Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. 2026/08/16 21:34:26 parsed 1 programs 2026/08/16 21:34:26 serving rpc on tcp://44801 [ 72.002832][ T5783] cgroup: Unknown subsys name 'net' [ 72.157406][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.527598][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.867066][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.875668][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.883534][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.895737][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.905183][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.912752][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.234571][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 77.307877][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.315400][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.322590][ T5848] bridge_slave_0: entered allmulticast mode [ 77.329232][ T5848] bridge_slave_0: entered promiscuous mode [ 77.337412][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.344582][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.351920][ T5848] bridge_slave_1: entered allmulticast mode [ 77.358506][ T5848] bridge_slave_1: entered promiscuous mode [ 77.387195][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.398027][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.422443][ T5848] team0: Port device team_slave_0 added [ 77.439238][ T5848] team0: Port device team_slave_1 added [ 77.457357][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.464571][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.490484][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.513637][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.520579][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.546652][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.580495][ T5848] hsr_slave_0: entered promiscuous mode [ 77.587150][ T5848] hsr_slave_1: entered promiscuous mode [ 77.722590][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.733989][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.743476][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.753827][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.793098][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.800262][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.807981][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.815085][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.870171][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.888003][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.896542][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.910865][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.930589][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.937681][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.950420][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.957566][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.164440][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.201354][ T5848] veth0_vlan: entered promiscuous mode [ 78.211054][ T5848] veth1_vlan: entered promiscuous mode [ 78.237171][ T5848] veth0_macvtap: entered promiscuous mode [ 78.246199][ T5848] veth1_macvtap: entered promiscuous mode [ 78.261075][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.277458][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.289952][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.298896][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.308883][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.317661][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.450343][ T3495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.658980][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.673748][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.698543][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.706689][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/16 21:34:35 executed programs: 0 [ 79.603760][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.612722][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.620146][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.628684][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.637777][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.646949][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.758400][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 79.809771][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.818781][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.825955][ T5889] bridge_slave_0: entered allmulticast mode [ 79.833255][ T5889] bridge_slave_0: entered promiscuous mode [ 79.842674][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.849816][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.857480][ T5889] bridge_slave_1: entered allmulticast mode [ 79.864237][ T5889] bridge_slave_1: entered promiscuous mode [ 79.895208][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.906986][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.930199][ T5889] team0: Port device team_slave_0 added [ 79.937606][ T5889] team0: Port device team_slave_1 added [ 79.957482][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.965172][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.991151][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.004235][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.011185][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.037339][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.078443][ T5889] hsr_slave_0: entered promiscuous mode [ 80.084622][ T5889] hsr_slave_1: entered promiscuous mode [ 80.090692][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.098900][ T5889] Cannot create hsr debugfs directory [ 81.181699][ T3495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.722956][ T5088] Bluetooth: hci0: command tx timeout [ 83.660751][ T3495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.732592][ T3495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.811415][ T5088] Bluetooth: hci0: command tx timeout [ 84.528986][ T3495] hsr_slave_0: left promiscuous mode [ 84.538246][ T3495] hsr_slave_1: left promiscuous mode [ 84.546413][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.555073][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.563352][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.570879][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.582133][ T3495] bridge_slave_1: left allmulticast mode [ 84.587797][ T3495] bridge_slave_1: left promiscuous mode [ 84.596131][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.606350][ T3495] bridge_slave_0: left allmulticast mode [ 84.621533][ T3495] bridge_slave_0: left promiscuous mode [ 84.627343][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.645933][ T3495] veth1_macvtap: left promiscuous mode [ 84.651606][ T3495] veth0_macvtap: left promiscuous mode [ 84.657317][ T3495] veth1_vlan: left promiscuous mode [ 84.662833][ T3495] veth0_vlan: left promiscuous mode [ 84.984432][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 85.011873][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 85.035639][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.064238][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.239823][ T3495] bond0 (unregistering): Released all slaves [ 85.346598][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.366038][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.379741][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.394235][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.455268][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.472532][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.485170][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.492307][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.508566][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.515704][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.557084][ T5889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.705427][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.777539][ T5889] veth0_vlan: entered promiscuous mode [ 85.794806][ T5889] veth1_vlan: entered promiscuous mode [ 85.819325][ T5889] veth0_macvtap: entered promiscuous mode [ 85.828725][ T5889] veth1_macvtap: entered promiscuous mode [ 85.843706][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.857404][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.867914][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.876752][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.886022][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.894711][ T5088] Bluetooth: hci0: command tx timeout [ 85.900758][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.954818][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.963828][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/16 21:34:42 executed programs: 2 [ 85.997701][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.006149][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.061225][ C0] hrtimer: interrupt took 69542 ns [ 86.774533][ T28] cfg80211: failed to load regulatory.db [ 87.456394][ C0] ================================================================== [ 87.464492][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 87.472305][ C0] Write of size 48 at addr ffff88807a77c360 by task syz.0.57/5974 [ 87.480107][ C0] [ 87.482436][ C0] CPU: 0 PID: 5974 Comm: syz.0.57 Not tainted syzkaller #0 [ 87.489606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.499646][ C0] Call Trace: [ 87.502906][ C0] [ 87.505816][ C0] dump_stack_lvl+0x18c/0x250 [ 87.510473][ C0] ? read_lock_is_recursive+0x20/0x20 [ 87.515824][ C0] ? show_regs_print_info+0x20/0x20 [ 87.520999][ C0] ? load_image+0x420/0x420 [ 87.525486][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 87.530942][ C0] ? __virt_addr_valid+0x10c/0x380 [ 87.536036][ C0] ? __virt_addr_valid+0x10c/0x380 [ 87.541129][ C0] ? __virt_addr_valid+0x10c/0x380 [ 87.546223][ C0] print_report+0xa8/0x210 [ 87.550627][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 87.555719][ C0] kasan_report+0x117/0x150 [ 87.560200][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 87.565306][ C0] kasan_check_range+0x241/0x290 [ 87.570248][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 87.575340][ C0] __asan_memcpy+0x40/0x70 [ 87.579737][ C0] __bpf_get_stackid+0x6c7/0x900 [ 87.584666][ C0] bpf_get_stackid_pe+0x2f0/0x410 [ 87.589672][ C0] bpf_prog_d499e7ac612d6085+0x2c/0x44 [ 87.595116][ C0] bpf_overflow_handler+0x1fc/0x510 [ 87.600315][ C0] ? bpf_overflow_handler+0xde/0x510 [ 87.605584][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 87.610846][ C0] ? __lock_acquire+0x1336/0x7d80 [ 87.615852][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 87.622073][ C0] __perf_event_overflow+0x461/0x660 [ 87.627338][ C0] perf_swevent_hrtimer+0x437/0x610 [ 87.632517][ C0] ? cpu_clock_event_read+0x40/0x40 [ 87.637693][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 87.642887][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 87.648794][ C0] ? _raw_spin_unlock+0x40/0x40 [ 87.653634][ C0] ? cpu_clock_event_read+0x40/0x40 [ 87.658811][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 87.663988][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 87.669948][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 87.675916][ C0] ? hrtimer_interrupt+0x980/0x980 [ 87.681010][ C0] ? read_tsc+0x9/0x20 [ 87.685056][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 87.691102][ C0] hrtimer_interrupt+0x39d/0x980 [ 87.696023][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 87.701899][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 87.707509][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.713492][ C0] RIP: 0033:0x7f711b2667f5 [ 87.717891][ C0] Code: e8 40 52 ff ff 48 8b 05 89 ef ee 00 83 05 72 ef ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 6f ef ee 00 44 88 78 ff <44> 8b 3d 54 ef ee 00 e8 0f 52 ff ff 48 8b 05 60 ef ee 00 44 89 38 [ 87.737475][ C0] RSP: 002b:00007ffc50a37f70 EFLAGS: 00000202 [ 87.743522][ C0] RAX: 0000001b2cc63fb0 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.751473][ C0] RDX: 0000001b2cc63faf RSI: 0000000000000008 RDI: 00007f711c155720 [ 87.759420][ C0] RBP: 00007f711c155720 R08: 0000000000000000 R09: 00007f711b626038 [ 87.767383][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 87.775336][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 87.783291][ C0] [ 87.786287][ C0] [ 87.788584][ C0] Allocated by task 5974: [ 87.792886][ C0] kasan_set_track+0x4e/0x70 [ 87.797451][ C0] __kasan_kmalloc+0x8f/0xa0 [ 87.802025][ C0] __kmalloc_node+0xb6/0x240 [ 87.806617][ C0] bpf_map_area_alloc+0x5e/0x110 [ 87.811536][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 87.817236][ C0] stack_map_alloc+0x32b/0x4b0 [ 87.821981][ C0] map_create+0x877/0x12f0 [ 87.826375][ C0] __sys_bpf+0x651/0x890 [ 87.830592][ C0] __x64_sys_bpf+0x7c/0x90 [ 87.834984][ C0] do_syscall_64+0x55/0xb0 [ 87.839378][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.845247][ C0] [ 87.847547][ C0] Last potentially related work creation: [ 87.853239][ C0] kasan_save_stack+0x3e/0x60 [ 87.857893][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 87.863241][ C0] call_rcu+0x153/0x900 [ 87.867377][ C0] nf_unregister_net_hooks+0xcb/0x130 [ 87.872727][ C0] cleanup_net+0x592/0xbb0 [ 87.877117][ C0] process_scheduled_works+0xa60/0x1600 [ 87.882641][ C0] worker_thread+0xa5e/0xfe0 [ 87.887229][ C0] kthread+0x2fa/0x390 [ 87.891301][ C0] ret_from_fork+0x48/0x80 [ 87.895713][ C0] ret_from_fork_asm+0x11/0x20 [ 87.900451][ C0] [ 87.902756][ C0] The buggy address belongs to the object at ffff88807a77c300 [ 87.902756][ C0] which belongs to the cache kmalloc-cg-128 of size 128 [ 87.917052][ C0] The buggy address is located 96 bytes inside of [ 87.917052][ C0] allocated 120-byte region [ffff88807a77c300, ffff88807a77c378) [ 87.931100][ C0] [ 87.933409][ C0] The buggy address belongs to the physical page: [ 87.939806][ C0] page:ffffea0001e9df00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a77c [ 87.949933][ C0] memcg:ffff88807b4bb001 [ 87.954158][ C0] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 87.962122][ C0] page_type: 0xffffffff() [ 87.966447][ C0] raw: 00fff00000000800 ffff888017c4dc80 ffffea0001d9b840 0000000000000005 [ 87.975014][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88807b4bb001 [ 87.983837][ C0] page dumped because: kasan: bad access detected [ 87.990225][ C0] page_owner tracks the page as allocated [ 87.995915][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 2955, tgid 2955 (kworker/u4:7), ts 75894803763, free_ts 72310724411 [ 88.014119][ C0] post_alloc_hook+0x1c1/0x200 [ 88.018865][ C0] get_page_from_freelist+0x2181/0x22a0 [ 88.024386][ C0] __alloc_pages+0x1f0/0x460 [ 88.028953][ C0] alloc_slab_page+0x5d/0x180 [ 88.033607][ C0] new_slab+0x87/0x2d0 [ 88.037652][ C0] ___slab_alloc+0xc5c/0x12f0 [ 88.042316][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 88.047797][ C0] __kmalloc_node+0xa6/0x240 [ 88.052378][ C0] kvmalloc_node+0x70/0x180 [ 88.056878][ C0] __nf_hook_entries_try_shrink+0x336/0x700 [ 88.062760][ C0] __nf_unregister_net_hook+0x4da/0x6d0 [ 88.068312][ C0] nf_unregister_net_hooks+0xcb/0x130 [ 88.073674][ C0] nf_nat_unregister_fn+0x22a/0x360 [ 88.078854][ C0] iptable_nat_net_pre_exit+0x78/0x90 [ 88.084378][ C0] cleanup_net+0x592/0xbb0 [ 88.088772][ C0] process_scheduled_works+0xa60/0x1600 [ 88.094300][ C0] page last free stack trace: [ 88.098945][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 88.104383][ C0] free_unref_page+0x32/0x2e0 [ 88.109036][ C0] vfree+0x1a7/0x340 [ 88.112911][ C0] kcov_close+0x2b/0x50 [ 88.117045][ C0] __fput+0x221/0x940 [ 88.121002][ C0] __se_sys_close+0x15c/0x1e0 [ 88.125674][ C0] do_syscall_64+0x55/0xb0 [ 88.130082][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.135959][ C0] [ 88.138259][ C0] Memory state around the buggy address: [ 88.143863][ C0] ffff88807a77c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.151926][ C0] ffff88807a77c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.159959][ C0] >ffff88807a77c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 88.167993][ C0] ^ [ 88.175944][ C0] ffff88807a77c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.183999][ C0] ffff88807a77c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.192033][ C0] ================================================================== [ 88.200069][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.207235][ C0] CPU: 0 PID: 5974 Comm: syz.0.57 Not tainted syzkaller #0 [ 88.214406][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.224440][ C0] Call Trace: [ 88.227699][ C0] [ 88.230608][ C0] dump_stack_lvl+0x18c/0x250 [ 88.235265][ C0] ? show_regs_print_info+0x20/0x20 [ 88.240446][ C0] ? load_image+0x420/0x420 [ 88.244935][ C0] panic+0x2ca/0x720 [ 88.248815][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 88.253823][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 88.258308][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.264191][ C0] ? _raw_spin_unlock+0x40/0x40 [ 88.269021][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 88.274111][ C0] check_panic_on_warn+0x84/0xa0 [ 88.279038][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 88.284157][ C0] end_report+0x6f/0x130 [ 88.288383][ C0] kasan_report+0x128/0x150 [ 88.292869][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 88.297970][ C0] kasan_check_range+0x241/0x290 [ 88.302888][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 88.307978][ C0] __asan_memcpy+0x40/0x70 [ 88.312374][ C0] __bpf_get_stackid+0x6c7/0x900 [ 88.317290][ C0] bpf_get_stackid_pe+0x2f0/0x410 [ 88.322293][ C0] bpf_prog_d499e7ac612d6085+0x2c/0x44 [ 88.327726][ C0] bpf_overflow_handler+0x1fc/0x510 [ 88.332904][ C0] ? bpf_overflow_handler+0xde/0x510 [ 88.338194][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 88.343460][ C0] ? __lock_acquire+0x1336/0x7d80 [ 88.348461][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 88.354681][ C0] __perf_event_overflow+0x461/0x660 [ 88.359943][ C0] perf_swevent_hrtimer+0x437/0x610 [ 88.365125][ C0] ? cpu_clock_event_read+0x40/0x40 [ 88.370339][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 88.375534][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 88.381418][ C0] ? _raw_spin_unlock+0x40/0x40 [ 88.386249][ C0] ? cpu_clock_event_read+0x40/0x40 [ 88.391432][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 88.396610][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 88.402567][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 88.408532][ C0] ? hrtimer_interrupt+0x980/0x980 [ 88.413636][ C0] ? read_tsc+0x9/0x20 [ 88.417682][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 88.423728][ C0] hrtimer_interrupt+0x39d/0x980 [ 88.428651][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 88.434527][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 88.440140][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.446100][ C0] RIP: 0033:0x7f711b2667f5 [ 88.450494][ C0] Code: e8 40 52 ff ff 48 8b 05 89 ef ee 00 83 05 72 ef ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 6f ef ee 00 44 88 78 ff <44> 8b 3d 54 ef ee 00 e8 0f 52 ff ff 48 8b 05 60 ef ee 00 44 89 38 [ 88.470080][ C0] RSP: 002b:00007ffc50a37f70 EFLAGS: 00000202 [ 88.476125][ C0] RAX: 0000001b2cc63fb0 RBX: 0000000000000000 RCX: 0000000000000000 [ 88.484340][ C0] RDX: 0000001b2cc63faf RSI: 0000000000000008 RDI: 00007f711c155720 [ 88.492289][ C0] RBP: 00007f711c155720 R08: 0000000000000000 R09: 00007f711b626038 [ 88.500236][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 88.508184][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 88.516138][ C0] [ 88.519373][ C0] Kernel Offset: disabled [ 88.523678][ C0] Rebooting in 86400 seconds..