Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
2026/05/14 07:34:26 parsed 1 programs
[ 78.385695][ T5636] cgroup: Unknown subsys name 'net'
[ 78.517954][ T5636] cgroup: Unknown subsys name 'cpuset'
[ 78.526265][ T5636] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 79.962622][ T5636] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.735914][ T5650] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 83.917616][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.925710][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.932941][ T5674] bridge_slave_0: entered allmulticast mode
[ 83.940021][ T5674] bridge_slave_0: entered promiscuous mode
[ 83.951262][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.959050][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.966568][ T5674] bridge_slave_1: entered allmulticast mode
[ 83.973462][ T5674] bridge_slave_1: entered promiscuous mode
[ 83.997788][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.008903][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.034349][ T5674] team0: Port device team_slave_0 added
[ 84.041789][ T5674] team0: Port device team_slave_1 added
[ 84.063170][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.072067][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 84.098511][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.111203][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.118207][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 84.144201][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.182718][ T5674] hsr_slave_0: entered promiscuous mode
[ 84.189278][ T5674] hsr_slave_1: entered promiscuous mode
[ 84.311511][ T5674] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.324104][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 84.332251][ T5674] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.342503][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 84.350339][ T5674] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.361322][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 84.369234][ T5674] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.381064][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 84.409134][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.416662][ T5674] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.424812][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.431944][ T5674] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.485538][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.504060][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.513676][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.530079][ T5674] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.542431][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.549597][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.563338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.570480][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.853732][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.901307][ T5674] veth0_vlan: entered promiscuous mode
[ 84.913788][ T5674] veth1_vlan: entered promiscuous mode
[ 84.943816][ T5674] veth0_macvtap: entered promiscuous mode
[ 84.953742][ T5674] veth1_macvtap: entered promiscuous mode
[ 84.971609][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.986630][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.003933][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.013249][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.023234][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.033194][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.162040][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.256122][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.357988][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.410681][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.215217][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.227973][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.237703][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.246910][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.260525][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.547684][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.559800][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.588247][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.596950][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.716075][ T2175] cfg80211: failed to load regulatory.db
[ 87.369106][ T12] bridge_slave_1: left allmulticast mode
[ 87.384569][ T12] bridge_slave_1: left promiscuous mode
[ 87.399611][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.430760][ T12] bridge_slave_0: left allmulticast mode
[ 87.440053][ T12] bridge_slave_0: left promiscuous mode
[ 87.445980][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.593586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.604367][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 87.614155][ T12] bond0 (unregistering): Released all slaves
[ 87.723333][ T12] hsr_slave_0: left promiscuous mode
[ 87.736453][ T12] hsr_slave_1: left promiscuous mode
[ 87.756630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 87.771921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 87.780647][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 87.789097][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 87.816349][ T12] veth1_macvtap: left promiscuous mode
[ 87.833482][ T12] veth0_macvtap: left promiscuous mode
[ 87.843656][ T12] veth1_vlan: left promiscuous mode
[ 87.853787][ T12] veth0_vlan: left promiscuous mode
2026/05/14 07:34:38 executed programs: 0
[ 88.328835][ T4945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.339059][ T4945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.347994][ T4945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.358550][ T4945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.366421][ T4945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.389141][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 88.441583][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 88.547465][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1
[ 89.366303][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2
[ 89.828499][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.835899][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.843125][ T5777] bridge_slave_0: entered allmulticast mode
[ 89.855100][ T5777] bridge_slave_0: entered promiscuous mode
[ 89.878075][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.892685][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.900049][ T5777] bridge_slave_1: entered allmulticast mode
[ 89.910852][ T5777] bridge_slave_1: entered promiscuous mode
[ 90.016650][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3
[ 90.028710][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.046102][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.083426][ T5777] team0: Port device team_slave_0 added
[ 90.092003][ T5777] team0: Port device team_slave_1 added
[ 90.148150][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.157120][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.185744][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.198577][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.206126][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.232477][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.292610][ T5777] hsr_slave_0: entered promiscuous mode
[ 90.299825][ T5777] hsr_slave_1: entered promiscuous mode
[ 90.475050][ T4945] Bluetooth: hci0: command tx timeout
[ 90.876222][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.899378][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 90.907339][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.919548][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 90.927564][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.940295][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 90.949015][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.964057][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 91.070862][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.096521][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.111801][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.118995][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.148641][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.155883][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.631580][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.698099][ T5777] veth0_vlan: entered promiscuous mode
[ 91.714589][ T5777] veth1_vlan: entered promiscuous mode
[ 91.757983][ T5777] veth0_macvtap: entered promiscuous mode
[ 91.769731][ T5777] veth1_macvtap: entered promiscuous mode
[ 91.799007][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.817206][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.841649][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.860495][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.883910][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.893917][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.966825][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.977553][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.011329][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.020181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.546702][ T4945] Bluetooth: hci0: command tx timeout
2026/05/14 07:34:43 executed programs: 5
[ 94.624843][ T4945] Bluetooth: hci0: command tx timeout
[ 94.777312][ T5950] ==================================================================
[ 94.785433][ T5950] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x197/0xfc0
[ 94.793277][ T5950] Read of size 8 at addr ffff8880779cc2b0 by task syz.0.24/5950
[ 94.800917][ T5950]
[ 94.803267][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full)
[ 94.803289][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 94.803308][ T5950] Call Trace:
[ 94.803318][ T5950]
[ 94.803325][ T5950] dump_stack_lvl+0xe8/0x150
[ 94.803349][ T5950] print_address_description+0x55/0x1e0
[ 94.803368][ T5950] ? __sk_msg_recvmsg+0x197/0xfc0
[ 94.803395][ T5950] print_report+0x58/0x70
[ 94.803410][ T5950] kasan_report+0x117/0x150
[ 94.803436][ T5950] ? __sk_msg_recvmsg+0x197/0xfc0
[ 94.803460][ T5950] __sk_msg_recvmsg+0x197/0xfc0
[ 94.803492][ T5950] udp_bpf_recvmsg+0x196/0xac0
[ 94.803521][ T5950] ? aa_sk_perm+0x6d5/0x900
[ 94.803546][ T5950] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 94.803572][ T5950] ? __lock_acquire+0x6b5/0x2cf0
[ 94.803590][ T5950] ? sock_rps_record_flow+0x19/0x350
[ 94.803608][ T5950] ? inet_recvmsg+0x101/0x120
[ 94.803623][ T5950] ? __pfx_inet_recvmsg+0x10/0x10
[ 94.803639][ T5950] sock_recvmsg+0x155/0x1b0
[ 94.803658][ T5950] ____sys_recvmsg+0x1e6/0x4a0
[ 94.803680][ T5950] ? __folio_batch_add_and_move+0x11a/0xc50
[ 94.803709][ T5950] ? __pfx_____sys_recvmsg+0x10/0x10
[ 94.803739][ T5950] ? import_iovec+0x73/0xa0
[ 94.803764][ T5950] ___sys_recvmsg+0x215/0x590
[ 94.803786][ T5950] ? page_table_check_set+0x126/0x510
[ 94.803811][ T5950] ? __pfx____sys_recvmsg+0x10/0x10
[ 94.803834][ T5950] ? css_rstat_updated+0x23a/0x530
[ 94.803853][ T5950] ? __fget_files+0x2a/0x420
[ 94.803881][ T5950] ? __fget_files+0x3a0/0x420
[ 94.803905][ T5950] do_recvmmsg+0x334/0x800
[ 94.803930][ T5950] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.803953][ T5950] ? __pfx_do_recvmmsg+0x10/0x10
[ 94.803976][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.803997][ T5950] ? __might_fault+0xaf/0x130
[ 94.804027][ T5950] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.804057][ T5950] __x64_sys_recvmmsg+0x198/0x250
[ 94.804083][ T5950] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 94.804111][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.804128][ T5950] do_syscall_64+0x15f/0xf80
[ 94.804151][ T5950] ? trace_irq_disable+0x3b/0x140
[ 94.804175][ T5950] ? clear_bhb_loop+0x40/0x90
[ 94.804194][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.804212][ T5950] RIP: 0033:0x7f00fa99ce59
[ 94.804232][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.804246][ T5950] RSP: 002b:00007f00fb771028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 94.804265][ T5950] RAX: ffffffffffffffda RBX: 00007f00fac16180 RCX: 00007f00fa99ce59
[ 94.804277][ T5950] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003
[ 94.804287][ T5950] RBP: 00007f00faa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.804297][ T5950] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[ 94.804307][ T5950] R13: 00007f00fac16218 R14: 00007f00fac16180 R15: 00007ffcdfab5708
[ 94.804328][ T5950]
[ 94.804334][ T5950]
[ 95.095865][ T5950] Allocated by task 5948:
[ 95.100188][ T5950] kasan_save_track+0x3e/0x80
[ 95.104881][ T5950] __kasan_kmalloc+0x93/0xb0
[ 95.109465][ T5950] __kmalloc_cache_noprof+0x31c/0x660
[ 95.114827][ T5950] sk_psock_skb_ingress_self+0x5e/0x370
[ 95.120363][ T5950] sk_psock_verdict_recv+0x7d9/0x8d0
[ 95.125641][ T5950] udp_read_skb+0x5d9/0x6b0
[ 95.130129][ T5950] sk_psock_verdict_data_ready+0x25f/0x690
[ 95.135926][ T5950] __udp_enqueue_schedule_skb+0xc4b/0x12e0
[ 95.141721][ T5950] udp_queue_rcv_one_skb+0x755/0x10f0
[ 95.147082][ T5950] __udp4_lib_mcast_deliver+0xad7/0xb70
[ 95.152618][ T5950] udp_rcv+0xcd0/0x1db0
[ 95.156759][ T5950] ip_protocol_deliver_rcu+0x282/0x440
[ 95.162207][ T5950] ip_local_deliver_finish+0x3bb/0x6f0
[ 95.167654][ T5950] NF_HOOK+0x336/0x3c0
[ 95.171708][ T5950] ip_sublist_rcv_finish+0x1f0/0x240
[ 95.176995][ T5950] ip_sublist_rcv+0x5c6/0xa70
[ 95.181668][ T5950] ip_list_rcv+0x3f1/0x450
[ 95.186072][ T5950] __netif_receive_skb_list_core+0x7e5/0x810
[ 95.192040][ T5950] netif_receive_skb_list_internal+0x995/0xcf0
[ 95.198274][ T5950] netif_receive_skb_list+0x55/0x450
[ 95.203548][ T5950] bpf_test_run_xdp_live+0x1946/0x1cf0
[ 95.209037][ T5950] bpf_prog_test_run_xdp+0x81c/0x1160
[ 95.214407][ T5950] bpf_prog_test_run+0x2c7/0x340
[ 95.219333][ T5950] __sys_bpf+0x643/0x950
[ 95.223564][ T5950] __x64_sys_bpf+0x7c/0x90
[ 95.227967][ T5950] do_syscall_64+0x15f/0xf80
[ 95.232549][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.238429][ T5950]
[ 95.240744][ T5950] Freed by task 5949:
[ 95.244707][ T5950] kasan_save_track+0x3e/0x80
[ 95.249373][ T5950] kasan_save_free_info+0x46/0x50
[ 95.254398][ T5950] __kasan_slab_free+0x5c/0x80
[ 95.259156][ T5950] kfree+0x1c5/0x640
[ 95.263041][ T5950] __sk_msg_recvmsg+0xdb7/0xfc0
[ 95.267880][ T5950] udp_bpf_recvmsg+0x196/0xac0
[ 95.272636][ T5950] sock_recvmsg+0x155/0x1b0
[ 95.277124][ T5950] ____sys_recvmsg+0x1e6/0x4a0
[ 95.281879][ T5950] ___sys_recvmsg+0x215/0x590
[ 95.286547][ T5950] do_recvmmsg+0x334/0x800
[ 95.290982][ T5950] __x64_sys_recvmmsg+0x198/0x250
[ 95.295997][ T5950] do_syscall_64+0x15f/0xf80
[ 95.300579][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.306461][ T5950]
[ 95.308775][ T5950] The buggy address belongs to the object at ffff8880779cc000
[ 95.308775][ T5950] which belongs to the cache kmalloc-1k of size 1024
[ 95.322812][ T5950] The buggy address is located 688 bytes inside of
[ 95.322812][ T5950] freed 1024-byte region [ffff8880779cc000, ffff8880779cc400)
[ 95.336678][ T5950]
[ 95.339164][ T5950] The buggy address belongs to the physical page:
[ 95.345566][ T5950] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x779c8
[ 95.354306][ T5950] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 95.362785][ T5950] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 95.370321][ T5950] page_type: f5(slab)
[ 95.374291][ T5950] raw: 00fff00000000040 ffff88813fe1adc0 dead000000000100 dead000000000122
[ 95.382858][ T5950] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 95.391425][ T5950] head: 00fff00000000040 ffff88813fe1adc0 dead000000000100 dead000000000122
[ 95.400094][ T5950] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 95.408751][ T5950] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 95.417408][ T5950] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 95.426056][ T5950] page dumped because: kasan: bad access detected
[ 95.432460][ T5950] page_owner tracks the page as allocated
[ 95.438161][ T5950] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5649, tgid 5649 (syz-executor), ts 82537917902, free_ts 82385146031
[ 95.458721][ T5950] post_alloc_hook+0x231/0x280
[ 95.463480][ T5950] get_page_from_freelist+0x24ba/0x2540
[ 95.469018][ T5950] __alloc_frozen_pages_noprof+0x18d/0x380
[ 95.474820][ T5950] allocate_slab+0x77/0x660
[ 95.479312][ T5950] refill_objects+0x339/0x3d0
[ 95.483975][ T5950] __pcs_replace_empty_main+0x321/0x720
[ 95.489508][ T5950] __kmalloc_noprof+0x474/0x760
[ 95.494361][ T5950] tomoyo_init_log+0x1aae/0x1fb0
[ 95.499328][ T5950] tomoyo_supervisor+0x353/0x1570
[ 95.504392][ T5950] tomoyo_env_perm+0x151/0x1f0
[ 95.509155][ T5950] tomoyo_find_next_domain+0x15cb/0x1aa0
[ 95.514798][ T5950] tomoyo_bprm_check_security+0x11b/0x180
[ 95.520536][ T5950] security_bprm_check+0x85/0x240
[ 95.525580][ T5950] bprm_execve+0x8a4/0x1440
[ 95.530088][ T5950] do_execveat_common+0x50d/0x690
[ 95.535109][ T5950] __x64_sys_execve+0x97/0xc0
[ 95.539781][ T5950] page last free pid 5632 tgid 5627 stack trace:
[ 95.546092][ T5950] __free_frozen_pages+0xbc7/0xd30
[ 95.551287][ T5950] __folio_put+0x4a2/0x580
[ 95.555809][ T5950] skb_release_data+0x544/0xa60
[ 95.560654][ T5950] __kfree_skb+0x5d/0x210
[ 95.565061][ T5950] skb_defer_free_flush+0x191/0x260
[ 95.570257][ T5950] net_rx_action+0x455/0xf70
[ 95.574867][ T5950] handle_softirqs+0x22a/0x840
[ 95.579635][ T5950] do_softirq+0x76/0xd0
[ 95.583782][ T5950] __local_bh_enable_ip+0xf8/0x130
[ 95.588882][ T5950] __dev_queue_xmit+0x1fe5/0x3950
[ 95.593939][ T5950] ip_finish_output2+0xc68/0x1070
[ 95.598966][ T5950] ip_output+0x29f/0x450
[ 95.603207][ T5950] __ip_queue_xmit+0x116a/0x1bb0
[ 95.608141][ T5950] __tcp_transmit_skb+0x2d76/0x4790
[ 95.613331][ T5950] tcp_write_xmit+0x1be0/0x6540
[ 95.618181][ T5950] __tcp_push_pending_frames+0x97/0x380
[ 95.623726][ T5950]
[ 95.626037][ T5950] Memory state around the buggy address:
[ 95.631654][ T5950] ffff8880779cc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.639720][ T5950] ffff8880779cc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.647775][ T5950] >ffff8880779cc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.655817][ T5950] ^
[ 95.661432][ T5950] ffff8880779cc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.669492][ T5950] ffff8880779cc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 95.677552][ T5950] ==================================================================
[ 95.694485][ T5950] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 95.701740][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full)
[ 95.711121][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 95.721184][ T5950] Call Trace:
[ 95.724469][ T5950]
[ 95.727409][ T5950] vpanic+0x56c/0xa60
[ 95.731404][ T5950] ? __pfx_vpanic+0x10/0x10
[ 95.735912][ T5950] ? __pfx___schedule+0x10/0x10
[ 95.740780][ T5950] panic+0xc5/0xd0
[ 95.744505][ T5950] ? __pfx_panic+0x10/0x10
[ 95.749020][ T5950] ? preempt_schedule_common+0x82/0xd0
[ 95.754487][ T5950] ? __sk_msg_recvmsg+0x197/0xfc0
[ 95.759521][ T5950] check_panic_on_warn+0x89/0xb0
[ 95.764474][ T5950] ? __sk_msg_recvmsg+0x197/0xfc0
[ 95.769505][ T5950] end_report+0x73/0x170
[ 95.773758][ T5950] ? __sk_msg_recvmsg+0x197/0xfc0
[ 95.778789][ T5950] kasan_report+0x128/0x150
[ 95.783304][ T5950] ? __sk_msg_recvmsg+0x197/0xfc0
[ 95.788339][ T5950] __sk_msg_recvmsg+0x197/0xfc0
[ 95.793224][ T5950] udp_bpf_recvmsg+0x196/0xac0
[ 95.798016][ T5950] ? aa_sk_perm+0x6d5/0x900
[ 95.802526][ T5950] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 95.807812][ T5950] ? __lock_acquire+0x6b5/0x2cf0
[ 95.812750][ T5950] ? sock_rps_record_flow+0x19/0x350
[ 95.818035][ T5950] ? inet_recvmsg+0x101/0x120
[ 95.822716][ T5950] ? __pfx_inet_recvmsg+0x10/0x10
[ 95.827739][ T5950] sock_recvmsg+0x155/0x1b0
[ 95.832505][ T5950] ____sys_recvmsg+0x1e6/0x4a0
[ 95.837267][ T5950] ? __folio_batch_add_and_move+0x11a/0xc50
[ 95.843168][ T5950] ? __pfx_____sys_recvmsg+0x10/0x10
[ 95.848470][ T5950] ? import_iovec+0x73/0xa0
[ 95.852980][ T5950] ___sys_recvmsg+0x215/0x590
[ 95.857653][ T5950] ? page_table_check_set+0x126/0x510
[ 95.863022][ T5950] ? __pfx____sys_recvmsg+0x10/0x10
[ 95.868215][ T5950] ? css_rstat_updated+0x23a/0x530
[ 95.873318][ T5950] ? __fget_files+0x2a/0x420
[ 95.877907][ T5950] ? __fget_files+0x3a0/0x420
[ 95.882575][ T5950] do_recvmmsg+0x334/0x800
[ 95.886987][ T5950] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.892003][ T5950] ? __pfx_do_recvmmsg+0x10/0x10
[ 95.896933][ T5950] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 95.902293][ T5950] ? __might_fault+0xaf/0x130
[ 95.906971][ T5950] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.912168][ T5950] __x64_sys_recvmmsg+0x198/0x250
[ 95.917191][ T5950] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 95.922733][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.928785][ T5950] do_syscall_64+0x15f/0xf80
[ 95.933381][ T5950] ? trace_irq_disable+0x3b/0x140
[ 95.938425][ T5950] ? clear_bhb_loop+0x40/0x90
[ 95.943199][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.949091][ T5950] RIP: 0033:0x7f00fa99ce59
[ 95.953496][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.973086][ T5950] RSP: 002b:00007f00fb771028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 95.981489][ T5950] RAX: ffffffffffffffda RBX: 00007f00fac16180 RCX: 00007f00fa99ce59
[ 95.989450][ T5950] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000003
[ 95.997427][ T5950] RBP: 00007f00faa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 96.005385][ T5950] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[ 96.013340][ T5950] R13: 00007f00fac16218 R14: 00007f00fac16180 R15: 00007ffcdfab5708
[ 96.021311][ T5950]
[ 96.024707][ T5950] Kernel Offset: disabled
[ 96.029015][ T5950] Rebooting in 86400 seconds..