Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts.
2026/09/13 22:09:03 parsed 1 programs
2026/09/13 22:09:03 serving rpc on tcp://33243
[ 92.010317][ T5791] cgroup: Unknown subsys name 'net'
[ 92.116146][ T27] cfg80211: failed to load regulatory.db
[ 92.172689][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 93.912609][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.982715][ T5820] chnl_net:caif_netlink_parms(): no params data found
[ 97.076284][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.083480][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.091879][ T5820] bridge_slave_0: entered allmulticast mode
[ 97.099562][ T5820] bridge_slave_0: entered promiscuous mode
[ 97.112459][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.120023][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.127330][ T5820] bridge_slave_1: entered allmulticast mode
[ 97.134494][ T5820] bridge_slave_1: entered promiscuous mode
[ 97.167224][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.179043][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.211423][ T5820] team0: Port device team_slave_0 added
[ 97.219595][ T5820] team0: Port device team_slave_1 added
[ 97.251899][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.259078][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.285423][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.299483][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.306711][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.332937][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.384570][ T5820] hsr_slave_0: entered promiscuous mode
[ 97.391048][ T5820] hsr_slave_1: entered promiscuous mode
[ 97.570147][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.582467][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.593412][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.608219][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.639972][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.647329][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.655593][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.662735][ T5820] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.735975][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.757669][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.766556][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.785506][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.802725][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.809955][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.825273][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.832413][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.055990][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.109608][ T5820] veth0_vlan: entered promiscuous mode
[ 98.124679][ T5820] veth1_vlan: entered promiscuous mode
[ 98.157800][ T5820] veth0_macvtap: entered promiscuous mode
[ 98.168460][ T5820] veth1_macvtap: entered promiscuous mode
[ 98.188005][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.206582][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.220504][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.229655][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.238644][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.247831][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.423390][ T3558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.413144][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.421382][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.457583][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.465625][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.684498][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.692884][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.701129][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.710700][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.718539][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.726327][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.926729][ T3558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/13 22:09:15 executed programs: 0
[ 101.293752][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.305955][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.313904][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.323180][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.331125][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 101.338966][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.496824][ T5894] chnl_net:caif_netlink_parms(): no params data found
[ 101.572136][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.579392][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.587024][ T5894] bridge_slave_0: entered allmulticast mode
[ 101.594438][ T5894] bridge_slave_0: entered promiscuous mode
[ 101.603232][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.611480][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.619118][ T5894] bridge_slave_1: entered allmulticast mode
[ 101.627045][ T5894] bridge_slave_1: entered promiscuous mode
[ 101.658551][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.670832][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.703821][ T5894] team0: Port device team_slave_0 added
[ 101.713985][ T5894] team0: Port device team_slave_1 added
[ 101.743574][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.751078][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.777262][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.789947][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.797408][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.823782][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.870667][ T5894] hsr_slave_0: entered promiscuous mode
[ 101.877505][ T5894] hsr_slave_1: entered promiscuous mode
[ 101.884278][ T5894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 101.892185][ T5894] Cannot create hsr debugfs directory
[ 103.176310][ T3558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.259616][ T3558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.397661][ T5089] Bluetooth: hci0: command tx timeout
[ 104.139845][ T3558] hsr_slave_0: left promiscuous mode
[ 104.146559][ T3558] hsr_slave_1: left promiscuous mode
[ 104.152839][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 104.161345][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 104.170569][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 104.178336][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 104.188110][ T3558] bridge_slave_1: left allmulticast mode
[ 104.193838][ T3558] bridge_slave_1: left promiscuous mode
[ 104.201761][ T3558] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.220279][ T3558] bridge_slave_0: left allmulticast mode
[ 104.227809][ T3558] bridge_slave_0: left promiscuous mode
[ 104.233681][ T3558] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.267225][ T3558] veth1_macvtap: left promiscuous mode
[ 104.273960][ T3558] veth0_macvtap: left promiscuous mode
[ 104.283288][ T3558] veth1_vlan: left promiscuous mode
[ 104.289150][ T3558] veth0_vlan: left promiscuous mode
[ 104.783751][ T3558] team0 (unregistering): Port device team_slave_1 removed
[ 104.816921][ T3558] team0 (unregistering): Port device team_slave_0 removed
[ 104.850410][ T3558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.887229][ T3558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.114958][ T3558] bond0 (unregistering): Released all slaves
[ 105.241505][ T5894] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.256253][ T5894] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.268163][ T5894] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.281674][ T5894] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.398639][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.432556][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.452417][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.459631][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.475270][ T5089] Bluetooth: hci0: command tx timeout
[ 105.491126][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.498294][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.817915][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.873400][ T5894] veth0_vlan: entered promiscuous mode
[ 105.894514][ T5894] veth1_vlan: entered promiscuous mode
[ 105.940992][ T5894] veth0_macvtap: entered promiscuous mode
[ 105.950913][ T5894] veth1_macvtap: entered promiscuous mode
[ 105.972262][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.988217][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.000456][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.009564][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.019462][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.028802][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.101082][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.120220][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.156330][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.169995][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/13 22:09:20 executed programs: 2
[ 106.337788][ T5933] ==================================================================
[ 106.345933][ T5933] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 106.354845][ T5933] Write of size 4 at addr ffff8880788f4330 by task syz.0.17/5933
[ 106.362780][ T5933]
[ 106.365162][ T5933] CPU: 1 PID: 5933 Comm: syz.0.17 Not tainted syzkaller #0
[ 106.372432][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 106.382536][ T5933] Call Trace:
[ 106.385856][ T5933]
[ 106.388831][ T5933] dump_stack_lvl+0x18c/0x250
[ 106.393594][ T5933] ? __lock_acquire+0x7d80/0x7d80
[ 106.398663][ T5933] ? show_regs_print_info+0x20/0x20
[ 106.403910][ T5933] ? load_image+0x420/0x420
[ 106.408454][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 106.413613][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 106.418803][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 106.423967][ T5933] print_report+0xa8/0x210
[ 106.428436][ T5933] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.434634][ T5933] kasan_report+0x117/0x150
[ 106.439187][ T5933] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.445400][ T5933] stack_map_get_build_id_offset+0x6c0/0x720
[ 106.451472][ T5933] ? pcpu_freelist_pop+0x12a/0x190
[ 106.456638][ T5933] ? __bpf_get_stackid+0x900/0x900
[ 106.461793][ T5933] ? perf_get_regs_user+0x5bb/0x6b0
[ 106.467015][ T5933] ? perf_reg_abi+0x62/0x90
[ 106.471544][ T5933] __bpf_get_stackid+0x564/0x900
[ 106.476509][ T5933] bpf_get_stackid_pe+0x343/0x410
[ 106.481564][ T5933] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 106.487062][ T5933] bpf_overflow_handler+0x1fc/0x510
[ 106.492288][ T5933] ? bpf_overflow_handler+0xde/0x510
[ 106.497597][ T5933] ? tp_perf_event_destroy+0x20/0x20
[ 106.502918][ T5933] ? __perf_event_account_interrupt+0x187/0x280
[ 106.509182][ T5933] __perf_event_overflow+0x461/0x660
[ 106.514495][ T5933] perf_swevent_event+0x319/0x570
[ 106.519544][ T5933] ? perf_tp_event+0x1550/0x1550
[ 106.524511][ T5933] ___perf_sw_event+0x4ab/0x730
[ 106.529394][ T5933] ? ___perf_sw_event+0x19e/0x730
[ 106.534448][ T5933] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 106.540890][ T5933] ? __lock_acquire+0x1336/0x7d80
[ 106.545945][ T5933] ? rep_movs_alternative+0x4a/0x90
[ 106.551174][ T5933] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 106.557178][ T5933] ? lock_chain_count+0x20/0x20
[ 106.562054][ T5933] __perf_sw_event+0x139/0x270
[ 106.566856][ T5933] do_user_addr_fault+0x1242/0x12d0
[ 106.572090][ T5933] ? rcu_is_watching+0x15/0xb0
[ 106.576911][ T5933] exc_page_fault+0x64/0x100
[ 106.581551][ T5933] asm_exc_page_fault+0x26/0x30
[ 106.586448][ T5933] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 106.592322][ T5933] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 106.611964][ T5933] RSP: 0018:ffffc900033f7670 EFLAGS: 00050202
[ 106.618056][ T5933] RAX: ffffffff8431a501 RBX: 0000000000003e80 RCX: 0000000000002080
[ 106.626049][ T5933] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888079945e00
[ 106.634055][ T5933] RBP: ffffc900033f77d0 R08: ffff888079947e7f R09: 1ffff1100f328fcf
[ 106.642056][ T5933] R10: dffffc0000000000 R11: ffffed100f328fd0 R12: 0000200000004080
[ 106.650074][ T5933] R13: ffffc900033f7e40 R14: ffff888079944000 R15: 0000200000000200
[ 106.658082][ T5933] ? _copy_from_iter+0x1251/0x1290
[ 106.663232][ T5933] copyin+0x70/0x90
[ 106.667069][ T5933] _copy_from_iter+0x3ec/0x1290
[ 106.671969][ T5933] ? sock_alloc_send_pskb+0x8a1/0x9a0
[ 106.677393][ T5933] ? copyout_mc+0x70/0x70
[ 106.681753][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 106.686891][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 106.692024][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 106.697164][ T5933] ? __check_object_size+0x4fc/0xa40
[ 106.702468][ T5933] skb_copy_datagram_from_iter+0xf2/0x6f0
[ 106.708222][ T5933] ? do_raw_spin_unlock+0x121/0x230
[ 106.713466][ T5933] ? skb_put+0x112/0x210
[ 106.717763][ T5933] unix_dgram_sendmsg+0x659/0x16e0
[ 106.722905][ T5933] ? aa_af_perm+0x330/0x330
[ 106.727466][ T5933] ? unix_dgram_poll+0x680/0x680
[ 106.732425][ T5933] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 106.738884][ T5933] ? apparmor_socket_sendmsg+0x8e/0x330
[ 106.744461][ T5933] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 106.749771][ T5933] ? security_socket_sendmsg+0x80/0xa0
[ 106.755254][ T5933] ? unix_dgram_poll+0x680/0x680
[ 106.760211][ T5933] ____sys_sendmsg+0x61b/0x980
[ 106.765000][ T5933] ? __asan_memset+0x22/0x40
[ 106.769616][ T5933] ? __sys_sendmsg_sock+0x30/0x30
[ 106.774664][ T5933] ? __import_iovec+0x3fa/0x850
[ 106.779549][ T5933] ? import_iovec+0x73/0xa0
[ 106.784111][ T5933] ___sys_sendmsg+0x2a6/0x360
[ 106.788823][ T5933] ? __sys_sendmsg+0x2b0/0x2b0
[ 106.793629][ T5933] ? futex_wake+0x3fa/0x4f0
[ 106.798170][ T5933] ? init_file+0x12c/0x1f0
[ 106.802607][ T5933] ? alloc_file+0x87/0x600
[ 106.807059][ T5933] __se_sys_sendmsg+0x1d0/0x2c0
[ 106.811945][ T5933] ? __x64_sys_sendmsg+0x80/0x80
[ 106.816910][ T5933] ? lockdep_hardirqs_on+0x98/0x150
[ 106.822139][ T5933] do_syscall_64+0x55/0xb0
[ 106.826580][ T5933] ? clear_bhb_loop+0x40/0x90
[ 106.831287][ T5933] ? clear_bhb_loop+0x40/0x90
[ 106.836011][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.841936][ T5933] RIP: 0033:0x7f326139e159
[ 106.846373][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.866089][ T5933] RSP: 002b:00007ffd97f06ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 106.874550][ T5933] RAX: ffffffffffffffda RBX: 00007f3261625fa0 RCX: 00007f326139e159
[ 106.882544][ T5933] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[ 106.890540][ T5933] RBP: 00007f326143503b R08: 0000000000000000 R09: 0000000000000000
[ 106.898534][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.906526][ T5933] R13: 00007f3261625fac R14: 00007f3261625fa0 R15: 00007f3261625fa0
[ 106.914610][ T5933]
[ 106.917651][ T5933]
[ 106.919986][ T5933] Allocated by task 5933:
[ 106.924346][ T5933] kasan_set_track+0x4e/0x70
[ 106.928961][ T5933] __kasan_kmalloc+0x8f/0xa0
[ 106.933581][ T5933] __kmalloc_node+0xb6/0x240
[ 106.938206][ T5933] bpf_map_area_alloc+0x5e/0x110
[ 106.943170][ T5933] prealloc_elems_and_freelist+0x86/0x1c0
[ 106.948948][ T5933] stack_map_alloc+0x32b/0x4b0
[ 106.953735][ T5933] map_create+0x877/0x12f0
[ 106.958176][ T5933] __sys_bpf+0x651/0x890
[ 106.962436][ T5933] __x64_sys_bpf+0x7c/0x90
[ 106.966876][ T5933] do_syscall_64+0x55/0xb0
[ 106.971341][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.977255][ T5933]
[ 106.979596][ T5933] The buggy address belongs to the object at ffff8880788f4000
[ 106.979596][ T5933] which belongs to the cache kmalloc-cg-1k of size 1024
[ 106.993926][ T5933] The buggy address is located 0 bytes to the right of
[ 106.993926][ T5933] allocated 816-byte region [ffff8880788f4000, ffff8880788f4330)
[ 107.008438][ T5933]
[ 107.010780][ T5933] The buggy address belongs to the physical page:
[ 107.017221][ T5933] page:ffffea0001e23c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880788f6800 pfn:0x788f0
[ 107.028698][ T5933] head:ffffea0001e23c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.037648][ T5933] memcg:ffff888076594301
[ 107.041909][ T5933] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 107.050379][ T5933] page_type: 0xffffffff()
[ 107.054733][ T5933] raw: 00fff00000000840 ffff888017c4f280 0000000000000000 0000000000000001
[ 107.063348][ T5933] raw: ffff8880788f6800 000000008010000c 00000001ffffffff ffff888076594301
[ 107.071957][ T5933] page dumped because: kasan: bad access detected
[ 107.078413][ T5933] page_owner tracks the page as allocated
[ 107.084159][ T5933] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5686, tgid 5686 (dhcpcd-run-hook), ts 72700186237, free_ts 72669501534
[ 107.105828][ T5933] post_alloc_hook+0x1c1/0x200
[ 107.110646][ T5933] get_page_from_freelist+0x2181/0x22a0
[ 107.116221][ T5933] __alloc_pages+0x1f0/0x460
[ 107.120842][ T5933] alloc_slab_page+0x5d/0x180
[ 107.125554][ T5933] new_slab+0x87/0x2d0
[ 107.129658][ T5933] ___slab_alloc+0xc5c/0x12f0
[ 107.134410][ T5933] __kmem_cache_alloc_node+0x11f/0x250
[ 107.139912][ T5933] __kmalloc+0xa7/0x240
[ 107.144109][ T5933] alloc_pipe_info+0x1f9/0x4b0
[ 107.148923][ T5933] create_pipe_files+0x87/0x700
[ 107.153810][ T5933] __do_pipe_flags+0x4c/0x2c0
[ 107.158531][ T5933] do_pipe2+0xab/0x190
[ 107.162665][ T5933] __x64_sys_pipe2+0x5a/0x70
[ 107.167306][ T5933] do_syscall_64+0x55/0xb0
[ 107.171757][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.177680][ T5933] page last free stack trace:
[ 107.182380][ T5933] free_unref_page_prepare+0x7d7/0x8f0
[ 107.187867][ T5933] free_unref_page+0x32/0x2e0
[ 107.192666][ T5933] __unfreeze_partials+0x1cf/0x210
[ 107.197805][ T5933] put_cpu_partial+0x17c/0x250
[ 107.202609][ T5933] __slab_free+0x319/0x400
[ 107.207059][ T5933] qlist_free_all+0x75/0xd0
[ 107.211606][ T5933] kasan_quarantine_reduce+0x143/0x160
[ 107.217102][ T5933] __kasan_slab_alloc+0x22/0x80
[ 107.221987][ T5933] slab_post_alloc_hook+0x6a/0x4d0
[ 107.227143][ T5933] kmem_cache_alloc+0x17e/0x2c0
[ 107.232029][ T5933] getname_flags+0xbb/0x500
[ 107.236581][ T5933] vfs_fstatat+0x111/0x1b0
[ 107.241042][ T5933] __x64_sys_newfstatat+0x149/0x1f0
[ 107.246291][ T5933] do_syscall_64+0x55/0xb0
[ 107.250740][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.256693][ T5933]
[ 107.259066][ T5933] Memory state around the buggy address:
[ 107.264719][ T5933] ffff8880788f4200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.272984][ T5933] ffff8880788f4280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.281095][ T5933] >ffff8880788f4300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 107.289178][ T5933] ^
[ 107.294826][ T5933] ffff8880788f4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.302905][ T5933] ffff8880788f4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.310982][ T5933] ==================================================================
[ 107.319099][ T5933] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.326312][ T5933] CPU: 1 PID: 5933 Comm: syz.0.17 Not tainted syzkaller #0
[ 107.333531][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 107.343692][ T5933] Call Trace:
[ 107.346993][ T5933]
[ 107.349945][ T5933] dump_stack_lvl+0x18c/0x250
[ 107.354648][ T5933] ? show_regs_print_info+0x20/0x20
[ 107.359875][ T5933] ? load_image+0x420/0x420
[ 107.364403][ T5933] panic+0x2ca/0x720
[ 107.368337][ T5933] ? bpf_jit_dump+0xd0/0xd0
[ 107.372895][ T5933] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 107.378819][ T5933] ? _raw_spin_unlock+0x40/0x40
[ 107.383697][ T5933] ? print_memory_metadata+0x314/0x400
[ 107.389181][ T5933] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 107.395364][ T5933] check_panic_on_warn+0x84/0xa0
[ 107.400358][ T5933] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 107.406536][ T5933] end_report+0x6f/0x130
[ 107.410809][ T5933] kasan_report+0x128/0x150
[ 107.415340][ T5933] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 107.421518][ T5933] stack_map_get_build_id_offset+0x6c0/0x720
[ 107.427522][ T5933] ? pcpu_freelist_pop+0x12a/0x190
[ 107.432653][ T5933] ? __bpf_get_stackid+0x900/0x900
[ 107.437795][ T5933] ? perf_get_regs_user+0x5bb/0x6b0
[ 107.443012][ T5933] ? perf_reg_abi+0x62/0x90
[ 107.447540][ T5933] __bpf_get_stackid+0x564/0x900
[ 107.452512][ T5933] bpf_get_stackid_pe+0x343/0x410
[ 107.457569][ T5933] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 107.463045][ T5933] bpf_overflow_handler+0x1fc/0x510
[ 107.468273][ T5933] ? bpf_overflow_handler+0xde/0x510
[ 107.473589][ T5933] ? tp_perf_event_destroy+0x20/0x20
[ 107.478924][ T5933] ? __perf_event_account_interrupt+0x187/0x280
[ 107.485274][ T5933] __perf_event_overflow+0x461/0x660
[ 107.490590][ T5933] perf_swevent_event+0x319/0x570
[ 107.495637][ T5933] ? perf_tp_event+0x1550/0x1550
[ 107.500599][ T5933] ___perf_sw_event+0x4ab/0x730
[ 107.505481][ T5933] ? ___perf_sw_event+0x19e/0x730
[ 107.510536][ T5933] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 107.516973][ T5933] ? __lock_acquire+0x1336/0x7d80
[ 107.522018][ T5933] ? rep_movs_alternative+0x4a/0x90
[ 107.527252][ T5933] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 107.533266][ T5933] ? lock_chain_count+0x20/0x20
[ 107.538152][ T5933] __perf_sw_event+0x139/0x270
[ 107.542942][ T5933] do_user_addr_fault+0x1242/0x12d0
[ 107.548174][ T5933] ? rcu_is_watching+0x15/0xb0
[ 107.552974][ T5933] exc_page_fault+0x64/0x100
[ 107.557597][ T5933] asm_exc_page_fault+0x26/0x30
[ 107.562470][ T5933] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 107.568315][ T5933] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[ 107.587949][ T5933] RSP: 0018:ffffc900033f7670 EFLAGS: 00050202
[ 107.594034][ T5933] RAX: ffffffff8431a501 RBX: 0000000000003e80 RCX: 0000000000002080
[ 107.602023][ T5933] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888079945e00
[ 107.610015][ T5933] RBP: ffffc900033f77d0 R08: ffff888079947e7f R09: 1ffff1100f328fcf
[ 107.618007][ T5933] R10: dffffc0000000000 R11: ffffed100f328fd0 R12: 0000200000004080
[ 107.626004][ T5933] R13: ffffc900033f7e40 R14: ffff888079944000 R15: 0000200000000200
[ 107.633999][ T5933] ? _copy_from_iter+0x1251/0x1290
[ 107.639145][ T5933] copyin+0x70/0x90
[ 107.642978][ T5933] _copy_from_iter+0x3ec/0x1290
[ 107.647859][ T5933] ? sock_alloc_send_pskb+0x8a1/0x9a0
[ 107.653267][ T5933] ? copyout_mc+0x70/0x70
[ 107.657645][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 107.662787][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 107.667929][ T5933] ? __virt_addr_valid+0x10c/0x380
[ 107.673067][ T5933] ? __check_object_size+0x4fc/0xa40
[ 107.678379][ T5933] skb_copy_datagram_from_iter+0xf2/0x6f0
[ 107.684145][ T5933] ? do_raw_spin_unlock+0x121/0x230
[ 107.689370][ T5933] ? skb_put+0x112/0x210
[ 107.693649][ T5933] unix_dgram_sendmsg+0x659/0x16e0
[ 107.698800][ T5933] ? aa_af_perm+0x330/0x330
[ 107.703337][ T5933] ? unix_dgram_poll+0x680/0x680
[ 107.708303][ T5933] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 107.714751][ T5933] ? apparmor_socket_sendmsg+0x8e/0x330
[ 107.720325][ T5933] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 107.725633][ T5933] ? security_socket_sendmsg+0x80/0xa0
[ 107.731115][ T5933] ? unix_dgram_poll+0x680/0x680
[ 107.736074][ T5933] ____sys_sendmsg+0x61b/0x980
[ 107.740863][ T5933] ? __asan_memset+0x22/0x40
[ 107.745481][ T5933] ? __sys_sendmsg_sock+0x30/0x30
[ 107.750524][ T5933] ? __import_iovec+0x3fa/0x850
[ 107.755410][ T5933] ? import_iovec+0x73/0xa0
[ 107.759947][ T5933] ___sys_sendmsg+0x2a6/0x360
[ 107.764656][ T5933] ? __sys_sendmsg+0x2b0/0x2b0
[ 107.769471][ T5933] ? futex_wake+0x3fa/0x4f0
[ 107.773998][ T5933] ? init_file+0x12c/0x1f0
[ 107.778458][ T5933] ? alloc_file+0x87/0x600
[ 107.782901][ T5933] __se_sys_sendmsg+0x1d0/0x2c0
[ 107.787779][ T5933] ? __x64_sys_sendmsg+0x80/0x80
[ 107.792745][ T5933] ? lockdep_hardirqs_on+0x98/0x150
[ 107.797978][ T5933] do_syscall_64+0x55/0xb0
[ 107.802418][ T5933] ? clear_bhb_loop+0x40/0x90
[ 107.807119][ T5933] ? clear_bhb_loop+0x40/0x90
[ 107.811820][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.817737][ T5933] RIP: 0033:0x7f326139e159
[ 107.822174][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.841799][ T5933] RSP: 002b:00007ffd97f06ed8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 107.850235][ T5933] RAX: ffffffffffffffda RBX: 00007f3261625fa0 RCX: 00007f326139e159
[ 107.858237][ T5933] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[ 107.866233][ T5933] RBP: 00007f326143503b R08: 0000000000000000 R09: 0000000000000000
[ 107.874235][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.882231][ T5933] R13: 00007f3261625fac R14: 00007f3261625fa0 R15: 00007f3261625fa0
[ 107.890240][ T5933]
[ 107.893861][ T5933] Kernel Offset: disabled
[ 107.898283][ T5933] Rebooting in 86400 seconds..