Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. 1970/01/01 00:00:28 parsed 1 programs 1970/01/01 00:00:28 serving rpc on tcp://44717 [ 29.924367][ T4720] cgroup: Unknown subsys name 'net' [ 30.045502][ T4720] cgroup: Unknown subsys name 'cpuset' [ 30.047450][ T4720] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.222747][ T4720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.495987][ T4727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.005939][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.006159][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.006228][ T4745] bridge_slave_0: entered allmulticast mode [ 33.006692][ T4745] bridge_slave_0: entered promiscuous mode [ 33.007825][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.007847][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.007893][ T4745] bridge_slave_1: entered allmulticast mode [ 33.008330][ T4745] bridge_slave_1: entered promiscuous mode [ 33.016599][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.017421][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.023504][ T4745] team0: Port device team_slave_0 added [ 33.024215][ T4745] team0: Port device team_slave_1 added [ 33.029917][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.029946][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.029961][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.030732][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.030740][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.030752][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.040400][ T4745] hsr_slave_0: entered promiscuous mode [ 33.040763][ T4745] hsr_slave_1: entered promiscuous mode [ 33.081151][ T4745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.084494][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.084844][ T4745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.086933][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.087228][ T4745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.089299][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.089577][ T4745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.090804][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.100464][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.100522][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.100666][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.100699][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.117895][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.121796][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.123780][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.128639][ T4745] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.130784][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.130837][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.135977][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.136018][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.227531][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.239402][ T4745] veth0_vlan: entered promiscuous mode [ 33.242668][ T4745] veth1_vlan: entered promiscuous mode [ 33.255557][ T4745] veth0_macvtap: entered promiscuous mode [ 33.256696][ T4745] veth1_macvtap: entered promiscuous mode [ 33.260867][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.262050][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.293388][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.296258][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.298242][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.300306][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.348260][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.355280][ T1394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.355308][ T1394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.362069][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.362094][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.415090][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.465806][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.558628][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.900976][ T4732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.902824][ T4732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.904831][ T4732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.906644][ T4732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.908642][ T4732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:34 executed programs: 0 [ 34.117109][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.118814][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.119360][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.119698][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.119927][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.249542][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.249618][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.249714][ T4823] bridge_slave_0: entered allmulticast mode [ 34.250137][ T4823] bridge_slave_0: entered promiscuous mode [ 34.251452][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.251514][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.251572][ T4823] bridge_slave_1: entered allmulticast mode [ 34.252085][ T4823] bridge_slave_1: entered promiscuous mode [ 34.260347][ T4823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.261403][ T4823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.268555][ T4823] team0: Port device team_slave_0 added [ 34.269367][ T4823] team0: Port device team_slave_1 added [ 34.276129][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.276149][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.276167][ T4823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.277438][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.277446][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.277462][ T4823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.287855][ T4823] hsr_slave_0: entered promiscuous mode [ 34.288155][ T4823] hsr_slave_1: entered promiscuous mode [ 34.288349][ T4823] debugfs: 'hsr0' already exists in 'hsr' [ 34.288384][ T4823] Cannot create hsr debugfs directory [ 36.173386][ T4732] Bluetooth: hci0: command tx timeout [ 36.543556][ T12] bridge_slave_1: left allmulticast mode [ 36.543604][ T12] bridge_slave_1: left promiscuous mode [ 36.543911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.551118][ T12] bridge_slave_0: left allmulticast mode [ 36.552344][ T12] bridge_slave_0: left promiscuous mode [ 36.552456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.609957][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.644294][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.654002][ T12] bond0 (unregistering): Released all slaves [ 36.716721][ T12] hsr_slave_0: left promiscuous mode [ 36.717041][ T12] hsr_slave_1: left promiscuous mode [ 36.717350][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.717369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.722313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.722339][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.730930][ T12] veth1_macvtap: left promiscuous mode [ 36.732050][ T12] veth0_macvtap: left promiscuous mode [ 36.733294][ T12] veth1_vlan: left promiscuous mode [ 36.734333][ T12] veth0_vlan: left promiscuous mode [ 36.823568][ T12] team0 (unregistering): Port device team_slave_1 removed [ 36.827464][ T12] team0 (unregistering): Port device team_slave_0 removed [ 36.883409][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.137396][ T4823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.140936][ T4823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.141277][ T4823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.143052][ T4823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.145685][ T4823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.148045][ T4823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.149879][ T4823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.152063][ T4823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.341112][ T4823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.346799][ T4823] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.349853][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.349901][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.354299][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.354339][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.487683][ T4823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.541882][ T4823] veth0_vlan: entered promiscuous mode [ 37.545658][ T4823] veth1_vlan: entered promiscuous mode [ 37.552127][ T4823] veth0_macvtap: entered promiscuous mode [ 37.553340][ T4823] veth1_macvtap: entered promiscuous mode [ 37.556543][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.557655][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.559862][ T1394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.607138][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.607162][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.618487][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.618511][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.623731][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.623769][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.623799][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.657015][ T4914] ------------[ cut here ]------------ [ 37.657037][ T4914] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6 [ 37.659796][ T4914] index 3 is out of range for type 'const char *const[3]' [ 37.659840][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 37.659856][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.659863][ T4914] Call trace: [ 37.659867][ T4914] show_stack+0x2c/0x3c (C) [ 37.659888][ T4914] __dump_stack+0x30/0x40 [ 37.659900][ T4914] dump_stack_lvl+0xd8/0x12c [ 37.659909][ T4914] dump_stack+0x1c/0x28 [ 37.659919][ T4914] ubsan_epilogue+0x14/0x48 [ 37.659928][ T4914] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 37.659939][ T4914] print_bpf_insn+0x19c4/0x1ee0 [ 37.659948][ T4914] diag_print_insn_context+0x360/0x808 [ 37.659957][ T4914] bpf_diag_source+0x518/0xfd0 [ 37.659965][ T4914] bpf_diag_program_structure+0x1b0/0x250 [ 37.659973][ T4914] check_subprogs+0x510/0x5c0 [ 37.659984][ T4914] bpf_check+0x19a4/0x243c [ 37.659993][ T4914] bpf_prog_load+0xf4c/0x1554 [ 37.660001][ T4914] __sys_bpf+0x7d4/0x82c [ 37.660009][ T4914] __arm64_sys_bpf+0xd0/0xec [ 37.660017][ T4914] invoke_syscall+0x98/0x244 [ 37.660027][ T4914] el0_svc_common+0xec/0x23c [ 37.660036][ T4914] do_el0_svc+0x4c/0x5c [ 37.660046][ T4914] el0_svc+0x64/0x260 [ 37.660055][ T4914] el0t_64_sync_handler+0x44/0x104 [ 37.660063][ T4914] el0t_64_sync+0x198/0x19c [ 37.660076][ T4914] ---[ end trace ]--- [ 37.660086][ T4914] ================================================================== [ 37.660091][ T4914] BUG: KASAN: global-out-of-bounds in print_bpf_insn+0x80c/0x1ee0 [ 37.660103][ T4914] Read of size 8 at addr ffff800086ad37d8 by task syz.0.17/4914 [ 37.660109][ T4914] [ 37.660111][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 37.660119][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.660123][ T4914] Call trace: [ 37.660125][ T4914] show_stack+0x2c/0x3c (C) [ 37.660135][ T4914] __dump_stack+0x30/0x40 [ 37.660144][ T4914] dump_stack_lvl+0xd8/0x12c [ 37.660154][ T4914] print_address_description+0xb0/0x238 [ 37.660161][ T4914] print_report+0x68/0x84 [ 37.660168][ T4914] kasan_report+0x8c/0xc4 [ 37.660176][ T4914] __asan_report_load8_noabort+0x20/0x2c [ 37.660185][ T4914] print_bpf_insn+0x80c/0x1ee0 [ 37.660193][ T4914] diag_print_insn_context+0x360/0x808 [ 37.660202][ T4914] bpf_diag_source+0x518/0xfd0 [ 37.660209][ T4914] bpf_diag_program_structure+0x1b0/0x250 [ 37.660217][ T4914] check_subprogs+0x510/0x5c0 [ 37.660227][ T4914] bpf_check+0x19a4/0x243c [ 37.660236][ T4914] bpf_prog_load+0xf4c/0x1554 [ 37.660244][ T4914] __sys_bpf+0x7d4/0x82c [ 37.660252][ T4914] __arm64_sys_bpf+0xd0/0xec [ 37.660259][ T4914] invoke_syscall+0x98/0x244 [ 37.660269][ T4914] el0_svc_common+0xec/0x23c [ 37.660278][ T4914] do_el0_svc+0x4c/0x5c [ 37.660287][ T4914] el0_svc+0x64/0x260 [ 37.660295][ T4914] el0t_64_sync_handler+0x44/0x104 [ 37.660303][ T4914] el0t_64_sync+0x198/0x19c [ 37.660311][ T4914] [ 37.660312][ T4914] The buggy address belongs to the variable: [ 37.660314][ T4914] bpf_ldsx_string+0x18/0x60 [ 37.660323][ T4914] [ 37.660324][ T4914] The buggy address belongs to a 0-page vmalloc region starting at 0xffff8000869d0000 allocated at declare_kernel_vmas+0x54/0xb4 [ 37.660340][ T4914] The buggy address belongs to the physical page: [ 37.660344][ T4914] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2190d3 [ 37.660351][ T4914] flags: 0x5ffc00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 37.660362][ T4914] raw: 05ffc00000002000 fffffdffc76434c8 fffffdffc76434c8 0000000000000000 [ 37.660367][ T4914] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 37.660371][ T4914] page dumped because: kasan: bad access detected [ 37.660373][ T4914] [ 37.660375][ T4914] Memory state around the buggy address: [ 37.660379][ T4914] ffff800086ad3680: 00 03 f9 f9 f9 f9 f9 f9 00 01 f9 f9 00 00 00 05 [ 37.660383][ T4914] ffff800086ad3700: f9 f9 f9 f9 00 06 f9 f9 00 04 f9 f9 00 05 f9 f9 [ 37.660387][ T4914] >ffff800086ad3780: 00 00 00 06 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 [ 37.660391][ T4914] ^ [ 37.660395][ T4914] ffff800086ad3800: 00 00 00 00 00 00 00 03 f9 f9 f9 f9 00 00 00 00 [ 37.660399][ T4914] ffff800086ad3880: 01 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 00 04 f9 f9 [ 37.660402][ T4914] ================================================================== [ 37.660408][ T4914] Disabling lock debugging due to kernel taint