ T5965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 275.809450][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 275.863948][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 275.878604][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 275.899450][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2025/03/25 02:34:06 executed programs: 2
[ 275.908321][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 277.077172][ T56] Bluetooth: hci0: command tx timeout
[ 279.156742][ T56] Bluetooth: hci0: command tx timeout
2025/03/25 02:34:11 executed programs: 260
2025/03/25 02:34:16 executed programs: 530
[ 287.365165][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 287.374784][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 287.382818][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 287.391928][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 287.399844][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 287.408273][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 287.504570][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 287.547688][ T6640] chnl_net:caif_netlink_parms(): no params data found
[ 287.594576][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 287.614628][ T6640] bridge0: port 1(bridge_slave_0) entered blocking state
[ 287.622772][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state
[ 287.630044][ T6640] bridge_slave_0: entered allmulticast mode
[ 287.637070][ T6640] bridge_slave_0: entered promiscuous mode
[ 287.645023][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state
[ 287.652326][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state
[ 287.659942][ T6640] bridge_slave_1: entered allmulticast mode
[ 287.667009][ T6640] bridge_slave_1: entered promiscuous mode
[ 287.682461][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 287.710393][ T6640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 287.722114][ T6640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 287.754159][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 287.776913][ T6640] team0: Port device team_slave_0 added
[ 287.785805][ T6640] team0: Port device team_slave_1 added
[ 287.804755][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 287.812141][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 287.838397][ T6640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 287.850543][ T6640] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 287.857590][ T6640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 287.883573][ T6640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 287.922333][ T6640] hsr_slave_0: entered promiscuous mode
[ 287.928934][ T6640] hsr_slave_1: entered promiscuous mode
[ 287.985815][ T54] bridge_slave_1: left allmulticast mode
[ 287.993529][ T54] bridge_slave_1: left promiscuous mode
[ 287.999354][ T54] bridge0: port 2(bridge_slave_1) entered disabled state
[ 288.008340][ T54] bridge_slave_0: left allmulticast mode
[ 288.013990][ T54] bridge_slave_0: left promiscuous mode
[ 288.020239][ T54] bridge0: port 1(bridge_slave_0) entered disabled state
[ 288.265209][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 288.275913][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 288.286529][ T54] bond0 (unregistering): Released all slaves
[ 288.575066][ T54] hsr_slave_0: left promiscuous mode
[ 288.582195][ T54] hsr_slave_1: left promiscuous mode
[ 288.588510][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 288.595939][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 288.605260][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 288.613945][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 288.633658][ T54] veth1_macvtap: left promiscuous mode
[ 288.641819][ T54] veth0_macvtap: left promiscuous mode
[ 288.647842][ T54] veth1_vlan: left promiscuous mode
[ 288.653446][ T54] veth0_vlan: left promiscuous mode
[ 288.985412][ T54] team0 (unregistering): Port device team_slave_1 removed
[ 289.019268][ T54] team0 (unregistering): Port device team_slave_0 removed
[ 289.477733][ T56] Bluetooth: hci1: command tx timeout
[ 289.548569][ T6640] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 289.561659][ T6640] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 289.576384][ T6640] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 289.596592][ T6640] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 289.684991][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0
[ 289.707084][ T6640] 8021q: adding VLAN 0 to HW filter on device team0
[ 289.721746][ T54] bridge0: port 1(bridge_slave_0) entered blocking state
[ 289.728939][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 289.747548][ T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 289.754666][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 289.947083][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 289.993431][ T6640] veth0_vlan: entered promiscuous mode
[ 290.004473][ T6640] veth1_vlan: entered promiscuous mode
[ 290.035602][ T6640] veth0_macvtap: entered promiscuous mode
[ 290.045539][ T6640] veth1_macvtap: entered promiscuous mode
[ 290.067800][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 290.083691][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 290.094392][ T6640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 290.104847][ T6640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 290.114382][ T6640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 290.125937][ T6640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 290.209079][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 290.219993][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 290.247288][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 290.255190][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 290.343615][ T6700] ==================================================================
[ 290.351760][ T6700] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330
[ 290.359698][ T6700] Read of size 8 at addr ffff888027cb3800 by task syz.0.616/6700
[ 290.367435][ T6700]
[ 290.369793][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.0.616 Not tainted 6.14.0-syzkaller #0
[ 290.369819][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 290.369836][ T6700] Call Trace:
[ 290.369846][ T6700]
[ 290.369855][ T6700] dump_stack_lvl+0x116/0x1f0
[ 290.369894][ T6700] print_report+0xc3/0x670
[ 290.369914][ T6700] ? __virt_addr_valid+0x5e/0x590
[ 290.369938][ T6700] ? __phys_addr+0xc6/0x150
[ 290.369960][ T6700] kasan_report+0xd9/0x110
[ 290.369980][ T6700] ? force_devcd_write+0x317/0x330
[ 290.370011][ T6700] ? force_devcd_write+0x317/0x330
[ 290.370043][ T6700] force_devcd_write+0x317/0x330
[ 290.370072][ T6700] ? __pfx_force_devcd_write+0x10/0x10
[ 290.370103][ T6700] ? __debugfs_file_get+0x1ff/0x850
[ 290.370132][ T6700] ? __pfx___debugfs_file_get+0x10/0x10
[ 290.370161][ T6700] ? rcu_is_watching+0x12/0xc0
[ 290.370184][ T6700] ? trace_lock_acquire+0x14e/0x1f0
[ 290.370212][ T6700] full_proxy_write+0x13c/0x200
[ 290.370240][ T6700] ? __pfx_full_proxy_write+0x10/0x10
[ 290.370268][ T6700] vfs_write+0x24c/0x1150
[ 290.370300][ T6700] ? __pfx_vfs_write+0x10/0x10
[ 290.370327][ T6700] ? do_futex+0x123/0x350
[ 290.370353][ T6700] ? __pfx_do_futex+0x10/0x10
[ 290.370383][ T6700] ? __x64_sys_futex+0x1e1/0x4c0
[ 290.370408][ T6700] ? __x64_sys_futex+0x1ea/0x4c0
[ 290.370436][ T6700] ksys_write+0x12b/0x250
[ 290.370464][ T6700] ? __pfx_ksys_write+0x10/0x10
[ 290.370496][ T6700] do_syscall_64+0xcd/0x250
[ 290.370528][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 290.370558][ T6700] RIP: 0033:0x7faf3678d169
[ 290.370576][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 290.370602][ T6700] RSP: 002b:00007fff8c6a4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 290.370622][ T6700] RAX: ffffffffffffffda RBX: 00007faf369a5fa0 RCX: 00007faf3678d169
[ 290.370638][ T6700] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000002
[ 290.370651][ T6700] RBP: 00007faf3680e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 290.370670][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 290.370683][ T6700] R13: 00007faf369a5fa0 R14: 00007faf369a5fa0 R15: 0000000000000003
[ 290.370705][ T6700]
[ 290.370712][ T6700]
[ 290.595020][ T6700] Allocated by task 5965:
[ 290.599356][ T6700] kasan_save_stack+0x33/0x60
[ 290.604042][ T6700] kasan_save_track+0x14/0x30
[ 290.608762][ T6700] __kasan_kmalloc+0xaa/0xb0
[ 290.613350][ T6700] vhci_open+0x4c/0x430
[ 290.617503][ T6700] misc_open+0x35a/0x420
[ 290.621742][ T6700] chrdev_open+0x237/0x6a0
[ 290.626159][ T6700] do_dentry_open+0x735/0x1c40
[ 290.630923][ T6700] vfs_open+0x82/0x3f0
[ 290.634987][ T6700] path_openat+0x1e88/0x2d80
[ 290.639591][ T6700] do_filp_open+0x20c/0x470
[ 290.644099][ T6700] do_sys_openat2+0x17a/0x1e0
[ 290.648778][ T6700] __x64_sys_openat+0x175/0x210
[ 290.653623][ T6700] do_syscall_64+0xcd/0x250
[ 290.658139][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 290.664037][ T6700]
[ 290.666352][ T6700] Freed by task 5965:
[ 290.670321][ T6700] kasan_save_stack+0x33/0x60
[ 290.674998][ T6700] kasan_save_track+0x14/0x30
[ 290.679675][ T6700] kasan_save_free_info+0x3b/0x60
[ 290.684694][ T6700] __kasan_slab_free+0x51/0x70
[ 290.689462][ T6700] kfree+0x2c4/0x4d0
[ 290.693358][ T6700] vhci_release+0xbb/0xf0
[ 290.697691][ T6700] __fput+0x3ff/0xb70
[ 290.701670][ T6700] task_work_run+0x14e/0x250
[ 290.706260][ T6700] do_exit+0xad8/0x2db0
[ 290.710412][ T6700] do_group_exit+0xd3/0x2a0
[ 290.714926][ T6700] get_signal+0x24ed/0x26c0
[ 290.719442][ T6700] arch_do_signal_or_restart+0x90/0x7e0
[ 290.724996][ T6700] syscall_exit_to_user_mode+0x150/0x2a0
[ 290.730637][ T6700] do_syscall_64+0xda/0x250
[ 290.735149][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 290.741044][ T6700]
[ 290.743355][ T6700] The buggy address belongs to the object at ffff888027cb3800
[ 290.743355][ T6700] which belongs to the cache kmalloc-1k of size 1024
[ 290.757402][ T6700] The buggy address is located 0 bytes inside of
[ 290.757402][ T6700] freed 1024-byte region [ffff888027cb3800, ffff888027cb3c00)
[ 290.771107][ T6700]
[ 290.773421][ T6700] The buggy address belongs to the physical page:
[ 290.779834][ T6700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27cb0
[ 290.788598][ T6700] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 290.797096][ T6700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 290.804652][ T6700] page_type: f5(slab)
[ 290.808634][ T6700] raw: 00fff00000000040 ffff88801b041dc0 ffffea00009d7400 dead000000000002
[ 290.817221][ T6700] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 290.825798][ T6700] head: 00fff00000000040 ffff88801b041dc0 ffffea00009d7400 dead000000000002
[ 290.834484][ T6700] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 290.843174][ T6700] head: 00fff00000000003 ffffea00009f2c01 ffffffffffffffff 0000000000000000
[ 290.851856][ T6700] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 290.860522][ T6700] page dumped because: kasan: bad access detected
[ 290.866964][ T6700] page_owner tracks the page as allocated
[ 290.872669][ T6700] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5635, tgid 5635 (dhcpcd), ts 46590791267, free_ts 46532334045
[ 290.893511][ T6700] post_alloc_hook+0x181/0x1b0
[ 290.898286][ T6700] get_page_from_freelist+0xfce/0x2f80
[ 290.903768][ T6700] __alloc_frozen_pages_noprof+0x221/0x2470
[ 290.909683][ T6700] alloc_pages_mpol+0x1fc/0x540
[ 290.914536][ T6700] new_slab+0x23d/0x330
[ 290.918696][ T6700] ___slab_alloc+0xc5d/0x1720
[ 290.923376][ T6700] __slab_alloc.constprop.0+0x56/0xb0
[ 290.928751][ T6700] __kmalloc_noprof+0x2ec/0x510
[ 290.933603][ T6700] load_elf_phdrs+0x103/0x210
[ 290.938284][ T6700] load_elf_binary+0x1f8/0x4fc0
[ 290.943135][ T6700] bprm_execve+0x8dd/0x16d0
[ 290.947638][ T6700] do_execveat_common.isra.0+0x4a2/0x610
[ 290.953275][ T6700] __x64_sys_execve+0x8c/0xb0
[ 290.957957][ T6700] do_syscall_64+0xcd/0x250
[ 290.962466][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 290.968380][ T6700] page last free pid 5631 tgid 5631 stack trace:
[ 290.974720][ T6700] free_frozen_pages+0x6db/0xfb0
[ 290.979675][ T6700] qlist_free_all+0x4e/0x120
[ 290.984269][ T6700] kasan_quarantine_reduce+0x195/0x1e0
[ 290.989730][ T6700] __kasan_slab_alloc+0x69/0x90
[ 290.994591][ T6700] __kmalloc_noprof+0x1cd/0x510
[ 290.999451][ T6700] tomoyo_realpath_from_path+0xb9/0x720
[ 291.005017][ T6700] tomoyo_path_perm+0x276/0x460
[ 291.009867][ T6700] security_inode_getattr+0x116/0x290
[ 291.015238][ T6700] vfs_fstat+0x4b/0xd0
[ 291.019300][ T6700] vfs_fstatat+0xbc/0xf0
[ 291.023538][ T6700] __do_sys_newfstatat+0xa2/0x130
[ 291.028557][ T6700] do_syscall_64+0xcd/0x250
[ 291.033066][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 291.038964][ T6700]
[ 291.041277][ T6700] Memory state around the buggy address:
[ 291.046896][ T6700] ffff888027cb3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 291.054949][ T6700] ffff888027cb3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 291.063007][ T6700] >ffff888027cb3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 291.071057][ T6700] ^
[ 291.075110][ T6700] ffff888027cb3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 291.083166][ T6700] ffff888027cb3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 291.091219][ T6700] ==================================================================
[ 291.101867][ T6700] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 291.109090][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.0.616 Not tainted 6.14.0-syzkaller #0
[ 291.117595][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 291.127737][ T6700] Call Trace:
[ 291.131010][ T6700]
[ 291.133935][ T6700] dump_stack_lvl+0x3d/0x1f0
[ 291.138531][ T6700] panic+0x71d/0x800
[ 291.142428][ T6700] ? __pfx_panic+0x10/0x10
[ 291.146850][ T6700] ? preempt_schedule_thunk+0x1a/0x30
[ 291.152225][ T6700] ? preempt_schedule_common+0x44/0xc0
[ 291.157691][ T6700] ? check_panic_on_warn+0x1f/0xb0
[ 291.162804][ T6700] check_panic_on_warn+0xab/0xb0
[ 291.167747][ T6700] end_report+0x117/0x180
[ 291.172083][ T6700] kasan_report+0xe9/0x110
[ 291.176497][ T6700] ? force_devcd_write+0x317/0x330
[ 291.181615][ T6700] ? force_devcd_write+0x317/0x330
[ 291.186736][ T6700] force_devcd_write+0x317/0x330
[ 291.191676][ T6700] ? __pfx_force_devcd_write+0x10/0x10
[ 291.197140][ T6700] ? __debugfs_file_get+0x1ff/0x850
[ 291.202342][ T6700] ? __pfx___debugfs_file_get+0x10/0x10
[ 291.207893][ T6700] ? rcu_is_watching+0x12/0xc0
[ 291.212658][ T6700] ? trace_lock_acquire+0x14e/0x1f0
[ 291.217860][ T6700] full_proxy_write+0x13c/0x200
[ 291.222713][ T6700] ? __pfx_full_proxy_write+0x10/0x10
[ 291.228085][ T6700] vfs_write+0x24c/0x1150
[ 291.232420][ T6700] ? __pfx_vfs_write+0x10/0x10
[ 291.237186][ T6700] ? do_futex+0x123/0x350
[ 291.241518][ T6700] ? __pfx_do_futex+0x10/0x10
[ 291.246203][ T6700] ? __x64_sys_futex+0x1e1/0x4c0
[ 291.251143][ T6700] ? __x64_sys_futex+0x1ea/0x4c0
[ 291.256086][ T6700] ksys_write+0x12b/0x250
[ 291.260418][ T6700] ? __pfx_ksys_write+0x10/0x10
[ 291.265275][ T6700] do_syscall_64+0xcd/0x250
[ 291.269787][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 291.275689][ T6700] RIP: 0033:0x7faf3678d169
[ 291.280100][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 291.299706][ T6700] RSP: 002b:00007fff8c6a4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 291.308120][ T6700] RAX: ffffffffffffffda RBX: 00007faf369a5fa0 RCX: 00007faf3678d169
[ 291.316092][ T6700] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000002
[ 291.324063][ T6700] RBP: 00007faf3680e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 291.332064][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 291.340030][ T6700] R13: 00007faf369a5fa0 R14: 00007faf369a5fa0 R15: 0000000000000003
[ 291.348012][ T6700]
[ 291.351287][ T6700] Kernel Offset: disabled
[ 291.355606][ T6700] Rebooting in 86400 seconds..