Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. 2026/08/25 20:20:15 parsed 1 programs 2026/08/25 20:20:15 serving rpc on tcp://43637 [ 84.009715][ T4285] cgroup: Unknown subsys name 'net' [ 84.152806][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.770557][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.527065][ T7] cfg80211: failed to load regulatory.db [ 89.765888][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 89.825066][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.832717][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.841432][ T4343] device bridge_slave_0 entered promiscuous mode [ 89.865170][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.872309][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.881179][ T4343] device bridge_slave_1 entered promiscuous mode [ 89.916284][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.928015][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.969497][ T4343] team0: Port device team_slave_0 added [ 89.976972][ T4343] team0: Port device team_slave_1 added [ 89.998832][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.007810][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.033912][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.061168][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.068945][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.094986][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.128412][ T4343] device hsr_slave_0 entered promiscuous mode [ 90.135793][ T4343] device hsr_slave_1 entered promiscuous mode [ 90.266181][ T4343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.292939][ T4343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.302121][ T4343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.312125][ T4343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.387714][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.402084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.413133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.434975][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.445685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.454414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.466668][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.474018][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.486037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.513584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.522623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.531310][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.538568][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.558642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.568075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.577278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.586483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.595631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.616966][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.626809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.637326][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.650784][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.662650][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.906320][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.913871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.928794][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.948197][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.969269][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.978746][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.987299][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.998556][ T4343] device veth0_vlan entered promiscuous mode [ 91.011167][ T4343] device veth1_vlan entered promiscuous mode [ 91.032825][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.043152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.054367][ T4343] device veth0_macvtap entered promiscuous mode [ 91.064708][ T4343] device veth1_macvtap entered promiscuous mode [ 91.081366][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.088955][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.102843][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.110938][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.120124][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.133198][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.141234][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.151678][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.163516][ T4343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.174092][ T4343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.182949][ T4343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.192156][ T4343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.319929][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.342651][ T4368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.351601][ T4368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.361038][ T4368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.370638][ T4368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.379782][ T4368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.387190][ T4368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.978059][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.999321][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.014795][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.041287][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.049959][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.059193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/08/25 20:20:26 executed programs: 0 [ 92.428230][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.437270][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.445056][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.457075][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.465313][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.473563][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.602260][ T4385] chnl_net:caif_netlink_parms(): no params data found [ 92.653251][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.660678][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.668809][ T4385] device bridge_slave_0 entered promiscuous mode [ 92.677574][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.684700][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.693201][ T4385] device bridge_slave_1 entered promiscuous mode [ 92.718522][ T4385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.730125][ T4385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.755037][ T4385] team0: Port device team_slave_0 added [ 92.762611][ T4385] team0: Port device team_slave_1 added [ 92.783819][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.791118][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.817181][ T4385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.829965][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.837025][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.863171][ T4385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.898024][ T4385] device hsr_slave_0 entered promiscuous mode [ 92.904965][ T4385] device hsr_slave_1 entered promiscuous mode [ 92.911858][ T4385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.919951][ T4385] Cannot create hsr debugfs directory [ 93.766912][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.525894][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 96.355034][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.422608][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.606174][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 97.234417][ T4385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.266716][ T4385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.277124][ T4385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.289948][ T4385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.352369][ T33] device hsr_slave_0 left promiscuous mode [ 97.360476][ T33] device hsr_slave_1 left promiscuous mode [ 97.367901][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.376174][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.384889][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.392784][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.402635][ T33] device bridge_slave_1 left promiscuous mode [ 97.410373][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.424671][ T33] device bridge_slave_0 left promiscuous mode [ 97.432683][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.465066][ T33] device veth1_macvtap left promiscuous mode [ 97.471629][ T33] device veth0_macvtap left promiscuous mode [ 97.480577][ T33] device veth1_vlan left promiscuous mode [ 97.487333][ T33] device veth0_vlan left promiscuous mode [ 97.990496][ T33] team0 (unregistering): Port device team_slave_1 removed [ 98.023770][ T33] team0 (unregistering): Port device team_slave_0 removed [ 98.054422][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.087906][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.283562][ T33] bond0 (unregistering): Released all slaves [ 98.375353][ T4385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.388962][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.406500][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.418703][ T4385] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.429359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.439484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.448441][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.455645][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.470481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.482026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.492473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.501556][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.508857][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.526129][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.546586][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.558366][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.567983][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.577778][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.600725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.611274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.623667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.632457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.644220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.653399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.669430][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.695340][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 98.916186][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.923693][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.938049][ T4385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.956710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.966622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.987623][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.996866][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.005595][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.013404][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.024197][ T4385] device veth0_vlan entered promiscuous mode [ 99.035255][ T4385] device veth1_vlan entered promiscuous mode [ 99.054652][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.063136][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.073648][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.082552][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.103649][ T4385] device veth0_macvtap entered promiscuous mode [ 99.113454][ T4385] device veth1_macvtap entered promiscuous mode [ 99.130708][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.138450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.148001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.156440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.165019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.192379][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.199937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.209120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.221368][ T4385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.230780][ T4385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.241099][ T4385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.250100][ T4385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.333513][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.344838][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.353470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/25 20:20:33 executed programs: 2 [ 99.380682][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.390459][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.398795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.454545][ C0] hrtimer: interrupt took 26693 ns [ 99.601165][ C1] ================================================================== [ 99.609293][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 99.617165][ C1] Write of size 32 at addr ffff888072bdb460 by task syz.0.22/4433 [ 99.625056][ C1] [ 99.627442][ C1] CPU: 1 PID: 4433 Comm: syz.0.22 Not tainted syzkaller #0 [ 99.634683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.644818][ C1] Call Trace: [ 99.648123][ C1] [ 99.651085][ C1] dump_stack_lvl+0x188/0x24e [ 99.655794][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 99.660889][ C1] ? show_regs_print_info+0x12/0x12 [ 99.666130][ C1] ? load_image+0x410/0x410 [ 99.670644][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 99.676213][ C1] ? __virt_addr_valid+0x188/0x540 [ 99.681394][ C1] ? __virt_addr_valid+0x467/0x540 [ 99.686548][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 99.691670][ C1] print_report+0xa8/0x210 [ 99.696113][ C1] kasan_report+0x10b/0x140 [ 99.700831][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 99.705958][ C1] kasan_check_range+0x235/0x290 [ 99.710930][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 99.716072][ C1] memcpy+0x3c/0x60 [ 99.719943][ C1] __bpf_get_stackid+0x6c9/0x920 [ 99.724927][ C1] bpf_get_stackid_pe+0x2ec/0x400 [ 99.730003][ C1] bpf_prog_d499e7ac612d6085+0x24/0x3c [ 99.735528][ C1] bpf_overflow_handler+0x50b/0x790 [ 99.740847][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 99.746189][ C1] ? perf_swevent_overflow+0x230/0x230 [ 99.751698][ C1] ? sched_clock_cpu+0x6e/0x260 [ 99.756602][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 99.762889][ C1] __perf_event_overflow+0x457/0x630 [ 99.768197][ C1] perf_swevent_hrtimer+0x472/0x630 [ 99.773414][ C1] ? cpu_clock_event_read+0x50/0x50 [ 99.778637][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 99.783850][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.789758][ C1] ? _raw_spin_unlock+0x40/0x40 [ 99.794622][ C1] __hrtimer_run_queues+0x4e7/0xc90 [ 99.799848][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 99.805868][ C1] ? cpu_clock_event_read+0x50/0x50 [ 99.811171][ C1] ? hrtimer_interrupt+0x980/0x980 [ 99.816303][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 99.822419][ C1] hrtimer_interrupt+0x399/0x980 [ 99.827376][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 99.833378][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 99.839027][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.845035][ C1] RIP: 0033:0x7ffd9d4dc966 [ 99.849475][ C1] Code: 00 00 4c 8d 35 3b b7 ff ff 41 89 fc 49 c1 e4 04 4b 8d 5c 26 20 45 8b 3e 41 f6 c7 01 75 3b 41 8b 46 04 83 f8 01 75 44 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 48 85 d2 0f 88 09 01 00 00 4c 8b 03 4c [ 99.869100][ C1] RSP: 002b:00007ffd9d421790 EFLAGS: 00000246 [ 99.875203][ C1] RAX: 000000009ac93f5e RBX: 00007ffd9d4d80b0 RCX: 0000000000000001 [ 99.883203][ C1] RDX: 0000000000000036 RSI: 00007ffd9d421850 RDI: 0000000000000001 [ 99.891217][ C1] RBP: 00007ffd9d4217d0 R08: 0000000000000000 R09: 0000000000000000 [ 99.899201][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 99.907205][ C1] R13: 00007f1a79625fac R14: 00007ffd9d4d8080 R15: 00000000000048da [ 99.915210][ C1] [ 99.918251][ C1] [ 99.920605][ C1] Allocated by task 4433: [ 99.924933][ C1] kasan_set_track+0x4b/0x70 [ 99.929544][ C1] __kasan_kmalloc+0x8e/0xa0 [ 99.934157][ C1] __kmalloc_node+0xb2/0x240 [ 99.938770][ C1] bpf_map_area_alloc+0x47/0xe0 [ 99.943633][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 99.949365][ C1] stack_map_alloc+0x386/0x510 [ 99.954144][ C1] map_create+0x524/0xff0 [ 99.958505][ C1] __sys_bpf+0x38b/0x780 [ 99.962886][ C1] __x64_sys_bpf+0x78/0x90 [ 99.967338][ C1] do_syscall_64+0x4c/0xa0 [ 99.971768][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.977684][ C1] [ 99.980024][ C1] The buggy address belongs to the object at ffff888072bdb400 [ 99.980024][ C1] which belongs to the cache kmalloc-cg-128 of size 128 [ 99.994349][ C1] The buggy address is located 96 bytes inside of [ 99.994349][ C1] 128-byte region [ffff888072bdb400, ffff888072bdb480) [ 100.007591][ C1] [ 100.009979][ C1] The buggy address belongs to the physical page: [ 100.016420][ C1] page:ffffea0001caf6c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72bdb [ 100.026621][ C1] memcg:ffff888072bda401 [ 100.030868][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 100.038468][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442a00 [ 100.047102][ C1] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888072bda401 [ 100.055711][ C1] page dumped because: kasan: bad access detected [ 100.062161][ C1] page_owner tracks the page as allocated [ 100.067887][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4385, tgid 4385 (syz-executor), ts 99049548164, free_ts 98909975006 [ 100.086246][ C1] post_alloc_hook+0x173/0x1a0 [ 100.091030][ C1] get_page_from_freelist+0x206b/0x2180 [ 100.096598][ C1] __alloc_pages+0x1ec/0x4f0 [ 100.101251][ C1] alloc_slab_page+0x5d/0x180 [ 100.105980][ C1] new_slab+0x87/0x2d0 [ 100.110056][ C1] ___slab_alloc+0xbc5/0x1240 [ 100.114757][ C1] __kmem_cache_alloc_node+0x126/0x270 [ 100.120224][ C1] kmalloc_trace+0x26/0xe0 [ 100.124653][ C1] inet_rtm_newaddr+0x3ae/0x1950 [ 100.129608][ C1] rtnetlink_rcv_msg+0x863/0xfb0 [ 100.134571][ C1] netlink_rcv_skb+0x1ef/0x440 [ 100.139367][ C1] netlink_unicast+0x7ad/0x920 [ 100.144163][ C1] netlink_sendmsg+0x8ad/0xbd0 [ 100.148930][ C1] __sys_sendto+0x497/0x650 [ 100.153446][ C1] __x64_sys_sendto+0xda/0xf0 [ 100.158133][ C1] do_syscall_64+0x4c/0xa0 [ 100.162560][ C1] page last free stack trace: [ 100.167260][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 100.172726][ C1] free_unref_page+0x2e/0x3f0 [ 100.177427][ C1] __unfreeze_partials+0x188/0x1e0 [ 100.182568][ C1] put_cpu_partial+0x17c/0x250 [ 100.187344][ C1] qlist_free_all+0x76/0xe0 [ 100.191862][ C1] kasan_quarantine_reduce+0x144/0x160 [ 100.197361][ C1] __kasan_slab_alloc+0x1e/0x80 [ 100.202250][ C1] slab_post_alloc_hook+0x4b/0x490 [ 100.207371][ C1] kmem_cache_alloc_node+0x1ad/0x310 [ 100.212663][ C1] __alloc_skb+0xf9/0x7d0 [ 100.217012][ C1] netlink_sendmsg+0x654/0xbd0 [ 100.221799][ C1] __sys_sendto+0x497/0x650 [ 100.226309][ C1] __x64_sys_sendto+0xda/0xf0 [ 100.230995][ C1] do_syscall_64+0x4c/0xa0 [ 100.235450][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.241374][ C1] [ 100.243702][ C1] Memory state around the buggy address: [ 100.249337][ C1] ffff888072bdb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 100.257419][ C1] ffff888072bdb380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.265505][ C1] >ffff888072bdb400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 100.273568][ C1] ^ [ 100.281546][ C1] ffff888072bdb480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.289709][ C1] ffff888072bdb500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.297792][ C1] ================================================================== [ 100.305881][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.313076][ C1] CPU: 1 PID: 4433 Comm: syz.0.22 Not tainted syzkaller #0 [ 100.320278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.330343][ C1] Call Trace: [ 100.333639][ C1] [ 100.336586][ C1] dump_stack_lvl+0x188/0x24e [ 100.341304][ C1] ? memcpy+0x3c/0x60 [ 100.345305][ C1] ? show_regs_print_info+0x12/0x12 [ 100.350535][ C1] ? load_image+0x410/0x410 [ 100.355052][ C1] panic+0x2d3/0x710 [ 100.358981][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 100.364020][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 100.368570][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.374477][ C1] ? _raw_spin_unlock+0x40/0x40 [ 100.379427][ C1] check_panic_on_warn+0x80/0xa0 [ 100.384375][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 100.389498][ C1] end_report+0x66/0x110 [ 100.393764][ C1] kasan_report+0x118/0x140 [ 100.398298][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 100.403471][ C1] kasan_check_range+0x235/0x290 [ 100.408443][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 100.413564][ C1] memcpy+0x3c/0x60 [ 100.417397][ C1] __bpf_get_stackid+0x6c9/0x920 [ 100.422389][ C1] bpf_get_stackid_pe+0x2ec/0x400 [ 100.427423][ C1] bpf_prog_d499e7ac612d6085+0x24/0x3c [ 100.432887][ C1] bpf_overflow_handler+0x50b/0x790 [ 100.438116][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 100.443425][ C1] ? perf_swevent_overflow+0x230/0x230 [ 100.448917][ C1] ? sched_clock_cpu+0x6e/0x260 [ 100.453789][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 100.460046][ C1] __perf_event_overflow+0x457/0x630 [ 100.465362][ C1] perf_swevent_hrtimer+0x472/0x630 [ 100.470600][ C1] ? cpu_clock_event_read+0x50/0x50 [ 100.475842][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 100.481083][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.486995][ C1] ? _raw_spin_unlock+0x40/0x40 [ 100.491860][ C1] __hrtimer_run_queues+0x4e7/0xc90 [ 100.497083][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 100.503100][ C1] ? cpu_clock_event_read+0x50/0x50 [ 100.508316][ C1] ? hrtimer_interrupt+0x980/0x980 [ 100.513436][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 100.519512][ C1] hrtimer_interrupt+0x399/0x980 [ 100.524465][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 100.530478][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 100.536137][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 100.542178][ C1] RIP: 0033:0x7ffd9d4dc966 [ 100.546705][ C1] Code: 00 00 4c 8d 35 3b b7 ff ff 41 89 fc 49 c1 e4 04 4b 8d 5c 26 20 45 8b 3e 41 f6 c7 01 75 3b 41 8b 46 04 83 f8 01 75 44 0f 01 f9 <66> 90 48 c1 e2 20 48 09 c2 48 85 d2 0f 88 09 01 00 00 4c 8b 03 4c [ 100.566330][ C1] RSP: 002b:00007ffd9d421790 EFLAGS: 00000246 [ 100.572416][ C1] RAX: 000000009ac93f5e RBX: 00007ffd9d4d80b0 RCX: 0000000000000001 [ 100.580397][ C1] RDX: 0000000000000036 RSI: 00007ffd9d421850 RDI: 0000000000000001 [ 100.588380][ C1] RBP: 00007ffd9d4217d0 R08: 0000000000000000 R09: 0000000000000000 [ 100.596370][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 100.604368][ C1] R13: 00007f1a79625fac R14: 00007ffd9d4d8080 R15: 00000000000048da [ 100.612359][ C1] [ 100.615990][ C1] Kernel Offset: disabled [ 100.620329][ C1] Rebooting in 86400 seconds..