==================================================================
BUG: KASAN: wild-memory-access in instrument_atomic_read include/linux/instrumented.h:68 [inline]
BUG: KASAN: wild-memory-access in _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
BUG: KASAN: wild-memory-access in __lock_acquire+0xc8b/0x2040 kernel/locking/lockdep.c:5112
Read of size 8 at addr 1fffffff89c93498 by task syslogd/4659

CPU: 0 UID: 0 PID: 4659 Comm: syslogd Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:93 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119
 print_report+0xe8/0x550 mm/kasan/report.c:491
 kasan_report+0x143/0x180 mm/kasan/report.c:601
 kasan_check_range+0x282/0x290 mm/kasan/generic.c:189
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 __lock_acquire+0xc8b/0x2040 kernel/locking/lockdep.c:5112
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5759
 _raw_spin_lock_nested+0x31/0x40 kernel/locking/spinlock.c:378
 raw_spin_rq_lock_nested+0xb0/0x140 kernel/sched/core.c:568
 raw_spin_rq_lock kernel/sched/sched.h:1415 [inline]
 rq_lock kernel/sched/sched.h:1714 [inline]
 __schedule+0x357/0x4a60 kernel/sched/core.c:6436
 preempt_schedule_irq+0xfb/0x1c0 kernel/sched/core.c:6851
 irqentry_exit+0x5e/0x90 kernel/entry/common.c:354
 asm_sysvec_reschedule_ipi+0x1a/0x20 arch/x86/include/asm/idtentry.h:707
RIP: 0010:__kernel_text_address+0xf/0x40 kernel/extable.c:79
Code: 3d 9b 00 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 43 00 00 00 85 c0 <0f> 95 c0 48 c7 c1 00 a0 75 91 48 39 cb 0f 93 c1 48 c7 c2 6f 8b 8f
RSP: 0018:ffffc900093ef4c8 EFLAGS: 00000202
RAX: 0000000000000001 RBX: ffffffff817f2eb8 RCX: ffff88807feabc00
RDX: ffff88807feabc00 RSI: 0000000000000001 RDI: ffffffff817f2eb8
RBP: 0000000000000001 R08: ffffffff814125c7 R09: ffffffff814140bf
R10: 0000000000000003 R11: ffff88807feabc00 R12: ffff88807feabc00
R13: ffffffff817f2f80 R14: dffffc0000000000 R15: 1ffff9200127dea9
 unwind_get_return_address+0x5d/0xc0 arch/x86/kernel/unwind_orc.c:369
 arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2256 [inline]
 slab_free mm/slub.c:4477 [inline]
 kmem_cache_free+0x145/0x350 mm/slub.c:4552
 __unix_dgram_recvmsg+0xcea/0x12f0 net/unix/af_unix.c:2527
 sock_recvmsg_nosec net/socket.c:1046 [inline]
 sock_recvmsg+0x231/0x280 net/socket.c:1068
 sock_read_iter+0x2ca/0x3e0 net/socket.c:1138
 new_sync_read fs/read_write.c:395 [inline]
 vfs_read+0x9bf/0xbc0 fs/read_write.c:476
 ksys_read+0x1a0/0x2c0 fs/read_write.c:619
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7faff5878b6a
Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe77fccb78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faff5878b6a
RDX: 00000000000000ff RSI: 00005566c62b8950 RDI: 0000000000000000
RBP: 00005566c62b8910 R08: 0000000000000001 R09: 0000000000000000
R10: 00007faff5a173a3 R11: 0000000000000246 R12: 00005566c62b89cb
R13: 00005566c62b8950 R14: 0000000000000000 R15: 00007faff5a5ca80
 </TASK>
==================================================================
----------------
Code disassembly (best guess):
   0:	3d 9b 00 eb b5       	cmp    $0xb5eb009b,%eax
   5:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	66 0f 1f 00          	nopw   (%rax)
  1f:	53                   	push   %rbx
  20:	48 89 fb             	mov    %rdi,%rbx
  23:	e8 43 00 00 00       	call   0x6b
  28:	85 c0                	test   %eax,%eax
* 2a:	0f 95 c0             	setne  %al <-- trapping instruction
  2d:	48 c7 c1 00 a0 75 91 	mov    $0xffffffff9175a000,%rcx
  34:	48 39 cb             	cmp    %rcx,%rbx
  37:	0f 93 c1             	setae  %cl
  3a:	48                   	rex.W
  3b:	c7                   	.byte 0xc7
  3c:	c2 6f 8b             	ret    $0x8b6f
  3f:	8f                   	.byte 0x8f