Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts.
2026/05/24 23:19:04 parsed 1 programs
[ 81.175436][ T4284] cgroup: Unknown subsys name 'net'
[ 81.307452][ T4284] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 82.864811][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 84.832477][ T4307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.840824][ T4307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.852613][ T4307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.861594][ T4309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.869338][ T4309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 84.876964][ T4309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.338461][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.350645][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.374840][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 86.382240][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.382275][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.399328][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.743017][ T129] cfg80211: failed to load regulatory.db
[ 87.700384][ T4358] chnl_net:caif_netlink_parms(): no params data found
[ 87.789491][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.797609][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.806114][ T4358] device bridge_slave_0 entered promiscuous mode
[ 87.819910][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.827200][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.835722][ T4358] device bridge_slave_1 entered promiscuous mode
[ 87.861674][ T4358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.876030][ T4358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.899924][ T4358] team0: Port device team_slave_0 added
[ 87.909033][ T4358] team0: Port device team_slave_1 added
[ 87.926617][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.933636][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.959607][ T4358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.972669][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.979643][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.005590][ T4358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.038170][ T4358] device hsr_slave_0 entered promiscuous mode
[ 88.045217][ T4358] device hsr_slave_1 entered promiscuous mode
[ 88.149171][ T4358] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.161093][ T4358] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.170302][ T4358] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.179762][ T4358] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.205052][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.212328][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.220691][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.227928][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.292788][ T4358] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.307582][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 88.317746][ T30] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.327321][ T30] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.336475][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 88.351591][ T4358] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.373693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 88.383410][ T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.390662][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.417467][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 88.426764][ T30] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.434031][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.467062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 88.476590][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 88.490707][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 88.512492][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 88.525774][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 88.539608][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 88.787806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 88.796390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 88.815019][ T4358] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.854778][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 88.865431][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 88.905318][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 88.914467][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 88.924535][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 88.933942][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 88.943312][ T4358] device veth0_vlan entered promiscuous mode
[ 88.963705][ T4358] device veth1_vlan entered promiscuous mode
[ 88.999041][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 89.007722][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 89.016644][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 89.026198][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 89.040475][ T4358] device veth0_macvtap entered promiscuous mode
[ 89.053126][ T4358] device veth1_macvtap entered promiscuous mode
[ 89.077489][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.085759][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 89.095005][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 89.103758][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 89.112522][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 89.127560][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.135628][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 89.146481][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 89.159884][ T4358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.170568][ T4358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.179473][ T4358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.190474][ T4358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.369455][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/24 23:19:15 executed programs: 0
[ 89.799957][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.809879][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.818097][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.827327][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.835012][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 89.842544][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.976939][ T4382] chnl_net:caif_netlink_parms(): no params data found
[ 90.028293][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.035533][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.044039][ T4382] device bridge_slave_0 entered promiscuous mode
[ 90.054857][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.062156][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.070192][ T4382] device bridge_slave_1 entered promiscuous mode
[ 90.092455][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.105679][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.132428][ T4382] team0: Port device team_slave_0 added
[ 90.140595][ T4382] team0: Port device team_slave_1 added
[ 90.159777][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.167202][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.193732][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.206519][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.213624][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.239786][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.276896][ T4382] device hsr_slave_0 entered promiscuous mode
[ 90.284276][ T4382] device hsr_slave_1 entered promiscuous mode
[ 90.290916][ T4382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 90.299489][ T4382] Cannot create hsr debugfs directory
[ 91.382851][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.862575][ T4309] Bluetooth: hci0: command 0x0409 tx timeout
[ 93.712287][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.784941][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.943597][ T4309] Bluetooth: hci0: command 0x041b tx timeout
[ 94.637285][ T4382] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.648420][ T4382] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.660862][ T4382] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.688743][ T4382] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.760892][ T46] device hsr_slave_0 left promiscuous mode
[ 94.772448][ T46] device hsr_slave_1 left promiscuous mode
[ 94.779945][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 94.787970][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 94.796738][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 94.804354][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 94.812391][ T46] device bridge_slave_1 left promiscuous mode
[ 94.819698][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.834053][ T46] device bridge_slave_0 left promiscuous mode
[ 94.840344][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.870563][ T46] device veth1_macvtap left promiscuous mode
[ 94.879371][ T46] device veth0_macvtap left promiscuous mode
[ 94.885891][ T46] device veth1_vlan left promiscuous mode
[ 94.894307][ T46] device veth0_vlan left promiscuous mode
[ 95.356812][ T46] team0 (unregistering): Port device team_slave_1 removed
[ 95.387562][ T46] team0 (unregistering): Port device team_slave_0 removed
[ 95.423980][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 95.464961][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 95.788341][ T46] bond0 (unregistering): Released all slaves
[ 95.935333][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.949038][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 95.957267][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 95.976270][ T4382] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.990374][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 96.000184][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 96.009686][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.016939][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.028420][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 96.031398][ T4309] Bluetooth: hci0: command 0x040f tx timeout
[ 96.047064][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 96.056151][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 96.064789][ T30] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.071956][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.083375][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 96.110222][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 96.122966][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 96.133643][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 96.142750][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 96.160758][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 96.170217][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 96.194677][ T4382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 96.205602][ T4382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 96.217621][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 96.230073][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 96.239809][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 96.249712][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 96.259372][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 96.478397][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 96.486503][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 96.505302][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.525750][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 96.534746][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 96.553841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 96.562461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 96.570879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 96.579692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 96.593864][ T4382] device veth0_vlan entered promiscuous mode
[ 96.605107][ T4382] device veth1_vlan entered promiscuous mode
[ 96.626935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 96.635673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 96.644329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 96.653640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 96.664623][ T4382] device veth0_macvtap entered promiscuous mode
[ 96.677552][ T4382] device veth1_macvtap entered promiscuous mode
[ 96.693173][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.700524][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 96.711160][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 96.719458][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 96.728412][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 96.744769][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.752375][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 96.762466][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 96.773985][ T4382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.783148][ T4382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.792589][ T4382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.802721][ T4382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.859388][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.873204][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.886158][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/05/24 23:19:23 executed programs: 2
[ 96.906375][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.914921][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.925460][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 96.978987][ C1] hrtimer: interrupt took 27776 ns
[ 97.105658][ C0] ==================================================================
[ 97.113766][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[ 97.121592][ C0] Write of size 32 at addr ffff88801e761060 by task syz.0.20/4428
[ 97.129415][ C0]
[ 97.131762][ C0] CPU: 0 PID: 4428 Comm: syz.0.20 Not tainted syzkaller #0
[ 97.138960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 97.149034][ C0] Call Trace:
[ 97.152326][ C0]
[ 97.155273][ C0] dump_stack_lvl+0x188/0x24e
[ 97.159962][ C0] ? __lock_acquire+0x7d10/0x7d10
[ 97.165012][ C0] ? show_regs_print_info+0x12/0x12
[ 97.170239][ C0] ? load_image+0x400/0x400
[ 97.174761][ C0] ? __virt_addr_valid+0x465/0x540
[ 97.179884][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 97.185013][ C0] print_report+0xa8/0x210
[ 97.189441][ C0] kasan_report+0x10b/0x140
[ 97.193965][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 97.199114][ C0] kasan_check_range+0x235/0x290
[ 97.204065][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 97.209194][ C0] memcpy+0x3c/0x60
[ 97.213016][ C0] __bpf_get_stackid+0x6c9/0x920
[ 97.217976][ C0] bpf_get_stackid_pe+0x2ec/0x400
[ 97.223019][ C0] bpf_prog_644fb7c94e15512a+0x2b/0x40
[ 97.228511][ C0] bpf_overflow_handler+0x522/0x7c0
[ 97.233754][ C0] ? bpf_overflow_handler+0xd9/0x7c0
[ 97.239047][ C0] ? perf_swevent_overflow+0x230/0x230
[ 97.244515][ C0] ? sched_clock_cpu+0x6e/0x260
[ 97.249375][ C0] ? __perf_event_account_interrupt+0x187/0x280
[ 97.255629][ C0] __perf_event_overflow+0x448/0x610
[ 97.260930][ C0] perf_swevent_hrtimer+0x472/0x630
[ 97.266182][ C0] ? cpu_clock_event_read+0x50/0x50
[ 97.271425][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 97.277359][ C0] ? _raw_spin_unlock+0x40/0x40
[ 97.282246][ C0] __hrtimer_run_queues+0x50b/0xd50
[ 97.287477][ C0] ? cpu_clock_event_read+0x50/0x50
[ 97.292693][ C0] ? hrtimer_interrupt+0x9c0/0x9c0
[ 97.297827][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 97.303909][ C0] hrtimer_interrupt+0x3c5/0x9c0
[ 97.308883][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 97.314910][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0
[ 97.320579][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 97.326590][ C0] RIP: 0033:0x7f3ac56655be
[ 97.331036][ C0] Code: 41 55 41 54 55 53 48 83 ec 38 80 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d 2a 01 ee 00 00 49 89 f1 <41> 89 d2 89 cb c6 05 36 ca 3a 00 01 41 89 d7 0f 85 45 04 00 00 80
[ 97.350674][ C0] RSP: 002b:00007ffd905f0da0 EFLAGS: 00000246
[ 97.356751][ C0] RAX: 00007f3ac5a15fa0 RBX: 0000000000000000 RCX: 0000000000000000
[ 97.364744][ C0] RDX: 0000000000000003 RSI: 00007f3ac5a16038 RDI: 0000000000000005
[ 97.372827][ C0] RBP: 00007f3ac5a15fb0 R08: 0000000000000000 R09: 00007f3ac5a16038
[ 97.380802][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f3ac5a15fa0
[ 97.388879][ C0] R13: 0000200000000000 R14: 00007ffd905f0e18 R15: 00007f3ac5a15fa0
[ 97.396866][ C0]
[ 97.399884][ C0]
[ 97.402217][ C0] Allocated by task 4428:
[ 97.406544][ C0] kasan_set_track+0x4b/0x70
[ 97.411152][ C0] __kasan_kmalloc+0x8e/0xa0
[ 97.415793][ C0] __kmalloc_node+0xb0/0x240
[ 97.420431][ C0] bpf_map_area_alloc+0x47/0xe0
[ 97.425322][ C0] prealloc_elems_and_freelist+0x86/0x1c0
[ 97.431056][ C0] stack_map_alloc+0x390/0x520
[ 97.435833][ C0] map_create+0x534/0x1000
[ 97.440258][ C0] __sys_bpf+0x38b/0x780
[ 97.444596][ C0] __x64_sys_bpf+0x78/0x90
[ 97.449021][ C0] do_syscall_64+0x4c/0xa0
[ 97.453456][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 97.459357][ C0]
[ 97.461691][ C0] The buggy address belongs to the object at ffff88801e761000
[ 97.461691][ C0] which belongs to the cache kmalloc-cg-128 of size 128
[ 97.476047][ C0] The buggy address is located 96 bytes inside of
[ 97.476047][ C0] 128-byte region [ffff88801e761000, ffff88801e761080)
[ 97.489238][ C0]
[ 97.491567][ C0] The buggy address belongs to the physical page:
[ 97.498047][ C0] page:ffffea000079d840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e761
[ 97.508226][ C0] memcg:ffff888028cdc801
[ 97.512560][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 97.520133][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442a00
[ 97.528833][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888028cdc801
[ 97.537416][ C0] page dumped because: kasan: bad access detected
[ 97.543838][ C0] page_owner tracks the page as allocated
[ 97.549556][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4428, tgid 4428 (syz.0.20), ts 97103678829, free_ts 97030119289
[ 97.567462][ C0] post_alloc_hook+0x173/0x1a0
[ 97.572279][ C0] get_page_from_freelist+0x1a1e/0x1ab0
[ 97.577900][ C0] __alloc_pages+0x1ec/0x4f0
[ 97.582547][ C0] alloc_slab_page+0x5d/0x160
[ 97.587254][ C0] new_slab+0x87/0x2c0
[ 97.591330][ C0] ___slab_alloc+0xbc6/0x1240
[ 97.596018][ C0] __kmem_cache_alloc_node+0x1a0/0x260
[ 97.601484][ C0] __kmalloc_node+0xa0/0x240
[ 97.606088][ C0] bpf_map_area_alloc+0x47/0xe0
[ 97.610958][ C0] prealloc_elems_and_freelist+0x86/0x1c0
[ 97.616824][ C0] stack_map_alloc+0x390/0x520
[ 97.621645][ C0] map_create+0x534/0x1000
[ 97.626074][ C0] __sys_bpf+0x38b/0x780
[ 97.630323][ C0] __x64_sys_bpf+0x78/0x90
[ 97.634745][ C0] do_syscall_64+0x4c/0xa0
[ 97.639190][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 97.645090][ C0] page last free stack trace:
[ 97.649759][ C0] free_unref_page_prepare+0x8b4/0x9a0
[ 97.655234][ C0] free_unref_page_list+0xbb/0x8e0
[ 97.660365][ C0] release_pages+0x1fa6/0x2220
[ 97.665163][ C0] tlb_flush_mmu+0x105/0x220
[ 97.669798][ C0] tlb_finish_mmu+0xf5/0x220
[ 97.674435][ C0] exit_mmap+0x384/0x960
[ 97.678689][ C0] __mmput+0x118/0x3c0
[ 97.682783][ C0] exit_mm+0x25a/0x360
[ 97.686866][ C0] do_exit+0x905/0x2480
[ 97.691037][ C0] do_group_exit+0x217/0x2d0
[ 97.695654][ C0] __x64_sys_exit_group+0x3b/0x40
[ 97.700734][ C0] do_syscall_64+0x4c/0xa0
[ 97.705163][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 97.711080][ C0]
[ 97.713429][ C0] Memory state around the buggy address:
[ 97.719092][ C0] ffff88801e760f00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 97.727418][ C0] ffff88801e760f80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 97.735509][ C0] >ffff88801e761000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 97.743573][ C0] ^
[ 97.751555][ C0] ffff88801e761080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.759637][ C0] ffff88801e761100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.767710][ C0] ==================================================================
[ 97.775793][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 97.782985][ C0] CPU: 0 PID: 4428 Comm: syz.0.20 Not tainted syzkaller #0
[ 97.790190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 97.800274][ C0] Call Trace:
[ 97.803559][ C0]
[ 97.806495][ C0] dump_stack_lvl+0x188/0x24e
[ 97.811196][ C0] ? memcpy+0x3c/0x60
[ 97.815233][ C0] ? show_regs_print_info+0x12/0x12
[ 97.820449][ C0] ? load_image+0x400/0x400
[ 97.824969][ C0] panic+0x2e5/0x730
[ 97.828942][ C0] ? bpf_jit_dump+0xd0/0xd0
[ 97.833471][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 97.839378][ C0] ? _raw_spin_unlock+0x40/0x40
[ 97.844267][ C0] ? print_memory_metadata+0x314/0x400
[ 97.849753][ C0] check_panic_on_warn+0x80/0xa0
[ 97.854790][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 97.859908][ C0] end_report+0x66/0x110
[ 97.864194][ C0] kasan_report+0x118/0x140
[ 97.868754][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 97.873902][ C0] kasan_check_range+0x235/0x290
[ 97.878851][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 97.883968][ C0] memcpy+0x3c/0x60
[ 97.887779][ C0] __bpf_get_stackid+0x6c9/0x920
[ 97.892723][ C0] bpf_get_stackid_pe+0x2ec/0x400
[ 97.897752][ C0] bpf_prog_644fb7c94e15512a+0x2b/0x40
[ 97.903213][ C0] bpf_overflow_handler+0x522/0x7c0
[ 97.908418][ C0] ? bpf_overflow_handler+0xd9/0x7c0
[ 97.913720][ C0] ? perf_swevent_overflow+0x230/0x230
[ 97.919205][ C0] ? sched_clock_cpu+0x6e/0x260
[ 97.924076][ C0] ? __perf_event_account_interrupt+0x187/0x280
[ 97.930355][ C0] __perf_event_overflow+0x448/0x610
[ 97.935681][ C0] perf_swevent_hrtimer+0x472/0x630
[ 97.940888][ C0] ? cpu_clock_event_read+0x50/0x50
[ 97.946189][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 97.952115][ C0] ? _raw_spin_unlock+0x40/0x40
[ 97.956973][ C0] __hrtimer_run_queues+0x50b/0xd50
[ 97.962188][ C0] ? cpu_clock_event_read+0x50/0x50
[ 97.967437][ C0] ? hrtimer_interrupt+0x9c0/0x9c0
[ 97.972592][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 97.978703][ C0] hrtimer_interrupt+0x3c5/0x9c0
[ 97.983658][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 97.989652][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0
[ 97.995290][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 98.001278][ C0] RIP: 0033:0x7f3ac56655be
[ 98.005697][ C0] Code: 41 55 41 54 55 53 48 83 ec 38 80 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d 2a 01 ee 00 00 49 89 f1 <41> 89 d2 89 cb c6 05 36 ca 3a 00 01 41 89 d7 0f 85 45 04 00 00 80
[ 98.025312][ C0] RSP: 002b:00007ffd905f0da0 EFLAGS: 00000246
[ 98.031391][ C0] RAX: 00007f3ac5a15fa0 RBX: 0000000000000000 RCX: 0000000000000000
[ 98.039395][ C0] RDX: 0000000000000003 RSI: 00007f3ac5a16038 RDI: 0000000000000005
[ 98.047387][ C0] RBP: 00007f3ac5a15fb0 R08: 0000000000000000 R09: 00007f3ac5a16038
[ 98.055363][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f3ac5a15fa0
[ 98.063351][ C0] R13: 0000200000000000 R14: 00007ffd905f0e18 R15: 00007f3ac5a15fa0
[ 98.071374][ C0]
[ 98.075015][ C0] Kernel Offset: disabled
[ 98.079345][ C0] Rebooting in 86400 seconds..