Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts.
2026/09/18 05:19:26 parsed 1 programs
2026/09/18 05:19:26 serving rpc on tcp://35097
[ 84.960012][ T5784] cgroup: Unknown subsys name 'net'
[ 85.075110][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.675506][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.350981][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.359673][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.370654][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.380837][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.391705][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 91.404314][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.749050][ T5862] chnl_net:caif_netlink_parms(): no params data found
[ 91.837975][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.845679][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.852961][ T5862] bridge_slave_0: entered allmulticast mode
[ 91.860120][ T5862] bridge_slave_0: entered promiscuous mode
[ 91.869362][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.876458][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.883829][ T5862] bridge_slave_1: entered allmulticast mode
[ 91.891290][ T5862] bridge_slave_1: entered promiscuous mode
[ 91.927506][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.939623][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.981154][ T5862] team0: Port device team_slave_0 added
[ 91.990364][ T5862] team0: Port device team_slave_1 added
[ 92.021243][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.028357][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.054527][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.068395][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.073585][ T9] cfg80211: failed to load regulatory.db
[ 92.075354][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.107284][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.161062][ T5862] hsr_slave_0: entered promiscuous mode
[ 92.171967][ T5862] hsr_slave_1: entered promiscuous mode
[ 92.351976][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.363653][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.375030][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.385354][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.418611][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.426004][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.436064][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.443231][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.465120][ T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.484687][ T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.550369][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.571194][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.592421][ T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.599604][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.614100][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.621330][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.843424][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.899158][ T5862] veth0_vlan: entered promiscuous mode
[ 92.911862][ T5862] veth1_vlan: entered promiscuous mode
[ 92.949809][ T5862] veth0_macvtap: entered promiscuous mode
[ 92.959446][ T5862] veth1_macvtap: entered promiscuous mode
[ 92.986266][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.005154][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.018282][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.027681][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.036426][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.046936][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.285165][ T3550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.479263][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.487975][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.522260][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.530889][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/18 05:19:38 executed programs: 0
[ 94.030827][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.040982][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.050173][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.059988][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.068217][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 94.075623][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.237536][ T5890] chnl_net:caif_netlink_parms(): no params data found
[ 94.316130][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.324036][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.332741][ T5890] bridge_slave_0: entered allmulticast mode
[ 94.339957][ T5890] bridge_slave_0: entered promiscuous mode
[ 94.349687][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.356974][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.364168][ T5890] bridge_slave_1: entered allmulticast mode
[ 94.371630][ T5890] bridge_slave_1: entered promiscuous mode
[ 94.406443][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.422876][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.459877][ T5890] team0: Port device team_slave_0 added
[ 94.470256][ T5890] team0: Port device team_slave_1 added
[ 94.501126][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.508946][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.535759][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.549433][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.556402][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.583017][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.626532][ T5890] hsr_slave_0: entered promiscuous mode
[ 94.632955][ T5890] hsr_slave_1: entered promiscuous mode
[ 94.639902][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 94.648343][ T5890] Cannot create hsr debugfs directory
[ 96.017666][ T3550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.127527][ T5084] Bluetooth: hci0: command tx timeout
[ 98.139374][ T3550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.203549][ T3550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.210305][ T5084] Bluetooth: hci0: command tx timeout
[ 99.201656][ T3550] hsr_slave_0: left promiscuous mode
[ 99.208365][ T3550] hsr_slave_1: left promiscuous mode
[ 99.214819][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.225057][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.235245][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.245792][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.254271][ T3550] bridge_slave_1: left allmulticast mode
[ 99.262565][ T3550] bridge_slave_1: left promiscuous mode
[ 99.269444][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.284901][ T3550] bridge_slave_0: left allmulticast mode
[ 99.292003][ T3550] bridge_slave_0: left promiscuous mode
[ 99.300663][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.340421][ T3550] veth1_macvtap: left promiscuous mode
[ 99.346655][ T3550] veth0_macvtap: left promiscuous mode
[ 99.353384][ T3550] veth1_vlan: left promiscuous mode
[ 99.359021][ T3550] veth0_vlan: left promiscuous mode
[ 99.813698][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 99.847120][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 99.886125][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.919161][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.135723][ T3550] bond0 (unregistering): Released all slaves
[ 100.230662][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.241655][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.251771][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.262495][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.287521][ T5084] Bluetooth: hci0: command tx timeout
[ 100.369299][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.403016][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.415805][ T33] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.422981][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.442959][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.450155][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.729921][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.780764][ T5890] veth0_vlan: entered promiscuous mode
[ 100.793087][ T5890] veth1_vlan: entered promiscuous mode
[ 100.825059][ T5890] veth0_macvtap: entered promiscuous mode
[ 100.845358][ T5890] veth1_macvtap: entered promiscuous mode
[ 100.864621][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.881347][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.907478][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.916223][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.925147][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.934881][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.026363][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.035551][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.083855][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.092498][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.166061][ T5929] ==================================================================
[ 101.174193][ T5929] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 101.183098][ T5929] Write of size 4 at addr ffff88807cf81330 by task syz.0.17/5929
[ 101.190833][ T5929]
[ 101.193203][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 101.200478][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 101.210567][ T5929] Call Trace:
[ 101.213851][ T5929]
[ 101.216799][ T5929] dump_stack_lvl+0x18c/0x250
[ 101.221510][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 101.226545][ T5929] ? show_regs_print_info+0x20/0x20
[ 101.231754][ T5929] ? load_image+0x420/0x420
[ 101.236263][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 101.241385][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 101.246507][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 101.251630][ T5929] print_report+0xa8/0x210
[ 101.256053][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 101.262214][ T5929] kasan_report+0x117/0x150
[ 101.266754][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 101.272947][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 101.278966][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 101.284105][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 101.289237][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 101.294453][ T5929] ? perf_reg_abi+0x62/0x90
[ 101.298987][ T5929] __bpf_get_stackid+0x564/0x900
[ 101.303954][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 101.309008][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 101.314512][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 101.319742][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 101.325056][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 101.330374][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 101.336640][ T5929] __perf_event_overflow+0x461/0x660
[ 101.341988][ T5929] perf_swevent_event+0x319/0x570
[ 101.347034][ T5929] ? perf_tp_event+0x1550/0x1550
[ 101.352090][ T5929] ___perf_sw_event+0x4ab/0x730
[ 101.356955][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 101.362010][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 101.368449][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 101.373507][ T5929] ? rep_movs_alternative+0x33/0x90
[ 101.378735][ T5929] ? verify_lock_unused+0x140/0x140
[ 101.383957][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 101.389956][ T5929] ? arch_stack_walk+0x160/0x190
[ 101.394912][ T5929] ? lock_chain_count+0x20/0x20
[ 101.399789][ T5929] __perf_sw_event+0x139/0x270
[ 101.404583][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 101.409805][ T5929] ? rcu_is_watching+0x15/0xb0
[ 101.414592][ T5929] exc_page_fault+0x64/0x100
[ 101.419211][ T5929] asm_exc_page_fault+0x26/0x30
[ 101.424087][ T5929] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 101.429920][ T5929] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 101.449568][ T5929] RSP: 0018:ffffc90003d2f310 EFLAGS: 00050206
[ 101.455676][ T5929] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[ 101.463676][ T5929] RDX: 0000000000000000 RSI: ffff888077e8868c RDI: 000020000000cf3d
[ 101.471666][ T5929] RBP: ffff888077e88668 R08: ffff888077e88696 R09: 1ffff1100efd10d2
[ 101.479660][ T5929] R10: dffffc0000000000 R11: ffffed100efd10d3 R12: 000020000000cf48
[ 101.487648][ T5929] R13: 000000000000000b R14: 000020000000cf3d R15: ffff888077e8868c
[ 101.495653][ T5929] _copy_to_user+0x85/0xa0
[ 101.500106][ T5929] bpf_verifier_vlog+0x2f1/0x840
[ 101.505087][ T5929] verbose+0x11e/0x1a0
[ 101.509187][ T5929] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 101.514753][ T5929] ? kvmalloc_node+0x70/0x180
[ 101.519472][ T5929] ? add_subprog+0x2c0/0x3d0
[ 101.524090][ T5929] bpf_check+0x305c/0xec40
[ 101.528560][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 101.533612][ T5929] ? bpf_get_btf_vmlinux+0x20/0x20
[ 101.538749][ T5929] ? __lock_acquire+0x1262/0x7d80
[ 101.543797][ T5929] ? mark_lock+0x94/0x320
[ 101.548157][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 101.553235][ T5929] ? verify_lock_unused+0x140/0x140
[ 101.558458][ T5929] ? verify_lock_unused+0x140/0x140
[ 101.563678][ T5929] ? verify_lock_unused+0x140/0x140
[ 101.568897][ T5929] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 101.574731][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 101.580731][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 101.585790][ T5929] ? lock_chain_count+0x20/0x20
[ 101.590669][ T5929] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 101.596929][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 101.602148][ T5929] ? ktime_get_with_offset+0x103/0x330
[ 101.607629][ T5929] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 101.613888][ T5929] ? ktime_get_real_ts64+0x440/0x440
[ 101.619216][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 101.624444][ T5929] ? bpf_obj_name_cpy+0x194/0x1e0
[ 101.629489][ T5929] bpf_prog_load+0x10fa/0x1610
[ 101.634278][ T5929] ? map_freeze+0x420/0x420
[ 101.638812][ T5929] ? __might_fault+0xaa/0x120
[ 101.643508][ T5929] ? __might_fault+0xc6/0x120
[ 101.648209][ T5929] ? __might_fault+0xaa/0x120
[ 101.652913][ T5929] ? bpf_lsm_bpf+0x9/0x10
[ 101.657270][ T5929] ? security_bpf+0x7e/0xa0
[ 101.661796][ T5929] __sys_bpf+0x5ba/0x890
[ 101.666057][ T5929] ? bpf_link_show_fdinfo+0x560/0x560
[ 101.671455][ T5929] ? lock_chain_count+0x20/0x20
[ 101.676336][ T5929] __x64_sys_bpf+0x7c/0x90
[ 101.680773][ T5929] do_syscall_64+0x55/0xb0
[ 101.685212][ T5929] ? clear_bhb_loop+0x40/0x90
[ 101.689934][ T5929] ? clear_bhb_loop+0x40/0x90
[ 101.694630][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.700656][ T5929] RIP: 0033:0x7fa87839e159
[ 101.705097][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.724717][ T5929] RSP: 002b:00007fff6b177318 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 101.733147][ T5929] RAX: ffffffffffffffda RBX: 00007fa878625fa0 RCX: 00007fa87839e159
[ 101.741132][ T5929] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 101.749121][ T5929] RBP: 00007fa87843506b R08: 0000000000000000 R09: 0000000000000000
[ 101.757108][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 101.765096][ T5929] R13: 00007fa878625fac R14: 00007fa878625fa0 R15: 00007fa878625fa0
[ 101.773090][ T5929]
[ 101.776124][ T5929]
[ 101.778462][ T5929] Allocated by task 5929:
[ 101.782797][ T5929] kasan_set_track+0x4e/0x70
[ 101.787407][ T5929] __kasan_kmalloc+0x8f/0xa0
[ 101.792020][ T5929] __kmalloc_node+0xb6/0x240
[ 101.796634][ T5929] bpf_map_area_alloc+0x5e/0x110
[ 101.801594][ T5929] prealloc_elems_and_freelist+0x86/0x1c0
[ 101.807347][ T5929] stack_map_alloc+0x32b/0x4b0
[ 101.812144][ T5929] map_create+0x877/0x12f0
[ 101.816620][ T5929] __sys_bpf+0x651/0x890
[ 101.820893][ T5929] __x64_sys_bpf+0x7c/0x90
[ 101.825334][ T5929] do_syscall_64+0x55/0xb0
[ 101.829778][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.835696][ T5929]
[ 101.838032][ T5929] The buggy address belongs to the object at ffff88807cf81000
[ 101.838032][ T5929] which belongs to the cache kmalloc-cg-1k of size 1024
[ 101.852363][ T5929] The buggy address is located 0 bytes to the right of
[ 101.852363][ T5929] allocated 816-byte region [ffff88807cf81000, ffff88807cf81330)
[ 101.866874][ T5929]
[ 101.869213][ T5929] The buggy address belongs to the physical page:
[ 101.875643][ T5929] page:ffffea0001f3e000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cf80
[ 101.885802][ T5929] head:ffffea0001f3e000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 101.894747][ T5929] memcg:ffff888072b64501
[ 101.898993][ T5929] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 101.907505][ T5929] page_type: 0xffffffff()
[ 101.911869][ T5929] raw: 00fff00000000840 ffff888017c4f280 0000000000000000 0000000000000001
[ 101.920481][ T5929] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888072b64501
[ 101.929087][ T5929] page dumped because: kasan: bad access detected
[ 101.935525][ T5929] page_owner tracks the page as allocated
[ 101.941278][ T5929] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5715, tgid 5715 (dhcpcd-run-hook), ts 71315224706, free_ts 71283920414
[ 101.962948][ T5929] post_alloc_hook+0x1c1/0x200
[ 101.967754][ T5929] get_page_from_freelist+0x2181/0x22a0
[ 101.973375][ T5929] __alloc_pages+0x1f0/0x460
[ 101.977988][ T5929] alloc_slab_page+0x5d/0x180
[ 101.982678][ T5929] new_slab+0x87/0x2d0
[ 101.986763][ T5929] ___slab_alloc+0xc5c/0x12f0
[ 101.991463][ T5929] __kmem_cache_alloc_node+0x11f/0x250
[ 101.996946][ T5929] __kmalloc+0xa7/0x240
[ 102.001132][ T5929] alloc_pipe_info+0x1f9/0x4b0
[ 102.005917][ T5929] create_pipe_files+0x87/0x700
[ 102.010799][ T5929] __do_pipe_flags+0x4c/0x2c0
[ 102.015498][ T5929] do_pipe2+0xab/0x190
[ 102.019590][ T5929] __x64_sys_pipe2+0x5a/0x70
[ 102.024201][ T5929] do_syscall_64+0x55/0xb0
[ 102.028643][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 102.034582][ T5929] page last free stack trace:
[ 102.039264][ T5929] free_unref_page_prepare+0x7d7/0x8f0
[ 102.044732][ T5929] free_unref_page+0x32/0x2e0
[ 102.049421][ T5929] __unfreeze_partials+0x1cf/0x210
[ 102.054546][ T5929] put_cpu_partial+0x17c/0x250
[ 102.059342][ T5929] __slab_free+0x319/0x400
[ 102.063774][ T5929] qlist_free_all+0x75/0xd0
[ 102.068312][ T5929] kasan_quarantine_reduce+0x143/0x160
[ 102.073803][ T5929] __kasan_slab_alloc+0x22/0x80
[ 102.078699][ T5929] slab_post_alloc_hook+0x6a/0x4d0
[ 102.083841][ T5929] kmem_cache_alloc+0x17e/0x2c0
[ 102.088738][ T5929] vm_area_alloc+0x24/0x1d0
[ 102.093265][ T5929] mmap_region+0xcfa/0x2090
[ 102.097783][ T5929] do_mmap+0x98f/0x10a0
[ 102.101950][ T5929] vm_mmap_pgoff+0x1c4/0x3f0
[ 102.106584][ T5929] ksys_mmap_pgoff+0x4c9/0x720
[ 102.111379][ T5929] do_syscall_64+0x55/0xb0
[ 102.115834][ T5929]
[ 102.118170][ T5929] Memory state around the buggy address:
[ 102.123843][ T5929] ffff88807cf81200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 102.131918][ T5929] ffff88807cf81280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 102.139992][ T5929] >ffff88807cf81300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 102.148070][ T5929] ^
[ 102.153709][ T5929] ffff88807cf81380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.161780][ T5929] ffff88807cf81400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.169848][ T5929] ==================================================================
[ 102.177920][ T5929] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.185123][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 102.192332][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 102.202402][ T5929] Call Trace:
[ 102.205698][ T5929]
[ 102.208650][ T5929] dump_stack_lvl+0x18c/0x250
[ 102.213358][ T5929] ? show_regs_print_info+0x20/0x20
[ 102.218589][ T5929] ? load_image+0x420/0x420
[ 102.223112][ T5929] panic+0x2ca/0x720
[ 102.227031][ T5929] ? bpf_jit_dump+0xd0/0xd0
[ 102.231548][ T5929] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 102.237468][ T5929] ? _raw_spin_unlock+0x40/0x40
[ 102.242341][ T5929] ? print_memory_metadata+0x314/0x400
[ 102.247817][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 102.253992][ T5929] check_panic_on_warn+0x84/0xa0
[ 102.258985][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 102.265157][ T5929] end_report+0x6f/0x130
[ 102.269421][ T5929] kasan_report+0x128/0x150
[ 102.273950][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 102.280132][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 102.286134][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 102.291272][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 102.296405][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 102.301614][ T5929] ? perf_reg_abi+0x62/0x90
[ 102.306334][ T5929] __bpf_get_stackid+0x564/0x900
[ 102.311298][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 102.316351][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 102.321898][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 102.327186][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 102.332503][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 102.337854][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 102.344126][ T5929] __perf_event_overflow+0x461/0x660
[ 102.349435][ T5929] perf_swevent_event+0x319/0x570
[ 102.354482][ T5929] ? perf_tp_event+0x1550/0x1550
[ 102.359448][ T5929] ___perf_sw_event+0x4ab/0x730
[ 102.364325][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 102.369374][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 102.375819][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 102.380863][ T5929] ? rep_movs_alternative+0x33/0x90
[ 102.386092][ T5929] ? verify_lock_unused+0x140/0x140
[ 102.391309][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 102.397306][ T5929] ? arch_stack_walk+0x160/0x190
[ 102.402261][ T5929] ? lock_chain_count+0x20/0x20
[ 102.407130][ T5929] __perf_sw_event+0x139/0x270
[ 102.411916][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 102.417145][ T5929] ? rcu_is_watching+0x15/0xb0
[ 102.421945][ T5929] exc_page_fault+0x64/0x100
[ 102.426557][ T5929] asm_exc_page_fault+0x26/0x30
[ 102.431433][ T5929] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 102.437266][ T5929] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 102.456894][ T5929] RSP: 0018:ffffc90003d2f310 EFLAGS: 00050206
[ 102.462976][ T5929] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[ 102.470962][ T5929] RDX: 0000000000000000 RSI: ffff888077e8868c RDI: 000020000000cf3d
[ 102.478972][ T5929] RBP: ffff888077e88668 R08: ffff888077e88696 R09: 1ffff1100efd10d2
[ 102.486963][ T5929] R10: dffffc0000000000 R11: ffffed100efd10d3 R12: 000020000000cf48
[ 102.494954][ T5929] R13: 000000000000000b R14: 000020000000cf3d R15: ffff888077e8868c
[ 102.502952][ T5929] _copy_to_user+0x85/0xa0
[ 102.507398][ T5929] bpf_verifier_vlog+0x2f1/0x840
[ 102.512375][ T5929] verbose+0x11e/0x1a0
[ 102.516469][ T5929] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 102.522042][ T5929] ? kvmalloc_node+0x70/0x180
[ 102.526768][ T5929] ? add_subprog+0x2c0/0x3d0
[ 102.531398][ T5929] bpf_check+0x305c/0xec40
[ 102.535842][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 102.540888][ T5929] ? bpf_get_btf_vmlinux+0x20/0x20
[ 102.546016][ T5929] ? __lock_acquire+0x1262/0x7d80
[ 102.551060][ T5929] ? mark_lock+0x94/0x320
[ 102.555410][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 102.560494][ T5929] ? verify_lock_unused+0x140/0x140
[ 102.565719][ T5929] ? verify_lock_unused+0x140/0x140
[ 102.570933][ T5929] ? verify_lock_unused+0x140/0x140
[ 102.576151][ T5929] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 102.581981][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 102.587980][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 102.593034][ T5929] ? lock_chain_count+0x20/0x20
[ 102.597903][ T5929] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 102.604167][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 102.609405][ T5929] ? ktime_get_with_offset+0x103/0x330
[ 102.614880][ T5929] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 102.621142][ T5929] ? ktime_get_real_ts64+0x440/0x440
[ 102.626446][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 102.631681][ T5929] ? bpf_obj_name_cpy+0x194/0x1e0
[ 102.636724][ T5929] bpf_prog_load+0x10fa/0x1610
[ 102.641525][ T5929] ? map_freeze+0x420/0x420
[ 102.646071][ T5929] ? __might_fault+0xaa/0x120
[ 102.650766][ T5929] ? __might_fault+0xc6/0x120
[ 102.655462][ T5929] ? __might_fault+0xaa/0x120
[ 102.660171][ T5929] ? bpf_lsm_bpf+0x9/0x10
[ 102.664525][ T5929] ? security_bpf+0x7e/0xa0
[ 102.669058][ T5929] __sys_bpf+0x5ba/0x890
[ 102.673320][ T5929] ? bpf_link_show_fdinfo+0x560/0x560
[ 102.678791][ T5929] ? lock_chain_count+0x20/0x20
[ 102.683668][ T5929] __x64_sys_bpf+0x7c/0x90
[ 102.688105][ T5929] do_syscall_64+0x55/0xb0
[ 102.692553][ T5929] ? clear_bhb_loop+0x40/0x90
[ 102.697249][ T5929] ? clear_bhb_loop+0x40/0x90
[ 102.701957][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 102.707885][ T5929] RIP: 0033:0x7fa87839e159
[ 102.712321][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 102.731950][ T5929] RSP: 002b:00007fff6b177318 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 102.740386][ T5929] RAX: ffffffffffffffda RBX: 00007fa878625fa0 RCX: 00007fa87839e159
[ 102.748374][ T5929] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 102.756361][ T5929] RBP: 00007fa87843506b R08: 0000000000000000 R09: 0000000000000000
[ 102.764379][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 102.772371][ T5929] R13: 00007fa878625fac R14: 00007fa878625fa0 R15: 00007fa878625fa0
[ 102.780363][ T5929]
[ 102.783542][ T5929] Kernel Offset: disabled
[ 102.787885][ T5929] Rebooting in 86400 seconds..