Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 2026/01/02 06:02:22 parsed 1 programs [ 75.762185][ T5832] cgroup: Unknown subsys name 'net' [ 75.929118][ T5832] cgroup: Unknown subsys name 'cpuset' [ 75.938173][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.420461][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.062998][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.366924][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.375342][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.383516][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.391959][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.399916][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.039650][ T5905] chnl_net:caif_netlink_parms(): no params data found [ 83.134107][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.142837][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.151200][ T5905] bridge_slave_0: entered allmulticast mode [ 83.158703][ T5905] bridge_slave_0: entered promiscuous mode [ 83.168294][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.177983][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.185234][ T5905] bridge_slave_1: entered allmulticast mode [ 83.192641][ T5905] bridge_slave_1: entered promiscuous mode [ 83.241633][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.254110][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.294135][ T5905] team0: Port device team_slave_0 added [ 83.304304][ T5905] team0: Port device team_slave_1 added [ 83.335708][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.345204][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.372343][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.384853][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.392101][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.418803][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.470565][ T5905] hsr_slave_0: entered promiscuous mode [ 83.477817][ T5905] hsr_slave_1: entered promiscuous mode [ 83.605575][ T5905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.618556][ T5905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.628958][ T5905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.639648][ T5905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.671548][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.679033][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.687402][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.694750][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.753480][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.774918][ T3791] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.784224][ T3791] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.799136][ T5905] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.812888][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.820414][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.833321][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.840686][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.003569][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.042848][ T5905] veth0_vlan: entered promiscuous mode [ 84.053481][ T5905] veth1_vlan: entered promiscuous mode [ 84.079656][ T5905] veth0_macvtap: entered promiscuous mode [ 84.089012][ T5905] veth1_macvtap: entered promiscuous mode [ 84.106895][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.121380][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.136834][ T1005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.146560][ T1005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.158547][ T1005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.169201][ T1005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.285728][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.375613][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.443644][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.507873][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.569304][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.581461][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.612355][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.620560][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/02 06:02:34 executed programs: 0 [ 84.977790][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.986063][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.994770][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.004876][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.012647][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.159846][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 85.231864][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.239768][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.247319][ T5940] bridge_slave_0: entered allmulticast mode [ 85.254218][ T5940] bridge_slave_0: entered promiscuous mode [ 85.262816][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.272816][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.280491][ T5940] bridge_slave_1: entered allmulticast mode [ 85.287563][ T5940] bridge_slave_1: entered promiscuous mode [ 85.327977][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.341649][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.373699][ T5940] team0: Port device team_slave_0 added [ 85.382378][ T5940] team0: Port device team_slave_1 added [ 85.415672][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.422745][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.448846][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.462340][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.470028][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.496495][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.548118][ T5940] hsr_slave_0: entered promiscuous mode [ 85.554444][ T5940] hsr_slave_1: entered promiscuous mode [ 85.560910][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 85.567366][ T5940] Cannot create hsr debugfs directory [ 86.827332][ T10] cfg80211: failed to load regulatory.db [ 87.066724][ T5149] Bluetooth: hci0: command tx timeout [ 87.066855][ T36] bridge_slave_1: left allmulticast mode [ 87.096362][ T36] bridge_slave_1: left promiscuous mode [ 87.102449][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.121033][ T36] bridge_slave_0: left allmulticast mode [ 87.127637][ T36] bridge_slave_0: left promiscuous mode [ 87.134002][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.464431][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.477892][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.489171][ T36] bond0 (unregistering): Released all slaves [ 87.624510][ T36] hsr_slave_0: left promiscuous mode [ 87.636116][ T36] hsr_slave_1: left promiscuous mode [ 87.643266][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.652055][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.661035][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.672952][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.694238][ T36] veth1_macvtap: left promiscuous mode [ 87.700083][ T36] veth0_macvtap: left promiscuous mode [ 87.707207][ T36] veth1_vlan: left promiscuous mode [ 87.712656][ T36] veth0_vlan: left promiscuous mode [ 88.139851][ T36] team0 (unregistering): Port device team_slave_1 removed [ 88.166006][ T36] team0 (unregistering): Port device team_slave_0 removed [ 88.691915][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.712174][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.731758][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.752329][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.998008][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.086967][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.113404][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.121242][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.138485][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.145955][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.153664][ T5149] Bluetooth: hci0: command tx timeout [ 89.539931][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.601256][ T5940] veth0_vlan: entered promiscuous mode [ 89.618920][ T5940] veth1_vlan: entered promiscuous mode [ 89.664442][ T5940] veth0_macvtap: entered promiscuous mode [ 89.675652][ T5940] veth1_macvtap: entered promiscuous mode [ 89.701242][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.720846][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.739066][ T145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760959][ T145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.780950][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.807216][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.880867][ T3791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.902984][ T3791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.937465][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.947473][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/02 06:02:39 executed programs: 2 [ 91.226244][ T5149] Bluetooth: hci0: command tx timeout [ 93.305877][ T5149] Bluetooth: hci0: command tx timeout [ 93.327181][ C0] ================================================================== [ 93.337277][ C0] BUG: KASAN: slab-out-of-bounds in strnchr+0x5e/0x80 [ 93.346017][ C0] Read of size 1 at addr ffff88807e2f63b0 by task ksoftirqd/0/15 [ 93.354454][ C0] [ 93.356805][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 93.356825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.356841][ C0] Call Trace: [ 93.356850][ C0] [ 93.356858][ C0] dump_stack_lvl+0x189/0x250 [ 93.356882][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 93.356903][ C0] ? rcu_is_watching+0x15/0xb0 [ 93.356921][ C0] ? __kasan_check_byte+0x12/0x40 [ 93.356945][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.356966][ C0] ? rcu_is_watching+0x15/0xb0 [ 93.356984][ C0] ? lock_release+0x4b/0x3b0 [ 93.357000][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 93.357020][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 93.357040][ C0] print_report+0xca/0x240 [ 93.357056][ C0] ? strnchr+0x5e/0x80 [ 93.357073][ C0] kasan_report+0x118/0x150 [ 93.357090][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 93.357109][ C0] ? strnchr+0x5e/0x80 [ 93.357128][ C0] strnchr+0x5e/0x80 [ 93.357146][ C0] bpf_bprintf_prepare+0x167/0x13d0 [ 93.357170][ C0] ? stack_trace_save+0x9c/0xe0 [ 93.357194][ C0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 93.357215][ C0] ? kasan_save_track+0x10/0x80 [ 93.357232][ C0] ? bpf_snprintf+0x47/0x1b0 [ 93.357254][ C0] bpf_snprintf+0xd3/0x1b0 [ 93.357277][ C0] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 93.357295][ C0] bpf_trace_run1+0x27f/0x4c0 [ 93.357315][ C0] ? bpf_trace_run1+0x181/0x4c0 [ 93.357334][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 93.357353][ C0] ? __pfx_raise_softirq+0x10/0x10 [ 93.357375][ C0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 93.357395][ C0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 93.357413][ C0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 93.357431][ C0] ? invoke_rcu_core+0xb6/0x200 [ 93.357449][ C0] ? __pfx_invoke_rcu_core+0x10/0x10 [ 93.357472][ C0] trace_rcu_utilization+0x191/0x1c0 [ 93.357491][ C0] rcu_core+0x13fe/0x1870 [ 93.357514][ C0] ? __pfx_rcu_core+0x10/0x10 [ 93.357533][ C0] ? rcu_qs+0xc4/0x170 [ 93.357565][ C0] ? sched_clock_cpu+0x74/0x430 [ 93.357584][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 93.357601][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 93.357622][ C0] handle_softirqs+0x27d/0x850 [ 93.357639][ C0] ? run_ksoftirqd+0x9b/0x100 [ 93.357658][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 93.357674][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 93.357693][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 93.357709][ C0] run_ksoftirqd+0x9b/0x100 [ 93.357727][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 93.357747][ C0] smpboot_thread_fn+0x542/0xa60 [ 93.357764][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 93.357783][ C0] kthread+0x711/0x8a0 [ 93.357803][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 93.357820][ C0] ? __pfx_kthread+0x10/0x10 [ 93.357839][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.357854][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 93.357870][ C0] ? __pfx_kthread+0x10/0x10 [ 93.357889][ C0] ret_from_fork+0x599/0xb30 [ 93.357905][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 93.357922][ C0] ? __switch_to_asm+0x39/0x70 [ 93.358056][ C0] ? __switch_to_asm+0x33/0x70 [ 93.358082][ C0] ? __pfx_kthread+0x10/0x10 [ 93.358104][ C0] ret_from_fork_asm+0x1a/0x30 [ 93.358131][ C0] [ 93.358138][ C0] [ 93.684545][ C0] Allocated by task 6193: [ 93.688867][ C0] kasan_save_track+0x3e/0x80 [ 93.693717][ C0] __kasan_kmalloc+0x93/0xb0 [ 93.698389][ C0] __kmalloc_node_noprof+0x57a/0x820 [ 93.703668][ C0] bpf_map_area_alloc+0x64/0x180 [ 93.708668][ C0] insn_array_alloc+0x52/0x140 [ 93.713595][ C0] map_create+0xafd/0x16a0 [ 93.718010][ C0] __sys_bpf+0x682/0x8a0 [ 93.722328][ C0] __x64_sys_bpf+0x7c/0x90 [ 93.727147][ C0] do_syscall_64+0xfa/0xf80 [ 93.732012][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.737906][ C0] [ 93.740214][ C0] The buggy address belongs to the object at ffff88807e2f6000 [ 93.740214][ C0] which belongs to the cache kmalloc-cg-1k of size 1024 [ 93.754771][ C0] The buggy address is located 0 bytes to the right of [ 93.754771][ C0] allocated 944-byte region [ffff88807e2f6000, ffff88807e2f63b0) [ 93.769431][ C0] [ 93.771755][ C0] The buggy address belongs to the physical page: [ 93.778158][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e2f0 [ 93.786911][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.795623][ C0] memcg:ffff88801d6fff01 [ 93.799850][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 93.807404][ C0] page_type: f5(slab) [ 93.811482][ C0] raw: 00fff00000000040 ffff88813ffb0280 dead000000000122 0000000000000000 [ 93.820140][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88801d6fff01 [ 93.828887][ C0] head: 00fff00000000040 ffff88813ffb0280 dead000000000122 0000000000000000 [ 93.837647][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88801d6fff01 [ 93.846814][ C0] head: 00fff00000000003 ffffea0001f8bc01 00000000ffffffff 00000000ffffffff [ 93.855761][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 93.864543][ C0] page dumped because: kasan: bad access detected [ 93.871064][ C0] page_owner tracks the page as allocated [ 93.876775][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6179, tgid 6179 (syz.0.165), ts 93070069035, free_ts 93013436790 [ 93.899531][ C0] post_alloc_hook+0x234/0x290 [ 93.904309][ C0] get_page_from_freelist+0x2365/0x2440 [ 93.910025][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 93.915832][ C0] alloc_pages_mpol+0x232/0x4a0 [ 93.920785][ C0] allocate_slab+0x86/0x3b0 [ 93.925911][ C0] ___slab_alloc+0xf2b/0x1960 [ 93.930600][ C0] __slab_alloc+0x65/0x100 [ 93.935063][ C0] __kmalloc_node_noprof+0x5d9/0x820 [ 93.940355][ C0] bpf_map_area_alloc+0x64/0x180 [ 93.945473][ C0] insn_array_alloc+0x52/0x140 [ 93.950242][ C0] map_create+0xafd/0x16a0 [ 93.954831][ C0] __sys_bpf+0x682/0x8a0 [ 93.959106][ C0] __x64_sys_bpf+0x7c/0x90 [ 93.963958][ C0] do_syscall_64+0xfa/0xf80 [ 93.968457][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.974432][ C0] page last free pid 6178 tgid 6178 stack trace: [ 93.980916][ C0] __free_frozen_pages+0xbc8/0xd30 [ 93.986027][ C0] bpf_check+0x164a7/0x1c300 [ 93.990609][ C0] bpf_prog_load+0x13ba/0x1a10 [ 93.995364][ C0] __sys_bpf+0x5c3/0x8a0 [ 93.999699][ C0] __x64_sys_bpf+0x7c/0x90 [ 94.004209][ C0] do_syscall_64+0xfa/0xf80 [ 94.008731][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.014620][ C0] [ 94.016955][ C0] Memory state around the buggy address: [ 94.022716][ C0] ffff88807e2f6280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.030960][ C0] ffff88807e2f6300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 94.039016][ C0] >ffff88807e2f6380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 94.047245][ C0] ^ [ 94.052950][ C0] ffff88807e2f6400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.061013][ C0] ffff88807e2f6480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.069412][ C0] ================================================================== [ 94.077706][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.085163][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 94.094448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.104510][ C0] Call Trace: [ 94.107783][ C0] [ 94.110802][ C0] dump_stack_lvl+0x99/0x250 [ 94.115392][ C0] ? __asan_memcpy+0x40/0x70 [ 94.120067][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.125447][ C0] ? __pfx__printk+0x10/0x10 [ 94.130032][ C0] vpanic+0x237/0x6d0 [ 94.134174][ C0] ? __pfx_vpanic+0x10/0x10 [ 94.138748][ C0] ? irqentry_exit+0x5dd/0x660 [ 94.143498][ C0] ? trace_irq_disable+0x37/0x100 [ 94.148644][ C0] panic+0xb9/0xc0 [ 94.152353][ C0] ? __pfx_panic+0x10/0x10 [ 94.156759][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 94.162739][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 94.169055][ C0] ? strnchr+0x5e/0x80 [ 94.173117][ C0] check_panic_on_warn+0x89/0xb0 [ 94.178049][ C0] ? strnchr+0x5e/0x80 [ 94.182192][ C0] end_report+0x6f/0x140 [ 94.186432][ C0] kasan_report+0x129/0x150 [ 94.190950][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 94.196157][ C0] ? strnchr+0x5e/0x80 [ 94.200226][ C0] strnchr+0x5e/0x80 [ 94.204121][ C0] bpf_bprintf_prepare+0x167/0x13d0 [ 94.209339][ C0] ? stack_trace_save+0x9c/0xe0 [ 94.214240][ C0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 94.219866][ C0] ? kasan_save_track+0x10/0x80 [ 94.224968][ C0] ? bpf_snprintf+0x47/0x1b0 [ 94.230183][ C0] bpf_snprintf+0xd3/0x1b0 [ 94.235144][ C0] bpf_prog_c2925c0a7ac12d80+0x58/0x60 [ 94.240876][ C0] bpf_trace_run1+0x27f/0x4c0 [ 94.245661][ C0] ? bpf_trace_run1+0x181/0x4c0 [ 94.250853][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 94.256144][ C0] ? __pfx_raise_softirq+0x10/0x10 [ 94.261265][ C0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 94.267087][ C0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 94.272736][ C0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 94.279162][ C0] ? invoke_rcu_core+0xb6/0x200 [ 94.284006][ C0] ? __pfx_invoke_rcu_core+0x10/0x10 [ 94.289291][ C0] trace_rcu_utilization+0x191/0x1c0 [ 94.294568][ C0] rcu_core+0x13fe/0x1870 [ 94.298898][ C0] ? __pfx_rcu_core+0x10/0x10 [ 94.303570][ C0] ? rcu_qs+0xc4/0x170 [ 94.307728][ C0] ? sched_clock_cpu+0x74/0x430 [ 94.312573][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 94.317761][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 94.322953][ C0] handle_softirqs+0x27d/0x850 [ 94.327709][ C0] ? run_ksoftirqd+0x9b/0x100 [ 94.332389][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 94.337781][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 94.342998][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 94.348027][ C0] run_ksoftirqd+0x9b/0x100 [ 94.352537][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 94.357644][ C0] smpboot_thread_fn+0x542/0xa60 [ 94.362593][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 94.367626][ C0] kthread+0x711/0x8a0 [ 94.371696][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 94.377148][ C0] ? __pfx_kthread+0x10/0x10 [ 94.381820][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.387009][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 94.392193][ C0] ? __pfx_kthread+0x10/0x10 [ 94.396871][ C0] ret_from_fork+0x599/0xb30 [ 94.401455][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 94.406558][ C0] ? __switch_to_asm+0x39/0x70 [ 94.411319][ C0] ? __switch_to_asm+0x33/0x70 [ 94.416074][ C0] ? __pfx_kthread+0x10/0x10 [ 94.420659][ C0] ret_from_fork_asm+0x1a/0x30 [ 94.425420][ C0] [ 94.428941][ C0] Kernel Offset: disabled [ 94.433257][ C0] Rebooting in 86400 seconds..