Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts.
2026/09/12 05:34:01 parsed 1 programs
2026/09/12 05:34:01 serving rpc on tcp://45209
[ 88.687731][ T5787] cgroup: Unknown subsys name 'net'
[ 88.822619][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 90.659208][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.338176][ T1202] cfg80211: failed to load regulatory.db
[ 94.367564][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.376446][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.384327][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.402424][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.410426][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 94.418119][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.772001][ T4767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.780390][ T4767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.813709][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.822179][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.902579][ T5869] chnl_net:caif_netlink_parms(): no params data found
[ 95.965535][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.973446][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.980749][ T5869] bridge_slave_0: entered allmulticast mode
[ 95.987874][ T5869] bridge_slave_0: entered promiscuous mode
[ 95.997489][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.004588][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.012337][ T5869] bridge_slave_1: entered allmulticast mode
[ 96.019927][ T5869] bridge_slave_1: entered promiscuous mode
[ 96.045261][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.070597][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.099318][ T5869] team0: Port device team_slave_0 added
[ 96.108520][ T5869] team0: Port device team_slave_1 added
[ 96.141660][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.148848][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.175526][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.189185][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.196539][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.223363][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.271272][ T5869] hsr_slave_0: entered promiscuous mode
[ 96.278260][ T5869] hsr_slave_1: entered promiscuous mode
[ 96.458676][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.470591][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.480909][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.505814][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.533288][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.540539][ T5869] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.548461][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.555592][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.640957][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.662470][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.671644][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.711826][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.724735][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.731905][ T4767] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.751331][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.758615][ T4767] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.054304][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.097719][ T5869] veth0_vlan: entered promiscuous mode
[ 97.109644][ T5869] veth1_vlan: entered promiscuous mode
[ 97.140970][ T5869] veth0_macvtap: entered promiscuous mode
[ 97.151508][ T5869] veth1_macvtap: entered promiscuous mode
[ 97.171117][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.187091][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.200852][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.210661][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.219780][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.228783][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.396927][ T4767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/12 05:34:12 executed programs: 0
[ 97.824929][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.833303][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.842147][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.853287][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.861360][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 97.869265][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.017136][ T5889] chnl_net:caif_netlink_parms(): no params data found
[ 98.078945][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.086945][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.094378][ T5889] bridge_slave_0: entered allmulticast mode
[ 98.102364][ T5889] bridge_slave_0: entered promiscuous mode
[ 98.111411][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.118794][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.126490][ T5889] bridge_slave_1: entered allmulticast mode
[ 98.133818][ T5889] bridge_slave_1: entered promiscuous mode
[ 98.168527][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.181224][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.216059][ T5889] team0: Port device team_slave_0 added
[ 98.226327][ T5889] team0: Port device team_slave_1 added
[ 98.249786][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.257410][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.283686][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.297298][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.304402][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.331796][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.377681][ T5889] hsr_slave_0: entered promiscuous mode
[ 98.384358][ T5889] hsr_slave_1: entered promiscuous mode
[ 98.391282][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 98.399502][ T5889] Cannot create hsr debugfs directory
[ 99.926280][ T5086] Bluetooth: hci0: command tx timeout
[ 99.959242][ T4767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.005410][ T5086] Bluetooth: hci0: command tx timeout
[ 102.258157][ T4767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.339371][ T4767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.356870][ T4767] hsr_slave_0: left promiscuous mode
[ 103.377746][ T4767] hsr_slave_1: left promiscuous mode
[ 103.384178][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 103.405342][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 103.438831][ T4767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 103.455152][ T4767] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.476063][ T4767] bridge_slave_1: left allmulticast mode
[ 103.482530][ T4767] bridge_slave_1: left promiscuous mode
[ 103.493302][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.512437][ T4767] bridge_slave_0: left allmulticast mode
[ 103.520016][ T4767] bridge_slave_0: left promiscuous mode
[ 103.528738][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.581630][ T4767] veth1_macvtap: left promiscuous mode
[ 103.588195][ T4767] veth0_macvtap: left promiscuous mode
[ 103.605423][ T4767] veth1_vlan: left promiscuous mode
[ 103.611304][ T4767] veth0_vlan: left promiscuous mode
[ 104.086820][ T5086] Bluetooth: hci0: command tx timeout
[ 104.097769][ T4767] team0 (unregistering): Port device team_slave_1 removed
[ 104.132753][ T4767] team0 (unregistering): Port device team_slave_0 removed
[ 104.169869][ T4767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.204904][ T4767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.461022][ T4767] bond0 (unregistering): Released all slaves
[ 104.572285][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.582360][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.593258][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.615663][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.726450][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.754980][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.773069][ T85] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.780352][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.794321][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.801705][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.854810][ T5889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 105.040098][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.090557][ T5889] veth0_vlan: entered promiscuous mode
[ 105.108324][ T5889] veth1_vlan: entered promiscuous mode
[ 105.142241][ T5889] veth0_macvtap: entered promiscuous mode
[ 105.151821][ T5889] veth1_macvtap: entered promiscuous mode
[ 105.178013][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.192215][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.204498][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.213651][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.222815][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.232329][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.322819][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.334952][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/12 05:34:20 executed programs: 2
[ 105.370414][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.379681][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.516972][ T5935] ==================================================================
[ 105.525108][ T5935] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[ 105.532978][ T5935] Write of size 24 at addr ffff888025c1c940 by task syz.0.17/5935
[ 105.540821][ T5935]
[ 105.543177][ T5935] CPU: 1 PID: 5935 Comm: syz.0.17 Not tainted syzkaller #0
[ 105.550413][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 105.560589][ T5935] Call Trace:
[ 105.563906][ T5935]
[ 105.567410][ T5935] dump_stack_lvl+0x18c/0x250
[ 105.572236][ T5935] ? read_lock_is_recursive+0x20/0x20
[ 105.577660][ T5935] ? show_regs_print_info+0x20/0x20
[ 105.582908][ T5935] ? load_image+0x420/0x420
[ 105.587725][ T5935] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 105.593230][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 105.598561][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 105.603799][ T5935] ? __virt_addr_valid+0x10c/0x380
[ 105.609015][ T5935] print_report+0xa8/0x210
[ 105.613744][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 105.618899][ T5935] kasan_report+0x117/0x150
[ 105.623536][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 105.628875][ T5935] kasan_check_range+0x241/0x290
[ 105.634125][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 105.639471][ T5935] __asan_memcpy+0x40/0x70
[ 105.643939][ T5935] __bpf_get_stackid+0x6c7/0x900
[ 105.649441][ T5935] bpf_get_stackid_pe+0x2f0/0x410
[ 105.654597][ T5935] bpf_prog_327469b3a25207b2+0x2c/0x3e
[ 105.660436][ T5935] bpf_overflow_handler+0x1fc/0x510
[ 105.665674][ T5935] ? bpf_overflow_handler+0xde/0x510
[ 105.671194][ T5935] ? tp_perf_event_destroy+0x20/0x20
[ 105.676552][ T5935] ? verify_lock_unused+0x140/0x140
[ 105.682431][ T5935] ? __perf_event_account_interrupt+0x187/0x280
[ 105.688819][ T5935] __perf_event_overflow+0x461/0x660
[ 105.694265][ T5935] perf_swevent_overflow+0x274/0x340
[ 105.699622][ T5935] ? perf_event_switch_output+0x790/0x790
[ 105.705483][ T5935] ? rcu_is_watching+0x15/0xb0
[ 105.710297][ T5935] perf_swevent_event+0x45c/0x570
[ 105.715539][ T5935] ? perf_tp_event+0x1550/0x1550
[ 105.720519][ T5935] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 105.726810][ T5935] ___perf_sw_event+0x4ab/0x730
[ 105.731880][ T5935] ? wake_up_new_task+0x6d4/0xa40
[ 105.737131][ T5935] ? ___perf_sw_event+0x19e/0x730
[ 105.742375][ T5935] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 105.748836][ T5935] ? put_pid+0xde/0x120
[ 105.753493][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 105.759604][ T5935] ? lock_chain_count+0x20/0x20
[ 105.764517][ T5935] __perf_sw_event+0x139/0x270
[ 105.769823][ T5935] do_user_addr_fault+0x1242/0x12d0
[ 105.775165][ T5935] ? rcu_is_watching+0x15/0xb0
[ 105.779988][ T5935] exc_page_fault+0x64/0x100
[ 105.784626][ T5935] ? clear_bhb_loop+0x40/0x90
[ 105.789316][ T5935] asm_exc_page_fault+0x26/0x30
[ 105.794191][ T5935] RIP: 0033:0x7ffff2df1a21
[ 105.798633][ T5935] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[ 105.818275][ T5935] RSP: 002b:00007fb7d4a47ff0 EFLAGS: 00010202
[ 105.824355][ T5935] RAX: 001b0b0a6cd279fc RBX: 00007ffff2ded0b0 RCX: 0000000000000018
[ 105.832540][ T5935] RDX: 000000001b854804 RSI: 00007fb7d4a480b0 RDI: 7fffffffffffffff
[ 105.840988][ T5935] RBP: 00007fb7d4a48030 R08: 0000000000000069 R09: 0000000000745d1e
[ 105.849152][ T5935] R10: 0000003b250c3cd6 R11: 0000000000004b40 R12: 0000000000000010
[ 105.857130][ T5935] R13: 00007fb7d3e26038 R14: 00007ffff2ded080 R15: 0000000000004b40
[ 105.865122][ T5935]
[ 105.868171][ T5935]
[ 105.870490][ T5935] Allocated by task 5935:
[ 105.874817][ T5935] kasan_set_track+0x4e/0x70
[ 105.879516][ T5935] __kasan_kmalloc+0x8f/0xa0
[ 105.884105][ T5935] __kmalloc_node+0xb6/0x240
[ 105.888715][ T5935] bpf_map_area_alloc+0x5e/0x110
[ 105.893666][ T5935] prealloc_elems_and_freelist+0x86/0x1c0
[ 105.899413][ T5935] stack_map_alloc+0x32b/0x4b0
[ 105.904177][ T5935] map_create+0x877/0x12f0
[ 105.908592][ T5935] __sys_bpf+0x651/0x890
[ 105.912836][ T5935] __x64_sys_bpf+0x7c/0x90
[ 105.917348][ T5935] do_syscall_64+0x55/0xb0
[ 105.921795][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 105.927946][ T5935]
[ 105.930291][ T5935] The buggy address belongs to the object at ffff888025c1c900
[ 105.930291][ T5935] which belongs to the cache kmalloc-cg-96 of size 96
[ 105.944818][ T5935] The buggy address is located 64 bytes inside of
[ 105.944818][ T5935] allocated 72-byte region [ffff888025c1c900, ffff888025c1c948)
[ 105.959114][ T5935]
[ 105.961491][ T5935] The buggy address belongs to the physical page:
[ 105.968198][ T5935] page:ffffea0000970700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25c1c
[ 105.979310][ T5935] memcg:ffff88807ec2c201
[ 105.983762][ T5935] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 105.991503][ T5935] page_type: 0xffffffff()
[ 105.996683][ T5935] raw: 00fff00000000800 ffff888017c4db40 dead000000000122 0000000000000000
[ 106.005774][ T5935] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807ec2c201
[ 106.014376][ T5935] page dumped because: kasan: bad access detected
[ 106.021135][ T5935] page_owner tracks the page as allocated
[ 106.027553][ T5935] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5888, tgid 5888 (syz-executor), ts 97814324255, free_ts 97789178264
[ 106.046180][ T5935] post_alloc_hook+0x1c1/0x200
[ 106.051040][ T5935] get_page_from_freelist+0x2181/0x22a0
[ 106.056599][ T5935] __alloc_pages+0x1f0/0x460
[ 106.061207][ T5935] alloc_slab_page+0x5d/0x180
[ 106.065886][ T5935] new_slab+0x87/0x2d0
[ 106.069954][ T5935] ___slab_alloc+0xc5c/0x12f0
[ 106.074733][ T5935] __kmem_cache_alloc_node+0x11f/0x250
[ 106.080210][ T5935] __kmalloc_node+0xa6/0x240
[ 106.084817][ T5935] kvmalloc_node+0x70/0x180
[ 106.089419][ T5935] alloc_fdtable+0x169/0x2c0
[ 106.094276][ T5935] expand_files+0x403/0x820
[ 106.098809][ T5935] ksys_dup3+0x107/0x330
[ 106.103089][ T5935] __se_sys_dup2+0x2f/0x130
[ 106.107724][ T5935] do_syscall_64+0x55/0xb0
[ 106.112166][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.118418][ T5935] page last free stack trace:
[ 106.123097][ T5935] free_unref_page_prepare+0x7d7/0x8f0
[ 106.129077][ T5935] free_unref_page_list+0xbe/0x860
[ 106.134285][ T5935] release_pages+0x208a/0x2300
[ 106.139081][ T5935] tlb_flush_mmu+0x379/0x510
[ 106.143681][ T5935] tlb_finish_mmu+0xf4/0x220
[ 106.148271][ T5935] exit_mmap+0x428/0xb90
[ 106.152521][ T5935] __mmput+0x118/0x3a0
[ 106.156594][ T5935] exit_mm+0x23f/0x340
[ 106.160756][ T5935] do_exit+0x909/0x2530
[ 106.165187][ T5935] do_group_exit+0x22d/0x2f0
[ 106.165281][ T5086] Bluetooth: hci0: command tx timeout
[ 106.170420][ T5935] get_signal+0x12a6/0x1390
[ 106.170450][ T5935] arch_do_signal_or_restart+0xc2/0x7b0
[ 106.170477][ T5935] exit_to_user_mode_loop+0x70/0x110
[ 106.191885][ T5935] exit_to_user_mode_prepare+0xee/0x180
[ 106.197484][ T5935] syscall_exit_to_user_mode+0x1a/0x50
[ 106.203283][ T5935] do_syscall_64+0x61/0xb0
[ 106.207708][ T5935]
[ 106.210048][ T5935] Memory state around the buggy address:
[ 106.216901][ T5935] ffff888025c1c800: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 106.225902][ T5935] ffff888025c1c880: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 106.236180][ T5935] >ffff888025c1c900: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 106.246712][ T5935] ^
[ 106.254458][ T5935] ffff888025c1c980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 106.263110][ T5935] ffff888025c1ca00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 106.271265][ T5935] ==================================================================
[ 106.279598][ T5935] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 106.287407][ T5935] CPU: 1 PID: 5935 Comm: syz.0.17 Not tainted syzkaller #0
[ 106.295056][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 106.305384][ T5935] Call Trace:
[ 106.308758][ T5935]
[ 106.311713][ T5935] dump_stack_lvl+0x18c/0x250
[ 106.316417][ T5935] ? show_regs_print_info+0x20/0x20
[ 106.321626][ T5935] ? load_image+0x420/0x420
[ 106.326254][ T5935] panic+0x2ca/0x720
[ 106.330160][ T5935] ? __lock_acquire+0x7d80/0x7d80
[ 106.335195][ T5935] ? bpf_jit_dump+0xd0/0xd0
[ 106.339890][ T5935] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 106.345793][ T5935] ? _raw_spin_unlock+0x40/0x40
[ 106.350740][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 106.355864][ T5935] check_panic_on_warn+0x84/0xa0
[ 106.360997][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 106.366394][ T5935] end_report+0x6f/0x130
[ 106.370653][ T5935] kasan_report+0x128/0x150
[ 106.375171][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 106.380386][ T5935] kasan_check_range+0x241/0x290
[ 106.385338][ T5935] ? __bpf_get_stackid+0x6c7/0x900
[ 106.390553][ T5935] __asan_memcpy+0x40/0x70
[ 106.395095][ T5935] __bpf_get_stackid+0x6c7/0x900
[ 106.400667][ T5935] bpf_get_stackid_pe+0x2f0/0x410
[ 106.405808][ T5935] bpf_prog_327469b3a25207b2+0x2c/0x3e
[ 106.411391][ T5935] bpf_overflow_handler+0x1fc/0x510
[ 106.417338][ T5935] ? bpf_overflow_handler+0xde/0x510
[ 106.422818][ T5935] ? tp_perf_event_destroy+0x20/0x20
[ 106.428220][ T5935] ? verify_lock_unused+0x140/0x140
[ 106.433697][ T5935] ? __perf_event_account_interrupt+0x187/0x280
[ 106.440050][ T5935] __perf_event_overflow+0x461/0x660
[ 106.445349][ T5935] perf_swevent_overflow+0x274/0x340
[ 106.450740][ T5935] ? perf_event_switch_output+0x790/0x790
[ 106.456830][ T5935] ? rcu_is_watching+0x15/0xb0
[ 106.461722][ T5935] perf_swevent_event+0x45c/0x570
[ 106.466757][ T5935] ? perf_tp_event+0x1550/0x1550
[ 106.471893][ T5935] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 106.478145][ T5935] ___perf_sw_event+0x4ab/0x730
[ 106.483874][ T5935] ? wake_up_new_task+0x6d4/0xa40
[ 106.489204][ T5935] ? ___perf_sw_event+0x19e/0x730
[ 106.494352][ T5935] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 106.501001][ T5935] ? put_pid+0xde/0x120
[ 106.506108][ T5935] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 106.512337][ T5935] ? lock_chain_count+0x20/0x20
[ 106.517502][ T5935] __perf_sw_event+0x139/0x270
[ 106.522487][ T5935] do_user_addr_fault+0x1242/0x12d0
[ 106.528495][ T5935] ? rcu_is_watching+0x15/0xb0
[ 106.534084][ T5935] exc_page_fault+0x64/0x100
[ 106.539150][ T5935] ? clear_bhb_loop+0x40/0x90
[ 106.544328][ T5935] asm_exc_page_fault+0x26/0x30
[ 106.549499][ T5935] RIP: 0033:0x7ffff2df1a21
[ 106.553978][ T5935] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36
[ 106.573703][ T5935] RSP: 002b:00007fb7d4a47ff0 EFLAGS: 00010202
[ 106.580137][ T5935] RAX: 001b0b0a6cd279fc RBX: 00007ffff2ded0b0 RCX: 0000000000000018
[ 106.588229][ T5935] RDX: 000000001b854804 RSI: 00007fb7d4a480b0 RDI: 7fffffffffffffff
[ 106.596382][ T5935] RBP: 00007fb7d4a48030 R08: 0000000000000069 R09: 0000000000745d1e
[ 106.604446][ T5935] R10: 0000003b250c3cd6 R11: 0000000000004b40 R12: 0000000000000010
[ 106.612426][ T5935] R13: 00007fb7d3e26038 R14: 00007ffff2ded080 R15: 0000000000004b40
[ 106.620847][ T5935]
[ 106.624378][ T5935] Kernel Offset: disabled
[ 106.628914][ T5935] Rebooting in 86400 seconds..