[ 82.886698][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 82.886712][ T40] audit: type=1400 audit(1772814696.926:116): avc: denied { transition } for pid=6135 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.897133][ T40] audit: type=1400 audit(1772814696.926:117): avc: denied { noatsecure } for pid=6135 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.903863][ T40] audit: type=1400 audit(1772814696.936:118): avc: denied { rlimitinh } for pid=6135 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.910160][ T40] audit: type=1400 audit(1772814696.936:119): avc: denied { siginh } for pid=6135 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.701636][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:32558' (ED25519) to the list of known hosts. 2026/03/06 16:31:44 parsed 1 programs [ 89.972229][ T40] audit: type=1400 audit(1772814704.016:120): avc: denied { node_bind } for pid=6174 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.136174][ T40] audit: type=1400 audit(1772814706.176:121): avc: denied { read write } for pid=6185 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.145084][ T40] audit: type=1400 audit(1772814706.176:122): avc: denied { open } for pid=6185 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.202358][ T40] audit: type=1400 audit(1772814706.246:123): avc: denied { unlink } for pid=6185 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 92.555448][ T40] audit: type=1400 audit(1772814706.596:124): avc: denied { relabelto } for pid=6187 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.187952][ T6185] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.622299][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.625814][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.628758][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.632937][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.635953][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.118383][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 96.186686][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.189224][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.192019][ T6237] bridge_slave_0: entered allmulticast mode [ 96.194879][ T6237] bridge_slave_0: entered promiscuous mode [ 96.198159][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.203628][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.206112][ T6237] bridge_slave_1: entered allmulticast mode [ 96.208959][ T6237] bridge_slave_1: entered promiscuous mode [ 96.311054][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.315924][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.369831][ T6237] team0: Port device team_slave_0 added [ 96.376210][ T6237] team0: Port device team_slave_1 added [ 96.414462][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.416849][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.425461][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.435366][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.437748][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.449409][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.487296][ T6237] hsr_slave_0: entered promiscuous mode [ 96.489935][ T6237] hsr_slave_1: entered promiscuous mode [ 96.958378][ T6237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.963518][ T6237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.969439][ T6237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.976981][ T6237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.996170][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.998803][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.001659][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.004186][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.052946][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.061846][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.064896][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.077576][ T6237] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.091085][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.094395][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.104938][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.108259][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.160062][ T40] audit: type=1400 audit(1772814711.196:125): avc: denied { sys_module } for pid=6237 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.218948][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.248508][ T6237] veth0_vlan: entered promiscuous mode [ 97.254793][ T6237] veth1_vlan: entered promiscuous mode [ 97.274335][ T6237] veth0_macvtap: entered promiscuous mode [ 97.279209][ T6237] veth1_macvtap: entered promiscuous mode [ 97.290722][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.297624][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.311433][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.315481][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.318672][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.325392][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.414734][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.494631][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.502791][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.505440][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.525228][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.527915][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.569786][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.668772][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.975317][ T40] audit: type=1401 audit(1772814712.016:126): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/03/06 16:31:52 executed programs: 0 [ 98.372064][ T6024] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.375797][ T6024] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.379000][ T6024] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.382562][ T6024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.385424][ T6024] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.536703][ T6344] chnl_net:caif_netlink_parms(): no params data found [ 98.652145][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.655516][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.658870][ T6344] bridge_slave_0: entered allmulticast mode [ 98.665860][ T6344] bridge_slave_0: entered promiscuous mode [ 98.670870][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.674169][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.677484][ T6344] bridge_slave_1: entered allmulticast mode [ 98.681739][ T6344] bridge_slave_1: entered promiscuous mode [ 98.716892][ T6344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.721907][ T6344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.753215][ T6344] team0: Port device team_slave_0 added [ 98.756533][ T6344] team0: Port device team_slave_1 added [ 98.787993][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.793010][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.802074][ T6344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.806813][ T6344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.809237][ T6344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.818799][ T6344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.857435][ T6344] hsr_slave_0: entered promiscuous mode [ 98.859844][ T6344] hsr_slave_1: entered promiscuous mode [ 98.862249][ T6344] debugfs: 'hsr0' already exists in 'hsr' [ 98.864213][ T6344] Cannot create hsr debugfs directory [ 100.450686][ T63] Bluetooth: hci0: command tx timeout [ 100.908212][ T13] bridge_slave_1: left allmulticast mode [ 100.910190][ T13] bridge_slave_1: left promiscuous mode [ 100.912290][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.918888][ T13] bridge_slave_0: left allmulticast mode [ 100.920997][ T13] bridge_slave_0: left promiscuous mode [ 100.922959][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.069685][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.075846][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.081270][ T13] bond0 (unregistering): Released all slaves [ 101.289838][ T13] hsr_slave_0: left promiscuous mode [ 101.292177][ T13] hsr_slave_1: left promiscuous mode [ 101.294692][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.297220][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.299955][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.302828][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.309108][ T13] veth1_macvtap: left promiscuous mode [ 101.312938][ T13] veth0_macvtap: left promiscuous mode [ 101.314866][ T13] veth1_vlan: left promiscuous mode [ 101.316688][ T13] veth0_vlan: left promiscuous mode [ 101.409841][ T13] team0 (unregistering): Port device team_slave_1 removed [ 101.421820][ T13] team0 (unregistering): Port device team_slave_0 removed [ 101.767474][ T6344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.774181][ T6344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.782329][ T6344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.788453][ T6344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.846858][ T6344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.857347][ T6344] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.866694][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.869726][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.877027][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.880502][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.121438][ T6344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.142133][ T6344] veth0_vlan: entered promiscuous mode [ 102.147817][ T6344] veth1_vlan: entered promiscuous mode [ 102.170649][ T6344] veth0_macvtap: entered promiscuous mode [ 102.176462][ T6344] veth1_macvtap: entered promiscuous mode [ 102.185253][ T6344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.192302][ T6344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.198985][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.202887][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.208396][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.211765][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.264778][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.268396][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.282054][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.285759][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.311417][ T40] audit: type=1400 audit(1772814716.346:127): avc: denied { create } for pid=6388 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.318433][ T40] audit: type=1400 audit(1772814716.356:128): avc: denied { write } for pid=6388 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.363378][ T40] audit: type=1400 audit(1772814716.406:129): avc: denied { read write } for pid=6388 comm="syz.0.16" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.373180][ T40] audit: type=1400 audit(1772814716.406:130): avc: denied { read write open } for pid=6388 comm="syz.0.16" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.425145][ T6389] infiniband syz1: set active [ 102.429793][ T6389] infiniband syz1: added syz_tun [ 102.454125][ T6389] RDS/IB: syz1: added [ 102.456148][ T6389] smc: adding ib device syz1 with port count 1 [ 102.458563][ T6389] smc: ib device syz1 port 1 has no pnetid [ 102.531403][ T63] Bluetooth: hci0: command tx timeout [ 102.625549][ T6394] syz1: rxe_newlink: already configured on syz_tun [ 102.646753][ T6397] syz1: rxe_newlink: already configured on syz_tun [ 102.670218][ T6400] syz1: rxe_newlink: already configured on syz_tun [ 102.689811][ T6403] syz1: rxe_newlink: already configured on syz_tun [ 102.709047][ T6406] syz1: rxe_newlink: already configured on syz_tun [ 102.726397][ T6409] syz1: rxe_newlink: already configured on syz_tun [ 102.745548][ T6412] syz1: rxe_newlink: already configured on syz_tun [ 102.762691][ T6415] syz1: rxe_newlink: already configured on syz_tun [ 102.786024][ T6418] syz1: rxe_newlink: already configured on syz_tun [ 102.789998][ T13] ================================================================== [ 102.793427][ T13] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xb60/0xbe0 [ 102.796137][ T13] Read of size 8 at addr ffff888029dffa10 by task kworker/u32:1/13 [ 102.800008][ T13] [ 102.800926][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.800940][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.800948][ T13] Workqueue: rdma_cm cma_iboe_join_work_handler [ 102.800969][ T13] Call Trace: [ 102.800977][ T13] [ 102.800982][ T13] dump_stack_lvl+0x100/0x190 [ 102.801000][ T13] print_report+0x156/0x4c9 [ 102.801016][ T13] ? __virt_addr_valid+0x81/0x620 [ 102.801032][ T13] ? __phys_addr+0xe8/0x180 [ 102.801052][ T13] ? ucma_create_uevent+0xb60/0xbe0 [ 102.801062][ T13] kasan_report+0xdf/0x1e0 [ 102.801072][ T13] ? ucma_create_uevent+0xb60/0xbe0 [ 102.801083][ T13] ucma_create_uevent+0xb60/0xbe0 [ 102.801094][ T13] ucma_event_handler+0x102/0x940 [ 102.801106][ T13] ? rcu_is_watching+0x12/0xc0 [ 102.801119][ T13] cma_cm_event_handler+0x99/0x330 [ 102.801132][ T13] cma_iboe_join_work_handler+0xca/0x180 [ 102.801145][ T13] process_one_work+0x9d7/0x1920 [ 102.801159][ T13] ? __pfx_process_one_work+0x10/0x10 [ 102.801171][ T13] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 102.801185][ T13] worker_thread+0x5da/0xe40 [ 102.801198][ T13] ? kthread+0x13a/0x450 [ 102.801206][ T13] ? __pfx_worker_thread+0x10/0x10 [ 102.801217][ T13] kthread+0x370/0x450 [ 102.801226][ T13] ? __pfx_kthread+0x10/0x10 [ 102.801235][ T13] ret_from_fork+0x754/0xd80 [ 102.801246][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 102.801256][ T13] ? __switch_to+0x7b4/0x1120 [ 102.801269][ T13] ? __pfx_kthread+0x10/0x10 [ 102.801279][ T13] ret_from_fork_asm+0x1a/0x30 [ 102.801294][ T13] [ 102.801298][ T13] [ 102.859325][ T13] Allocated by task 6418: [ 102.860715][ T13] kasan_save_stack+0x30/0x50 [ 102.862264][ T13] kasan_save_track+0x14/0x30 [ 102.863875][ T13] __kasan_kmalloc+0xaa/0xb0 [ 102.865451][ T13] ucma_process_join+0x232/0xa20 [ 102.867122][ T13] ucma_join_multicast+0xe9/0x160 [ 102.868850][ T13] ucma_write+0x1fb/0x330 [ 102.870502][ T13] vfs_write+0x2aa/0x1070 [ 102.872046][ T13] ksys_write+0x1f8/0x250 [ 102.873669][ T13] do_syscall_64+0x106/0xf80 [ 102.875339][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.877302][ T13] [ 102.878103][ T13] Freed by task 6418: [ 102.879476][ T13] kasan_save_stack+0x30/0x50 [ 102.881092][ T13] kasan_save_track+0x14/0x30 [ 102.882710][ T13] kasan_save_free_info+0x3b/0x70 [ 102.884514][ T13] __kasan_slab_free+0x5f/0x80 [ 102.886101][ T13] kfree+0x1f6/0x6b0 [ 102.887475][ T13] ucma_process_join+0x39a/0xa20 [ 102.889105][ T13] ucma_join_multicast+0xe9/0x160 [ 102.890813][ T13] ucma_write+0x1fb/0x330 [ 102.892294][ T13] vfs_write+0x2aa/0x1070 [ 102.893838][ T13] ksys_write+0x1f8/0x250 [ 102.895322][ T13] do_syscall_64+0x106/0xf80 [ 102.896903][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.898946][ T13] [ 102.899783][ T13] The buggy address belongs to the object at ffff888029dffa00 [ 102.899783][ T13] which belongs to the cache kmalloc-192 of size 192 [ 102.904604][ T13] The buggy address is located 16 bytes inside of [ 102.904604][ T13] freed 192-byte region [ffff888029dffa00, ffff888029dffac0) [ 102.909056][ T13] [ 102.909849][ T13] The buggy address belongs to the physical page: [ 102.911909][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29dff [ 102.914784][ T13] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 102.917147][ T13] page_type: f5(slab) [ 102.918497][ T13] raw: 00fff00000000000 ffff88801b8423c0 dead000000000100 dead000000000122 [ 102.921307][ T13] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 102.924124][ T13] page dumped because: kasan: bad access detected [ 102.926251][ T13] page_owner tracks the page as allocated [ 102.928207][ T13] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12606548214, free_ts 0 [ 102.934500][ T13] post_alloc_hook+0x153/0x170 [ 102.936139][ T13] get_page_from_freelist+0x111d/0x3140 [ 102.938034][ T13] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 102.940058][ T13] new_slab+0xa6/0x6d0 [ 102.941425][ T13] refill_objects+0x26b/0x400 [ 102.943062][ T13] __pcs_replace_empty_main+0x19f/0x600 [ 102.944953][ T13] __kmalloc_noprof+0x688/0x850 [ 102.946705][ T13] __register_sysctl_table+0xbe4/0x1650 [ 102.948629][ T13] __devinet_sysctl_register+0x1b9/0x360 [ 102.950544][ T13] devinet_sysctl_register+0x17b/0x210 [ 102.952409][ T13] inetdev_init+0x2b8/0x570 [ 102.954226][ T13] inetdev_event+0x7fa/0x17f0 [ 102.955845][ T13] notifier_call_chain+0x99/0x420 [ 102.957598][ T13] call_netdevice_notifiers_info+0xbe/0x110 [ 102.959607][ T13] register_netdevice+0x16e6/0x2210 [ 102.961364][ T13] dummy_init_module+0x105/0x170 [ 102.963125][ T13] page_owner free stack trace missing [ 102.965100][ T13] [ 102.965927][ T13] Memory state around the buggy address: [ 102.967831][ T13] ffff888029dff900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.970471][ T13] ffff888029dff980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 102.973214][ T13] >ffff888029dffa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.975901][ T13] ^ [ 102.977501][ T13] ffff888029dffa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 102.980190][ T13] ffff888029dffb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.982878][ T13] ================================================================== [ 102.986315][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.988798][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.991930][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.995392][ T13] Workqueue: rdma_cm cma_iboe_join_work_handler [ 102.997533][ T13] Call Trace: [ 102.998685][ T13] [ 102.999725][ T13] dump_stack_lvl+0x100/0x190 [ 103.001339][ T13] vpanic+0x552/0x970 [ 103.002712][ T13] ? __pfx_vpanic+0x10/0x10 [ 103.004304][ T13] ? ucma_create_uevent+0xb60/0xbe0 [ 103.006068][ T13] panic+0xd1/0xe0 [ 103.007392][ T13] ? __pfx_panic+0x10/0x10 [ 103.008938][ T13] ? ucma_create_uevent+0xb60/0xbe0 [ 103.010729][ T13] ? preempt_schedule_common+0x42/0xc0 [ 103.012585][ T13] ? check_panic_on_warn+0x1f/0x90 [ 103.014529][ T13] check_panic_on_warn.cold+0x19/0x34 [ 103.016362][ T13] end_report.part.0+0x3a/0x90 [ 103.018022][ T13] kasan_report.cold+0xe/0x18 [ 103.019641][ T13] ? ucma_create_uevent+0xb60/0xbe0 [ 103.021407][ T13] ucma_create_uevent+0xb60/0xbe0 [ 103.023154][ T13] ucma_event_handler+0x102/0x940 [ 103.024867][ T13] ? rcu_is_watching+0x12/0xc0 [ 103.026542][ T13] cma_cm_event_handler+0x99/0x330 [ 103.028329][ T13] cma_iboe_join_work_handler+0xca/0x180 [ 103.030230][ T13] process_one_work+0x9d7/0x1920 [ 103.031929][ T13] ? __pfx_process_one_work+0x10/0x10 [ 103.033816][ T13] ? __pfx_cma_iboe_join_work_handler+0x10/0x10 [ 103.035930][ T13] worker_thread+0x5da/0xe40 [ 103.037548][ T13] ? kthread+0x13a/0x450 [ 103.038990][ T13] ? __pfx_worker_thread+0x10/0x10 [ 103.040732][ T13] kthread+0x370/0x450 [ 103.042117][ T13] ? __pfx_kthread+0x10/0x10 [ 103.043780][ T13] ret_from_fork+0x754/0xd80 [ 103.045346][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 103.047126][ T13] ? __switch_to+0x7b4/0x1120 [ 103.048729][ T13] ? __pfx_kthread+0x10/0x10 [ 103.050313][ T13] ret_from_fork_asm+0x1a/0x30 [ 103.051961][ T13] [ 103.053659][ T13] Kernel Offset: disabled [ 103.055160][ T13] Rebooting in 86400 seconds..