Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts.
2024/12/21 06:40:55 ignoring optional flag "sandboxArg"="0"
2024/12/21 06:40:56 parsed 1 programs
[ 72.899432][ T5830] cgroup: Unknown subsys name 'net'
[ 73.013300][ T5830] cgroup: Unknown subsys name 'cpuset'
[ 73.021474][ T5830] cgroup: Unknown subsys name 'rlimit'
[ 74.378782][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.923896][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 78.577691][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.592382][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.619349][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.627392][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.753782][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 78.763052][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.771210][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.782295][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.790126][ T5881] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 78.801519][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.064466][ T5888] chnl_net:caif_netlink_parms(): no params data found
[ 79.143492][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.151426][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.158650][ T5888] bridge_slave_0: entered allmulticast mode
[ 79.166455][ T5888] bridge_slave_0: entered promiscuous mode
[ 79.175527][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.183882][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.191206][ T5888] bridge_slave_1: entered allmulticast mode
[ 79.197780][ T5888] bridge_slave_1: entered promiscuous mode
[ 79.236617][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.248185][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.287906][ T5888] team0: Port device team_slave_0 added
[ 79.294986][ T5888] team0: Port device team_slave_1 added
[ 79.317982][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.325277][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.351365][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.363836][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.370837][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.396792][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.426500][ T5888] hsr_slave_0: entered promiscuous mode
[ 79.434001][ T5888] hsr_slave_1: entered promiscuous mode
[ 79.533291][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.543884][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.553167][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.562947][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.585290][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.592462][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.600527][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.607670][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.652863][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.669047][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.677442][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.693110][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.706910][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.714051][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.726043][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.733181][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.855893][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.887055][ T5888] veth0_vlan: entered promiscuous mode
[ 79.896855][ T5888] veth1_vlan: entered promiscuous mode
[ 79.918326][ T5888] veth0_macvtap: entered promiscuous mode
[ 79.926515][ T5888] veth1_macvtap: entered promiscuous mode
[ 79.943618][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.956842][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.967558][ T5888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.976500][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.985913][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.994877][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.119096][ T3017] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.176412][ T3017] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.263035][ T3017] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.326028][ T3017] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2024/12/21 06:41:07 executed programs: 0
[ 81.179603][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.187911][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.203123][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.211985][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.219573][ T5881] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 81.227813][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.334510][ T5925] chnl_net:caif_netlink_parms(): no params data found
[ 81.394608][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.401804][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.408908][ T5925] bridge_slave_0: entered allmulticast mode
[ 81.415782][ T5925] bridge_slave_0: entered promiscuous mode
[ 81.424188][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.431538][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.438913][ T5925] bridge_slave_1: entered allmulticast mode
[ 81.446614][ T5925] bridge_slave_1: entered promiscuous mode
[ 81.473523][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.485052][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.514492][ T5925] team0: Port device team_slave_0 added
[ 81.523561][ T5925] team0: Port device team_slave_1 added
[ 81.549795][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.556776][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.584336][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.597099][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.604190][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.630518][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.659282][ T5925] hsr_slave_0: entered promiscuous mode
[ 81.665587][ T5925] hsr_slave_1: entered promiscuous mode
[ 81.672893][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.680811][ T5925] Cannot create hsr debugfs directory
[ 81.991754][ T8] cfg80211: failed to load regulatory.db
[ 83.119994][ T3017] bridge_slave_1: left allmulticast mode
[ 83.125759][ T3017] bridge_slave_1: left promiscuous mode
[ 83.136553][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.147445][ T3017] bridge_slave_0: left allmulticast mode
[ 83.154474][ T3017] bridge_slave_0: left promiscuous mode
[ 83.160282][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.282565][ T55] Bluetooth: hci0: command tx timeout
[ 83.373199][ T3017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.383882][ T3017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.394010][ T3017] bond0 (unregistering): Released all slaves
[ 83.516851][ T3017] hsr_slave_0: left promiscuous mode
[ 83.523154][ T3017] hsr_slave_1: left promiscuous mode
[ 83.529135][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.537192][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.547145][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.555311][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.573990][ T3017] veth1_macvtap: left promiscuous mode
[ 83.580586][ T3017] veth0_macvtap: left promiscuous mode
[ 83.586827][ T3017] veth1_vlan: left promiscuous mode
[ 83.593229][ T3017] veth0_vlan: left promiscuous mode
[ 83.938557][ T3017] team0 (unregistering): Port device team_slave_1 removed
[ 83.968651][ T3017] team0 (unregistering): Port device team_slave_0 removed
[ 84.408006][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.430158][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.442589][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.459885][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.544585][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.569377][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.731429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.738554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.761152][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.768284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.993844][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.041288][ T5925] veth0_vlan: entered promiscuous mode
[ 85.052095][ T5925] veth1_vlan: entered promiscuous mode
[ 85.077492][ T5925] veth0_macvtap: entered promiscuous mode
[ 85.085877][ T5925] veth1_macvtap: entered promiscuous mode
[ 85.100954][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.114228][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.124955][ T5925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.134334][ T5925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.144277][ T5925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.153176][ T5925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.201697][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.209571][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.238702][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.247748][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.364082][ T55] Bluetooth: hci0: command tx timeout
2024/12/21 06:41:12 executed programs: 39
[ 87.430280][ T55] Bluetooth: hci0: command tx timeout
[ 89.509814][ T55] Bluetooth: hci0: command tx timeout
2024/12/21 06:41:17 executed programs: 306
2024/12/21 06:41:22 executed programs: 583
[ 96.528414][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 96.539097][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 96.552007][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 96.561747][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 96.570777][ T5881] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 96.578338][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 96.668993][ T6569] chnl_net:caif_netlink_parms(): no params data found
[ 96.726595][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.733960][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.741758][ T6569] bridge_slave_0: entered allmulticast mode
[ 96.748917][ T6569] bridge_slave_0: entered promiscuous mode
[ 96.769746][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.784131][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.796020][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.803283][ T6569] bridge_slave_1: entered allmulticast mode
[ 96.809941][ T6569] bridge_slave_1: entered promiscuous mode
[ 96.839054][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.854946][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.867038][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.890354][ T6569] team0: Port device team_slave_0 added
[ 96.906703][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.922258][ T6569] team0: Port device team_slave_1 added
[ 96.940644][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.947614][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.974226][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.986655][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.994009][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.021877][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.043578][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.074440][ T6569] hsr_slave_0: entered promiscuous mode
[ 97.080742][ T6569] hsr_slave_1: entered promiscuous mode
[ 97.180220][ T12] bridge_slave_1: left allmulticast mode
[ 97.185910][ T12] bridge_slave_1: left promiscuous mode
[ 97.192601][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.201714][ T12] bridge_slave_0: left allmulticast mode
[ 97.207685][ T12] bridge_slave_0: left promiscuous mode
[ 97.215256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.413914][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.425234][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.435205][ T12] bond0 (unregistering): Released all slaves
[ 97.729495][ T12] hsr_slave_0: left promiscuous mode
[ 97.740683][ T12] hsr_slave_1: left promiscuous mode
[ 97.746693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.756034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.764480][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.773098][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.792097][ T12] veth1_macvtap: left promiscuous mode
[ 97.797666][ T12] veth0_macvtap: left promiscuous mode
[ 97.804047][ T12] veth1_vlan: left promiscuous mode
[ 97.809373][ T12] veth0_vlan: left promiscuous mode
[ 98.090087][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 98.124933][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 98.432993][ T6569] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.455522][ T6569] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.474292][ T6569] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.493155][ T6569] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.585169][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.616246][ T6569] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.630726][ T5881] Bluetooth: hci1: command tx timeout
[ 98.643028][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.650189][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.663767][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.670913][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.844845][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.876630][ T6569] veth0_vlan: entered promiscuous mode
[ 98.888120][ T6569] veth1_vlan: entered promiscuous mode
[ 98.908163][ T6569] veth0_macvtap: entered promiscuous mode
[ 98.916174][ T6569] veth1_macvtap: entered promiscuous mode
[ 98.929272][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.943708][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.954707][ T6569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.964320][ T6569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.973098][ T6569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.981849][ T6569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.033727][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.044432][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.065524][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.073430][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.104579][ T6611] ==================================================================
[ 99.112654][ T6611] BUG: KASAN: slab-use-after-free in force_devcd_write+0x31f/0x350
[ 99.120540][ T6611] Read of size 8 at addr ffff88807dff4800 by task syz.0.616/6611
[ 99.128242][ T6611]
[ 99.130566][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.0.616 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[ 99.141137][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 99.151201][ T6611] Call Trace:
[ 99.154498][ T6611]
[ 99.157436][ T6611] dump_stack_lvl+0x116/0x1f0
[ 99.162117][ T6611] print_report+0xc3/0x620
[ 99.166527][ T6611] ? __virt_addr_valid+0x5e/0x590
[ 99.171543][ T6611] ? __phys_addr+0xc6/0x150
[ 99.176038][ T6611] kasan_report+0xd9/0x110
[ 99.180447][ T6611] ? force_devcd_write+0x31f/0x350
[ 99.185557][ T6611] ? force_devcd_write+0x31f/0x350
[ 99.190672][ T6611] force_devcd_write+0x31f/0x350
[ 99.195594][ T6611] ? __pfx_force_devcd_write+0x10/0x10
[ 99.201054][ T6611] ? debugfs_file_get+0x21c/0x5c0
[ 99.206130][ T6611] ? __pfx_debugfs_file_get+0x10/0x10
[ 99.211493][ T6611] ? rcu_is_watching+0x12/0xc0
[ 99.216251][ T6611] ? trace_lock_acquire+0x14e/0x1f0
[ 99.221443][ T6611] full_proxy_write+0xfb/0x1b0
[ 99.226208][ T6611] ? __pfx_full_proxy_write+0x10/0x10
[ 99.231580][ T6611] vfs_write+0x24c/0x1150
[ 99.235899][ T6611] ? __pfx_vfs_write+0x10/0x10
[ 99.240678][ T6611] ? do_futex+0x123/0x350
[ 99.245000][ T6611] ? __pfx_do_futex+0x10/0x10
[ 99.249679][ T6611] ? __x64_sys_futex+0x1e1/0x4c0
[ 99.254637][ T6611] ? __x64_sys_futex+0x1ea/0x4c0
[ 99.259750][ T6611] ksys_write+0x12b/0x250
[ 99.264094][ T6611] ? __pfx_ksys_write+0x10/0x10
[ 99.268945][ T6611] do_syscall_64+0xcd/0x250
[ 99.273438][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.279328][ T6611] RIP: 0033:0x7fa46d985d29
[ 99.283730][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.303336][ T6611] RSP: 002b:00007fff2919f638 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 99.311738][ T6611] RAX: ffffffffffffffda RBX: 00007fa46db75fa0 RCX: 00007fa46d985d29
[ 99.319701][ T6611] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 99.327659][ T6611] RBP: 00007fa46da01aa8 R08: 0000000000000000 R09: 0000000000000000
[ 99.335617][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.343578][ T6611] R13: 00007fa46db75fa0 R14: 00007fa46db75fa0 R15: 00000000000018c5
[ 99.351557][ T6611]
[ 99.354581][ T6611]
[ 99.356890][ T6611] Allocated by task 5925:
[ 99.361204][ T6611] kasan_save_stack+0x33/0x60
[ 99.365872][ T6611] kasan_save_track+0x14/0x30
[ 99.370545][ T6611] __kasan_kmalloc+0xaa/0xb0
[ 99.375125][ T6611] vhci_open+0x4c/0x430
[ 99.379267][ T6611] misc_open+0x35a/0x420
[ 99.383503][ T6611] chrdev_open+0x237/0x6a0
[ 99.387905][ T6611] do_dentry_open+0xf59/0x1ea0
[ 99.392685][ T6611] vfs_open+0x82/0x3f0
[ 99.396745][ T6611] path_openat+0x1e6a/0x2d60
[ 99.401325][ T6611] do_filp_open+0x20c/0x470
[ 99.405819][ T6611] do_sys_openat2+0x17a/0x1e0
[ 99.410490][ T6611] __x64_sys_openat+0x175/0x210
[ 99.415328][ T6611] do_syscall_64+0xcd/0x250
[ 99.419846][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.425728][ T6611]
[ 99.428033][ T6611] Freed by task 5925:
[ 99.431993][ T6611] kasan_save_stack+0x33/0x60
[ 99.436655][ T6611] kasan_save_track+0x14/0x30
[ 99.441324][ T6611] kasan_save_free_info+0x3b/0x60
[ 99.446333][ T6611] __kasan_slab_free+0x51/0x70
[ 99.451102][ T6611] kfree+0x14f/0x4b0
[ 99.455007][ T6611] vhci_release+0xbb/0xf0
[ 99.459332][ T6611] __fput+0x3f8/0xb60
[ 99.463309][ T6611] task_work_run+0x14e/0x250
[ 99.467892][ T6611] do_exit+0xadd/0x2d70
[ 99.472044][ T6611] do_group_exit+0xd3/0x2a0
[ 99.476537][ T6611] get_signal+0x2576/0x2610
[ 99.481028][ T6611] arch_do_signal_or_restart+0x90/0x7e0
[ 99.486564][ T6611] syscall_exit_to_user_mode+0x150/0x2a0
[ 99.492184][ T6611] do_syscall_64+0xda/0x250
[ 99.496672][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.502558][ T6611]
[ 99.504868][ T6611] The buggy address belongs to the object at ffff88807dff4800
[ 99.504868][ T6611] which belongs to the cache kmalloc-1k of size 1024
[ 99.518912][ T6611] The buggy address is located 0 bytes inside of
[ 99.518912][ T6611] freed 1024-byte region [ffff88807dff4800, ffff88807dff4c00)
[ 99.532607][ T6611]
[ 99.534917][ T6611] The buggy address belongs to the physical page:
[ 99.541325][ T6611] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dff0
[ 99.550082][ T6611] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 99.558586][ T6611] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 99.566122][ T6611] page_type: f5(slab)
[ 99.570091][ T6611] raw: 00fff00000000040 ffff88801ac41dc0 ffffea00018fd200 dead000000000002
[ 99.578670][ T6611] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[ 99.587269][ T6611] head: 00fff00000000040 ffff88801ac41dc0 ffffea00018fd200 dead000000000002
[ 99.595928][ T6611] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[ 99.604591][ T6611] head: 00fff00000000003 ffffea0001f7fc01 ffffffffffffffff 0000000000000000
[ 99.613258][ T6611] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 99.621996][ T6611] page dumped because: kasan: bad access detected
[ 99.628397][ T6611] page_owner tracks the page as allocated
[ 99.634114][ T6611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5921, tgid 5921 (syz-executor), ts 80765654733, free_ts 80697964769
[ 99.655487][ T6611] post_alloc_hook+0x2d1/0x350
[ 99.660253][ T6611] get_page_from_freelist+0xfce/0x2f80
[ 99.665796][ T6611] __alloc_pages_noprof+0x223/0x25b0
[ 99.671075][ T6611] alloc_pages_mpol_noprof+0x2c9/0x610
[ 99.676529][ T6611] new_slab+0x2c9/0x410
[ 99.680670][ T6611] ___slab_alloc+0xce2/0x1650
[ 99.685332][ T6611] __slab_alloc.constprop.0+0x56/0xb0
[ 99.690693][ T6611] __kmalloc_node_noprof+0x2f0/0x520
[ 99.695974][ T6611] __kvmalloc_node_noprof+0xad/0x1a0
[ 99.701263][ T6611] bucket_table_alloc.isra.0+0x86/0x460
[ 99.706831][ T6611] rhashtable_init_noprof+0x43b/0x7d0
[ 99.712194][ T6611] fqdir_init+0xb4/0x1f0
[ 99.716428][ T6611] lowpan_frags_init_net+0x2d/0x3a0
[ 99.721618][ T6611] ops_init+0x1df/0x5f0
[ 99.725764][ T6611] setup_net+0x21f/0x860
[ 99.730001][ T6611] copy_net_ns+0x2b4/0x6c0
[ 99.734404][ T6611] page last free pid 973 tgid 973 stack trace:
[ 99.740537][ T6611] free_unref_page+0x661/0x1080
[ 99.745379][ T6611] kasan_depopulate_vmalloc_pte+0x63/0x80
[ 99.751100][ T6611] __apply_to_page_range+0x5fd/0xd30
[ 99.756400][ T6611] kasan_release_vmalloc+0xd1/0xe0
[ 99.761502][ T6611] purge_vmap_node+0x1d1/0xa40
[ 99.766253][ T6611] __purge_vmap_area_lazy+0x9bf/0xc10
[ 99.771612][ T6611] drain_vmap_area_work+0x27/0x40
[ 99.776621][ T6611] process_one_work+0x958/0x1b30
[ 99.781544][ T6611] worker_thread+0x6c8/0xf00
[ 99.786118][ T6611] kthread+0x2c1/0x3a0
[ 99.790179][ T6611] ret_from_fork+0x45/0x80
[ 99.794581][ T6611] ret_from_fork_asm+0x1a/0x30
[ 99.799339][ T6611]
[ 99.801651][ T6611] Memory state around the buggy address:
[ 99.807267][ T6611] ffff88807dff4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.815322][ T6611] ffff88807dff4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.823388][ T6611] >ffff88807dff4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 99.831445][ T6611] ^
[ 99.835498][ T6611] ffff88807dff4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 99.843558][ T6611] ffff88807dff4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 99.851611][ T6611] ==================================================================
[ 99.867769][ T6611] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 99.875000][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.0.616 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0
[ 99.885699][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 99.895764][ T6611] Call Trace:
[ 99.899036][ T6611]
[ 99.901958][ T6611] dump_stack_lvl+0x3d/0x1f0
[ 99.906635][ T6611] panic+0x71d/0x800
[ 99.910616][ T6611] ? __pfx_panic+0x10/0x10
[ 99.915027][ T6611] ? preempt_schedule_thunk+0x1a/0x30
[ 99.920497][ T6611] ? preempt_schedule_common+0x44/0xc0
[ 99.925986][ T6611] ? check_panic_on_warn+0x1f/0xb0
[ 99.931120][ T6611] check_panic_on_warn+0xab/0xb0
[ 99.936066][ T6611] end_report+0x117/0x180
[ 99.940397][ T6611] kasan_report+0xe9/0x110
[ 99.944812][ T6611] ? force_devcd_write+0x31f/0x350
[ 99.949921][ T6611] ? force_devcd_write+0x31f/0x350
[ 99.955023][ T6611] force_devcd_write+0x31f/0x350
[ 99.959954][ T6611] ? __pfx_force_devcd_write+0x10/0x10
[ 99.965402][ T6611] ? debugfs_file_get+0x21c/0x5c0
[ 99.970435][ T6611] ? __pfx_debugfs_file_get+0x10/0x10
[ 99.975828][ T6611] ? rcu_is_watching+0x12/0xc0
[ 99.980607][ T6611] ? trace_lock_acquire+0x14e/0x1f0
[ 99.985811][ T6611] full_proxy_write+0xfb/0x1b0
[ 99.990579][ T6611] ? __pfx_full_proxy_write+0x10/0x10
[ 99.995954][ T6611] vfs_write+0x24c/0x1150
[ 100.000287][ T6611] ? __pfx_vfs_write+0x10/0x10
[ 100.005046][ T6611] ? do_futex+0x123/0x350
[ 100.009378][ T6611] ? __pfx_do_futex+0x10/0x10
[ 100.014062][ T6611] ? __x64_sys_futex+0x1e1/0x4c0
[ 100.019002][ T6611] ? __x64_sys_futex+0x1ea/0x4c0
[ 100.023947][ T6611] ksys_write+0x12b/0x250
[ 100.028280][ T6611] ? __pfx_ksys_write+0x10/0x10
[ 100.033137][ T6611] do_syscall_64+0xcd/0x250
[ 100.037645][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.043540][ T6611] RIP: 0033:0x7fa46d985d29
[ 100.047951][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 100.067560][ T6611] RSP: 002b:00007fff2919f638 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 100.075979][ T6611] RAX: ffffffffffffffda RBX: 00007fa46db75fa0 RCX: 00007fa46d985d29
[ 100.083949][ T6611] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003
[ 100.091917][ T6611] RBP: 00007fa46da01aa8 R08: 0000000000000000 R09: 0000000000000000
[ 100.099883][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.107849][ T6611] R13: 00007fa46db75fa0 R14: 00007fa46db75fa0 R15: 00000000000018c5
[ 100.115825][ T6611]
[ 100.119076][ T6611] Kernel Offset: disabled
[ 100.123390][ T6611] Rebooting in 86400 seconds..