Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts.
2025/07/21 03:41:27 ignoring optional flag "sandboxArg"="0"
2025/07/21 03:41:29 parsed 1 programs
[ 91.493222][ T5852] cgroup: Unknown subsys name 'net'
[ 91.595460][ T5852] cgroup: Unknown subsys name 'cpuset'
[ 91.604745][ T5852] cgroup: Unknown subsys name 'rlimit'
[ 91.886574][ T43] cfg80211: failed to load regulatory.db
[ 93.292601][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.380991][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 97.297120][ T5875] chnl_net:caif_netlink_parms(): no params data found
[ 97.382156][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.389735][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.397082][ T5875] bridge_slave_0: entered allmulticast mode
[ 97.404657][ T5875] bridge_slave_0: entered promiscuous mode
[ 97.414002][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.421173][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.428522][ T5875] bridge_slave_1: entered allmulticast mode
[ 97.436460][ T5875] bridge_slave_1: entered promiscuous mode
[ 97.469342][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.481184][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.517743][ T5875] team0: Port device team_slave_0 added
[ 97.526715][ T5875] team0: Port device team_slave_1 added
[ 97.557370][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.564425][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.590476][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.603457][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.610528][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.636741][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.687320][ T5875] hsr_slave_0: entered promiscuous mode
[ 97.694301][ T5875] hsr_slave_1: entered promiscuous mode
[ 97.849209][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.862481][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.873297][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.884618][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.916180][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.923560][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.931193][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.938397][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.994921][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.014440][ T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.024674][ T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.041372][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.054764][ T78] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.061929][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.075399][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.082554][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.269380][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.311208][ T5875] veth0_vlan: entered promiscuous mode
[ 98.327960][ T5875] veth1_vlan: entered promiscuous mode
[ 98.357337][ T5875] veth0_macvtap: entered promiscuous mode
[ 98.367081][ T5875] veth1_macvtap: entered promiscuous mode
[ 98.387601][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.401669][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.413627][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.424014][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.432922][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.441693][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.605572][ T3014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.692837][ T3014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.738504][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.747042][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.769024][ T3014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.805839][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.814058][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.841005][ T3014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.273042][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.284451][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.293091][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.301828][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.310407][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/07/21 03:41:42 executed programs: 0
[ 101.420582][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.428423][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.436685][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.448278][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.456892][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.618294][ T3014] bridge_slave_1: left allmulticast mode
[ 101.625537][ T3014] bridge_slave_1: left promiscuous mode
[ 101.633463][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.653920][ T3014] bridge_slave_0: left allmulticast mode
[ 101.659598][ T3014] bridge_slave_0: left promiscuous mode
[ 101.665415][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.904052][ T3014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.915558][ T3014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.925760][ T3014] bond0 (unregistering): Released all slaves
[ 102.059070][ T3014] hsr_slave_0: left promiscuous mode
[ 102.082270][ T3014] hsr_slave_1: left promiscuous mode
[ 102.093822][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.103873][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.114877][ T3014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.134125][ T3014] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.164515][ T3014] veth1_macvtap: left promiscuous mode
[ 102.170914][ T3014] veth0_macvtap: left promiscuous mode
[ 102.181021][ T3014] veth1_vlan: left promiscuous mode
[ 102.186501][ T3014] veth0_vlan: left promiscuous mode
[ 102.671819][ T3014] team0 (unregistering): Port device team_slave_1 removed
[ 102.704920][ T3014] team0 (unregistering): Port device team_slave_0 removed
[ 103.042858][ T5954] chnl_net:caif_netlink_parms(): no params data found
[ 103.299629][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.316035][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.324121][ T5954] bridge_slave_0: entered allmulticast mode
[ 103.332358][ T5954] bridge_slave_0: entered promiscuous mode
[ 103.341082][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.349716][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.365478][ T5954] bridge_slave_1: entered allmulticast mode
[ 103.375711][ T5954] bridge_slave_1: entered promiscuous mode
[ 103.427106][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.442627][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.483448][ T5167] Bluetooth: hci0: command tx timeout
[ 103.511004][ T5954] team0: Port device team_slave_0 added
[ 103.520136][ T5954] team0: Port device team_slave_1 added
[ 103.596729][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.611423][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.642444][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.105043][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.112303][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.139399][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.273857][ T5954] hsr_slave_0: entered promiscuous mode
[ 104.280693][ T5954] hsr_slave_1: entered promiscuous mode
[ 105.209249][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.223872][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.235835][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.246953][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.363346][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.396037][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.410262][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.417613][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.435598][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.442828][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.562136][ T5167] Bluetooth: hci0: command tx timeout
[ 105.766632][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.820263][ T5954] veth0_vlan: entered promiscuous mode
[ 105.855242][ T5954] veth1_vlan: entered promiscuous mode
[ 105.896249][ T5954] veth0_macvtap: entered promiscuous mode
[ 105.908255][ T5954] veth1_macvtap: entered promiscuous mode
[ 105.936818][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.955375][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.973783][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.983679][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.994581][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.004761][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.089783][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.107535][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.145536][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.154103][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/21 03:41:48 executed programs: 3
[ 107.641965][ T5167] Bluetooth: hci0: command tx timeout
[ 109.722472][ T5167] Bluetooth: hci0: command tx timeout
2025/07/21 03:41:53 executed programs: 9
[ 112.313665][ T49] ==================================================================
[ 112.321784][ T49] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x36/0x50
[ 112.329531][ T49] Read of size 1 at addr ffff888034022ed8 by task kworker/u8:3/49
[ 112.337329][ T49]
[ 112.339668][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full)
[ 112.339685][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 112.339696][ T49] Workqueue: kkcmd kcm_tx_work
[ 112.339720][ T49] Call Trace:
[ 112.339728][ T49]
[ 112.339736][ T49] dump_stack_lvl+0x189/0x250
[ 112.339754][ T49] ? __virt_addr_valid+0x1c8/0x5c0
[ 112.339773][ T49] ? rcu_is_watching+0x15/0xb0
[ 112.339789][ T49] ? __kasan_check_byte+0x12/0x40
[ 112.339810][ T49] ? __pfx_dump_stack_lvl+0x10/0x10
[ 112.339827][ T49] ? rcu_is_watching+0x15/0xb0
[ 112.339843][ T49] ? lock_release+0x4b/0x3e0
[ 112.339859][ T49] ? __virt_addr_valid+0x1c8/0x5c0
[ 112.339878][ T49] ? __virt_addr_valid+0x4a5/0x5c0
[ 112.339897][ T49] print_report+0xca/0x230
[ 112.339910][ T49] ? _raw_spin_lock_bh+0x36/0x50
[ 112.339931][ T49] kasan_report+0x118/0x150
[ 112.339952][ T49] ? _raw_spin_lock_bh+0x36/0x50
[ 112.339977][ T49] ? __lock_sock+0x156/0x2b0
[ 112.339991][ T49] __kasan_check_byte+0x2a/0x40
[ 112.340011][ T49] lock_acquire+0x8d/0x360
[ 112.340025][ T49] ? schedule+0x91/0x360
[ 112.340038][ T49] ? kthread_data+0x4f/0xc0
[ 112.340055][ T49] ? __lock_sock+0x156/0x2b0
[ 112.340068][ T49] _raw_spin_lock_bh+0x36/0x50
[ 112.340094][ T49] ? __lock_sock+0x156/0x2b0
[ 112.340108][ T49] __lock_sock+0x156/0x2b0
[ 112.340141][ T49] ? __pfx___lock_sock+0x10/0x10
[ 112.340155][ T49] ? do_raw_spin_lock+0x121/0x290
[ 112.340175][ T49] ? __pfx_autoremove_wake_function+0x10/0x10
[ 112.340197][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 112.340220][ T49] ? lock_sock_nested+0x6a/0x100
[ 112.340238][ T49] lock_sock_nested+0x9f/0x100
[ 112.340256][ T49] kcm_tx_work+0x31/0x180
[ 112.340271][ T49] ? process_scheduled_works+0x9ef/0x17b0
[ 112.340289][ T49] process_scheduled_works+0xae1/0x17b0
[ 112.340317][ T49] ? __pfx_process_scheduled_works+0x10/0x10
[ 112.340341][ T49] worker_thread+0x8a0/0xda0
[ 112.340368][ T49] kthread+0x70e/0x8a0
[ 112.340390][ T49] ? __pfx_worker_thread+0x10/0x10
[ 112.340406][ T49] ? __pfx_kthread+0x10/0x10
[ 112.340427][ T49] ? _raw_spin_unlock_irq+0x23/0x50
[ 112.340440][ T49] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.340454][ T49] ? __pfx_kthread+0x10/0x10
[ 112.340475][ T49] ret_from_fork+0x3fc/0x770
[ 112.340491][ T49] ? __pfx_ret_from_fork+0x10/0x10
[ 112.340508][ T49] ? __switch_to_asm+0x39/0x70
[ 112.340527][ T49] ? __switch_to_asm+0x33/0x70
[ 112.340546][ T49] ? __pfx_kthread+0x10/0x10
[ 112.340566][ T49] ret_from_fork_asm+0x1a/0x30
[ 112.340592][ T49]
[ 112.340598][ T49]
[ 112.596857][ T49] Allocated by task 6114:
[ 112.601275][ T49] kasan_save_track+0x3e/0x80
[ 112.606157][ T49] __kasan_slab_alloc+0x6c/0x80
[ 112.611018][ T49] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 112.616504][ T49] sk_prot_alloc+0x57/0x220
[ 112.621031][ T49] sk_alloc+0x3a/0x370
[ 112.625112][ T49] kcm_ioctl+0x214/0xff0
[ 112.629362][ T49] sock_do_ioctl+0xd9/0x300
[ 112.633871][ T49] sock_ioctl+0x576/0x790
[ 112.638202][ T49] __se_sys_ioctl+0xf9/0x170
[ 112.642796][ T49] do_syscall_64+0xfa/0x3b0
[ 112.647301][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.653203][ T49]
[ 112.655531][ T49] Freed by task 6115:
[ 112.659519][ T49] kasan_save_track+0x3e/0x80
[ 112.664200][ T49] kasan_save_free_info+0x46/0x50
[ 112.669224][ T49] __kasan_slab_free+0x62/0x70
[ 112.673993][ T49] kmem_cache_free+0x18f/0x400
[ 112.678769][ T49] __sk_destruct+0x4d2/0x660
[ 112.683368][ T49] kcm_release+0x528/0x5c0
[ 112.687805][ T49] sock_close+0xc0/0x240
[ 112.692066][ T49] __fput+0x44c/0xa70
[ 112.696053][ T49] fput_close_sync+0x119/0x200
[ 112.700814][ T49] __x64_sys_close+0x7f/0x110
[ 112.705530][ T49] do_syscall_64+0xfa/0x3b0
[ 112.710063][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.715992][ T49]
[ 112.718335][ T49] Last potentially related work creation:
[ 112.724052][ T49] kasan_save_stack+0x3e/0x60
[ 112.728737][ T49] kasan_record_aux_stack+0xbd/0xd0
[ 112.733943][ T49] insert_work+0x3d/0x330
[ 112.738276][ T49] __queue_work+0xcfc/0xfe0
[ 112.742792][ T49] queue_work_on+0x181/0x270
[ 112.747395][ T49] kcm_unattach+0x863/0xe90
[ 112.751914][ T49] kcm_ioctl+0x794/0xff0
[ 112.756158][ T49] sock_do_ioctl+0xd9/0x300
[ 112.760665][ T49] sock_ioctl+0x576/0x790
[ 112.765001][ T49] __se_sys_ioctl+0xf9/0x170
[ 112.769601][ T49] do_syscall_64+0xfa/0x3b0
[ 112.774112][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.780009][ T49]
[ 112.782330][ T49] Second to last potentially related work creation:
[ 112.788935][ T49] kasan_save_stack+0x3e/0x60
[ 112.793620][ T49] kasan_record_aux_stack+0xbd/0xd0
[ 112.798826][ T49] insert_work+0x3d/0x330
[ 112.803160][ T49] __queue_work+0xcfc/0xfe0
[ 112.807819][ T49] queue_work_on+0x181/0x270
[ 112.812415][ T49] kcm_ioctl+0xe52/0xff0
[ 112.816656][ T49] sock_do_ioctl+0xd9/0x300
[ 112.821165][ T49] sock_ioctl+0x576/0x790
[ 112.825500][ T49] __se_sys_ioctl+0xf9/0x170
[ 112.830098][ T49] do_syscall_64+0xfa/0x3b0
[ 112.834606][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.840502][ T49]
[ 112.842825][ T49] The buggy address belongs to the object at ffff888034022d00
[ 112.842825][ T49] which belongs to the cache KCM of size 1792
[ 112.856266][ T49] The buggy address is located 472 bytes inside of
[ 112.856266][ T49] freed 1792-byte region [ffff888034022d00, ffff888034023400)
[ 112.870150][ T49]
[ 112.872477][ T49] The buggy address belongs to the physical page:
[ 112.878903][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34020
[ 112.887672][ T49] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 112.896172][ T49] memcg:ffff888075d70901
[ 112.900416][ T49] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 112.907964][ T49] page_type: f5(slab)
[ 112.911948][ T49] raw: 00fff00000000040 ffff88814c3aca00 dead000000000122 0000000000000000
[ 112.920532][ T49] raw: 0000000000000000 0000000080110011 00000000f5000000 ffff888075d70901
[ 112.929125][ T49] head: 00fff00000000040 ffff88814c3aca00 dead000000000122 0000000000000000
[ 112.937802][ T49] head: 0000000000000000 0000000080110011 00000000f5000000 ffff888075d70901
[ 112.946474][ T49] head: 00fff00000000003 ffffea0000d00801 00000000ffffffff 00000000ffffffff
[ 112.955157][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 112.963845][ T49] page dumped because: kasan: bad access detected
[ 112.970270][ T49] page_owner tracks the page as allocated
[ 112.975984][ T49] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6045, tgid 6044 (syz.0.16), ts 106254673387, free_ts 106226009543
[ 112.997199][ T49] post_alloc_hook+0x240/0x2a0
[ 113.001993][ T49] get_page_from_freelist+0x21e4/0x22c0
[ 113.007556][ T49] __alloc_frozen_pages_noprof+0x181/0x370
[ 113.013376][ T49] alloc_pages_mpol+0x232/0x4a0
[ 113.018246][ T49] allocate_slab+0x8a/0x3b0
[ 113.022762][ T49] ___slab_alloc+0xbfc/0x1480
[ 113.027459][ T49] kmem_cache_alloc_noprof+0x283/0x3c0
[ 113.032933][ T49] sk_prot_alloc+0x57/0x220
[ 113.037451][ T49] sk_alloc+0x3a/0x370
[ 113.041530][ T49] kcm_create+0x100/0x580
[ 113.045869][ T49] __sock_create+0x4b3/0x9f0
[ 113.050499][ T49] __sys_socket+0xd7/0x1b0
[ 113.054918][ T49] __x64_sys_socket+0x7a/0x90
[ 113.059618][ T49] do_syscall_64+0xfa/0x3b0
[ 113.064148][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.070134][ T49] page last free pid 6043 tgid 6043 stack trace:
[ 113.076462][ T49] __free_frozen_pages+0xc71/0xe70
[ 113.081586][ T49] __put_partials+0x161/0x1c0
[ 113.086261][ T49] put_cpu_partial+0x17c/0x250
[ 113.091035][ T49] __slab_free+0x2f7/0x400
[ 113.095480][ T49] qlist_free_all+0x97/0x140
[ 113.100082][ T49] kasan_quarantine_reduce+0x148/0x160
[ 113.105549][ T49] __kasan_slab_alloc+0x22/0x80
[ 113.110428][ T49] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 113.115902][ T49] getname_flags+0xb8/0x540
[ 113.120419][ T49] vfs_fstatat+0x43/0x170
[ 113.124757][ T49] __x64_sys_newfstatat+0x116/0x190
[ 113.129975][ T49] do_syscall_64+0xfa/0x3b0
[ 113.134494][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.140398][ T49]
[ 113.142728][ T49] Memory state around the buggy address:
[ 113.148383][ T49] ffff888034022d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 113.156449][ T49] ffff888034022e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 113.164516][ T49] >ffff888034022e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 113.172577][ T49] ^
[ 113.179514][ T49] ffff888034022f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 113.187580][ T49] ffff888034022f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 113.195646][ T49] ==================================================================
[ 113.203819][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 113.211043][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full)
[ 113.222507][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 113.232591][ T49] Workqueue: kkcmd kcm_tx_work
[ 113.237379][ T49] Call Trace:
[ 113.240668][ T49]
[ 113.243608][ T49] dump_stack_lvl+0x99/0x250
[ 113.248206][ T49] ? __asan_memcpy+0x40/0x70
[ 113.252890][ T49] ? __pfx_dump_stack_lvl+0x10/0x10
[ 113.258100][ T49] ? __pfx__printk+0x10/0x10
[ 113.262707][ T49] panic+0x2db/0x790
[ 113.266610][ T49] ? lockdep_hardirqs_on+0x9c/0x150
[ 113.271818][ T49] ? __pfx_panic+0x10/0x10
[ 113.276250][ T49] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 113.282155][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 113.288053][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 113.294412][ T49] ? _raw_spin_lock_bh+0x36/0x50
[ 113.299390][ T49] check_panic_on_warn+0x89/0xb0
[ 113.304369][ T49] ? _raw_spin_lock_bh+0x36/0x50
[ 113.309332][ T49] end_report+0x78/0x160
[ 113.313595][ T49] kasan_report+0x129/0x150
[ 113.318127][ T49] ? _raw_spin_lock_bh+0x36/0x50
[ 113.323096][ T49] ? __lock_sock+0x156/0x2b0
[ 113.327705][ T49] __kasan_check_byte+0x2a/0x40
[ 113.332583][ T49] lock_acquire+0x8d/0x360
[ 113.337016][ T49] ? schedule+0x91/0x360
[ 113.341284][ T49] ? kthread_data+0x4f/0xc0
[ 113.345828][ T49] ? __lock_sock+0x156/0x2b0
[ 113.350438][ T49] _raw_spin_lock_bh+0x36/0x50
[ 113.355228][ T49] ? __lock_sock+0x156/0x2b0
[ 113.359825][ T49] __lock_sock+0x156/0x2b0
[ 113.364257][ T49] ? __pfx___lock_sock+0x10/0x10
[ 113.369208][ T49] ? do_raw_spin_lock+0x121/0x290
[ 113.374252][ T49] ? __pfx_autoremove_wake_function+0x10/0x10
[ 113.380362][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 113.385755][ T49] ? lock_sock_nested+0x6a/0x100
[ 113.390713][ T49] lock_sock_nested+0x9f/0x100
[ 113.395493][ T49] kcm_tx_work+0x31/0x180
[ 113.399832][ T49] ? process_scheduled_works+0x9ef/0x17b0
[ 113.405564][ T49] process_scheduled_works+0xae1/0x17b0
[ 113.411135][ T49] ? __pfx_process_scheduled_works+0x10/0x10
[ 113.417138][ T49] worker_thread+0x8a0/0xda0
[ 113.421887][ T49] kthread+0x70e/0x8a0
[ 113.425999][ T49] ? __pfx_worker_thread+0x10/0x10
[ 113.431125][ T49] ? __pfx_kthread+0x10/0x10
[ 113.435742][ T49] ? _raw_spin_unlock_irq+0x23/0x50
[ 113.440984][ T49] ? lockdep_hardirqs_on+0x9c/0x150
[ 113.446200][ T49] ? __pfx_kthread+0x10/0x10
[ 113.450813][ T49] ret_from_fork+0x3fc/0x770
[ 113.455415][ T49] ? __pfx_ret_from_fork+0x10/0x10
[ 113.460537][ T49] ? __switch_to_asm+0x39/0x70
[ 113.465316][ T49] ? __switch_to_asm+0x33/0x70
[ 113.470091][ T49] ? __pfx_kthread+0x10/0x10
[ 113.474698][ T49] ret_from_fork_asm+0x1a/0x30
[ 113.479490][ T49]
[ 113.482857][ T49] Kernel Offset: disabled
[ 113.487186][ T49] Rebooting in 86400 seconds..