Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts.
2026/09/01 15:06:19 parsed 1 programs
2026/09/01 15:06:19 serving rpc on tcp://41113
[ 69.779326][ T5781] cgroup: Unknown subsys name 'net'
[ 69.889488][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 71.239698][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 71.426098][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.432643][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 74.045594][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.053974][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.084758][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.092599][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.912424][ T5834] chnl_net:caif_netlink_parms(): no params data found
[ 74.997870][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.005374][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.012714][ T5834] bridge_slave_0: entered allmulticast mode
[ 75.019714][ T5834] bridge_slave_0: entered promiscuous mode
[ 75.027991][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.035197][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.042308][ T5834] bridge_slave_1: entered allmulticast mode
[ 75.049589][ T5834] bridge_slave_1: entered promiscuous mode
[ 75.083444][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.095924][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.146008][ T5834] team0: Port device team_slave_0 added
[ 75.153374][ T5834] team0: Port device team_slave_1 added
[ 75.171326][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.178295][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.204238][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.216692][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.223853][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.249779][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.282991][ T5834] hsr_slave_0: entered promiscuous mode
[ 75.290010][ T5834] hsr_slave_1: entered promiscuous mode
[ 75.444764][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.456440][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.480425][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.490814][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.570778][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.605556][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.624682][ T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.631984][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.666423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.673588][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.886430][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.941691][ T5834] veth0_vlan: entered promiscuous mode
[ 75.958607][ T5834] veth1_vlan: entered promiscuous mode
[ 75.984178][ T5834] veth0_macvtap: entered promiscuous mode
[ 75.994728][ T5834] veth1_macvtap: entered promiscuous mode
[ 76.015712][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.028566][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.039464][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.048869][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.058540][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.069138][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.177588][ T5834] syz-executor (5834) used greatest stack depth: 20808 bytes left
[ 76.206372][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.756153][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 76.781241][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 76.792599][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 76.800804][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 76.808726][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 76.816248][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/09/01 15:06:29 executed programs: 0
[ 77.961429][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.971364][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.980024][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.988823][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.997247][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 78.004817][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.120226][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 78.172926][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.180209][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.187470][ T5886] bridge_slave_0: entered allmulticast mode
[ 78.196629][ T5886] bridge_slave_0: entered promiscuous mode
[ 78.204263][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.211357][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.218626][ T5886] bridge_slave_1: entered allmulticast mode
[ 78.225606][ T5886] bridge_slave_1: entered promiscuous mode
[ 78.247998][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.258931][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.284233][ T5886] team0: Port device team_slave_0 added
[ 78.291382][ T5886] team0: Port device team_slave_1 added
[ 78.310734][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.317772][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.343700][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.356307][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.363298][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.389195][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.423674][ T5886] hsr_slave_0: entered promiscuous mode
[ 78.430114][ T5886] hsr_slave_1: entered promiscuous mode
[ 78.436908][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 78.445265][ T5886] Cannot create hsr debugfs directory
[ 78.713219][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.074041][ T51] Bluetooth: hci0: command tx timeout
[ 81.273182][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.315310][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.667703][ T8] cfg80211: failed to load regulatory.db
[ 82.143595][ T51] Bluetooth: hci0: command tx timeout
[ 82.176410][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.185486][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.195081][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.204667][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.269383][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.294181][ T60] hsr_slave_0: left promiscuous mode
[ 82.300085][ T60] hsr_slave_1: left promiscuous mode
[ 82.307183][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.315023][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.323170][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.330777][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.338943][ T60] bridge_slave_1: left allmulticast mode
[ 82.344769][ T60] bridge_slave_1: left promiscuous mode
[ 82.350955][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.361131][ T60] bridge_slave_0: left allmulticast mode
[ 82.367531][ T60] bridge_slave_0: left promiscuous mode
[ 82.373346][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.391231][ T60] veth1_macvtap: left promiscuous mode
[ 82.396957][ T60] veth0_macvtap: left promiscuous mode
[ 82.402769][ T60] veth1_vlan: left promiscuous mode
[ 82.408860][ T60] veth0_vlan: left promiscuous mode
[ 82.746075][ T60] team0 (unregistering): Port device team_slave_1 removed
[ 82.772447][ T60] team0 (unregistering): Port device team_slave_0 removed
[ 82.803952][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.831605][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.011033][ T60] bond0 (unregistering): Released all slaves
[ 83.124218][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.136811][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.143971][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.158957][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.166123][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.211317][ T5886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 83.223210][ T5886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 83.368215][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.421105][ T5886] veth0_vlan: entered promiscuous mode
[ 83.434345][ T5886] veth1_vlan: entered promiscuous mode
[ 83.459459][ T5886] veth0_macvtap: entered promiscuous mode
[ 83.468749][ T5886] veth1_macvtap: entered promiscuous mode
[ 83.487994][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.501390][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.514586][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.524257][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.532960][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.541747][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.667414][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.687110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.718441][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.726502][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.776811][ T5929] ==================================================================
[ 83.784901][ T5929] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 83.793759][ T5929] Write of size 4 at addr ffff888076674330 by task syz.0.17/5929
[ 83.801454][ T5929]
[ 83.803769][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 83.810957][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 83.821008][ T5929] Call Trace:
[ 83.824283][ T5929]
[ 83.827211][ T5929] dump_stack_lvl+0x18c/0x250
[ 83.831871][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 83.836877][ T5929] ? show_regs_print_info+0x20/0x20
[ 83.842065][ T5929] ? load_image+0x420/0x420
[ 83.846556][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 83.851647][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 83.856739][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 83.861832][ T5929] print_report+0xa8/0x210
[ 83.866243][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 83.872387][ T5929] kasan_report+0x117/0x150
[ 83.876877][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 83.883036][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 83.889009][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 83.894116][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 83.899224][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 83.904426][ T5929] ? perf_reg_abi+0x62/0x90
[ 83.908919][ T5929] __bpf_get_stackid+0x564/0x900
[ 83.913838][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 83.918847][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 83.924336][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 83.929537][ T5929] ? verify_lock_unused+0x140/0x140
[ 83.934714][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 83.939981][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 83.945247][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 83.951467][ T5929] __perf_event_overflow+0x461/0x660
[ 83.956743][ T5929] perf_swevent_event+0x319/0x570
[ 83.961747][ T5929] ? perf_tp_event+0x1550/0x1550
[ 83.966675][ T5929] ___perf_sw_event+0x4ab/0x730
[ 83.971505][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 83.976511][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 83.982929][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 83.987936][ T5929] ? rep_movs_alternative+0x4a/0x90
[ 83.993147][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 83.999108][ T5929] ? lock_chain_count+0x20/0x20
[ 84.003937][ T5929] __perf_sw_event+0x139/0x270
[ 84.008682][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 84.013862][ T5929] ? rcu_is_watching+0x15/0xb0
[ 84.018637][ T5929] exc_page_fault+0x64/0x100
[ 84.023221][ T5929] asm_exc_page_fault+0x26/0x30
[ 84.028071][ T5929] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 84.033864][ T5929] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 84.053450][ T5929] RSP: 0018:ffffc90002e67670 EFLAGS: 00050206
[ 84.059505][ T5929] RAX: ffffffff84318d01 RBX: 0000000000002ed0 RCX: 0000000000001150
[ 84.067463][ T5929] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880782a5e17
[ 84.075432][ T5929] RBP: ffffc90002e677d0 R08: ffff8880782a6f66 R09: 1ffff1100f054dec
[ 84.083401][ T5929] R10: dffffc0000000000 R11: ffffed100f054ded R12: 0000200000003150
[ 84.091361][ T5929] R13: ffffc90002e67e40 R14: ffff8880782a4097 R15: 0000200000000280
[ 84.099326][ T5929] ? copyin+0x11/0x90
[ 84.103297][ T5929] copyin+0x70/0x90
[ 84.107098][ T5929] _copy_from_iter+0x532/0x1290
[ 84.111937][ T5929] ? copyout_mc+0x70/0x70
[ 84.116246][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 84.121345][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 84.126447][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 84.131546][ T5929] ? __check_object_size+0x4fc/0xa40
[ 84.136823][ T5929] skb_copy_datagram_from_iter+0xf2/0x6f0
[ 84.142528][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 84.147713][ T5929] ? skb_put+0x112/0x210
[ 84.151938][ T5929] unix_dgram_sendmsg+0x659/0x16e0
[ 84.157032][ T5929] ? aa_af_perm+0x330/0x330
[ 84.161529][ T5929] ? unix_dgram_poll+0x680/0x680
[ 84.166464][ T5929] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 84.172873][ T5929] ? apparmor_socket_sendmsg+0x8e/0x330
[ 84.178413][ T5929] ? unix_seqpacket_sendmsg+0x10c/0x1e0
[ 84.183964][ T5929] ? unix_dgram_peer_wake_me+0x430/0x430
[ 84.189580][ T5929] ____sys_sendmsg+0x61b/0x980
[ 84.194325][ T5929] ? __asan_memset+0x22/0x40
[ 84.198892][ T5929] ? __sys_sendmsg_sock+0x30/0x30
[ 84.203912][ T5929] ? __import_iovec+0x3fa/0x850
[ 84.208745][ T5929] ? import_iovec+0x73/0xa0
[ 84.213228][ T5929] ___sys_sendmsg+0x2a6/0x360
[ 84.217886][ T5929] ? __sys_sendmsg+0x2b0/0x2b0
[ 84.222636][ T5929] ? futex_wake+0x3fa/0x4f0
[ 84.223510][ T51] Bluetooth: hci0: command tx timeout
[ 84.227119][ T5929] ? init_file+0x12c/0x1f0
[ 84.236889][ T5929] ? alloc_file+0x87/0x600
[ 84.241310][ T5929] __se_sys_sendmsg+0x1d0/0x2c0
[ 84.246145][ T5929] ? __x64_sys_sendmsg+0x80/0x80
[ 84.251065][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 84.256264][ T5929] do_syscall_64+0x55/0xb0
[ 84.260664][ T5929] ? clear_bhb_loop+0x40/0x90
[ 84.265336][ T5929] ? clear_bhb_loop+0x40/0x90
[ 84.269990][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 84.275867][ T5929] RIP: 0033:0x7f535b59e159
[ 84.280266][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.299861][ T5929] RSP: 002b:00007fffcb75b3e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 84.308259][ T5929] RAX: ffffffffffffffda RBX: 00007f535b825fa0 RCX: 00007f535b59e159
[ 84.316212][ T5929] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[ 84.324172][ T5929] RBP: 00007f535b635024 R08: 0000000000000000 R09: 0000000000000000
[ 84.332147][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.340118][ T5929] R13: 00007f535b825fac R14: 00007f535b825fa0 R15: 00007f535b825fa0
[ 84.348096][ T5929]
[ 84.351096][ T5929]
[ 84.353400][ T5929] Allocated by task 5929:
[ 84.357703][ T5929] kasan_set_track+0x4e/0x70
[ 84.362275][ T5929] __kasan_kmalloc+0x8f/0xa0
[ 84.366861][ T5929] __kmalloc_node+0xb6/0x240
[ 84.371430][ T5929] bpf_map_area_alloc+0x5e/0x110
[ 84.376351][ T5929] prealloc_elems_and_freelist+0x86/0x1c0
[ 84.382051][ T5929] stack_map_alloc+0x32b/0x4b0
[ 84.386798][ T5929] map_create+0x877/0x12f0
[ 84.391188][ T5929] __sys_bpf+0x651/0x890
[ 84.395405][ T5929] __x64_sys_bpf+0x7c/0x90
[ 84.399799][ T5929] do_syscall_64+0x55/0xb0
[ 84.404192][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 84.410088][ T5929]
[ 84.412391][ T5929] The buggy address belongs to the object at ffff888076674000
[ 84.412391][ T5929] which belongs to the cache kmalloc-cg-1k of size 1024
[ 84.426692][ T5929] The buggy address is located 0 bytes to the right of
[ 84.426692][ T5929] allocated 816-byte region [ffff888076674000, ffff888076674330)
[ 84.441176][ T5929]
[ 84.443481][ T5929] The buggy address belongs to the physical page:
[ 84.449873][ T5929] page:ffffea0001d99c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76670
[ 84.460017][ T5929] head:ffffea0001d99c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 84.468929][ T5929] memcg:ffff888075373f01
[ 84.473149][ T5929] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 84.481472][ T5929] page_type: 0xffffffff()
[ 84.485811][ T5929] raw: 00fff00000000840 ffff888017c4f280 ffffea00009ef600 0000000000000003
[ 84.494369][ T5929] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888075373f01
[ 84.502924][ T5929] page dumped because: kasan: bad access detected
[ 84.509330][ T5929] page_owner tracks the page as allocated
[ 84.515033][ T5929] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5435, tgid 5435 (dhcpcd), ts 55223795326, free_ts 55080738934
[ 84.535852][ T5929] post_alloc_hook+0x1c1/0x200
[ 84.540611][ T5929] get_page_from_freelist+0x2181/0x22a0
[ 84.546132][ T5929] __alloc_pages+0x1f0/0x460
[ 84.550695][ T5929] alloc_slab_page+0x5d/0x180
[ 84.555362][ T5929] new_slab+0x87/0x2d0
[ 84.559409][ T5929] ___slab_alloc+0xc5c/0x12f0
[ 84.564074][ T5929] __kmem_cache_alloc_node+0x11f/0x250
[ 84.569526][ T5929] __kmalloc_node_track_caller+0xa4/0x230
[ 84.575254][ T5929] kmalloc_reserve+0x116/0x240
[ 84.580000][ T5929] __alloc_skb+0x138/0x2c0
[ 84.584395][ T5929] alloc_skb_with_frags+0xcd/0x7a0
[ 84.589498][ T5929] sock_alloc_send_pskb+0x883/0x9a0
[ 84.594689][ T5929] unix_dgram_sendmsg+0x5a9/0x16e0
[ 84.599782][ T5929] sock_write_iter+0x2dc/0x420
[ 84.604525][ T5929] do_iter_write+0x747/0xc50
[ 84.609099][ T5929] do_writev+0x27f/0x480
[ 84.613318][ T5929] page last free stack trace:
[ 84.617967][ T5929] free_unref_page_prepare+0x7d7/0x8f0
[ 84.623421][ T5929] free_unref_page+0x32/0x2e0
[ 84.628091][ T5929] skb_release_data+0x3ca/0x7f0
[ 84.632930][ T5929] skb_attempt_defer_free+0x12c/0x550
[ 84.638318][ T5929] tcp_recvmsg_locked+0x13ca/0x2310
[ 84.643505][ T5929] tcp_recvmsg+0x217/0x830
[ 84.647897][ T5929] inet_recvmsg+0x140/0x1f0
[ 84.652380][ T5929] sock_read_iter+0x2db/0x3f0
[ 84.657038][ T5929] vfs_read+0x486/0x990
[ 84.661171][ T5929] ksys_read+0x151/0x260
[ 84.665393][ T5929] do_syscall_64+0x55/0xb0
[ 84.669787][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 84.675667][ T5929]
[ 84.677971][ T5929] Memory state around the buggy address:
[ 84.683575][ T5929] ffff888076674200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.691610][ T5929] ffff888076674280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 84.699673][ T5929] >ffff888076674300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 84.707705][ T5929] ^
[ 84.713313][ T5929] ffff888076674380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.721352][ T5929] ffff888076674400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.729392][ T5929] ==================================================================
[ 84.737436][ T5929] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.744605][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 84.751774][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 84.761804][ T5929] Call Trace:
[ 84.765065][ T5929]
[ 84.767977][ T5929] dump_stack_lvl+0x18c/0x250
[ 84.772648][ T5929] ? show_regs_print_info+0x20/0x20
[ 84.777827][ T5929] ? load_image+0x420/0x420
[ 84.782311][ T5929] panic+0x2ca/0x720
[ 84.786190][ T5929] ? bpf_jit_dump+0xd0/0xd0
[ 84.790676][ T5929] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 84.796549][ T5929] ? _raw_spin_unlock+0x40/0x40
[ 84.801375][ T5929] ? print_memory_metadata+0x314/0x400
[ 84.806810][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 84.812944][ T5929] check_panic_on_warn+0x84/0xa0
[ 84.817862][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 84.824007][ T5929] end_report+0x6f/0x130
[ 84.828255][ T5929] kasan_report+0x128/0x150
[ 84.832744][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 84.838885][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 84.845285][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 84.850375][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 84.855465][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 84.860665][ T5929] ? perf_reg_abi+0x62/0x90
[ 84.865146][ T5929] __bpf_get_stackid+0x564/0x900
[ 84.870081][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 84.875100][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 84.880567][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 84.885772][ T5929] ? verify_lock_unused+0x140/0x140
[ 84.890952][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 84.896234][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 84.901511][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 84.907734][ T5929] __perf_event_overflow+0x461/0x660
[ 84.913004][ T5929] perf_swevent_event+0x319/0x570
[ 84.918013][ T5929] ? perf_tp_event+0x1550/0x1550
[ 84.922934][ T5929] ___perf_sw_event+0x4ab/0x730
[ 84.927773][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 84.932782][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 84.939180][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 84.944187][ T5929] ? rep_movs_alternative+0x4a/0x90
[ 84.949370][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 84.955331][ T5929] ? lock_chain_count+0x20/0x20
[ 84.960159][ T5929] __perf_sw_event+0x139/0x270
[ 84.964902][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 84.970078][ T5929] ? rcu_is_watching+0x15/0xb0
[ 84.974840][ T5929] exc_page_fault+0x64/0x100
[ 84.979436][ T5929] asm_exc_page_fault+0x26/0x30
[ 84.984287][ T5929] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 84.990072][ T5929] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 85.009656][ T5929] RSP: 0018:ffffc90002e67670 EFLAGS: 00050206
[ 85.015701][ T5929] RAX: ffffffff84318d01 RBX: 0000000000002ed0 RCX: 0000000000001150
[ 85.023663][ T5929] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880782a5e17
[ 85.031628][ T5929] RBP: ffffc90002e677d0 R08: ffff8880782a6f66 R09: 1ffff1100f054dec
[ 85.039579][ T5929] R10: dffffc0000000000 R11: ffffed100f054ded R12: 0000200000003150
[ 85.047533][ T5929] R13: ffffc90002e67e40 R14: ffff8880782a4097 R15: 0000200000000280
[ 85.055501][ T5929] ? copyin+0x11/0x90
[ 85.059480][ T5929] copyin+0x70/0x90
[ 85.063272][ T5929] _copy_from_iter+0x532/0x1290
[ 85.068205][ T5929] ? copyout_mc+0x70/0x70
[ 85.072512][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 85.077612][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 85.082704][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 85.087796][ T5929] ? __check_object_size+0x4fc/0xa40
[ 85.093066][ T5929] skb_copy_datagram_from_iter+0xf2/0x6f0
[ 85.098802][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 85.103998][ T5929] ? skb_put+0x112/0x210
[ 85.108222][ T5929] unix_dgram_sendmsg+0x659/0x16e0
[ 85.113314][ T5929] ? aa_af_perm+0x330/0x330
[ 85.117798][ T5929] ? unix_dgram_poll+0x680/0x680
[ 85.122713][ T5929] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 85.129122][ T5929] ? apparmor_socket_sendmsg+0x8e/0x330
[ 85.134656][ T5929] ? unix_seqpacket_sendmsg+0x10c/0x1e0
[ 85.140182][ T5929] ? unix_dgram_peer_wake_me+0x430/0x430
[ 85.145802][ T5929] ____sys_sendmsg+0x61b/0x980
[ 85.150552][ T5929] ? __asan_memset+0x22/0x40
[ 85.155125][ T5929] ? __sys_sendmsg_sock+0x30/0x30
[ 85.160145][ T5929] ? __import_iovec+0x3fa/0x850
[ 85.164981][ T5929] ? import_iovec+0x73/0xa0
[ 85.169474][ T5929] ___sys_sendmsg+0x2a6/0x360
[ 85.174147][ T5929] ? __sys_sendmsg+0x2b0/0x2b0
[ 85.178912][ T5929] ? futex_wake+0x3fa/0x4f0
[ 85.183403][ T5929] ? init_file+0x12c/0x1f0
[ 85.187805][ T5929] ? alloc_file+0x87/0x600
[ 85.192210][ T5929] __se_sys_sendmsg+0x1d0/0x2c0
[ 85.197047][ T5929] ? __x64_sys_sendmsg+0x80/0x80
[ 85.201969][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 85.207160][ T5929] do_syscall_64+0x55/0xb0
[ 85.211555][ T5929] ? clear_bhb_loop+0x40/0x90
[ 85.216217][ T5929] ? clear_bhb_loop+0x40/0x90
[ 85.220877][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 85.226764][ T5929] RIP: 0033:0x7f535b59e159
[ 85.231183][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.250774][ T5929] RSP: 002b:00007fffcb75b3e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 85.259168][ T5929] RAX: ffffffffffffffda RBX: 00007f535b825fa0 RCX: 00007f535b59e159
[ 85.267121][ T5929] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[ 85.275084][ T5929] RBP: 00007f535b635024 R08: 0000000000000000 R09: 0000000000000000
[ 85.283140][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.291090][ T5929] R13: 00007f535b825fac R14: 00007f535b825fa0 R15: 00007f535b825fa0
[ 85.299044][ T5929]
[ 85.302325][ T5929] Kernel Offset: disabled
[ 85.306637][ T5929] Rebooting in 86400 seconds..