Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. 2026/09/05 23:33:09 parsed 1 programs 2026/09/05 23:33:09 serving rpc on tcp://42145 [ 91.853266][ T33] cfg80211: failed to load regulatory.db [ 93.525190][ T4290] cgroup: Unknown subsys name 'net' [ 93.637965][ T4290] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.244477][ T4290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 97.973028][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.981214][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.995493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.024602][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.032583][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.040171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.167341][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.177646][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.186301][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.194721][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.203026][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.210391][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.231896][ T4354] chnl_net:caif_netlink_parms(): no params data found [ 99.295074][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.302868][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.310832][ T4354] device bridge_slave_0 entered promiscuous mode [ 99.320100][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.327621][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.335769][ T4354] device bridge_slave_1 entered promiscuous mode [ 99.387922][ T4354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.399356][ T4354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.425693][ T4354] team0: Port device team_slave_0 added [ 99.438887][ T4354] team0: Port device team_slave_1 added [ 99.487732][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.494834][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.521090][ T4354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.534369][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.541410][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.567365][ T4354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.617677][ T4354] device hsr_slave_0 entered promiscuous mode [ 99.626141][ T4354] device hsr_slave_1 entered promiscuous mode [ 99.760168][ T4354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.774004][ T4354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.784270][ T4354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.794511][ T4354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.819360][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.826645][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.834875][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.842072][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.943674][ T4354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.958045][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.970176][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.978714][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.987653][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 100.002327][ T4354] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.013909][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.023723][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.031079][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.042680][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.053240][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.060341][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.094509][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.103746][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.128737][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.140352][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.154605][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.176313][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.386906][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.395410][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.408432][ T4354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.427937][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.437508][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.462637][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.472836][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.482481][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.490344][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.508208][ T4354] device veth0_vlan entered promiscuous mode [ 100.520471][ T4354] device veth1_vlan entered promiscuous mode [ 100.553068][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.561774][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.569874][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.578875][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.590483][ T4354] device veth0_macvtap entered promiscuous mode [ 100.602507][ T4354] device veth1_macvtap entered promiscuous mode [ 100.622517][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.630112][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.640344][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.649366][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.659739][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.676258][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.684596][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.694259][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.706608][ T4354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.715998][ T4354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.725561][ T4354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.735303][ T4354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.921392][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/05 23:33:20 executed programs: 0 [ 101.305821][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.315854][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.323831][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.332908][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.340599][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.348617][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.479588][ T4379] chnl_net:caif_netlink_parms(): no params data found [ 101.527895][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.535569][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.543745][ T4379] device bridge_slave_0 entered promiscuous mode [ 101.555006][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.562181][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.570238][ T4379] device bridge_slave_1 entered promiscuous mode [ 101.594114][ T4379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.605448][ T4379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.633615][ T4379] team0: Port device team_slave_0 added [ 101.642354][ T4379] team0: Port device team_slave_1 added [ 101.662510][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.669596][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.695806][ T4379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.713734][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.720700][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.746759][ T4379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.783282][ T4379] device hsr_slave_0 entered promiscuous mode [ 101.790039][ T4379] device hsr_slave_1 entered promiscuous mode [ 101.796842][ T4379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.804875][ T4379] Cannot create hsr debugfs directory [ 103.303843][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.371771][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 105.452423][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 105.611058][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.674076][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.538948][ T46] device hsr_slave_0 left promiscuous mode [ 106.548623][ T46] device hsr_slave_1 left promiscuous mode [ 106.555901][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.565969][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.576515][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.586721][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.595038][ T46] device bridge_slave_1 left promiscuous mode [ 106.604965][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.617496][ T46] device bridge_slave_0 left promiscuous mode [ 106.627403][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.657789][ T46] device veth1_macvtap left promiscuous mode [ 106.664541][ T46] device veth0_macvtap left promiscuous mode [ 106.670920][ T46] device veth1_vlan left promiscuous mode [ 106.677540][ T46] device veth0_vlan left promiscuous mode [ 107.094214][ T46] team0 (unregistering): Port device team_slave_1 removed [ 107.123644][ T46] team0 (unregistering): Port device team_slave_0 removed [ 107.152477][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.184162][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.373738][ T46] bond0 (unregistering): Released all slaves [ 107.455185][ T4379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.467187][ T4379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.477589][ T4379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.488826][ T4379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.531211][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 107.574866][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.587685][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.596366][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.607460][ T4379] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.623195][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.633936][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.642941][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.650067][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.668389][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.678592][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.687326][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.694502][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.703137][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.723019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.735017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.747452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.758387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.767789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.792634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.801684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.810246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.819176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.828407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.837647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.848466][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.091270][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.098791][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.111868][ T4379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.139180][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.148270][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.167244][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.176076][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.186591][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.195054][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.210258][ T4379] device veth0_vlan entered promiscuous mode [ 108.223087][ T4379] device veth1_vlan entered promiscuous mode [ 108.249383][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.257662][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.266968][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.276495][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.295145][ T4379] device veth0_macvtap entered promiscuous mode [ 108.304953][ T4379] device veth1_macvtap entered promiscuous mode [ 108.320606][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.329290][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.338230][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.347433][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.356260][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.374404][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.383134][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.392015][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.404114][ T4379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.413252][ T4379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.422400][ T4379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.431312][ T4379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.497809][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.511627][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.519954][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.546910][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.555635][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.564447][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.628706][ T4420] ================================================================== [ 108.636835][ T4420] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x99e/0x9d0 [ 108.645765][ T4420] Write of size 4 at addr ffff888079e25b30 by task syz.0.17/4420 [ 108.653520][ T4420] [ 108.655906][ T4420] CPU: 1 PID: 4420 Comm: syz.0.17 Not tainted syzkaller #0 [ 108.663141][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.673256][ T4420] Call Trace: [ 108.676577][ T4420] [ 108.679540][ T4420] dump_stack_lvl+0x188/0x24e [ 108.684292][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 108.689386][ T4420] ? show_regs_print_info+0x12/0x12 [ 108.694630][ T4420] ? load_image+0x410/0x410 [ 108.699221][ T4420] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 108.704732][ T4420] ? __virt_addr_valid+0x188/0x540 [ 108.709889][ T4420] ? __virt_addr_valid+0x467/0x540 [ 108.715047][ T4420] ? stack_map_get_build_id_offset+0x99e/0x9d0 [ 108.721254][ T4420] print_report+0xa8/0x210 [ 108.725720][ T4420] kasan_report+0x10b/0x140 [ 108.730280][ T4420] ? stack_map_get_build_id_offset+0x99e/0x9d0 [ 108.736485][ T4420] stack_map_get_build_id_offset+0x99e/0x9d0 [ 108.742507][ T4420] ? pcpu_freelist_pop+0x126/0x180 [ 108.747637][ T4420] ? __pcpu_freelist_pop+0x850/0x850 [ 108.752959][ T4420] ? __bpf_get_stackid+0x920/0x920 [ 108.758123][ T4420] __bpf_get_stackid+0x55d/0x920 [ 108.763106][ T4420] bpf_get_stackid_pe+0x33f/0x400 [ 108.768164][ T4420] bpf_prog_2414a5d5030ea31b+0x21/0x25 [ 108.773680][ T4420] bpf_overflow_handler+0x50b/0x790 [ 108.778905][ T4420] ? bpf_overflow_handler+0xd9/0x790 [ 108.784224][ T4420] ? perf_swevent_overflow+0x230/0x230 [ 108.789728][ T4420] ? __lock_acquire+0x138a/0x7c40 [ 108.794789][ T4420] ? __perf_event_account_interrupt+0x187/0x280 [ 108.801066][ T4420] __perf_event_overflow+0x457/0x630 [ 108.806411][ T4420] ? perf_swevent_event+0x1d5/0x570 [ 108.811669][ T4420] perf_swevent_event+0x315/0x570 [ 108.816742][ T4420] ? perf_tp_event+0xc10/0xc10 [ 108.821536][ T4420] ___perf_sw_event+0x498/0x6d0 [ 108.826419][ T4420] ? ___perf_sw_event+0x184/0x6d0 [ 108.831476][ T4420] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 108.837929][ T4420] ? __lock_acquire+0x1465/0x7c40 [ 108.843002][ T4420] ? verify_lock_unused+0x140/0x140 [ 108.848229][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.854240][ T4420] ? lock_chain_count+0x20/0x20 [ 108.859132][ T4420] __perf_sw_event+0x135/0x260 [ 108.863936][ T4420] do_user_addr_fault+0x497/0xb20 [ 108.869010][ T4420] ? trace_hardirqs_off_finish+0x86/0x180 [ 108.874762][ T4420] exc_page_fault+0x60/0x100 [ 108.879379][ T4420] asm_exc_page_fault+0x22/0x30 [ 108.884348][ T4420] RIP: 0010:copy_user_short_string+0xd/0x40 [ 108.890272][ T4420] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 108.909903][ T4420] RSP: 0018:ffffc90003387b48 EFLAGS: 00050202 [ 108.915998][ T4420] RAX: ffffffff84160301 RBX: 0000000000000012 RCX: 0000000000000002 [ 108.923988][ T4420] RDX: 0000000000000002 RSI: ffff888078123214 RDI: 0000200000002200 [ 108.931990][ T4420] RBP: 0000000000000000 R08: 206e656c5f726468 R09: 1ffff1100f024644 [ 108.939981][ T4420] R10: dffffc0000000000 R11: ffffed100f024645 R12: 00007fffffffefee [ 108.947994][ T4420] R13: 0000000000000012 R14: 0000200000002200 R15: ffff888078123214 [ 108.955992][ T4420] ? _copy_from_user+0x161/0x170 [ 108.960993][ T4420] _copy_to_user+0xea/0x130 [ 108.965523][ T4420] bpf_verifier_vlog+0x172/0x3a0 [ 108.970495][ T4420] btf_verifier_log+0x1f0/0x2b0 [ 108.975374][ T4420] ? btf_find_kptr+0xad0/0xad0 [ 108.980168][ T4420] ? __might_fault+0xa6/0x120 [ 108.984867][ T4420] btf_parse_hdr+0x545/0x7d0 [ 108.989487][ T4420] btf_new_fd+0x367/0x760 [ 108.993846][ T4420] __sys_bpf+0x612/0x780 [ 108.998211][ T4420] ? bpf_link_show_fdinfo+0x380/0x380 [ 109.003628][ T4420] ? lock_chain_count+0x20/0x20 [ 109.008533][ T4420] __x64_sys_bpf+0x78/0x90 [ 109.012985][ T4420] do_syscall_64+0x4c/0xa0 [ 109.017434][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 109.022149][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 109.026861][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.032789][ T4420] RIP: 0033:0x7fdbd3d9e159 [ 109.037226][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.056881][ T4420] RSP: 002b:00007ffc1c8c65b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.065328][ T4420] RAX: ffffffffffffffda RBX: 00007fdbd4025fa0 RCX: 00007fdbd3d9e159 [ 109.073436][ T4420] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 109.081448][ T4420] RBP: 00007fdbd3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 109.089447][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.097439][ T4420] R13: 00007fdbd4025fac R14: 00007fdbd4025fa0 R15: 00007fdbd4025fa0 [ 109.105459][ T4420] [ 109.108506][ T4420] [ 109.110848][ T4420] Allocated by task 4420: [ 109.115189][ T4420] kasan_set_track+0x4b/0x70 [ 109.119809][ T4420] __kasan_kmalloc+0x8e/0xa0 [ 109.124428][ T4420] __kmalloc_node+0xb2/0x240 [ 109.129050][ T4420] bpf_map_area_alloc+0x47/0xe0 [ 109.133929][ T4420] prealloc_elems_and_freelist+0x86/0x1c0 [ 109.139679][ T4420] stack_map_alloc+0x386/0x510 [ 109.144463][ T4420] map_create+0x524/0xff0 [ 109.148815][ T4420] __sys_bpf+0x38b/0x780 [ 109.153085][ T4420] __x64_sys_bpf+0x78/0x90 [ 109.157539][ T4420] do_syscall_64+0x4c/0xa0 [ 109.161985][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.167992][ T4420] [ 109.170338][ T4420] The buggy address belongs to the object at ffff888079e25800 [ 109.170338][ T4420] which belongs to the cache kmalloc-cg-1k of size 1024 [ 109.184762][ T4420] The buggy address is located 816 bytes inside of [ 109.184762][ T4420] 1024-byte region [ffff888079e25800, ffff888079e25c00) [ 109.198152][ T4420] [ 109.200493][ T4420] The buggy address belongs to the physical page: [ 109.207030][ T4420] page:ffffea0001e78800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79e20 [ 109.217209][ T4420] head:ffffea0001e78800 order:3 compound_mapcount:0 compound_pincount:0 [ 109.225554][ T4420] memcg:ffff888026ecde01 [ 109.229809][ T4420] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 109.237901][ T4420] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff88801744c000 [ 109.246510][ T4420] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888026ecde01 [ 109.255105][ T4420] page dumped because: kasan: bad access detected [ 109.261542][ T4420] page_owner tracks the page as allocated [ 109.267274][ T4420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3933, tgid 3933 (dhcpcd), ts 68061147371, free_ts 68060379652 [ 109.288142][ T4420] post_alloc_hook+0x173/0x1a0 [ 109.292939][ T4420] get_page_from_freelist+0x206b/0x2180 [ 109.298519][ T4420] __alloc_pages+0x1ec/0x4f0 [ 109.303164][ T4420] alloc_slab_page+0x5d/0x180 [ 109.307876][ T4420] new_slab+0x87/0x2d0 [ 109.311966][ T4420] ___slab_alloc+0xbc5/0x1240 [ 109.316661][ T4420] __kmem_cache_alloc_node+0x126/0x270 [ 109.322146][ T4420] __kmalloc_node_track_caller+0xa0/0x240 [ 109.327899][ T4420] __alloc_skb+0x226/0x7d0 [ 109.332349][ T4420] alloc_skb_with_frags+0xa7/0x710 [ 109.337486][ T4420] sock_alloc_send_pskb+0x87f/0x9a0 [ 109.342716][ T4420] unix_dgram_sendmsg+0x5c1/0x16f0 [ 109.347858][ T4420] sock_write_iter+0x2d5/0x3e0 [ 109.352735][ T4420] do_iter_write+0x638/0xb10 [ 109.357363][ T4420] do_writev+0x27b/0x480 [ 109.361625][ T4420] do_syscall_64+0x4c/0xa0 [ 109.366068][ T4420] page last free stack trace: [ 109.370754][ T4420] free_unref_page_prepare+0x8e5/0x9e0 [ 109.376238][ T4420] free_unref_page+0x2e/0x3f0 [ 109.380942][ T4420] free_large_kmalloc+0xfd/0x1a0 [ 109.385921][ T4420] skb_release_data+0x5e9/0x7e0 [ 109.390804][ T4420] consume_skb+0xa2/0x100 [ 109.395172][ T4420] netlink_recvmsg+0x5e3/0xe00 [ 109.399952][ T4420] ____sys_recvmsg+0x2c8/0x5b0 [ 109.404740][ T4420] ___sys_recvmsg+0x210/0x590 [ 109.409439][ T4420] __x64_sys_recvmsg+0x20d/0x2e0 [ 109.414393][ T4420] do_syscall_64+0x4c/0xa0 [ 109.418841][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.424764][ T4420] [ 109.427112][ T4420] Memory state around the buggy address: [ 109.432753][ T4420] ffff888079e25a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.440851][ T4420] ffff888079e25a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.448957][ T4420] >ffff888079e25b00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 109.457037][ T4420] ^ [ 109.462680][ T4420] ffff888079e25b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.470757][ T4420] ffff888079e25c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.478832][ T4420] ================================================================== [ 109.486929][ T4420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.494137][ T4420] CPU: 1 PID: 4420 Comm: syz.0.17 Not tainted syzkaller #0 [ 109.501363][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.511436][ T4420] Call Trace: [ 109.514757][ T4420] [ 109.517732][ T4420] dump_stack_lvl+0x188/0x24e [ 109.522465][ T4420] ? memcpy+0x3c/0x60 [ 109.526471][ T4420] ? show_regs_print_info+0x12/0x12 [ 109.531719][ T4420] ? load_image+0x410/0x410 [ 109.536255][ T4420] panic+0x2d3/0x710 [ 109.540223][ T4420] ? __lock_acquire+0x7c40/0x7c40 [ 109.545274][ T4420] ? bpf_jit_dump+0xd0/0xd0 [ 109.549803][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.555754][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 109.560630][ T4420] check_panic_on_warn+0x80/0xa0 [ 109.565597][ T4420] ? stack_map_get_build_id_offset+0x99e/0x9d0 [ 109.571776][ T4420] end_report+0x66/0x110 [ 109.576054][ T4420] kasan_report+0x118/0x140 [ 109.580584][ T4420] ? stack_map_get_build_id_offset+0x99e/0x9d0 [ 109.586768][ T4420] stack_map_get_build_id_offset+0x99e/0x9d0 [ 109.592776][ T4420] ? pcpu_freelist_pop+0x126/0x180 [ 109.597917][ T4420] ? __pcpu_freelist_pop+0x850/0x850 [ 109.603252][ T4420] ? __bpf_get_stackid+0x920/0x920 [ 109.608397][ T4420] __bpf_get_stackid+0x55d/0x920 [ 109.613359][ T4420] bpf_get_stackid_pe+0x33f/0x400 [ 109.618413][ T4420] bpf_prog_2414a5d5030ea31b+0x21/0x25 [ 109.623893][ T4420] bpf_overflow_handler+0x50b/0x790 [ 109.629138][ T4420] ? bpf_overflow_handler+0xd9/0x790 [ 109.634443][ T4420] ? perf_swevent_overflow+0x230/0x230 [ 109.639929][ T4420] ? __lock_acquire+0x138a/0x7c40 [ 109.645032][ T4420] ? __perf_event_account_interrupt+0x187/0x280 [ 109.651305][ T4420] __perf_event_overflow+0x457/0x630 [ 109.656627][ T4420] ? perf_swevent_event+0x1d5/0x570 [ 109.661858][ T4420] perf_swevent_event+0x315/0x570 [ 109.666926][ T4420] ? perf_tp_event+0xc10/0xc10 [ 109.671726][ T4420] ___perf_sw_event+0x498/0x6d0 [ 109.676611][ T4420] ? ___perf_sw_event+0x184/0x6d0 [ 109.681672][ T4420] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 109.688126][ T4420] ? __lock_acquire+0x1465/0x7c40 [ 109.693190][ T4420] ? verify_lock_unused+0x140/0x140 [ 109.698427][ T4420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.704439][ T4420] ? lock_chain_count+0x20/0x20 [ 109.709321][ T4420] __perf_sw_event+0x135/0x260 [ 109.714113][ T4420] do_user_addr_fault+0x497/0xb20 [ 109.719169][ T4420] ? trace_hardirqs_off_finish+0x86/0x180 [ 109.724919][ T4420] exc_page_fault+0x60/0x100 [ 109.729534][ T4420] asm_exc_page_fault+0x22/0x30 [ 109.734409][ T4420] RIP: 0010:copy_user_short_string+0xd/0x40 [ 109.740330][ T4420] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 109.759958][ T4420] RSP: 0018:ffffc90003387b48 EFLAGS: 00050202 [ 109.766044][ T4420] RAX: ffffffff84160301 RBX: 0000000000000012 RCX: 0000000000000002 [ 109.774034][ T4420] RDX: 0000000000000002 RSI: ffff888078123214 RDI: 0000200000002200 [ 109.782030][ T4420] RBP: 0000000000000000 R08: 206e656c5f726468 R09: 1ffff1100f024644 [ 109.790107][ T4420] R10: dffffc0000000000 R11: ffffed100f024645 R12: 00007fffffffefee [ 109.798100][ T4420] R13: 0000000000000012 R14: 0000200000002200 R15: ffff888078123214 [ 109.806100][ T4420] ? _copy_from_user+0x161/0x170 [ 109.811073][ T4420] _copy_to_user+0xea/0x130 [ 109.815602][ T4420] bpf_verifier_vlog+0x172/0x3a0 [ 109.820575][ T4420] btf_verifier_log+0x1f0/0x2b0 [ 109.825462][ T4420] ? btf_find_kptr+0xad0/0xad0 [ 109.830254][ T4420] ? __might_fault+0xa6/0x120 [ 109.834956][ T4420] btf_parse_hdr+0x545/0x7d0 [ 109.839575][ T4420] btf_new_fd+0x367/0x760 [ 109.843932][ T4420] __sys_bpf+0x612/0x780 [ 109.848199][ T4420] ? bpf_link_show_fdinfo+0x380/0x380 [ 109.853608][ T4420] ? lock_chain_count+0x20/0x20 [ 109.858494][ T4420] __x64_sys_bpf+0x78/0x90 [ 109.862939][ T4420] do_syscall_64+0x4c/0xa0 [ 109.867383][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 109.872090][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 109.876797][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.882718][ T4420] RIP: 0033:0x7fdbd3d9e159 [ 109.887154][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.906796][ T4420] RSP: 002b:00007ffc1c8c65b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.915302][ T4420] RAX: ffffffffffffffda RBX: 00007fdbd4025fa0 RCX: 00007fdbd3d9e159 [ 109.923307][ T4420] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 109.931306][ T4420] RBP: 00007fdbd3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 109.939304][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.947295][ T4420] R13: 00007fdbd4025fac R14: 00007fdbd4025fa0 R15: 00007fdbd4025fa0 [ 109.955303][ T4420] [ 109.958489][ T4420] Kernel Offset: disabled [ 109.962883][ T4420] Rebooting in 86400 seconds..