Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts.
2026/02/23 09:38:12 parsed 1 programs
syzkaller login: [ 74.085844][ T4280] cgroup: Unknown subsys name 'net'
[ 74.244481][ T4280] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 75.566641][ T4280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 76.450208][ T14] cfg80211: failed to load regulatory.db
[ 78.265089][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.274761][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.294690][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 78.312862][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.320949][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.336814][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 78.567815][ T4314] chnl_net:caif_netlink_parms(): no params data found
[ 78.613135][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.621011][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.629038][ T4314] device bridge_slave_0 entered promiscuous mode
[ 78.638082][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.645335][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.653508][ T4314] device bridge_slave_1 entered promiscuous mode
[ 78.675139][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.686628][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.707293][ T4314] team0: Port device team_slave_0 added
[ 78.714494][ T4314] team0: Port device team_slave_1 added
[ 78.730405][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.737349][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.763889][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.784010][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.791070][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.817091][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.845669][ T4314] device hsr_slave_0 entered promiscuous mode
[ 78.852442][ T4314] device hsr_slave_1 entered promiscuous mode
[ 78.972671][ T4314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.983877][ T4314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.993834][ T4314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.005771][ T4314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.043197][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.050756][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.058695][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.065777][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.127169][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.141731][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 79.152822][ T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.161691][ T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.174928][ T4314] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.185457][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 79.194210][ T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.201427][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.222877][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.232491][ T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.239617][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.258008][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.267742][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.288309][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.298725][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.310960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.319585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.336584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.345953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.357207][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.507233][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.515602][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.527501][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.552088][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.561752][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 79.580161][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 79.590701][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 79.599605][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 79.607437][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 79.622849][ T4314] device veth0_vlan entered promiscuous mode
[ 79.633650][ T4314] device veth1_vlan entered promiscuous mode
[ 79.656268][ T4314] device veth0_macvtap entered promiscuous mode
[ 79.698239][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.707209][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.715820][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.725273][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.737509][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.754472][ T4314] device veth1_macvtap entered promiscuous mode
[ 79.796804][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.809186][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.817066][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 79.826914][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 79.836915][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.846937][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 79.856045][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 79.881405][ T4314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.891414][ T4314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.900861][ T4314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.910148][ T4314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.169812][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.170104][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.190564][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.198268][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.206856][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.215204][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.222873][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/02/23 09:38:20 executed programs: 0
[ 81.256345][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.265643][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.273544][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.282378][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.289930][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 81.297155][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.395059][ T4363] chnl_net:caif_netlink_parms(): no params data found
[ 81.437417][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.445164][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.453292][ T4363] device bridge_slave_0 entered promiscuous mode
[ 81.461725][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.469024][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.476716][ T4363] device bridge_slave_1 entered promiscuous mode
[ 81.496882][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.508528][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.530355][ T4363] team0: Port device team_slave_0 added
[ 81.537555][ T4363] team0: Port device team_slave_1 added
[ 81.552747][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.560258][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.586721][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.599953][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.606916][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.633397][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.661733][ T4363] device hsr_slave_0 entered promiscuous mode
[ 81.669210][ T4363] device hsr_slave_1 entered promiscuous mode
[ 81.675712][ T4363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 81.683783][ T4363] Cannot create hsr debugfs directory
[ 82.261308][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.329176][ T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 84.606703][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.650469][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.409295][ T4336] Bluetooth: hci0: command 0x041b tx timeout
[ 85.498987][ T4363] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.508266][ T4363] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.526173][ T34] device hsr_slave_0 left promiscuous mode
[ 85.535806][ T34] device hsr_slave_1 left promiscuous mode
[ 85.543343][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 85.553513][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 85.563507][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 85.576245][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 85.584021][ T34] device bridge_slave_1 left promiscuous mode
[ 85.591405][ T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.601793][ T34] device bridge_slave_0 left promiscuous mode
[ 85.607995][ T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.627344][ T34] device veth1_macvtap left promiscuous mode
[ 85.633775][ T34] device veth0_macvtap left promiscuous mode
[ 85.640135][ T34] device veth1_vlan left promiscuous mode
[ 85.646091][ T34] device veth0_vlan left promiscuous mode
[ 85.975665][ T34] team0 (unregistering): Port device team_slave_1 removed
[ 86.001721][ T34] team0 (unregistering): Port device team_slave_0 removed
[ 86.028579][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.058275][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 86.222849][ T34] bond0 (unregistering): Released all slaves
[ 86.299941][ T4363] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.309899][ T4363] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.360761][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.387507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 86.396990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 86.407145][ T4363] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.417018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 86.426519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 86.436155][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.443285][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.452816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 86.476304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 86.485637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 86.494350][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.501464][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.511354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 86.538124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 86.553029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 86.561809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 86.570656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 86.579441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 86.587765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 86.602658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 86.611099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 86.620231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 86.628740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 86.638299][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 86.815299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 86.823336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 86.835052][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.865891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 86.874804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 86.898608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 86.907331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 86.922283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 86.934065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 86.946627][ T4363] device veth0_vlan entered promiscuous mode
[ 86.963187][ T4363] device veth1_vlan entered promiscuous mode
[ 86.995085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 87.004620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 87.013273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 87.022104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 87.035058][ T4363] device veth0_macvtap entered promiscuous mode
[ 87.044586][ T4363] device veth1_macvtap entered promiscuous mode
[ 87.058183][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.065914][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 87.075992][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 87.084416][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 87.093262][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 87.104514][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.113048][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 87.121885][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 87.133402][ T4363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.142850][ T4363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.152150][ T4363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.160899][ T4363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.206421][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.216685][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.227431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 87.245872][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.254728][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.263142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 87.315821][ C1] ==================================================================
[ 87.315829][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[ 87.315851][ C1] Write of size 112 at addr ffff888077743a10 by task syz.0.17/4417
[ 87.315859][ C1]
[ 87.315870][ C1] CPU: 1 PID: 4417 Comm: syz.0.17 Not tainted syzkaller #0
[ 87.315878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 87.315883][ C1] Call Trace:
[ 87.315889][ C1] <#DB>
[ 87.315892][ C1] dump_stack_lvl+0x188/0x24e
[ 87.315905][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 87.315917][ C1] ? show_regs_print_info+0x12/0x12
[ 87.315928][ C1] ? load_image+0x400/0x400
[ 87.315937][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 87.315946][ C1] ? __virt_addr_valid+0x188/0x540
[ 87.315958][ C1] ? __virt_addr_valid+0x465/0x540
[ 87.315968][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.315976][ C1] print_report+0xa8/0x210
[ 87.315985][ C1] kasan_report+0x10b/0x140
[ 87.315998][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.316008][ C1] kasan_check_range+0x235/0x290
[ 87.316019][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.316027][ C1] memcpy+0x3c/0x60
[ 87.316035][ C1] __bpf_get_stackid+0x6c9/0x920
[ 87.316045][ C1] bpf_get_stackid_pe+0x33f/0x400
[ 87.316056][ C1] bpf_prog_6611c23d801ea08d+0x21/0x36
[ 87.316069][ C1] bpf_overflow_handler+0x522/0x7c0
[ 87.316079][ C1] ? bpf_overflow_handler+0xd9/0x7c0
[ 87.316093][ C1] ? perf_event_switch_output+0x760/0x760
[ 87.316104][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 87.316117][ C1] __perf_event_overflow+0x448/0x610
[ 87.316130][ C1] perf_bp_event+0x28c/0x330
[ 87.316142][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 87.316160][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.316170][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.316182][ C1] hw_breakpoint_exceptions_notify+0x152/0x470
[ 87.316195][ C1] atomic_notifier_call_chain+0x17a/0x2b0
[ 87.316203][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.316213][ C1] notify_die+0x141/0x1a0
[ 87.316222][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 87.316234][ C1] notify_debug+0x20/0x30
[ 87.316244][ C1] exc_debug+0xd9/0x130
[ 87.316255][ C1] asm_exc_debug+0x1a/0x40
[ 87.316264][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13
[ 87.316276][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00
[ 87.316286][ C1] RSP: 0000:ffffc900034a7740 EFLAGS: 00040802
[ 87.316296][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88807aab5940
[ 87.316302][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0
[ 87.316308][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000
[ 87.316313][ C1] R10: ffffffff8fa0a050 R11: ffffffff8fa0a043 R12: 00000000ffffffff
[ 87.316318][ C1] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0
[ 87.316328][ C1] #DB>
[ 87.316330][ C1]
[ 87.316333][ C1] perf_callchain_user+0x55d/0x13c0
[ 87.316348][ C1] get_perf_callchain+0x39e/0x490
[ 87.316360][ C1] ? put_callchain_entry+0xb0/0xb0
[ 87.316372][ C1] ? __perf_event_header__init_id+0x42c/0x530
[ 87.316384][ C1] perf_prepare_sample+0x399/0x2020
[ 87.316396][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.316406][ C1] ? perf_callchain+0x190/0x190
[ 87.316417][ C1] ? bpf_get_stackid_pe+0x33f/0x400
[ 87.316427][ C1] perf_event_output_forward+0x197/0x2f0
[ 87.316438][ C1] ? perf_event_output_forward+0xbe/0x2f0
[ 87.316448][ C1] ? perf_get_page_size+0x430/0x430
[ 87.316462][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 87.316474][ C1] __perf_event_overflow+0x448/0x610
[ 87.316487][ C1] perf_bp_event+0x28c/0x330
[ 87.316498][ C1] ? verify_lock_unused+0x140/0x140
[ 87.316509][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 87.316520][ C1] ? __fdget+0x146/0x200
[ 87.316539][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.316549][ C1] ? do_futex+0x2e2/0x320
[ 87.316558][ C1] hw_breakpoint_exceptions_notify+0x21a/0x470
[ 87.316570][ C1] atomic_notifier_call_chain+0x17a/0x2b0
[ 87.316579][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.316588][ C1] notify_die+0x141/0x1a0
[ 87.316597][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 87.316608][ C1] ? rcu_is_watching+0x11/0xa0
[ 87.316620][ C1] notify_debug+0x20/0x30
[ 87.316629][ C1] noist_exc_debug+0x73/0x120
[ 87.316639][ C1] ? clear_bhb_loop+0x60/0xb0
[ 87.316649][ C1] asm_exc_debug+0x2f/0x40
[ 87.316657][ C1] RIP: 0033:0x7f7dcb57b43d
[ 87.316663][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc
[ 87.316669][ C1] RSP: 002b:00007ffc3ddf68f8 EFLAGS: 00000283
[ 87.316675][ C1] RAX: 0000000000000300 RBX: 00007ffc3ddf6e30 RCX: 2f666c65732f636f
[ 87.316681][ C1] RDX: 0000200000000300 RSI: 00007f7dcb65c9c0 RDI: 0000200000000300
[ 87.316686][ C1] RBP: 0000200000000300 R08: 00007ffc3ddf7060 R09: 00000000ffffffff
[ 87.316691][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 87.316696][ C1] R13: 0000000000000073 R14: 00007f7dcb631e03 R15: 00007ffc3ddf6ef0
[ 87.316705][ C1]
[ 87.316707][ C1]
[ 87.316711][ C1] Allocated by task 4417:
[ 87.316715][ C1] kasan_set_track+0x4b/0x70
[ 87.316725][ C1] __kasan_kmalloc+0x8e/0xa0
[ 87.316734][ C1] __kmalloc_node+0xb0/0x240
[ 87.316744][ C1] bpf_map_area_alloc+0x47/0xe0
[ 87.316752][ C1] prealloc_elems_and_freelist+0x86/0x1c0
[ 87.316760][ C1] stack_map_alloc+0x390/0x520
[ 87.316767][ C1] map_create+0x534/0x1000
[ 87.316776][ C1] __sys_bpf+0x38b/0x780
[ 87.316785][ C1] __x64_sys_bpf+0x78/0x90
[ 87.316794][ C1] do_syscall_64+0x4c/0xa0
[ 87.316802][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 87.316810][ C1]
[ 87.316811][ C1] The buggy address belongs to the object at ffff888077743a00
[ 87.316811][ C1] which belongs to the cache kmalloc-cg-64 of size 64
[ 87.316818][ C1] The buggy address is located 16 bytes inside of
[ 87.316818][ C1] 64-byte region [ffff888077743a00, ffff888077743a40)
[ 87.316825][ C1]
[ 87.316827][ C1] The buggy address belongs to the physical page:
[ 87.316833][ C1] page:ffffea0001ddd0c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77743
[ 87.316844][ C1] memcg:ffff8880789a9601
[ 87.316847][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 87.316864][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442780
[ 87.316871][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880789a9601
[ 87.316875][ C1] page dumped because: kasan: bad access detected
[ 87.316890][ C1] page_owner tracks the page as allocated
[ 87.316892][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 34, tgid 34 (kworker/u4:2), ts 86796141403, free_ts 85376166699
[ 87.316906][ C1] post_alloc_hook+0x173/0x1a0
[ 87.316916][ C1] get_page_from_freelist+0x1a1e/0x1ab0
[ 87.316927][ C1] __alloc_pages+0x1ec/0x4f0
[ 87.316936][ C1] alloc_slab_page+0x5d/0x160
[ 87.316944][ C1] new_slab+0x87/0x2c0
[ 87.316952][ C1] ___slab_alloc+0xbc6/0x1240
[ 87.316959][ C1] __kmem_cache_alloc_node+0x1a0/0x260
[ 87.316966][ C1] __kmalloc_node+0xa0/0x240
[ 87.316976][ C1] kvmalloc_node+0x6c/0x180
[ 87.316987][ C1] __nf_hook_entries_try_shrink+0x310/0x6d0
[ 87.316996][ C1] __nf_unregister_net_hook+0x4e1/0x6e0
[ 87.317004][ C1] nf_unregister_net_hooks+0xc7/0x130
[ 87.317011][ C1] nf_ct_netns_put+0x369/0x510
[ 87.317019][ C1] nf_conncount_destroy+0x3d/0x150
[ 87.317029][ C1] ovs_ct_exit+0x98/0x200
[ 87.317039][ C1] ovs_exit_net+0xe9/0x7a0
[ 87.317051][ C1] page last free stack trace:
[ 87.317053][ C1] free_unref_page_prepare+0x8b4/0x9a0
[ 87.317062][ C1] free_unref_page_list+0xbb/0x8e0
[ 87.317072][ C1] release_pages+0x1fa6/0x2220
[ 87.317081][ C1] tlb_flush_mmu+0x105/0x220
[ 87.317096][ C1] tlb_finish_mmu+0xbd/0x1c0
[ 87.317105][ C1] exit_mmap+0x384/0x960
[ 87.317114][ C1] __mmput+0x118/0x3c0
[ 87.317121][ C1] exit_mm+0x1fe/0x2d0
[ 87.317130][ C1] do_exit+0x905/0x2480
[ 87.317140][ C1] do_group_exit+0x217/0x2d0
[ 87.317149][ C1] __x64_sys_exit_group+0x3b/0x40
[ 87.317159][ C1] do_syscall_64+0x4c/0xa0
[ 87.317168][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 87.317176][ C1]
[ 87.317177][ C1] Memory state around the buggy address:
[ 87.317182][ C1] ffff888077743900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 87.317186][ C1] ffff888077743980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 87.317191][ C1] >ffff888077743a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 87.317195][ C1] ^
[ 87.317198][ C1] ffff888077743a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 87.317203][ C1] ffff888077743b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 87.317206][ C1] ==================================================================
[ 87.317212][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.317215][ C1] CPU: 1 PID: 4417 Comm: syz.0.17 Not tainted syzkaller #0
[ 87.317223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 87.317227][ C1] Call Trace:
[ 87.317229][ C1] <#DB>
[ 87.317232][ C1] dump_stack_lvl+0x188/0x24e
[ 87.317242][ C1] ? memcpy+0x3c/0x60
[ 87.317249][ C1] ? show_regs_print_info+0x12/0x12
[ 87.317259][ C1] ? load_image+0x400/0x400
[ 87.317270][ C1] panic+0x2e5/0x730
[ 87.317277][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 87.317288][ C1] ? bpf_jit_dump+0xd0/0xd0
[ 87.317297][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 87.317304][ C1] ? _raw_spin_unlock+0x40/0x40
[ 87.317313][ C1] check_panic_on_warn+0x80/0xa0
[ 87.317322][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.317330][ C1] end_report+0x66/0x110
[ 87.317341][ C1] kasan_report+0x118/0x140
[ 87.317351][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.317361][ C1] kasan_check_range+0x235/0x290
[ 87.317372][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.317380][ C1] memcpy+0x3c/0x60
[ 87.317388][ C1] __bpf_get_stackid+0x6c9/0x920
[ 87.317398][ C1] bpf_get_stackid_pe+0x33f/0x400
[ 87.317408][ C1] bpf_prog_6611c23d801ea08d+0x21/0x36
[ 87.317417][ C1] bpf_overflow_handler+0x522/0x7c0
[ 87.317427][ C1] ? bpf_overflow_handler+0xd9/0x7c0
[ 87.317435][ C1] ? perf_event_switch_output+0x760/0x760
[ 87.317445][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 87.317457][ C1] __perf_event_overflow+0x448/0x610
[ 87.317470][ C1] perf_bp_event+0x28c/0x330
[ 87.317482][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 87.317500][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.317509][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.317521][ C1] hw_breakpoint_exceptions_notify+0x152/0x470
[ 87.317533][ C1] atomic_notifier_call_chain+0x17a/0x2b0
[ 87.317541][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.317551][ C1] notify_die+0x141/0x1a0
[ 87.317560][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 87.317572][ C1] notify_debug+0x20/0x30
[ 87.317580][ C1] exc_debug+0xd9/0x130
[ 87.317591][ C1] asm_exc_debug+0x1a/0x40
[ 87.317599][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13
[ 87.317609][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00
[ 87.317616][ C1] RSP: 0000:ffffc900034a7740 EFLAGS: 00040802
[ 87.317622][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88807aab5940
[ 87.317628][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0
[ 87.317634][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000
[ 87.317638][ C1] R10: ffffffff8fa0a050 R11: ffffffff8fa0a043 R12: 00000000ffffffff
[ 87.317644][ C1] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0
[ 87.317653][ C1] #DB>
[ 87.317655][ C1]
[ 87.317657][ C1] perf_callchain_user+0x55d/0x13c0
[ 87.317672][ C1] get_perf_callchain+0x39e/0x490
[ 87.317682][ C1] ? put_callchain_entry+0xb0/0xb0
[ 87.317694][ C1] ? __perf_event_header__init_id+0x42c/0x530
[ 87.317706][ C1] perf_prepare_sample+0x399/0x2020
[ 87.317718][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.317728][ C1] ? perf_callchain+0x190/0x190
[ 87.317739][ C1] ? bpf_get_stackid_pe+0x33f/0x400
[ 87.317748][ C1] perf_event_output_forward+0x197/0x2f0
[ 87.317759][ C1] ? perf_event_output_forward+0xbe/0x2f0
[ 87.317770][ C1] ? perf_get_page_size+0x430/0x430
[ 87.317783][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 87.317795][ C1] __perf_event_overflow+0x448/0x610
[ 87.317808][ C1] perf_bp_event+0x28c/0x330
[ 87.317819][ C1] ? verify_lock_unused+0x140/0x140
[ 87.317830][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 87.317841][ C1] ? __fdget+0x146/0x200
[ 87.317858][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.317868][ C1] ? do_futex+0x2e2/0x320
[ 87.317876][ C1] hw_breakpoint_exceptions_notify+0x21a/0x470
[ 87.317888][ C1] atomic_notifier_call_chain+0x17a/0x2b0
[ 87.317897][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.317906][ C1] notify_die+0x141/0x1a0
[ 87.317915][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 87.317926][ C1] ? rcu_is_watching+0x11/0xa0
[ 87.317937][ C1] notify_debug+0x20/0x30
[ 87.317946][ C1] noist_exc_debug+0x73/0x120
[ 87.317956][ C1] ? clear_bhb_loop+0x60/0xb0
[ 87.317965][ C1] asm_exc_debug+0x2f/0x40
[ 87.317973][ C1] RIP: 0033:0x7f7dcb57b43d
[ 87.317979][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc
[ 87.317985][ C1] RSP: 002b:00007ffc3ddf68f8 EFLAGS: 00000283
[ 87.317991][ C1] RAX: 0000000000000300 RBX: 00007ffc3ddf6e30 RCX: 2f666c65732f636f
[ 87.317996][ C1] RDX: 0000200000000300 RSI: 00007f7dcb65c9c0 RDI: 0000200000000300
[ 87.318001][ C1] RBP: 0000200000000300 R08: 00007ffc3ddf7060 R09: 00000000ffffffff
[ 87.318006][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 87.318011][ C1] R13: 0000000000000073 R14: 00007f7dcb631e03 R15: 00007ffc3ddf6ef0
[ 87.318020][ C1]
[ 87.318362][ C1] Kernel Offset: disabled
[ 87.318367][ C1]
[ 87.318368][ C1] ================================
[ 87.318370][ C1] WARNING: inconsistent lock state
[ 87.318375][ C1] syzkaller #0 Not tainted
[ 87.318379][ C1] --------------------------------
[ 87.318381][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 87.318385][ C1] syz.0.17/4417 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 87.318396][ C1] ffffffff8cb21858 ((console_sem).lock){....}-{2:2}, at: down_trylock+0x1c/0xa0
[ 87.318430][ C1] {INITIAL USE} state was registered at:
[ 87.318434][ C1] irq event stamp: 2312
[ 87.318436][ C1] hardirqs last enabled at (2311): [] do_syscall_64+0x58/0xa0
[ 87.318448][ C1] hardirqs last disabled at (2312): [] noist_exc_debug+0x49/0x120
[ 87.318461][ C1] softirqs last enabled at (2254): [] bpf_prog_load+0x1127/0x1560
[ 87.318473][ C1] softirqs last disabled at (2252): [] bpf_ksym_add+0x29/0x340
[ 87.318487][ C1]
[ 87.318487][ C1] other info that might help us debug this:
[ 87.318489][ C1] Possible unsafe locking scenario:
[ 87.318489][ C1]
[ 87.318491][ C1] CPU0
[ 87.318492][ C1] ----
[ 87.318493][ C1] lock((console_sem).lock);
[ 87.318498][ C1]
[ 87.318500][ C1] lock((console_sem).lock);
[ 87.318504][ C1]
[ 87.318504][ C1] *** DEADLOCK ***
[ 87.318504][ C1]
[ 87.318506][ C1] 2 locks held by syz.0.17/4417:
[ 87.318510][ C1] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x2c/0x2b0
[ 87.318530][ C1] #1: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0
[ 87.318551][ C1]
[ 87.318551][ C1] stack backtrace:
[ 87.318553][ C1] CPU: 1 PID: 4417 Comm: syz.0.17 Not tainted syzkaller #0
[ 87.318560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 87.318564][ C1] Call Trace:
[ 87.318567][ C1] <#DB>
[ 87.318569][ C1] dump_stack_lvl+0x188/0x24e
[ 87.318580][ C1] ? show_regs_print_info+0x12/0x12
[ 87.318591][ C1] ? print_usage_bug+0x42a/0x690
[ 87.318602][ C1] ? verify_lock_unused+0x18/0x140
[ 87.318613][ C1] lock_acquire+0x2df/0x4a0
[ 87.318623][ C1] ? down_trylock+0x1c/0xa0
[ 87.318633][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.318643][ C1] ? __wake_up_klogd+0xd9/0x100
[ 87.318655][ C1] ? vprintk_emit+0x12f/0x6a0
[ 87.318665][ C1] ? printk_sprint+0x460/0x460
[ 87.318676][ C1] _raw_spin_lock_irqsave+0xb0/0x100
[ 87.318683][ C1] ? down_trylock+0x1c/0xa0
[ 87.318693][ C1] ? _raw_spin_lock+0x40/0x40
[ 87.318700][ C1] ? verify_lock_unused+0x18/0x140
[ 87.318711][ C1] down_trylock+0x1c/0xa0
[ 87.318722][ C1] __down_trylock_console_sem+0xd4/0x1f0
[ 87.318733][ C1] ? kmsg_dump+0x1b/0x240
[ 87.318743][ C1] ? panic+0x376/0x730
[ 87.318750][ C1] ? console_trylock+0x160/0x160
[ 87.318760][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 87.318771][ C1] ? kmsg_dump+0x1b/0x240
[ 87.318782][ C1] console_unblank+0x28/0x170
[ 87.318793][ C1] panic+0x376/0x730
[ 87.318799][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 87.318810][ C1] ? bpf_jit_dump+0xd0/0xd0
[ 87.318818][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 87.318826][ C1] ? _raw_spin_unlock+0x40/0x40
[ 87.318833][ C1] check_panic_on_warn+0x80/0xa0
[ 87.318845][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.318854][ C1] end_report+0x66/0x110
[ 87.318863][ C1] kasan_report+0x118/0x140
[ 87.318874][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.318883][ C1] kasan_check_range+0x235/0x290
[ 87.318894][ C1] ? __bpf_get_stackid+0x6c9/0x920
[ 87.318902][ C1] memcpy+0x3c/0x60
[ 87.318909][ C1] __bpf_get_stackid+0x6c9/0x920
[ 87.318919][ C1] bpf_get_stackid_pe+0x33f/0x400
[ 87.318928][ C1] bpf_prog_6611c23d801ea08d+0x21/0x36
[ 87.318937][ C1] bpf_overflow_handler+0x522/0x7c0
[ 87.318946][ C1] ? bpf_overflow_handler+0xd9/0x7c0
[ 87.318955][ C1] ? perf_event_switch_output+0x760/0x760
[ 87.318964][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 87.318976][ C1] __perf_event_overflow+0x448/0x610
[ 87.318988][ C1] perf_bp_event+0x28c/0x330
[ 87.319000][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 87.319016][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.319024][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.319036][ C1] hw_breakpoint_exceptions_notify+0x152/0x470
[ 87.319048][ C1] atomic_notifier_call_chain+0x17a/0x2b0
[ 87.319056][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.319065][ C1] notify_die+0x141/0x1a0
[ 87.319074][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 87.319085][ C1] notify_debug+0x20/0x30
[ 87.319099][ C1] exc_debug+0xd9/0x130
[ 87.319110][ C1] asm_exc_debug+0x1a/0x40
[ 87.319118][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13
[ 87.319129][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00
[ 87.319135][ C1] RSP: 0000:ffffc900034a7740 EFLAGS: 00040802
[ 87.319142][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88807aab5940
[ 87.319148][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0
[ 87.319153][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000
[ 87.319157][ C1] R10: ffffffff8fa0a050 R11: ffffffff8fa0a043 R12: 00000000ffffffff
[ 87.319163][ C1] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0
[ 87.319171][ C1] #DB>
[ 87.319173][ C1]
[ 87.319176][ C1] perf_callchain_user+0x55d/0x13c0
[ 87.319189][ C1] get_perf_callchain+0x39e/0x490
[ 87.319200][ C1] ? put_callchain_entry+0xb0/0xb0
[ 87.319211][ C1] ? __perf_event_header__init_id+0x42c/0x530
[ 87.319222][ C1] perf_prepare_sample+0x399/0x2020
[ 87.319234][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.319244][ C1] ? perf_callchain+0x190/0x190
[ 87.319254][ C1] ? bpf_get_stackid_pe+0x33f/0x400
[ 87.319263][ C1] perf_event_output_forward+0x197/0x2f0
[ 87.319274][ C1] ? perf_event_output_forward+0xbe/0x2f0
[ 87.319285][ C1] ? perf_get_page_size+0x430/0x430
[ 87.319297][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 87.319309][ C1] __perf_event_overflow+0x448/0x610
[ 87.319321][ C1] perf_bp_event+0x28c/0x330
[ 87.319331][ C1] ? verify_lock_unused+0x140/0x140
[ 87.319342][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 87.319353][ C1] ? __fdget+0x146/0x200
[ 87.319368][ C1] ? read_lock_is_recursive+0x10/0x10
[ 87.319379][ C1] ? do_futex+0x2e2/0x320
[ 87.319386][ C1] hw_breakpoint_exceptions_notify+0x21a/0x470
[ 87.319398][ C1] atomic_notifier_call_chain+0x17a/0x2b0
[ 87.319406][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0
[ 87.319415][ C1] notify_die+0x141/0x1a0
[ 87.319424][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 87.319434][ C1] ? rcu_is_watching+0x11/0xa0
[ 87.319445][ C1] notify_debug+0x20/0x30
[ 87.319454][ C1] noist_exc_debug+0x73/0x120
[ 87.319464][ C1] ? clear_bhb_loop+0x60/0xb0
[ 87.319473][ C1] asm_exc_debug+0x2f/0x40
[ 87.319480][ C1] RIP: 0033:0x7f7dcb57b43d
[ 87.319486][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc
[ 87.319492][ C1] RSP: 002b:00007ffc3ddf68f8 EFLAGS: 00000283
[ 87.319498][ C1] RAX: 0000000000000300 RBX: 00007ffc3ddf6e30 RCX: 2f666c65732f636f
[ 87.319503][ C1] RDX: 0000200000000300 RSI: 00007f7dcb65c9c0 RDI: 0000200000000300
[ 87.319509][ C1] RBP: 0000200000000300 R08: 00007ffc3ddf7060 R09: 00000000ffffffff
[ 87.319514][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 87.319518][ C1] R13: 0000000000000073 R14: 00007f7dcb631e03 R15: 00007ffc3ddf6ef0
[ 87.319526][ C1]