[ 76.312028][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.314922][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '[localhost]:11284' (ED25519) to the list of known hosts.
2025/07/08 05:00:37 ignoring optional flag "sandboxArg"="0"
2025/07/08 05:00:37 parsed 1 programs
[ 81.428007][ T2009] cfg80211: failed to load regulatory.db
[ 82.537019][ T40] audit: type=1400 audit(1751950840.071:115): avc: denied { unlink } for pid=6218 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 83.502935][ T6218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 85.330137][ T6272] chnl_net:caif_netlink_parms(): no params data found
[ 85.393347][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.395649][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.398269][ T6272] bridge_slave_0: entered allmulticast mode
[ 85.400876][ T6272] bridge_slave_0: entered promiscuous mode
[ 85.404339][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.406580][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.409625][ T6272] bridge_slave_1: entered allmulticast mode
[ 85.412265][ T6272] bridge_slave_1: entered promiscuous mode
[ 85.442494][ T6272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.448953][ T6272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.480896][ T6272] team0: Port device team_slave_0 added
[ 85.486433][ T6272] team0: Port device team_slave_1 added
[ 85.516105][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.518424][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.526264][ T6272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.530538][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.532690][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.541298][ T6272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.580144][ T6272] hsr_slave_0: entered promiscuous mode
[ 85.582356][ T6272] hsr_slave_1: entered promiscuous mode
[ 86.121638][ T6272] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.130973][ T6272] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.137258][ T6272] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.143027][ T6272] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.170954][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.173911][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.177129][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.180078][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.210050][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.218833][ T6272] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.222844][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.226486][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.240927][ T81] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.243823][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.249894][ T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.252148][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.362580][ T6272] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.385353][ T6272] veth0_vlan: entered promiscuous mode
[ 86.391912][ T6272] veth1_vlan: entered promiscuous mode
[ 86.413177][ T6272] veth0_macvtap: entered promiscuous mode
[ 86.420840][ T6272] veth1_macvtap: entered promiscuous mode
[ 86.432633][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.441224][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.447643][ T6272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.451131][ T6272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.454396][ T6272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.458920][ T6272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.536164][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.586691][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.590395][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.603077][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.605775][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.667638][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.728361][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.784947][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.822630][ T40] audit: type=1401 audit(1751950844.361:116): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 86.925469][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.929838][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.932724][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.936009][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.938932][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/07/08 05:00:45 executed programs: 0
[ 87.949723][ T5316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.952860][ T5316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.955314][ T5316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.958484][ T5316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.960963][ T5316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.096114][ T6441] chnl_net:caif_netlink_parms(): no params data found
[ 88.161506][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.163751][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.165985][ T6441] bridge_slave_0: entered allmulticast mode
[ 88.168795][ T6441] bridge_slave_0: entered promiscuous mode
[ 88.171941][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.174237][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.176475][ T6441] bridge_slave_1: entered allmulticast mode
[ 88.179212][ T6441] bridge_slave_1: entered promiscuous mode
[ 88.212241][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.216676][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.250164][ T6441] team0: Port device team_slave_0 added
[ 88.253596][ T6441] team0: Port device team_slave_1 added
[ 88.290470][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.293120][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.301880][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.307223][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.309743][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.319160][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.358002][ T6441] hsr_slave_0: entered promiscuous mode
[ 88.360208][ T6441] hsr_slave_1: entered promiscuous mode
[ 88.362232][ T6441] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.364892][ T6441] Cannot create hsr debugfs directory
[ 89.977170][ T62] Bluetooth: hci0: command tx timeout
[ 90.128363][ T13] bridge_slave_1: left allmulticast mode
[ 90.130529][ T13] bridge_slave_1: left promiscuous mode
[ 90.132987][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.138593][ T13] bridge_slave_0: left allmulticast mode
[ 90.141302][ T13] bridge_slave_0: left promiscuous mode
[ 90.143754][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.371848][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 90.379122][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 90.384316][ T13] bond0 (unregistering): Released all slaves
[ 90.534150][ T13] hsr_slave_0: left promiscuous mode
[ 90.536260][ T13] hsr_slave_1: left promiscuous mode
[ 90.538721][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 90.541077][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 90.543703][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 90.546002][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 90.562320][ T13] veth1_macvtap: left promiscuous mode
[ 90.564090][ T13] veth0_macvtap: left promiscuous mode
[ 90.565940][ T13] veth1_vlan: left promiscuous mode
[ 90.568504][ T13] veth0_vlan: left promiscuous mode
[ 90.969636][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 91.015323][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 91.775830][ T6441] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.780307][ T6441] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.784809][ T6441] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.789868][ T6441] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.833302][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.842517][ T6441] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.847596][ T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.849926][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.860909][ T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.863952][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.057538][ T62] Bluetooth: hci0: command tx timeout
[ 92.164116][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.185059][ T6441] veth0_vlan: entered promiscuous mode
[ 92.190753][ T6441] veth1_vlan: entered promiscuous mode
[ 92.209519][ T6441] veth0_macvtap: entered promiscuous mode
[ 92.213581][ T6441] veth1_macvtap: entered promiscuous mode
[ 92.224259][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.230459][ T6441] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.240425][ T6441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.243154][ T6441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.245824][ T6441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.249758][ T6441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.319510][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.322206][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.342992][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.345478][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.389151][ T40] audit: type=1400 audit(1751950849.931:117): avc: denied { read } for pid=6535 comm="syz.0.15" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 92.400448][ T40] audit: type=1400 audit(1751950849.931:118): avc: denied { open } for pid=6535 comm="syz.0.15" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 92.412257][ T40] audit: type=1400 audit(1751950849.931:119): avc: denied { ioctl } for pid=6535 comm="syz.0.15" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
2025/07/08 05:00:50 executed programs: 26
[ 92.950980][ T13] ==================================================================
[ 92.954334][ T13] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 92.957919][ T13] Read of size 1 at addr ffff888026f89409 by task kworker/u32:1/13
[ 92.962635][ T13]
[ 92.963648][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.16.0-rc5-syzkaller-gd7b8f8e20813 #0 PREEMPT(full)
[ 92.963670][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 92.963682][ T13] Workqueue: events_unbound commit_work
[ 92.963709][ T13] Call Trace:
[ 92.963717][ T13]
[ 92.963724][ T13] dump_stack_lvl+0x116/0x1f0
[ 92.963751][ T13] print_report+0xcd/0x680
[ 92.963781][ T13] ? __virt_addr_valid+0x81/0x610
[ 92.963799][ T13] ? __phys_addr+0xe8/0x180
[ 92.963819][ T13] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 92.963843][ T13] kasan_report+0xe0/0x110
[ 92.963866][ T13] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 92.963893][ T13] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 92.963920][ T13] ? preempt_schedule_thunk+0x16/0x30
[ 92.963941][ T13] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10
[ 92.963967][ T13] ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 92.963989][ T13] ? drm_atomic_helper_commit_hw_done+0x330/0x490
[ 92.964015][ T13] drm_atomic_helper_commit_tail+0xcb/0xf0
[ 92.964039][ T13] commit_tail+0x35b/0x400
[ 92.964062][ T13] process_one_work+0x9cf/0x1b70
[ 92.964085][ T13] ? __pfx_process_one_work+0x10/0x10
[ 92.964106][ T13] ? assign_work+0x1a0/0x250
[ 92.964121][ T13] worker_thread+0x6c8/0xf10
[ 92.964147][ T13] ? __pfx_worker_thread+0x10/0x10
[ 92.964162][ T13] kthread+0x3c5/0x780
[ 92.964182][ T13] ? __pfx_kthread+0x10/0x10
[ 92.964197][ T13] ? rcu_is_watching+0x12/0xc0
[ 92.964219][ T13] ? __pfx_kthread+0x10/0x10
[ 92.964233][ T13] ret_from_fork+0x5d4/0x6f0
[ 92.964257][ T13] ? __pfx_kthread+0x10/0x10
[ 92.964274][ T13] ret_from_fork_asm+0x1a/0x30
[ 92.964296][ T13]
[ 92.964303][ T13]
[ 93.035525][ T13] Allocated by task 6590:
[ 93.036892][ T13] kasan_save_stack+0x33/0x60
[ 93.038390][ T13] kasan_save_track+0x14/0x30
[ 93.039879][ T13] __kasan_kmalloc+0xaa/0xb0
[ 93.041336][ T13] drm_atomic_helper_crtc_duplicate_state+0x70/0xd0
[ 93.043363][ T13] drm_atomic_get_crtc_state+0x16e/0x450
[ 93.045118][ T13] page_flip_common+0x57/0x320
[ 93.046620][ T13] drm_atomic_helper_page_flip+0xb6/0x180
[ 93.048405][ T13] drm_mode_page_flip_ioctl+0x102c/0x1460
[ 93.050196][ T13] drm_ioctl_kernel+0x1f4/0x3e0
[ 93.051711][ T13] drm_ioctl+0x5c9/0xc30
[ 93.053054][ T13] __x64_sys_ioctl+0x18e/0x210
[ 93.054563][ T13] do_syscall_64+0xcd/0x4c0
[ 93.055989][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.057871][ T13]
[ 93.058631][ T13] Freed by task 6589:
[ 93.059879][ T13] kasan_save_stack+0x33/0x60
[ 93.061355][ T13] kasan_save_track+0x14/0x30
[ 93.062823][ T13] kasan_save_free_info+0x3b/0x60
[ 93.064382][ T13] __kasan_slab_free+0x51/0x70
[ 93.065900][ T13] kfree+0x2b4/0x4d0
[ 93.067219][ T13] drm_atomic_state_default_clear+0x455/0xe40
[ 93.069132][ T13] __drm_atomic_state_free+0x185/0x2b0
[ 93.070820][ T13] drm_client_modeset_commit_atomic+0x6b2/0x7e0
[ 93.072765][ T13] drm_client_modeset_commit_locked+0x14d/0x580
[ 93.074729][ T13] drm_client_modeset_commit+0x4f/0x80
[ 93.076438][ T13] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[ 93.078679][ T13] drm_fbdev_client_restore+0x2c/0x40
[ 93.080332][ T13] drm_client_dev_restore+0x1f6/0x2a0
[ 93.082006][ T13] drm_release+0x2c4/0x360
[ 93.083420][ T13] __fput+0x3ff/0xb70
[ 93.084698][ T13] task_work_run+0x14d/0x240
[ 93.086146][ T13] exit_to_user_mode_loop+0xeb/0x110
[ 93.087790][ T13] do_syscall_64+0x3f6/0x4c0
[ 93.089246][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.091104][ T13]
[ 93.091866][ T13] The buggy address belongs to the object at ffff888026f89400
[ 93.091866][ T13] which belongs to the cache kmalloc-512 of size 512
[ 93.096109][ T13] The buggy address is located 9 bytes inside of
[ 93.096109][ T13] freed 512-byte region [ffff888026f89400, ffff888026f89600)
[ 93.101459][ T13]
[ 93.102464][ T13] The buggy address belongs to the physical page:
[ 93.105051][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26f88
[ 93.108606][ T13] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 93.112020][ T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 93.114967][ T13] page_type: f5(slab)
[ 93.116609][ T13] raw: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122
[ 93.120066][ T13] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 93.123501][ T13] head: 00fff00000000040 ffff88801b842c80 dead000000000100 dead000000000122
[ 93.126977][ T13] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 93.130357][ T13] head: 00fff00000000002 ffffea00009be201 00000000ffffffff 00000000ffffffff
[ 93.133436][ T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 93.136782][ T13] page dumped because: kasan: bad access detected
[ 93.139391][ T13] page_owner tracks the page as allocated
[ 93.141552][ T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5976, tgid 5976 (syz-executor), ts 56333020975, free_ts 54355115319
[ 93.149543][ T13] post_alloc_hook+0x1c0/0x230
[ 93.151412][ T13] get_page_from_freelist+0x1321/0x3890
[ 93.153413][ T13] __alloc_frozen_pages_noprof+0x261/0x23f0
[ 93.155792][ T13] alloc_pages_mpol+0x1fb/0x550
[ 93.157792][ T13] new_slab+0x23b/0x330
[ 93.159491][ T13] ___slab_alloc+0xd9c/0x1940
[ 93.161409][ T13] __slab_alloc.constprop.0+0x56/0xb0
[ 93.163568][ T13] __kmalloc_cache_noprof+0xfb/0x3e0
[ 93.165729][ T13] device_add+0xccc/0x1a70
[ 93.167571][ T13] netdev_register_kobject+0x182/0x3a0
[ 93.169807][ T13] register_netdevice+0x13dc/0x2270
[ 93.171930][ T13] register_netdev+0x34/0x50
[ 93.173835][ T13] sit_init_net+0x286/0x630
[ 93.175695][ T13] ops_init+0x1e2/0x5f0
[ 93.177419][ T13] setup_net+0x1ff/0x510
[ 93.179154][ T13] copy_net_ns+0x2a6/0x5f0
[ 93.180992][ T13] page last free pid 5957 tgid 5957 stack trace:
[ 93.183599][ T13] __free_frozen_pages+0x7fe/0x1180
[ 93.185762][ T13] qlist_free_all+0x4d/0x120
[ 93.187680][ T13] kasan_quarantine_reduce+0x195/0x1e0
[ 93.189923][ T13] __kasan_slab_alloc+0x69/0x90
[ 93.191907][ T13] __kmalloc_node_track_caller_noprof+0x1d3/0x510
[ 93.194536][ T13] krealloc_noprof+0x1fc/0x370
[ 93.196493][ T13] ima_collect_measurement+0x4b5/0xa40
[ 93.198739][ T13] process_measurement+0x11fa/0x23e0
[ 93.200905][ T13] ima_file_check+0xbc/0x100
[ 93.202789][ T13] security_file_post_open+0x8e/0x210
[ 93.204986][ T13] path_openat+0x1404/0x2cb0
[ 93.206884][ T13] do_filp_open+0x20b/0x470
[ 93.208784][ T13] file_open_name+0x2a3/0x450
[ 93.210710][ T13] __do_sys_swapon+0x87f/0x3ab0
[ 93.212694][ T13] do_syscall_64+0xcd/0x4c0
[ 93.214553][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.216939][ T13]
[ 93.217937][ T13] Memory state around the buggy address:
[ 93.220192][ T13] ffff888026f89300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 93.223405][ T13] ffff888026f89380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 93.226617][ T13] >ffff888026f89400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.229854][ T13] ^
[ 93.231601][ T13] ffff888026f89480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.234811][ T13] ffff888026f89500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.238025][ T13] ==================================================================
[ 93.253233][ T40] audit: type=1400 audit(1751950850.791:120): avc: denied { read } for pid=5347 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 93.254145][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.254156][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.16.0-rc5-syzkaller-gd7b8f8e20813 #0 PREEMPT(full)
[ 93.254171][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 93.254178][ T13] Workqueue: events_unbound commit_work
[ 93.254198][ T13] Call Trace:
[ 93.254202][ T13]
[ 93.254206][ T13] dump_stack_lvl+0x3d/0x1f0
[ 93.254223][ T13] panic+0x71c/0x800
[ 93.254240][ T13] ? __pfx_panic+0x10/0x10
[ 93.254255][ T13] ? mark_held_locks+0x49/0x80
[ 93.254273][ T13] ? preempt_schedule_thunk+0x16/0x30
[ 93.254287][ T13] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 93.254323][ T13] ? preempt_schedule_common+0x44/0xc0
[ 93.254338][ T13] ? check_panic_on_warn+0x1f/0xb0
[ 93.254355][ T13] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 93.254371][ T13] check_panic_on_warn+0xab/0xb0
[ 93.254388][ T13] end_report+0x107/0x170
[ 93.254404][ T13] kasan_report+0xee/0x110
[ 93.254419][ T13] ? drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 93.254436][ T13] drm_atomic_helper_wait_for_vblanks.part.0+0x8c0/0x9b0
[ 93.254454][ T13] ? preempt_schedule_thunk+0x16/0x30
[ 93.254467][ T13] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10
[ 93.254484][ T13] ? _raw_spin_unlock_irqrestore+0x61/0x80
[ 93.254498][ T13] ? drm_atomic_helper_commit_hw_done+0x330/0x490
[ 93.254515][ T13] drm_atomic_helper_commit_tail+0xcb/0xf0
[ 93.254531][ T13] commit_tail+0x35b/0x400
[ 93.254547][ T13] process_one_work+0x9cf/0x1b70
[ 93.254560][ T13] ? __pfx_process_one_work+0x10/0x10
[ 93.254573][ T13] ? assign_work+0x1a0/0x250
[ 93.254584][ T13] worker_thread+0x6c8/0xf10
[ 93.254597][ T13] ? __pfx_worker_thread+0x10/0x10
[ 93.254608][ T13] kthread+0x3c5/0x780
[ 93.254618][ T13] ? __pfx_kthread+0x10/0x10
[ 93.254628][ T13] ? rcu_is_watching+0x12/0xc0
[ 93.254642][ T13] ? __pfx_kthread+0x10/0x10
[ 93.254652][ T13] ret_from_fork+0x5d4/0x6f0
[ 93.254667][ T13] ? __pfx_kthread+0x10/0x10
[ 93.254677][ T13] ret_from_fork_asm+0x1a/0x30
[ 93.254691][ T13]
[ 93.263105][ T13] Kernel Offset: disabled