Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts.
2026/05/23 06:36:54 parsed 1 programs
[ 84.208187][ T4285] cgroup: Unknown subsys name 'net'
[ 84.341416][ T4285] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 85.907200][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 89.585524][ T4342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.593890][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.601835][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.619086][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.626924][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 89.634231][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.864391][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.872573][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.882355][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 89.910305][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.918418][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.935241][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 90.827776][ T4364] chnl_net:caif_netlink_parms(): no params data found
[ 90.887230][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.894775][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.902895][ T4364] device bridge_slave_0 entered promiscuous mode
[ 90.920628][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.927911][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.938894][ T4364] device bridge_slave_1 entered promiscuous mode
[ 90.960724][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.979169][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.002994][ T4364] team0: Port device team_slave_0 added
[ 91.010565][ T4364] team0: Port device team_slave_1 added
[ 91.036720][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.043679][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 91.069872][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.082666][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.089743][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 91.115730][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.150244][ T4364] device hsr_slave_0 entered promiscuous mode
[ 91.157105][ T4364] device hsr_slave_1 entered promiscuous mode
[ 91.328751][ T4364] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.368868][ T4364] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.378763][ T4364] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.388244][ T4364] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.415352][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.422749][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.430731][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.437915][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.513137][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.529231][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.538647][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.547983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 91.558796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 91.567603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 91.578259][ T4364] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.593819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 91.602638][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.611817][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.636495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 91.650769][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.657959][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.692862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 91.699893][ T22] cfg80211: failed to load regulatory.db
[ 91.721173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 91.729874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 91.738613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 91.758668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 91.770237][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 91.972172][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 91.980063][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 91.992912][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.017646][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 92.027277][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 92.056684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 92.065767][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 92.075585][ T4364] device veth0_vlan entered promiscuous mode
[ 92.082312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 92.090957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 92.110280][ T4364] device veth1_vlan entered promiscuous mode
[ 92.129890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 92.139534][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 92.148722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 92.161873][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 92.179593][ T4364] device veth0_macvtap entered promiscuous mode
[ 92.189047][ T4364] device veth1_macvtap entered promiscuous mode
[ 92.204208][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.211983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 92.221147][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 92.229285][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 92.238778][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 92.250325][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.266565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 92.275368][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 92.289047][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.298336][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.307184][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.315950][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.556828][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/23 06:37:05 executed programs: 0
[ 92.936088][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.944012][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.952594][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.962033][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.970870][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 92.978600][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.105747][ T4385] chnl_net:caif_netlink_parms(): no params data found
[ 93.159622][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.166945][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.175241][ T4385] device bridge_slave_0 entered promiscuous mode
[ 93.183349][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.191176][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.199194][ T4385] device bridge_slave_1 entered promiscuous mode
[ 93.221895][ T4385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.234277][ T4385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.258235][ T4385] team0: Port device team_slave_0 added
[ 93.266408][ T4385] team0: Port device team_slave_1 added
[ 93.284595][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.291570][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.318184][ T4385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.333002][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.340191][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.366518][ T4385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.403774][ T4385] device hsr_slave_0 entered promiscuous mode
[ 93.410635][ T4385] device hsr_slave_1 entered promiscuous mode
[ 93.417745][ T4385] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 93.425911][ T4385] Cannot create hsr debugfs directory
[ 94.846588][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.055278][ T4342] Bluetooth: hci0: command 0x0409 tx timeout
[ 97.135471][ T4342] Bluetooth: hci0: command 0x041b tx timeout
[ 97.327597][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.368384][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.250903][ T4385] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.261071][ T4385] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.271166][ T4385] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.281393][ T4385] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.299729][ T31] device hsr_slave_0 left promiscuous mode
[ 98.307087][ T31] device hsr_slave_1 left promiscuous mode
[ 98.313721][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 98.321723][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 98.330399][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 98.338687][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 98.347259][ T31] device bridge_slave_1 left promiscuous mode
[ 98.354349][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.367743][ T31] device bridge_slave_0 left promiscuous mode
[ 98.374000][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.400372][ T31] device veth1_macvtap left promiscuous mode
[ 98.406948][ T31] device veth0_macvtap left promiscuous mode
[ 98.413096][ T31] device veth1_vlan left promiscuous mode
[ 98.419868][ T31] device veth0_vlan left promiscuous mode
[ 98.842551][ T31] team0 (unregistering): Port device team_slave_1 removed
[ 98.874891][ T31] team0 (unregistering): Port device team_slave_0 removed
[ 98.901858][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.931337][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.121456][ T31] bond0 (unregistering): Released all slaves
[ 99.224609][ T4342] Bluetooth: hci0: command 0x040f tx timeout
[ 99.266978][ T4385] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.292586][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 99.301096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 99.313097][ T4385] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.329125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 99.337922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 99.348785][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.355974][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.371461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 99.381151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 99.390096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 99.398941][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.406093][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.431836][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 99.443754][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 99.456624][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 99.467161][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 99.486682][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 99.495180][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 99.503772][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 99.512456][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 99.521081][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 99.539234][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 99.548211][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 99.560362][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 99.777153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 99.785078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 99.797721][ T4385] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.815934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 99.826135][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 99.848184][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 99.856763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 99.865401][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 99.873136][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 99.884014][ T4385] device veth0_vlan entered promiscuous mode
[ 99.899134][ T4385] device veth1_vlan entered promiscuous mode
[ 99.918538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 99.927336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 99.935942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 99.944737][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 99.958006][ T4385] device veth0_macvtap entered promiscuous mode
[ 99.967594][ T4385] device veth1_macvtap entered promiscuous mode
[ 99.982960][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.990384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 99.999078][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 100.007489][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 100.016245][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 100.032427][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.039888][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 100.048496][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 100.060501][ T4385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.069399][ T4385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.078699][ T4385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.087496][ T4385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.140047][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.150496][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.162981][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 100.181921][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/05/23 06:37:12 executed programs: 2
[ 100.190175][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.199311][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 100.254680][ C1] hrtimer: interrupt took 62255 ns
[ 101.063532][ C0] ==================================================================
[ 101.071636][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[ 101.079478][ C0] Write of size 32 at addr ffff88802b2a9a60 by task syz.0.43/4451
[ 101.087281][ C0]
[ 101.089627][ C0] CPU: 0 PID: 4451 Comm: syz.0.43 Not tainted syzkaller #0
[ 101.096848][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 101.106910][ C0] Call Trace:
[ 101.110198][ C0]
[ 101.113128][ C0] dump_stack_lvl+0x188/0x24e
[ 101.117846][ C0] ? __lock_acquire+0x7d10/0x7d10
[ 101.123012][ C0] ? show_regs_print_info+0x12/0x12
[ 101.128258][ C0] ? load_image+0x400/0x400
[ 101.132798][ C0] ? __virt_addr_valid+0x465/0x540
[ 101.137941][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 101.143057][ C0] print_report+0xa8/0x210
[ 101.147479][ C0] kasan_report+0x10b/0x140
[ 101.151989][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 101.157110][ C0] kasan_check_range+0x235/0x290
[ 101.162056][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 101.167184][ C0] memcpy+0x3c/0x60
[ 101.171035][ C0] __bpf_get_stackid+0x6c9/0x920
[ 101.176008][ C0] bpf_get_stackid_pe+0x2ec/0x400
[ 101.181054][ C0] bpf_prog_644fb7c94e15512a+0x2b/0x40
[ 101.186528][ C0] bpf_overflow_handler+0x522/0x7c0
[ 101.191734][ C0] ? bpf_overflow_handler+0xd9/0x7c0
[ 101.197024][ C0] ? perf_swevent_overflow+0x230/0x230
[ 101.202482][ C0] ? sched_clock_cpu+0x6e/0x260
[ 101.207346][ C0] ? __perf_event_account_interrupt+0x187/0x280
[ 101.213597][ C0] __perf_event_overflow+0x448/0x610
[ 101.218897][ C0] perf_swevent_hrtimer+0x472/0x630
[ 101.224108][ C0] ? cpu_clock_event_read+0x50/0x50
[ 101.229321][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 101.235224][ C0] ? _raw_spin_unlock+0x40/0x40
[ 101.240082][ C0] __hrtimer_run_queues+0x50b/0xd50
[ 101.245288][ C0] ? cpu_clock_event_read+0x50/0x50
[ 101.250587][ C0] ? hrtimer_interrupt+0x9c0/0x9c0
[ 101.255723][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 101.261802][ C0] hrtimer_interrupt+0x3c5/0x9c0
[ 101.266763][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 101.272775][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0
[ 101.278412][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 101.284399][ C0] RIP: 0033:0x7ffc7e9ae966
[ 101.288817][ C0] Code: 00 00 4c 8d 35 3b b7 ff ff 41 89 fc 49 c1 e4 04 4b 8d 5c 26 20 45 8b 3e 41 f6 c7 01 75 3b 41 8b 46 04 83 f8 01 75 44 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 48 85 d2 0f 88 09 01 00 00 4c 8b 03 4c
[ 101.308432][ C0] RSP: 002b:00007ffc7e88c450 EFLAGS: 00000246
[ 101.314522][ C0] RAX: 000000009b98b236 RBX: 00007ffc7e9aa0b0 RCX: 0000000000000000
[ 101.322526][ C0] RDX: 0000000000000037 RSI: 00007ffc7e88c510 RDI: 0000000000000001
[ 101.330527][ C0] RBP: 00007ffc7e88c490 R08: 0000000000000000 R09: 0000000000000000
[ 101.338538][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[ 101.346537][ C0] R13: 00007f4869415fac R14: 00007ffc7e9aa080 R15: 0000000000004862
[ 101.354533][ C0]
[ 101.357599][ C0]
[ 101.359939][ C0] Allocated by task 4451:
[ 101.364267][ C0] kasan_set_track+0x4b/0x70
[ 101.368869][ C0] __kasan_kmalloc+0x8e/0xa0
[ 101.373481][ C0] __kmalloc_node+0xb0/0x240
[ 101.378087][ C0] bpf_map_area_alloc+0x47/0xe0
[ 101.382940][ C0] prealloc_elems_and_freelist+0x86/0x1c0
[ 101.388663][ C0] stack_map_alloc+0x390/0x520
[ 101.393425][ C0] map_create+0x534/0x1000
[ 101.397846][ C0] __sys_bpf+0x38b/0x780
[ 101.402092][ C0] __x64_sys_bpf+0x78/0x90
[ 101.406516][ C0] do_syscall_64+0x4c/0xa0
[ 101.410937][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.416851][ C0]
[ 101.419206][ C0] The buggy address belongs to the object at ffff88802b2a9a00
[ 101.419206][ C0] which belongs to the cache kmalloc-cg-128 of size 128
[ 101.433551][ C0] The buggy address is located 96 bytes inside of
[ 101.433551][ C0] 128-byte region [ffff88802b2a9a00, ffff88802b2a9a80)
[ 101.446741][ C0]
[ 101.449065][ C0] The buggy address belongs to the physical page:
[ 101.455483][ C0] page:ffffea0000acaa40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b2a9
[ 101.465647][ C0] memcg:ffff88802958d101
[ 101.469900][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 101.477464][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442a00
[ 101.486051][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88802958d101
[ 101.494627][ C0] page dumped because: kasan: bad access detected
[ 101.501055][ C0] page_owner tracks the page as allocated
[ 101.506767][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4428, tgid 4428 (syz.0.20), ts 100403074146, free_ts 100377499594
[ 101.524839][ C0] post_alloc_hook+0x173/0x1a0
[ 101.529627][ C0] get_page_from_freelist+0x1a1e/0x1ab0
[ 101.535215][ C0] __alloc_pages+0x1ec/0x4f0
[ 101.539823][ C0] alloc_slab_page+0x5d/0x160
[ 101.544552][ C0] new_slab+0x87/0x2c0
[ 101.548652][ C0] ___slab_alloc+0xbc6/0x1240
[ 101.553338][ C0] __kmem_cache_alloc_node+0x1a0/0x260
[ 101.558819][ C0] __kmalloc_node+0xa0/0x240
[ 101.563433][ C0] bpf_map_area_alloc+0x47/0xe0
[ 101.568319][ C0] prealloc_elems_and_freelist+0x86/0x1c0
[ 101.574077][ C0] stack_map_alloc+0x390/0x520
[ 101.578849][ C0] map_create+0x534/0x1000
[ 101.583277][ C0] __sys_bpf+0x38b/0x780
[ 101.587616][ C0] __x64_sys_bpf+0x78/0x90
[ 101.592047][ C0] do_syscall_64+0x4c/0xa0
[ 101.596485][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.602556][ C0] page last free stack trace:
[ 101.607244][ C0] free_unref_page_prepare+0x8b4/0x9a0
[ 101.612718][ C0] free_unref_page_list+0xbb/0x8e0
[ 101.617845][ C0] release_pages+0x1fa6/0x2220
[ 101.622642][ C0] tlb_flush_mmu+0x105/0x220
[ 101.627241][ C0] tlb_finish_mmu+0xf5/0x220
[ 101.631839][ C0] exit_mmap+0x384/0x960
[ 101.636091][ C0] __mmput+0x118/0x3c0
[ 101.640175][ C0] exit_mm+0x25a/0x360
[ 101.644377][ C0] do_exit+0x905/0x2480
[ 101.648556][ C0] do_group_exit+0x217/0x2d0
[ 101.653162][ C0] __x64_sys_exit_group+0x3b/0x40
[ 101.658225][ C0] do_syscall_64+0x4c/0xa0
[ 101.662664][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.668592][ C0]
[ 101.670945][ C0] Memory state around the buggy address:
[ 101.676604][ C0] ffff88802b2a9900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.684761][ C0] ffff88802b2a9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.692829][ C0] >ffff88802b2a9a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 101.700892][ C0] ^
[ 101.708899][ C0] ffff88802b2a9a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.716988][ C0] ffff88802b2a9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.725077][ C0] ==================================================================
[ 101.733234][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.740434][ C0] CPU: 0 PID: 4451 Comm: syz.0.43 Not tainted syzkaller #0
[ 101.747638][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 101.757700][ C0] Call Trace:
[ 101.760997][ C0]
[ 101.763932][ C0] dump_stack_lvl+0x188/0x24e
[ 101.768635][ C0] ? memcpy+0x3c/0x60
[ 101.772623][ C0] ? show_regs_print_info+0x12/0x12
[ 101.777833][ C0] ? load_image+0x400/0x400
[ 101.782350][ C0] panic+0x2e5/0x730
[ 101.786256][ C0] ? bpf_jit_dump+0xd0/0xd0
[ 101.790798][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 101.796711][ C0] ? _raw_spin_unlock+0x40/0x40
[ 101.801659][ C0] ? print_memory_metadata+0x314/0x400
[ 101.807135][ C0] check_panic_on_warn+0x80/0xa0
[ 101.812086][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 101.817224][ C0] end_report+0x66/0x110
[ 101.821518][ C0] kasan_report+0x118/0x140
[ 101.826039][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 101.831161][ C0] kasan_check_range+0x235/0x290
[ 101.836114][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 101.841233][ C0] memcpy+0x3c/0x60
[ 101.845044][ C0] __bpf_get_stackid+0x6c9/0x920
[ 101.849993][ C0] bpf_get_stackid_pe+0x2ec/0x400
[ 101.855029][ C0] bpf_prog_644fb7c94e15512a+0x2b/0x40
[ 101.860492][ C0] bpf_overflow_handler+0x522/0x7c0
[ 101.865712][ C0] ? bpf_overflow_handler+0xd9/0x7c0
[ 101.871036][ C0] ? perf_swevent_overflow+0x230/0x230
[ 101.876510][ C0] ? sched_clock_cpu+0x6e/0x260
[ 101.881375][ C0] ? __perf_event_account_interrupt+0x187/0x280
[ 101.887632][ C0] __perf_event_overflow+0x448/0x610
[ 101.892934][ C0] perf_swevent_hrtimer+0x472/0x630
[ 101.898147][ C0] ? cpu_clock_event_read+0x50/0x50
[ 101.903408][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 101.909334][ C0] ? _raw_spin_unlock+0x40/0x40
[ 101.914215][ C0] __hrtimer_run_queues+0x50b/0xd50
[ 101.919433][ C0] ? cpu_clock_event_read+0x50/0x50
[ 101.924673][ C0] ? hrtimer_interrupt+0x9c0/0x9c0
[ 101.929794][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 101.935879][ C0] hrtimer_interrupt+0x3c5/0x9c0
[ 101.940833][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 101.946838][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0
[ 101.952477][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 101.958469][ C0] RIP: 0033:0x7ffc7e9ae966
[ 101.962888][ C0] Code: 00 00 4c 8d 35 3b b7 ff ff 41 89 fc 49 c1 e4 04 4b 8d 5c 26 20 45 8b 3e 41 f6 c7 01 75 3b 41 8b 46 04 83 f8 01 75 44 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 48 85 d2 0f 88 09 01 00 00 4c 8b 03 4c
[ 101.982530][ C0] RSP: 002b:00007ffc7e88c450 EFLAGS: 00000246
[ 101.988618][ C0] RAX: 000000009b98b236 RBX: 00007ffc7e9aa0b0 RCX: 0000000000000000
[ 101.996595][ C0] RDX: 0000000000000037 RSI: 00007ffc7e88c510 RDI: 0000000000000001
[ 102.004584][ C0] RBP: 00007ffc7e88c490 R08: 0000000000000000 R09: 0000000000000000
[ 102.012560][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[ 102.020607][ C0] R13: 00007f4869415fac R14: 00007ffc7e9aa080 R15: 0000000000004862
[ 102.028594][ C0]
[ 102.032225][ C0] Kernel Offset: disabled
[ 102.036587][ C0] Rebooting in 86400 seconds..