Warning: Permanently added '[localhost]:32616' (ED25519) to the list of known hosts.
2025/07/16 02:54:15 ignoring optional flag "sandboxArg"="0"
2025/07/16 02:54:15 ignoring optional flag "type"="qemu"
2025/07/16 02:54:15 parsed 1 programs
[ 75.714425][ T40] audit: type=1400 audit(1752634458.079:113): avc: denied { unlink } for pid=6259 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 76.256690][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.258794][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.067754][ T6259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 79.004345][ T6001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.007467][ T6001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.010003][ T6001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.013334][ T6001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.017134][ T6001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.320901][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.324059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.377644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.380221][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.739187][ T40] audit: type=1401 audit(1752634462.099:114): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 79.867861][ T6411] chnl_net:caif_netlink_parms(): no params data found
[ 79.972170][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.974568][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.976781][ T6411] bridge_slave_0: entered allmulticast mode
[ 79.979385][ T6411] bridge_slave_0: entered promiscuous mode
[ 79.983232][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.985561][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.987767][ T6411] bridge_slave_1: entered allmulticast mode
[ 79.991548][ T6411] bridge_slave_1: entered promiscuous mode
[ 80.040652][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.053185][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.105399][ T6411] team0: Port device team_slave_0 added
[ 80.111533][ T6411] team0: Port device team_slave_1 added
[ 80.160229][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.163224][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.173729][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.179580][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.182529][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.192780][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.233991][ T6411] hsr_slave_0: entered promiscuous mode
[ 80.236179][ T6411] hsr_slave_1: entered promiscuous mode
[ 80.447410][ T6411] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 80.451322][ T6411] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 80.455307][ T6411] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 80.459006][ T6411] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 80.520168][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.541006][ T6411] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.549092][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.552160][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.560856][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.563967][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.684997][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.706805][ T6411] veth0_vlan: entered promiscuous mode
[ 80.711636][ T6411] veth1_vlan: entered promiscuous mode
[ 80.730450][ T6411] veth0_macvtap: entered promiscuous mode
[ 80.736114][ T6411] veth1_macvtap: entered promiscuous mode
[ 80.744757][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.751096][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.756624][ T6411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.760292][ T6411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.765815][ T6411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.769214][ T6411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/07/16 02:54:23 executed programs: 0
[ 80.845713][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.849789][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 80.850365][ T6463] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 80.854475][ T6466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 80.854536][ T6460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.855287][ T6467] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 80.855508][ T6460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.856569][ T6467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 80.856980][ T6460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.857679][ T6467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 80.858174][ T6467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 80.858752][ T6467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 80.859398][ T6467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 80.859640][ T6466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 80.860029][ T6466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 80.860294][ T6466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 80.861437][ T5311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 80.861688][ T5311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 80.862813][ T6460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.868602][ T6467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 80.896557][ T1249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.997852][ T1249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.079991][ T1249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.165358][ T6453] chnl_net:caif_netlink_parms(): no params data found
[ 81.202411][ T6462] chnl_net:caif_netlink_parms(): no params data found
[ 81.297210][ T6455] chnl_net:caif_netlink_parms(): no params data found
[ 81.309674][ T6454] chnl_net:caif_netlink_parms(): no params data found
[ 81.315108][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.317293][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.319454][ T6453] bridge_slave_0: entered allmulticast mode
[ 81.322402][ T6453] bridge_slave_0: entered promiscuous mode
[ 81.325316][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.327446][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.329922][ T6453] bridge_slave_1: entered allmulticast mode
[ 81.333479][ T6453] bridge_slave_1: entered promiscuous mode
[ 81.393212][ T53] cfg80211: failed to load regulatory.db
[ 81.405952][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.458278][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.460556][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.463043][ T6462] bridge_slave_0: entered allmulticast mode
[ 81.465637][ T6462] bridge_slave_0: entered promiscuous mode
[ 81.469360][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.511528][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.514099][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.516403][ T6462] bridge_slave_1: entered allmulticast mode
[ 81.519147][ T6462] bridge_slave_1: entered promiscuous mode
[ 81.571648][ T6453] team0: Port device team_slave_0 added
[ 81.576574][ T6453] team0: Port device team_slave_1 added
[ 81.621447][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.624772][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.627259][ T6455] bridge_slave_0: entered allmulticast mode
[ 81.629971][ T6455] bridge_slave_0: entered promiscuous mode
[ 81.687476][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.690054][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.693223][ T6455] bridge_slave_1: entered allmulticast mode
[ 81.696491][ T6455] bridge_slave_1: entered promiscuous mode
[ 81.716855][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.720029][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.722611][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.730490][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.735154][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.737616][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.739827][ T6454] bridge_slave_0: entered allmulticast mode
[ 81.742654][ T6454] bridge_slave_0: entered promiscuous mode
[ 81.745984][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.748193][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.750481][ T6454] bridge_slave_1: entered allmulticast mode
[ 81.753352][ T6454] bridge_slave_1: entered promiscuous mode
[ 81.777190][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.780892][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.783216][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.791214][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.821980][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.860641][ T6462] team0: Port device team_slave_0 added
[ 81.879733][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.900573][ T6462] team0: Port device team_slave_1 added
[ 81.905563][ T6454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.988323][ T6454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.028223][ T6453] hsr_slave_0: entered promiscuous mode
[ 82.031272][ T6453] hsr_slave_1: entered promiscuous mode
[ 82.034155][ T6453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 82.037299][ T6453] Cannot create hsr debugfs directory
[ 82.042735][ T6455] team0: Port device team_slave_0 added
[ 82.093093][ T6455] team0: Port device team_slave_1 added
[ 82.096233][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.098920][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.108825][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.114399][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.117025][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.127725][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.135734][ T6454] team0: Port device team_slave_0 added
[ 82.174870][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.177654][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.188024][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.199008][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.202011][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.212485][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.240469][ T6454] team0: Port device team_slave_1 added
[ 82.296879][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.299673][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.310432][ T6454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.320281][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.323249][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.333670][ T6454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.464494][ T6462] hsr_slave_0: entered promiscuous mode
[ 82.467225][ T6462] hsr_slave_1: entered promiscuous mode
[ 82.469729][ T6462] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 82.472649][ T6462] Cannot create hsr debugfs directory
[ 82.538697][ T6455] hsr_slave_0: entered promiscuous mode
[ 82.540908][ T6455] hsr_slave_1: entered promiscuous mode
[ 82.543090][ T6455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 82.545438][ T6455] Cannot create hsr debugfs directory
[ 82.550722][ T6454] hsr_slave_0: entered promiscuous mode
[ 82.553384][ T6454] hsr_slave_1: entered promiscuous mode
[ 82.556142][ T6454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 82.559308][ T6454] Cannot create hsr debugfs directory
[ 82.892889][ T6467] Bluetooth: hci1: command tx timeout
[ 82.892893][ T6459] Bluetooth: hci0: command tx timeout
[ 82.893200][ T62] Bluetooth: hci2: command tx timeout
[ 82.911766][ T1249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.972018][ T62] Bluetooth: hci3: command tx timeout
[ 83.683728][ T6462] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 83.689887][ T6462] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 83.699991][ T6462] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 83.705986][ T6462] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 83.755799][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.768905][ T6462] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.775424][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.777717][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.785117][ T163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.787358][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.900461][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.926212][ T6462] veth0_vlan: entered promiscuous mode
[ 83.934411][ T6462] veth1_vlan: entered promiscuous mode
[ 83.958358][ T6462] veth0_macvtap: entered promiscuous mode
[ 83.964461][ T6462] veth1_macvtap: entered promiscuous mode
[ 83.978114][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.987632][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.995110][ T6462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.998766][ T6462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.002522][ T6462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.006126][ T6462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.040794][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.043496][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.056214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.058691][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.370993][ T1249] bridge_slave_1: left allmulticast mode
[ 84.373545][ T1249] bridge_slave_1: left promiscuous mode
[ 84.376112][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.381462][ T1249] bridge_slave_0: left allmulticast mode
[ 84.384160][ T1249] bridge_slave_0: left promiscuous mode
[ 84.386665][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.451929][ T6569] ==================================================================
[ 84.455080][ T6569] BUG: KASAN: slab-use-after-free in __schedule+0x4ed8/0x5de0
[ 84.458015][ T6569] Write of size 8 at addr ffff8880229202a8 by task dhcpcd-run-hook/6569
[ 84.463204][ T6569]
[ 84.464185][ T6569] CPU: 2 UID: 0 PID: 6569 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full)
[ 84.464206][ T6569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 84.464216][ T6569] Call Trace:
[ 84.464224][ T6569]
[ 84.464231][ T6569] dump_stack_lvl+0x116/0x1f0
[ 84.464257][ T6569] print_report+0xcd/0x610
[ 84.464279][ T6569] ? __virt_addr_valid+0x81/0x610
[ 84.464297][ T6569] ? __phys_addr+0xe8/0x180
[ 84.464315][ T6569] ? __schedule+0x4ed8/0x5de0
[ 84.464334][ T6569] kasan_report+0xe0/0x110
[ 84.464376][ T6569] ? __schedule+0x4ed8/0x5de0
[ 84.464397][ T6569] __schedule+0x4ed8/0x5de0
[ 84.464416][ T6569] ? do_raw_spin_lock+0x12c/0x2b0
[ 84.464438][ T6569] ? __pfx___schedule+0x10/0x10
[ 84.464460][ T6569] ? mark_held_locks+0x49/0x80
[ 84.464475][ T6569] preempt_schedule_irq+0x51/0x90
[ 84.464495][ T6569] irqentry_exit+0x36/0x90
[ 84.464515][ T6569] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.464532][ T6569] RIP: 0010:__unwind_start+0x476/0x7f0
[ 84.464548][ T6569] Code: 49 89 c4 49 01 ed 49 01 ec eb 2a 4c 89 f7 e8 f1 da ff ff 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 14 02 00 00 <41> 8b 06 85 c0 0f 84 56 fe ff ff 41 80 7d 00 00 0f 85 24 02 00 00
[ 84.464567][ T6569] RSP: 0018:ffffc900034477a8 EFLAGS: 00000246
[ 84.464579][ T6569] RAX: 0000000000000000 RBX: ffffc90003447888 RCX: ffffc900034476fc
[ 84.464590][ T6569] RDX: 0000000000000000 RSI: ffffffff8de0d975 RDI: ffff888031b48444
[ 84.464599][ T6569] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[ 84.464609][ T6569] R10: 0000000000000000 R11: 00000000000061e5 R12: fffff52000688f01
[ 84.464619][ T6569] R13: fffff52000688f00 R14: ffffc900034477f8 R15: ffffc90003447800
[ 84.464634][ T6569] ? __unwind_start+0x45f/0x7f0
[ 84.464649][ T6569] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 84.464672][ T6569] arch_stack_walk+0x73/0x100
[ 84.464689][ T6569] ? stack_trace_save+0x8e/0xc0
[ 84.464711][ T6569] stack_trace_save+0x8e/0xc0
[ 84.464732][ T6569] ? __pfx_stack_trace_save+0x10/0x10
[ 84.464753][ T6569] ? __lock_acquire+0xb8a/0x1c90
[ 84.464768][ T6569] kasan_save_stack+0x33/0x60
[ 84.464802][ T6569] kasan_save_track+0x14/0x30
[ 84.464821][ T6569] __kasan_kmalloc+0xaa/0xb0
[ 84.464840][ T6569] kmem_cache_free+0x142/0x4d0
[ 84.464859][ T6569] ? exit_mmap+0x511/0xb90
[ 84.464876][ T6569] exit_mmap+0x511/0xb90
[ 84.464892][ T6569] ? __pfx_exit_mmap+0x10/0x10
[ 84.464917][ T6569] __mmput+0x12a/0x410
[ 84.464936][ T6569] mmput+0x62/0x70
[ 84.464954][ T6569] do_exit+0x7c4/0x2bd0
[ 84.464978][ T6569] ? do_raw_spin_lock+0x12c/0x2b0
[ 84.464994][ T6569] ? __pfx_do_exit+0x10/0x10
[ 84.465017][ T6569] ? rcu_is_watching+0x12/0xc0
[ 84.465039][ T6569] do_group_exit+0xd3/0x2a0
[ 84.465062][ T6569] __x64_sys_exit_group+0x3e/0x50
[ 84.465085][ T6569] x64_sys_call+0x1530/0x1730
[ 84.465102][ T6569] do_syscall_64+0xcd/0x4c0
[ 84.465125][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.465140][ T6569] RIP: 0033:0x7fb6310386c5
[ 84.465151][ T6569] Code: Unable to access opcode bytes at 0x7fb63103869b.
[ 84.465158][ T6569] RSP: 002b:00007ffe09c795b8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[ 84.465171][ T6569] RAX: ffffffffffffffda RBX: 00007ffe09c79804 RCX: 00007fb6310386c5
[ 84.465181][ T6569] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000
[ 84.465190][ T6569] RBP: 0000000000000003 R08: 00007ffe09c796b0 R09: 0000000000000002
[ 84.465200][ T6569] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 84.465208][ T6569] R13: 00007ffe09c798f0 R14: 00007fb631248000 R15: 0000561732749d98
[ 84.465223][ T6569]
[ 84.465228][ T6569]
[ 84.593845][ T6569] Allocated by task 6561:
[ 84.595655][ T6569] kasan_save_stack+0x33/0x60
[ 84.597670][ T6569] kasan_save_track+0x14/0x30
[ 84.599648][ T6569] __kasan_slab_alloc+0x89/0x90
[ 84.601583][ T6569] kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[ 84.603515][ T6569] copy_process+0x4b6/0x7650
[ 84.605485][ T6569] kernel_clone+0xfc/0x960
[ 84.607367][ T6569] __do_sys_clone3+0x212/0x290
[ 84.609275][ T6569] do_syscall_64+0xcd/0x4c0
[ 84.611166][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.613645][ T6569]
[ 84.614674][ T6569] Freed by task 6568:
[ 84.616386][ T6569] kasan_save_stack+0x33/0x60
[ 84.618358][ T6569] kasan_save_track+0x14/0x30
[ 84.620342][ T6569] kasan_save_free_info+0x3b/0x60
[ 84.622444][ T6569] __kasan_slab_free+0x51/0x70
[ 84.624469][ T6569] kmem_cache_free+0x2d1/0x4d0
[ 84.626477][ T6569] delayed_put_task_struct+0x115/0x2e0
[ 84.628754][ T6569] rcu_core+0x79c/0x14e0
[ 84.630530][ T6569] handle_softirqs+0x219/0x8e0
[ 84.632190][ T6569] __irq_exit_rcu+0x109/0x170
[ 84.633805][ T6569] irq_exit_rcu+0x9/0x30
[ 84.635567][ T6569] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 84.637722][ T6569] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.640205][ T6569]
[ 84.641248][ T6569] Last potentially related work creation:
[ 84.643618][ T6569] kasan_save_stack+0x33/0x60
[ 84.645599][ T6569] kasan_record_aux_stack+0xa7/0xc0
[ 84.647683][ T6569] __call_rcu_common.constprop.0+0xa5/0xa10
[ 84.650127][ T6569] put_task_struct_rcu_user+0x75/0xc0
[ 84.652083][ T6569] __schedule+0x1172/0x5de0
[ 84.653553][ T6569] schedule_idle+0x5c/0x90
[ 84.655195][ T6569] do_idle+0x2b6/0x510
[ 84.656929][ T6569] cpu_startup_entry+0x4f/0x60
[ 84.658936][ T6569] start_secondary+0x21d/0x2b0
[ 84.660952][ T6569] common_startup_64+0x13e/0x148
[ 84.663150][ T6569]
[ 84.664065][ T6569] Second to last potentially related work creation:
[ 84.666174][ T6569] kasan_save_stack+0x33/0x60
[ 84.667672][ T6569] kasan_record_aux_stack+0xa7/0xc0
[ 84.669335][ T6569] task_work_add+0x258/0x360
[ 84.670803][ T6569] sched_tick+0x2a9/0x940
[ 84.672484][ T6569] update_process_times+0x19c/0x2d0
[ 84.674412][ T6569] tick_nohz_handler+0x37e/0x540
[ 84.676504][ T6569] __hrtimer_run_queues+0x5ea/0xad0
[ 84.678681][ T6569] hrtimer_interrupt+0x397/0x8e0
[ 84.680767][ T6569] __sysvec_apic_timer_interrupt+0x10b/0x3f0
[ 84.682808][ T6569] sysvec_apic_timer_interrupt+0x9f/0xc0
[ 84.684583][ T6569] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.686491][ T6569]
[ 84.687259][ T6569] The buggy address belongs to the object at ffff888022920000
[ 84.687259][ T6569] which belongs to the cache task_struct of size 9024
[ 84.691753][ T6569] The buggy address is located 680 bytes inside of
[ 84.691753][ T6569] freed 9024-byte region [ffff888022920000, ffff888022922340)
[ 84.697382][ T6569]
[ 84.698408][ T6569] The buggy address belongs to the physical page:
[ 84.700514][ T6569] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22920
[ 84.703894][ T6569] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 84.707238][ T6569] memcg:ffff88802b040701
[ 84.708960][ T6569] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 84.711919][ T6569] page_type: f5(slab)
[ 84.713191][ T6569] raw: 00fff00000000040 ffff88801cef0140 0000000000000000 dead000000000001
[ 84.715839][ T6569] raw: 0000000000000000 0000000000030003 00000000f5000000 ffff88802b040701
[ 84.718508][ T6569] head: 00fff00000000040 ffff88801cef0140 0000000000000000 dead000000000001
[ 84.721808][ T6569] head: 0000000000000000 0000000000030003 00000000f5000000 ffff88802b040701
[ 84.724678][ T6569] head: 00fff00000000003 ffffea00008a4801 00000000ffffffff 00000000ffffffff
[ 84.727867][ T6569] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 84.730575][ T6569] page dumped because: kasan: bad access detected
[ 84.732639][ T6569] page_owner tracks the page as allocated
[ 84.734424][ T6569] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 46, tgid 46 (kworker/u32:2), ts 4698788921, free_ts 0
[ 84.740542][ T6569] post_alloc_hook+0x1c0/0x230
[ 84.742176][ T6569] get_page_from_freelist+0x1321/0x3890
[ 84.743944][ T6569] __alloc_frozen_pages_noprof+0x261/0x23f0
[ 84.746132][ T6569] alloc_pages_mpol+0x1fb/0x550
[ 84.748145][ T6569] new_slab+0x23b/0x330
[ 84.749853][ T6569] ___slab_alloc+0xd9c/0x1940
[ 84.751820][ T6569] __slab_alloc.constprop.0+0x56/0xb0
[ 84.754046][ T6569] kmem_cache_alloc_node_noprof+0xf5/0x3b0
[ 84.756190][ T6569] copy_process+0x4b6/0x7650
[ 84.757661][ T6569] kernel_clone+0xfc/0x960
[ 84.759067][ T6569] user_mode_thread+0xc7/0x110
[ 84.760578][ T6569] call_usermodehelper_exec_work+0xcb/0x170
[ 84.762939][ T6569] process_one_work+0x9cf/0x1b70
[ 84.765105][ T6569] worker_thread+0x6c8/0xf10
[ 84.767049][ T6569] kthread+0x3c5/0x780
[ 84.768774][ T6569] ret_from_fork+0x5d7/0x6f0
[ 84.770715][ T6569] page_owner free stack trace missing
[ 84.772589][ T6569]
[ 84.773359][ T6569] Memory state around the buggy address:
[ 84.775121][ T6569] ffff888022920180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.777645][ T6569] ffff888022920200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.780112][ T6569] >ffff888022920280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.782625][ T6569] ^
[ 84.784296][ T6569] ffff888022920300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.786797][ T6569] ffff888022920380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.789280][ T6569] ==================================================================
[ 84.791894][ T6569] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.794164][ T6569] CPU: 2 UID: 0 PID: 6569 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full)
[ 84.797970][ T6569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 84.801872][ T6569] Call Trace:
[ 84.803270][ T6569]
[ 84.804531][ T6569] dump_stack_lvl+0x3d/0x1f0
[ 84.806340][ T6569] panic+0x71c/0x800
[ 84.807813][ T6569] ? __pfx_panic+0x10/0x10
[ 84.809235][ T6569] ? __pfx__printk+0x10/0x10
[ 84.810683][ T6569] ? end_report+0x4c/0x170
[ 84.812109][ T6569] ? check_panic_on_warn+0x1f/0xb0
[ 84.813722][ T6569] ? __schedule+0x4ed8/0x5de0
[ 84.815195][ T6569] check_panic_on_warn+0xab/0xb0
[ 84.816773][ T6569] end_report+0x107/0x170
[ 84.818127][ T6569] kasan_report+0xee/0x110
[ 84.819527][ T6569] ? __schedule+0x4ed8/0x5de0
[ 84.821057][ T6569] __schedule+0x4ed8/0x5de0
[ 84.822497][ T6569] ? do_raw_spin_lock+0x12c/0x2b0
[ 84.824072][ T6569] ? __pfx___schedule+0x10/0x10
[ 84.825656][ T6569] ? mark_held_locks+0x49/0x80
[ 84.827178][ T6569] preempt_schedule_irq+0x51/0x90
[ 84.828774][ T6569] irqentry_exit+0x36/0x90
[ 84.830174][ T6569] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 84.832061][ T6569] RIP: 0010:__unwind_start+0x476/0x7f0
[ 84.833777][ T6569] Code: 49 89 c4 49 01 ed 49 01 ec eb 2a 4c 89 f7 e8 f1 da ff ff 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 14 02 00 00 <41> 8b 06 85 c0 0f 84 56 fe ff ff 41 80 7d 00 00 0f 85 24 02 00 00
[ 84.839662][ T6569] RSP: 0018:ffffc900034477a8 EFLAGS: 00000246
[ 84.841608][ T6569] RAX: 0000000000000000 RBX: ffffc90003447888 RCX: ffffc900034476fc
[ 84.844050][ T6569] RDX: 0000000000000000 RSI: ffffffff8de0d975 RDI: ffff888031b48444
[ 84.846519][ T6569] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[ 84.848976][ T6569] R10: 0000000000000000 R11: 00000000000061e5 R12: fffff52000688f01
[ 84.851432][ T6569] R13: fffff52000688f00 R14: ffffc900034477f8 R15: ffffc90003447800
[ 84.853898][ T6569] ? __unwind_start+0x45f/0x7f0
[ 84.855418][ T6569] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 84.857385][ T6569] arch_stack_walk+0x73/0x100
[ 84.859040][ T6569] ? stack_trace_save+0x8e/0xc0
[ 84.860642][ T6569] stack_trace_save+0x8e/0xc0
[ 84.862195][ T6569] ? __pfx_stack_trace_save+0x10/0x10
[ 84.863926][ T6569] ? __lock_acquire+0xb8a/0x1c90
[ 84.865740][ T6569] kasan_save_stack+0x33/0x60
[ 84.867305][ T6569] kasan_save_track+0x14/0x30
[ 84.868833][ T6569] __kasan_kmalloc+0xaa/0xb0
[ 84.870319][ T6569] kmem_cache_free+0x142/0x4d0
[ 84.872080][ T6569] ? exit_mmap+0x511/0xb90
[ 84.873545][ T6569] exit_mmap+0x511/0xb90
[ 84.874930][ T6569] ? __pfx_exit_mmap+0x10/0x10
[ 84.876526][ T6569] __mmput+0x12a/0x410
[ 84.877860][ T6569] mmput+0x62/0x70
[ 84.879073][ T6569] do_exit+0x7c4/0x2bd0
[ 84.880435][ T6569] ? do_raw_spin_lock+0x12c/0x2b0
[ 84.882428][ T6569] ? __pfx_do_exit+0x10/0x10
[ 84.884264][ T6569] ? rcu_is_watching+0x12/0xc0
[ 84.885801][ T6569] do_group_exit+0xd3/0x2a0
[ 84.887208][ T6569] __x64_sys_exit_group+0x3e/0x50
[ 84.888797][ T6569] x64_sys_call+0x1530/0x1730
[ 84.890265][ T6569] do_syscall_64+0xcd/0x4c0
[ 84.891692][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 84.893545][ T6569] RIP: 0033:0x7fb6310386c5
[ 84.894953][ T6569] Code: Unable to access opcode bytes at 0x7fb63103869b.
[ 84.897137][ T6569] RSP: 002b:00007ffe09c795b8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[ 84.899685][ T6569] RAX: ffffffffffffffda RBX: 00007ffe09c79804 RCX: 00007fb6310386c5
[ 84.902121][ T6569] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000
[ 84.904549][ T6569] RBP: 0000000000000003 R08: 00007ffe09c796b0 R09: 0000000000000002
[ 84.907032][ T6569] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 84.909482][ T6569] R13: 00007ffe09c798f0 R14: 00007fb631248000 R15: 0000561732749d98
[ 84.912084][ T6569]
[ 85.996799][ T6569] Shutting down cpus with NMI
[ 85.998900][ T6569] Kernel Offset: disabled
[ 86.000264][ T6569] Rebooting in 86400 seconds..