Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
2026/09/10 00:34:50 parsed 1 programs
2026/09/10 00:34:50 serving rpc on tcp://41021
[ 98.410037][ T5787] cgroup: Unknown subsys name 'net'
[ 98.546791][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 100.039717][ T790] cfg80211: failed to load regulatory.db
[ 100.344231][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 103.716530][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.724701][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.762893][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.770900][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.120311][ T5848] chnl_net:caif_netlink_parms(): no params data found
[ 105.202626][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.210620][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.218710][ T5848] bridge_slave_0: entered allmulticast mode
[ 105.225868][ T5848] bridge_slave_0: entered promiscuous mode
[ 105.236556][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.243978][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.251331][ T5848] bridge_slave_1: entered allmulticast mode
[ 105.258591][ T5848] bridge_slave_1: entered promiscuous mode
[ 105.307772][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 105.326878][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.372446][ T5848] team0: Port device team_slave_0 added
[ 105.381260][ T5848] team0: Port device team_slave_1 added
[ 105.407313][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.414395][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.440430][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.453867][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.460908][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.486905][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.530437][ T5848] hsr_slave_0: entered promiscuous mode
[ 105.538033][ T5848] hsr_slave_1: entered promiscuous mode
[ 105.744050][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.758025][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.772979][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.807271][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.920524][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.959494][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.973674][ T998] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.981534][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.001602][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.008876][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.274715][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.352271][ T5848] veth0_vlan: entered promiscuous mode
[ 106.365783][ T5848] veth1_vlan: entered promiscuous mode
[ 106.402670][ T5848] veth0_macvtap: entered promiscuous mode
[ 106.413199][ T5848] veth1_macvtap: entered promiscuous mode
[ 106.434266][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.454165][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.472606][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.481861][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.490768][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.501985][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.695884][ T3472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.147453][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.156132][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.166805][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 107.175328][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 107.183670][ T5880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 107.191782][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/09/10 00:35:02 executed programs: 0
[ 107.978477][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.986438][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.994773][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 108.005237][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 108.013945][ T5880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 108.021854][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 108.188840][ T5889] chnl_net:caif_netlink_parms(): no params data found
[ 108.263107][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.270463][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.278017][ T5889] bridge_slave_0: entered allmulticast mode
[ 108.285531][ T5889] bridge_slave_0: entered promiscuous mode
[ 108.295298][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.302568][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.310410][ T5889] bridge_slave_1: entered allmulticast mode
[ 108.317931][ T5889] bridge_slave_1: entered promiscuous mode
[ 108.352368][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 108.368202][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.402689][ T5889] team0: Port device team_slave_0 added
[ 108.412957][ T5889] team0: Port device team_slave_1 added
[ 108.439388][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.446398][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 108.473330][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.486598][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 108.493904][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 108.520854][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 108.566557][ T5889] hsr_slave_0: entered promiscuous mode
[ 108.573065][ T5889] hsr_slave_1: entered promiscuous mode
[ 108.580301][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 108.589036][ T5889] Cannot create hsr debugfs directory
[ 109.192271][ T3472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.118164][ T5880] Bluetooth: hci0: command tx timeout
[ 111.739480][ T3472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.835176][ T3472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.201262][ T5880] Bluetooth: hci0: command tx timeout
[ 112.769577][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.783024][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 112.794785][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 112.806365][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 112.943406][ T3472] hsr_slave_0: left promiscuous mode
[ 112.951277][ T3472] hsr_slave_1: left promiscuous mode
[ 112.961388][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 112.970489][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 112.982040][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 112.989988][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 113.000890][ T3472] bridge_slave_1: left allmulticast mode
[ 113.006597][ T3472] bridge_slave_1: left promiscuous mode
[ 113.014098][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.032792][ T3472] bridge_slave_0: left allmulticast mode
[ 113.039794][ T3472] bridge_slave_0: left promiscuous mode
[ 113.045635][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.083606][ T3472] veth1_macvtap: left promiscuous mode
[ 113.091420][ T3472] veth0_macvtap: left promiscuous mode
[ 113.098912][ T3472] veth1_vlan: left promiscuous mode
[ 113.104587][ T3472] veth0_vlan: left promiscuous mode
[ 113.701351][ T3472] team0 (unregistering): Port device team_slave_1 removed
[ 113.736102][ T3472] team0 (unregistering): Port device team_slave_0 removed
[ 113.772956][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 113.807870][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 114.065916][ T3472] bond0 (unregistering): Released all slaves
[ 114.188025][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.209832][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.224348][ T170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.231591][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.261212][ T4743] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.268466][ T4743] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.285900][ T5880] Bluetooth: hci0: command tx timeout
[ 114.543600][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.604679][ T5889] veth0_vlan: entered promiscuous mode
[ 114.617158][ T5889] veth1_vlan: entered promiscuous mode
[ 114.656399][ T5889] veth0_macvtap: entered promiscuous mode
[ 114.679266][ T5889] veth1_macvtap: entered promiscuous mode
[ 114.716344][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.745507][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.763848][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.775029][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.784708][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.794185][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.873568][ T3420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.884658][ T3420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.916041][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.924225][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.006349][ T5929] ==================================================================
[ 115.014489][ T5929] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 115.023411][ T5929] Write of size 4 at addr ffff88802ccdf330 by task syz.0.17/5929
[ 115.031142][ T5929]
[ 115.033493][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 115.040701][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 115.050860][ T5929] Call Trace:
[ 115.054157][ T5929]
[ 115.057116][ T5929] dump_stack_lvl+0x18c/0x250
[ 115.061844][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 115.066887][ T5929] ? show_regs_print_info+0x20/0x20
[ 115.072112][ T5929] ? load_image+0x420/0x420
[ 115.076658][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 115.081816][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 115.086970][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 115.092116][ T5929] print_report+0xa8/0x210
[ 115.096561][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 115.102749][ T5929] kasan_report+0x117/0x150
[ 115.107282][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 115.113495][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 115.119517][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 115.124662][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 115.129833][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 115.135146][ T5929] ? perf_reg_abi+0x62/0x90
[ 115.139673][ T5929] __bpf_get_stackid+0x564/0x900
[ 115.144675][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 115.149730][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 115.155289][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 115.160527][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 115.165841][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 115.171157][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 115.177432][ T5929] __perf_event_overflow+0x461/0x660
[ 115.182780][ T5929] perf_swevent_event+0x319/0x570
[ 115.187838][ T5929] ? perf_tp_event+0x1550/0x1550
[ 115.192805][ T5929] ___perf_sw_event+0x4ab/0x730
[ 115.197683][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 115.202754][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 115.209211][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 115.214268][ T5929] ? rep_movs_alternative+0x33/0x90
[ 115.219507][ T5929] ? verify_lock_unused+0x140/0x140
[ 115.224737][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 115.230748][ T5929] ? arch_stack_walk+0x160/0x190
[ 115.235755][ T5929] ? lock_chain_count+0x20/0x20
[ 115.240650][ T5929] __perf_sw_event+0x139/0x270
[ 115.245452][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 115.250689][ T5929] ? rcu_is_watching+0x15/0xb0
[ 115.255484][ T5929] exc_page_fault+0x64/0x100
[ 115.260112][ T5929] asm_exc_page_fault+0x26/0x30
[ 115.264992][ T5929] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 115.270848][ T5929] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 115.290484][ T5929] RSP: 0018:ffffc90002e67310 EFLAGS: 00050206
[ 115.296575][ T5929] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[ 115.304564][ T5929] RDX: 0000000000000000 RSI: ffff88805f28868c RDI: 000020000000cf3d
[ 115.312564][ T5929] RBP: ffff88805f288668 R08: ffff88805f288696 R09: 1ffff1100be510d2
[ 115.320575][ T5929] R10: dffffc0000000000 R11: ffffed100be510d3 R12: 000020000000cf48
[ 115.328575][ T5929] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88805f28868c
[ 115.336585][ T5929] _copy_to_user+0x85/0xa0
[ 115.341032][ T5929] bpf_verifier_vlog+0x2f1/0x840
[ 115.346012][ T5929] verbose+0x11e/0x1a0
[ 115.350112][ T5929] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 115.355686][ T5929] ? kvmalloc_node+0x70/0x180
[ 115.360393][ T5929] ? add_subprog+0x2c0/0x3d0
[ 115.365013][ T5929] bpf_check+0x304e/0xec30
[ 115.369471][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 115.374531][ T5929] ? bpf_get_btf_vmlinux+0x20/0x20
[ 115.379674][ T5929] ? __lock_acquire+0x1262/0x7d80
[ 115.384726][ T5929] ? mark_lock+0x94/0x320
[ 115.389083][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 115.394141][ T5929] ? verify_lock_unused+0x140/0x140
[ 115.399383][ T5929] ? verify_lock_unused+0x140/0x140
[ 115.404610][ T5929] ? verify_lock_unused+0x140/0x140
[ 115.409836][ T5929] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 115.415681][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 115.421682][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 115.426731][ T5929] ? lock_chain_count+0x20/0x20
[ 115.431614][ T5929] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 115.437887][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 115.443117][ T5929] ? ktime_get_with_offset+0x103/0x330
[ 115.448601][ T5929] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 115.454869][ T5929] ? ktime_get_real_ts64+0x440/0x440
[ 115.460186][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 115.465437][ T5929] ? bpf_obj_name_cpy+0x194/0x1e0
[ 115.470493][ T5929] bpf_prog_load+0x10fa/0x1610
[ 115.475285][ T5929] ? map_freeze+0x420/0x420
[ 115.479817][ T5929] ? __might_fault+0xaa/0x120
[ 115.484520][ T5929] ? __might_fault+0xc6/0x120
[ 115.489252][ T5929] ? __might_fault+0xaa/0x120
[ 115.493969][ T5929] ? bpf_lsm_bpf+0x9/0x10
[ 115.498325][ T5929] ? security_bpf+0x7e/0xa0
[ 115.502860][ T5929] __sys_bpf+0x5ba/0x890
[ 115.507128][ T5929] ? bpf_link_show_fdinfo+0x390/0x390
[ 115.512534][ T5929] ? lock_chain_count+0x20/0x20
[ 115.517411][ T5929] __x64_sys_bpf+0x7c/0x90
[ 115.521849][ T5929] do_syscall_64+0x55/0xb0
[ 115.526296][ T5929] ? clear_bhb_loop+0x40/0x90
[ 115.531019][ T5929] ? clear_bhb_loop+0x40/0x90
[ 115.535725][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 115.541674][ T5929] RIP: 0033:0x7f2b3459e159
[ 115.546117][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 115.565752][ T5929] RSP: 002b:00007ffeb94f4308 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 115.574193][ T5929] RAX: ffffffffffffffda RBX: 00007f2b34825fa0 RCX: 00007f2b3459e159
[ 115.582196][ T5929] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 115.590186][ T5929] RBP: 00007f2b3463503b R08: 0000000000000000 R09: 0000000000000000
[ 115.598179][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 115.606166][ T5929] R13: 00007f2b34825fac R14: 00007f2b34825fa0 R15: 00007f2b34825fa0
[ 115.614166][ T5929]
[ 115.617208][ T5929]
[ 115.619550][ T5929] Allocated by task 5929:
[ 115.623910][ T5929] kasan_set_track+0x4e/0x70
[ 115.628534][ T5929] __kasan_kmalloc+0x8f/0xa0
[ 115.633152][ T5929] __kmalloc_node+0xb6/0x240
[ 115.637770][ T5929] bpf_map_area_alloc+0x5e/0x110
[ 115.642735][ T5929] prealloc_elems_and_freelist+0x86/0x1c0
[ 115.648488][ T5929] stack_map_alloc+0x32b/0x4b0
[ 115.653299][ T5929] map_create+0x877/0x12f0
[ 115.657743][ T5929] __sys_bpf+0x651/0x890
[ 115.662027][ T5929] __x64_sys_bpf+0x7c/0x90
[ 115.666462][ T5929] do_syscall_64+0x55/0xb0
[ 115.670931][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 115.676849][ T5929]
[ 115.679191][ T5929] The buggy address belongs to the object at ffff88802ccdf000
[ 115.679191][ T5929] which belongs to the cache kmalloc-cg-1k of size 1024
[ 115.693522][ T5929] The buggy address is located 0 bytes to the right of
[ 115.693522][ T5929] allocated 816-byte region [ffff88802ccdf000, ffff88802ccdf330)
[ 115.708032][ T5929]
[ 115.710377][ T5929] The buggy address belongs to the physical page:
[ 115.716830][ T5929] page:ffffea0000b33600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ccd8
[ 115.727011][ T5929] head:ffffea0000b33600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 115.735969][ T5929] memcg:ffff888075224601
[ 115.740223][ T5929] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 115.748221][ T5929] page_type: 0xffffffff()
[ 115.752613][ T5929] raw: 00fff00000000840 ffff888017c4f280 ffffea0001e75800 0000000000000002
[ 115.761216][ T5929] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888075224601
[ 115.769817][ T5929] page dumped because: kasan: bad access detected
[ 115.776258][ T5929] page_owner tracks the page as allocated
[ 115.781987][ T5929] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5698, tgid 5698 (dhcpcd-run-hook), ts 79914803046, free_ts 79858521179
[ 115.803636][ T5929] post_alloc_hook+0x1c1/0x200
[ 115.808436][ T5929] get_page_from_freelist+0x2181/0x22a0
[ 115.814009][ T5929] __alloc_pages+0x1f0/0x460
[ 115.818618][ T5929] alloc_slab_page+0x5d/0x180
[ 115.823317][ T5929] new_slab+0x87/0x2d0
[ 115.827406][ T5929] ___slab_alloc+0xc5c/0x12f0
[ 115.832100][ T5929] __kmem_cache_alloc_node+0x11f/0x250
[ 115.837602][ T5929] __kmalloc+0xa7/0x240
[ 115.841815][ T5929] alloc_pipe_info+0x1f9/0x4b0
[ 115.846613][ T5929] create_pipe_files+0x87/0x700
[ 115.851490][ T5929] __do_pipe_flags+0x4c/0x2c0
[ 115.856194][ T5929] do_pipe2+0xab/0x190
[ 115.860293][ T5929] __x64_sys_pipe2+0x5a/0x70
[ 115.864927][ T5929] do_syscall_64+0x55/0xb0
[ 115.869368][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 115.875308][ T5929] page last free stack trace:
[ 115.879997][ T5929] free_unref_page_prepare+0x7d7/0x8f0
[ 115.885477][ T5929] free_unref_page+0x32/0x2e0
[ 115.890175][ T5929] __unfreeze_partials+0x1cf/0x210
[ 115.895305][ T5929] put_cpu_partial+0x17c/0x250
[ 115.900085][ T5929] __slab_free+0x319/0x400
[ 115.904552][ T5929] qlist_free_all+0x75/0xd0
[ 115.909104][ T5929] kasan_quarantine_reduce+0x143/0x160
[ 115.914609][ T5929] __kasan_slab_alloc+0x22/0x80
[ 115.919492][ T5929] slab_post_alloc_hook+0x6a/0x4d0
[ 115.924639][ T5929] kmem_cache_alloc+0x17e/0x2c0
[ 115.929546][ T5929] vm_area_alloc+0x24/0x1d0
[ 115.934077][ T5929] mmap_region+0xcfa/0x2090
[ 115.938722][ T5929] do_mmap+0x98f/0x10a0
[ 115.942918][ T5929] vm_mmap_pgoff+0x1c4/0x3f0
[ 115.947541][ T5929] ksys_mmap_pgoff+0x4c9/0x720
[ 115.952340][ T5929] do_syscall_64+0x55/0xb0
[ 115.956793][ T5929]
[ 115.959143][ T5929] Memory state around the buggy address:
[ 115.964791][ T5929] ffff88802ccdf200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 115.972872][ T5929] ffff88802ccdf280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 115.980952][ T5929] >ffff88802ccdf300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 115.989034][ T5929] ^
[ 115.994681][ T5929] ffff88802ccdf380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.002759][ T5929] ffff88802ccdf400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.010845][ T5929] ==================================================================
[ 116.018924][ T5929] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 116.026131][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 116.033371][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.043479][ T5929] Call Trace:
[ 116.046793][ T5929]
[ 116.049746][ T5929] dump_stack_lvl+0x18c/0x250
[ 116.054466][ T5929] ? show_regs_print_info+0x20/0x20
[ 116.059690][ T5929] ? load_image+0x420/0x420
[ 116.064221][ T5929] panic+0x2ca/0x720
[ 116.068149][ T5929] ? bpf_jit_dump+0xd0/0xd0
[ 116.072683][ T5929] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 116.078600][ T5929] ? _raw_spin_unlock+0x40/0x40
[ 116.083467][ T5929] ? print_memory_metadata+0x314/0x400
[ 116.088971][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 116.095158][ T5929] check_panic_on_warn+0x84/0xa0
[ 116.100125][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 116.106310][ T5929] end_report+0x6f/0x130
[ 116.110585][ T5929] kasan_report+0x128/0x150
[ 116.115141][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 116.121326][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 116.127336][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 116.132487][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 116.137628][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 116.142849][ T5929] ? perf_reg_abi+0x62/0x90
[ 116.147375][ T5929] __bpf_get_stackid+0x564/0x900
[ 116.152351][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 116.157420][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 116.162928][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 116.168158][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 116.173473][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 116.178790][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 116.185054][ T5929] __perf_event_overflow+0x461/0x660
[ 116.190365][ T5929] perf_swevent_event+0x319/0x570
[ 116.195511][ T5929] ? perf_tp_event+0x1550/0x1550
[ 116.200480][ T5929] ___perf_sw_event+0x4ab/0x730
[ 116.205357][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 116.210407][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 116.216873][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 116.221933][ T5929] ? rep_movs_alternative+0x33/0x90
[ 116.227174][ T5929] ? verify_lock_unused+0x140/0x140
[ 116.232410][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 116.238459][ T5929] ? arch_stack_walk+0x160/0x190
[ 116.243431][ T5929] ? lock_chain_count+0x20/0x20
[ 116.248305][ T5929] __perf_sw_event+0x139/0x270
[ 116.253100][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 116.258330][ T5929] ? rcu_is_watching+0x15/0xb0
[ 116.263122][ T5929] exc_page_fault+0x64/0x100
[ 116.267745][ T5929] asm_exc_page_fault+0x26/0x30
[ 116.272620][ T5929] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 116.278478][ T5929] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 116.298126][ T5929] RSP: 0018:ffffc90002e67310 EFLAGS: 00050206
[ 116.304228][ T5929] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[ 116.312229][ T5929] RDX: 0000000000000000 RSI: ffff88805f28868c RDI: 000020000000cf3d
[ 116.320237][ T5929] RBP: ffff88805f288668 R08: ffff88805f288696 R09: 1ffff1100be510d2
[ 116.328264][ T5929] R10: dffffc0000000000 R11: ffffed100be510d3 R12: 000020000000cf48
[ 116.336267][ T5929] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88805f28868c
[ 116.344367][ T5929] _copy_to_user+0x85/0xa0
[ 116.348825][ T5929] bpf_verifier_vlog+0x2f1/0x840
[ 116.353801][ T5929] verbose+0x11e/0x1a0
[ 116.357905][ T5929] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 116.363500][ T5929] ? kvmalloc_node+0x70/0x180
[ 116.368209][ T5929] ? add_subprog+0x2c0/0x3d0
[ 116.372840][ T5929] bpf_check+0x304e/0xec30
[ 116.377297][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 116.382354][ T5929] ? bpf_get_btf_vmlinux+0x20/0x20
[ 116.387496][ T5929] ? __lock_acquire+0x1262/0x7d80
[ 116.392551][ T5929] ? mark_lock+0x94/0x320
[ 116.396909][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 116.401991][ T5929] ? verify_lock_unused+0x140/0x140
[ 116.407217][ T5929] ? verify_lock_unused+0x140/0x140
[ 116.412525][ T5929] ? verify_lock_unused+0x140/0x140
[ 116.417755][ T5929] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 116.423599][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 116.429609][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 116.434663][ T5929] ? lock_chain_count+0x20/0x20
[ 116.439542][ T5929] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 116.445814][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 116.451046][ T5929] ? ktime_get_with_offset+0x103/0x330
[ 116.456540][ T5929] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 116.462809][ T5929] ? ktime_get_real_ts64+0x440/0x440
[ 116.468127][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 116.473357][ T5929] ? bpf_obj_name_cpy+0x194/0x1e0
[ 116.478406][ T5929] bpf_prog_load+0x10fa/0x1610
[ 116.483204][ T5929] ? map_freeze+0x420/0x420
[ 116.487742][ T5929] ? __might_fault+0xaa/0x120
[ 116.492444][ T5929] ? __might_fault+0xc6/0x120
[ 116.497144][ T5929] ? __might_fault+0xaa/0x120
[ 116.501844][ T5929] ? bpf_lsm_bpf+0x9/0x10
[ 116.506198][ T5929] ? security_bpf+0x7e/0xa0
[ 116.510728][ T5929] __sys_bpf+0x5ba/0x890
[ 116.514995][ T5929] ? bpf_link_show_fdinfo+0x390/0x390
[ 116.520399][ T5929] ? lock_chain_count+0x20/0x20
[ 116.525366][ T5929] __x64_sys_bpf+0x7c/0x90
[ 116.529817][ T5929] do_syscall_64+0x55/0xb0
[ 116.534261][ T5929] ? clear_bhb_loop+0x40/0x90
[ 116.538962][ T5929] ? clear_bhb_loop+0x40/0x90
[ 116.543687][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 116.549630][ T5929] RIP: 0033:0x7f2b3459e159
[ 116.554066][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 116.573716][ T5929] RSP: 002b:00007ffeb94f4308 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 116.582154][ T5929] RAX: ffffffffffffffda RBX: 00007f2b34825fa0 RCX: 00007f2b3459e159
[ 116.590172][ T5929] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 116.598165][ T5929] RBP: 00007f2b3463503b R08: 0000000000000000 R09: 0000000000000000
[ 116.606154][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 116.614142][ T5929] R13: 00007f2b34825fac R14: 00007f2b34825fa0 R15: 00007f2b34825fa0
[ 116.622145][ T5929]
[ 116.625976][ T5929] Kernel Offset: disabled
[ 116.630333][ T5929] Rebooting in 86400 seconds..