Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. 2026/02/23 09:38:12 parsed 1 programs syzkaller login: [ 74.085844][ T4280] cgroup: Unknown subsys name 'net' [ 74.244481][ T4280] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.566641][ T4280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.450208][ T14] cfg80211: failed to load regulatory.db [ 78.265089][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.274761][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.294690][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.312862][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.320949][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.336814][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.567815][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 78.613135][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.621011][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.629038][ T4314] device bridge_slave_0 entered promiscuous mode [ 78.638082][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.645335][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.653508][ T4314] device bridge_slave_1 entered promiscuous mode [ 78.675139][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.686628][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.707293][ T4314] team0: Port device team_slave_0 added [ 78.714494][ T4314] team0: Port device team_slave_1 added [ 78.730405][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.737349][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.763889][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.784010][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.791070][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.817091][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.845669][ T4314] device hsr_slave_0 entered promiscuous mode [ 78.852442][ T4314] device hsr_slave_1 entered promiscuous mode [ 78.972671][ T4314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.983877][ T4314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.993834][ T4314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.005771][ T4314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.043197][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.050756][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.058695][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.065777][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.127169][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.141731][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.152822][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.161691][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.174928][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.185457][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.194210][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.201427][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.222877][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.232491][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.239617][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.258008][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.267742][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.288309][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.298725][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.310960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.319585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.336584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.345953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.357207][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.507233][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.515602][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.527501][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.552088][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.561752][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.580161][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.590701][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.599605][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.607437][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.622849][ T4314] device veth0_vlan entered promiscuous mode [ 79.633650][ T4314] device veth1_vlan entered promiscuous mode [ 79.656268][ T4314] device veth0_macvtap entered promiscuous mode [ 79.698239][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.707209][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.715820][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.725273][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.737509][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.754472][ T4314] device veth1_macvtap entered promiscuous mode [ 79.796804][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.809186][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.817066][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.826914][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.836915][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.846937][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.856045][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.881405][ T4314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.891414][ T4314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.900861][ T4314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910148][ T4314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169812][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.170104][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.190564][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.198268][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.206856][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.215204][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.222873][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/02/23 09:38:20 executed programs: 0 [ 81.256345][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.265643][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.273544][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.282378][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.289930][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.297155][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.395059][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 81.437417][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.445164][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.453292][ T4363] device bridge_slave_0 entered promiscuous mode [ 81.461725][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.469024][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.476716][ T4363] device bridge_slave_1 entered promiscuous mode [ 81.496882][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.508528][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.530355][ T4363] team0: Port device team_slave_0 added [ 81.537555][ T4363] team0: Port device team_slave_1 added [ 81.552747][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.560258][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.586721][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.599953][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.606916][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.633397][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.661733][ T4363] device hsr_slave_0 entered promiscuous mode [ 81.669210][ T4363] device hsr_slave_1 entered promiscuous mode [ 81.675712][ T4363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.683783][ T4363] Cannot create hsr debugfs directory [ 82.261308][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.329176][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 84.606703][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.650469][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.409295][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 85.498987][ T4363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.508266][ T4363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.526173][ T34] device hsr_slave_0 left promiscuous mode [ 85.535806][ T34] device hsr_slave_1 left promiscuous mode [ 85.543343][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.553513][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.563507][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.576245][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.584021][ T34] device bridge_slave_1 left promiscuous mode [ 85.591405][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.601793][ T34] device bridge_slave_0 left promiscuous mode [ 85.607995][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.627344][ T34] device veth1_macvtap left promiscuous mode [ 85.633775][ T34] device veth0_macvtap left promiscuous mode [ 85.640135][ T34] device veth1_vlan left promiscuous mode [ 85.646091][ T34] device veth0_vlan left promiscuous mode [ 85.975665][ T34] team0 (unregistering): Port device team_slave_1 removed [ 86.001721][ T34] team0 (unregistering): Port device team_slave_0 removed [ 86.028579][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.058275][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.222849][ T34] bond0 (unregistering): Released all slaves [ 86.299941][ T4363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.309899][ T4363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.360761][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.387507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.396990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.407145][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.417018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.426519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.436155][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.443285][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.452816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.476304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.485637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.494350][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.501464][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.511354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.538124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.553029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.561809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.570656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.579441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.587765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.602658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.611099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.620231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.628740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.638299][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.815299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.823336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.835052][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.865891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.874804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.898608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.907331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.922283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.934065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.946627][ T4363] device veth0_vlan entered promiscuous mode [ 86.963187][ T4363] device veth1_vlan entered promiscuous mode [ 86.995085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.004620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.013273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.022104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.035058][ T4363] device veth0_macvtap entered promiscuous mode [ 87.044586][ T4363] device veth1_macvtap entered promiscuous mode [ 87.058183][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.065914][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.075992][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.084416][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.093262][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.104514][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.113048][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.121885][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.133402][ T4363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.142850][ T4363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.152150][ T4363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.160899][ T4363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.206421][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.216685][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.227431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.245872][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.254728][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.263142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.315821][ C1] ================================================================== [ 87.315829][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 87.315851][ C1] Write of size 112 at addr ffff888077743a10 by task syz.0.17/4417 [ 87.315859][ C1] [ 87.315870][ C1] CPU: 1 PID: 4417 Comm: syz.0.17 Not tainted syzkaller #0 [ 87.315878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.315883][ C1] Call Trace: [ 87.315889][ C1] <#DB> [ 87.315892][ C1] dump_stack_lvl+0x188/0x24e [ 87.315905][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 87.315917][ C1] ? show_regs_print_info+0x12/0x12 [ 87.315928][ C1] ? load_image+0x400/0x400 [ 87.315937][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 87.315946][ C1] ? __virt_addr_valid+0x188/0x540 [ 87.315958][ C1] ? __virt_addr_valid+0x465/0x540 [ 87.315968][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.315976][ C1] print_report+0xa8/0x210 [ 87.315985][ C1] kasan_report+0x10b/0x140 [ 87.315998][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.316008][ C1] kasan_check_range+0x235/0x290 [ 87.316019][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.316027][ C1] memcpy+0x3c/0x60 [ 87.316035][ C1] __bpf_get_stackid+0x6c9/0x920 [ 87.316045][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 87.316056][ C1] bpf_prog_6611c23d801ea08d+0x21/0x36 [ 87.316069][ C1] bpf_overflow_handler+0x522/0x7c0 [ 87.316079][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 87.316093][ C1] ? perf_event_switch_output+0x760/0x760 [ 87.316104][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 87.316117][ C1] __perf_event_overflow+0x448/0x610 [ 87.316130][ C1] perf_bp_event+0x28c/0x330 [ 87.316142][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 87.316160][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.316170][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.316182][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 87.316195][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 87.316203][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.316213][ C1] notify_die+0x141/0x1a0 [ 87.316222][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 87.316234][ C1] notify_debug+0x20/0x30 [ 87.316244][ C1] exc_debug+0xd9/0x130 [ 87.316255][ C1] asm_exc_debug+0x1a/0x40 [ 87.316264][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 87.316276][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 87.316286][ C1] RSP: 0000:ffffc900034a7740 EFLAGS: 00040802 [ 87.316296][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88807aab5940 [ 87.316302][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 87.316308][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000 [ 87.316313][ C1] R10: ffffffff8fa0a050 R11: ffffffff8fa0a043 R12: 00000000ffffffff [ 87.316318][ C1] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0 [ 87.316328][ C1] [ 87.316330][ C1] [ 87.316333][ C1] perf_callchain_user+0x55d/0x13c0 [ 87.316348][ C1] get_perf_callchain+0x39e/0x490 [ 87.316360][ C1] ? put_callchain_entry+0xb0/0xb0 [ 87.316372][ C1] ? __perf_event_header__init_id+0x42c/0x530 [ 87.316384][ C1] perf_prepare_sample+0x399/0x2020 [ 87.316396][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.316406][ C1] ? perf_callchain+0x190/0x190 [ 87.316417][ C1] ? bpf_get_stackid_pe+0x33f/0x400 [ 87.316427][ C1] perf_event_output_forward+0x197/0x2f0 [ 87.316438][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 87.316448][ C1] ? perf_get_page_size+0x430/0x430 [ 87.316462][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 87.316474][ C1] __perf_event_overflow+0x448/0x610 [ 87.316487][ C1] perf_bp_event+0x28c/0x330 [ 87.316498][ C1] ? verify_lock_unused+0x140/0x140 [ 87.316509][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 87.316520][ C1] ? __fdget+0x146/0x200 [ 87.316539][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.316549][ C1] ? do_futex+0x2e2/0x320 [ 87.316558][ C1] hw_breakpoint_exceptions_notify+0x21a/0x470 [ 87.316570][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 87.316579][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.316588][ C1] notify_die+0x141/0x1a0 [ 87.316597][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 87.316608][ C1] ? rcu_is_watching+0x11/0xa0 [ 87.316620][ C1] notify_debug+0x20/0x30 [ 87.316629][ C1] noist_exc_debug+0x73/0x120 [ 87.316639][ C1] ? clear_bhb_loop+0x60/0xb0 [ 87.316649][ C1] asm_exc_debug+0x2f/0x40 [ 87.316657][ C1] RIP: 0033:0x7f7dcb57b43d [ 87.316663][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 87.316669][ C1] RSP: 002b:00007ffc3ddf68f8 EFLAGS: 00000283 [ 87.316675][ C1] RAX: 0000000000000300 RBX: 00007ffc3ddf6e30 RCX: 2f666c65732f636f [ 87.316681][ C1] RDX: 0000200000000300 RSI: 00007f7dcb65c9c0 RDI: 0000200000000300 [ 87.316686][ C1] RBP: 0000200000000300 R08: 00007ffc3ddf7060 R09: 00000000ffffffff [ 87.316691][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 87.316696][ C1] R13: 0000000000000073 R14: 00007f7dcb631e03 R15: 00007ffc3ddf6ef0 [ 87.316705][ C1] [ 87.316707][ C1] [ 87.316711][ C1] Allocated by task 4417: [ 87.316715][ C1] kasan_set_track+0x4b/0x70 [ 87.316725][ C1] __kasan_kmalloc+0x8e/0xa0 [ 87.316734][ C1] __kmalloc_node+0xb0/0x240 [ 87.316744][ C1] bpf_map_area_alloc+0x47/0xe0 [ 87.316752][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 87.316760][ C1] stack_map_alloc+0x390/0x520 [ 87.316767][ C1] map_create+0x534/0x1000 [ 87.316776][ C1] __sys_bpf+0x38b/0x780 [ 87.316785][ C1] __x64_sys_bpf+0x78/0x90 [ 87.316794][ C1] do_syscall_64+0x4c/0xa0 [ 87.316802][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.316810][ C1] [ 87.316811][ C1] The buggy address belongs to the object at ffff888077743a00 [ 87.316811][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 87.316818][ C1] The buggy address is located 16 bytes inside of [ 87.316818][ C1] 64-byte region [ffff888077743a00, ffff888077743a40) [ 87.316825][ C1] [ 87.316827][ C1] The buggy address belongs to the physical page: [ 87.316833][ C1] page:ffffea0001ddd0c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77743 [ 87.316844][ C1] memcg:ffff8880789a9601 [ 87.316847][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 87.316864][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442780 [ 87.316871][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880789a9601 [ 87.316875][ C1] page dumped because: kasan: bad access detected [ 87.316890][ C1] page_owner tracks the page as allocated [ 87.316892][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 34, tgid 34 (kworker/u4:2), ts 86796141403, free_ts 85376166699 [ 87.316906][ C1] post_alloc_hook+0x173/0x1a0 [ 87.316916][ C1] get_page_from_freelist+0x1a1e/0x1ab0 [ 87.316927][ C1] __alloc_pages+0x1ec/0x4f0 [ 87.316936][ C1] alloc_slab_page+0x5d/0x160 [ 87.316944][ C1] new_slab+0x87/0x2c0 [ 87.316952][ C1] ___slab_alloc+0xbc6/0x1240 [ 87.316959][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 87.316966][ C1] __kmalloc_node+0xa0/0x240 [ 87.316976][ C1] kvmalloc_node+0x6c/0x180 [ 87.316987][ C1] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 87.316996][ C1] __nf_unregister_net_hook+0x4e1/0x6e0 [ 87.317004][ C1] nf_unregister_net_hooks+0xc7/0x130 [ 87.317011][ C1] nf_ct_netns_put+0x369/0x510 [ 87.317019][ C1] nf_conncount_destroy+0x3d/0x150 [ 87.317029][ C1] ovs_ct_exit+0x98/0x200 [ 87.317039][ C1] ovs_exit_net+0xe9/0x7a0 [ 87.317051][ C1] page last free stack trace: [ 87.317053][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 87.317062][ C1] free_unref_page_list+0xbb/0x8e0 [ 87.317072][ C1] release_pages+0x1fa6/0x2220 [ 87.317081][ C1] tlb_flush_mmu+0x105/0x220 [ 87.317096][ C1] tlb_finish_mmu+0xbd/0x1c0 [ 87.317105][ C1] exit_mmap+0x384/0x960 [ 87.317114][ C1] __mmput+0x118/0x3c0 [ 87.317121][ C1] exit_mm+0x1fe/0x2d0 [ 87.317130][ C1] do_exit+0x905/0x2480 [ 87.317140][ C1] do_group_exit+0x217/0x2d0 [ 87.317149][ C1] __x64_sys_exit_group+0x3b/0x40 [ 87.317159][ C1] do_syscall_64+0x4c/0xa0 [ 87.317168][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.317176][ C1] [ 87.317177][ C1] Memory state around the buggy address: [ 87.317182][ C1] ffff888077743900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 87.317186][ C1] ffff888077743980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 87.317191][ C1] >ffff888077743a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 87.317195][ C1] ^ [ 87.317198][ C1] ffff888077743a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.317203][ C1] ffff888077743b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.317206][ C1] ================================================================== [ 87.317212][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.317215][ C1] CPU: 1 PID: 4417 Comm: syz.0.17 Not tainted syzkaller #0 [ 87.317223][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.317227][ C1] Call Trace: [ 87.317229][ C1] <#DB> [ 87.317232][ C1] dump_stack_lvl+0x188/0x24e [ 87.317242][ C1] ? memcpy+0x3c/0x60 [ 87.317249][ C1] ? show_regs_print_info+0x12/0x12 [ 87.317259][ C1] ? load_image+0x400/0x400 [ 87.317270][ C1] panic+0x2e5/0x730 [ 87.317277][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 87.317288][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 87.317297][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.317304][ C1] ? _raw_spin_unlock+0x40/0x40 [ 87.317313][ C1] check_panic_on_warn+0x80/0xa0 [ 87.317322][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.317330][ C1] end_report+0x66/0x110 [ 87.317341][ C1] kasan_report+0x118/0x140 [ 87.317351][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.317361][ C1] kasan_check_range+0x235/0x290 [ 87.317372][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.317380][ C1] memcpy+0x3c/0x60 [ 87.317388][ C1] __bpf_get_stackid+0x6c9/0x920 [ 87.317398][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 87.317408][ C1] bpf_prog_6611c23d801ea08d+0x21/0x36 [ 87.317417][ C1] bpf_overflow_handler+0x522/0x7c0 [ 87.317427][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 87.317435][ C1] ? perf_event_switch_output+0x760/0x760 [ 87.317445][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 87.317457][ C1] __perf_event_overflow+0x448/0x610 [ 87.317470][ C1] perf_bp_event+0x28c/0x330 [ 87.317482][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 87.317500][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.317509][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.317521][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 87.317533][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 87.317541][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.317551][ C1] notify_die+0x141/0x1a0 [ 87.317560][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 87.317572][ C1] notify_debug+0x20/0x30 [ 87.317580][ C1] exc_debug+0xd9/0x130 [ 87.317591][ C1] asm_exc_debug+0x1a/0x40 [ 87.317599][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 87.317609][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 87.317616][ C1] RSP: 0000:ffffc900034a7740 EFLAGS: 00040802 [ 87.317622][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88807aab5940 [ 87.317628][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 87.317634][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000 [ 87.317638][ C1] R10: ffffffff8fa0a050 R11: ffffffff8fa0a043 R12: 00000000ffffffff [ 87.317644][ C1] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0 [ 87.317653][ C1] [ 87.317655][ C1] [ 87.317657][ C1] perf_callchain_user+0x55d/0x13c0 [ 87.317672][ C1] get_perf_callchain+0x39e/0x490 [ 87.317682][ C1] ? put_callchain_entry+0xb0/0xb0 [ 87.317694][ C1] ? __perf_event_header__init_id+0x42c/0x530 [ 87.317706][ C1] perf_prepare_sample+0x399/0x2020 [ 87.317718][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.317728][ C1] ? perf_callchain+0x190/0x190 [ 87.317739][ C1] ? bpf_get_stackid_pe+0x33f/0x400 [ 87.317748][ C1] perf_event_output_forward+0x197/0x2f0 [ 87.317759][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 87.317770][ C1] ? perf_get_page_size+0x430/0x430 [ 87.317783][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 87.317795][ C1] __perf_event_overflow+0x448/0x610 [ 87.317808][ C1] perf_bp_event+0x28c/0x330 [ 87.317819][ C1] ? verify_lock_unused+0x140/0x140 [ 87.317830][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 87.317841][ C1] ? __fdget+0x146/0x200 [ 87.317858][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.317868][ C1] ? do_futex+0x2e2/0x320 [ 87.317876][ C1] hw_breakpoint_exceptions_notify+0x21a/0x470 [ 87.317888][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 87.317897][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.317906][ C1] notify_die+0x141/0x1a0 [ 87.317915][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 87.317926][ C1] ? rcu_is_watching+0x11/0xa0 [ 87.317937][ C1] notify_debug+0x20/0x30 [ 87.317946][ C1] noist_exc_debug+0x73/0x120 [ 87.317956][ C1] ? clear_bhb_loop+0x60/0xb0 [ 87.317965][ C1] asm_exc_debug+0x2f/0x40 [ 87.317973][ C1] RIP: 0033:0x7f7dcb57b43d [ 87.317979][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 87.317985][ C1] RSP: 002b:00007ffc3ddf68f8 EFLAGS: 00000283 [ 87.317991][ C1] RAX: 0000000000000300 RBX: 00007ffc3ddf6e30 RCX: 2f666c65732f636f [ 87.317996][ C1] RDX: 0000200000000300 RSI: 00007f7dcb65c9c0 RDI: 0000200000000300 [ 87.318001][ C1] RBP: 0000200000000300 R08: 00007ffc3ddf7060 R09: 00000000ffffffff [ 87.318006][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 87.318011][ C1] R13: 0000000000000073 R14: 00007f7dcb631e03 R15: 00007ffc3ddf6ef0 [ 87.318020][ C1] [ 87.318362][ C1] Kernel Offset: disabled [ 87.318367][ C1] [ 87.318368][ C1] ================================ [ 87.318370][ C1] WARNING: inconsistent lock state [ 87.318375][ C1] syzkaller #0 Not tainted [ 87.318379][ C1] -------------------------------- [ 87.318381][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 87.318385][ C1] syz.0.17/4417 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 87.318396][ C1] ffffffff8cb21858 ((console_sem).lock){....}-{2:2}, at: down_trylock+0x1c/0xa0 [ 87.318430][ C1] {INITIAL USE} state was registered at: [ 87.318434][ C1] irq event stamp: 2312 [ 87.318436][ C1] hardirqs last enabled at (2311): [] do_syscall_64+0x58/0xa0 [ 87.318448][ C1] hardirqs last disabled at (2312): [] noist_exc_debug+0x49/0x120 [ 87.318461][ C1] softirqs last enabled at (2254): [] bpf_prog_load+0x1127/0x1560 [ 87.318473][ C1] softirqs last disabled at (2252): [] bpf_ksym_add+0x29/0x340 [ 87.318487][ C1] [ 87.318487][ C1] other info that might help us debug this: [ 87.318489][ C1] Possible unsafe locking scenario: [ 87.318489][ C1] [ 87.318491][ C1] CPU0 [ 87.318492][ C1] ---- [ 87.318493][ C1] lock((console_sem).lock); [ 87.318498][ C1] [ 87.318500][ C1] lock((console_sem).lock); [ 87.318504][ C1] [ 87.318504][ C1] *** DEADLOCK *** [ 87.318504][ C1] [ 87.318506][ C1] 2 locks held by syz.0.17/4417: [ 87.318510][ C1] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x2c/0x2b0 [ 87.318530][ C1] #1: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0 [ 87.318551][ C1] [ 87.318551][ C1] stack backtrace: [ 87.318553][ C1] CPU: 1 PID: 4417 Comm: syz.0.17 Not tainted syzkaller #0 [ 87.318560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.318564][ C1] Call Trace: [ 87.318567][ C1] <#DB> [ 87.318569][ C1] dump_stack_lvl+0x188/0x24e [ 87.318580][ C1] ? show_regs_print_info+0x12/0x12 [ 87.318591][ C1] ? print_usage_bug+0x42a/0x690 [ 87.318602][ C1] ? verify_lock_unused+0x18/0x140 [ 87.318613][ C1] lock_acquire+0x2df/0x4a0 [ 87.318623][ C1] ? down_trylock+0x1c/0xa0 [ 87.318633][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.318643][ C1] ? __wake_up_klogd+0xd9/0x100 [ 87.318655][ C1] ? vprintk_emit+0x12f/0x6a0 [ 87.318665][ C1] ? printk_sprint+0x460/0x460 [ 87.318676][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 87.318683][ C1] ? down_trylock+0x1c/0xa0 [ 87.318693][ C1] ? _raw_spin_lock+0x40/0x40 [ 87.318700][ C1] ? verify_lock_unused+0x18/0x140 [ 87.318711][ C1] down_trylock+0x1c/0xa0 [ 87.318722][ C1] __down_trylock_console_sem+0xd4/0x1f0 [ 87.318733][ C1] ? kmsg_dump+0x1b/0x240 [ 87.318743][ C1] ? panic+0x376/0x730 [ 87.318750][ C1] ? console_trylock+0x160/0x160 [ 87.318760][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 87.318771][ C1] ? kmsg_dump+0x1b/0x240 [ 87.318782][ C1] console_unblank+0x28/0x170 [ 87.318793][ C1] panic+0x376/0x730 [ 87.318799][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 87.318810][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 87.318818][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.318826][ C1] ? _raw_spin_unlock+0x40/0x40 [ 87.318833][ C1] check_panic_on_warn+0x80/0xa0 [ 87.318845][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.318854][ C1] end_report+0x66/0x110 [ 87.318863][ C1] kasan_report+0x118/0x140 [ 87.318874][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.318883][ C1] kasan_check_range+0x235/0x290 [ 87.318894][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 87.318902][ C1] memcpy+0x3c/0x60 [ 87.318909][ C1] __bpf_get_stackid+0x6c9/0x920 [ 87.318919][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 87.318928][ C1] bpf_prog_6611c23d801ea08d+0x21/0x36 [ 87.318937][ C1] bpf_overflow_handler+0x522/0x7c0 [ 87.318946][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 87.318955][ C1] ? perf_event_switch_output+0x760/0x760 [ 87.318964][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 87.318976][ C1] __perf_event_overflow+0x448/0x610 [ 87.318988][ C1] perf_bp_event+0x28c/0x330 [ 87.319000][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 87.319016][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.319024][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.319036][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 87.319048][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 87.319056][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.319065][ C1] notify_die+0x141/0x1a0 [ 87.319074][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 87.319085][ C1] notify_debug+0x20/0x30 [ 87.319099][ C1] exc_debug+0xd9/0x130 [ 87.319110][ C1] asm_exc_debug+0x1a/0x40 [ 87.319118][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 87.319129][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 87.319135][ C1] RSP: 0000:ffffc900034a7740 EFLAGS: 00040802 [ 87.319142][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88807aab5940 [ 87.319148][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 87.319153][ C1] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000 [ 87.319157][ C1] R10: ffffffff8fa0a050 R11: ffffffff8fa0a043 R12: 00000000ffffffff [ 87.319163][ C1] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0 [ 87.319171][ C1] [ 87.319173][ C1] [ 87.319176][ C1] perf_callchain_user+0x55d/0x13c0 [ 87.319189][ C1] get_perf_callchain+0x39e/0x490 [ 87.319200][ C1] ? put_callchain_entry+0xb0/0xb0 [ 87.319211][ C1] ? __perf_event_header__init_id+0x42c/0x530 [ 87.319222][ C1] perf_prepare_sample+0x399/0x2020 [ 87.319234][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.319244][ C1] ? perf_callchain+0x190/0x190 [ 87.319254][ C1] ? bpf_get_stackid_pe+0x33f/0x400 [ 87.319263][ C1] perf_event_output_forward+0x197/0x2f0 [ 87.319274][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 87.319285][ C1] ? perf_get_page_size+0x430/0x430 [ 87.319297][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 87.319309][ C1] __perf_event_overflow+0x448/0x610 [ 87.319321][ C1] perf_bp_event+0x28c/0x330 [ 87.319331][ C1] ? verify_lock_unused+0x140/0x140 [ 87.319342][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 87.319353][ C1] ? __fdget+0x146/0x200 [ 87.319368][ C1] ? read_lock_is_recursive+0x10/0x10 [ 87.319379][ C1] ? do_futex+0x2e2/0x320 [ 87.319386][ C1] hw_breakpoint_exceptions_notify+0x21a/0x470 [ 87.319398][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 87.319406][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 87.319415][ C1] notify_die+0x141/0x1a0 [ 87.319424][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 87.319434][ C1] ? rcu_is_watching+0x11/0xa0 [ 87.319445][ C1] notify_debug+0x20/0x30 [ 87.319454][ C1] noist_exc_debug+0x73/0x120 [ 87.319464][ C1] ? clear_bhb_loop+0x60/0xb0 [ 87.319473][ C1] asm_exc_debug+0x2f/0x40 [ 87.319480][ C1] RIP: 0033:0x7f7dcb57b43d [ 87.319486][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 87.319492][ C1] RSP: 002b:00007ffc3ddf68f8 EFLAGS: 00000283 [ 87.319498][ C1] RAX: 0000000000000300 RBX: 00007ffc3ddf6e30 RCX: 2f666c65732f636f [ 87.319503][ C1] RDX: 0000200000000300 RSI: 00007f7dcb65c9c0 RDI: 0000200000000300 [ 87.319509][ C1] RBP: 0000200000000300 R08: 00007ffc3ddf7060 R09: 00000000ffffffff [ 87.319514][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 87.319518][ C1] R13: 0000000000000073 R14: 00007f7dcb631e03 R15: 00007ffc3ddf6ef0 [ 87.319526][ C1]