Warning: Permanently added '10.128.0.179' (ED25519) to the list of known hosts.
2026/09/01 03:38:57 parsed 1 programs
2026/09/01 03:38:57 serving rpc on tcp://44405
[ 84.560092][ T5786] cgroup: Unknown subsys name 'net'
[ 84.696097][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.307873][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 88.514344][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.523796][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.538671][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.551675][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.559881][ T5807] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 88.567193][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.086650][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.096387][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.143335][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.157837][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.091928][ T27] cfg80211: failed to load regulatory.db
[ 92.219327][ T5876] chnl_net:caif_netlink_parms(): no params data found
[ 92.293798][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.301524][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.308864][ T5876] bridge_slave_0: entered allmulticast mode
[ 92.316005][ T5876] bridge_slave_0: entered promiscuous mode
[ 92.325222][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.333150][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.340887][ T5876] bridge_slave_1: entered allmulticast mode
[ 92.348411][ T5876] bridge_slave_1: entered promiscuous mode
[ 92.380816][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.397386][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.451957][ T5876] team0: Port device team_slave_0 added
[ 92.460656][ T5876] team0: Port device team_slave_1 added
[ 92.483800][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.491058][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.517057][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.530206][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.537187][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.563207][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.607072][ T5876] hsr_slave_0: entered promiscuous mode
[ 92.613583][ T5876] hsr_slave_1: entered promiscuous mode
[ 92.783956][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.795986][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.807011][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.831637][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.860621][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.868203][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.875887][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.883204][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.968860][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.988135][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.998793][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.015700][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.042072][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.049295][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.062951][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.070164][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.313788][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.387244][ T5876] veth0_vlan: entered promiscuous mode
[ 93.401392][ T5876] veth1_vlan: entered promiscuous mode
[ 93.455920][ T5876] veth0_macvtap: entered promiscuous mode
[ 93.467188][ T5876] veth1_macvtap: entered promiscuous mode
[ 93.492970][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.510392][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.528263][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.537166][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.547336][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.556213][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.765917][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/01 03:39:09 executed programs: 0
[ 94.211361][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.220653][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.229132][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.237518][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.246004][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 94.255168][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.400862][ T5896] chnl_net:caif_netlink_parms(): no params data found
[ 94.478917][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.486402][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.494001][ T5896] bridge_slave_0: entered allmulticast mode
[ 94.501283][ T5896] bridge_slave_0: entered promiscuous mode
[ 94.510517][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.517634][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.525024][ T5896] bridge_slave_1: entered allmulticast mode
[ 94.532879][ T5896] bridge_slave_1: entered promiscuous mode
[ 94.566017][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.579212][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.616925][ T5896] team0: Port device team_slave_0 added
[ 94.626652][ T5896] team0: Port device team_slave_1 added
[ 94.660503][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.667584][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.693873][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.706775][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.714170][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.740405][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.787713][ T5896] hsr_slave_0: entered promiscuous mode
[ 94.794361][ T5896] hsr_slave_1: entered promiscuous mode
[ 94.800830][ T5896] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 94.809871][ T5896] Cannot create hsr debugfs directory
[ 96.151443][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.328438][ T5084] Bluetooth: hci0: command tx timeout
[ 98.359280][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.408808][ T5084] Bluetooth: hci0: command tx timeout
[ 98.441767][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.326945][ T1100] hsr_slave_0: left promiscuous mode
[ 99.335864][ T1100] hsr_slave_1: left promiscuous mode
[ 99.342413][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.352013][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.361225][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.372099][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.382206][ T1100] bridge_slave_1: left allmulticast mode
[ 99.387901][ T1100] bridge_slave_1: left promiscuous mode
[ 99.396991][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.412545][ T1100] bridge_slave_0: left allmulticast mode
[ 99.418328][ T1100] bridge_slave_0: left promiscuous mode
[ 99.424110][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.460237][ T1100] veth1_macvtap: left promiscuous mode
[ 99.466146][ T1100] veth0_macvtap: left promiscuous mode
[ 99.476763][ T1100] veth1_vlan: left promiscuous mode
[ 99.482523][ T1100] veth0_vlan: left promiscuous mode
[ 99.929958][ T1100] team0 (unregistering): Port device team_slave_1 removed
[ 99.961158][ T1100] team0 (unregistering): Port device team_slave_0 removed
[ 99.993460][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.025404][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.237252][ T1100] bond0 (unregistering): Released all slaves
[ 100.310725][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.320909][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.331032][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.340789][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.439235][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.459267][ T5896] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.472644][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.479861][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.488214][ T5084] Bluetooth: hci0: command tx timeout
[ 100.502580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.509792][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.746329][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.792488][ T5896] veth0_vlan: entered promiscuous mode
[ 100.804043][ T5896] veth1_vlan: entered promiscuous mode
[ 100.838515][ T5896] veth0_macvtap: entered promiscuous mode
[ 100.847872][ T5896] veth1_macvtap: entered promiscuous mode
[ 100.873484][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.887071][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.903612][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.913673][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.922662][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.932646][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.999445][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.008675][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.047091][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.055356][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.113874][ T5938] ==================================================================
[ 101.122016][ T5938] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 101.130897][ T5938] Write of size 4 at addr ffff888078340330 by task syz.0.17/5938
[ 101.138621][ T5938]
[ 101.140977][ T5938] CPU: 1 PID: 5938 Comm: syz.0.17 Not tainted syzkaller #0
[ 101.148303][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 101.158388][ T5938] Call Trace:
[ 101.161678][ T5938]
[ 101.164649][ T5938] dump_stack_lvl+0x18c/0x250
[ 101.169351][ T5938] ? __lock_acquire+0x7d80/0x7d80
[ 101.174409][ T5938] ? show_regs_print_info+0x20/0x20
[ 101.179642][ T5938] ? load_image+0x420/0x420
[ 101.184176][ T5938] ? __virt_addr_valid+0x10c/0x380
[ 101.189319][ T5938] ? __virt_addr_valid+0x10c/0x380
[ 101.194450][ T5938] ? __virt_addr_valid+0x10c/0x380
[ 101.199608][ T5938] print_report+0xa8/0x210
[ 101.204043][ T5938] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 101.210230][ T5938] kasan_report+0x117/0x150
[ 101.214772][ T5938] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 101.220950][ T5938] stack_map_get_build_id_offset+0x6c0/0x720
[ 101.226981][ T5938] ? pcpu_freelist_pop+0x12a/0x190
[ 101.232125][ T5938] ? __bpf_get_stackid+0x900/0x900
[ 101.237268][ T5938] ? perf_get_regs_user+0x5bb/0x6b0
[ 101.242484][ T5938] ? perf_reg_abi+0x62/0x90
[ 101.247026][ T5938] __bpf_get_stackid+0x564/0x900
[ 101.251985][ T5938] bpf_get_stackid_pe+0x343/0x410
[ 101.257046][ T5938] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 101.262535][ T5938] bpf_overflow_handler+0x1fc/0x510
[ 101.267778][ T5938] ? bpf_overflow_handler+0xde/0x510
[ 101.273088][ T5938] ? tp_perf_event_destroy+0x20/0x20
[ 101.278415][ T5938] ? verify_lock_unused+0x140/0x140
[ 101.283640][ T5938] ? __perf_event_account_interrupt+0x187/0x280
[ 101.289905][ T5938] __perf_event_overflow+0x461/0x660
[ 101.295213][ T5938] perf_swevent_event+0x319/0x570
[ 101.300268][ T5938] ? perf_tp_event+0x1550/0x1550
[ 101.305242][ T5938] ___perf_sw_event+0x4ab/0x730
[ 101.310122][ T5938] ? ___perf_sw_event+0x19e/0x730
[ 101.315157][ T5938] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 101.321588][ T5938] ? __lock_acquire+0x1336/0x7d80
[ 101.326628][ T5938] ? rep_movs_alternative+0x4a/0x90
[ 101.331861][ T5938] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 101.337882][ T5938] ? verify_lock_unused+0x140/0x140
[ 101.343099][ T5938] ? lock_chain_count+0x20/0x20
[ 101.347967][ T5938] __perf_sw_event+0x139/0x270
[ 101.352747][ T5938] do_user_addr_fault+0x1242/0x12d0
[ 101.357995][ T5938] ? rcu_is_watching+0x15/0xb0
[ 101.362796][ T5938] exc_page_fault+0x64/0x100
[ 101.367521][ T5938] asm_exc_page_fault+0x26/0x30
[ 101.372391][ T5938] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 101.378256][ T5938] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 101.397972][ T5938] RSP: 0018:ffffc900045af858 EFLAGS: 00050206
[ 101.404075][ T5938] RAX: ffffffff84317c01 RBX: 0000000000001000 RCX: 0000000000000e80
[ 101.412067][ T5938] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888078351180
[ 101.420048][ T5938] RBP: ffffc900045af998 R08: ffff888078351fff R09: 1ffff1100f06a3ff
[ 101.428035][ T5938] R10: dffffc0000000000 R11: ffffed100f06a400 R12: ffff888078351000
[ 101.436028][ T5938] R13: 0000200000001e80 R14: ffffc900045afdb8 R15: 1ffff920008b5fb7
[ 101.444023][ T5938] ? _copy_from_iter+0x1a1/0x1290
[ 101.449079][ T5938] _copy_from_iter+0x242/0x1290
[ 101.453953][ T5938] ? __might_fault+0xaa/0x120
[ 101.458738][ T5938] ? copyout_mc+0x70/0x70
[ 101.463084][ T5938] ? copyout_mc+0x70/0x70
[ 101.467436][ T5938] ? __virt_addr_valid+0x10c/0x380
[ 101.472569][ T5938] ? page_copy_sane+0x16a/0x270
[ 101.477458][ T5938] copy_page_from_iter+0x7b/0x100
[ 101.482512][ T5938] skb_copy_datagram_from_iter+0x2ea/0x6f0
[ 101.488362][ T5938] tun_get_user+0xc84/0x3d70
[ 101.492976][ T5938] ? aa_file_perm+0x3e3/0xee0
[ 101.497676][ T5938] ? rcu_read_unlock+0xa0/0xa0
[ 101.502476][ T5938] ? tun_get+0x1c/0x2e0
[ 101.506653][ T5938] ? __lock_acquire+0x7d80/0x7d80
[ 101.511698][ T5938] ? tun_get+0x1c/0x2e0
[ 101.515873][ T5938] tun_chr_write_iter+0x119/0x200
[ 101.520919][ T5938] vfs_write+0x474/0x9a0
[ 101.525187][ T5938] ? file_end_write+0x250/0x250
[ 101.530065][ T5938] ? __ia32_sys_get_robust_list+0x110/0x110
[ 101.536006][ T5938] ? __fdget_pos+0x1d8/0x330
[ 101.540637][ T5938] ksys_write+0x151/0x260
[ 101.544992][ T5938] ? __ia32_sys_read+0x90/0x90
[ 101.549782][ T5938] ? lockdep_hardirqs_on+0x98/0x150
[ 101.555041][ T5938] do_syscall_64+0x55/0xb0
[ 101.559505][ T5938] ? clear_bhb_loop+0x40/0x90
[ 101.564205][ T5938] ? clear_bhb_loop+0x40/0x90
[ 101.568907][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.574816][ T5938] RIP: 0033:0x7ff814b9e159
[ 101.579249][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.598890][ T5938] RSP: 002b:00007ffc766237e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 101.607321][ T5938] RAX: ffffffffffffffda RBX: 00007ff814e25fa0 RCX: 00007ff814b9e159
[ 101.615329][ T5938] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 101.623318][ T5938] RBP: 00007ff814c35024 R08: 0000000000000000 R09: 0000000000000000
[ 101.631325][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.639327][ T5938] R13: 00007ff814e25fac R14: 00007ff814e25fa0 R15: 00007ff814e25fa0
[ 101.647329][ T5938]
[ 101.650390][ T5938]
[ 101.652752][ T5938] Allocated by task 5938:
[ 101.657094][ T5938] kasan_set_track+0x4e/0x70
[ 101.661721][ T5938] __kasan_kmalloc+0x8f/0xa0
[ 101.666328][ T5938] __kmalloc_node+0xb6/0x240
[ 101.670938][ T5938] bpf_map_area_alloc+0x5e/0x110
[ 101.675908][ T5938] prealloc_elems_and_freelist+0x86/0x1c0
[ 101.681667][ T5938] stack_map_alloc+0x32b/0x4b0
[ 101.686446][ T5938] map_create+0x877/0x12f0
[ 101.690878][ T5938] __sys_bpf+0x651/0x890
[ 101.695126][ T5938] __x64_sys_bpf+0x7c/0x90
[ 101.699551][ T5938] do_syscall_64+0x55/0xb0
[ 101.703988][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.709907][ T5938]
[ 101.712261][ T5938] The buggy address belongs to the object at ffff888078340000
[ 101.712261][ T5938] which belongs to the cache kmalloc-cg-1k of size 1024
[ 101.726695][ T5938] The buggy address is located 0 bytes to the right of
[ 101.726695][ T5938] allocated 816-byte region [ffff888078340000, ffff888078340330)
[ 101.741288][ T5938]
[ 101.743622][ T5938] The buggy address belongs to the physical page:
[ 101.750057][ T5938] page:ffffea0001e0d000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78340
[ 101.760246][ T5938] head:ffffea0001e0d000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 101.769191][ T5938] memcg:ffff88807c052201
[ 101.773454][ T5938] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 101.781886][ T5938] page_type: 0xffffffff()
[ 101.786254][ T5938] raw: 00fff00000000840 ffff888017c4f280 0000000000000000 0000000000000001
[ 101.794851][ T5938] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88807c052201
[ 101.803464][ T5938] page dumped because: kasan: bad access detected
[ 101.809902][ T5938] page_owner tracks the page as allocated
[ 101.815635][ T5938] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5669, tgid 5669 (dhcpcd-run-hook), ts 69984967181, free_ts 69945187452
[ 101.837282][ T5938] post_alloc_hook+0x1c1/0x200
[ 101.842077][ T5938] get_page_from_freelist+0x2181/0x22a0
[ 101.847630][ T5938] __alloc_pages+0x1f0/0x460
[ 101.852232][ T5938] alloc_slab_page+0x5d/0x180
[ 101.857025][ T5938] new_slab+0x87/0x2d0
[ 101.861159][ T5938] ___slab_alloc+0xc5c/0x12f0
[ 101.865926][ T5938] __kmem_cache_alloc_node+0x11f/0x250
[ 101.871411][ T5938] __kmalloc+0xa7/0x240
[ 101.875578][ T5938] alloc_pipe_info+0x1f9/0x4b0
[ 101.880358][ T5938] create_pipe_files+0x87/0x700
[ 101.885309][ T5938] __do_pipe_flags+0x4c/0x2c0
[ 101.890010][ T5938] do_pipe2+0xab/0x190
[ 101.894115][ T5938] __x64_sys_pipe2+0x5a/0x70
[ 101.898728][ T5938] do_syscall_64+0x55/0xb0
[ 101.903158][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.909070][ T5938] page last free stack trace:
[ 101.913760][ T5938] free_unref_page_prepare+0x7d7/0x8f0
[ 101.919257][ T5938] free_unref_page+0x32/0x2e0
[ 101.923958][ T5938] __unfreeze_partials+0x1cf/0x210
[ 101.929084][ T5938] put_cpu_partial+0x17c/0x250
[ 101.933856][ T5938] __slab_free+0x319/0x400
[ 101.938288][ T5938] qlist_free_all+0x75/0xd0
[ 101.942824][ T5938] kasan_quarantine_reduce+0x143/0x160
[ 101.948303][ T5938] __kasan_slab_alloc+0x22/0x80
[ 101.953166][ T5938] slab_post_alloc_hook+0x6a/0x4d0
[ 101.958293][ T5938] kmem_cache_alloc+0x17e/0x2c0
[ 101.963163][ T5938] getname_flags+0xbb/0x500
[ 101.967684][ T5938] do_sys_openat2+0xda/0x1d0
[ 101.972289][ T5938] __x64_sys_openat+0x139/0x160
[ 101.977148][ T5938] do_syscall_64+0x55/0xb0
[ 101.981583][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.987498][ T5938]
[ 101.989828][ T5938] Memory state around the buggy address:
[ 101.995460][ T5938] ffff888078340200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 102.003529][ T5938] ffff888078340280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 102.011606][ T5938] >ffff888078340300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 102.019682][ T5938] ^
[ 102.025319][ T5938] ffff888078340380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.033388][ T5938] ffff888078340400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.041480][ T5938] ==================================================================
[ 102.049568][ T5938] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.056766][ T5938] CPU: 1 PID: 5938 Comm: syz.0.17 Not tainted syzkaller #0
[ 102.064148][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 102.074219][ T5938] Call Trace:
[ 102.077511][ T5938]
[ 102.080467][ T5938] dump_stack_lvl+0x18c/0x250
[ 102.085169][ T5938] ? show_regs_print_info+0x20/0x20
[ 102.090390][ T5938] ? load_image+0x420/0x420
[ 102.094909][ T5938] panic+0x2ca/0x720
[ 102.098828][ T5938] ? bpf_jit_dump+0xd0/0xd0
[ 102.103358][ T5938] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 102.109269][ T5938] ? _raw_spin_unlock+0x40/0x40
[ 102.114147][ T5938] ? print_memory_metadata+0x314/0x400
[ 102.119635][ T5938] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 102.125820][ T5938] check_panic_on_warn+0x84/0xa0
[ 102.130789][ T5938] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 102.136965][ T5938] end_report+0x6f/0x130
[ 102.141249][ T5938] kasan_report+0x128/0x150
[ 102.145779][ T5938] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 102.151956][ T5938] stack_map_get_build_id_offset+0x6c0/0x720
[ 102.157982][ T5938] ? pcpu_freelist_pop+0x12a/0x190
[ 102.163128][ T5938] ? __bpf_get_stackid+0x900/0x900
[ 102.168291][ T5938] ? perf_get_regs_user+0x5bb/0x6b0
[ 102.173506][ T5938] ? perf_reg_abi+0x62/0x90
[ 102.178024][ T5938] __bpf_get_stackid+0x564/0x900
[ 102.182980][ T5938] bpf_get_stackid_pe+0x343/0x410
[ 102.188055][ T5938] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 102.193534][ T5938] bpf_overflow_handler+0x1fc/0x510
[ 102.198779][ T5938] ? bpf_overflow_handler+0xde/0x510
[ 102.204113][ T5938] ? tp_perf_event_destroy+0x20/0x20
[ 102.209434][ T5938] ? verify_lock_unused+0x140/0x140
[ 102.214648][ T5938] ? __perf_event_account_interrupt+0x187/0x280
[ 102.220909][ T5938] __perf_event_overflow+0x461/0x660
[ 102.226214][ T5938] perf_swevent_event+0x319/0x570
[ 102.231257][ T5938] ? perf_tp_event+0x1550/0x1550
[ 102.236227][ T5938] ___perf_sw_event+0x4ab/0x730
[ 102.241102][ T5938] ? ___perf_sw_event+0x19e/0x730
[ 102.246148][ T5938] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 102.252581][ T5938] ? __lock_acquire+0x1336/0x7d80
[ 102.257627][ T5938] ? rep_movs_alternative+0x4a/0x90
[ 102.262880][ T5938] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 102.268877][ T5938] ? verify_lock_unused+0x140/0x140
[ 102.274089][ T5938] ? lock_chain_count+0x20/0x20
[ 102.278963][ T5938] __perf_sw_event+0x139/0x270
[ 102.283743][ T5938] do_user_addr_fault+0x1242/0x12d0
[ 102.288969][ T5938] ? rcu_is_watching+0x15/0xb0
[ 102.293759][ T5938] exc_page_fault+0x64/0x100
[ 102.298372][ T5938] asm_exc_page_fault+0x26/0x30
[ 102.303240][ T5938] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 102.309084][ T5938] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 102.328705][ T5938] RSP: 0018:ffffc900045af858 EFLAGS: 00050206
[ 102.334788][ T5938] RAX: ffffffff84317c01 RBX: 0000000000001000 RCX: 0000000000000e80
[ 102.342772][ T5938] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888078351180
[ 102.350761][ T5938] RBP: ffffc900045af998 R08: ffff888078351fff R09: 1ffff1100f06a3ff
[ 102.358747][ T5938] R10: dffffc0000000000 R11: ffffed100f06a400 R12: ffff888078351000
[ 102.366731][ T5938] R13: 0000200000001e80 R14: ffffc900045afdb8 R15: 1ffff920008b5fb7
[ 102.374718][ T5938] ? _copy_from_iter+0x1a1/0x1290
[ 102.379770][ T5938] _copy_from_iter+0x242/0x1290
[ 102.384648][ T5938] ? __might_fault+0xaa/0x120
[ 102.389375][ T5938] ? copyout_mc+0x70/0x70
[ 102.393725][ T5938] ? copyout_mc+0x70/0x70
[ 102.398078][ T5938] ? __virt_addr_valid+0x10c/0x380
[ 102.403211][ T5938] ? page_copy_sane+0x16a/0x270
[ 102.408095][ T5938] copy_page_from_iter+0x7b/0x100
[ 102.413139][ T5938] skb_copy_datagram_from_iter+0x2ea/0x6f0
[ 102.418982][ T5938] tun_get_user+0xc84/0x3d70
[ 102.423598][ T5938] ? aa_file_perm+0x3e3/0xee0
[ 102.428317][ T5938] ? rcu_read_unlock+0xa0/0xa0
[ 102.433100][ T5938] ? tun_get+0x1c/0x2e0
[ 102.437276][ T5938] ? __lock_acquire+0x7d80/0x7d80
[ 102.442322][ T5938] ? tun_get+0x1c/0x2e0
[ 102.446501][ T5938] tun_chr_write_iter+0x119/0x200
[ 102.451558][ T5938] vfs_write+0x474/0x9a0
[ 102.455862][ T5938] ? file_end_write+0x250/0x250
[ 102.460764][ T5938] ? __ia32_sys_get_robust_list+0x110/0x110
[ 102.466675][ T5938] ? __fdget_pos+0x1d8/0x330
[ 102.471291][ T5938] ksys_write+0x151/0x260
[ 102.475635][ T5938] ? __ia32_sys_read+0x90/0x90
[ 102.480417][ T5938] ? lockdep_hardirqs_on+0x98/0x150
[ 102.485636][ T5938] do_syscall_64+0x55/0xb0
[ 102.490086][ T5938] ? clear_bhb_loop+0x40/0x90
[ 102.494793][ T5938] ? clear_bhb_loop+0x40/0x90
[ 102.499494][ T5938] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 102.505400][ T5938] RIP: 0033:0x7ff814b9e159
[ 102.509839][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.529461][ T5938] RSP: 002b:00007ffc766237e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 102.537894][ T5938] RAX: ffffffffffffffda RBX: 00007ff814e25fa0 RCX: 00007ff814b9e159
[ 102.545881][ T5938] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[ 102.553872][ T5938] RBP: 00007ff814c35024 R08: 0000000000000000 R09: 0000000000000000
[ 102.561860][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.569847][ T5938] R13: 00007ff814e25fac R14: 00007ff814e25fa0 R15: 00007ff814e25fa0
[ 102.577843][ T5938]
[ 102.581452][ T5938] Kernel Offset: disabled
[ 102.585796][ T5938] Rebooting in 86400 seconds..