Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. 2026/01/02 08:34:43 parsed 1 programs [ 80.477928][ T5836] cgroup: Unknown subsys name 'net' [ 80.609153][ T5836] cgroup: Unknown subsys name 'cpuset' [ 80.617824][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.269335][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.813033][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.191890][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.200760][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.244489][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.252602][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.989813][ T48] cfg80211: failed to load regulatory.db [ 88.021386][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 88.103265][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.111461][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.118990][ T5914] bridge_slave_0: entered allmulticast mode [ 88.126836][ T5914] bridge_slave_0: entered promiscuous mode [ 88.136122][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.143397][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.151164][ T5914] bridge_slave_1: entered allmulticast mode [ 88.158209][ T5914] bridge_slave_1: entered promiscuous mode [ 88.217821][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.229725][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.259602][ T5914] team0: Port device team_slave_0 added [ 88.269930][ T5914] team0: Port device team_slave_1 added [ 88.313714][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.321154][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.347365][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.360083][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.367121][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.393125][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.434202][ T5914] hsr_slave_0: entered promiscuous mode [ 88.440985][ T5914] hsr_slave_1: entered promiscuous mode [ 88.583697][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.595999][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.606487][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.617582][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.649434][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.657127][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.665364][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.673470][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.723437][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.742231][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.752378][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.769786][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.784257][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.791666][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.804994][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.812485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.968846][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.012543][ T5914] veth0_vlan: entered promiscuous mode [ 89.023940][ T5914] veth1_vlan: entered promiscuous mode [ 89.051637][ T5914] veth0_macvtap: entered promiscuous mode [ 89.060789][ T5914] veth1_macvtap: entered promiscuous mode [ 89.080027][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.094831][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.111171][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.121090][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132300][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.142619][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.280097][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.286718][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.299591][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.308758][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.317761][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.325491][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.360841][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.433342][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.543142][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/02 08:34:55 executed programs: 0 [ 89.919634][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.928660][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.938829][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.948012][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.955579][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.104076][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 90.172626][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.179862][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.187704][ T5946] bridge_slave_0: entered allmulticast mode [ 90.195341][ T5946] bridge_slave_0: entered promiscuous mode [ 90.209245][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.216893][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.224033][ T5946] bridge_slave_1: entered allmulticast mode [ 90.231395][ T5946] bridge_slave_1: entered promiscuous mode [ 90.260740][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.272873][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.308281][ T5946] team0: Port device team_slave_0 added [ 90.316903][ T5946] team0: Port device team_slave_1 added [ 90.342847][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.351212][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.377605][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.390586][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.397967][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.424391][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.468861][ T5946] hsr_slave_0: entered promiscuous mode [ 90.475277][ T5946] hsr_slave_1: entered promiscuous mode [ 90.481560][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 90.487414][ T5946] Cannot create hsr debugfs directory [ 92.027096][ T52] Bluetooth: hci0: command tx timeout [ 92.339084][ T1102] bridge_slave_1: left allmulticast mode [ 92.345268][ T1102] bridge_slave_1: left promiscuous mode [ 92.353573][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.367018][ T1102] bridge_slave_0: left allmulticast mode [ 92.372704][ T1102] bridge_slave_0: left promiscuous mode [ 92.380159][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.680514][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.691664][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.702025][ T1102] bond0 (unregistering): Released all slaves [ 92.853389][ T1102] hsr_slave_0: left promiscuous mode [ 92.862066][ T1102] hsr_slave_1: left promiscuous mode [ 92.872588][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.881334][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.910284][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.923596][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.971433][ T1102] veth1_macvtap: left promiscuous mode [ 92.987347][ T1102] veth0_macvtap: left promiscuous mode [ 92.994242][ T1102] veth1_vlan: left promiscuous mode [ 93.020631][ T1102] veth0_vlan: left promiscuous mode [ 93.474190][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 93.501942][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 93.971927][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.994915][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.010441][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.023891][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.107615][ T52] Bluetooth: hci0: command tx timeout [ 94.285093][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.323156][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.335171][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.342672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.360853][ T3934] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.368003][ T3934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.534758][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.576555][ T5946] veth0_vlan: entered promiscuous mode [ 94.587555][ T5946] veth1_vlan: entered promiscuous mode [ 94.615171][ T5946] veth0_macvtap: entered promiscuous mode [ 94.624682][ T5946] veth1_macvtap: entered promiscuous mode [ 94.644041][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.659502][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.672814][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.683010][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.693536][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.706976][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.763571][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.773069][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.800127][ T3934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.809484][ T3934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/02 08:35:00 executed programs: 3 [ 95.055892][ C0] ================================================================== [ 95.064358][ C0] BUG: KASAN: slab-out-of-bounds in strnchr+0x5e/0x80 [ 95.071575][ C0] Read of size 1 at addr ffff88802873b3b0 by task swapper/0/0 [ 95.079382][ C0] [ 95.081731][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 95.081749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.081764][ C0] Call Trace: [ 95.081773][ C0] [ 95.081781][ C0] dump_stack_lvl+0x189/0x250 [ 95.081804][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.081826][ C0] ? rcu_is_watching+0x15/0xb0 [ 95.081845][ C0] ? __kasan_check_byte+0x12/0x40 [ 95.081864][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.081881][ C0] ? rcu_is_watching+0x15/0xb0 [ 95.081900][ C0] ? lock_release+0x4b/0x3b0 [ 95.081916][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.081935][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 95.081956][ C0] print_report+0xca/0x240 [ 95.081976][ C0] ? strnchr+0x5e/0x80 [ 95.081994][ C0] kasan_report+0x118/0x150 [ 95.082013][ C0] ? strnchr+0x5e/0x80 [ 95.082033][ C0] strnchr+0x5e/0x80 [ 95.082051][ C0] bpf_bprintf_prepare+0x167/0x13d0 [ 95.082075][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 95.082099][ C0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 95.082122][ C0] ? bpf_snprintf+0x47/0x1b0 [ 95.082144][ C0] bpf_snprintf+0xd3/0x1b0 [ 95.082167][ C0] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 95.082185][ C0] bpf_trace_run1+0x27f/0x4c0 [ 95.082205][ C0] ? bpf_trace_run1+0x181/0x4c0 [ 95.082226][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 95.082247][ C0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 95.082268][ C0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 95.082287][ C0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 95.082309][ C0] ? trace_rcu_utilization+0xf4/0x1c0 [ 95.082329][ C0] trace_rcu_utilization+0x191/0x1c0 [ 95.082349][ C0] rcu_core+0x130/0x1870 [ 95.082370][ C0] ? sched_balance_update_blocked_averages+0x1444/0x1590 [ 95.082386][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 95.082403][ C0] ? __pfx_rcu_core+0x10/0x10 [ 95.082425][ C0] ? sched_balance_domains+0x142/0x960 [ 95.082441][ C0] ? sched_balance_domains+0x837/0x960 [ 95.082457][ C0] ? sched_balance_domains+0x142/0x960 [ 95.082474][ C0] handle_softirqs+0x27d/0x850 [ 95.082491][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 95.082509][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 95.082526][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 95.082547][ C0] __irq_exit_rcu+0xca/0x1f0 [ 95.082563][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 95.082581][ C0] irq_exit_rcu+0x9/0x30 [ 95.082595][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 95.082612][ C0] [ 95.082618][ C0] [ 95.082623][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 95.082641][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 95.082659][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 50 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 95.082672][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 95.082687][ C0] RAX: f552fd969d6f2500 RBX: ffffffff81978fba RCX: f552fd969d6f2500 [ 95.082699][ C0] RDX: 0000000000000001 RSI: ffffffff8d792d97 RDI: ffffffff8bc086e0 [ 95.082710][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 95.082721][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822370 [ 95.082733][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 95.082744][ C0] ? do_idle+0x1ea/0x520 [ 95.082763][ C0] default_idle+0x13/0x20 [ 95.082782][ C0] default_idle_call+0x73/0xb0 [ 95.082801][ C0] do_idle+0x1ea/0x520 [ 95.082817][ C0] ? irqentry_exit+0x5ba/0x660 [ 95.082835][ C0] ? __pfx_do_idle+0x10/0x10 [ 95.082856][ C0] cpu_startup_entry+0x44/0x60 [ 95.082873][ C0] rest_init+0x2de/0x300 [ 95.082894][ C0] start_kernel+0x3a7/0x400 [ 95.082912][ C0] x86_64_start_reservations+0x24/0x30 [ 95.082935][ C0] x86_64_start_kernel+0x143/0x1c0 [ 95.082956][ C0] common_startup_64+0x13e/0x147 [ 95.083088][ C0] [ 95.083097][ C0] [ 95.478138][ C0] Allocated by task 6003: [ 95.482453][ C0] kasan_save_track+0x3e/0x80 [ 95.487307][ C0] __kasan_kmalloc+0x93/0xb0 [ 95.491933][ C0] __kmalloc_node_noprof+0x57a/0x820 [ 95.497227][ C0] bpf_map_area_alloc+0x64/0x180 [ 95.502519][ C0] insn_array_alloc+0x52/0x140 [ 95.507456][ C0] map_create+0xafd/0x16a0 [ 95.511914][ C0] __sys_bpf+0x682/0x8a0 [ 95.516151][ C0] __x64_sys_bpf+0x7c/0x90 [ 95.520634][ C0] do_syscall_64+0xfa/0xf80 [ 95.525145][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.531025][ C0] [ 95.533366][ C0] The buggy address belongs to the object at ffff88802873b000 [ 95.533366][ C0] which belongs to the cache kmalloc-cg-1k of size 1024 [ 95.547754][ C0] The buggy address is located 0 bytes to the right of [ 95.547754][ C0] allocated 944-byte region [ffff88802873b000, ffff88802873b3b0) [ 95.562418][ C0] [ 95.564734][ C0] The buggy address belongs to the physical page: [ 95.571316][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28738 [ 95.580236][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 95.588731][ C0] memcg:ffff8880761bbc01 [ 95.592998][ C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 95.600978][ C0] page_type: f5(slab) [ 95.605034][ C0] raw: 00fff00000000040 ffff88813ffb0280 ffffea0000a76e00 dead000000000003 [ 95.613606][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff8880761bbc01 [ 95.622196][ C0] head: 00fff00000000040 ffff88813ffb0280 ffffea0000a76e00 dead000000000003 [ 95.631049][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 ffff8880761bbc01 [ 95.639710][ C0] head: 00fff00000000003 ffffea0000a1ce01 00000000ffffffff 00000000ffffffff [ 95.648457][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 95.657122][ C0] page dumped because: kasan: bad access detected [ 95.663697][ C0] page_owner tracks the page as allocated [ 95.669394][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5496, tgid 5496 (dhcpcd), ts 57027219415, free_ts 56926940909 [ 95.690425][ C0] post_alloc_hook+0x234/0x290 [ 95.695192][ C0] get_page_from_freelist+0x2365/0x2440 [ 95.701518][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 95.707327][ C0] alloc_pages_mpol+0x232/0x4a0 [ 95.712170][ C0] allocate_slab+0x86/0x3b0 [ 95.716698][ C0] ___slab_alloc+0xf2b/0x1960 [ 95.721737][ C0] __slab_alloc+0x65/0x100 [ 95.726259][ C0] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 95.732683][ C0] kmalloc_reserve+0x136/0x290 [ 95.737453][ C0] __alloc_skb+0x27e/0x430 [ 95.741866][ C0] alloc_skb_with_frags+0xca/0x890 [ 95.747068][ C0] sock_alloc_send_pskb+0x84d/0x980 [ 95.752372][ C0] unix_dgram_sendmsg+0x454/0x1840 [ 95.757575][ C0] __sock_sendmsg+0x21c/0x270 [ 95.762264][ C0] sock_write_iter+0x279/0x360 [ 95.767039][ C0] do_iter_readv_writev+0x623/0x8c0 [ 95.772292][ C0] page last free pid 5662 tgid 5662 stack trace: [ 95.778625][ C0] __free_frozen_pages+0xbc8/0xd30 [ 95.783951][ C0] __put_partials+0x146/0x170 [ 95.788886][ C0] put_cpu_partial+0x1f2/0x2d0 [ 95.793679][ C0] __slab_free+0x288/0x2a0 [ 95.798389][ C0] qlist_free_all+0x97/0x100 [ 95.803252][ C0] kasan_quarantine_reduce+0x148/0x160 [ 95.808988][ C0] __kasan_slab_alloc+0x22/0x80 [ 95.814287][ C0] kmem_cache_alloc_noprof+0x37d/0x710 [ 95.819788][ C0] proc_reg_open+0x1f4/0x540 [ 95.824419][ C0] do_dentry_open+0x7ce/0x1420 [ 95.829458][ C0] vfs_open+0x3b/0x340 [ 95.833528][ C0] path_openat+0x340e/0x3dd0 [ 95.838294][ C0] do_filp_open+0x1fa/0x410 [ 95.842804][ C0] do_sys_openat2+0x121/0x200 [ 95.847481][ C0] __x64_sys_openat+0x138/0x170 [ 95.852332][ C0] do_syscall_64+0xfa/0xf80 [ 95.856838][ C0] [ 95.859151][ C0] Memory state around the buggy address: [ 95.864762][ C0] ffff88802873b280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.872835][ C0] ffff88802873b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.880940][ C0] >ffff88802873b380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 95.888987][ C0] ^ [ 95.894611][ C0] ffff88802873b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.902666][ C0] ffff88802873b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.910712][ C0] ================================================================== [ 95.918957][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 95.926155][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 95.935083][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.945224][ C0] Call Trace: [ 95.948499][ C0] [ 95.951335][ C0] dump_stack_lvl+0x99/0x250 [ 95.956187][ C0] ? __asan_memcpy+0x40/0x70 [ 95.961041][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.966327][ C0] ? __pfx__printk+0x10/0x10 [ 95.970926][ C0] vpanic+0x237/0x6d0 [ 95.974908][ C0] ? __pfx_vpanic+0x10/0x10 [ 95.979573][ C0] ? irqentry_exit+0x5ba/0x660 [ 95.984328][ C0] ? asm_common_interrupt+0x26/0x40 [ 95.989528][ C0] panic+0xb9/0xc0 [ 95.993347][ C0] ? __pfx_panic+0x10/0x10 [ 95.997768][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 96.003676][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.010002][ C0] ? strnchr+0x5e/0x80 [ 96.014076][ C0] check_panic_on_warn+0x89/0xb0 [ 96.019013][ C0] ? strnchr+0x5e/0x80 [ 96.023176][ C0] end_report+0x6f/0x140 [ 96.027514][ C0] kasan_report+0x129/0x150 [ 96.032013][ C0] ? strnchr+0x5e/0x80 [ 96.036092][ C0] strnchr+0x5e/0x80 [ 96.039981][ C0] bpf_bprintf_prepare+0x167/0x13d0 [ 96.045178][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 96.050463][ C0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 96.056104][ C0] ? bpf_snprintf+0x47/0x1b0 [ 96.060782][ C0] bpf_snprintf+0xd3/0x1b0 [ 96.065201][ C0] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 96.070697][ C0] bpf_trace_run1+0x27f/0x4c0 [ 96.075372][ C0] ? bpf_trace_run1+0x181/0x4c0 [ 96.080220][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 96.085418][ C0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 96.091404][ C0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 96.097034][ C0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 96.103373][ C0] ? trace_rcu_utilization+0xf4/0x1c0 [ 96.108973][ C0] trace_rcu_utilization+0x191/0x1c0 [ 96.114647][ C0] rcu_core+0x130/0x1870 [ 96.118997][ C0] ? sched_balance_update_blocked_averages+0x1444/0x1590 [ 96.126641][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 96.131856][ C0] ? __pfx_rcu_core+0x10/0x10 [ 96.136636][ C0] ? sched_balance_domains+0x142/0x960 [ 96.142150][ C0] ? sched_balance_domains+0x837/0x960 [ 96.147617][ C0] ? sched_balance_domains+0x142/0x960 [ 96.153074][ C0] handle_softirqs+0x27d/0x850 [ 96.157936][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 96.162692][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.167970][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 96.173173][ C0] __irq_exit_rcu+0xca/0x1f0 [ 96.177761][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 96.182980][ C0] irq_exit_rcu+0x9/0x30 [ 96.187222][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 96.193031][ C0] [ 96.195968][ C0] [ 96.198891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.205349][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 96.211086][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 50 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 96.231042][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 96.237317][ C0] RAX: f552fd969d6f2500 RBX: ffffffff81978fba RCX: f552fd969d6f2500 [ 96.245386][ C0] RDX: 0000000000000001 RSI: ffffffff8d792d97 RDI: ffffffff8bc086e0 [ 96.253434][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 96.261406][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822370 [ 96.269373][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 96.277341][ C0] ? do_idle+0x1ea/0x520 [ 96.281592][ C0] default_idle+0x13/0x20 [ 96.285926][ C0] default_idle_call+0x73/0xb0 [ 96.290859][ C0] do_idle+0x1ea/0x520 [ 96.294925][ C0] ? irqentry_exit+0x5ba/0x660 [ 96.299687][ C0] ? __pfx_do_idle+0x10/0x10 [ 96.304371][ C0] cpu_startup_entry+0x44/0x60 [ 96.309129][ C0] rest_init+0x2de/0x300 [ 96.313374][ C0] start_kernel+0x3a7/0x400 [ 96.317906][ C0] x86_64_start_reservations+0x24/0x30 [ 96.323454][ C0] x86_64_start_kernel+0x143/0x1c0 [ 96.328567][ C0] common_startup_64+0x13e/0x147 [ 96.333513][ C0] [ 96.337109][ C0] Kernel Offset: disabled [ 96.341429][ C0] Rebooting in 86400 seconds..