Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts.
2026/05/16 06:50:55 parsed 1 programs
[ 78.531703][ T5635] cgroup: Unknown subsys name 'net'
[ 78.628294][ T5635] cgroup: Unknown subsys name 'cpuset'
[ 78.636839][ T5635] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 80.105578][ T5635] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.850566][ T5649] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 84.802287][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.810016][ T5688] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.817644][ T5688] bridge_slave_0: entered allmulticast mode
[ 84.825412][ T5688] bridge_slave_0: entered promiscuous mode
[ 84.834394][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.841637][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.848835][ T5688] bridge_slave_1: entered allmulticast mode
[ 84.855949][ T5688] bridge_slave_1: entered promiscuous mode
[ 84.881393][ T5688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.892570][ T5688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.918310][ T5688] team0: Port device team_slave_0 added
[ 84.925802][ T5688] team0: Port device team_slave_1 added
[ 84.946408][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.953351][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 84.979258][ T5688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.991540][ T5688] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.998526][ T5688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.024551][ T5688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.063514][ T5688] hsr_slave_0: entered promiscuous mode
[ 85.069967][ T5688] hsr_slave_1: entered promiscuous mode
[ 85.190768][ T5688] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.202971][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 85.210994][ T5688] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.221447][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 85.229270][ T5688] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.239081][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 85.247309][ T5688] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.259648][ T5688] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 85.287274][ T5688] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.294665][ T5688] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.302222][ T5688] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.309441][ T5688] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.365256][ T5688] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.382819][ T80] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.391754][ T80] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.406994][ T5688] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.419708][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.426820][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.440543][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.447851][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.728179][ T5688] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.771899][ T5688] veth0_vlan: entered promiscuous mode
[ 85.789975][ T5688] veth1_vlan: entered promiscuous mode
[ 85.822335][ T5688] veth0_macvtap: entered promiscuous mode
[ 85.832437][ T5688] veth1_macvtap: entered promiscuous mode
[ 85.849694][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.867244][ T5688] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.881860][ T1199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.891724][ T1199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.903067][ T1199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.911838][ T1199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.059534][ T179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.153798][ T179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.228812][ T179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.335102][ T179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.663598][ T29] cfg80211: failed to load regulatory.db
[ 86.835284][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.845063][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.855863][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.867997][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.877445][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.244696][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.252638][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.280549][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.288668][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/16 06:51:06 executed programs: 0
[ 87.882486][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.891144][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.899688][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.910444][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.918879][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.189568][ T179] bridge_slave_1: left allmulticast mode
[ 88.195563][ T179] bridge_slave_1: left promiscuous mode
[ 88.202422][ T179] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.213344][ T179] bridge_slave_0: left allmulticast mode
[ 88.220188][ T179] bridge_slave_0: left promiscuous mode
[ 88.226321][ T179] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.374306][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 88.385088][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 88.394942][ T179] bond0 (unregistering): Released all slaves
[ 88.535690][ T179] hsr_slave_0: left promiscuous mode
[ 88.541878][ T179] hsr_slave_1: left promiscuous mode
[ 88.548390][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 88.556097][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 88.566293][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 88.573706][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 88.591963][ T179] veth1_macvtap: left promiscuous mode
[ 88.597927][ T179] veth0_macvtap: left promiscuous mode
[ 88.604762][ T179] veth1_vlan: left promiscuous mode
[ 88.610087][ T179] veth0_vlan: left promiscuous mode
[ 88.915794][ T179] team0 (unregistering): Port device team_slave_1 removed
[ 88.935072][ T179] team0 (unregistering): Port device team_slave_0 removed
[ 89.037879][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[ 89.296525][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.303756][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.311091][ T5762] bridge_slave_0: entered allmulticast mode
[ 89.319928][ T5762] bridge_slave_0: entered promiscuous mode
[ 89.328731][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.336519][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.344596][ T5762] bridge_slave_1: entered allmulticast mode
[ 89.352519][ T5762] bridge_slave_1: entered promiscuous mode
[ 89.401228][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.423398][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.460838][ T5762] team0: Port device team_slave_0 added
[ 89.472007][ T5762] team0: Port device team_slave_1 added
[ 89.506377][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.513346][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.539603][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.561588][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.571926][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 89.598727][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.815443][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[ 89.883616][ T5762] hsr_slave_0: entered promiscuous mode
[ 89.908489][ T5762] hsr_slave_1: entered promiscuous mode
[ 90.015449][ T5742] Bluetooth: hci0: command tx timeout
[ 90.857529][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.872112][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 90.882089][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.895487][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 90.907632][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.917934][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 90.927294][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.939500][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 91.038349][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.063246][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.078380][ T179] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.085556][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.110769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.117996][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.576490][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.649460][ T5762] veth0_vlan: entered promiscuous mode
[ 91.662325][ T5762] veth1_vlan: entered promiscuous mode
[ 91.704959][ T5762] veth0_macvtap: entered promiscuous mode
[ 91.715891][ T5762] veth1_macvtap: entered promiscuous mode
[ 91.743142][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.762477][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.782480][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.798983][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.808808][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.818787][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.871704][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.880648][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.904204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.913581][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.094428][ T5742] Bluetooth: hci0: command tx timeout
2026/05/16 06:51:12 executed programs: 5
[ 93.779616][ T5897] ==================================================================
[ 93.787802][ T5897] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x197/0xfc0
[ 93.795638][ T5897] Read of size 8 at addr ffff88803492aab0 by task syz.0.21/5897
[ 93.803271][ T5897]
[ 93.805617][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 93.805636][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 93.805652][ T5897] Call Trace:
[ 93.805663][ T5897]
[ 93.805670][ T5897] dump_stack_lvl+0xe8/0x150
[ 93.805691][ T5897] print_address_description+0x55/0x1e0
[ 93.805709][ T5897] ? __sk_msg_recvmsg+0x197/0xfc0
[ 93.805729][ T5897] print_report+0x58/0x70
[ 93.805742][ T5897] kasan_report+0x117/0x150
[ 93.805764][ T5897] ? __sk_msg_recvmsg+0x197/0xfc0
[ 93.805787][ T5897] __sk_msg_recvmsg+0x197/0xfc0
[ 93.805807][ T5897] ? sk_psock_get+0x7a/0x440
[ 93.805827][ T5897] ? sk_psock_get+0x387/0x440
[ 93.805846][ T5897] ? __pfx_sk_psock_get+0x10/0x10
[ 93.805869][ T5897] udp_bpf_recvmsg+0x196/0xac0
[ 93.805891][ T5897] ? aa_sk_perm+0x6d5/0x900
[ 93.805912][ T5897] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 93.805932][ T5897] ? __lock_acquire+0x6b5/0x2cf0
[ 93.805948][ T5897] ? sock_rps_record_flow+0x19/0x350
[ 93.805968][ T5897] ? inet_recvmsg+0x101/0x120
[ 93.805987][ T5897] ? __pfx_inet_recvmsg+0x10/0x10
[ 93.806006][ T5897] sock_recvmsg+0x155/0x1b0
[ 93.806025][ T5897] ____sys_recvmsg+0x1e6/0x4a0
[ 93.806039][ T5897] ? __folio_batch_add_and_move+0x11a/0xc50
[ 93.806064][ T5897] ? __pfx_____sys_recvmsg+0x10/0x10
[ 93.806085][ T5897] ? import_iovec+0x73/0xa0
[ 93.806107][ T5897] ___sys_recvmsg+0x215/0x590
[ 93.806120][ T5897] ? page_table_check_set+0x126/0x510
[ 93.806150][ T5897] ? __pfx____sys_recvmsg+0x10/0x10
[ 93.806163][ T5897] ? css_rstat_updated+0x23a/0x530
[ 93.806180][ T5897] ? __fget_files+0x2a/0x420
[ 93.806205][ T5897] ? __fget_files+0x3a0/0x420
[ 93.806226][ T5897] do_recvmmsg+0x334/0x800
[ 93.806243][ T5897] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.806263][ T5897] ? __pfx_do_recvmmsg+0x10/0x10
[ 93.806278][ T5897] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 93.806296][ T5897] ? __might_fault+0xaf/0x130
[ 93.806321][ T5897] ? lockdep_hardirqs_on+0x7a/0x110
[ 93.806346][ T5897] __x64_sys_recvmmsg+0x198/0x250
[ 93.806362][ T5897] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 93.806381][ T5897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.806397][ T5897] do_syscall_64+0x15f/0xf80
[ 93.806416][ T5897] ? trace_irq_disable+0x3b/0x140
[ 93.806437][ T5897] ? clear_bhb_loop+0x40/0x90
[ 93.806454][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.806468][ T5897] RIP: 0033:0x7f70ebb9ce59
[ 93.806487][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.806499][ T5897] RSP: 002b:00007f70ec9a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 93.806516][ T5897] RAX: ffffffffffffffda RBX: 00007f70ebe16090 RCX: 00007f70ebb9ce59
[ 93.806527][ T5897] RDX: 0000000000000002 RSI: 0000200000003fc0 RDI: 0000000000000003
[ 93.806537][ T5897] RBP: 00007f70ebc32d6f R08: 0000000000000000 R09: 0000000000000000
[ 93.806544][ T5897] R10: 0000000000010021 R11: 0000000000000246 R12: 0000000000000000
[ 93.806553][ T5897] R13: 00007f70ebe16128 R14: 00007f70ebe16090 R15: 00007ffe124d1d88
[ 93.806571][ T5897]
[ 93.806577][ T5897]
[ 94.112312][ T5897] Allocated by task 5896:
[ 94.116641][ T5897] kasan_save_track+0x3e/0x80
[ 94.121324][ T5897] __kasan_kmalloc+0x93/0xb0
[ 94.125921][ T5897] __kmalloc_cache_noprof+0x31c/0x660
[ 94.131302][ T5897] sk_psock_skb_ingress_self+0x5e/0x370
[ 94.136841][ T5897] sk_psock_verdict_recv+0x7d9/0x8d0
[ 94.142374][ T5897] udp_read_skb+0x5d9/0x6b0
[ 94.146867][ T5897] sk_psock_verdict_data_ready+0x25f/0x690
[ 94.152657][ T5897] __udp_enqueue_schedule_skb+0xc4b/0x12e0
[ 94.158451][ T5897] udp_queue_rcv_one_skb+0x755/0x10f0
[ 94.163809][ T5897] __udp4_lib_mcast_deliver+0xad7/0xb70
[ 94.169332][ T5897] udp_rcv+0xcd0/0x1db0
[ 94.173473][ T5897] ip_protocol_deliver_rcu+0x282/0x440
[ 94.178916][ T5897] ip_local_deliver_finish+0x3bb/0x6f0
[ 94.184364][ T5897] NF_HOOK+0x336/0x3c0
[ 94.188421][ T5897] ip_sublist_rcv_finish+0x1f0/0x240
[ 94.193686][ T5897] ip_sublist_rcv+0x5c6/0xa70
[ 94.198348][ T5897] ip_list_rcv+0x3f1/0x450
[ 94.202745][ T5897] __netif_receive_skb_list_core+0x7e5/0x810
[ 94.208709][ T5897] netif_receive_skb_list_internal+0x995/0xcf0
[ 94.214849][ T5897] netif_receive_skb_list+0x55/0x450
[ 94.220125][ T5897] bpf_test_run_xdp_live+0x1946/0x1cf0
[ 94.225571][ T5897] bpf_prog_test_run_xdp+0x81c/0x1160
[ 94.231020][ T5897] bpf_prog_test_run+0x2c7/0x340
[ 94.235941][ T5897] __sys_bpf+0x643/0x950
[ 94.240181][ T5897] __x64_sys_bpf+0x7c/0x90
[ 94.244586][ T5897] do_syscall_64+0x15f/0xf80
[ 94.249166][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.255043][ T5897]
[ 94.257348][ T5897] Freed by task 5898:
[ 94.261352][ T5897] kasan_save_track+0x3e/0x80
[ 94.266014][ T5897] kasan_save_free_info+0x46/0x50
[ 94.271027][ T5897] __kasan_slab_free+0x5c/0x80
[ 94.275792][ T5897] kfree+0x1c5/0x640
[ 94.279672][ T5897] __sk_msg_recvmsg+0xdb7/0xfc0
[ 94.284516][ T5897] udp_bpf_recvmsg+0x196/0xac0
[ 94.289273][ T5897] sock_recvmsg+0x155/0x1b0
[ 94.293764][ T5897] ____sys_recvmsg+0x1e6/0x4a0
[ 94.298513][ T5897] ___sys_recvmsg+0x215/0x590
[ 94.303171][ T5897] do_recvmmsg+0x334/0x800
[ 94.307570][ T5897] __x64_sys_recvmmsg+0x198/0x250
[ 94.312573][ T5897] do_syscall_64+0x15f/0xf80
[ 94.317152][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.323025][ T5897]
[ 94.325331][ T5897] The buggy address belongs to the object at ffff88803492a800
[ 94.325331][ T5897] which belongs to the cache kmalloc-1k of size 1024
[ 94.339365][ T5897] The buggy address is located 688 bytes inside of
[ 94.339365][ T5897] freed 1024-byte region [ffff88803492a800, ffff88803492ac00)
[ 94.353234][ T5897]
[ 94.355552][ T5897] The buggy address belongs to the physical page:
[ 94.361968][ T5897] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34928
[ 94.370743][ T5897] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 94.379228][ T5897] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 94.386770][ T5897] page_type: f5(slab)
[ 94.390741][ T5897] raw: 00fff00000000040 ffff88813fe20dc0 dead000000000100 dead000000000122
[ 94.399305][ T5897] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 94.407876][ T5897] head: 00fff00000000040 ffff88813fe20dc0 dead000000000100 dead000000000122
[ 94.416528][ T5897] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 94.425179][ T5897] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 94.433855][ T5897] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 94.442525][ T5897] page dumped because: kasan: bad access detected
[ 94.448981][ T5897] page_owner tracks the page as allocated
[ 94.454689][ T5897] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 80, tgid 80 (kworker/u8:5), ts 93535996970, free_ts 93431323536
[ 94.475172][ T5897] post_alloc_hook+0x231/0x280
[ 94.479941][ T5897] get_page_from_freelist+0x24ba/0x2540
[ 94.485472][ T5897] __alloc_frozen_pages_noprof+0x18d/0x380
[ 94.491260][ T5897] allocate_slab+0x77/0x660
[ 94.495837][ T5897] refill_objects+0x339/0x3d0
[ 94.500506][ T5897] __pcs_replace_empty_main+0x321/0x720
[ 94.506036][ T5897] __kmalloc_noprof+0x474/0x760
[ 94.510876][ T5897] ___neigh_create+0x6d5/0x2250
[ 94.515718][ T5897] ip6_finish_output2+0x729/0x13e0
[ 94.520815][ T5897] ip6_output+0x340/0x550
[ 94.525127][ T5897] ndisc_send_skb+0xd0b/0x1670
[ 94.529876][ T5897] addrconf_dad_completed+0x909/0xe60
[ 94.535225][ T5897] addrconf_dad_work+0xc5e/0x14c0
[ 94.540230][ T5897] process_scheduled_works+0xb5d/0x1860
[ 94.545756][ T5897] worker_thread+0xa53/0xfc0
[ 94.550713][ T5897] kthread+0x389/0x470
[ 94.554808][ T5897] page last free pid 5772 tgid 5772 stack trace:
[ 94.561152][ T5897] __free_frozen_pages+0xbc7/0xd30
[ 94.566268][ T5897] __slab_free+0x274/0x2c0
[ 94.570671][ T5897] qlist_free_all+0x99/0x100
[ 94.575261][ T5897] kasan_quarantine_reduce+0x148/0x160
[ 94.580702][ T5897] __kasan_slab_alloc+0x22/0x80
[ 94.585542][ T5897] __kmalloc_noprof+0x316/0x760
[ 94.590381][ T5897] tomoyo_realpath_from_path+0xe3/0x5d0
[ 94.595921][ T5897] tomoyo_path_perm+0x283/0x560
[ 94.600751][ T5897] security_inode_getattr+0x12b/0x310
[ 94.606110][ T5897] __x64_sys_newfstat+0x13b/0x270
[ 94.611113][ T5897] do_syscall_64+0x15f/0xf80
[ 94.615687][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.621574][ T5897]
[ 94.623881][ T5897] Memory state around the buggy address:
[ 94.629502][ T5897] ffff88803492a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.637543][ T5897] ffff88803492aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.645586][ T5897] >ffff88803492aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.653636][ T5897] ^
[ 94.659246][ T5897] ffff88803492ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.667288][ T5897] ffff88803492ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 94.675326][ T5897] ==================================================================
[ 94.692616][ T5742] Bluetooth: hci0: command tx timeout
[ 94.707791][ T5897] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 94.715013][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 94.724108][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 94.734150][ T5897] Call Trace:
[ 94.737416][ T5897]
[ 94.740335][ T5897] vpanic+0x56c/0xa60
[ 94.744399][ T5897] ? __pfx_vpanic+0x10/0x10
[ 94.748901][ T5897] ? __pfx___schedule+0x10/0x10
[ 94.753755][ T5897] panic+0xc5/0xd0
[ 94.757463][ T5897] ? __pfx_panic+0x10/0x10
[ 94.761875][ T5897] ? preempt_schedule_common+0x82/0xd0
[ 94.767334][ T5897] ? __sk_msg_recvmsg+0x197/0xfc0
[ 94.772370][ T5897] check_panic_on_warn+0x89/0xb0
[ 94.777311][ T5897] ? __sk_msg_recvmsg+0x197/0xfc0
[ 94.782331][ T5897] end_report+0x73/0x170
[ 94.786570][ T5897] ? __sk_msg_recvmsg+0x197/0xfc0
[ 94.791583][ T5897] kasan_report+0x128/0x150
[ 94.796081][ T5897] ? __sk_msg_recvmsg+0x197/0xfc0
[ 94.801098][ T5897] __sk_msg_recvmsg+0x197/0xfc0
[ 94.805942][ T5897] ? sk_psock_get+0x7a/0x440
[ 94.810530][ T5897] ? sk_psock_get+0x387/0x440
[ 94.815234][ T5897] ? __pfx_sk_psock_get+0x10/0x10
[ 94.820267][ T5897] udp_bpf_recvmsg+0x196/0xac0
[ 94.825035][ T5897] ? aa_sk_perm+0x6d5/0x900
[ 94.829541][ T5897] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 94.834816][ T5897] ? __lock_acquire+0x6b5/0x2cf0
[ 94.839742][ T5897] ? sock_rps_record_flow+0x19/0x350
[ 94.845019][ T5897] ? inet_recvmsg+0x101/0x120
[ 94.849702][ T5897] ? __pfx_inet_recvmsg+0x10/0x10
[ 94.854717][ T5897] sock_recvmsg+0x155/0x1b0
[ 94.859218][ T5897] ____sys_recvmsg+0x1e6/0x4a0
[ 94.863962][ T5897] ? __folio_batch_add_and_move+0x11a/0xc50
[ 94.869843][ T5897] ? __pfx_____sys_recvmsg+0x10/0x10
[ 94.875119][ T5897] ? import_iovec+0x73/0xa0
[ 94.879616][ T5897] ___sys_recvmsg+0x215/0x590
[ 94.884282][ T5897] ? page_table_check_set+0x126/0x510
[ 94.889641][ T5897] ? __pfx____sys_recvmsg+0x10/0x10
[ 94.894818][ T5897] ? css_rstat_updated+0x23a/0x530
[ 94.899924][ T5897] ? __fget_files+0x2a/0x420
[ 94.904517][ T5897] ? __fget_files+0x3a0/0x420
[ 94.909196][ T5897] do_recvmmsg+0x334/0x800
[ 94.913627][ T5897] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.918652][ T5897] ? __pfx_do_recvmmsg+0x10/0x10
[ 94.923578][ T5897] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.928939][ T5897] ? __might_fault+0xaf/0x130
[ 94.933612][ T5897] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.938802][ T5897] __x64_sys_recvmmsg+0x198/0x250
[ 94.943809][ T5897] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 94.949347][ T5897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.955399][ T5897] do_syscall_64+0x15f/0xf80
[ 94.959977][ T5897] ? trace_irq_disable+0x3b/0x140
[ 94.964987][ T5897] ? clear_bhb_loop+0x40/0x90
[ 94.969649][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.975529][ T5897] RIP: 0033:0x7f70ebb9ce59
[ 94.979928][ T5897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.999516][ T5897] RSP: 002b:00007f70ec9a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 95.007922][ T5897] RAX: ffffffffffffffda RBX: 00007f70ebe16090 RCX: 00007f70ebb9ce59
[ 95.015878][ T5897] RDX: 0000000000000002 RSI: 0000200000003fc0 RDI: 0000000000000003
[ 95.023837][ T5897] RBP: 00007f70ebc32d6f R08: 0000000000000000 R09: 0000000000000000
[ 95.031791][ T5897] R10: 0000000000010021 R11: 0000000000000246 R12: 0000000000000000
[ 95.039749][ T5897] R13: 00007f70ebe16128 R14: 00007f70ebe16090 R15: 00007ffe124d1d88
[ 95.047768][ T5897]
[ 95.051169][ T5897] Kernel Offset: disabled
[ 95.055569][ T5897] Rebooting in 86400 seconds..