Warning: Permanently added '[localhost]:24084' (ED25519) to the list of known hosts.
2025/07/25 13:50:09 ignoring optional flag "sandboxArg"="0"
2025/07/25 13:50:10 parsed 1 programs
[ 79.838571][ T40] kauditd_printk_skb: 28 callbacks suppressed
[ 79.838586][ T40] audit: type=1400 audit(1753451412.412:118): avc: denied { unlink } for pid=6237 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 80.784150][ T6237] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.397098][ T53] cfg80211: failed to load regulatory.db
[ 83.294716][ T40] audit: type=1401 audit(1753451415.862:119): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 83.323396][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.327482][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.330441][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.333428][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.336590][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.539003][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.541596][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.556319][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.559979][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.027047][ T6341] chnl_net:caif_netlink_parms(): no params data found
[ 84.083118][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.085472][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.087986][ T6341] bridge_slave_0: entered allmulticast mode
[ 84.090594][ T6341] bridge_slave_0: entered promiscuous mode
[ 84.094211][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.096572][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.098853][ T6341] bridge_slave_1: entered allmulticast mode
[ 84.101418][ T6341] bridge_slave_1: entered promiscuous mode
[ 84.140749][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.151515][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.195999][ T6341] team0: Port device team_slave_0 added
[ 84.204110][ T6341] team0: Port device team_slave_1 added
[ 84.237238][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.239786][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.248265][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.257426][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.260364][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.271028][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.335555][ T6341] hsr_slave_0: entered promiscuous mode
[ 84.339267][ T6341] hsr_slave_1: entered promiscuous mode
[ 84.952366][ T6341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.956559][ T6341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.960729][ T6341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.964774][ T6341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.014614][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.028288][ T6341] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.037885][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.040216][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.046282][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.048779][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.169716][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.200110][ T6341] veth0_vlan: entered promiscuous mode
[ 85.207016][ T6341] veth1_vlan: entered promiscuous mode
[ 85.227538][ T6341] veth0_macvtap: entered promiscuous mode
[ 85.231859][ T6341] veth1_macvtap: entered promiscuous mode
[ 85.244552][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.255288][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.262953][ T6341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.266730][ T6341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.270337][ T6341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.273932][ T6341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.359932][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.470413][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.528852][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.590302][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/07/25 13:50:18 executed programs: 0
[ 85.864894][ T5311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.868711][ T5311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.871667][ T5311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.874834][ T5311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.878347][ T5311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.000723][ T6428] chnl_net:caif_netlink_parms(): no params data found
[ 86.105513][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.112321][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.114582][ T6428] bridge_slave_0: entered allmulticast mode
[ 86.117290][ T6428] bridge_slave_0: entered promiscuous mode
[ 86.121357][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.124233][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.128307][ T6428] bridge_slave_1: entered allmulticast mode
[ 86.131923][ T6428] bridge_slave_1: entered promiscuous mode
[ 86.177369][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.184046][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.225260][ T6428] team0: Port device team_slave_0 added
[ 86.230321][ T6428] team0: Port device team_slave_1 added
[ 86.264854][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.267304][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.274964][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.282233][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.285032][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.293722][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.357784][ T6428] hsr_slave_0: entered promiscuous mode
[ 86.360881][ T6428] hsr_slave_1: entered promiscuous mode
[ 86.363752][ T6428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 86.367065][ T6428] Cannot create hsr debugfs directory
[ 87.947322][ T62] Bluetooth: hci0: command tx timeout
[ 88.891979][ T1143] bridge_slave_1: left allmulticast mode
[ 88.893795][ T1143] bridge_slave_1: left promiscuous mode
[ 88.895642][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.899547][ T1143] bridge_slave_0: left allmulticast mode
[ 88.901374][ T1143] bridge_slave_0: left promiscuous mode
[ 88.903644][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.112594][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 89.118725][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 89.122703][ T1143] bond0 (unregistering): Released all slaves
[ 89.261762][ T1143] hsr_slave_0: left promiscuous mode
[ 89.264173][ T1143] hsr_slave_1: left promiscuous mode
[ 89.266850][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 89.269940][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 89.274143][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 89.276596][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 89.288115][ T1143] veth1_macvtap: left promiscuous mode
[ 89.289879][ T1143] veth0_macvtap: left promiscuous mode
[ 89.291646][ T1143] veth1_vlan: left promiscuous mode
[ 89.293798][ T1143] veth0_vlan: left promiscuous mode
[ 89.654219][ T1143] team0 (unregistering): Port device team_slave_1 removed
[ 89.691055][ T1143] team0 (unregistering): Port device team_slave_0 removed
[ 90.036446][ T62] Bluetooth: hci0: command tx timeout
[ 90.282045][ T6428] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.288932][ T6428] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.294537][ T6428] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.302242][ T6428] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.344345][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.354270][ T6428] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.358977][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.361808][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.370250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.373231][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.536300][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.567071][ T6428] veth0_vlan: entered promiscuous mode
[ 90.574208][ T6428] veth1_vlan: entered promiscuous mode
[ 90.602418][ T6428] veth0_macvtap: entered promiscuous mode
[ 90.608048][ T6428] veth1_macvtap: entered promiscuous mode
[ 90.622550][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.632203][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.639586][ T6428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.642787][ T6428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.645936][ T6428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.650304][ T6428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.701608][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.703853][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.719541][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.722885][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.751900][ T40] audit: type=1400 audit(1753451423.322:120): avc: denied { create } for pid=6543 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 90.757900][ T40] audit: type=1400 audit(1753451423.322:121): avc: denied { write } for pid=6543 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 90.803239][ T40] audit: type=1400 audit(1753451423.372:122): avc: denied { read write } for pid=6543 comm="syz.0.16" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 90.810028][ T40] audit: type=1400 audit(1753451423.372:123): avc: denied { open } for pid=6543 comm="syz.0.16" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 90.876222][ T6544] infiniband syz1: set active
[ 90.879472][ T6544] infiniband syz1: added syz_tun
[ 90.910651][ T6544] RDS/IB: syz1: added
[ 90.912227][ T6544] smc: adding ib device syz1 with port count 1
[ 90.914268][ T6544] smc: ib device syz1 port 1 has pnetid
[ 91.014849][ T6549] syz1: rxe_newlink: already configured on syz_tun
[ 91.019292][ T46] ==================================================================
[ 91.022675][ T46] BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xadb/0xb30
[ 91.025972][ T46] Read of size 8 at addr ffff8880266f4d10 by task kworker/u32:2/46
[ 91.030870][ T46]
[ 91.031904][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted 6.16.0-rc7-syzkaller-g2942242dde89 #0 PREEMPT(full)
[ 91.031925][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 91.031936][ T46] Workqueue: rdma_cm cma_iboe_join_work_handler
[ 91.031961][ T46] Call Trace:
[ 91.031968][ T46]
[ 91.031975][ T46] dump_stack_lvl+0x116/0x1f0
[ 91.032002][ T46] print_report+0xcd/0x630
[ 91.032017][ T46] ? __virt_addr_valid+0x81/0x610
[ 91.032035][ T46] ? __phys_addr+0xe8/0x180
[ 91.032053][ T46] ? ucma_create_uevent+0xadb/0xb30
[ 91.032069][ T46] kasan_report+0xe0/0x110
[ 91.032083][ T46] ? ucma_create_uevent+0xadb/0xb30
[ 91.032102][ T46] ucma_create_uevent+0xadb/0xb30
[ 91.032119][ T46] ucma_event_handler+0x102/0x940
[ 91.032139][ T46] ? rcu_is_watching+0x12/0xc0
[ 91.032160][ T46] cma_cm_event_handler+0x97/0x300
[ 91.032181][ T46] cma_iboe_join_work_handler+0xca/0x170
[ 91.032204][ T46] process_one_work+0x9cc/0x1b70
[ 91.032231][ T46] ? __pfx_process_one_work+0x10/0x10
[ 91.032251][ T46] ? assign_work+0x1a0/0x250
[ 91.032267][ T46] worker_thread+0x6c8/0xf10
[ 91.032287][ T46] ? __pfx_worker_thread+0x10/0x10
[ 91.032303][ T46] kthread+0x3c2/0x780
[ 91.032318][ T46] ? __pfx_kthread+0x10/0x10
[ 91.032333][ T46] ? rcu_is_watching+0x12/0xc0
[ 91.032353][ T46] ? __pfx_kthread+0x10/0x10
[ 91.032368][ T46] ret_from_fork+0x5d4/0x6f0
[ 91.032393][ T46] ? __pfx_kthread+0x10/0x10
[ 91.032408][ T46] ret_from_fork_asm+0x1a/0x30
[ 91.032431][ T46]
[ 91.032437][ T46]
[ 91.093905][ T46] Allocated by task 6549:
[ 91.095768][ T46] kasan_save_stack+0x33/0x60
[ 91.097725][ T46] kasan_save_track+0x14/0x30
[ 91.099728][ T46] __kasan_kmalloc+0xaa/0xb0
[ 91.101624][ T46] ucma_process_join+0x237/0xa30
[ 91.103203][ T46] ucma_join_multicast+0xe8/0x160
[ 91.105290][ T46] ucma_write+0x1fb/0x330
[ 91.106872][ T46] vfs_write+0x2a0/0x1150
[ 91.108701][ T46] ksys_write+0x1f8/0x250
[ 91.110559][ T46] do_syscall_64+0xcd/0x4c0
[ 91.112300][ T46] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.114811][ T46]
[ 91.115831][ T46] Freed by task 6549:
[ 91.117464][ T46] kasan_save_stack+0x33/0x60
[ 91.119469][ T46] kasan_save_track+0x14/0x30
[ 91.121435][ T46] kasan_save_free_info+0x3b/0x60
[ 91.123167][ T46] __kasan_slab_free+0x51/0x70
[ 91.124861][ T46] kfree+0x2b4/0x4d0
[ 91.126125][ T46] ucma_process_join+0x3b9/0xa30
[ 91.127704][ T46] ucma_join_multicast+0xe8/0x160
[ 91.129536][ T46] ucma_write+0x1fb/0x330
[ 91.130924][ T46] vfs_write+0x2a0/0x1150
[ 91.132608][ T46] ksys_write+0x1f8/0x250
[ 91.134417][ T46] do_syscall_64+0xcd/0x4c0
[ 91.136203][ T46] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.138533][ T46]
[ 91.139583][ T46] The buggy address belongs to the object at ffff8880266f4d00
[ 91.139583][ T46] which belongs to the cache kmalloc-192 of size 192
[ 91.145242][ T46] The buggy address is located 16 bytes inside of
[ 91.145242][ T46] freed 192-byte region [ffff8880266f4d00, ffff8880266f4dc0)
[ 91.150412][ T46]
[ 91.151443][ T46] The buggy address belongs to the physical page:
[ 91.154153][ T46] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x266f4
[ 91.157761][ T46] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 91.160682][ T46] page_type: f5(slab)
[ 91.162398][ T46] raw: 00fff00000000000 ffff88801b8423c0 dead000000000100 dead000000000122
[ 91.165737][ T46] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 91.168415][ T46] page dumped because: kasan: bad access detected
[ 91.171083][ T46] page_owner tracks the page as allocated
[ 91.173538][ T46] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 53, tgid 53 (kworker/2:1), ts 8366918434, free_ts 7796621020
[ 91.181173][ T46] post_alloc_hook+0x1c0/0x230
[ 91.183201][ T46] get_page_from_freelist+0x1321/0x3890
[ 91.185539][ T46] __alloc_frozen_pages_noprof+0x261/0x23f0
[ 91.187995][ T46] alloc_pages_mpol+0x1fb/0x550
[ 91.190036][ T46] new_slab+0x23b/0x330
[ 91.191737][ T46] ___slab_alloc+0xd9c/0x1940
[ 91.193372][ T46] __slab_alloc.constprop.0+0x56/0xb0
[ 91.195645][ T46] __kmalloc_noprof+0x2f2/0x510
[ 91.197721][ T46] virtio_gpu_array_alloc+0x21/0xb0
[ 91.199890][ T46] virtio_gpu_primary_plane_update+0xd43/0x1540
[ 91.202504][ T46] drm_atomic_helper_commit_planes+0x957/0x1010
[ 91.205070][ T46] drm_atomic_helper_commit_tail+0x69/0xf0
[ 91.207540][ T46] commit_tail+0x35b/0x400
[ 91.209424][ T46] drm_atomic_helper_commit+0x2fd/0x380
[ 91.211752][ T46] drm_atomic_commit+0x231/0x300
[ 91.213409][ T46] drm_atomic_helper_dirtyfb+0x5fd/0x780
[ 91.215211][ T46] page last free pid 53 tgid 53 stack trace:
[ 91.217083][ T46] __free_frozen_pages+0x7fe/0x1180
[ 91.218762][ T46] vfree+0x1fd/0xb50
[ 91.219986][ T46] delayed_vfree_work+0x56/0x70
[ 91.221482][ T46] process_one_work+0x9cc/0x1b70
[ 91.223041][ T46] worker_thread+0x6c8/0xf10
[ 91.224577][ T46] kthread+0x3c2/0x780
[ 91.226288][ T46] ret_from_fork+0x5d4/0x6f0
[ 91.228266][ T46] ret_from_fork_asm+0x1a/0x30
[ 91.230294][ T46]
[ 91.231328][ T46] Memory state around the buggy address:
[ 91.233271][ T46] ffff8880266f4c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.235933][ T46] ffff8880266f4c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 91.239066][ T46] >ffff8880266f4d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 91.242410][ T46] ^
[ 91.244389][ T46] ffff8880266f4d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 91.247558][ T46] ffff8880266f4e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 91.250822][ T46] ==================================================================
2025/07/25 13:50:23 executed programs: 3
[ 91.255641][ T46] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 91.258298][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted 6.16.0-rc7-syzkaller-g2942242dde89 #0 PREEMPT(full)
[ 91.262052][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 91.265388][ T46] Workqueue: rdma_cm cma_iboe_join_work_handler
[ 91.267379][ T46] Call Trace:
[ 91.268448][ T46]
[ 91.269440][ T46] dump_stack_lvl+0x3d/0x1f0
[ 91.270986][ T46] panic+0x71c/0x800
[ 91.272250][ T46] ? __pfx_panic+0x10/0x10
[ 91.274064][ T46] ? mark_held_locks+0x49/0x80
[ 91.276046][ T46] ? preempt_schedule_thunk+0x16/0x30
[ 91.278108][ T46] ? ucma_create_uevent+0xadb/0xb30
[ 91.279790][ T46] ? preempt_schedule_common+0x44/0xc0
[ 91.281513][ T46] ? check_panic_on_warn+0x1f/0xb0
[ 91.283140][ T46] ? ucma_create_uevent+0xadb/0xb30
[ 91.284801][ T46] check_panic_on_warn+0xab/0xb0
[ 91.286382][ T46] end_report+0x107/0x170
[ 91.287766][ T46] kasan_report+0xee/0x110
[ 91.289428][ T46] ? ucma_create_uevent+0xadb/0xb30
[ 91.291506][ T46] ucma_create_uevent+0xadb/0xb30
[ 91.293477][ T46] ucma_event_handler+0x102/0x940
[ 91.295504][ T46] ? rcu_is_watching+0x12/0xc0
[ 91.297398][ T46] cma_cm_event_handler+0x97/0x300
[ 91.299472][ T46] cma_iboe_join_work_handler+0xca/0x170
[ 91.301664][ T46] process_one_work+0x9cc/0x1b70
[ 91.303501][ T46] ? __pfx_process_one_work+0x10/0x10
[ 91.305202][ T46] ? assign_work+0x1a0/0x250
[ 91.307139][ T46] worker_thread+0x6c8/0xf10
[ 91.308629][ T46] ? __pfx_worker_thread+0x10/0x10
[ 91.310230][ T46] kthread+0x3c2/0x780
[ 91.311433][ T46] ? __pfx_kthread+0x10/0x10
[ 91.312842][ T46] ? rcu_is_watching+0x12/0xc0
[ 91.314827][ T46] ? __pfx_kthread+0x10/0x10
[ 91.316733][ T46] ret_from_fork+0x5d4/0x6f0
[ 91.318685][ T46] ? __pfx_kthread+0x10/0x10
[ 91.320697][ T46] ret_from_fork_asm+0x1a/0x30
[ 91.322411][ T46]
[ 91.324150][ T46] Kernel Offset: disabled
[ 91.325523][ T46] Rebooting in 86400 seconds..