Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts.
2026/06/20 01:54:16 parsed 1 programs
2026/06/20 01:54:16 serving rpc on tcp://43009
[ 62.755360][ T5629] cgroup: Unknown subsys name 'net'
[ 62.881477][ T5629] cgroup: Unknown subsys name 'cpuset'
[ 62.888949][ T5629] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 64.164694][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 66.509342][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 66.633530][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.642053][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.659025][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.666923][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.386306][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.394464][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.402081][ T5664] bridge_slave_0: entered allmulticast mode
[ 67.409417][ T5664] bridge_slave_0: entered promiscuous mode
[ 67.416906][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.424151][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.431339][ T5664] bridge_slave_1: entered allmulticast mode
[ 67.437779][ T5664] bridge_slave_1: entered promiscuous mode
[ 67.454442][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 67.465451][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 67.484144][ T5664] team0: Port device team_slave_0 added
[ 67.491030][ T5664] team0: Port device team_slave_1 added
[ 67.505380][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 67.512532][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 67.538769][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 67.550629][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 67.557681][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 67.583737][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 67.608702][ T5664] hsr_slave_0: entered promiscuous mode
[ 67.614941][ T5664] hsr_slave_1: entered promiscuous mode
[ 67.679245][ T5664] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 67.687849][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 67.695768][ T5664] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 67.704593][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 67.714260][ T5664] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 67.722562][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 67.730327][ T5664] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 67.738595][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 67.778786][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.792995][ T5664] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.803698][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.810853][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.822435][ T64] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.829571][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 68.028053][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.054524][ T5664] veth0_vlan: entered promiscuous mode
[ 68.067349][ T5664] veth1_vlan: entered promiscuous mode
[ 68.085814][ T5664] veth0_macvtap: entered promiscuous mode
[ 68.094408][ T5664] veth1_macvtap: entered promiscuous mode
[ 68.107479][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 68.120447][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 68.132035][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.141141][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.150791][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.159922][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.239046][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.284251][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.334677][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 68.360944][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 68.368240][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 68.376452][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 68.384696][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 68.392302][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.392882][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/20 01:54:26 executed programs: 0
[ 69.694822][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 69.702197][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 69.711759][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 69.721150][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 69.728648][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.992682][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.000037][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.007165][ T5754] bridge_slave_0: entered allmulticast mode
[ 70.014070][ T5754] bridge_slave_0: entered promiscuous mode
[ 70.021400][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.028577][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.036191][ T5754] bridge_slave_1: entered allmulticast mode
[ 70.043304][ T5754] bridge_slave_1: entered promiscuous mode
[ 70.060184][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.070967][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.090955][ T5754] team0: Port device team_slave_0 added
[ 70.097801][ T5754] team0: Port device team_slave_1 added
[ 70.112906][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.120182][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.146539][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.158474][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.165667][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.191968][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.218816][ T5754] hsr_slave_0: entered promiscuous mode
[ 70.225128][ T5754] hsr_slave_1: entered promiscuous mode
[ 70.231393][ T5754] debugfs: 'hsr0' already exists in 'hsr'
[ 70.237152][ T5754] Cannot create hsr debugfs directory
[ 70.812001][ T48] bridge_slave_1: left allmulticast mode
[ 70.817708][ T48] bridge_slave_1: left promiscuous mode
[ 70.823470][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.831810][ T48] bridge_slave_0: left allmulticast mode
[ 70.837477][ T48] bridge_slave_0: left promiscuous mode
[ 70.843442][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.890105][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 70.900668][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 70.912980][ T48] bond0 (unregistering): Released all slaves
[ 71.036968][ T48] hsr_slave_0: left promiscuous mode
[ 71.044570][ T48] hsr_slave_1: left promiscuous mode
[ 71.052917][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 71.060678][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 71.068529][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 71.077356][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 71.088644][ T48] veth1_macvtap: left promiscuous mode
[ 71.094761][ T48] veth0_macvtap: left promiscuous mode
[ 71.101327][ T48] veth1_vlan: left promiscuous mode
[ 71.106634][ T48] veth0_vlan: left promiscuous mode
[ 71.230925][ T48] team0 (unregistering): Port device team_slave_1 removed
[ 71.241897][ T48] team0 (unregistering): Port device team_slave_0 removed
[ 71.290467][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[ 71.552717][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.559111][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.561403][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.578782][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 71.589019][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.602463][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 71.611073][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.619285][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 71.627042][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.635979][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 71.698515][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 71.726440][ T5754] 8021q: adding VLAN 0 to HW filter on device team0
[ 71.737504][ T64] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.744705][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.768819][ T64] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.776007][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.791111][ T4938] Bluetooth: hci0: command tx timeout
[ 72.437712][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.462229][ T5754] veth0_vlan: entered promiscuous mode
[ 72.473129][ T5754] veth1_vlan: entered promiscuous mode
[ 72.492117][ T5754] veth0_macvtap: entered promiscuous mode
[ 72.500522][ T5754] veth1_macvtap: entered promiscuous mode
[ 72.514274][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.526597][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.539131][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.548039][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.558004][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.566819][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.601675][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.609770][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.632746][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.642788][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 73.869507][ T4938] Bluetooth: hci0: command tx timeout
2026/06/20 01:54:31 executed programs: 6
[ 75.949427][ T4938] Bluetooth: hci0: command tx timeout
[ 78.029600][ T4938] Bluetooth: hci0: command tx timeout
[ 78.680117][ T5926] ==================================================================
[ 78.688242][ T5926] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x19b/0xf30
[ 78.696088][ T5926] Read of size 8 at addr ffff88807ca99ab0 by task syz.0.35/5926
[ 78.703741][ T5926]
[ 78.706097][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full)
[ 78.706119][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 78.706130][ T5926] Call Trace:
[ 78.706138][ T5926]
[ 78.706145][ T5926] dump_stack_lvl+0xe8/0x150
[ 78.706169][ T5926] print_address_description+0x55/0x1e0
[ 78.706189][ T5926] ? __sk_msg_recvmsg+0x19b/0xf30
[ 78.706213][ T5926] print_report+0x58/0x70
[ 78.706230][ T5926] kasan_report+0x117/0x150
[ 78.706258][ T5926] ? __sk_msg_recvmsg+0x19b/0xf30
[ 78.706285][ T5926] __sk_msg_recvmsg+0x19b/0xf30
[ 78.706315][ T5926] ? sk_psock_get+0x7a/0x440
[ 78.706342][ T5926] udp_bpf_recvmsg+0x18b/0xa90
[ 78.706364][ T5926] ? __pfx___css_rstat_updated+0x10/0x10
[ 78.706395][ T5926] ? aa_sk_perm+0x6d5/0x900
[ 78.706422][ T5926] ? __folio_batch_add_and_move+0x11a/0xc50
[ 78.706459][ T5926] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 78.706479][ T5926] ? pfn_valid+0xba/0x480
[ 78.706501][ T5926] ? rcu_is_watching+0x15/0xb0
[ 78.706521][ T5926] ? page_table_check_set+0x126/0x510
[ 78.706543][ T5926] ? rcu_is_watching+0x15/0xb0
[ 78.706560][ T5926] ? sock_rps_record_flow+0x19/0x350
[ 78.706585][ T5926] ? inet_recvmsg+0x101/0x120
[ 78.706606][ T5926] ? __pfx_inet_recvmsg+0x10/0x10
[ 78.706627][ T5926] sock_recvmsg+0x155/0x1b0
[ 78.706650][ T5926] ____sys_recvmsg+0x1e6/0x4a0
[ 78.706680][ T5926] ? __pfx_____sys_recvmsg+0x10/0x10
[ 78.706715][ T5926] ? import_iovec+0x73/0xa0
[ 78.706740][ T5926] ___sys_recvmsg+0x213/0x5a0
[ 78.706766][ T5926] ? count_memcg_event_mm+0x21/0x260
[ 78.706788][ T5926] ? __pfx____sys_recvmsg+0x10/0x10
[ 78.706813][ T5926] ? handle_mm_fault+0x2f33/0x3080
[ 78.706837][ T5926] ? __fget_files+0x2a/0x420
[ 78.706857][ T5926] ? rcu_is_watching+0x15/0xb0
[ 78.706882][ T5926] ? __fget_files+0x3a2/0x420
[ 78.706907][ T5926] __x64_sys_recvmsg+0x1ae/0x290
[ 78.706933][ T5926] ? _raw_spin_unlock_irq+0x2e/0x50
[ 78.706955][ T5926] ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 78.706985][ T5926] ? do_user_addr_fault+0xc4a/0x1340
[ 78.707005][ T5926] ? rcu_is_watching+0x15/0xb0
[ 78.707023][ T5926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.707041][ T5926] do_syscall_64+0x174/0x580
[ 78.707064][ T5926] ? trace_irq_disable+0x3b/0x140
[ 78.707088][ T5926] ? clear_bhb_loop+0x40/0x90
[ 78.707108][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.707126][ T5926] RIP: 0033:0x7f4ce339ce59
[ 78.707144][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 78.707159][ T5926] RSP: 002b:00007f4ce4230028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 78.707180][ T5926] RAX: ffffffffffffffda RBX: 00007f4ce3616180 RCX: 00007f4ce339ce59
[ 78.707193][ T5926] RDX: 0000000060000001 RSI: 00002000000018c0 RDI: 0000000000000003
[ 78.707205][ T5926] RBP: 00007f4ce3432e6f R08: 0000000000000000 R09: 0000000000000000
[ 78.707216][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.707227][ T5926] R13: 00007f4ce3616218 R14: 00007f4ce3616180 R15: 00007ffc3a47d478
[ 78.707249][ T5926]
[ 78.707256][ T5926]
[ 79.014460][ T5926] Allocated by task 5924:
[ 79.018786][ T5926] kasan_save_track+0x3e/0x80
[ 79.023472][ T5926] __kasan_kmalloc+0x93/0xb0
[ 79.028066][ T5926] __kmalloc_cache_noprof+0x318/0x660
[ 79.033450][ T5926] sk_psock_skb_ingress_self+0x5e/0x320
[ 79.039004][ T5926] sk_psock_verdict_recv+0xca9/0xeb0
[ 79.044384][ T5926] udp_read_skb+0x5f4/0x6d0
[ 79.049413][ T5926] sk_psock_verdict_data_ready+0x25f/0x690
[ 79.055226][ T5926] __udp_enqueue_schedule_skb+0xc26/0x12d0
[ 79.061041][ T5926] udp_queue_rcv_one_skb+0x750/0x10e0
[ 79.066414][ T5926] __udp4_lib_mcast_deliver+0xace/0xb60
[ 79.071969][ T5926] udp_rcv+0xd3e/0x1db0
[ 79.076130][ T5926] ip_protocol_deliver_rcu+0x27e/0x440
[ 79.081584][ T5926] ip_local_deliver_finish+0x3bb/0x6f0
[ 79.087039][ T5926] NF_HOOK+0x336/0x3c0
[ 79.091107][ T5926] ip_sublist_rcv_finish+0x1f0/0x240
[ 79.096485][ T5926] ip_sublist_rcv+0x5cc/0xa70
[ 79.101183][ T5926] ip_list_rcv+0x3ec/0x440
[ 79.105602][ T5926] __netif_receive_skb_list_core+0x804/0x830
[ 79.111582][ T5926] netif_receive_skb_list_internal+0x995/0xcf0
[ 79.117737][ T5926] netif_receive_skb_list+0x55/0x450
[ 79.123031][ T5926] bpf_test_run_xdp_live+0x1875/0x1c20
[ 79.128521][ T5926] bpf_prog_test_run_xdp+0x7d8/0x11d0
[ 79.133921][ T5926] bpf_prog_test_run+0x2c5/0x340
[ 79.138863][ T5926] __sys_bpf+0x643/0x950
[ 79.143109][ T5926] __x64_sys_bpf+0x7c/0x90
[ 79.147526][ T5926] do_syscall_64+0x174/0x580
[ 79.152120][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.158027][ T5926]
[ 79.160366][ T5926] Freed by task 5925:
[ 79.164347][ T5926] kasan_save_track+0x3e/0x80
[ 79.169027][ T5926] kasan_save_free_info+0x40/0x50
[ 79.174061][ T5926] __kasan_slab_free+0x5c/0x80
[ 79.178843][ T5926] kfree+0x1c5/0x640
[ 79.182781][ T5926] __sk_msg_recvmsg+0xd2d/0xf30
[ 79.187657][ T5926] udp_bpf_recvmsg+0x18b/0xa90
[ 79.192432][ T5926] sock_recvmsg+0x155/0x1b0
[ 79.196977][ T5926] ____sys_recvmsg+0x1e6/0x4a0
[ 79.201762][ T5926] ___sys_recvmsg+0x213/0x5a0
[ 79.206460][ T5926] __x64_sys_recvmsg+0x1ae/0x290
[ 79.211411][ T5926] do_syscall_64+0x174/0x580
[ 79.216005][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.221899][ T5926]
[ 79.224221][ T5926] The buggy address belongs to the object at ffff88807ca99800
[ 79.224221][ T5926] which belongs to the cache kmalloc-1k of size 1024
[ 79.238451][ T5926] The buggy address is located 688 bytes inside of
[ 79.238451][ T5926] freed 1024-byte region [ffff88807ca99800, ffff88807ca99c00)
[ 79.252340][ T5926]
[ 79.254673][ T5926] The buggy address belongs to the physical page:
[ 79.261087][ T5926] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ca98
[ 79.269848][ T5926] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 79.278348][ T5926] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 79.285984][ T5926] page_type: f5(slab)
[ 79.289973][ T5926] raw: 00fff00000000040 ffff88813fe1bdc0 dead000000000100 dead000000000122
[ 79.298555][ T5926] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 79.307138][ T5926] head: 00fff00000000040 ffff88813fe1bdc0 dead000000000100 dead000000000122
[ 79.315807][ T5926] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 79.324476][ T5926] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 79.333144][ T5926] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 79.341809][ T5926] page dumped because: kasan: bad access detected
[ 79.348217][ T5926] page_owner tracks the page as allocated
[ 79.353928][ T5926] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5924, tgid 5923 (syz.0.35), ts 78627258310, free_ts 78624233321
[ 79.374339][ T5926] post_alloc_hook+0x22d/0x280
[ 79.379112][ T5926] get_page_from_freelist+0x24ae/0x2530
[ 79.384660][ T5926] __alloc_frozen_pages_noprof+0x18d/0x380
[ 79.390561][ T5926] allocate_slab+0x74/0x5d0
[ 79.395064][ T5926] refill_objects+0x328/0x3c0
[ 79.399738][ T5926] __pcs_replace_empty_main+0x2e0/0x6b0
[ 79.405297][ T5926] __kmalloc_cache_noprof+0x388/0x660
[ 79.410675][ T5926] sk_psock_skb_ingress_self+0x5e/0x320
[ 79.416228][ T5926] sk_psock_verdict_recv+0xca9/0xeb0
[ 79.421535][ T5926] udp_read_skb+0x5f4/0x6d0
[ 79.426042][ T5926] sk_psock_verdict_data_ready+0x25f/0x690
[ 79.431851][ T5926] __udp_enqueue_schedule_skb+0xc26/0x12d0
[ 79.437747][ T5926] udp_queue_rcv_one_skb+0x750/0x10e0
[ 79.443118][ T5926] __udp4_lib_mcast_deliver+0xace/0xb60
[ 79.448758][ T5926] udp_rcv+0xd3e/0x1db0
[ 79.453034][ T5926] ip_protocol_deliver_rcu+0x27e/0x440
[ 79.458497][ T5926] page last free pid 5924 tgid 5923 stack trace:
[ 79.464817][ T5926] __free_frozen_pages+0xc0d/0xd20
[ 79.469936][ T5926] bpf_check+0x39e1/0x4c30
[ 79.474360][ T5926] bpf_prog_load+0x1419/0x1a10
[ 79.479125][ T5926] __sys_bpf+0x618/0x950
[ 79.483369][ T5926] __x64_sys_bpf+0x7c/0x90
[ 79.487793][ T5926] do_syscall_64+0x174/0x580
[ 79.492386][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.498280][ T5926]
[ 79.500600][ T5926] Memory state around the buggy address:
[ 79.506229][ T5926] ffff88807ca99980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.514288][ T5926] ffff88807ca99a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.522356][ T5926] >ffff88807ca99a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.530415][ T5926] ^
[ 79.536040][ T5926] ffff88807ca99b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.544098][ T5926] ffff88807ca99b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.552153][ T5926] ==================================================================
[ 79.569592][ T5926] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.576853][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full)
[ 79.585999][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 79.596109][ T5926] Call Trace:
[ 79.599414][ T5926]
[ 79.602359][ T5926] vpanic+0x56c/0xa60
[ 79.606364][ T5926] ? __pfx_vpanic+0x10/0x10
[ 79.610892][ T5926] ? rcu_is_watching+0x15/0xb0
[ 79.615679][ T5926] panic+0xc5/0xd0
[ 79.619460][ T5926] ? __pfx_panic+0x10/0x10
[ 79.623893][ T5926] ? preempt_schedule_thunk+0x16/0x40
[ 79.629289][ T5926] ? preempt_schedule_thunk+0x16/0x40
[ 79.634683][ T5926] ? __sk_msg_recvmsg+0x19b/0xf30
[ 79.639734][ T5926] check_panic_on_warn+0x89/0xb0
[ 79.644690][ T5926] ? __sk_msg_recvmsg+0x19b/0xf30
[ 79.649740][ T5926] end_report+0x73/0x170
[ 79.654012][ T5926] ? __sk_msg_recvmsg+0x19b/0xf30
[ 79.659060][ T5926] kasan_report+0x128/0x150
[ 79.663585][ T5926] ? __sk_msg_recvmsg+0x19b/0xf30
[ 79.668629][ T5926] __sk_msg_recvmsg+0x19b/0xf30
[ 79.673489][ T5926] ? sk_psock_get+0x7a/0x440
[ 79.678083][ T5926] udp_bpf_recvmsg+0x18b/0xa90
[ 79.682848][ T5926] ? __pfx___css_rstat_updated+0x10/0x10
[ 79.688493][ T5926] ? aa_sk_perm+0x6d5/0x900
[ 79.693008][ T5926] ? __folio_batch_add_and_move+0x11a/0xc50
[ 79.698908][ T5926] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 79.704198][ T5926] ? pfn_valid+0xba/0x480
[ 79.708528][ T5926] ? rcu_is_watching+0x15/0xb0
[ 79.713290][ T5926] ? page_table_check_set+0x126/0x510
[ 79.718679][ T5926] ? rcu_is_watching+0x15/0xb0
[ 79.723441][ T5926] ? sock_rps_record_flow+0x19/0x350
[ 79.728735][ T5926] ? inet_recvmsg+0x101/0x120
[ 79.733500][ T5926] ? __pfx_inet_recvmsg+0x10/0x10
[ 79.738536][ T5926] sock_recvmsg+0x155/0x1b0
[ 79.743045][ T5926] ____sys_recvmsg+0x1e6/0x4a0
[ 79.747816][ T5926] ? __pfx_____sys_recvmsg+0x10/0x10
[ 79.753109][ T5926] ? import_iovec+0x73/0xa0
[ 79.757616][ T5926] ___sys_recvmsg+0x213/0x5a0
[ 79.762303][ T5926] ? count_memcg_event_mm+0x21/0x260
[ 79.767593][ T5926] ? __pfx____sys_recvmsg+0x10/0x10
[ 79.772799][ T5926] ? handle_mm_fault+0x2f33/0x3080
[ 79.777913][ T5926] ? __fget_files+0x2a/0x420
[ 79.782523][ T5926] ? rcu_is_watching+0x15/0xb0
[ 79.787299][ T5926] ? __fget_files+0x3a2/0x420
[ 79.791978][ T5926] __x64_sys_recvmsg+0x1ae/0x290
[ 79.796920][ T5926] ? _raw_spin_unlock_irq+0x2e/0x50
[ 79.802126][ T5926] ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 79.807591][ T5926] ? do_user_addr_fault+0xc4a/0x1340
[ 79.812968][ T5926] ? rcu_is_watching+0x15/0xb0
[ 79.817734][ T5926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.823800][ T5926] do_syscall_64+0x174/0x580
[ 79.828394][ T5926] ? trace_irq_disable+0x3b/0x140
[ 79.833424][ T5926] ? clear_bhb_loop+0x40/0x90
[ 79.838106][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.843999][ T5926] RIP: 0033:0x7f4ce339ce59
[ 79.848420][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 79.868029][ T5926] RSP: 002b:00007f4ce4230028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 79.876448][ T5926] RAX: ffffffffffffffda RBX: 00007f4ce3616180 RCX: 00007f4ce339ce59
[ 79.884423][ T5926] RDX: 0000000060000001 RSI: 00002000000018c0 RDI: 0000000000000003
[ 79.892489][ T5926] RBP: 00007f4ce3432e6f R08: 0000000000000000 R09: 0000000000000000
[ 79.900462][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.908433][ T5926] R13: 00007f4ce3616218 R14: 00007f4ce3616180 R15: 00007ffc3a47d478
[ 79.916420][ T5926]
[ 79.919764][ T5926] Kernel Offset: disabled
[ 79.924097][ T5926] Rebooting in 86400 seconds..