Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts.
2025/08/25 21:46:58 parsed 1 programs
[ 119.980923][ T6310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 123.250792][ T6327] chnl_net:caif_netlink_parms(): no params data found
[ 123.318077][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.325361][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.332920][ T6327] bridge_slave_0: entered allmulticast mode
[ 123.340615][ T6327] bridge_slave_0: entered promiscuous mode
[ 123.348907][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.356395][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.365306][ T6327] bridge_slave_1: entered allmulticast mode
[ 123.372818][ T6327] bridge_slave_1: entered promiscuous mode
[ 123.406104][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.417495][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.450876][ T6327] team0: Port device team_slave_0 added
[ 123.458674][ T6327] team0: Port device team_slave_1 added
[ 123.482988][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.490266][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 123.516211][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.528360][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.535326][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 123.561561][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.600467][ T6327] hsr_slave_0: entered promiscuous mode
[ 123.606693][ T6327] hsr_slave_1: entered promiscuous mode
[ 124.238512][ T6327] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 124.251310][ T6327] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 124.263691][ T6327] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 124.275812][ T6327] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 124.386785][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.413476][ T6327] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.426755][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.434038][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.461970][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.469208][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.706604][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 124.766010][ T6327] veth0_vlan: entered promiscuous mode
[ 124.783821][ T6327] veth1_vlan: entered promiscuous mode
[ 124.826251][ T6327] veth0_macvtap: entered promiscuous mode
[ 124.839652][ T6327] veth1_macvtap: entered promiscuous mode
[ 124.865953][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 124.884307][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 124.903079][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.924516][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.944015][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.966299][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.081517][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 125.181339][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 125.259733][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 125.354218][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 125.494777][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.506263][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.543911][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.552354][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.653588][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 126.662314][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 126.672633][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 126.681929][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 126.691973][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 127.815506][ T59] bridge_slave_1: left allmulticast mode
[ 127.825658][ T59] bridge_slave_1: left promiscuous mode
[ 127.835425][ T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 127.854968][ T59] bridge_slave_0: left allmulticast mode
[ 127.868778][ T59] bridge_slave_0: left promiscuous mode
[ 127.874597][ T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.313568][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 128.324342][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 128.334320][ T59] bond0 (unregistering): Released all slaves
[ 128.432205][ T59] hsr_slave_0: left promiscuous mode
[ 128.438702][ T59] hsr_slave_1: left promiscuous mode
[ 128.444771][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 128.459711][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 128.469750][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 128.477160][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 128.496342][ T59] veth1_macvtap: left promiscuous mode
[ 128.502925][ T59] veth0_macvtap: left promiscuous mode
[ 128.508995][ T59] veth1_vlan: left promiscuous mode
[ 128.514462][ T59] veth0_vlan: left promiscuous mode
[ 128.990564][ T59] team0 (unregistering): Port device team_slave_1 removed
[ 129.027064][ T59] team0 (unregistering): Port device team_slave_0 removed
2025/08/25 21:47:13 executed programs: 0
[ 131.030695][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.039756][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.058195][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.066283][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.080867][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 131.436291][ T6561] chnl_net:caif_netlink_parms(): no params data found
[ 131.565558][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state
[ 131.573078][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 131.583053][ T6561] bridge_slave_0: entered allmulticast mode
[ 131.591622][ T6561] bridge_slave_0: entered promiscuous mode
[ 131.602761][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.610085][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.617551][ T6561] bridge_slave_1: entered allmulticast mode
[ 131.626940][ T6561] bridge_slave_1: entered promiscuous mode
[ 131.679170][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 131.691983][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 131.741131][ T6561] team0: Port device team_slave_0 added
[ 131.750562][ T6561] team0: Port device team_slave_1 added
[ 131.794418][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 131.802738][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 131.830605][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 131.843541][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 131.852246][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 131.879470][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 131.950186][ T6561] hsr_slave_0: entered promiscuous mode
[ 131.957185][ T6561] hsr_slave_1: entered promiscuous mode
[ 132.450454][ T6561] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 132.463504][ T6561] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 132.475480][ T6561] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 132.490039][ T6561] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 132.619744][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0
[ 132.647038][ T6561] 8021q: adding VLAN 0 to HW filter on device team0
[ 132.663599][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 132.671029][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 132.689553][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 132.696740][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 132.954845][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 133.012649][ T6561] veth0_vlan: entered promiscuous mode
[ 133.018858][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.025503][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.046439][ T6561] veth1_vlan: entered promiscuous mode
[ 133.083675][ T6561] veth0_macvtap: entered promiscuous mode
[ 133.095178][ T6561] veth1_macvtap: entered promiscuous mode
[ 133.117318][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 133.139103][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 133.157220][ T3476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 133.166354][ T3476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 133.167829][ T5899] Bluetooth: hci0: command tx timeout
[ 133.186815][ T3476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 133.199122][ T3476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 133.272611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 133.288971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 133.326499][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 133.337493][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 135.248211][ T5899] Bluetooth: hci0: command tx timeout
2025/08/25 21:47:18 executed programs: 5
[ 137.328132][ T5899] Bluetooth: hci0: command tx timeout
[ 139.395095][ T3476] ==================================================================
[ 139.403289][ T3476] BUG: KASAN: slab-use-after-free in release_sock+0x143/0x1f0
[ 139.410935][ T3476] Read of size 8 at addr ffff888027d2c5c8 by task kworker/u8:8/3476
[ 139.418988][ T3476]
[ 139.421318][ T3476] CPU: 0 UID: 0 PID: 3476 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full)
[ 139.421331][ T3476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 139.421339][ T3476] Workqueue: kkcmd kcm_tx_work
[ 139.421363][ T3476] Call Trace:
[ 139.421369][ T3476]
[ 139.421375][ T3476] dump_stack_lvl+0x189/0x250
[ 139.421388][ T3476] ? rcu_is_watching+0x15/0xb0
[ 139.421398][ T3476] ? __kasan_check_byte+0x12/0x40
[ 139.421411][ T3476] ? __pfx_dump_stack_lvl+0x10/0x10
[ 139.421421][ T3476] ? rcu_is_watching+0x15/0xb0
[ 139.421429][ T3476] ? lock_release+0x4b/0x3e0
[ 139.421445][ T3476] ? __virt_addr_valid+0x1c8/0x5c0
[ 139.421456][ T3476] ? __virt_addr_valid+0x4a5/0x5c0
[ 139.421467][ T3476] print_report+0xca/0x240
[ 139.421477][ T3476] ? release_sock+0x143/0x1f0
[ 139.421488][ T3476] kasan_report+0x118/0x150
[ 139.421501][ T3476] ? release_sock+0x143/0x1f0
[ 139.421513][ T3476] release_sock+0x143/0x1f0
[ 139.421524][ T3476] ? process_scheduled_works+0x9ef/0x17b0
[ 139.421534][ T3476] process_scheduled_works+0xae1/0x17b0
[ 139.421549][ T3476] ? __pfx_process_scheduled_works+0x10/0x10
[ 139.421561][ T3476] worker_thread+0x8a0/0xda0
[ 139.421571][ T3476] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 139.421585][ T3476] ? __kthread_parkme+0x7b/0x200
[ 139.421597][ T3476] kthread+0x711/0x8a0
[ 139.421608][ T3476] ? __pfx_worker_thread+0x10/0x10
[ 139.421617][ T3476] ? __pfx_kthread+0x10/0x10
[ 139.421628][ T3476] ? _raw_spin_unlock_irq+0x23/0x50
[ 139.421638][ T3476] ? lockdep_hardirqs_on+0x9c/0x150
[ 139.421650][ T3476] ? __pfx_kthread+0x10/0x10
[ 139.421660][ T3476] ret_from_fork+0x3f9/0x770
[ 139.421670][ T3476] ? __pfx_ret_from_fork+0x10/0x10
[ 139.421680][ T3476] ? __switch_to_asm+0x39/0x70
[ 139.421692][ T3476] ? __switch_to_asm+0x33/0x70
[ 139.421702][ T3476] ? __pfx_kthread+0x10/0x10
[ 139.421712][ T3476] ret_from_fork_asm+0x1a/0x30
[ 139.421727][ T3476]
[ 139.421730][ T3476]
[ 139.610621][ T3476] Allocated by task 6792:
[ 139.615019][ T3476] kasan_save_track+0x3e/0x80
[ 139.619684][ T3476] __kasan_slab_alloc+0x6c/0x80
[ 139.624653][ T3476] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 139.630102][ T3476] sk_prot_alloc+0x57/0x220
[ 139.634591][ T3476] sk_alloc+0x3a/0x370
[ 139.638816][ T3476] kcm_ioctl+0x214/0xff0
[ 139.643045][ T3476] sock_do_ioctl+0xd9/0x300
[ 139.647717][ T3476] sock_ioctl+0x576/0x790
[ 139.652116][ T3476] __se_sys_ioctl+0xfc/0x170
[ 139.656697][ T3476] do_syscall_64+0xfa/0x3b0
[ 139.661204][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.667168][ T3476]
[ 139.669490][ T3476] Freed by task 6793:
[ 139.673451][ T3476] kasan_save_track+0x3e/0x80
[ 139.678114][ T3476] kasan_save_free_info+0x46/0x50
[ 139.683133][ T3476] __kasan_slab_free+0x5b/0x80
[ 139.688061][ T3476] kmem_cache_free+0x18f/0x400
[ 139.692979][ T3476] __sk_destruct+0x4d2/0x660
[ 139.697745][ T3476] kcm_release+0x528/0x5c0
[ 139.702208][ T3476] sock_close+0xc0/0x240
[ 139.706438][ T3476] __fput+0x44c/0xa70
[ 139.710425][ T3476] fput_close_sync+0x119/0x200
[ 139.715175][ T3476] __x64_sys_close+0x7f/0x110
[ 139.719925][ T3476] do_syscall_64+0xfa/0x3b0
[ 139.724442][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.730450][ T3476]
[ 139.732768][ T3476] Last potentially related work creation:
[ 139.738476][ T3476] kasan_save_stack+0x3e/0x60
[ 139.743196][ T3476] kasan_record_aux_stack+0xbd/0xd0
[ 139.748395][ T3476] insert_work+0x3d/0x330
[ 139.752720][ T3476] __queue_work+0xcd2/0xfb0
[ 139.757214][ T3476] queue_work_on+0x181/0x270
[ 139.761804][ T3476] kcm_unattach+0x863/0xe90
[ 139.766300][ T3476] kcm_ioctl+0x794/0xff0
[ 139.770531][ T3476] sock_do_ioctl+0xd9/0x300
[ 139.775058][ T3476] sock_ioctl+0x576/0x790
[ 139.779424][ T3476] __se_sys_ioctl+0xfc/0x170
[ 139.784291][ T3476] do_syscall_64+0xfa/0x3b0
[ 139.788863][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.794744][ T3476]
[ 139.797052][ T3476] Second to last potentially related work creation:
[ 139.803722][ T3476] kasan_save_stack+0x3e/0x60
[ 139.808390][ T3476] kasan_record_aux_stack+0xbd/0xd0
[ 139.813600][ T3476] insert_work+0x3d/0x330
[ 139.817946][ T3476] __queue_work+0xcd2/0xfb0
[ 139.822448][ T3476] queue_work_on+0x181/0x270
[ 139.827017][ T3476] kcm_ioctl+0xe52/0xff0
[ 139.831248][ T3476] sock_do_ioctl+0xd9/0x300
[ 139.835749][ T3476] sock_ioctl+0x576/0x790
[ 139.840074][ T3476] __se_sys_ioctl+0xfc/0x170
[ 139.844674][ T3476] do_syscall_64+0xfa/0x3b0
[ 139.849207][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.855110][ T3476]
[ 139.857540][ T3476] The buggy address belongs to the object at ffff888027d2c380
[ 139.857540][ T3476] which belongs to the cache KCM of size 1792
[ 139.871093][ T3476] The buggy address is located 584 bytes inside of
[ 139.871093][ T3476] freed 1792-byte region [ffff888027d2c380, ffff888027d2ca80)
[ 139.885002][ T3476]
[ 139.887329][ T3476] The buggy address belongs to the physical page:
[ 139.893746][ T3476] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27d28
[ 139.902698][ T3476] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 139.911179][ T3476] memcg:ffff888076a5d401
[ 139.915406][ T3476] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 139.923230][ T3476] page_type: f5(slab)
[ 139.927228][ T3476] raw: 00fff00000000040 ffff888030442140 dead000000000122 0000000000000000
[ 139.935902][ T3476] raw: 0000000000000000 0000000080110011 00000000f5000000 ffff888076a5d401
[ 139.944474][ T3476] head: 00fff00000000040 ffff888030442140 dead000000000122 0000000000000000
[ 139.953179][ T3476] head: 0000000000000000 0000000080110011 00000000f5000000 ffff888076a5d401
[ 139.961929][ T3476] head: 00fff00000000003 ffffea00009f4a01 00000000ffffffff 00000000ffffffff
[ 139.970668][ T3476] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 139.979416][ T3476] page dumped because: kasan: bad access detected
[ 139.985841][ T3476] page_owner tracks the page as allocated
[ 139.991631][ T3476] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6643, tgid 6641 (syz.0.16), ts 133446179920, free_ts 129973858358
[ 140.013244][ T3476] post_alloc_hook+0x240/0x2a0
[ 140.018021][ T3476] get_page_from_freelist+0x21e4/0x22c0
[ 140.023664][ T3476] __alloc_frozen_pages_noprof+0x181/0x370
[ 140.029464][ T3476] alloc_pages_mpol+0x232/0x4a0
[ 140.034408][ T3476] allocate_slab+0x8a/0x370
[ 140.039219][ T3476] ___slab_alloc+0xbeb/0x1410
[ 140.043889][ T3476] kmem_cache_alloc_noprof+0x283/0x3c0
[ 140.049340][ T3476] sk_prot_alloc+0x57/0x220
[ 140.054367][ T3476] sk_alloc+0x3a/0x370
[ 140.058459][ T3476] kcm_ioctl+0x214/0xff0
[ 140.062696][ T3476] sock_do_ioctl+0xd9/0x300
[ 140.067194][ T3476] sock_ioctl+0x576/0x790
[ 140.071521][ T3476] __se_sys_ioctl+0xfc/0x170
[ 140.076109][ T3476] do_syscall_64+0xfa/0x3b0
[ 140.080608][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.086516][ T3476] page last free pid 6496 tgid 6496 stack trace:
[ 140.092831][ T3476] __free_frozen_pages+0xbc4/0xd30
[ 140.097951][ T3476] vfree+0x25a/0x400
[ 140.101888][ T3476] kcov_close+0x28/0x50
[ 140.106081][ T3476] __fput+0x44c/0xa70
[ 140.110063][ T3476] task_work_run+0x1d1/0x260
[ 140.114646][ T3476] do_exit+0x6b5/0x2300
[ 140.118887][ T3476] do_group_exit+0x21c/0x2d0
[ 140.123566][ T3476] get_signal+0x1286/0x1340
[ 140.128145][ T3476] arch_do_signal_or_restart+0x9a/0x750
[ 140.133775][ T3476] exit_to_user_mode_loop+0x75/0x110
[ 140.139060][ T3476] do_syscall_64+0x2bd/0x3b0
[ 140.143654][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.149623][ T3476]
[ 140.152024][ T3476] Memory state around the buggy address:
[ 140.157647][ T3476] ffff888027d2c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.165798][ T3476] ffff888027d2c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.173947][ T3476] >ffff888027d2c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.182004][ T3476] ^
[ 140.188425][ T3476] ffff888027d2c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.196495][ T3476] ffff888027d2c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.204666][ T3476] ==================================================================
[ 140.212834][ T3476] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 140.220092][ T3476] CPU: 0 UID: 0 PID: 3476 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full)
[ 140.229820][ T3476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 140.239876][ T3476] Workqueue: kkcmd kcm_tx_work
[ 140.244635][ T3476] Call Trace:
[ 140.247908][ T3476]
[ 140.250829][ T3476] dump_stack_lvl+0x99/0x250
[ 140.255429][ T3476] ? __asan_memcpy+0x40/0x70
[ 140.260009][ T3476] ? __pfx_dump_stack_lvl+0x10/0x10
[ 140.265222][ T3476] ? __pfx__printk+0x10/0x10
[ 140.269891][ T3476] vpanic+0x281/0x750
[ 140.273860][ T3476] ? __pfx_vpanic+0x10/0x10
[ 140.278348][ T3476] ? irqentry_exit+0x74/0x90
[ 140.282941][ T3476] panic+0xb9/0xc0
[ 140.286647][ T3476] ? __pfx_panic+0x10/0x10
[ 140.291042][ T3476] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 140.297035][ T3476] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 140.302925][ T3476] ? release_sock+0x143/0x1f0
[ 140.307771][ T3476] check_panic_on_warn+0x89/0xb0
[ 140.312717][ T3476] ? release_sock+0x143/0x1f0
[ 140.317492][ T3476] end_report+0x78/0x160
[ 140.321823][ T3476] kasan_report+0x129/0x150
[ 140.326326][ T3476] ? release_sock+0x143/0x1f0
[ 140.331170][ T3476] release_sock+0x143/0x1f0
[ 140.335675][ T3476] ? process_scheduled_works+0x9ef/0x17b0
[ 140.341385][ T3476] process_scheduled_works+0xae1/0x17b0
[ 140.347032][ T3476] ? __pfx_process_scheduled_works+0x10/0x10
[ 140.353080][ T3476] worker_thread+0x8a0/0xda0
[ 140.357760][ T3476] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 140.364107][ T3476] ? __kthread_parkme+0x7b/0x200
[ 140.369047][ T3476] kthread+0x711/0x8a0
[ 140.373729][ T3476] ? __pfx_worker_thread+0x10/0x10
[ 140.378838][ T3476] ? __pfx_kthread+0x10/0x10
[ 140.383460][ T3476] ? _raw_spin_unlock_irq+0x23/0x50
[ 140.388914][ T3476] ? lockdep_hardirqs_on+0x9c/0x150
[ 140.394170][ T3476] ? __pfx_kthread+0x10/0x10
[ 140.398770][ T3476] ret_from_fork+0x3f9/0x770
[ 140.403360][ T3476] ? __pfx_ret_from_fork+0x10/0x10
[ 140.408551][ T3476] ? __switch_to_asm+0x39/0x70
[ 140.413302][ T3476] ? __switch_to_asm+0x33/0x70
[ 140.418065][ T3476] ? __pfx_kthread+0x10/0x10
[ 140.422659][ T3476] ret_from_fork_asm+0x1a/0x30
[ 140.427630][ T3476]
[ 140.431183][ T3476] Kernel Offset: disabled
[ 140.435500][ T3476] Rebooting in 86400 seconds..