[ 86.574834][ T54] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:37647' (ED25519) to the list of known hosts. 2025/10/17 15:02:30 parsed 1 programs [ 91.863699][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 91.863716][ T40] audit: type=1400 audit(1760713352.667:115): avc: denied { unlink } for pid=6179 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.857833][ T6179] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.612154][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.616257][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.619624][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.623605][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.626768][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.899977][ T40] audit: type=1401 audit(1760713355.697:116): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 95.195985][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 95.266426][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.268831][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.271174][ T6202] bridge_slave_0: entered allmulticast mode [ 95.274146][ T6202] bridge_slave_0: entered promiscuous mode [ 95.277496][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.279997][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.283523][ T6202] bridge_slave_1: entered allmulticast mode [ 95.286488][ T6202] bridge_slave_1: entered promiscuous mode [ 95.337061][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.344002][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.384013][ T6202] team0: Port device team_slave_0 added [ 95.393319][ T6202] team0: Port device team_slave_1 added [ 95.428102][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.430486][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.441949][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.447555][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.449996][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.458906][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.511427][ T6202] hsr_slave_0: entered promiscuous mode [ 95.514433][ T6202] hsr_slave_1: entered promiscuous mode [ 96.016162][ T6202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.020500][ T6202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.028640][ T6202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.033531][ T6202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.058478][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.061598][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.064350][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.066781][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.107268][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.115538][ T6202] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.119399][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.123153][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.135249][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.137571][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.146341][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.149185][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.271076][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.310089][ T6202] veth0_vlan: entered promiscuous mode [ 96.317289][ T6202] veth1_vlan: entered promiscuous mode [ 96.332580][ T6202] veth0_macvtap: entered promiscuous mode [ 96.336532][ T6202] veth1_macvtap: entered promiscuous mode [ 96.345969][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.353434][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.360398][ T1245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369510][ T1245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.374280][ T1245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.377079][ T1245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.465786][ T96] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.543537][ T96] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.609774][ T96] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.695409][ T96] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.952126][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.954700][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.974409][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.977150][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/17 15:02:39 executed programs: 0 [ 98.373760][ T5295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.377104][ T5295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.379915][ T5295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.382913][ T5295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.385711][ T5295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.526939][ T6339] chnl_net:caif_netlink_parms(): no params data found [ 98.633289][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.636445][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.639688][ T6339] bridge_slave_0: entered allmulticast mode [ 98.643951][ T6339] bridge_slave_0: entered promiscuous mode [ 98.648407][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.651216][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.657009][ T6339] bridge_slave_1: entered allmulticast mode [ 98.660381][ T6339] bridge_slave_1: entered promiscuous mode [ 98.709400][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.714583][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.764181][ T6339] team0: Port device team_slave_0 added [ 98.769287][ T6339] team0: Port device team_slave_1 added [ 98.811761][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.816325][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.824452][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.828674][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.830837][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.840105][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.899025][ T6339] hsr_slave_0: entered promiscuous mode [ 98.901479][ T6339] hsr_slave_1: entered promiscuous mode [ 98.903798][ T6339] debugfs: 'hsr0' already exists in 'hsr' [ 98.905663][ T6339] Cannot create hsr debugfs directory [ 99.180704][ T96] bridge_slave_1: left allmulticast mode [ 99.183514][ T96] bridge_slave_1: left promiscuous mode [ 99.185972][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.191800][ T96] bridge_slave_0: left allmulticast mode [ 99.194965][ T96] bridge_slave_0: left promiscuous mode [ 99.198309][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.401736][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.405629][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.409541][ T96] bond0 (unregistering): Released all slaves [ 99.547390][ T96] hsr_slave_0: left promiscuous mode [ 99.550456][ T96] hsr_slave_1: left promiscuous mode [ 99.554042][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.557064][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.561022][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.564184][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.578024][ T96] veth1_macvtap: left promiscuous mode [ 99.579964][ T96] veth0_macvtap: left promiscuous mode [ 99.581817][ T96] veth1_vlan: left promiscuous mode [ 99.583784][ T96] veth0_vlan: left promiscuous mode [ 99.948726][ T96] team0 (unregistering): Port device team_slave_1 removed [ 99.987866][ T96] team0 (unregistering): Port device team_slave_0 removed [ 100.413213][ T5295] Bluetooth: hci0: command tx timeout [ 100.574222][ T6339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.581034][ T6339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.588666][ T6339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.598887][ T6339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.646406][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.655916][ T6339] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.660788][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.663110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.670786][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.673902][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.036193][ T6339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.057771][ T6339] veth0_vlan: entered promiscuous mode [ 101.063658][ T6339] veth1_vlan: entered promiscuous mode [ 101.078234][ T6339] veth0_macvtap: entered promiscuous mode [ 101.082439][ T6339] veth1_macvtap: entered promiscuous mode [ 101.092370][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.098315][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.105578][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.108380][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.112729][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.115482][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.148232][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.150943][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.176842][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.180043][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.244825][ T40] audit: type=1400 audit(1760713362.047:117): avc: denied { create } for pid=6379 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.251230][ T40] audit: type=1400 audit(1760713362.047:118): avc: denied { write } for pid=6379 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.297419][ T40] audit: type=1400 audit(1760713362.097:119): avc: denied { read write } for pid=6379 comm="syz.0.16" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.306881][ T40] audit: type=1400 audit(1760713362.097:120): avc: denied { open } for pid=6379 comm="syz.0.16" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.378250][ T6380] infiniband syz1: set active [ 101.382560][ T6380] infiniband syz1: added syz_tun [ 101.417959][ T6380] RDS/IB: syz1: added [ 101.420126][ T6380] smc: adding ib device syz1 with port count 1 [ 101.423021][ T6380] smc: ib device syz1 port 1 has no pnetid [ 102.502190][ T5295] Bluetooth: hci0: command tx timeout [ 102.727565][ T6387] syz1: rxe_newlink: already configured on syz_tun [ 102.732501][ T12] ================================================================== [ 102.735011][ T12] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xb1a/0xbe0 [ 102.737483][ T12] Read of size 8 at addr ffff88802784c610 by task kworker/u32:0/12 [ 102.741417][ T12] [ 102.742242][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 102.742255][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.742263][ T12] Workqueue: rdma_cm cma_iboe_join_work_handler [ 102.742285][ T12] Call Trace: [ 102.742289][ T12] [ 102.742293][ T12] dump_stack_lvl+0x116/0x1f0 [ 102.742308][ T12] print_report+0xcd/0x630 [ 102.742324][ T12] ? __virt_addr_valid+0x81/0x610 [ 102.742336][ T12] ? __phys_addr+0xe8/0x180 [ 102.742347][ T12] ? ucma_create_uevent+0xb1a/0xbe0 [ 102.742358][ T12] kasan_report+0xe0/0x110 [ 102.742374][ T12] ? ucma_create_uevent+0xb1a/0xbe0 [ 102.742387][ T12] ucma_create_uevent+0xb1a/0xbe0 [ 102.742399][ T12] ucma_event_handler+0x102/0x940 [ 102.742412][ T12] ? rcu_is_watching+0x12/0xc0 [ 102.742424][ T12] cma_cm_event_handler+0x97/0x300 [ 102.742440][ T12] cma_iboe_join_work_handler+0xca/0x170 [ 102.742458][ T12] process_one_work+0x9cf/0x1b70 [ 102.742475][ T12] ? __pfx_process_one_work+0x10/0x10 [ 102.742492][ T12] ? assign_work+0x1a0/0x250 [ 102.742506][ T12] worker_thread+0x6c8/0xf10 [ 102.742522][ T12] ? __pfx_worker_thread+0x10/0x10 [ 102.742537][ T12] kthread+0x3c5/0x780 [ 102.742551][ T12] ? __pfx_kthread+0x10/0x10 [ 102.742565][ T12] ? rcu_is_watching+0x12/0xc0 [ 102.742574][ T12] ? __pfx_kthread+0x10/0x10 [ 102.742587][ T12] ret_from_fork+0x675/0x7d0 [ 102.742600][ T12] ? __pfx_kthread+0x10/0x10 [ 102.742613][ T12] ret_from_fork_asm+0x1a/0x30 [ 102.742628][ T12] [ 102.742632][ T12] [ 102.792290][ T12] Allocated by task 6387: [ 102.793643][ T12] kasan_save_stack+0x33/0x60 [ 102.795130][ T12] kasan_save_track+0x14/0x30 [ 102.796692][ T12] __kasan_kmalloc+0xaa/0xb0 [ 102.798185][ T12] ucma_process_join+0x237/0xa30 [ 102.799778][ T12] ucma_join_multicast+0xe8/0x160 [ 102.801375][ T12] ucma_write+0x1fb/0x330 [ 102.802726][ T12] vfs_write+0x2a0/0x11d0 [ 102.804102][ T12] ksys_write+0x1f8/0x250 [ 102.805462][ T12] do_syscall_64+0xcd/0xfa0 [ 102.806889][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.808717][ T12] [ 102.809542][ T12] Freed by task 6387: [ 102.810807][ T12] kasan_save_stack+0x33/0x60 [ 102.812342][ T12] kasan_save_track+0x14/0x30 [ 102.813826][ T12] __kasan_save_free_info+0x3b/0x60 [ 102.815449][ T12] __kasan_slab_free+0x5f/0x80 [ 102.816963][ T12] kfree+0x2b8/0x6d0 [ 102.818206][ T12] ucma_process_join+0x3b9/0xa30 [ 102.819817][ T12] ucma_join_multicast+0xe8/0x160 [ 102.821458][ T12] ucma_write+0x1fb/0x330 [ 102.823283][ T12] vfs_write+0x2a0/0x11d0 [ 102.825041][ T12] ksys_write+0x1f8/0x250 [ 102.826778][ T12] do_syscall_64+0xcd/0xfa0 [ 102.828277][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.830203][ T12] [ 102.830983][ T12] The buggy address belongs to the object at ffff88802784c600 [ 102.830983][ T12] which belongs to the cache kmalloc-192 of size 192 [ 102.835156][ T12] The buggy address is located 16 bytes inside of [ 102.835156][ T12] freed 192-byte region [ffff88802784c600, ffff88802784c6c0) [ 102.839310][ T12] [ 102.840100][ T12] The buggy address belongs to the physical page: [ 102.842605][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2784c [ 102.846108][ T12] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.849346][ T12] page_type: f5(slab) [ 102.851145][ T12] raw: 00fff00000000000 ffff88801b4423c0 ffffea0000d68c40 dead000000000003 [ 102.854573][ T12] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 102.857925][ T12] page dumped because: kasan: bad access detected [ 102.860401][ T12] page_owner tracks the page as allocated [ 102.862789][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6016, tgid 6016 (syz-executor), ts 68559029174, free_ts 68481540769 [ 102.870283][ T12] post_alloc_hook+0x1c0/0x230 [ 102.871729][ T12] get_page_from_freelist+0x10a3/0x3a30 [ 102.873410][ T12] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 102.875249][ T12] new_slab+0xa5/0x360 [ 102.876547][ T12] ___slab_alloc+0xdc4/0x1ae0 [ 102.878018][ T12] __slab_alloc.constprop.0+0x63/0x110 [ 102.879846][ T12] __kmalloc_node_noprof+0x4dd/0x8a0 [ 102.881506][ T12] alloc_slab_obj_exts+0x3a/0xd0 [ 102.883126][ T12] new_slab+0x283/0x360 [ 102.884455][ T12] ___slab_alloc+0xdc4/0x1ae0 [ 102.885934][ T12] __slab_alloc.constprop.0+0x63/0x110 [ 102.887802][ T12] kmem_cache_alloc_noprof+0x43f/0x6e0 [ 102.890021][ T12] alloc_vfsmnt+0x23/0x6b0 [ 102.892030][ T12] fc_mount_longterm+0x154/0x270 [ 102.893736][ T12] mq_init_ns+0x426/0x620 [ 102.895096][ T12] copy_ipcs+0x2d6/0x550 [ 102.896467][ T12] page last free pid 6005 tgid 6005 stack trace: [ 102.898428][ T12] __free_frozen_pages+0x7df/0x1160 [ 102.900433][ T12] vfree+0x1fd/0xb50 [ 102.902138][ T12] kcov_close+0x34/0x60 [ 102.903830][ T12] __fput+0x402/0xb70 [ 102.905066][ T12] task_work_run+0x150/0x240 [ 102.906517][ T12] do_exit+0x86f/0x2bf0 [ 102.907855][ T12] do_group_exit+0xd3/0x2a0 [ 102.909317][ T12] get_signal+0x2671/0x26d0 [ 102.910738][ T12] arch_do_signal_or_restart+0x8f/0x7c0 [ 102.912514][ T12] exit_to_user_mode_loop+0x85/0x130 [ 102.914167][ T12] do_syscall_64+0x426/0xfa0 [ 102.915631][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.917479][ T12] [ 102.918243][ T12] Memory state around the buggy address: [ 102.920121][ T12] ffff88802784c500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 102.922758][ T12] ffff88802784c580: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.925381][ T12] >ffff88802784c600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.927963][ T12] ^ [ 102.929652][ T12] ffff88802784c680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 102.932886][ T12] ffff88802784c700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 102.936244][ T12] ================================================================== [ 102.940179][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.943156][ T12] CPU: 2 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted syzkaller #0 PREEMPT(full) [ 102.946928][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.951421][ T12] Workqueue: rdma_cm cma_iboe_join_work_handler [ 102.954301][ T12] Call Trace: [ 102.955756][ T12] [ 102.956959][ T12] dump_stack_lvl+0x3d/0x1f0 [ 102.958815][ T12] vpanic+0x640/0x6f0 [ 102.960527][ T12] panic+0xca/0xd0 [ 102.962117][ T12] ? __pfx_panic+0x10/0x10 [ 102.963968][ T12] ? ucma_create_uevent+0xb1a/0xbe0 [ 102.966161][ T12] ? preempt_schedule_common+0x44/0xc0 [ 102.968136][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 102.970032][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 102.972180][ T12] check_panic_on_warn+0xab/0xb0 [ 102.974195][ T12] end_report+0x107/0x170 [ 102.975783][ T12] kasan_report+0xee/0x110 [ 102.977219][ T12] ? ucma_create_uevent+0xb1a/0xbe0 [ 102.978930][ T12] ucma_create_uevent+0xb1a/0xbe0 [ 102.981076][ T12] ucma_event_handler+0x102/0x940 [ 102.983221][ T12] ? rcu_is_watching+0x12/0xc0 [ 102.985262][ T12] cma_cm_event_handler+0x97/0x300 [ 102.987490][ T12] cma_iboe_join_work_handler+0xca/0x170 [ 102.989295][ T12] process_one_work+0x9cf/0x1b70 [ 102.991091][ T12] ? __pfx_process_one_work+0x10/0x10 [ 102.993460][ T12] ? assign_work+0x1a0/0x250 [ 102.995429][ T12] worker_thread+0x6c8/0xf10 [ 102.997465][ T12] ? __pfx_worker_thread+0x10/0x10 [ 102.999091][ T12] kthread+0x3c5/0x780 [ 103.000530][ T12] ? __pfx_kthread+0x10/0x10 [ 103.002320][ T12] ? rcu_is_watching+0x12/0xc0 [ 103.004338][ T12] ? __pfx_kthread+0x10/0x10 [ 103.006283][ T12] ret_from_fork+0x675/0x7d0 [ 103.008353][ T12] ? __pfx_kthread+0x10/0x10 [ 103.010412][ T12] ret_from_fork_asm+0x1a/0x30 [ 103.012034][ T12] [ 103.013719][ T12] Kernel Offset: disabled [ 103.015106][ T12] Rebooting in 86400 seconds..