Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts.
2026/06/03 17:40:04 parsed 1 programs
syzkaller login: [ 78.733454][ T5781] cgroup: Unknown subsys name 'net'
[ 78.846704][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 80.283676][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.782113][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.790264][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.798255][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.807461][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.816178][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.824347][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.421953][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.430395][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.456675][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.464660][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.174128][ T5867] chnl_net:caif_netlink_parms(): no params data found
[ 85.258640][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.266455][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.273706][ T5867] bridge_slave_0: entered allmulticast mode
[ 85.280694][ T5867] bridge_slave_0: entered promiscuous mode
[ 85.289441][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.296727][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.304048][ T5867] bridge_slave_1: entered allmulticast mode
[ 85.313271][ T5867] bridge_slave_1: entered promiscuous mode
[ 85.365747][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.378097][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.402924][ T5867] team0: Port device team_slave_0 added
[ 85.410277][ T5867] team0: Port device team_slave_1 added
[ 85.429429][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.436871][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.463937][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.490784][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.497779][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.523730][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.573146][ T5867] hsr_slave_0: entered promiscuous mode
[ 85.579394][ T5867] hsr_slave_1: entered promiscuous mode
[ 85.735199][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.747681][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.757813][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.767019][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.859801][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.879874][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.899023][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.906369][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.922128][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.929361][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.107319][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.148725][ T5867] veth0_vlan: entered promiscuous mode
[ 86.160029][ T5867] veth1_vlan: entered promiscuous mode
[ 86.195566][ T5867] veth0_macvtap: entered promiscuous mode
[ 86.213549][ T5867] veth1_macvtap: entered promiscuous mode
[ 86.238941][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.258577][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.271827][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.281865][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.290745][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.299533][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.523499][ T4452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/03 17:40:14 executed programs: 0
[ 86.811870][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.820130][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.828196][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.838453][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.846620][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.854866][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.963109][ T8] cfg80211: failed to load regulatory.db
[ 86.985343][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 87.037735][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.045895][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.053393][ T5886] bridge_slave_0: entered allmulticast mode
[ 87.060101][ T5886] bridge_slave_0: entered promiscuous mode
[ 87.069316][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.076946][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.084337][ T5886] bridge_slave_1: entered allmulticast mode
[ 87.091690][ T5886] bridge_slave_1: entered promiscuous mode
[ 87.117763][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.129766][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.159357][ T5886] team0: Port device team_slave_0 added
[ 87.167966][ T5886] team0: Port device team_slave_1 added
[ 87.188736][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.195941][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.223834][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.236713][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.243961][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.270174][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.312459][ T5886] hsr_slave_0: entered promiscuous mode
[ 87.318943][ T5886] hsr_slave_1: entered promiscuous mode
[ 87.325323][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 87.333271][ T5886] Cannot create hsr debugfs directory
[ 88.881758][ T5085] Bluetooth: hci0: command tx timeout
[ 89.352852][ T4452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.960626][ T5085] Bluetooth: hci0: command tx timeout
[ 91.630033][ T4452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.713504][ T4452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.558886][ T4452] hsr_slave_0: left promiscuous mode
[ 92.565975][ T4452] hsr_slave_1: left promiscuous mode
[ 92.572468][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 92.579885][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 92.588656][ T4452] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 92.596149][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 92.604366][ T4452] bridge_slave_1: left allmulticast mode
[ 92.610009][ T4452] bridge_slave_1: left promiscuous mode
[ 92.616776][ T4452] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.627287][ T4452] bridge_slave_0: left allmulticast mode
[ 92.634574][ T4452] bridge_slave_0: left promiscuous mode
[ 92.640259][ T4452] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.660212][ T4452] veth1_macvtap: left promiscuous mode
[ 92.666909][ T4452] veth0_macvtap: left promiscuous mode
[ 92.673182][ T4452] veth1_vlan: left promiscuous mode
[ 92.678632][ T4452] veth0_vlan: left promiscuous mode
[ 93.052463][ T5085] Bluetooth: hci0: command tx timeout
[ 93.062244][ T4452] team0 (unregistering): Port device team_slave_1 removed
[ 93.092244][ T4452] team0 (unregistering): Port device team_slave_0 removed
[ 93.121404][ T4452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 93.156872][ T4452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 93.377121][ T4452] bond0 (unregistering): Released all slaves
[ 93.460519][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.470196][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.481144][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.495769][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.585717][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.609607][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.624581][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.631839][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.645365][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.652556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.821176][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.869236][ T5886] veth0_vlan: entered promiscuous mode
[ 93.879807][ T5886] veth1_vlan: entered promiscuous mode
[ 93.905552][ T5886] veth0_macvtap: entered promiscuous mode
[ 93.918111][ T5886] veth1_macvtap: entered promiscuous mode
[ 93.935515][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.949508][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.963839][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.974630][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.983799][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.992548][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.052489][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.062141][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.089182][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/06/03 17:40:21 executed programs: 2
[ 94.097276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.158480][ T5929] ==================================================================
[ 94.166594][ T5929] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[ 94.174413][ T5929] Write of size 32 at addr ffff88807cac6260 by task syz.0.17/5929
[ 94.182221][ T5929]
[ 94.184549][ T5929] CPU: 0 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 94.191724][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 94.201801][ T5929] Call Trace:
[ 94.205093][ T5929]
[ 94.208025][ T5929] dump_stack_lvl+0x18c/0x250
[ 94.212715][ T5929] ? read_lock_is_recursive+0x20/0x20
[ 94.218099][ T5929] ? show_regs_print_info+0x20/0x20
[ 94.223320][ T5929] ? load_image+0x420/0x420
[ 94.227837][ T5929] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 94.233289][ T5929] ? __virt_addr_valid+0x18c/0x540
[ 94.238392][ T5929] ? __virt_addr_valid+0x469/0x540
[ 94.243585][ T5929] print_report+0xa8/0x210
[ 94.247991][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.253091][ T5929] kasan_report+0x117/0x150
[ 94.257624][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.262752][ T5929] kasan_check_range+0x241/0x290
[ 94.267730][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.272849][ T5929] __asan_memcpy+0x40/0x70
[ 94.277262][ T5929] __bpf_get_stackid+0x6bf/0x900
[ 94.282196][ T5929] bpf_get_stackid_pe+0x2f0/0x410
[ 94.287219][ T5929] bpf_prog_ee169d054574282b+0x2c/0x41
[ 94.292683][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 94.297884][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 94.303170][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 94.308446][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 94.314683][ T5929] __perf_event_overflow+0x447/0x630
[ 94.319964][ T5929] perf_swevent_event+0x319/0x570
[ 94.325156][ T5929] ? perf_tp_event+0x1520/0x1520
[ 94.330089][ T5929] ___perf_sw_event+0x4a7/0x730
[ 94.334932][ T5929] ? vma_end_read+0x18/0x170
[ 94.339516][ T5929] ? ___perf_sw_event+0x199/0x730
[ 94.344616][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 94.351033][ T5929] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 94.357038][ T5929] ? lock_chain_count+0x20/0x20
[ 94.361885][ T5929] __perf_sw_event+0x139/0x270
[ 94.366643][ T5929] do_user_addr_fault+0x123e/0x12c0
[ 94.371846][ T5929] ? rcu_is_watching+0x15/0xb0
[ 94.376615][ T5929] exc_page_fault+0x64/0x100
[ 94.381210][ T5929] asm_exc_page_fault+0x26/0x30
[ 94.386054][ T5929] RIP: 0033:0x7ffcd1166a21
[ 94.390462][ T5929] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[ 94.410250][ T5929] RSP: 002b:00007f66ca4f8ff0 EFLAGS: 00010206
[ 94.416315][ T5929] RAX: 00066d41e3adadf0 RBX: 00007ffcd11620b0 RCX: 0000000000000018
[ 94.424282][ T5929] RDX: 00000000070aec9c RSI: 00007f66ca4f90b0 RDI: 7fffffffffffffff
[ 94.432279][ T5929] RBP: 00007f66ca4f9030 R08: 000000000000005e R09: 0000000000745ae6
[ 94.440261][ T5929] R10: 00000034d0d2c724 R11: 000000000000443c R12: 0000000000000010
[ 94.448398][ T5929] R13: 00007f66c9816038 R14: 00007ffcd1162080 R15: 000000000000443c
[ 94.456366][ T5929]
[ 94.459374][ T5929]
[ 94.461685][ T5929] Allocated by task 5929:
[ 94.465994][ T5929] kasan_set_track+0x4e/0x70
[ 94.470585][ T5929] __kasan_kmalloc+0x8f/0xa0
[ 94.475169][ T5929] __kmalloc_node+0xb4/0x230
[ 94.479764][ T5929] bpf_map_area_alloc+0x5e/0x110
[ 94.484736][ T5929] prealloc_elems_and_freelist+0x86/0x1c0
[ 94.490445][ T5929] stack_map_alloc+0x33a/0x4c0
[ 94.495198][ T5929] map_create+0x877/0x12f0
[ 94.499603][ T5929] __sys_bpf+0x651/0x890
[ 94.503833][ T5929] __x64_sys_bpf+0x7c/0x90
[ 94.508237][ T5929] do_syscall_64+0x55/0xb0
[ 94.512729][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.518615][ T5929]
[ 94.520928][ T5929] The buggy address belongs to the object at ffff88807cac6200
[ 94.520928][ T5929] which belongs to the cache kmalloc-cg-128 of size 128
[ 94.535232][ T5929] The buggy address is located 96 bytes inside of
[ 94.535232][ T5929] allocated 120-byte region [ffff88807cac6200, ffff88807cac6278)
[ 94.549277][ T5929]
[ 94.551586][ T5929] The buggy address belongs to the physical page:
[ 94.558001][ T5929] page:ffffea0001f2b180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cac6
[ 94.568149][ T5929] memcg:ffff888024391d01
[ 94.572376][ T5929] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 94.579922][ T5929] page_type: 0xffffffff()
[ 94.584238][ T5929] raw: 00fff00000000800 ffff888017c4dc80 dead000000000122 0000000000000000
[ 94.592822][ T5929] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888024391d01
[ 94.601388][ T5929] page dumped because: kasan: bad access detected
[ 94.607791][ T5929] page_owner tracks the page as allocated
[ 94.613498][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5886, tgid 5886 (syz-executor), ts 94123153870, free_ts 94116508952
[ 94.631723][ T5929] post_alloc_hook+0x1c1/0x200
[ 94.636495][ T5929] get_page_from_freelist+0x1951/0x19e0
[ 94.642038][ T5929] __alloc_pages+0x1f0/0x460
[ 94.646613][ T5929] alloc_slab_page+0x5d/0x160
[ 94.651365][ T5929] new_slab+0x87/0x2d0
[ 94.655423][ T5929] ___slab_alloc+0xc5d/0x12f0
[ 94.660090][ T5929] __kmem_cache_alloc_node+0x19e/0x250
[ 94.665545][ T5929] __kmalloc_node+0xa4/0x230
[ 94.670135][ T5929] kvmalloc_node+0x70/0x180
[ 94.674638][ T5929] nf_hook_entries_grow+0x27d/0x6d0
[ 94.679841][ T5929] __nf_register_net_hook+0x2c9/0x910
[ 94.685206][ T5929] nf_register_net_hook+0xb2/0x190
[ 94.690310][ T5929] nf_register_net_hooks+0x44/0x1b0
[ 94.695502][ T5929] ip6t_register_table+0x543/0x7e0
[ 94.700604][ T5929] ip6table_mangle_table_init+0x41/0x60
[ 94.706145][ T5929] xt_find_table_lock+0x306/0x3e0
[ 94.711164][ T5929] page last free stack trace:
[ 94.715819][ T5929] free_unref_page_prepare+0x7b2/0x8c0
[ 94.721271][ T5929] free_unref_page+0x32/0x2e0
[ 94.725936][ T5929] __unfreeze_partials+0x1cf/0x210
[ 94.731035][ T5929] put_cpu_partial+0x17c/0x250
[ 94.735785][ T5929] __slab_free+0x319/0x400
[ 94.740188][ T5929] qlist_free_all+0x75/0xd0
[ 94.744684][ T5929] kasan_quarantine_reduce+0x143/0x160
[ 94.750138][ T5929] __kasan_slab_alloc+0x22/0x80
[ 94.754977][ T5929] slab_post_alloc_hook+0x6e/0x4b0
[ 94.760105][ T5929] kmem_cache_alloc+0x11a/0x2d0
[ 94.764952][ T5929] getname_flags+0xbb/0x500
[ 94.769452][ T5929] do_sys_openat2+0xda/0x1d0
[ 94.774037][ T5929] __x64_sys_openat+0x139/0x160
[ 94.778875][ T5929] do_syscall_64+0x55/0xb0
[ 94.783282][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.789166][ T5929]
[ 94.791509][ T5929] Memory state around the buggy address:
[ 94.797121][ T5929] ffff88807cac6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[ 94.805168][ T5929] ffff88807cac6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 94.813214][ T5929] >ffff88807cac6200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 94.821260][ T5929] ^
[ 94.829218][ T5929] ffff88807cac6280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 94.837283][ T5929] ffff88807cac6300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 94.845331][ T5929] ==================================================================
[ 94.853387][ T5929] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 94.860564][ T5929] CPU: 0 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 94.867753][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 94.877797][ T5929] Call Trace:
[ 94.881068][ T5929]
[ 94.883992][ T5929] dump_stack_lvl+0x18c/0x250
[ 94.888678][ T5929] ? show_regs_print_info+0x20/0x20
[ 94.893865][ T5929] ? load_image+0x420/0x420
[ 94.898381][ T5929] panic+0x2dc/0x730
[ 94.902297][ T5929] ? __lock_acquire+0x7d40/0x7d40
[ 94.907333][ T5929] ? bpf_jit_dump+0xd0/0xd0
[ 94.911841][ T5929] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 94.917730][ T5929] ? _raw_spin_unlock+0x40/0x40
[ 94.922576][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.927691][ T5929] check_panic_on_warn+0x84/0xa0
[ 94.932713][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.937838][ T5929] end_report+0x6f/0x130
[ 94.942092][ T5929] kasan_report+0x128/0x150
[ 94.946614][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.951734][ T5929] kasan_check_range+0x241/0x290
[ 94.956669][ T5929] ? __bpf_get_stackid+0x6bf/0x900
[ 94.961801][ T5929] __asan_memcpy+0x40/0x70
[ 94.966223][ T5929] __bpf_get_stackid+0x6bf/0x900
[ 94.971176][ T5929] bpf_get_stackid_pe+0x2f0/0x410
[ 94.976232][ T5929] bpf_prog_ee169d054574282b+0x2c/0x41
[ 94.981696][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 94.986902][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 94.992268][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 94.997554][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 95.003884][ T5929] __perf_event_overflow+0x447/0x630
[ 95.009162][ T5929] perf_swevent_event+0x319/0x570
[ 95.014180][ T5929] ? perf_tp_event+0x1520/0x1520
[ 95.019110][ T5929] ___perf_sw_event+0x4a7/0x730
[ 95.023950][ T5929] ? vma_end_read+0x18/0x170
[ 95.028531][ T5929] ? ___perf_sw_event+0x199/0x730
[ 95.033545][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 95.039958][ T5929] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 95.045931][ T5929] ? lock_chain_count+0x20/0x20
[ 95.050778][ T5929] __perf_sw_event+0x139/0x270
[ 95.055530][ T5929] do_user_addr_fault+0x123e/0x12c0
[ 95.060726][ T5929] ? rcu_is_watching+0x15/0xb0
[ 95.065497][ T5929] exc_page_fault+0x64/0x100
[ 95.070088][ T5929] asm_exc_page_fault+0x26/0x30
[ 95.074936][ T5929] RIP: 0033:0x7ffcd1166a21
[ 95.079340][ T5929] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[ 95.098942][ T5929] RSP: 002b:00007f66ca4f8ff0 EFLAGS: 00010206
[ 95.105003][ T5929] RAX: 00066d41e3adadf0 RBX: 00007ffcd11620b0 RCX: 0000000000000018
[ 95.112963][ T5929] RDX: 00000000070aec9c RSI: 00007f66ca4f90b0 RDI: 7fffffffffffffff
[ 95.120923][ T5929] RBP: 00007f66ca4f9030 R08: 000000000000005e R09: 0000000000745ae6
[ 95.128884][ T5929] R10: 00000034d0d2c724 R11: 000000000000443c R12: 0000000000000010
[ 95.136848][ T5929] R13: 00007f66c9816038 R14: 00007ffcd1162080 R15: 000000000000443c
[ 95.145077][ T5929]
[ 95.148321][ T5929] Kernel Offset: disabled
[ 95.152690][ T5929] Rebooting in 86400 seconds..