Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts.
2025/08/04 14:00:26 ignoring optional flag "sandboxArg"="0"
2025/08/04 14:00:27 parsed 1 programs
[ 131.319176][ T6330] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 132.958265][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.965029][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 135.135212][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 135.144447][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 135.152442][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 135.162165][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 135.180191][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 135.526522][ T6372] chnl_net:caif_netlink_parms(): no params data found
[ 135.614584][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.621746][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 135.629084][ T6372] bridge_slave_0: entered allmulticast mode
[ 135.636461][ T6372] bridge_slave_0: entered promiscuous mode
[ 135.644649][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.652574][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 135.660205][ T6372] bridge_slave_1: entered allmulticast mode
[ 135.668192][ T6372] bridge_slave_1: entered promiscuous mode
[ 135.698537][ T6372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 135.712320][ T6372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 135.748422][ T6372] team0: Port device team_slave_0 added
[ 135.758945][ T6372] team0: Port device team_slave_1 added
[ 135.785397][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 135.792411][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 135.819536][ T6372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 135.831551][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 135.838913][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 135.865213][ T6372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.905334][ T6372] hsr_slave_0: entered promiscuous mode
[ 135.911636][ T6372] hsr_slave_1: entered promiscuous mode
[ 136.500196][ T6372] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 136.512720][ T6372] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 136.526911][ T6372] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 136.540009][ T6372] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 136.579759][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.587043][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 136.594600][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.601772][ T6372] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 136.656112][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.668307][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.715606][ T6372] 8021q: adding VLAN 0 to HW filter on device bond0
[ 136.742709][ T6372] 8021q: adding VLAN 0 to HW filter on device team0
[ 136.756934][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.764155][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 136.781927][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.789159][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 137.101656][ T6372] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 137.160088][ T6372] veth0_vlan: entered promiscuous mode
[ 137.175919][ T6372] veth1_vlan: entered promiscuous mode
[ 137.217273][ T6372] veth0_macvtap: entered promiscuous mode
[ 137.229845][ T6372] veth1_macvtap: entered promiscuous mode
[ 137.255791][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 137.272803][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 137.289512][ T6372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.300809][ T6372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.309673][ T6372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.320303][ T6372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.516482][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.622227][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.730699][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.830503][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 139.454488][ T36] bridge_slave_1: left allmulticast mode
[ 139.460219][ T36] bridge_slave_1: left promiscuous mode
[ 139.474154][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.504660][ T36] bridge_slave_0: left allmulticast mode
[ 139.510435][ T36] bridge_slave_0: left promiscuous mode
[ 139.519612][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.972706][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 139.985549][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 139.997701][ T36] bond0 (unregistering): Released all slaves
[ 140.104604][ T36] hsr_slave_0: left promiscuous mode
[ 140.110893][ T36] hsr_slave_1: left promiscuous mode
[ 140.118791][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 140.126305][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 140.138347][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 140.145971][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 140.164811][ T36] veth1_macvtap: left promiscuous mode
[ 140.170420][ T36] veth0_macvtap: left promiscuous mode
[ 140.177388][ T36] veth1_vlan: left promiscuous mode
[ 140.182852][ T36] veth0_vlan: left promiscuous mode
[ 140.686317][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 140.726025][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 141.192562][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.227634][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.296920][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.311422][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/08/04 14:00:42 executed programs: 0
[ 142.569981][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 142.584662][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 142.594406][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 142.602501][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 142.610642][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 142.945472][ T6559] chnl_net:caif_netlink_parms(): no params data found
[ 143.049576][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.057242][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state
[ 143.064652][ T6559] bridge_slave_0: entered allmulticast mode
[ 143.071879][ T6559] bridge_slave_0: entered promiscuous mode
[ 143.080069][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.087410][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state
[ 143.095391][ T6559] bridge_slave_1: entered allmulticast mode
[ 143.102976][ T6559] bridge_slave_1: entered promiscuous mode
[ 143.146867][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 143.160726][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 143.210579][ T6559] team0: Port device team_slave_0 added
[ 143.220817][ T6559] team0: Port device team_slave_1 added
[ 143.264851][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 143.271851][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.300431][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 143.315099][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 143.322104][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.349300][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 143.412272][ T6559] hsr_slave_0: entered promiscuous mode
[ 143.419115][ T6559] hsr_slave_1: entered promiscuous mode
[ 143.938757][ T6559] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 143.951013][ T6559] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 143.963206][ T6559] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 143.983022][ T6559] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 144.107581][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.137468][ T6559] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.151672][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.158951][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.191167][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.198433][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.488561][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 144.545688][ T6559] veth0_vlan: entered promiscuous mode
[ 144.559907][ T6559] veth1_vlan: entered promiscuous mode
[ 144.598908][ T6559] veth0_macvtap: entered promiscuous mode
[ 144.609541][ T6559] veth1_macvtap: entered promiscuous mode
[ 144.631998][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 144.646309][ T5876] Bluetooth: hci0: command tx timeout
[ 144.654496][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 144.667544][ T6559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.676450][ T6559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.685370][ T6559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.694992][ T6559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.780382][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 144.792376][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 144.829546][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 144.838355][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 145.010520][ T6632] Console: switching to colour VGA+ 80x25
[ 145.122027][ T6639] ==================================================================
[ 145.122045][ T6639] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70
[ 145.122084][ T6639] Read of size 256 at addr ffff888144ebb860 by task syz.0.17/6639
[ 145.122105][ T6639]
[ 145.122137][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full)
[ 145.122176][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 145.122198][ T6639] Call Trace:
[ 145.122206][ T6639]
[ 145.122215][ T6639] dump_stack_lvl+0x116/0x1f0
[ 145.122246][ T6639] print_report+0xcd/0x630
[ 145.122275][ T6639] ? __virt_addr_valid+0x81/0x610
[ 145.122303][ T6639] ? __phys_addr+0xe8/0x180
[ 145.122332][ T6639] ? fbcon_prepare_logo+0xa03/0xc70
[ 145.122361][ T6639] kasan_report+0xe0/0x110
[ 145.122391][ T6639] ? fbcon_prepare_logo+0xa03/0xc70
[ 145.122425][ T6639] kasan_check_range+0x100/0x1b0
[ 145.122460][ T6639] __asan_memcpy+0x23/0x60
[ 145.122484][ T6639] fbcon_prepare_logo+0xa03/0xc70
[ 145.122520][ T6639] fbcon_init+0xd77/0x1900
[ 145.122551][ T6639] ? __pfx_drm_fb_helper_set_par+0x10/0x10
[ 145.122588][ T6639] visual_init+0x31d/0x620
[ 145.122614][ T6639] do_bind_con_driver.isra.0+0x57a/0xbf0
[ 145.122650][ T6639] store_bind+0x61d/0x760
[ 145.122681][ T6639] ? sysfs_file_kobj+0xe4/0x290
[ 145.122706][ T6639] ? __pfx_store_bind+0x10/0x10
[ 145.122733][ T6639] dev_attr_store+0x55/0x80
[ 145.122766][ T6639] ? __pfx_dev_attr_store+0x10/0x10
[ 145.122799][ T6639] sysfs_kf_write+0xef/0x150
[ 145.122824][ T6639] kernfs_fop_write_iter+0x354/0x510
[ 145.122858][ T6639] ? __pfx_sysfs_kf_write+0x10/0x10
[ 145.122884][ T6639] vfs_write+0x6c4/0x1150
[ 145.122915][ T6639] ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 145.122952][ T6639] ? __pfx___mutex_lock+0x10/0x10
[ 145.122987][ T6639] ? __pfx_vfs_write+0x10/0x10
[ 145.123023][ T6639] ksys_write+0x12a/0x250
[ 145.123048][ T6639] ? __pfx_ksys_write+0x10/0x10
[ 145.123079][ T6639] do_syscall_64+0xcd/0x490
[ 145.123109][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 145.123141][ T6639] RIP: 0033:0x7f36be18e9a9
[ 145.123167][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 145.123194][ T6639] RSP: 002b:00007f36bef23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 145.123218][ T6639] RAX: ffffffffffffffda RBX: 00007f36be3b5fa0 RCX: 00007f36be18e9a9
[ 145.123235][ T6639] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000004
[ 145.123250][ T6639] RBP: 00007f36be210d69 R08: 0000000000000000 R09: 0000000000000000
[ 145.123265][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 145.123280][ T6639] R13: 0000000000000000 R14: 00007f36be3b5fa0 R15: 00007ffe05ac9a98
[ 145.123305][ T6639]
[ 145.123314][ T6639]
[ 145.123320][ T6639] Allocated by task 1100:
[ 145.123332][ T6639] kasan_save_stack+0x33/0x60
[ 145.123356][ T6639] kasan_save_track+0x14/0x30
[ 145.123380][ T6639] __kasan_kmalloc+0xaa/0xb0
[ 145.123403][ T6639] __kmalloc_node_track_caller_noprof+0x221/0x510
[ 145.123433][ T6639] kmalloc_reserve+0xef/0x2c0
[ 145.123460][ T6639] __alloc_skb+0x166/0x380
[ 145.123482][ T6639] mld_newpack.isra.0+0x18e/0xa20
[ 145.123503][ T6639] add_grhead+0x299/0x340
[ 145.123530][ T6639] add_grec+0x112a/0x1680
[ 145.123550][ T6639] mld_send_initial_cr.part.0+0xe2/0x260
[ 145.123574][ T6639] ipv6_mc_dad_complete+0x22c/0x2b0
[ 145.123598][ T6639] addrconf_dad_completed+0xd8a/0x10d0
[ 145.123630][ T6639] addrconf_dad_work+0x84d/0x14e0
[ 145.123661][ T6639] process_one_work+0x9cc/0x1b70
[ 145.123696][ T6639] worker_thread+0x6c8/0xf10
[ 145.123728][ T6639] kthread+0x3c2/0x780
[ 145.123757][ T6639] ret_from_fork+0x5d4/0x6f0
[ 145.123790][ T6639] ret_from_fork_asm+0x1a/0x30
[ 145.123818][ T6639]
[ 145.123824][ T6639] Freed by task 1100:
[ 145.123835][ T6639] kasan_save_stack+0x33/0x60
[ 145.123860][ T6639] kasan_save_track+0x14/0x30
[ 145.123884][ T6639] kasan_save_free_info+0x3b/0x60
[ 145.123917][ T6639] __kasan_slab_free+0x51/0x70
[ 145.123943][ T6639] kfree+0x2b4/0x4d0
[ 145.123961][ T6639] skb_free_head+0x114/0x210
[ 145.123985][ T6639] skb_release_data+0x776/0x9c0
[ 145.124014][ T6639] sk_skb_reason_drop+0x129/0x1a0
[ 145.124044][ T6639] ip_tunnel_xmit+0x8e0/0x37b0
[ 145.124066][ T6639] __gre_xmit+0x8bb/0xc00
[ 145.124102][ T6639] gre_tap_xmit+0x3b3/0x630
[ 145.124138][ T6639] dev_hard_start_xmit+0x97/0x740
[ 145.124163][ T6639] sch_direct_xmit+0x1b2/0xcf0
[ 145.124190][ T6639] __dev_queue_xmit+0x13c7/0x43e0
[ 145.124214][ T6639] ip6_finish_output2+0xe98/0x2020
[ 145.124248][ T6639] __ip6_finish_output+0x3cd/0xff0
[ 145.124269][ T6639] ip6_output+0x1f9/0x540
[ 145.124288][ T6639] mld_sendpack+0x9e9/0x1220
[ 145.124312][ T6639] mld_send_initial_cr.part.0+0x1a1/0x260
[ 145.124339][ T6639] ipv6_mc_dad_complete+0x22c/0x2b0
[ 145.124366][ T6639] addrconf_dad_completed+0xd8a/0x10d0
[ 145.124397][ T6639] addrconf_dad_work+0x84d/0x14e0
[ 145.124426][ T6639] process_one_work+0x9cc/0x1b70
[ 145.124456][ T6639] worker_thread+0x6c8/0xf10
[ 145.124493][ T6639] kthread+0x3c2/0x780
[ 145.124519][ T6639] ret_from_fork+0x5d4/0x6f0
[ 145.124549][ T6639] ret_from_fork_asm+0x1a/0x30
[ 145.124573][ T6639]
[ 145.124578][ T6639] The buggy address belongs to the object at ffff888144ebb000
[ 145.124578][ T6639] which belongs to the cache kmalloc-2k of size 2048
[ 145.124597][ T6639] The buggy address is located 96 bytes to the right of
[ 145.124597][ T6639] allocated 2048-byte region [ffff888144ebb000, ffff888144ebb800)
[ 145.124620][ T6639]
[ 145.124626][ T6639] The buggy address belongs to the physical page:
[ 145.124642][ T6639] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144eb8
[ 145.124665][ T6639] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 145.124683][ T6639] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[ 145.124712][ T6639] page_type: f5(slab)
[ 145.124733][ T6639] raw: 057ff00000000040 ffff88801b842000 0000000000000000 dead000000000001
[ 145.124752][ T6639] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 145.124773][ T6639] head: 057ff00000000040 ffff88801b842000 0000000000000000 dead000000000001
[ 145.124795][ T6639] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 145.124818][ T6639] head: 057ff00000000003 ffffea000513ae01 00000000ffffffff 00000000ffffffff
[ 145.124840][ T6639] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 145.124854][ T6639] page dumped because: kasan: bad access detected
[ 145.124870][ T6639] page_owner tracks the page as allocated
[ 145.124878][ T6639] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3818223817, free_ts 0
[ 145.124920][ T6639] post_alloc_hook+0x1c0/0x230
[ 145.124944][ T6639] get_page_from_freelist+0x1321/0x3890
[ 145.124969][ T6639] __alloc_frozen_pages_noprof+0x261/0x23f0
[ 145.125017][ T6639] alloc_pages_mpol+0x1fb/0x550
[ 145.125050][ T6639] new_slab+0x23b/0x330
[ 145.125069][ T6639] ___slab_alloc+0xd9c/0x1940
[ 145.125088][ T6639] __slab_alloc.constprop.0+0x56/0xb0
[ 145.125110][ T6639] __kmalloc_cache_noprof+0xfb/0x3e0
[ 145.125138][ T6639] acpi_ds_create_walk_state+0x78/0x250
[ 145.125169][ T6639] acpi_ps_execute_method+0x253/0xb30
[ 145.125200][ T6639] acpi_ns_evaluate+0x76c/0xca0
[ 145.125230][ T6639] acpi_ut_evaluate_object+0xda/0x4a0
[ 145.125261][ T6639] acpi_ut_execute_STA+0x87/0x1a0
[ 145.125291][ T6639] acpi_ns_get_device_callback+0x23c/0x500
[ 145.125316][ T6639] acpi_ns_walk_namespace+0x405/0x5b0
[ 145.125341][ T6639] acpi_get_devices+0x137/0x160
[ 145.125364][ T6639] page_owner free stack trace missing
[ 145.125372][ T6639]
[ 145.125377][ T6639] Memory state around the buggy address:
[ 145.125389][ T6639] ffff888144ebb700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 145.125407][ T6639] ffff888144ebb780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 145.125424][ T6639] >ffff888144ebb800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 145.125438][ T6639] ^
[ 145.125451][ T6639] ffff888144ebb880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 145.125469][ T6639] ffff888144ebb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 145.125482][ T6639] ==================================================================
[ 145.130376][ T6639] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 145.130397][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full)
[ 145.130429][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 145.130443][ T6639] Call Trace:
[ 145.130451][ T6639]
[ 145.130461][ T6639] dump_stack_lvl+0x3d/0x1f0
[ 145.130496][ T6639] panic+0x71c/0x800
[ 145.130530][ T6639] ? __pfx_panic+0x10/0x10
[ 145.130561][ T6639] ? irqentry_exit+0x3b/0x90
[ 145.130588][ T6639] ? lockdep_hardirqs_on+0x7c/0x110
[ 145.130617][ T6639] ? preempt_schedule_thunk+0x16/0x30
[ 145.130651][ T6639] ? fbcon_prepare_logo+0xa03/0xc70
[ 145.130682][ T6639] ? preempt_schedule_common+0x44/0xc0
[ 145.130712][ T6639] ? check_panic_on_warn+0x1f/0xb0
[ 145.130748][ T6639] ? fbcon_prepare_logo+0xa03/0xc70
[ 145.130779][ T6639] check_panic_on_warn+0xab/0xb0
[ 145.130811][ T6639] end_report+0x107/0x170
[ 145.130850][ T6639] kasan_report+0xee/0x110
[ 145.130877][ T6639] ? fbcon_prepare_logo+0xa03/0xc70
[ 145.130910][ T6639] kasan_check_range+0x100/0x1b0
[ 145.130942][ T6639] __asan_memcpy+0x23/0x60
[ 145.130966][ T6639] fbcon_prepare_logo+0xa03/0xc70
[ 145.131003][ T6639] fbcon_init+0xd77/0x1900
[ 145.131034][ T6639] ? __pfx_drm_fb_helper_set_par+0x10/0x10
[ 145.131072][ T6639] visual_init+0x31d/0x620
[ 145.131108][ T6639] do_bind_con_driver.isra.0+0x57a/0xbf0
[ 145.131159][ T6639] store_bind+0x61d/0x760
[ 145.131190][ T6639] ? sysfs_file_kobj+0xe4/0x290
[ 145.131214][ T6639] ? __pfx_store_bind+0x10/0x10
[ 145.131241][ T6639] dev_attr_store+0x55/0x80
[ 145.131273][ T6639] ? __pfx_dev_attr_store+0x10/0x10
[ 145.131313][ T6639] sysfs_kf_write+0xef/0x150
[ 145.131335][ T6639] kernfs_fop_write_iter+0x354/0x510
[ 145.131368][ T6639] ? __pfx_sysfs_kf_write+0x10/0x10
[ 145.131391][ T6639] vfs_write+0x6c4/0x1150
[ 145.131418][ T6639] ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 145.131453][ T6639] ? __pfx___mutex_lock+0x10/0x10
[ 145.131483][ T6639] ? __pfx_vfs_write+0x10/0x10
[ 145.131523][ T6639] ksys_write+0x12a/0x250
[ 145.131547][ T6639] ? __pfx_ksys_write+0x10/0x10
[ 145.131577][ T6639] do_syscall_64+0xcd/0x490
[ 145.131606][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 145.131631][ T6639] RIP: 0033:0x7f36be18e9a9
[ 145.131650][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 145.131672][ T6639] RSP: 002b:00007f36bef23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 145.131697][ T6639] RAX: ffffffffffffffda RBX: 00007f36be3b5fa0 RCX: 00007f36be18e9a9
[ 145.131714][ T6639] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000004
[ 145.131728][ T6639] RBP: 00007f36be210d69 R08: 0000000000000000 R09: 0000000000000000
[ 145.131743][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 145.131758][ T6639] R13: 0000000000000000 R14: 00007f36be3b5fa0 R15: 00007ffe05ac9a98
[ 145.131782][ T6639]
[ 145.132107][ T6639] Kernel Offset: disabled