Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts.
2026/09/09 10:38:24 parsed 1 programs
2026/09/09 10:38:24 serving rpc on tcp://44989
[ 75.218441][ T5785] cgroup: Unknown subsys name 'net'
[ 75.360240][ T5785] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 76.766483][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 79.275757][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.283753][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.291667][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.299858][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.307972][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 79.318315][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.395149][ T5846] chnl_net:caif_netlink_parms(): no params data found
[ 80.450175][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.458154][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.465416][ T5846] bridge_slave_0: entered allmulticast mode
[ 80.472574][ T5846] bridge_slave_0: entered promiscuous mode
[ 80.491681][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.498906][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.506179][ T5846] bridge_slave_1: entered allmulticast mode
[ 80.512785][ T5846] bridge_slave_1: entered promiscuous mode
[ 80.550856][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.561746][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.587978][ T5846] team0: Port device team_slave_0 added
[ 80.598231][ T5846] team0: Port device team_slave_1 added
[ 80.626380][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.633344][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.659594][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.672010][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.679089][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.705036][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.750219][ T5846] hsr_slave_0: entered promiscuous mode
[ 80.756569][ T5846] hsr_slave_1: entered promiscuous mode
[ 80.897687][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.909154][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.919339][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.941731][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.969509][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.976877][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.984800][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.991919][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.052298][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.071185][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.080534][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.105768][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.118559][ T42] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.125761][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.157379][ T236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.164550][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.367477][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 81.402020][ T5846] veth0_vlan: entered promiscuous mode
[ 81.413201][ T5846] veth1_vlan: entered promiscuous mode
[ 81.439388][ T5846] veth0_macvtap: entered promiscuous mode
[ 81.449091][ T5846] veth1_macvtap: entered promiscuous mode
[ 81.465564][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.483752][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.497027][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.507156][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.516114][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.525039][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.659547][ T1138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.805728][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.814032][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.847747][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.857280][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/09 10:38:34 executed programs: 0
[ 83.372701][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.380875][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.390491][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.401220][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.410441][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 83.417793][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.531334][ T5889] chnl_net:caif_netlink_parms(): no params data found
[ 83.588933][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.596263][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.603380][ T5889] bridge_slave_0: entered allmulticast mode
[ 83.610367][ T5889] bridge_slave_0: entered promiscuous mode
[ 83.618746][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.626232][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.633334][ T5889] bridge_slave_1: entered allmulticast mode
[ 83.640844][ T5889] bridge_slave_1: entered promiscuous mode
[ 83.663773][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.676018][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.700888][ T5889] team0: Port device team_slave_0 added
[ 83.708944][ T5889] team0: Port device team_slave_1 added
[ 83.728897][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.736082][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.762237][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.774140][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.781104][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.809724][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.845831][ T5889] hsr_slave_0: entered promiscuous mode
[ 83.852207][ T5889] hsr_slave_1: entered promiscuous mode
[ 83.858788][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 83.866969][ T5889] Cannot create hsr debugfs directory
[ 84.215226][ T1138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.484447][ T5819] Bluetooth: hci0: command tx timeout
[ 86.705132][ T1138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.776134][ T1138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.846456][ T56] cfg80211: failed to load regulatory.db
[ 87.554465][ T5819] Bluetooth: hci0: command tx timeout
[ 87.648845][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.673741][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.689159][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.702475][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.734216][ T1138] hsr_slave_0: left promiscuous mode
[ 87.741262][ T1138] hsr_slave_1: left promiscuous mode
[ 87.751244][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 87.759160][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 87.770264][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 87.778013][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 87.790047][ T1138] bridge_slave_1: left allmulticast mode
[ 87.796158][ T1138] bridge_slave_1: left promiscuous mode
[ 87.802733][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.818996][ T1138] bridge_slave_0: left allmulticast mode
[ 87.826061][ T1138] bridge_slave_0: left promiscuous mode
[ 87.831808][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.859343][ T1138] veth1_macvtap: left promiscuous mode
[ 87.866207][ T1138] veth0_macvtap: left promiscuous mode
[ 87.871867][ T1138] veth1_vlan: left promiscuous mode
[ 87.878256][ T1138] veth0_vlan: left promiscuous mode
[ 88.249067][ T1138] team0 (unregistering): Port device team_slave_1 removed
[ 88.281435][ T1138] team0 (unregistering): Port device team_slave_0 removed
[ 88.307954][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 88.337009][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 88.524491][ T1138] bond0 (unregistering): Released all slaves
[ 88.651802][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.681653][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.701708][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.708872][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.723783][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.730975][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.778124][ T5889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 88.926429][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.973438][ T5889] veth0_vlan: entered promiscuous mode
[ 88.985957][ T5889] veth1_vlan: entered promiscuous mode
[ 89.011599][ T5889] veth0_macvtap: entered promiscuous mode
[ 89.025206][ T5889] veth1_macvtap: entered promiscuous mode
[ 89.042469][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.067235][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.093194][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.103145][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.112040][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.124063][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/09/09 10:38:40 executed programs: 2
[ 89.226136][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.238675][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.261037][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.269000][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.365060][ T5935] ==================================================================
[ 89.373167][ T5935] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 89.382016][ T5935] Write of size 4 at addr ffff88807cf0c330 by task syz.0.18/5935
[ 89.389714][ T5935]
[ 89.392032][ T5935] CPU: 1 PID: 5935 Comm: syz.0.18 Not tainted syzkaller #0
[ 89.399221][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 89.409266][ T5935] Call Trace:
[ 89.412537][ T5935]
[ 89.415454][ T5935] dump_stack_lvl+0x18c/0x250
[ 89.420119][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 89.425138][ T5935] ? show_regs_print_info+0x20/0x20
[ 89.430344][ T5935] ? load_image+0x420/0x420
[ 89.434872][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 89.439965][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 89.445057][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 89.450149][ T5935] print_report+0xa8/0x210
[ 89.454548][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 89.460686][ T5935] kasan_report+0x117/0x150
[ 89.465174][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 89.471340][ T5935] stack_map_get_build_id_offset+0x6c0/0x720
[ 89.477306][ T5935] ? pcpu_freelist_pop+0x12a/0x190
[ 89.482407][ T5935] ? __bpf_get_stackid+0x900/0x900
[ 89.487503][ T5935] ? perf_get_regs_user+0x5bb/0x6b0
[ 89.492682][ T5935] ? perf_reg_abi+0x62/0x90
[ 89.497164][ T5935] __bpf_get_stackid+0x564/0x900
[ 89.502086][ T5935] bpf_get_stackid_pe+0x343/0x410
[ 89.507094][ T5935] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 89.512551][ T5935] bpf_overflow_handler+0x1fc/0x510
[ 89.517733][ T5935] ? bpf_overflow_handler+0xde/0x510
[ 89.523000][ T5935] ? tp_perf_event_destroy+0x20/0x20
[ 89.528271][ T5935] ? mark_lock+0x94/0x320
[ 89.532583][ T5935] ? __perf_event_account_interrupt+0x187/0x280
[ 89.538805][ T5935] __perf_event_overflow+0x461/0x660
[ 89.544073][ T5935] perf_swevent_event+0x319/0x570
[ 89.549079][ T5935] ? perf_tp_event+0x1550/0x1550
[ 89.554021][ T5935] ___perf_sw_event+0x4ab/0x730
[ 89.558852][ T5935] ? ___perf_sw_event+0x19e/0x730
[ 89.563856][ T5935] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 89.570254][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 89.575274][ T5935] ? rep_movs_alternative+0x15/0x90
[ 89.580475][ T5935] ? verify_lock_unused+0x140/0x140
[ 89.585661][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 89.591623][ T5935] ? deref_stack_reg+0x1ab/0x230
[ 89.596540][ T5935] ? lock_chain_count+0x20/0x20
[ 89.601371][ T5935] __perf_sw_event+0x139/0x270
[ 89.606117][ T5935] do_user_addr_fault+0x1242/0x12d0
[ 89.611300][ T5935] ? rcu_is_watching+0x15/0xb0
[ 89.616048][ T5935] exc_page_fault+0x64/0x100
[ 89.620621][ T5935] asm_exc_page_fault+0x26/0x30
[ 89.625463][ T5935] RIP: 0010:rep_movs_alternative+0x15/0x90
[ 89.631274][ T5935] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[ 89.650880][ T5935] RSP: 0018:ffffc90002e66f50 EFLAGS: 00050206
[ 89.656940][ T5935] RAX: ffffffff8433ce30 RBX: 0000000000000003 RCX: 0000000000000003
[ 89.664901][ T5935] RDX: 0000000000000000 RSI: ffff8880693e468c RDI: 000000000000cf3d
[ 89.672857][ T5935] RBP: ffff8880693e4668 R08: ffff8880693e468e R09: 1ffff1100d27c8d1
[ 89.680818][ T5935] R10: dffffc0000000000 R11: ffffed100d27c8d2 R12: 000000000000cf40
[ 89.688778][ T5935] R13: 0000000000000003 R14: 000000000000cf3d R15: ffff8880693e468c
[ 89.696736][ T5935] ? _copy_to_user+0x20/0xa0
[ 89.701312][ T5935] _copy_to_user+0x85/0xa0
[ 89.705709][ T5935] bpf_verifier_vlog+0x2f1/0x840
[ 89.710642][ T5935] verbose+0x11e/0x1a0
[ 89.714695][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 89.720223][ T5935] ? __kernel_text_address+0xd/0x30
[ 89.725434][ T5935] ? unwind_get_return_address+0x91/0xc0
[ 89.731068][ T5935] ? stack_trace_save+0x100/0x100
[ 89.736076][ T5935] ? arch_stack_walk+0x160/0x190
[ 89.740997][ T5935] print_insn_state+0x130/0x160
[ 89.745833][ T5935] do_check+0x4f08/0xd0a0
[ 89.750148][ T5935] ? stack_trace_snprint+0xf0/0xf0
[ 89.755241][ T5935] ? __stack_depot_save+0x1f/0x660
[ 89.760330][ T5935] ? kasan_set_track+0x5f/0x70
[ 89.765078][ T5935] ? __kasan_kmalloc+0x8f/0xa0
[ 89.769824][ T5935] ? __sys_bpf+0x5ba/0x890
[ 89.774230][ T5935] ? __x64_sys_bpf+0x7c/0x90
[ 89.778816][ T5935] ? do_syscall_64+0x55/0xb0
[ 89.783413][ T5935] ? init_func_state+0x2d10/0x2d10
[ 89.788516][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 89.794050][ T5935] ? print_verifier_state+0x2e70/0x2e70
[ 89.799580][ T5935] ? init_func_state+0x1dc6/0x2d10
[ 89.804675][ T5935] ? btf_check_subprog_arg_match+0x142/0x2a0
[ 89.810637][ T5935] do_check_common+0xacc/0x1410
[ 89.815486][ T5935] bpf_check+0x65d1/0xec30
[ 89.819884][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 89.824912][ T5935] ? bpf_get_btf_vmlinux+0x20/0x20
[ 89.830052][ T5935] ? __lock_acquire+0x1262/0x7d80
[ 89.835077][ T5935] ? mark_lock+0x94/0x320
[ 89.839386][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 89.844396][ T5935] ? verify_lock_unused+0x140/0x140
[ 89.849575][ T5935] ? verify_lock_unused+0x140/0x140
[ 89.854752][ T5935] ? verify_lock_unused+0x140/0x140
[ 89.859929][ T5935] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 89.865720][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 89.871678][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 89.876695][ T5935] ? lock_chain_count+0x20/0x20
[ 89.881572][ T5935] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 89.887795][ T5935] ? lockdep_hardirqs_on+0x98/0x150
[ 89.892983][ T5935] ? ktime_get_with_offset+0x103/0x330
[ 89.898426][ T5935] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 89.904647][ T5935] ? ktime_get_real_ts64+0x440/0x440
[ 89.909914][ T5935] ? do_raw_spin_unlock+0x121/0x230
[ 89.915110][ T5935] ? bpf_obj_name_cpy+0x194/0x1e0
[ 89.920113][ T5935] bpf_prog_load+0x10fa/0x1610
[ 89.924874][ T5935] ? map_freeze+0x420/0x420
[ 89.929378][ T5935] ? __might_fault+0xaa/0x120
[ 89.934039][ T5935] ? __might_fault+0xc6/0x120
[ 89.938693][ T5935] ? __might_fault+0xaa/0x120
[ 89.943344][ T5935] ? bpf_lsm_bpf+0x9/0x10
[ 89.947671][ T5935] ? security_bpf+0x7e/0xa0
[ 89.952153][ T5935] __sys_bpf+0x5ba/0x890
[ 89.956376][ T5935] ? bpf_link_show_fdinfo+0x390/0x390
[ 89.961750][ T5935] ? lock_chain_count+0x20/0x20
[ 89.966585][ T5935] __x64_sys_bpf+0x7c/0x90
[ 89.970980][ T5935] do_syscall_64+0x55/0xb0
[ 89.975392][ T5935] ? clear_bhb_loop+0x40/0x90
[ 89.980069][ T5935] ? clear_bhb_loop+0x40/0x90
[ 89.984739][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 89.990646][ T5935] RIP: 0033:0x7f2f35d9e159
[ 89.995046][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 90.014636][ T5935] RSP: 002b:00007fffc6e560e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 90.023027][ T5935] RAX: ffffffffffffffda RBX: 00007f2f36025fa0 RCX: 00007f2f35d9e159
[ 90.030998][ T5935] RDX: 0000000000000024 RSI: 0000200000000440 RDI: 0000000000000005
[ 90.038956][ T5935] RBP: 00007f2f35e3503b R08: 0000000000000000 R09: 0000000000000000
[ 90.046907][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 90.054883][ T5935] R13: 00007f2f36025fac R14: 00007f2f36025fa0 R15: 00007f2f36025fa0
[ 90.062838][ T5935]
[ 90.065839][ T5935]
[ 90.068138][ T5935] Allocated by task 5935:
[ 90.072439][ T5935] kasan_set_track+0x4e/0x70
[ 90.077024][ T5935] __kasan_kmalloc+0x8f/0xa0
[ 90.081627][ T5935] __kmalloc_node+0xb6/0x240
[ 90.086231][ T5935] bpf_map_area_alloc+0x5e/0x110
[ 90.091155][ T5935] prealloc_elems_and_freelist+0x86/0x1c0
[ 90.096859][ T5935] stack_map_alloc+0x32b/0x4b0
[ 90.101607][ T5935] map_create+0x877/0x12f0
[ 90.106004][ T5935] __sys_bpf+0x651/0x890
[ 90.110224][ T5935] __x64_sys_bpf+0x7c/0x90
[ 90.114619][ T5935] do_syscall_64+0x55/0xb0
[ 90.119014][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 90.124899][ T5935]
[ 90.127578][ T5935] The buggy address belongs to the object at ffff88807cf0c000
[ 90.127578][ T5935] which belongs to the cache kmalloc-cg-1k of size 1024
[ 90.141888][ T5935] The buggy address is located 0 bytes to the right of
[ 90.141888][ T5935] allocated 816-byte region [ffff88807cf0c000, ffff88807cf0c330)
[ 90.156355][ T5935]
[ 90.158658][ T5935] The buggy address belongs to the physical page:
[ 90.165054][ T5935] page:ffffea0001f3c200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cf08
[ 90.175186][ T5935] head:ffffea0001f3c200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 90.184095][ T5935] memcg:ffff888076858e01
[ 90.188314][ T5935] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 90.196273][ T5935] page_type: 0xffffffff()
[ 90.200602][ T5935] raw: 00fff00000000840 ffff888017c4f280 ffffea000075ce00 0000000000000002
[ 90.209169][ T5935] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888076858e01
[ 90.217726][ T5935] page dumped because: kasan: bad access detected
[ 90.224132][ T5935] page_owner tracks the page as allocated
[ 90.229837][ T5935] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5650, tgid 5650 (dhcpcd-run-hook), ts 58669017877, free_ts 58605690976
[ 90.251433][ T5935] post_alloc_hook+0x1c1/0x200
[ 90.256185][ T5935] get_page_from_freelist+0x2181/0x22a0
[ 90.261708][ T5935] __alloc_pages+0x1f0/0x460
[ 90.266272][ T5935] alloc_slab_page+0x5d/0x180
[ 90.270929][ T5935] new_slab+0x87/0x2d0
[ 90.274982][ T5935] ___slab_alloc+0xc5c/0x12f0
[ 90.279668][ T5935] __kmem_cache_alloc_node+0x11f/0x250
[ 90.285136][ T5935] __kmalloc+0xa7/0x240
[ 90.289275][ T5935] alloc_pipe_info+0x1f9/0x4b0
[ 90.294021][ T5935] create_pipe_files+0x87/0x700
[ 90.298862][ T5935] __do_pipe_flags+0x4c/0x2c0
[ 90.303538][ T5935] do_pipe2+0xab/0x190
[ 90.307594][ T5935] __x64_sys_pipe2+0x5a/0x70
[ 90.312166][ T5935] do_syscall_64+0x55/0xb0
[ 90.316561][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 90.322431][ T5935] page last free stack trace:
[ 90.327082][ T5935] free_unref_page_prepare+0x7d7/0x8f0
[ 90.332520][ T5935] free_unref_page+0x32/0x2e0
[ 90.337175][ T5935] __slab_free+0x35a/0x400
[ 90.341571][ T5935] qlist_free_all+0x75/0xd0
[ 90.346054][ T5935] kasan_quarantine_reduce+0x143/0x160
[ 90.351490][ T5935] __kasan_slab_alloc+0x22/0x80
[ 90.356319][ T5935] slab_post_alloc_hook+0x6a/0x4d0
[ 90.361409][ T5935] kmem_cache_alloc+0x17e/0x2c0
[ 90.366242][ T5935] mas_alloc_nodes+0x2f8/0x8c0
[ 90.370986][ T5935] mas_preallocate+0xa1f/0x1170
[ 90.375828][ T5935] vma_expand+0x668/0x920
[ 90.380165][ T5935] mmap_region+0xc94/0x2090
[ 90.384676][ T5935] do_mmap+0x98f/0x10a0
[ 90.388814][ T5935] vm_mmap_pgoff+0x1c4/0x3f0
[ 90.393381][ T5935] ksys_mmap_pgoff+0x4c9/0x720
[ 90.398130][ T5935] do_syscall_64+0x55/0xb0
[ 90.402529][ T5935]
[ 90.404859][ T5935] Memory state around the buggy address:
[ 90.410463][ T5935] ffff88807cf0c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.418501][ T5935] ffff88807cf0c280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.426539][ T5935] >ffff88807cf0c300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 90.434579][ T5935] ^
[ 90.440186][ T5935] ffff88807cf0c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 90.448224][ T5935] ffff88807cf0c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 90.456260][ T5935] ==================================================================
[ 90.464299][ T5935] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 90.471466][ T5935] CPU: 1 PID: 5935 Comm: syz.0.18 Not tainted syzkaller #0
[ 90.478643][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 90.488679][ T5935] Call Trace:
[ 90.491942][ T5935]
[ 90.494870][ T5935] dump_stack_lvl+0x18c/0x250
[ 90.499532][ T5935] ? show_regs_print_info+0x20/0x20
[ 90.504716][ T5935] ? load_image+0x420/0x420
[ 90.509204][ T5935] panic+0x2ca/0x720
[ 90.513079][ T5935] ? bpf_jit_dump+0xd0/0xd0
[ 90.517575][ T5935] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 90.523449][ T5935] ? _raw_spin_unlock+0x40/0x40
[ 90.528284][ T5935] ? print_memory_metadata+0x314/0x400
[ 90.533750][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 90.539907][ T5935] check_panic_on_warn+0x84/0xa0
[ 90.544826][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 90.550978][ T5935] end_report+0x6f/0x130
[ 90.555202][ T5935] kasan_report+0x128/0x150
[ 90.559686][ T5935] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 90.565824][ T5935] stack_map_get_build_id_offset+0x6c0/0x720
[ 90.571784][ T5935] ? pcpu_freelist_pop+0x12a/0x190
[ 90.576881][ T5935] ? __bpf_get_stackid+0x900/0x900
[ 90.581999][ T5935] ? perf_get_regs_user+0x5bb/0x6b0
[ 90.587174][ T5935] ? perf_reg_abi+0x62/0x90
[ 90.591655][ T5935] __bpf_get_stackid+0x564/0x900
[ 90.596611][ T5935] bpf_get_stackid_pe+0x343/0x410
[ 90.601619][ T5935] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 90.607060][ T5935] bpf_overflow_handler+0x1fc/0x510
[ 90.612245][ T5935] ? bpf_overflow_handler+0xde/0x510
[ 90.617511][ T5935] ? tp_perf_event_destroy+0x20/0x20
[ 90.622781][ T5935] ? mark_lock+0x94/0x320
[ 90.627096][ T5935] ? __perf_event_account_interrupt+0x187/0x280
[ 90.633318][ T5935] __perf_event_overflow+0x461/0x660
[ 90.638590][ T5935] perf_swevent_event+0x319/0x570
[ 90.643609][ T5935] ? perf_tp_event+0x1550/0x1550
[ 90.648531][ T5935] ___perf_sw_event+0x4ab/0x730
[ 90.653377][ T5935] ? ___perf_sw_event+0x19e/0x730
[ 90.658389][ T5935] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 90.664807][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 90.669813][ T5935] ? rep_movs_alternative+0x15/0x90
[ 90.675013][ T5935] ? verify_lock_unused+0x140/0x140
[ 90.680220][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 90.686183][ T5935] ? deref_stack_reg+0x1ab/0x230
[ 90.691101][ T5935] ? lock_chain_count+0x20/0x20
[ 90.695930][ T5935] __perf_sw_event+0x139/0x270
[ 90.700675][ T5935] do_user_addr_fault+0x1242/0x12d0
[ 90.705855][ T5935] ? rcu_is_watching+0x15/0xb0
[ 90.710610][ T5935] exc_page_fault+0x64/0x100
[ 90.715192][ T5935] asm_exc_page_fault+0x26/0x30
[ 90.720025][ T5935] RIP: 0010:rep_movs_alternative+0x15/0x90
[ 90.725815][ T5935] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00
[ 90.745407][ T5935] RSP: 0018:ffffc90002e66f50 EFLAGS: 00050206
[ 90.751455][ T5935] RAX: ffffffff8433ce30 RBX: 0000000000000003 RCX: 0000000000000003
[ 90.759407][ T5935] RDX: 0000000000000000 RSI: ffff8880693e468c RDI: 000000000000cf3d
[ 90.767359][ T5935] RBP: ffff8880693e4668 R08: ffff8880693e468e R09: 1ffff1100d27c8d1
[ 90.775324][ T5935] R10: dffffc0000000000 R11: ffffed100d27c8d2 R12: 000000000000cf40
[ 90.783301][ T5935] R13: 0000000000000003 R14: 000000000000cf3d R15: ffff8880693e468c
[ 90.791273][ T5935] ? _copy_to_user+0x20/0xa0
[ 90.795866][ T5935] _copy_to_user+0x85/0xa0
[ 90.800265][ T5935] bpf_verifier_vlog+0x2f1/0x840
[ 90.805189][ T5935] verbose+0x11e/0x1a0
[ 90.809239][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 90.814770][ T5935] ? __kernel_text_address+0xd/0x30
[ 90.819951][ T5935] ? unwind_get_return_address+0x91/0xc0
[ 90.825574][ T5935] ? stack_trace_save+0x100/0x100
[ 90.830600][ T5935] ? arch_stack_walk+0x160/0x190
[ 90.835533][ T5935] print_insn_state+0x130/0x160
[ 90.840370][ T5935] do_check+0x4f08/0xd0a0
[ 90.844682][ T5935] ? stack_trace_snprint+0xf0/0xf0
[ 90.849780][ T5935] ? __stack_depot_save+0x1f/0x660
[ 90.854870][ T5935] ? kasan_set_track+0x5f/0x70
[ 90.859610][ T5935] ? __kasan_kmalloc+0x8f/0xa0
[ 90.864353][ T5935] ? __sys_bpf+0x5ba/0x890
[ 90.868752][ T5935] ? __x64_sys_bpf+0x7c/0x90
[ 90.873316][ T5935] ? do_syscall_64+0x55/0xb0
[ 90.877913][ T5935] ? init_func_state+0x2d10/0x2d10
[ 90.883034][ T5935] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 90.888577][ T5935] ? print_verifier_state+0x2e70/0x2e70
[ 90.894126][ T5935] ? init_func_state+0x1dc6/0x2d10
[ 90.899217][ T5935] ? btf_check_subprog_arg_match+0x142/0x2a0
[ 90.905180][ T5935] do_check_common+0xacc/0x1410
[ 90.910015][ T5935] bpf_check+0x65d1/0xec30
[ 90.914418][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 90.919423][ T5935] ? bpf_get_btf_vmlinux+0x20/0x20
[ 90.924524][ T5935] ? __lock_acquire+0x1262/0x7d80
[ 90.929550][ T5935] ? mark_lock+0x94/0x320
[ 90.933862][ T5935] ? __lock_acquire+0x1336/0x7d80
[ 90.938869][ T5935] ? verify_lock_unused+0x140/0x140
[ 90.944050][ T5935] ? verify_lock_unused+0x140/0x140
[ 90.949225][ T5935] ? verify_lock_unused+0x140/0x140
[ 90.954403][ T5935] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 90.960188][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 90.966146][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 90.971152][ T5935] ? lock_chain_count+0x20/0x20
[ 90.975997][ T5935] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 90.982238][ T5935] ? lockdep_hardirqs_on+0x98/0x150
[ 90.987418][ T5935] ? ktime_get_with_offset+0x103/0x330
[ 90.992855][ T5935] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 90.999073][ T5935] ? ktime_get_real_ts64+0x440/0x440
[ 91.004340][ T5935] ? do_raw_spin_unlock+0x121/0x230
[ 91.009526][ T5935] ? bpf_obj_name_cpy+0x194/0x1e0
[ 91.014531][ T5935] bpf_prog_load+0x10fa/0x1610
[ 91.019281][ T5935] ? map_freeze+0x420/0x420
[ 91.023770][ T5935] ? __might_fault+0xaa/0x120
[ 91.028433][ T5935] ? __might_fault+0xc6/0x120
[ 91.033089][ T5935] ? __might_fault+0xaa/0x120
[ 91.037773][ T5935] ? bpf_lsm_bpf+0x9/0x10
[ 91.042087][ T5935] ? security_bpf+0x7e/0xa0
[ 91.046585][ T5935] __sys_bpf+0x5ba/0x890
[ 91.050806][ T5935] ? bpf_link_show_fdinfo+0x390/0x390
[ 91.056159][ T5935] ? lock_chain_count+0x20/0x20
[ 91.060991][ T5935] __x64_sys_bpf+0x7c/0x90
[ 91.065385][ T5935] do_syscall_64+0x55/0xb0
[ 91.069781][ T5935] ? clear_bhb_loop+0x40/0x90
[ 91.074446][ T5935] ? clear_bhb_loop+0x40/0x90
[ 91.079120][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 91.084995][ T5935] RIP: 0033:0x7f2f35d9e159
[ 91.089393][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 91.108994][ T5935] RSP: 002b:00007fffc6e560e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 91.117386][ T5935] RAX: ffffffffffffffda RBX: 00007f2f36025fa0 RCX: 00007f2f35d9e159
[ 91.125352][ T5935] RDX: 0000000000000024 RSI: 0000200000000440 RDI: 0000000000000005
[ 91.133320][ T5935] RBP: 00007f2f35e3503b R08: 0000000000000000 R09: 0000000000000000
[ 91.141275][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 91.149223][ T5935] R13: 00007f2f36025fac R14: 00007f2f36025fa0 R15: 00007f2f36025fa0
[ 91.157177][ T5935]
[ 91.160420][ T5935] Kernel Offset: disabled
[ 91.164728][ T5935] Rebooting in 86400 seconds..