Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts.
2026/04/03 09:16:35 parsed 1 programs
[ 63.154651][ T30] audit: type=1400 audit(1775207795.768:62): avc: denied { node_bind } for pid=5800 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 65.135319][ T30] audit: type=1400 audit(1775207797.748:63): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 65.159059][ T30] audit: type=1400 audit(1775207797.778:64): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 65.161598][ T5807] cgroup: Unknown subsys name 'net'
[ 65.189262][ T30] audit: type=1400 audit(1775207797.808:65): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 65.328291][ T5807] cgroup: Unknown subsys name 'cpuset'
[ 65.335731][ T5807] cgroup: Unknown subsys name 'rlimit'
[ 65.466768][ T30] audit: type=1400 audit(1775207798.088:66): avc: denied { setattr } for pid=5807 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 65.500694][ T30] audit: type=1400 audit(1775207798.088:67): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 65.554262][ T30] audit: type=1400 audit(1775207798.088:68): avc: denied { write } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 65.559717][ T5815] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 65.575759][ T30] audit: type=1400 audit(1775207798.088:69): avc: denied { read } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 65.603762][ T30] audit: type=1400 audit(1775207798.088:70): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 65.628902][ T30] audit: type=1400 audit(1775207798.088:71): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 65.808560][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 65.814975][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 66.620898][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 68.128549][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 68.156067][ T30] kauditd_printk_skb: 20 callbacks suppressed
[ 68.156082][ T30] audit: type=1400 audit(1775207800.768:92): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 68.186797][ T30] audit: type=1400 audit(1775207800.768:93): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 68.210935][ T30] audit: type=1400 audit(1775207800.768:94): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 68.486702][ T30] audit: type=1400 audit(1775207801.098:95): avc: denied { create } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 68.506980][ T30] audit: type=1400 audit(1775207801.108:96): avc: denied { read write } for pid=5837 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 68.534595][ T30] audit: type=1400 audit(1775207801.108:97): avc: denied { open } for pid=5837 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 68.546326][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 68.567075][ T30] audit: type=1400 audit(1775207801.108:98): avc: denied { ioctl } for pid=5837 comm="syz-executor" path="socket:[4869]" dev="sockfs" ino=4869 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 68.567226][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 68.600340][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 68.612331][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 68.619935][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.868842][ T30] audit: type=1400 audit(1775207802.488:99): avc: denied { module_request } for pid=5870 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 69.899150][ T5870] chnl_net:caif_netlink_parms(): no params data found
[ 69.983229][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.990859][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.998537][ T5870] bridge_slave_0: entered allmulticast mode
[ 70.007230][ T5870] bridge_slave_0: entered promiscuous mode
[ 70.019820][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.027014][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.034178][ T5870] bridge_slave_1: entered allmulticast mode
[ 70.042147][ T5870] bridge_slave_1: entered promiscuous mode
[ 70.074748][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.085408][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.106572][ T5870] team0: Port device team_slave_0 added
[ 70.113951][ T5870] team0: Port device team_slave_1 added
[ 70.131363][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.139368][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.165484][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.178234][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.185172][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.211289][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.246452][ T5870] hsr_slave_0: entered promiscuous mode
[ 70.252551][ T5870] hsr_slave_1: entered promiscuous mode
[ 70.348497][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 70.358890][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 70.369811][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 70.380528][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 70.402694][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.409901][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.417710][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.424768][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.461676][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 70.477199][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.485007][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.498974][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[ 70.510424][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.517519][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.529940][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.537066][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.589714][ T30] audit: type=1400 audit(1775207803.208:100): avc: denied { sys_module } for pid=5870 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 70.666238][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.699717][ T5870] veth0_vlan: entered promiscuous mode
[ 70.710792][ T5870] veth1_vlan: entered promiscuous mode
[ 70.730314][ T5870] veth0_macvtap: entered promiscuous mode
[ 70.738808][ T5870] veth1_macvtap: entered promiscuous mode
[ 70.752234][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.766666][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.778472][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.789216][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.798460][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.808853][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.913967][ T3545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.991052][ T3545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.010057][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.018938][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.048643][ T3545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.064942][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.073290][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.094357][ T3545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.325495][ T30] audit: type=1400 audit(1775207803.938:101): avc: denied { create } for pid=5901 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
2026/04/03 09:16:44 executed programs: 0
[ 71.883022][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 71.892486][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 71.901099][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 71.910274][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 71.917813][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 72.017648][ T5918] chnl_net:caif_netlink_parms(): no params data found
[ 72.071666][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.078828][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.086022][ T5918] bridge_slave_0: entered allmulticast mode
[ 72.092674][ T5918] bridge_slave_0: entered promiscuous mode
[ 72.100603][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.107759][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.114952][ T5918] bridge_slave_1: entered allmulticast mode
[ 72.121793][ T5918] bridge_slave_1: entered promiscuous mode
[ 72.145616][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.157233][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.182997][ T5918] team0: Port device team_slave_0 added
[ 72.190574][ T5918] team0: Port device team_slave_1 added
[ 72.214401][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.221516][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.247418][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.259409][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.266390][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 72.292334][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.329185][ T5918] hsr_slave_0: entered promiscuous mode
[ 72.335211][ T5918] hsr_slave_1: entered promiscuous mode
[ 72.341233][ T5918] debugfs: 'hsr0' already exists in 'hsr'
[ 72.347010][ T5918] Cannot create hsr debugfs directory
[ 73.704987][ T3545] bridge_slave_1: left allmulticast mode
[ 73.711279][ T3545] bridge_slave_1: left promiscuous mode
[ 73.717750][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.727464][ T3545] bridge_slave_0: left allmulticast mode
[ 73.733090][ T3545] bridge_slave_0: left promiscuous mode
[ 73.739806][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.849506][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 73.859634][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 73.869054][ T3545] bond0 (unregistering): Released all slaves
[ 73.966510][ T5130] Bluetooth: hci0: command tx timeout
[ 73.994684][ T3545] hsr_slave_0: left promiscuous mode
[ 74.004418][ T3545] hsr_slave_1: left promiscuous mode
[ 74.010620][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 74.018204][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 74.029034][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 74.036454][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.051474][ T3545] veth1_macvtap: left promiscuous mode
[ 74.061959][ T3545] veth0_macvtap: left promiscuous mode
[ 74.068301][ T3545] veth1_vlan: left promiscuous mode
[ 74.073715][ T3545] veth0_vlan: left promiscuous mode
[ 74.248973][ T3545] team0 (unregistering): Port device team_slave_1 removed
[ 74.260480][ T3545] team0 (unregistering): Port device team_slave_0 removed
[ 74.572098][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.600442][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.612253][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.630606][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 74.709789][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[ 74.727587][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[ 74.745347][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.752493][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.778315][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.785420][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.018173][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.234619][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.299835][ T5918] veth0_vlan: entered promiscuous mode
[ 75.308895][ T5918] veth1_vlan: entered promiscuous mode
[ 75.335142][ T5918] veth0_macvtap: entered promiscuous mode
[ 75.345129][ T5918] veth1_macvtap: entered promiscuous mode
[ 75.364742][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.381677][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.392756][ T739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.401862][ T739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.412900][ T739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.422488][ T739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.465580][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.478119][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.499923][ T739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.507890][ T739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.543673][ T30] kauditd_printk_skb: 3 callbacks suppressed
[ 75.543687][ T30] audit: type=1400 audit(1775207808.158:105): avc: denied { create } for pid=5977 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 75.571339][ T30] audit: type=1400 audit(1775207808.188:106): avc: denied { bind } for pid=5977 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 75.590848][ T30] audit: type=1400 audit(1775207808.208:107): avc: denied { setopt } for pid=5977 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 75.610879][ T30] audit: type=1400 audit(1775207808.208:108): avc: denied { accept } for pid=5977 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 75.630162][ T30] audit: type=1400 audit(1775207808.208:109): avc: denied { read } for pid=5977 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 75.650200][ T30] audit: type=1400 audit(1775207808.268:110): avc: denied { write } for pid=5977 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 75.651505][ T5978] ==================================================================
[ 75.677258][ T5978] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x8fb/0xa80
[ 75.684974][ T5978] Read of size 8 at addr ffff88807a355060 by task syz.0.17/5978
[ 75.692588][ T5978]
[ 75.694899][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 75.694916][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 75.694924][ T5978] Call Trace:
[ 75.694929][ T5978]
[ 75.694935][ T5978] dump_stack_lvl+0x100/0x190
[ 75.694960][ T5978] print_report+0x156/0x4c9
[ 75.694979][ T5978] ? __virt_addr_valid+0x81/0x620
[ 75.694998][ T5978] ? __phys_addr+0xe8/0x180
[ 75.695016][ T5978] ? af_alg_pull_tsgl+0x8fb/0xa80
[ 75.695036][ T5978] kasan_report+0xdf/0x1e0
[ 75.695050][ T5978] ? af_alg_pull_tsgl+0x8fb/0xa80
[ 75.695070][ T5978] af_alg_pull_tsgl+0x8fb/0xa80
[ 75.695092][ T5978] skcipher_recvmsg+0x512/0x1020
[ 75.695107][ T5978] ? rcu_is_watching+0x12/0xc0
[ 75.695123][ T5978] ? __pfx_skcipher_recvmsg+0x10/0x10
[ 75.695136][ T5978] ? __pfx_skcipher_recvmsg+0x10/0x10
[ 75.695149][ T5978] sock_recvmsg+0x1a4/0x1f0
[ 75.695162][ T5978] ____sys_recvmsg+0x218/0x640
[ 75.695176][ T5978] ? __pfx_____sys_recvmsg+0x10/0x10
[ 75.695192][ T5978] ? __lock_acquire+0x4a5/0x2630
[ 75.695206][ T5978] ___sys_recvmsg+0x16a/0x1a0
[ 75.695220][ T5978] ? __pfx____sys_recvmsg+0x10/0x10
[ 75.695240][ T5978] __sys_recvmsg+0x16d/0x220
[ 75.695258][ T5978] ? __pfx___sys_recvmsg+0x10/0x10
[ 75.695276][ T5978] ? __x64_sys_futex+0x34f/0x4d0
[ 75.695295][ T5978] do_syscall_64+0x106/0xf80
[ 75.695315][ T5978] ? clear_bhb_loop+0x40/0x90
[ 75.695329][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.695343][ T5978] RIP: 0033:0x7fd89519c819
[ 75.695354][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 75.695367][ T5978] RSP: 002b:00007fd896143028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 75.695380][ T5978] RAX: ffffffffffffffda RBX: 00007fd895415fa0 RCX: 00007fd89519c819
[ 75.695389][ T5978] RDX: 000000000000001c RSI: 0000200000000480 RDI: 0000000000000004
[ 75.695397][ T5978] RBP: 00007fd895232c91 R08: 0000000000000000 R09: 0000000000000000
[ 75.695404][ T5978] R10: 0000000040002022 R11: 0000000000000246 R12: 0000000000000000
[ 75.695412][ T5978] R13: 00007fd895416038 R14: 00007fd895415fa0 R15: 00007ffc970f49d8
[ 75.695424][ T5978]
[ 75.695429][ T5978]
[ 75.914794][ T5978] Allocated by task 5978:
[ 75.919099][ T5978] kasan_save_stack+0x30/0x50
[ 75.923765][ T5978] kasan_save_track+0x14/0x30
[ 75.928426][ T5978] __kasan_kmalloc+0xaa/0xb0
[ 75.932997][ T5978] __kmalloc_noprof+0x301/0x850
[ 75.937830][ T5978] sock_kmalloc+0x111/0x170
[ 75.942310][ T5978] skcipher_recvmsg+0x48b/0x1020
[ 75.947223][ T5978] sock_recvmsg+0x1a4/0x1f0
[ 75.951705][ T5978] ____sys_recvmsg+0x218/0x640
[ 75.956445][ T5978] ___sys_recvmsg+0x16a/0x1a0
[ 75.961099][ T5978] __sys_recvmsg+0x16d/0x220
[ 75.965672][ T5978] do_syscall_64+0x106/0xf80
[ 75.970250][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.976128][ T5978]
[ 75.978428][ T5978] The buggy address belongs to the object at ffff88807a355040
[ 75.978428][ T5978] which belongs to the cache kmalloc-32 of size 32
[ 75.992282][ T5978] The buggy address is located 0 bytes to the right of
[ 75.992282][ T5978] allocated 32-byte region [ffff88807a355040, ffff88807a355060)
[ 76.006663][ T5978]
[ 76.008966][ T5978] The buggy address belongs to the physical page:
[ 76.015354][ T5978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a355
[ 76.024090][ T5978] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 76.031174][ T5978] page_type: f5(slab)
[ 76.035136][ T5978] raw: 00fff00000000000 ffff88813fe40780 dead000000000100 dead000000000122
[ 76.043697][ T5978] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[ 76.052258][ T5978] page dumped because: kasan: bad access detected
[ 76.058650][ T5978] page_owner tracks the page as allocated
[ 76.064340][ T5978] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5222, tgid 5222 (udevd), ts 21957917631, free_ts 19433343578
[ 76.083327][ T5978] post_alloc_hook+0x153/0x170
[ 76.088078][ T5978] get_page_from_freelist+0x111d/0x3140
[ 76.093608][ T5978] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 76.099500][ T5978] new_slab+0xa6/0x6b0
[ 76.103555][ T5978] refill_objects+0x26b/0x400
[ 76.108217][ T5978] __pcs_replace_empty_main+0x1ab/0x660
[ 76.113744][ T5978] __kmalloc_cache_noprof+0x493/0x6f0
[ 76.119096][ T5978] kmem_cache_free+0x41f/0x6a0
[ 76.123839][ T5978] __put_anon_vma+0x114/0x3a0
[ 76.128499][ T5978] unlink_anon_vmas+0x5f3/0x8e0
[ 76.133331][ T5978] free_pgtables+0x2e7/0xd80
[ 76.137900][ T5978] exit_mmap+0x44c/0xa30
[ 76.142121][ T5978] __mmput+0x12a/0x410
[ 76.146169][ T5978] mmput+0x67/0x80
[ 76.149873][ T5978] begin_new_exec+0x10f0/0x38a0
[ 76.154700][ T5978] load_elf_binary+0x8f1/0x51b0
[ 76.159535][ T5978] page last free pid 5192 tgid 5192 stack trace:
[ 76.165838][ T5978] __free_frozen_pages+0x7e1/0x10d0
[ 76.171016][ T5978] qlist_free_all+0x47/0xe0
[ 76.175502][ T5978] kasan_quarantine_reduce+0x1a0/0x1f0
[ 76.180942][ T5978] __kasan_slab_alloc+0x69/0x90
[ 76.185768][ T5978] __kmalloc_noprof+0x2b9/0x850
[ 76.190600][ T5978] tomoyo_realpath_from_path+0xb6/0x690
[ 76.196130][ T5978] tomoyo_check_open_permission+0x2af/0x3c0
[ 76.202005][ T5978] tomoyo_file_open+0x6b/0x90
[ 76.206663][ T5978] security_file_open+0xb5/0x1e0
[ 76.211580][ T5978] do_dentry_open+0x5aa/0x1660
[ 76.216323][ T5978] vfs_open+0x82/0x3f0
[ 76.220374][ T5978] path_openat+0x208c/0x31a0
[ 76.224958][ T5978] do_file_open+0x20e/0x430
[ 76.229441][ T5978] do_sys_openat2+0x10d/0x1e0
[ 76.234098][ T5978] __x64_sys_openat+0x12d/0x210
[ 76.238928][ T5978] do_syscall_64+0x106/0xf80
[ 76.243505][ T5978]
[ 76.245806][ T5978] Memory state around the buggy address:
[ 76.251415][ T5978] ffff88807a354f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 76.259452][ T5978] ffff88807a354f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 76.267491][ T5978] >ffff88807a355000: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[ 76.275536][ T5978] ^
[ 76.282708][ T5978] ffff88807a355080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 76.290761][ T5978] ffff88807a355100: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[ 76.298796][ T5978] ==================================================================
[ 76.311416][ T976] cfg80211: failed to load regulatory.db
[ 76.326075][ T5978] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 76.333295][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 76.342397][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 76.352432][ T5978] Call Trace:
[ 76.355689][ T5978]
[ 76.358599][ T5978] dump_stack_lvl+0x100/0x190
[ 76.363265][ T5978] vpanic+0x552/0x970
[ 76.367226][ T5978] ? __pfx_vpanic+0x10/0x10
[ 76.371706][ T5978] ? af_alg_pull_tsgl+0x8fb/0xa80
[ 76.376714][ T5978] panic+0xd1/0xe0
[ 76.380412][ T5978] ? __pfx_panic+0x10/0x10
[ 76.384899][ T5978] ? af_alg_pull_tsgl+0x8fb/0xa80
[ 76.389937][ T5978] ? preempt_schedule_common+0x42/0xc0
[ 76.395399][ T5978] ? check_panic_on_warn+0x1f/0x90
[ 76.400494][ T5978] check_panic_on_warn.cold+0x19/0x34
[ 76.405871][ T5978] end_report.part.0+0x3a/0x90
[ 76.410639][ T5978] kasan_report.cold+0xe/0x18
[ 76.415312][ T5978] ? af_alg_pull_tsgl+0x8fb/0xa80
[ 76.420329][ T5978] af_alg_pull_tsgl+0x8fb/0xa80
[ 76.425170][ T5978] skcipher_recvmsg+0x512/0x1020
[ 76.430088][ T5978] ? rcu_is_watching+0x12/0xc0
[ 76.434837][ T5978] ? __pfx_skcipher_recvmsg+0x10/0x10
[ 76.440191][ T5978] ? __pfx_skcipher_recvmsg+0x10/0x10
[ 76.445541][ T5978] sock_recvmsg+0x1a4/0x1f0
[ 76.450030][ T5978] ____sys_recvmsg+0x218/0x640
[ 76.454775][ T5978] ? __pfx_____sys_recvmsg+0x10/0x10
[ 76.460043][ T5978] ? __lock_acquire+0x4a5/0x2630
[ 76.464960][ T5978] ___sys_recvmsg+0x16a/0x1a0
[ 76.469617][ T5978] ? __pfx____sys_recvmsg+0x10/0x10
[ 76.474799][ T5978] __sys_recvmsg+0x16d/0x220
[ 76.479371][ T5978] ? __pfx___sys_recvmsg+0x10/0x10
[ 76.484464][ T5978] ? __x64_sys_futex+0x34f/0x4d0
[ 76.489386][ T5978] do_syscall_64+0x106/0xf80
[ 76.493962][ T5978] ? clear_bhb_loop+0x40/0x90
[ 76.498620][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.504493][ T5978] RIP: 0033:0x7fd89519c819
[ 76.508885][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 76.528472][ T5978] RSP: 002b:00007fd896143028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 76.536863][ T5978] RAX: ffffffffffffffda RBX: 00007fd895415fa0 RCX: 00007fd89519c819
[ 76.544814][ T5978] RDX: 000000000000001c RSI: 0000200000000480 RDI: 0000000000000004
[ 76.552763][ T5978] RBP: 00007fd895232c91 R08: 0000000000000000 R09: 0000000000000000
[ 76.560713][ T5978] R10: 0000000040002022 R11: 0000000000000246 R12: 0000000000000000
[ 76.568661][ T5978] R13: 00007fd895416038 R14: 00007fd895415fa0 R15: 00007ffc970f49d8
[ 76.576614][ T5978]
[ 76.579876][ T5978] Kernel Offset: disabled
[ 76.584183][ T5978] Rebooting in 86400 seconds..