Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts.
2026/09/07 16:46:56 parsed 1 programs
2026/09/07 16:46:56 serving rpc on tcp://35805
[ 91.702321][ T5788] cgroup: Unknown subsys name 'net'
[ 91.845844][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.249226][ T789] cfg80211: failed to load regulatory.db
[ 93.604399][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.652236][ T5822] chnl_net:caif_netlink_parms(): no params data found
[ 96.748641][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.755825][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.764287][ T5822] bridge_slave_0: entered allmulticast mode
[ 96.771648][ T5822] bridge_slave_0: entered promiscuous mode
[ 96.781858][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.790504][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.798946][ T5822] bridge_slave_1: entered allmulticast mode
[ 96.806233][ T5822] bridge_slave_1: entered promiscuous mode
[ 96.839518][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.851482][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.883288][ T5822] team0: Port device team_slave_0 added
[ 96.891309][ T5822] team0: Port device team_slave_1 added
[ 96.917868][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.924869][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.950911][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.963967][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.971074][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.998127][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.058311][ T5822] hsr_slave_0: entered promiscuous mode
[ 97.069435][ T5822] hsr_slave_1: entered promiscuous mode
[ 97.233804][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.246506][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.259326][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.279652][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.313179][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.320572][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.328819][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.336087][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.416179][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.441398][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.451661][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.474112][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.490148][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.497322][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.511819][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.519049][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.749022][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.808965][ T5822] veth0_vlan: entered promiscuous mode
[ 97.829080][ T5822] veth1_vlan: entered promiscuous mode
[ 97.864771][ T5822] veth0_macvtap: entered promiscuous mode
[ 97.884202][ T5822] veth1_macvtap: entered promiscuous mode
[ 97.905751][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.924178][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.937378][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.946269][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.956391][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.965593][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.142851][ T3500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.244878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.260866][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.292138][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.300185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.991585][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.000599][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.009141][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.019942][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.028692][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.036110][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/09/07 16:47:07 executed programs: 0
[ 100.783027][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.794058][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.801936][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.811035][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.819272][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.826609][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.858062][ T3500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.014657][ T5891] chnl_net:caif_netlink_parms(): no params data found
[ 101.090452][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.097915][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.105312][ T5891] bridge_slave_0: entered allmulticast mode
[ 101.112660][ T5891] bridge_slave_0: entered promiscuous mode
[ 101.121631][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.132227][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.139790][ T5891] bridge_slave_1: entered allmulticast mode
[ 101.147626][ T5891] bridge_slave_1: entered promiscuous mode
[ 101.180156][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.192181][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.227627][ T5891] team0: Port device team_slave_0 added
[ 101.237269][ T5891] team0: Port device team_slave_1 added
[ 101.263195][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.270241][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.297145][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.310300][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.317752][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.343866][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.390243][ T5891] hsr_slave_0: entered promiscuous mode
[ 101.398193][ T5891] hsr_slave_1: entered promiscuous mode
[ 101.405631][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 101.413901][ T5891] Cannot create hsr debugfs directory
[ 102.888262][ T51] Bluetooth: hci0: command tx timeout
[ 103.221105][ T3500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.302757][ T3500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.220808][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.232583][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.264006][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.275341][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.314123][ T3500] hsr_slave_0: left promiscuous mode
[ 104.323501][ T3500] hsr_slave_1: left promiscuous mode
[ 104.331751][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 104.342613][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 104.353482][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 104.363691][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 104.372982][ T3500] bridge_slave_1: left allmulticast mode
[ 104.381429][ T3500] bridge_slave_1: left promiscuous mode
[ 104.388696][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.403911][ T3500] bridge_slave_0: left allmulticast mode
[ 104.412551][ T3500] bridge_slave_0: left promiscuous mode
[ 104.420684][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.455832][ T3500] veth1_macvtap: left promiscuous mode
[ 104.466009][ T3500] veth0_macvtap: left promiscuous mode
[ 104.471944][ T3500] veth1_vlan: left promiscuous mode
[ 104.481643][ T3500] veth0_vlan: left promiscuous mode
[ 104.977603][ T51] Bluetooth: hci0: command tx timeout
[ 104.991364][ T3500] team0 (unregistering): Port device team_slave_1 removed
[ 105.028764][ T3500] team0 (unregistering): Port device team_slave_0 removed
[ 105.070431][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.106499][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.366192][ T3500] bond0 (unregistering): Released all slaves
[ 105.544874][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.569643][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.593195][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.600799][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.619435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.626689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.696773][ T5891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 105.886481][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.956309][ T5891] veth0_vlan: entered promiscuous mode
[ 105.974446][ T5891] veth1_vlan: entered promiscuous mode
[ 106.030734][ T5891] veth0_macvtap: entered promiscuous mode
[ 106.069840][ T5891] veth1_macvtap: entered promiscuous mode
[ 106.103535][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.129444][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.145831][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.158149][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.177411][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.186233][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.371297][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.385932][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/07 16:47:13 executed programs: 2
[ 106.425816][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.435419][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.780141][ T5935] ==================================================================
[ 106.788293][ T5935] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 106.797221][ T5935] Write of size 4 at addr ffff88807b24db30 by task syz.0.20/5935
[ 106.804990][ T5935]
[ 106.807387][ T5935] CPU: 1 PID: 5935 Comm: syz.0.20 Not tainted syzkaller #0
[ 106.814834][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 106.824937][ T5935] Call Trace:
[ 106.828231][ T5935]
[ 106.831434][ T5935] dump_stack_lvl+0x18c/0x250
[ 106.836135][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 106.841219][ T5935] ? show_regs_print_info+0x20/0x20
[ 106.846451][ T5935] ? load_image+0x420/0x420
[ 106.850965][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 106.856614][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 106.861788][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 106.866934][ T5935] print_report+0xa8/0x210
[ 106.871382][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.877639][ T5935] kasan_report+0x117/0x150
[ 106.882177][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.888379][ T5935] stack_map_get_build_id_offset+0x6c0/0x720
[ 106.894410][ T5935] ? pcpu_freelist_pop+0x12a/0x190
[ 106.899544][ T5935] ? __bpf_get_stackid+0x900/0x900
[ 106.904690][ T5935] ? perf_get_regs_user+0x5bb/0x6b0
[ 106.909905][ T5935] ? perf_reg_abi+0x62/0x90
[ 106.914419][ T5935] __bpf_get_stackid+0x564/0x900
[ 106.919382][ T5935] bpf_get_stackid_pe+0x343/0x410
[ 106.924423][ T5935] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 106.929928][ T5935] bpf_overflow_handler+0x1fc/0x510
[ 106.935171][ T5935] ? bpf_overflow_handler+0xde/0x510
[ 106.940593][ T5935] ? tp_perf_event_destroy+0x20/0x20
[ 106.945907][ T5935] ? mark_lock+0x94/0x320
[ 106.950316][ T5935] ? __perf_event_account_interrupt+0x187/0x280
[ 106.956595][ T5935] __perf_event_overflow+0x461/0x660
[ 106.961922][ T5935] perf_swevent_event+0x319/0x570
[ 106.966981][ T5935] ? perf_tp_event+0x1550/0x1550
[ 106.971936][ T5935] ___perf_sw_event+0x4ab/0x730
[ 106.976815][ T5935] ? ___perf_sw_event+0x19e/0x730
[ 106.981875][ T5935] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 106.988313][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 106.993376][ T5935] ? rep_movs_alternative+0x15/0x90
[ 106.998623][ T5935] ? verify_lock_unused+0x140/0x140
[ 107.003858][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 107.009857][ T5935] ? deref_stack_reg+0x1ab/0x230
[ 107.014814][ T5935] ? lock_chain_count+0x20/0x20
[ 107.019687][ T5935] __perf_sw_event+0x139/0x270
[ 107.024488][ T5935] do_user_addr_fault+0x1242/0x12d0
[ 107.029808][ T5935] ? rcu_is_watching+0x15/0xb0
[ 107.034593][ T5935] exc_page_fault+0x64/0x100
[ 107.039215][ T5935] asm_exc_page_fault+0x26/0x30
[ 107.044116][ T5935] RIP: 0010:rep_movs_alternative+0x15/0x90
[ 107.049957][ T5935] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[ 107.069581][ T5935] RSP: 0018:ffffc900033d6f50 EFLAGS: 00050206
[ 107.075672][ T5935] RAX: ffffffff8433ce30 RBX: 0000000000000003 RCX: 0000000000000003
[ 107.083855][ T5935] RDX: 0000000000000000 RSI: ffff88807b60068c RDI: 000020000000cf3d
[ 107.087665][ T51] Bluetooth: hci0: command tx timeout
[ 107.091832][ T5935] RBP: ffff88807b600668 R08: ffff88807b60068e R09: 1ffff1100f6c00d1
[ 107.105251][ T5935] R10: dffffc0000000000 R11: ffffed100f6c00d2 R12: 000020000000cf40
[ 107.113257][ T5935] R13: 0000000000000003 R14: 000020000000cf3d R15: ffff88807b60068c
[ 107.121282][ T5935] ? _copy_to_user+0x20/0xa0
[ 107.125929][ T5935] _copy_to_user+0x85/0xa0
[ 107.130392][ T5935] bpf_verifier_vlog+0x2f1/0x840
[ 107.135368][ T5935] verbose+0x11e/0x1a0
[ 107.139479][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 107.145062][ T5935] ? __kernel_text_address+0xd/0x30
[ 107.150280][ T5935] ? unwind_get_return_address+0x91/0xc0
[ 107.155921][ T5935] ? stack_trace_save+0x100/0x100
[ 107.160961][ T5935] ? arch_stack_walk+0x160/0x190
[ 107.165916][ T5935] print_insn_state+0x130/0x160
[ 107.170787][ T5935] do_check+0x4f08/0xd0a0
[ 107.175158][ T5935] ? stack_trace_snprint+0xf0/0xf0
[ 107.180285][ T5935] ? __stack_depot_save+0x1f/0x660
[ 107.185415][ T5935] ? kasan_set_track+0x5f/0x70
[ 107.190208][ T5935] ? __kasan_kmalloc+0x8f/0xa0
[ 107.195023][ T5935] ? __sys_bpf+0x5ba/0x890
[ 107.199463][ T5935] ? __x64_sys_bpf+0x7c/0x90
[ 107.204066][ T5935] ? do_syscall_64+0x55/0xb0
[ 107.208679][ T5935] ? init_func_state+0x2d10/0x2d10
[ 107.213823][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 107.219407][ T5935] ? print_verifier_state+0x2e70/0x2e70
[ 107.224971][ T5935] ? init_func_state+0x1dc6/0x2d10
[ 107.230095][ T5935] ? btf_check_subprog_arg_match+0x142/0x2a0
[ 107.236094][ T5935] do_check_common+0xacc/0x1410
[ 107.240978][ T5935] bpf_check+0x65d1/0xec30
[ 107.245467][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 107.250635][ T5935] ? bpf_get_btf_vmlinux+0x20/0x20
[ 107.255801][ T5935] ? __lock_acquire+0x1262/0x7d80
[ 107.261294][ T5935] ? mark_lock+0x94/0x320
[ 107.265645][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 107.270713][ T5935] ? verify_lock_unused+0x140/0x140
[ 107.275929][ T5935] ? verify_lock_unused+0x140/0x140
[ 107.281136][ T5935] ? verify_lock_unused+0x140/0x140
[ 107.286346][ T5935] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 107.292194][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 107.298190][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 107.303228][ T5935] ? lock_chain_count+0x20/0x20
[ 107.308112][ T5935] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 107.314393][ T5935] ? lockdep_hardirqs_on+0x98/0x150
[ 107.319741][ T5935] ? ktime_get_with_offset+0x103/0x330
[ 107.325317][ T5935] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 107.331581][ T5935] ? ktime_get_real_ts64+0x440/0x440
[ 107.336899][ T5935] ? do_raw_spin_unlock+0x121/0x230
[ 107.342170][ T5935] ? bpf_obj_name_cpy+0x194/0x1e0
[ 107.347237][ T5935] bpf_prog_load+0x10fa/0x1610
[ 107.352025][ T5935] ? map_freeze+0x420/0x420
[ 107.356553][ T5935] ? __might_fault+0xaa/0x120
[ 107.361258][ T5935] ? __might_fault+0xc6/0x120
[ 107.365985][ T5935] ? __might_fault+0xaa/0x120
[ 107.370777][ T5935] ? bpf_lsm_bpf+0x9/0x10
[ 107.375145][ T5935] ? security_bpf+0x7e/0xa0
[ 107.379687][ T5935] __sys_bpf+0x5ba/0x890
[ 107.383944][ T5935] ? bpf_link_show_fdinfo+0x390/0x390
[ 107.389353][ T5935] ? lock_chain_count+0x20/0x20
[ 107.394245][ T5935] __x64_sys_bpf+0x7c/0x90
[ 107.398684][ T5935] do_syscall_64+0x55/0xb0
[ 107.403228][ T5935] ? clear_bhb_loop+0x40/0x90
[ 107.407935][ T5935] ? clear_bhb_loop+0x40/0x90
[ 107.412633][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.418553][ T5935] RIP: 0033:0x7f2995f9e159
[ 107.422989][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.442610][ T5935] RSP: 002b:00007ffd1d93af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 107.451039][ T5935] RAX: ffffffffffffffda RBX: 00007f2996225fa0 RCX: 00007f2995f9e159
[ 107.459026][ T5935] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 107.467009][ T5935] RBP: 00007f2996035024 R08: 0000000000000000 R09: 0000000000000000
[ 107.474990][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.482989][ T5935] R13: 00007f2996225fac R14: 00007f2996225fa0 R15: 00007f2996225fa0
[ 107.490998][ T5935]
[ 107.494038][ T5935]
[ 107.496398][ T5935] Allocated by task 5935:
[ 107.500747][ T5935] kasan_set_track+0x4e/0x70
[ 107.505379][ T5935] __kasan_kmalloc+0x8f/0xa0
[ 107.509994][ T5935] __kmalloc_node+0xb6/0x240
[ 107.514646][ T5935] bpf_map_area_alloc+0x5e/0x110
[ 107.519635][ T5935] prealloc_elems_and_freelist+0x86/0x1c0
[ 107.525396][ T5935] stack_map_alloc+0x32b/0x4b0
[ 107.530193][ T5935] map_create+0x877/0x12f0
[ 107.534636][ T5935] __sys_bpf+0x651/0x890
[ 107.538914][ T5935] __x64_sys_bpf+0x7c/0x90
[ 107.543387][ T5935] do_syscall_64+0x55/0xb0
[ 107.547832][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.553735][ T5935]
[ 107.556066][ T5935] The buggy address belongs to the object at ffff88807b24d800
[ 107.556066][ T5935] which belongs to the cache kmalloc-cg-1k of size 1024
[ 107.570483][ T5935] The buggy address is located 0 bytes to the right of
[ 107.570483][ T5935] allocated 816-byte region [ffff88807b24d800, ffff88807b24db30)
[ 107.584995][ T5935]
[ 107.587345][ T5935] The buggy address belongs to the physical page:
[ 107.593784][ T5935] page:ffffea0001ec9200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b248
[ 107.603949][ T5935] head:ffffea0001ec9200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.612904][ T5935] memcg:ffff88807747cc01
[ 107.617188][ T5935] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 107.625193][ T5935] page_type: 0xffffffff()
[ 107.629549][ T5935] raw: 00fff00000000840 ffff888017c4f280 dead000000000122 0000000000000000
[ 107.638163][ T5935] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88807747cc01
[ 107.646792][ T5935] page dumped because: kasan: bad access detected
[ 107.653226][ T5935] page_owner tracks the page as allocated
[ 107.658947][ T5935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5891, tgid 5891 (syz-executor), ts 104244806720, free_ts 104096447708
[ 107.681884][ T5935] post_alloc_hook+0x1c1/0x200
[ 107.686778][ T5935] get_page_from_freelist+0x2181/0x22a0
[ 107.692381][ T5935] __alloc_pages+0x1f0/0x460
[ 107.697010][ T5935] alloc_slab_page+0x5d/0x180
[ 107.701707][ T5935] new_slab+0x87/0x2d0
[ 107.705780][ T5935] ___slab_alloc+0xc5c/0x12f0
[ 107.710461][ T5935] __kmem_cache_alloc_node+0x11f/0x250
[ 107.715938][ T5935] __kmalloc+0xa7/0x240
[ 107.720112][ T5935] __register_sysctl_table+0x71/0x1210
[ 107.725591][ T5935] neigh_sysctl_register+0x9db/0xac0
[ 107.730911][ T5935] devinet_sysctl_register+0xa8/0x1f0
[ 107.736299][ T5935] inetdev_event+0xf84/0x1610
[ 107.740991][ T5935] notifier_call_chain+0x18f/0x380
[ 107.746118][ T5935] dev_change_name+0x608/0x8e0
[ 107.750895][ T5935] do_setlink+0x925/0x3f40
[ 107.755323][ T5935] rtnl_newlink+0x1848/0x2170
[ 107.760031][ T5935] page last free stack trace:
[ 107.764710][ T5935] free_unref_page_prepare+0x7d7/0x8f0
[ 107.770181][ T5935] free_unref_page+0x32/0x2e0
[ 107.774867][ T5935] __unfreeze_partials+0x1cf/0x210
[ 107.779985][ T5935] put_cpu_partial+0x17c/0x250
[ 107.784758][ T5935] __slab_free+0x319/0x400
[ 107.789197][ T5935] qlist_free_all+0x75/0xd0
[ 107.793739][ T5935] kasan_quarantine_reduce+0x143/0x160
[ 107.799239][ T5935] __kasan_slab_alloc+0x22/0x80
[ 107.804102][ T5935] slab_post_alloc_hook+0x6a/0x4d0
[ 107.809227][ T5935] kmem_cache_alloc+0x17e/0x2c0
[ 107.814097][ T5935] getname_flags+0xbb/0x500
[ 107.818627][ T5935] vfs_fstatat+0x111/0x1b0
[ 107.823050][ T5935] __x64_sys_newfstatat+0x149/0x1f0
[ 107.828266][ T5935] do_syscall_64+0x55/0xb0
[ 107.832709][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.838621][ T5935]
[ 107.840966][ T5935] Memory state around the buggy address:
[ 107.846705][ T5935] ffff88807b24da00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.854782][ T5935] ffff88807b24da80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.862855][ T5935] >ffff88807b24db00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 107.870924][ T5935] ^
[ 107.876586][ T5935] ffff88807b24db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.884839][ T5935] ffff88807b24dc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.892911][ T5935] ==================================================================
[ 107.900995][ T5935] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.908198][ T5935] CPU: 1 PID: 5935 Comm: syz.0.20 Not tainted syzkaller #0
[ 107.915396][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 107.925464][ T5935] Call Trace:
[ 107.928756][ T5935]
[ 107.931698][ T5935] dump_stack_lvl+0x18c/0x250
[ 107.936839][ T5935] ? show_regs_print_info+0x20/0x20
[ 107.942603][ T5935] ? load_image+0x420/0x420
[ 107.947172][ T5935] panic+0x2ca/0x720
[ 107.951096][ T5935] ? bpf_jit_dump+0xd0/0xd0
[ 107.955640][ T5935] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 107.961542][ T5935] ? _raw_spin_unlock+0x40/0x40
[ 107.966397][ T5935] ? print_memory_metadata+0x314/0x400
[ 107.971869][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 107.978035][ T5935] check_panic_on_warn+0x84/0xa0
[ 107.982988][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 107.989165][ T5935] end_report+0x6f/0x130
[ 107.993467][ T5935] kasan_report+0x128/0x150
[ 107.997986][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 108.004157][ T5935] stack_map_get_build_id_offset+0x6c0/0x720
[ 108.010154][ T5935] ? pcpu_freelist_pop+0x12a/0x190
[ 108.015284][ T5935] ? __bpf_get_stackid+0x900/0x900
[ 108.020407][ T5935] ? perf_get_regs_user+0x5bb/0x6b0
[ 108.025634][ T5935] ? perf_reg_abi+0x62/0x90
[ 108.030146][ T5935] __bpf_get_stackid+0x564/0x900
[ 108.035111][ T5935] bpf_get_stackid_pe+0x343/0x410
[ 108.040174][ T5935] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 108.045648][ T5935] bpf_overflow_handler+0x1fc/0x510
[ 108.050873][ T5935] ? bpf_overflow_handler+0xde/0x510
[ 108.056204][ T5935] ? tp_perf_event_destroy+0x20/0x20
[ 108.061527][ T5935] ? mark_lock+0x94/0x320
[ 108.065876][ T5935] ? __perf_event_account_interrupt+0x187/0x280
[ 108.072133][ T5935] __perf_event_overflow+0x461/0x660
[ 108.077456][ T5935] perf_swevent_event+0x319/0x570
[ 108.082517][ T5935] ? perf_tp_event+0x1550/0x1550
[ 108.087499][ T5935] ___perf_sw_event+0x4ab/0x730
[ 108.092398][ T5935] ? ___perf_sw_event+0x19e/0x730
[ 108.097459][ T5935] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 108.103887][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 108.108923][ T5935] ? rep_movs_alternative+0x15/0x90
[ 108.114140][ T5935] ? verify_lock_unused+0x140/0x140
[ 108.119351][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 108.125343][ T5935] ? deref_stack_reg+0x1ab/0x230
[ 108.130289][ T5935] ? lock_chain_count+0x20/0x20
[ 108.135173][ T5935] __perf_sw_event+0x139/0x270
[ 108.139996][ T5935] do_user_addr_fault+0x1242/0x12d0
[ 108.145240][ T5935] ? rcu_is_watching+0x15/0xb0
[ 108.150028][ T5935] exc_page_fault+0x64/0x100
[ 108.154656][ T5935] asm_exc_page_fault+0x26/0x30
[ 108.159535][ T5935] RIP: 0010:rep_movs_alternative+0x15/0x90
[ 108.165350][ T5935] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[ 108.184965][ T5935] RSP: 0018:ffffc900033d6f50 EFLAGS: 00050206
[ 108.191049][ T5935] RAX: ffffffff8433ce30 RBX: 0000000000000003 RCX: 0000000000000003
[ 108.199030][ T5935] RDX: 0000000000000000 RSI: ffff88807b60068c RDI: 000020000000cf3d
[ 108.207014][ T5935] RBP: ffff88807b600668 R08: ffff88807b60068e R09: 1ffff1100f6c00d1
[ 108.214993][ T5935] R10: dffffc0000000000 R11: ffffed100f6c00d2 R12: 000020000000cf40
[ 108.222971][ T5935] R13: 0000000000000003 R14: 000020000000cf3d R15: ffff88807b60068c
[ 108.230954][ T5935] ? _copy_to_user+0x20/0xa0
[ 108.235654][ T5935] _copy_to_user+0x85/0xa0
[ 108.240104][ T5935] bpf_verifier_vlog+0x2f1/0x840
[ 108.245112][ T5935] verbose+0x11e/0x1a0
[ 108.249200][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 108.254766][ T5935] ? __kernel_text_address+0xd/0x30
[ 108.259996][ T5935] ? unwind_get_return_address+0x91/0xc0
[ 108.265728][ T5935] ? stack_trace_save+0x100/0x100
[ 108.270767][ T5935] ? arch_stack_walk+0x160/0x190
[ 108.275764][ T5935] print_insn_state+0x130/0x160
[ 108.280650][ T5935] do_check+0x4f08/0xd0a0
[ 108.285035][ T5935] ? stack_trace_snprint+0xf0/0xf0
[ 108.290177][ T5935] ? __stack_depot_save+0x1f/0x660
[ 108.295337][ T5935] ? kasan_set_track+0x5f/0x70
[ 108.300136][ T5935] ? __kasan_kmalloc+0x8f/0xa0
[ 108.304915][ T5935] ? __sys_bpf+0x5ba/0x890
[ 108.309341][ T5935] ? __x64_sys_bpf+0x7c/0x90
[ 108.313963][ T5935] ? do_syscall_64+0x55/0xb0
[ 108.318580][ T5935] ? init_func_state+0x2d10/0x2d10
[ 108.323711][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 108.329269][ T5935] ? print_verifier_state+0x2e70/0x2e70
[ 108.334826][ T5935] ? init_func_state+0x1dc6/0x2d10
[ 108.339961][ T5935] ? btf_check_subprog_arg_match+0x142/0x2a0
[ 108.346066][ T5935] do_check_common+0xacc/0x1410
[ 108.350940][ T5935] bpf_check+0x65d1/0xec30
[ 108.355399][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 108.360451][ T5935] ? bpf_get_btf_vmlinux+0x20/0x20
[ 108.365601][ T5935] ? __lock_acquire+0x1262/0x7d80
[ 108.370684][ T5935] ? mark_lock+0x94/0x320
[ 108.375107][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 108.380163][ T5935] ? verify_lock_unused+0x140/0x140
[ 108.385394][ T5935] ? verify_lock_unused+0x140/0x140
[ 108.390973][ T5935] ? verify_lock_unused+0x140/0x140
[ 108.396227][ T5935] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 108.402102][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 108.408111][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 108.413157][ T5935] ? lock_chain_count+0x20/0x20
[ 108.418033][ T5935] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 108.424303][ T5935] ? lockdep_hardirqs_on+0x98/0x150
[ 108.429580][ T5935] ? ktime_get_with_offset+0x103/0x330
[ 108.435066][ T5935] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 108.441337][ T5935] ? ktime_get_real_ts64+0x440/0x440
[ 108.446710][ T5935] ? do_raw_spin_unlock+0x121/0x230
[ 108.452006][ T5935] ? bpf_obj_name_cpy+0x194/0x1e0
[ 108.457054][ T5935] bpf_prog_load+0x10fa/0x1610
[ 108.461839][ T5935] ? map_freeze+0x420/0x420
[ 108.466363][ T5935] ? __might_fault+0xaa/0x120
[ 108.471051][ T5935] ? __might_fault+0xc6/0x120
[ 108.475744][ T5935] ? __might_fault+0xaa/0x120
[ 108.480441][ T5935] ? bpf_lsm_bpf+0x9/0x10
[ 108.484798][ T5935] ? security_bpf+0x7e/0xa0
[ 108.489334][ T5935] __sys_bpf+0x5ba/0x890
[ 108.493619][ T5935] ? bpf_link_show_fdinfo+0x390/0x390
[ 108.499034][ T5935] ? lock_chain_count+0x20/0x20
[ 108.503903][ T5935] __x64_sys_bpf+0x7c/0x90
[ 108.508345][ T5935] do_syscall_64+0x55/0xb0
[ 108.512773][ T5935] ? clear_bhb_loop+0x40/0x90
[ 108.517550][ T5935] ? clear_bhb_loop+0x40/0x90
[ 108.522241][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 108.528146][ T5935] RIP: 0033:0x7f2995f9e159
[ 108.532573][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 108.552307][ T5935] RSP: 002b:00007ffd1d93af38 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 108.560754][ T5935] RAX: ffffffffffffffda RBX: 00007f2996225fa0 RCX: 00007f2995f9e159
[ 108.568753][ T5935] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 108.576755][ T5935] RBP: 00007f2996035024 R08: 0000000000000000 R09: 0000000000000000
[ 108.584739][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.592727][ T5935] R13: 00007f2996225fac R14: 00007f2996225fa0 R15: 00007f2996225fa0
[ 108.600730][ T5935]
[ 108.604350][ T5935] Kernel Offset: disabled
[ 108.608701][ T5935] Rebooting in 86400 seconds..