Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts.
2025/07/28 05:04:51 ignoring optional flag "sandboxArg"="0"
2025/07/28 05:04:52 parsed 1 programs
[ 122.095946][ T5875] cgroup: Unknown subsys name 'net'
[ 122.282003][ T5875] cgroup: Unknown subsys name 'cpuset'
[ 122.291302][ T5875] cgroup: Unknown subsys name 'rlimit'
[ 123.793315][ T5875] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 126.530213][ T5882] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 127.065283][ T5892] chnl_net:caif_netlink_parms(): no params data found
[ 127.148476][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.156164][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[ 127.163854][ T5892] bridge_slave_0: entered allmulticast mode
[ 127.171630][ T5892] bridge_slave_0: entered promiscuous mode
[ 127.181072][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.188708][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[ 127.195874][ T5892] bridge_slave_1: entered allmulticast mode
[ 127.203364][ T5892] bridge_slave_1: entered promiscuous mode
[ 127.240614][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 127.253338][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 127.294514][ T5892] team0: Port device team_slave_0 added
[ 127.302784][ T5892] team0: Port device team_slave_1 added
[ 127.333897][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 127.340922][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 127.367481][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 127.380273][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 127.387233][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 127.413255][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 127.460706][ T5892] hsr_slave_0: entered promiscuous mode
[ 127.467274][ T5892] hsr_slave_1: entered promiscuous mode
[ 127.607178][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 127.619214][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 127.629930][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 127.640482][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 127.670546][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.677824][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.685549][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.692671][ T5892] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.743967][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.762145][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 127.770711][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 127.786524][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.800454][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.807578][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.822264][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.829411][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.867299][ T5892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 127.878822][ T5892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 128.020901][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.063810][ T5892] veth0_vlan: entered promiscuous mode
[ 128.074285][ T5892] veth1_vlan: entered promiscuous mode
[ 128.101806][ T5892] veth0_macvtap: entered promiscuous mode
[ 128.111176][ T5892] veth1_macvtap: entered promiscuous mode
[ 128.129136][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.144838][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.160540][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.169955][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.179264][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.188080][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.333236][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 128.410653][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 128.500283][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 128.562404][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 129.405845][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.414828][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 129.450316][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.459420][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.627659][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 130.636108][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 130.644666][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 130.653335][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 130.661033][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/07/28 05:05:04 executed programs: 0
[ 131.161785][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.170767][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.179488][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.187700][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.195958][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 131.349969][ T5971] chnl_net:caif_netlink_parms(): no params data found
[ 131.426536][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[ 131.434087][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[ 131.441589][ T5971] bridge_slave_0: entered allmulticast mode
[ 131.449695][ T5971] bridge_slave_0: entered promiscuous mode
[ 131.457437][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.465273][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.472532][ T5971] bridge_slave_1: entered allmulticast mode
[ 131.479884][ T5971] bridge_slave_1: entered promiscuous mode
[ 131.525607][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 131.537707][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 131.617724][ T5971] team0: Port device team_slave_0 added
[ 131.624907][ T36] bridge_slave_1: left allmulticast mode
[ 131.631518][ T36] bridge_slave_1: left promiscuous mode
[ 131.637666][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.650298][ T36] bridge_slave_0: left allmulticast mode
[ 131.655985][ T36] bridge_slave_0: left promiscuous mode
[ 131.661905][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 131.863814][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 131.875345][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 131.885238][ T36] bond0 (unregistering): Released all slaves
[ 131.899501][ T5971] team0: Port device team_slave_1 added
[ 131.946260][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 131.956710][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 131.993403][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 132.013898][ T36] hsr_slave_0: left promiscuous mode
[ 132.021770][ T36] hsr_slave_1: left promiscuous mode
[ 132.028408][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 132.035847][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 132.045590][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 132.053316][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 132.079282][ T36] veth1_macvtap: left promiscuous mode
[ 132.084973][ T36] veth0_macvtap: left promiscuous mode
[ 132.091349][ T36] veth1_vlan: left promiscuous mode
[ 132.096760][ T36] veth0_vlan: left promiscuous mode
[ 132.484465][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 132.513118][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 132.632927][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.639590][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 132.727139][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 132.734360][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 132.760421][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 132.842993][ T5971] hsr_slave_0: entered promiscuous mode
[ 132.850551][ T5971] hsr_slave_1: entered promiscuous mode
[ 133.268988][ T51] Bluetooth: hci0: command tx timeout
[ 134.035279][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 134.046652][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 134.066123][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 134.088686][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 134.289957][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0
[ 134.354228][ T5971] 8021q: adding VLAN 0 to HW filter on device team0
[ 134.382298][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.389516][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 134.416308][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.423463][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 134.712551][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 134.761969][ T5971] veth0_vlan: entered promiscuous mode
[ 134.778423][ T5971] veth1_vlan: entered promiscuous mode
[ 134.816165][ T5971] veth0_macvtap: entered promiscuous mode
[ 134.826653][ T5971] veth1_macvtap: entered promiscuous mode
[ 134.851484][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 134.867735][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 134.883207][ T5971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.894559][ T5971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.904090][ T5971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.914767][ T5971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 135.006434][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 135.031601][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 135.062254][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 135.071376][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 135.358606][ T51] Bluetooth: hci0: command tx timeout
2025/07/28 05:05:10 executed programs: 4
[ 137.428357][ T51] Bluetooth: hci0: command tx timeout
[ 139.508333][ T51] Bluetooth: hci0: command tx timeout
2025/07/28 05:05:15 executed programs: 10
2025/07/28 05:05:20 executed programs: 16
2025/07/28 05:05:25 executed programs: 22
2025/07/28 05:05:30 executed programs: 28
2025/07/28 05:05:36 executed programs: 34
2025/07/28 05:05:41 executed programs: 40
2025/07/28 05:05:46 executed programs: 46
2025/07/28 05:05:51 executed programs: 52
[ 178.789287][ T12] ==================================================================
[ 178.797400][ T12] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x36/0x50
[ 178.805151][ T12] Read of size 1 at addr ffff88807cea9858 by task kworker/u8:0/12
[ 178.812948][ T12]
[ 178.815284][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-g5345e64760d3 #0 PREEMPT(full)
[ 178.815301][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 178.815310][ T12] Workqueue: kkcmd kcm_tx_work
[ 178.815339][ T12] Call Trace:
[ 178.815345][ T12]
[ 178.815351][ T12] dump_stack_lvl+0x189/0x250
[ 178.815368][ T12] ? __virt_addr_valid+0x1c8/0x5c0
[ 178.815391][ T12] ? rcu_is_watching+0x15/0xb0
[ 178.815411][ T12] ? __kasan_check_byte+0x12/0x40
[ 178.815430][ T12] ? __pfx_dump_stack_lvl+0x10/0x10
[ 178.815452][ T12] ? rcu_is_watching+0x15/0xb0
[ 178.815477][ T12] ? lock_release+0x4b/0x3e0
[ 178.815491][ T12] ? __virt_addr_valid+0x1c8/0x5c0
[ 178.815508][ T12] ? __virt_addr_valid+0x4a5/0x5c0
[ 178.815525][ T12] print_report+0xca/0x230
[ 178.815537][ T12] ? _raw_spin_lock_bh+0x36/0x50
[ 178.815551][ T12] kasan_report+0x118/0x150
[ 178.815565][ T12] ? _raw_spin_lock_bh+0x36/0x50
[ 178.815582][ T12] ? __lock_sock+0x156/0x2b0
[ 178.815597][ T12] __kasan_check_byte+0x2a/0x40
[ 178.815610][ T12] lock_acquire+0x8d/0x360
[ 178.815623][ T12] ? schedule+0x91/0x360
[ 178.815637][ T12] ? kthread_data+0x4f/0xc0
[ 178.815654][ T12] ? __lock_sock+0x156/0x2b0
[ 178.815700][ T12] _raw_spin_lock_bh+0x36/0x50
[ 178.815714][ T12] ? __lock_sock+0x156/0x2b0
[ 178.815732][ T12] __lock_sock+0x156/0x2b0
[ 178.815748][ T12] ? __pfx___lock_sock+0x10/0x10
[ 178.815763][ T12] ? do_raw_spin_lock+0x121/0x290
[ 178.815780][ T12] ? __pfx_autoremove_wake_function+0x10/0x10
[ 178.815799][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 178.815819][ T12] ? lock_sock_nested+0x6a/0x100
[ 178.815837][ T12] lock_sock_nested+0x9f/0x100
[ 178.815856][ T12] kcm_tx_work+0x31/0x180
[ 178.815872][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 178.815888][ T12] process_scheduled_works+0xae1/0x17b0
[ 178.815912][ T12] ? __pfx_process_scheduled_works+0x10/0x10
[ 178.815932][ T12] worker_thread+0x8a0/0xda0
[ 178.815955][ T12] kthread+0x711/0x8a0
[ 178.815974][ T12] ? __pfx_worker_thread+0x10/0x10
[ 178.815988][ T12] ? __pfx_kthread+0x10/0x10
[ 178.816006][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 178.816021][ T12] ? lockdep_hardirqs_on+0x9c/0x150
[ 178.816036][ T12] ? __pfx_kthread+0x10/0x10
[ 178.816054][ T12] ret_from_fork+0x3fc/0x770
[ 178.816068][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 178.816083][ T12] ? __switch_to_asm+0x39/0x70
[ 178.816100][ T12] ? __switch_to_asm+0x33/0x70
[ 178.816116][ T12] ? __pfx_kthread+0x10/0x10
[ 178.816134][ T12] ret_from_fork_asm+0x1a/0x30
[ 178.816156][ T12]
[ 178.816160][ T12]
[ 179.071863][ T12] Allocated by task 6278:
[ 179.076203][ T12] kasan_save_track+0x3e/0x80
[ 179.080891][ T12] __kasan_slab_alloc+0x6c/0x80
[ 179.085737][ T12] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 179.091189][ T12] sk_prot_alloc+0x57/0x220
[ 179.095691][ T12] sk_alloc+0x3a/0x370
[ 179.099774][ T12] kcm_ioctl+0x214/0xff0
[ 179.104035][ T12] sock_do_ioctl+0xd9/0x300
[ 179.108552][ T12] sock_ioctl+0x576/0x790
[ 179.112896][ T12] __se_sys_ioctl+0xf9/0x170
[ 179.117506][ T12] do_syscall_64+0xfa/0x3b0
[ 179.122023][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.127926][ T12]
[ 179.130257][ T12] Freed by task 6279:
[ 179.134239][ T12] kasan_save_track+0x3e/0x80
[ 179.138938][ T12] kasan_save_free_info+0x46/0x50
[ 179.143973][ T12] __kasan_slab_free+0x62/0x70
[ 179.148749][ T12] kmem_cache_free+0x18f/0x400
[ 179.153531][ T12] __sk_destruct+0x4d2/0x660
[ 179.158143][ T12] kcm_release+0x528/0x5c0
[ 179.162573][ T12] sock_close+0xc0/0x240
[ 179.166841][ T12] __fput+0x44c/0xa70
[ 179.170832][ T12] fput_close_sync+0x119/0x200
[ 179.175614][ T12] __x64_sys_close+0x7f/0x110
[ 179.180327][ T12] do_syscall_64+0xfa/0x3b0
[ 179.184859][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.190758][ T12]
[ 179.193084][ T12] Last potentially related work creation:
[ 179.198800][ T12] kasan_save_stack+0x3e/0x60
[ 179.203491][ T12] kasan_record_aux_stack+0xbd/0xd0
[ 179.208697][ T12] insert_work+0x3d/0x330
[ 179.213038][ T12] __queue_work+0xcfc/0xfe0
[ 179.217541][ T12] queue_work_on+0x181/0x270
[ 179.222129][ T12] kcm_unattach+0x863/0xe90
[ 179.226636][ T12] kcm_ioctl+0x794/0xff0
[ 179.230882][ T12] sock_do_ioctl+0xd9/0x300
[ 179.235389][ T12] sock_ioctl+0x576/0x790
[ 179.239724][ T12] __se_sys_ioctl+0xf9/0x170
[ 179.244324][ T12] do_syscall_64+0xfa/0x3b0
[ 179.248842][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.254740][ T12]
[ 179.257060][ T12] Second to last potentially related work creation:
[ 179.263638][ T12] kasan_save_stack+0x3e/0x60
[ 179.268322][ T12] kasan_record_aux_stack+0xbd/0xd0
[ 179.273523][ T12] insert_work+0x3d/0x330
[ 179.277852][ T12] __queue_work+0xcfc/0xfe0
[ 179.282357][ T12] queue_work_on+0x181/0x270
[ 179.286945][ T12] kcm_ioctl+0xe52/0xff0
[ 179.291198][ T12] sock_do_ioctl+0xd9/0x300
[ 179.295711][ T12] sock_ioctl+0x576/0x790
[ 179.300043][ T12] __se_sys_ioctl+0xf9/0x170
[ 179.304649][ T12] do_syscall_64+0xfa/0x3b0
[ 179.309161][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.315062][ T12]
[ 179.317384][ T12] The buggy address belongs to the object at ffff88807cea9680
[ 179.317384][ T12] which belongs to the cache KCM of size 1792
[ 179.330829][ T12] The buggy address is located 472 bytes inside of
[ 179.330829][ T12] freed 1792-byte region [ffff88807cea9680, ffff88807cea9d80)
[ 179.344712][ T12]
[ 179.347038][ T12] The buggy address belongs to the physical page:
[ 179.353456][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cea8
[ 179.362220][ T12] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 179.370712][ T12] memcg:ffff8880288c1d01
[ 179.374945][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 179.382488][ T12] page_type: f5(slab)
[ 179.386469][ T12] raw: 00fff00000000040 ffff88802fe0f8c0 dead000000000122 0000000000000000
[ 179.395051][ T12] raw: 0000000000000000 0000000080110011 00000000f5000000 ffff8880288c1d01
[ 179.403630][ T12] head: 00fff00000000040 ffff88802fe0f8c0 dead000000000122 0000000000000000
[ 179.412307][ T12] head: 0000000000000000 0000000080110011 00000000f5000000 ffff8880288c1d01
[ 179.420987][ T12] head: 00fff00000000003 ffffea0001f3aa01 00000000ffffffff 00000000ffffffff
[ 179.429665][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 179.438331][ T12] page dumped because: kasan: bad access detected
[ 179.444753][ T12] page_owner tracks the page as allocated
[ 179.450460][ T12] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6270, tgid 6268 (syz.0.65), ts 177075546789, free_ts 54709448688
[ 179.471559][ T12] post_alloc_hook+0x240/0x2a0
[ 179.476324][ T12] get_page_from_freelist+0x21e4/0x22c0
[ 179.481896][ T12] __alloc_frozen_pages_noprof+0x181/0x370
[ 179.487708][ T12] alloc_pages_mpol+0x232/0x4a0
[ 179.492560][ T12] allocate_slab+0x8a/0x3b0
[ 179.497065][ T12] ___slab_alloc+0xbfc/0x1480
[ 179.501739][ T12] kmem_cache_alloc_noprof+0x283/0x3c0
[ 179.507193][ T12] sk_prot_alloc+0x57/0x220
[ 179.511691][ T12] sk_alloc+0x3a/0x370
[ 179.515766][ T12] kcm_ioctl+0x214/0xff0
[ 179.520009][ T12] sock_do_ioctl+0xd9/0x300
[ 179.524510][ T12] sock_ioctl+0x576/0x790
[ 179.528846][ T12] __se_sys_ioctl+0xf9/0x170
[ 179.533446][ T12] do_syscall_64+0xfa/0x3b0
[ 179.537951][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.543838][ T12] page last free pid 5603 tgid 5603 stack trace:
[ 179.550157][ T12] __free_frozen_pages+0xc71/0xe70
[ 179.555266][ T12] __slab_free+0x326/0x400
[ 179.559685][ T12] qlist_free_all+0x97/0x140
[ 179.564287][ T12] kasan_quarantine_reduce+0x148/0x160
[ 179.569748][ T12] __kasan_slab_alloc+0x22/0x80
[ 179.574602][ T12] __kmalloc_noprof+0x224/0x4f0
[ 179.579457][ T12] tomoyo_realpath_from_path+0xe3/0x5d0
[ 179.585016][ T12] tomoyo_path_perm+0x213/0x4b0
[ 179.589876][ T12] security_inode_getattr+0x12f/0x330
[ 179.595251][ T12] __x64_sys_newfstat+0xfc/0x200
[ 179.600193][ T12] do_syscall_64+0xfa/0x3b0
[ 179.604707][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.610602][ T12]
[ 179.612933][ T12] Memory state around the buggy address:
[ 179.618566][ T12] ffff88807cea9700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.626629][ T12] ffff88807cea9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.634685][ T12] >ffff88807cea9800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.642742][ T12] ^
[ 179.649667][ T12] ffff88807cea9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.657726][ T12] ffff88807cea9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 179.665776][ T12] ==================================================================
[ 179.673957][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 179.681162][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-g5345e64760d3 #0 PREEMPT(full)
[ 179.692623][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 179.702681][ T12] Workqueue: kkcmd kcm_tx_work
[ 179.707487][ T12] Call Trace:
[ 179.710768][ T12]
[ 179.713715][ T12] dump_stack_lvl+0x99/0x250
[ 179.718309][ T12] ? __asan_memcpy+0x40/0x70
[ 179.722905][ T12] ? __pfx_dump_stack_lvl+0x10/0x10
[ 179.728102][ T12] ? __pfx__printk+0x10/0x10
[ 179.732709][ T12] panic+0x2db/0x790
[ 179.736604][ T12] ? lockdep_hardirqs_on+0x9c/0x150
[ 179.741805][ T12] ? __pfx_panic+0x10/0x10
[ 179.746222][ T12] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 179.752117][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 179.758009][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 179.764341][ T12] ? _raw_spin_lock_bh+0x36/0x50
[ 179.769280][ T12] check_panic_on_warn+0x89/0xb0
[ 179.774233][ T12] ? _raw_spin_lock_bh+0x36/0x50
[ 179.779178][ T12] end_report+0x78/0x160
[ 179.783427][ T12] kasan_report+0x129/0x150
[ 179.787932][ T12] ? _raw_spin_lock_bh+0x36/0x50
[ 179.792874][ T12] ? __lock_sock+0x156/0x2b0
[ 179.797467][ T12] __kasan_check_byte+0x2a/0x40
[ 179.802322][ T12] lock_acquire+0x8d/0x360
[ 179.806759][ T12] ? schedule+0x91/0x360
[ 179.811002][ T12] ? kthread_data+0x4f/0xc0
[ 179.815510][ T12] ? __lock_sock+0x156/0x2b0
[ 179.820105][ T12] _raw_spin_lock_bh+0x36/0x50
[ 179.824867][ T12] ? __lock_sock+0x156/0x2b0
[ 179.829465][ T12] __lock_sock+0x156/0x2b0
[ 179.833892][ T12] ? __pfx___lock_sock+0x10/0x10
[ 179.838836][ T12] ? do_raw_spin_lock+0x121/0x290
[ 179.843874][ T12] ? __pfx_autoremove_wake_function+0x10/0x10
[ 179.849946][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 179.855327][ T12] ? lock_sock_nested+0x6a/0x100
[ 179.860273][ T12] lock_sock_nested+0x9f/0x100
[ 179.865041][ T12] kcm_tx_work+0x31/0x180
[ 179.869380][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 179.875108][ T12] process_scheduled_works+0xae1/0x17b0
[ 179.880665][ T12] ? __pfx_process_scheduled_works+0x10/0x10
[ 179.886657][ T12] worker_thread+0x8a0/0xda0
[ 179.891265][ T12] kthread+0x711/0x8a0
[ 179.895342][ T12] ? __pfx_worker_thread+0x10/0x10
[ 179.900455][ T12] ? __pfx_kthread+0x10/0x10
[ 179.905080][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 179.910308][ T12] ? lockdep_hardirqs_on+0x9c/0x150
[ 179.915510][ T12] ? __pfx_kthread+0x10/0x10
[ 179.920107][ T12] ret_from_fork+0x3fc/0x770
[ 179.924695][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 179.929810][ T12] ? __switch_to_asm+0x39/0x70
[ 179.934583][ T12] ? __switch_to_asm+0x33/0x70
[ 179.939357][ T12] ? __pfx_kthread+0x10/0x10
[ 179.943962][ T12] ret_from_fork_asm+0x1a/0x30
[ 179.948741][ T12]
[ 179.952104][ T12] Kernel Offset: disabled
[ 179.956450][ T12] Rebooting in 86400 seconds..