Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2026/01/02 15:50:34 parsed 1 programs [ 93.715462][ T5831] cgroup: Unknown subsys name 'net' [ 93.844095][ T5831] cgroup: Unknown subsys name 'cpuset' [ 93.853912][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.651706][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.192597][ T129] cfg80211: failed to load regulatory.db [ 98.705082][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.126338][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.139314][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.148567][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.166179][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.174658][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.986758][ T5895] chnl_net:caif_netlink_parms(): no params data found [ 101.141374][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.149383][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.157148][ T5895] bridge_slave_0: entered allmulticast mode [ 101.166314][ T5895] bridge_slave_0: entered promiscuous mode [ 101.175984][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.183207][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.190465][ T5895] bridge_slave_1: entered allmulticast mode [ 101.197809][ T5895] bridge_slave_1: entered promiscuous mode [ 101.234716][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.249661][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.288182][ T5895] team0: Port device team_slave_0 added [ 101.296305][ T5895] team0: Port device team_slave_1 added [ 101.327612][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.334780][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.360979][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.373838][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.380905][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.406849][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.454004][ T5895] hsr_slave_0: entered promiscuous mode [ 101.460689][ T5895] hsr_slave_1: entered promiscuous mode [ 101.622450][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.635938][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.648836][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.659726][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.693848][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.701109][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.709117][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.716364][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.775224][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.795247][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.804996][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.823411][ T5895] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.837743][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.844915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.858108][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.865286][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.054012][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.104417][ T5895] veth0_vlan: entered promiscuous mode [ 102.116275][ T5895] veth1_vlan: entered promiscuous mode [ 102.147363][ T5895] veth0_macvtap: entered promiscuous mode [ 102.157661][ T5895] veth1_macvtap: entered promiscuous mode [ 102.177388][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.192401][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.208041][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.218026][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.229160][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.241021][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.378436][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.464744][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.515138][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.528252][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.555266][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.585759][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.594220][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.630314][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/02 15:50:48 executed programs: 0 [ 103.998199][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.008551][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.017248][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.026312][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.034268][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.224784][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 104.314917][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.322294][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.330855][ T5938] bridge_slave_0: entered allmulticast mode [ 104.338078][ T5938] bridge_slave_0: entered promiscuous mode [ 104.347525][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.354870][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.362635][ T5938] bridge_slave_1: entered allmulticast mode [ 104.369952][ T5938] bridge_slave_1: entered promiscuous mode [ 104.404240][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.416118][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.452897][ T5938] team0: Port device team_slave_0 added [ 104.461125][ T5938] team0: Port device team_slave_1 added [ 104.491045][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.498034][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.524224][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.537600][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.544996][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.571220][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.619572][ T5938] hsr_slave_0: entered promiscuous mode [ 104.626227][ T5938] hsr_slave_1: entered promiscuous mode [ 104.632843][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 104.638761][ T5938] Cannot create hsr debugfs directory [ 105.374158][ T12] bridge_slave_1: left allmulticast mode [ 105.380414][ T12] bridge_slave_1: left promiscuous mode [ 105.388021][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.402535][ T12] bridge_slave_0: left allmulticast mode [ 105.408210][ T12] bridge_slave_0: left promiscuous mode [ 105.414430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.653657][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.665031][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.677532][ T12] bond0 (unregistering): Released all slaves [ 105.796776][ T12] hsr_slave_0: left promiscuous mode [ 105.803984][ T12] hsr_slave_1: left promiscuous mode [ 105.810343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.819589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.830826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.838255][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.862952][ T12] veth1_macvtap: left promiscuous mode [ 105.868740][ T12] veth0_macvtap: left promiscuous mode [ 105.875009][ T12] veth1_vlan: left promiscuous mode [ 105.881031][ T12] veth0_vlan: left promiscuous mode [ 106.071469][ T5148] Bluetooth: hci0: command tx timeout [ 106.353988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 106.379425][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.861737][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.879905][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.898754][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.923019][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.324998][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.360882][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.375880][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.383114][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.448658][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.455997][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.842985][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.949053][ T5938] veth0_vlan: entered promiscuous mode [ 107.971124][ T5938] veth1_vlan: entered promiscuous mode [ 108.006841][ T5938] veth0_macvtap: entered promiscuous mode [ 108.018493][ T5938] veth1_macvtap: entered promiscuous mode [ 108.036959][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.051782][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.066639][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.082151][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.092013][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.101377][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.150374][ T5148] Bluetooth: hci0: command tx timeout [ 108.162122][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.170586][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.201658][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.211346][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.304262][ T0] ================================================================== [ 108.312498][ T0] BUG: KASAN: slab-out-of-bounds in strnchr+0x5e/0x80 [ 108.319299][ T0] Read of size 1 at addr ffff88807e5d13b0 by task swapper/1/0 [ 108.326773][ T0] [ 108.329135][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 108.329155][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.329173][ T0] Call Trace: [ 108.329180][ T0] [ 108.329188][ T0] dump_stack_lvl+0x189/0x250 [ 108.329212][ T0] ? __virt_addr_valid+0x1c8/0x5c0 [ 108.329242][ T0] ? rcu_is_watching+0x15/0xb0 [ 108.329262][ T0] ? __kasan_check_byte+0x12/0x40 [ 108.329285][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.329304][ T0] ? rcu_is_watching+0x15/0xb0 [ 108.329325][ T0] ? lock_release+0x4b/0x3b0 [ 108.329344][ T0] ? __virt_addr_valid+0x1c8/0x5c0 [ 108.329367][ T0] ? __virt_addr_valid+0x4a5/0x5c0 [ 108.329392][ T0] print_report+0xca/0x240 [ 108.329410][ T0] ? strnchr+0x5e/0x80 [ 108.329430][ T0] kasan_report+0x118/0x150 [ 108.329453][ T0] ? strnchr+0x5e/0x80 [ 108.329477][ T0] strnchr+0x5e/0x80 [ 108.329499][ T0] bpf_bprintf_prepare+0x167/0x13d0 [ 108.329532][ T0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 108.329560][ T0] ? bpf_snprintf+0x47/0x1b0 [ 108.329586][ T0] bpf_snprintf+0xd3/0x1b0 [ 108.329614][ T0] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 108.329634][ T0] bpf_trace_run1+0x27f/0x4c0 [ 108.329658][ T0] ? bpf_trace_run1+0x181/0x4c0 [ 108.329681][ T0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 108.329707][ T0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 108.329731][ T0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 108.329753][ T0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 108.329777][ T0] ? trace_rcu_utilization+0xf4/0x1c0 [ 108.329802][ T0] trace_rcu_utilization+0x191/0x1c0 [ 108.329825][ T0] rcu_note_context_switch+0xc9/0x1120 [ 108.329843][ T0] ? __lock_acquire+0x6b6/0x2cf0 [ 108.329865][ T0] ? __lock_acquire+0x6b6/0x2cf0 [ 108.329882][ T0] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 108.329901][ T0] ? rcu_is_watching+0x15/0xb0 [ 108.329923][ T0] __schedule+0x346/0x5000 [ 108.329944][ T0] ? tick_nohz_idle_exit+0x33e/0x470 [ 108.329967][ T0] ? rcu_is_watching+0x15/0xb0 [ 108.329992][ T0] ? trace_csd_function_exit+0x7f/0x1c0 [ 108.330011][ T0] ? __pfx_do_sync_core+0x10/0x10 [ 108.330039][ T0] ? __flush_smp_call_function_queue+0x88f/0xaa0 [ 108.330073][ T0] ? __pfx___schedule+0x10/0x10 [ 108.330091][ T0] ? flush_smp_call_function_queue+0x192/0x250 [ 108.330123][ T0] ? lockdep_hardirqs_on+0x98/0x140 [ 108.330148][ T0] ? flush_smp_call_function_queue+0x1e4/0x250 [ 108.330180][ T0] ? __pfx_flush_smp_call_function_queue+0x10/0x10 [ 108.330212][ T0] ? tick_nohz_idle_exit+0x362/0x470 [ 108.330239][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 108.330264][ T0] schedule_idle+0x52/0x90 [ 108.330285][ T0] do_idle+0x4b3/0x520 [ 108.330311][ T0] ? __pfx_do_idle+0x10/0x10 [ 108.330334][ T0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 108.330360][ T0] ? complete+0xb1/0x1b0 [ 108.330387][ T0] cpu_startup_entry+0x44/0x60 [ 108.330411][ T0] start_secondary+0x101/0x110 [ 108.330438][ T0] common_startup_64+0x13e/0x147 [ 108.330468][ T0] [ 108.330475][ T0] [ 108.630620][ T0] Allocated by task 6002: [ 108.634976][ T0] kasan_save_track+0x3e/0x80 [ 108.639688][ T0] __kasan_kmalloc+0x93/0xb0 [ 108.644359][ T0] __kmalloc_node_noprof+0x57a/0x820 [ 108.649682][ T0] bpf_map_area_alloc+0x64/0x180 [ 108.654678][ T0] insn_array_alloc+0x52/0x140 [ 108.659473][ T0] map_create+0xafd/0x16a0 [ 108.663946][ T0] __sys_bpf+0x682/0x8a0 [ 108.668241][ T0] __x64_sys_bpf+0x7c/0x90 [ 108.672682][ T0] do_syscall_64+0xfa/0xf80 [ 108.677206][ T0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.683112][ T0] [ 108.685462][ T0] The buggy address belongs to the object at ffff88807e5d1000 [ 108.685462][ T0] which belongs to the cache kmalloc-cg-1k of size 1024 [ 108.699787][ T0] The buggy address is located 0 bytes to the right of [ 108.699787][ T0] allocated 944-byte region [ffff88807e5d1000, ffff88807e5d13b0) [ 108.714291][ T0] [ 108.716632][ T0] The buggy address belongs to the physical page: [ 108.723063][ T0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e5d5800 pfn:0x7e5d0 [ 108.733146][ T0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.741656][ T0] memcg:ffff88807697e701 [ 108.745905][ T0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.753921][ T0] page_type: f5(slab) [ 108.757924][ T0] raw: 00fff00000000040 ffff88813ffb0280 0000000000000000 0000000000000001 [ 108.766534][ T0] raw: ffff88807e5d5800 000000008010000c 00000000f5000000 ffff88807697e701 [ 108.775131][ T0] head: 00fff00000000040 ffff88813ffb0280 0000000000000000 0000000000000001 [ 108.783818][ T0] head: ffff88807e5d5800 000000008010000c 00000000f5000000 ffff88807697e701 [ 108.792505][ T0] head: 00fff00000000003 ffffea0001f97401 00000000ffffffff 00000000ffffffff [ 108.801207][ T0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 108.810056][ T0] page dumped because: kasan: bad access detected [ 108.816494][ T0] page_owner tracks the page as allocated [ 108.822218][ T0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5492, tgid 5492 (dhcpcd), ts 76648948758, free_ts 76647575275 [ 108.843071][ T0] post_alloc_hook+0x234/0x290 [ 108.847864][ T0] get_page_from_freelist+0x2365/0x2440 [ 108.853428][ T0] __alloc_frozen_pages_noprof+0x181/0x370 [ 108.859258][ T0] alloc_pages_mpol+0x232/0x4a0 [ 108.864130][ T0] allocate_slab+0x86/0x3b0 [ 108.868666][ T0] ___slab_alloc+0xf2b/0x1960 [ 108.873365][ T0] __slab_alloc+0x65/0x100 [ 108.877814][ T0] __kmalloc_node_track_caller_noprof+0x5d4/0x820 [ 108.884248][ T0] kmalloc_reserve+0x136/0x290 [ 108.889029][ T0] __alloc_skb+0x27e/0x430 [ 108.893465][ T0] alloc_skb_with_frags+0xca/0x890 [ 108.898608][ T0] sock_alloc_send_pskb+0x84d/0x980 [ 108.903846][ T0] unix_dgram_sendmsg+0x454/0x1840 [ 108.908987][ T0] __sock_sendmsg+0x21c/0x270 [ 108.913683][ T0] sock_write_iter+0x279/0x360 [ 108.918473][ T0] do_iter_readv_writev+0x623/0x8c0 [ 108.923692][ T0] page last free pid 5493 tgid 5493 stack trace: [ 108.930029][ T0] __free_frozen_pages+0xbc8/0xd30 [ 108.935160][ T0] __folio_put+0x21b/0x2c0 [ 108.939594][ T0] skb_release_data+0x49a/0x7c0 [ 108.944462][ T0] napi_consume_skb+0x1f0/0x2a0 [ 108.949339][ T0] skb_defer_free_flush+0x191/0x260 [ 108.954558][ T0] net_rx_action+0x482/0xe50 [ 108.959172][ T0] handle_softirqs+0x27d/0x850 [ 108.963987][ T0] do_softirq+0xec/0x180 [ 108.968250][ T0] __local_bh_enable_ip+0x17d/0x1c0 [ 108.973460][ T0] __alloc_skb+0x224/0x430 [ 108.977900][ T0] alloc_skb_with_frags+0xca/0x890 [ 108.983028][ T0] sock_alloc_send_pskb+0x84d/0x980 [ 108.988346][ T0] unix_dgram_sendmsg+0x454/0x1840 [ 108.993481][ T0] __sock_sendmsg+0x21c/0x270 [ 108.998181][ T0] sock_write_iter+0x279/0x360 [ 109.002970][ T0] do_iter_readv_writev+0x623/0x8c0 [ 109.008190][ T0] [ 109.010532][ T0] Memory state around the buggy address: [ 109.016203][ T0] ffff88807e5d1280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.024281][ T0] ffff88807e5d1300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.032356][ T0] >ffff88807e5d1380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 109.040430][ T0] ^ [ 109.046072][ T0] ffff88807e5d1400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.054150][ T0] ffff88807e5d1480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.062316][ T0] ================================================================== [ 109.070432][ T0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.077650][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 109.086601][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.096764][ T0] Call Trace: [ 109.100061][ T0] [ 109.103007][ T0] dump_stack_lvl+0x99/0x250 [ 109.107619][ T0] ? __asan_memcpy+0x40/0x70 [ 109.112231][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.117454][ T0] ? __pfx__printk+0x10/0x10 [ 109.122079][ T0] vpanic+0x237/0x6d0 [ 109.126084][ T0] ? __pfx_vpanic+0x10/0x10 [ 109.130613][ T0] panic+0xb9/0xc0 [ 109.134371][ T0] ? __pfx_panic+0x10/0x10 [ 109.138812][ T0] ? do_raw_spin_unlock+0x122/0x240 [ 109.144036][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.150484][ T0] ? strnchr+0x5e/0x80 [ 109.154576][ T0] check_panic_on_warn+0x89/0xb0 [ 109.159546][ T0] ? strnchr+0x5e/0x80 [ 109.163635][ T0] end_report+0x6f/0x140 [ 109.167899][ T0] kasan_report+0x129/0x150 [ 109.172428][ T0] ? strnchr+0x5e/0x80 [ 109.176524][ T0] strnchr+0x5e/0x80 [ 109.180442][ T0] bpf_bprintf_prepare+0x167/0x13d0 [ 109.185676][ T0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 109.191339][ T0] ? bpf_snprintf+0x47/0x1b0 [ 109.195959][ T0] bpf_snprintf+0xd3/0x1b0 [ 109.200403][ T0] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 109.205878][ T0] bpf_trace_run1+0x27f/0x4c0 [ 109.210582][ T0] ? bpf_trace_run1+0x181/0x4c0 [ 109.215457][ T0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 109.220682][ T0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 109.226517][ T0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 109.232181][ T0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 109.238529][ T0] ? trace_rcu_utilization+0xf4/0x1c0 [ 109.243926][ T0] trace_rcu_utilization+0x191/0x1c0 [ 109.249239][ T0] rcu_note_context_switch+0xc9/0x1120 [ 109.254723][ T0] ? __lock_acquire+0x6b6/0x2cf0 [ 109.259682][ T0] ? __lock_acquire+0x6b6/0x2cf0 [ 109.264653][ T0] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 109.270662][ T0] ? rcu_is_watching+0x15/0xb0 [ 109.275469][ T0] __schedule+0x346/0x5000 [ 109.279909][ T0] ? tick_nohz_idle_exit+0x33e/0x470 [ 109.285224][ T0] ? rcu_is_watching+0x15/0xb0 [ 109.290016][ T0] ? trace_csd_function_exit+0x7f/0x1c0 [ 109.295587][ T0] ? __pfx_do_sync_core+0x10/0x10 [ 109.300640][ T0] ? __flush_smp_call_function_queue+0x88f/0xaa0 [ 109.306997][ T0] ? __pfx___schedule+0x10/0x10 [ 109.311875][ T0] ? flush_smp_call_function_queue+0x192/0x250 [ 109.318059][ T0] ? lockdep_hardirqs_on+0x98/0x140 [ 109.323301][ T0] ? flush_smp_call_function_queue+0x1e4/0x250 [ 109.329487][ T0] ? __pfx_flush_smp_call_function_queue+0x10/0x10 [ 109.336019][ T0] ? tick_nohz_idle_exit+0x362/0x470 [ 109.341335][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 109.347016][ T0] schedule_idle+0x52/0x90 [ 109.351493][ T0] do_idle+0x4b3/0x520 [ 109.355594][ T0] ? __pfx_do_idle+0x10/0x10 [ 109.360209][ T0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 109.366129][ T0] ? complete+0xb1/0x1b0 [ 109.370409][ T0] cpu_startup_entry+0x44/0x60 [ 109.375203][ T0] start_secondary+0x101/0x110 [ 109.379998][ T0] common_startup_64+0x13e/0x147 [ 109.385013][ T0] [ 109.388732][ T0] Kernel Offset: disabled [ 109.393072][ T0] Rebooting in 86400 seconds..