Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts.
2026/09/24 08:23:18 parsed 1 programs
2026/09/24 08:23:18 serving rpc on tcp://35185
[ 66.503604][ T4284] cgroup: Unknown subsys name 'net'
[ 66.637730][ T4284] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 67.875727][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 70.918662][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.926471][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.934564][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.942561][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.950569][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 70.958410][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 71.337928][ T4347] chnl_net:caif_netlink_parms(): no params data found
[ 71.366088][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.372492][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.400694][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.408401][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.418012][ T4347] device bridge_slave_0 entered promiscuous mode
[ 71.434260][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.441811][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.450869][ T4347] device bridge_slave_1 entered promiscuous mode
[ 71.473160][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.484287][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.517385][ T4347] team0: Port device team_slave_0 added
[ 71.530176][ T4347] team0: Port device team_slave_1 added
[ 71.544601][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.551529][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.577494][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.589460][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.596532][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.622517][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.655278][ T4347] device hsr_slave_0 entered promiscuous mode
[ 71.662019][ T4347] device hsr_slave_1 entered promiscuous mode
[ 71.737105][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.746455][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.755264][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.763951][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.781587][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.788763][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.826654][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0
[ 71.855869][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.865096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 71.876214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 71.884384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 71.894901][ T4347] 8021q: adding VLAN 0 to HW filter on device team0
[ 71.911946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 71.921141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 71.930181][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.937287][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.949353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 71.957806][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.964893][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.988948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 71.997523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.009848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.030717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.042154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.053516][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.207591][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.215131][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.227500][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.242170][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 72.266464][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 72.275507][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 72.283903][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 72.293338][ T4347] device veth0_vlan entered promiscuous mode
[ 72.309073][ T4347] device veth1_vlan entered promiscuous mode
[ 72.325836][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 72.334077][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 72.341990][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 72.361259][ T4347] device veth0_macvtap entered promiscuous mode
[ 72.370438][ T4347] device veth1_macvtap entered promiscuous mode
[ 72.388127][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.395694][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 72.407636][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 72.418696][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.428659][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 72.437401][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 72.448947][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.459030][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.467901][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.476688][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.705226][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.763675][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.771648][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.792497][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.794618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 72.800374][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.815098][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/24 08:23:26 executed programs: 0
[ 73.105582][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 73.113254][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 73.120627][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 73.129590][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 73.138000][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 73.145440][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 73.238412][ T4382] chnl_net:caif_netlink_parms(): no params data found
[ 73.274476][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.281590][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.289966][ T4382] device bridge_slave_0 entered promiscuous mode
[ 73.299503][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.306839][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.314567][ T4382] device bridge_slave_1 entered promiscuous mode
[ 73.332359][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.343617][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.362182][ T4382] team0: Port device team_slave_0 added
[ 73.370095][ T4382] team0: Port device team_slave_1 added
[ 73.387470][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.394791][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.420741][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.438185][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.445420][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.471395][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.500686][ T4382] device hsr_slave_0 entered promiscuous mode
[ 73.507342][ T4382] device hsr_slave_1 entered promiscuous mode
[ 73.513969][ T4382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 73.521710][ T4382] Cannot create hsr debugfs directory
[ 74.961982][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 75.213366][ T4338] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.282894][ T49] Bluetooth: hci0: command 0x041b tx timeout
[ 77.294981][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.361500][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.049329][ T9] device hsr_slave_0 left promiscuous mode
[ 78.055926][ T9] device hsr_slave_1 left promiscuous mode
[ 78.062526][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 78.072996][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 78.081205][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 78.092445][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 78.113772][ T9] device bridge_slave_1 left promiscuous mode
[ 78.120469][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.131800][ T9] device bridge_slave_0 left promiscuous mode
[ 78.138999][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.161142][ T9] device veth1_macvtap left promiscuous mode
[ 78.169252][ T9] device veth0_macvtap left promiscuous mode
[ 78.175766][ T9] device veth1_vlan left promiscuous mode
[ 78.181675][ T9] device veth0_vlan left promiscuous mode
[ 78.456575][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 78.478769][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 78.501407][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 78.527594][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 78.669095][ T9] bond0 (unregistering): Released all slaves
[ 78.758201][ T4382] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.766605][ T4382] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.775884][ T4382] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.786183][ T4382] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.838981][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.850228][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 78.858899][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 78.878673][ T4382] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.887817][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 78.897416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 78.907606][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.914703][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.925453][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 78.936834][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 78.947569][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 78.955976][ T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.963097][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.974683][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 78.992424][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 79.002056][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 79.011555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.020013][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.029238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.047288][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.059046][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.068360][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.076768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.085212][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.095864][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.263952][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.271394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.282438][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.306036][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.314601][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 79.330681][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 79.339346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 79.347774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 79.355951][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 79.363501][ T4338] Bluetooth: hci0: command 0x040f tx timeout
[ 79.376001][ T4382] device veth0_vlan entered promiscuous mode
[ 79.385568][ T4382] device veth1_vlan entered promiscuous mode
[ 79.402053][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.410226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.422407][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.430817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.447121][ T4382] device veth0_macvtap entered promiscuous mode
[ 79.455981][ T4382] device veth1_macvtap entered promiscuous mode
[ 79.469274][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.477442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.485774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.495144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 79.503836][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 79.513937][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.522557][ T4382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.531801][ T4382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.541613][ T4382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.550367][ T4382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.567961][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 79.576494][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 79.625283][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.636516][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.651508][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 79.666174][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.674045][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.681561][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 79.736365][ T4428] ==================================================================
[ 79.744435][ T4428] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x849/0x9d0
[ 79.753284][ T4428] Write of size 4 at addr ffff888078218330 by task syz.0.17/4428
[ 79.760982][ T4428]
[ 79.763297][ T4428] CPU: 1 PID: 4428 Comm: syz.0.17 Not tainted syzkaller #0
[ 79.770473][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 79.780519][ T4428] Call Trace:
[ 79.783786][ T4428]
[ 79.786702][ T4428] dump_stack_lvl+0x188/0x24e
[ 79.791367][ T4428] ? __lock_acquire+0x7c40/0x7c40
[ 79.796385][ T4428] ? show_regs_print_info+0x12/0x12
[ 79.801566][ T4428] ? load_image+0x410/0x410
[ 79.806057][ T4428] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 79.811505][ T4428] ? __virt_addr_valid+0x188/0x540
[ 79.816603][ T4428] ? __virt_addr_valid+0x467/0x540
[ 79.821701][ T4428] ? stack_map_get_build_id_offset+0x849/0x9d0
[ 79.827837][ T4428] print_report+0xa8/0x210
[ 79.832242][ T4428] kasan_report+0x10b/0x140
[ 79.836734][ T4428] ? stack_map_get_build_id_offset+0x849/0x9d0
[ 79.842880][ T4428] stack_map_get_build_id_offset+0x849/0x9d0
[ 79.848848][ T4428] ? pcpu_freelist_pop+0x126/0x180
[ 79.853948][ T4428] ? __pcpu_freelist_pop+0x850/0x850
[ 79.859221][ T4428] ? __bpf_get_stackid+0x920/0x920
[ 79.864321][ T4428] __bpf_get_stackid+0x55d/0x920
[ 79.869244][ T4428] bpf_get_stackid_pe+0x33f/0x400
[ 79.874255][ T4428] bpf_prog_2414a5d5030ea31b+0x21/0x25
[ 79.879705][ T4428] bpf_overflow_handler+0x50b/0x790
[ 79.884893][ T4428] ? bpf_overflow_handler+0xd9/0x790
[ 79.890165][ T4428] ? perf_swevent_overflow+0x230/0x230
[ 79.895613][ T4428] ? __perf_event_account_interrupt+0x187/0x280
[ 79.901840][ T4428] __perf_event_overflow+0x457/0x630
[ 79.907112][ T4428] ? perf_swevent_event+0x1d5/0x570
[ 79.912297][ T4428] perf_swevent_event+0x315/0x570
[ 79.917312][ T4428] ? perf_tp_event+0xc10/0xc10
[ 79.922065][ T4428] ___perf_sw_event+0x498/0x6d0
[ 79.926905][ T4428] ? ___perf_sw_event+0x184/0x6d0
[ 79.931917][ T4428] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 79.938330][ T4428] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 79.944298][ T4428] ? lock_chain_count+0x20/0x20
[ 79.949136][ T4428] __perf_sw_event+0x135/0x260
[ 79.953888][ T4428] do_user_addr_fault+0x497/0xb20
[ 79.958905][ T4428] ? trace_hardirqs_off_finish+0x86/0x180
[ 79.964611][ T4428] exc_page_fault+0x60/0x100
[ 79.969190][ T4428] asm_exc_page_fault+0x22/0x30
[ 79.974025][ T4428] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 79.980600][ T4428] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 80.000189][ T4428] RSP: 0018:ffffc900034f7668 EFLAGS: 00050206
[ 80.006237][ T4428] RAX: ffffffff84143201 RBX: 0000000000001000 RCX: 0000000000000f80
[ 80.014195][ T4428] RDX: 0000000000001000 RSI: 0000200000002000 RDI: ffff88802f4a1080
[ 80.022148][ T4428] RBP: 0000000000000000 R08: ffff88802f4a1fff R09: 1ffff11005e943ff
[ 80.030106][ T4428] R10: dffffc0000000000 R11: ffffed1005e94400 R12: 00007fffffffe000
[ 80.038062][ T4428] R13: 0000000000001ec0 R14: 0000200000001f80 R15: ffff88802f4a1000
[ 80.046017][ T4428] ? _copy_from_iter+0x1111/0x1130
[ 80.051119][ T4428] copyin+0xe7/0x120
[ 80.055000][ T4428] _copy_from_iter+0x447/0x1130
[ 80.059837][ T4428] ? copyout_mc+0x110/0x110
[ 80.064326][ T4428] ? copyout_mc+0x110/0x110
[ 80.068814][ T4428] ? __virt_addr_valid+0x188/0x540
[ 80.073914][ T4428] ? page_copy_sane+0x194/0x390
[ 80.078754][ T4428] copy_page_from_iter+0x77/0x100
[ 80.083769][ T4428] skb_copy_datagram_from_iter+0x2c5/0x6b0
[ 80.089567][ T4428] unix_stream_sendmsg+0x4d5/0xa70
[ 80.094668][ T4428] ? unix_show_fdinfo+0x2c0/0x2c0
[ 80.099682][ T4428] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 80.106088][ T4428] ? apparmor_socket_sendmsg+0x8a/0x330
[ 80.111620][ T4428] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 80.116887][ T4428] ? security_socket_sendmsg+0x7c/0xa0
[ 80.122333][ T4428] ? unix_show_fdinfo+0x2c0/0x2c0
[ 80.127346][ T4428] ____sys_sendmsg+0x5ed/0x9a0
[ 80.132099][ T4428] ? __sys_sendmsg_sock+0x30/0x30
[ 80.137106][ T4428] ? __import_iovec+0x306/0x510
[ 80.141946][ T4428] ? import_iovec+0x6f/0xa0
[ 80.146437][ T4428] ___sys_sendmsg+0x2a2/0x360
[ 80.151100][ T4428] ? __sys_sendmsg+0x2a0/0x2a0
[ 80.155854][ T4428] ? futex_wake+0x3f6/0x4f0
[ 80.160349][ T4428] __se_sys_sendmsg+0x1c3/0x2b0
[ 80.165184][ T4428] ? __x64_sys_sendmsg+0x80/0x80
[ 80.170107][ T4428] ? lockdep_hardirqs_on+0x94/0x140
[ 80.175293][ T4428] do_syscall_64+0x4c/0xa0
[ 80.179693][ T4428] ? clear_bhb_loop+0x60/0xb0
[ 80.184363][ T4428] ? clear_bhb_loop+0x60/0xb0
[ 80.189023][ T4428] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 80.194904][ T4428] RIP: 0033:0x7ffa4779e159
[ 80.199305][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 80.218890][ T4428] RSP: 002b:00007ffd92f63318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 80.227287][ T4428] RAX: ffffffffffffffda RBX: 00007ffa47a25fa0 RCX: 00007ffa4779e159
[ 80.235244][ T4428] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000006
[ 80.243200][ T4428] RBP: 00007ffa4783506b R08: 0000000000000000 R09: 0000000000000000
[ 80.251154][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 80.259105][ T4428] R13: 00007ffa47a25fac R14: 00007ffa47a25fa0 R15: 00007ffa47a25fa0
[ 80.267064][ T4428]
[ 80.270069][ T4428]
[ 80.272371][ T4428] Allocated by task 4428:
[ 80.276678][ T4428] kasan_set_track+0x4b/0x70
[ 80.281271][ T4428] __kasan_kmalloc+0x8e/0xa0
[ 80.285848][ T4428] __kmalloc_node+0xb2/0x240
[ 80.290423][ T4428] bpf_map_area_alloc+0x47/0xe0
[ 80.295260][ T4428] prealloc_elems_and_freelist+0x86/0x1c0
[ 80.300960][ T4428] stack_map_alloc+0x386/0x510
[ 80.305704][ T4428] map_create+0x524/0xff0
[ 80.310021][ T4428] __sys_bpf+0x38b/0x780
[ 80.314246][ T4428] __x64_sys_bpf+0x78/0x90
[ 80.318649][ T4428] do_syscall_64+0x4c/0xa0
[ 80.323047][ T4428] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 80.328925][ T4428]
[ 80.331234][ T4428] The buggy address belongs to the object at ffff888078218000
[ 80.331234][ T4428] which belongs to the cache kmalloc-cg-1k of size 1024
[ 80.345528][ T4428] The buggy address is located 816 bytes inside of
[ 80.345528][ T4428] 1024-byte region [ffff888078218000, ffff888078218400)
[ 80.358869][ T4428]
[ 80.361173][ T4428] The buggy address belongs to the physical page:
[ 80.367571][ T4428] page:ffffea0001e08600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78218
[ 80.377703][ T4428] head:ffffea0001e08600 order:3 compound_mapcount:0 compound_pincount:0
[ 80.386011][ T4428] memcg:ffff888076b6f701
[ 80.390234][ T4428] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 80.398202][ T4428] raw: 00fff00000010200 ffffea000082c000 dead000000000002 ffff88801744c000
[ 80.406765][ T4428] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888076b6f701
[ 80.415327][ T4428] page dumped because: kasan: bad access detected
[ 80.421722][ T4428] page_owner tracks the page as allocated
[ 80.427415][ T4428] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3934, tgid 3934 (dhcpcd), ts 54894160587, free_ts 54651214906
[ 80.448239][ T4428] post_alloc_hook+0x173/0x1a0
[ 80.452990][ T4428] get_page_from_freelist+0x206b/0x2180
[ 80.458523][ T4428] __alloc_pages+0x1ec/0x4f0
[ 80.463098][ T4428] alloc_slab_page+0x5d/0x180
[ 80.467759][ T4428] new_slab+0x87/0x2d0
[ 80.471809][ T4428] ___slab_alloc+0xbc5/0x1240
[ 80.476465][ T4428] __kmem_cache_alloc_node+0x126/0x270
[ 80.481904][ T4428] __kmalloc_node_track_caller+0xa0/0x240
[ 80.487611][ T4428] __alloc_skb+0x226/0x7d0
[ 80.492009][ T4428] alloc_skb_with_frags+0xa7/0x710
[ 80.497102][ T4428] sock_alloc_send_pskb+0x87f/0x9a0
[ 80.502283][ T4428] unix_dgram_sendmsg+0x5c1/0x16f0
[ 80.507382][ T4428] sock_write_iter+0x2d5/0x3e0
[ 80.512129][ T4428] do_iter_write+0x638/0xb10
[ 80.516700][ T4428] do_writev+0x27b/0x480
[ 80.520932][ T4428] do_syscall_64+0x4c/0xa0
[ 80.525330][ T4428] page last free stack trace:
[ 80.529980][ T4428] free_unref_page_prepare+0x8e5/0x9e0
[ 80.535425][ T4428] free_unref_page+0x2e/0x3f0
[ 80.540099][ T4428] __unfreeze_partials+0x188/0x1e0
[ 80.545197][ T4428] put_cpu_partial+0x17c/0x250
[ 80.549946][ T4428] qlist_free_all+0x76/0xe0
[ 80.554431][ T4428] kasan_quarantine_reduce+0x144/0x160
[ 80.559871][ T4428] __kasan_slab_alloc+0x1e/0x80
[ 80.564713][ T4428] slab_post_alloc_hook+0x4b/0x490
[ 80.569807][ T4428] __kmem_cache_alloc_node+0x19d/0x270
[ 80.575246][ T4428] __kmalloc+0xa3/0x240
[ 80.579387][ T4428] tomoyo_realpath_from_path+0xe2/0x5c0
[ 80.584917][ T4428] tomoyo_path_perm+0x26f/0x610
[ 80.589767][ T4428] security_inode_getattr+0xcf/0x120
[ 80.595036][ T4428] vfs_getattr+0x26/0x3a0
[ 80.599350][ T4428] __x64_sys_newfstat+0x13d/0x220
[ 80.604357][ T4428] do_syscall_64+0x4c/0xa0
[ 80.608754][ T4428]
[ 80.611059][ T4428] Memory state around the buggy address:
[ 80.616666][ T4428] ffff888078218200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 80.624711][ T4428] ffff888078218280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 80.632752][ T4428] >ffff888078218300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 80.640790][ T4428] ^
[ 80.646396][ T4428] ffff888078218380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.654437][ T4428] ffff888078218400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.662476][ T4428] ==================================================================
[ 80.670527][ T4428] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 80.677702][ T4428] CPU: 1 PID: 4428 Comm: syz.0.17 Not tainted syzkaller #0
[ 80.684877][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 80.694910][ T4428] Call Trace:
[ 80.698174][ T4428]
[ 80.701092][ T4428] dump_stack_lvl+0x188/0x24e
[ 80.705756][ T4428] ? memcpy+0x3c/0x60
[ 80.709720][ T4428] ? show_regs_print_info+0x12/0x12
[ 80.714900][ T4428] ? load_image+0x410/0x410
[ 80.719392][ T4428] panic+0x2d3/0x710
[ 80.723273][ T4428] ? __lock_acquire+0x7c40/0x7c40
[ 80.728283][ T4428] ? bpf_jit_dump+0xd0/0xd0
[ 80.732774][ T4428] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 80.738654][ T4428] ? _raw_spin_unlock+0x40/0x40
[ 80.743496][ T4428] check_panic_on_warn+0x80/0xa0
[ 80.748420][ T4428] ? stack_map_get_build_id_offset+0x849/0x9d0
[ 80.754554][ T4428] end_report+0x66/0x110
[ 80.758782][ T4428] kasan_report+0x118/0x140
[ 80.763272][ T4428] ? stack_map_get_build_id_offset+0x849/0x9d0
[ 80.769410][ T4428] stack_map_get_build_id_offset+0x849/0x9d0
[ 80.775373][ T4428] ? pcpu_freelist_pop+0x126/0x180
[ 80.780472][ T4428] ? __pcpu_freelist_pop+0x850/0x850
[ 80.785744][ T4428] ? __bpf_get_stackid+0x920/0x920
[ 80.790841][ T4428] __bpf_get_stackid+0x55d/0x920
[ 80.795765][ T4428] bpf_get_stackid_pe+0x33f/0x400
[ 80.800780][ T4428] bpf_prog_2414a5d5030ea31b+0x21/0x25
[ 80.806224][ T4428] bpf_overflow_handler+0x50b/0x790
[ 80.811404][ T4428] ? bpf_overflow_handler+0xd9/0x790
[ 80.816670][ T4428] ? perf_swevent_overflow+0x230/0x230
[ 80.822120][ T4428] ? __perf_event_account_interrupt+0x187/0x280
[ 80.828349][ T4428] __perf_event_overflow+0x457/0x630
[ 80.833621][ T4428] ? perf_swevent_event+0x1d5/0x570
[ 80.838809][ T4428] perf_swevent_event+0x315/0x570
[ 80.843820][ T4428] ? perf_tp_event+0xc10/0xc10
[ 80.848575][ T4428] ___perf_sw_event+0x498/0x6d0
[ 80.853412][ T4428] ? ___perf_sw_event+0x184/0x6d0
[ 80.858428][ T4428] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 80.864841][ T4428] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 80.870805][ T4428] ? lock_chain_count+0x20/0x20
[ 80.875641][ T4428] __perf_sw_event+0x135/0x260
[ 80.880398][ T4428] do_user_addr_fault+0x497/0xb20
[ 80.885411][ T4428] ? trace_hardirqs_off_finish+0x86/0x180
[ 80.891117][ T4428] exc_page_fault+0x60/0x100
[ 80.895698][ T4428] asm_exc_page_fault+0x22/0x30
[ 80.900530][ T4428] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 80.907101][ T4428] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 80.926692][ T4428] RSP: 0018:ffffc900034f7668 EFLAGS: 00050206
[ 80.932739][ T4428] RAX: ffffffff84143201 RBX: 0000000000001000 RCX: 0000000000000f80
[ 80.940697][ T4428] RDX: 0000000000001000 RSI: 0000200000002000 RDI: ffff88802f4a1080
[ 80.948652][ T4428] RBP: 0000000000000000 R08: ffff88802f4a1fff R09: 1ffff11005e943ff
[ 80.956611][ T4428] R10: dffffc0000000000 R11: ffffed1005e94400 R12: 00007fffffffe000
[ 80.964567][ T4428] R13: 0000000000001ec0 R14: 0000200000001f80 R15: ffff88802f4a1000
[ 80.972523][ T4428] ? _copy_from_iter+0x1111/0x1130
[ 80.977624][ T4428] copyin+0xe7/0x120
[ 80.981504][ T4428] _copy_from_iter+0x447/0x1130
[ 80.986344][ T4428] ? copyout_mc+0x110/0x110
[ 80.990833][ T4428] ? copyout_mc+0x110/0x110
[ 80.995322][ T4428] ? __virt_addr_valid+0x188/0x540
[ 81.000421][ T4428] ? page_copy_sane+0x194/0x390
[ 81.005257][ T4428] copy_page_from_iter+0x77/0x100
[ 81.010269][ T4428] skb_copy_datagram_from_iter+0x2c5/0x6b0
[ 81.016067][ T4428] unix_stream_sendmsg+0x4d5/0xa70
[ 81.021170][ T4428] ? unix_show_fdinfo+0x2c0/0x2c0
[ 81.026179][ T4428] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 81.032580][ T4428] ? apparmor_socket_sendmsg+0x8a/0x330
[ 81.038112][ T4428] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 81.043378][ T4428] ? security_socket_sendmsg+0x7c/0xa0
[ 81.048823][ T4428] ? unix_show_fdinfo+0x2c0/0x2c0
[ 81.053832][ T4428] ____sys_sendmsg+0x5ed/0x9a0
[ 81.058580][ T4428] ? __sys_sendmsg_sock+0x30/0x30
[ 81.063584][ T4428] ? __import_iovec+0x306/0x510
[ 81.068422][ T4428] ? import_iovec+0x6f/0xa0
[ 81.072912][ T4428] ___sys_sendmsg+0x2a2/0x360
[ 81.077577][ T4428] ? __sys_sendmsg+0x2a0/0x2a0
[ 81.082324][ T4428] ? futex_wake+0x3f6/0x4f0
[ 81.086820][ T4428] __se_sys_sendmsg+0x1c3/0x2b0
[ 81.091653][ T4428] ? __x64_sys_sendmsg+0x80/0x80
[ 81.096582][ T4428] ? lockdep_hardirqs_on+0x94/0x140
[ 81.101767][ T4428] do_syscall_64+0x4c/0xa0
[ 81.106167][ T4428] ? clear_bhb_loop+0x60/0xb0
[ 81.110825][ T4428] ? clear_bhb_loop+0x60/0xb0
[ 81.115487][ T4428] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 81.121371][ T4428] RIP: 0033:0x7ffa4779e159
[ 81.125769][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 81.145359][ T4428] RSP: 002b:00007ffd92f63318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 81.153754][ T4428] RAX: ffffffffffffffda RBX: 00007ffa47a25fa0 RCX: 00007ffa4779e159
[ 81.161709][ T4428] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000006
[ 81.169668][ T4428] RBP: 00007ffa4783506b R08: 0000000000000000 R09: 0000000000000000
[ 81.177620][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 81.185576][ T4428] R13: 00007ffa47a25fac R14: 00007ffa47a25fa0 R15: 00007ffa47a25fa0
[ 81.193532][ T4428]
[ 81.196776][ T4428] Kernel Offset: disabled
[ 81.201081][ T4428] Rebooting in 86400 seconds..