Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts.
2026/06/27 05:02:52 parsed 1 programs
2026/06/27 05:02:52 serving rpc on tcp://43637
[ 84.609999][ T5637] cgroup: Unknown subsys name 'net'
[ 84.740180][ T5637] cgroup: Unknown subsys name 'cpuset'
[ 84.749406][ T5637] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.361992][ T5637] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.465426][ T5651] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 90.418003][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.426386][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.459660][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.468622][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.851050][ T29] cfg80211: failed to load regulatory.db
[ 92.067235][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.075012][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.082336][ T5698] bridge_slave_0: entered allmulticast mode
[ 92.089469][ T5698] bridge_slave_0: entered promiscuous mode
[ 92.099212][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.106358][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.113864][ T5698] bridge_slave_1: entered allmulticast mode
[ 92.121184][ T5698] bridge_slave_1: entered promiscuous mode
[ 92.150758][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.162842][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.193231][ T5698] team0: Port device team_slave_0 added
[ 92.201051][ T5698] team0: Port device team_slave_1 added
[ 92.227484][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.234465][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.260403][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.273100][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.280129][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.306629][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.352772][ T5698] hsr_slave_0: entered promiscuous mode
[ 92.359304][ T5698] hsr_slave_1: entered promiscuous mode
[ 92.512649][ T5698] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.525657][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 92.534152][ T5698] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.544039][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 92.552131][ T5698] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.562489][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 92.575437][ T5698] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.586122][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 92.666186][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.689278][ T5698] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.704093][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.711552][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.726338][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.733483][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.077519][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.123986][ T5698] veth0_vlan: entered promiscuous mode
[ 93.139162][ T5698] veth1_vlan: entered promiscuous mode
[ 93.170039][ T5698] veth0_macvtap: entered promiscuous mode
[ 93.181649][ T5698] veth1_macvtap: entered promiscuous mode
[ 93.201415][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.215812][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.234682][ T199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.244562][ T199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.254935][ T199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.264394][ T199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.414544][ T199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.485249][ T199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.592169][ T199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.638569][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.646150][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.655032][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.667551][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.676010][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.705949][ T199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/27 05:03:06 executed programs: 0
[ 95.016667][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.028052][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.036269][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.044222][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.052245][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.622344][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.629695][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.637658][ T5762] bridge_slave_0: entered allmulticast mode
[ 95.644877][ T5762] bridge_slave_0: entered promiscuous mode
[ 95.656224][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.663570][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.670819][ T5762] bridge_slave_1: entered allmulticast mode
[ 95.678705][ T5762] bridge_slave_1: entered promiscuous mode
[ 95.732909][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.746468][ T199] bridge_slave_1: left allmulticast mode
[ 95.752310][ T199] bridge_slave_1: left promiscuous mode
[ 95.759427][ T199] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.770623][ T199] bridge_slave_0: left allmulticast mode
[ 95.776274][ T199] bridge_slave_0: left promiscuous mode
[ 95.782541][ T199] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.908166][ T199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 95.921072][ T199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 95.931518][ T199] bond0 (unregistering): Released all slaves
[ 95.944579][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.990877][ T5762] team0: Port device team_slave_0 added
[ 95.999942][ T5762] team0: Port device team_slave_1 added
[ 96.039248][ T199] hsr_slave_0: left promiscuous mode
[ 96.045136][ T199] hsr_slave_1: left promiscuous mode
[ 96.051356][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 96.058822][ T199] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 96.066872][ T199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 96.074274][ T199] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 96.087526][ T199] veth1_macvtap: left promiscuous mode
[ 96.093338][ T199] veth0_macvtap: left promiscuous mode
[ 96.100449][ T199] veth1_vlan: left promiscuous mode
[ 96.105729][ T199] veth0_vlan: left promiscuous mode
[ 96.285701][ T199] team0 (unregistering): Port device team_slave_1 removed
[ 96.312754][ T199] team0 (unregistering): Port device team_slave_0 removed
[ 96.415718][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.422873][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.449351][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.463381][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.470607][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.496910][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.600082][ T5762] hsr_slave_0: entered promiscuous mode
[ 96.607324][ T5762] hsr_slave_1: entered promiscuous mode
[ 97.118303][ T4941] Bluetooth: hci0: command tx timeout
[ 97.155254][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[ 97.544003][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.555586][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 97.565625][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.582441][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 97.591550][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.605529][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.613607][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.624376][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 97.724846][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.747832][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.764337][ T199] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.771566][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.791169][ T199] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.798416][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.300992][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.366732][ T5762] veth0_vlan: entered promiscuous mode
[ 98.385561][ T5762] veth1_vlan: entered promiscuous mode
[ 98.413128][ T5762] veth0_macvtap: entered promiscuous mode
[ 98.423153][ T5762] veth1_macvtap: entered promiscuous mode
[ 98.443514][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.456589][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.473462][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.482472][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.494105][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.503309][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.568338][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.576215][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.610571][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.618640][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.665272][ T5836] netlink: 'syz.0.17': attribute type 8 has an invalid length.
[ 98.673851][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'.
[ 98.692927][ T5836] veth1_to_team: entered promiscuous mode
[ 98.699796][ T5836] gretap0: entered promiscuous mode
[ 98.705905][ T5836] ip6gretap0: entered promiscuous mode
[ 98.713617][ T5836] hsr1: entered promiscuous mode
[ 98.724394][ T5836] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET)
[ 98.733111][ C1] ==================================================================
[ 98.741227][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 98.749240][ C1] Read of size 2 at addr ffff88817e71eab4 by task syz.0.17/5836
[ 98.756874][ C1]
[ 98.759215][ C1] CPU: 1 UID: 0 PID: 5836 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 98.759233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 98.759248][ C1] Call Trace:
[ 98.759255][ C1]
[ 98.759261][ C1] dump_stack_lvl+0xe8/0x150
[ 98.759282][ C1] print_address_description+0x55/0x1e0
[ 98.759299][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 98.759317][ C1] print_report+0x58/0x70
[ 98.759332][ C1] kasan_report+0x117/0x150
[ 98.759348][ C1] ? __local_bh_enable_ip+0xf8/0x130
[ 98.759372][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 98.759393][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 98.759417][ C1] __dev_queue_xmit+0x27f/0x37f0
[ 98.759436][ C1] ? kmem_cache_alloc_node_noprof+0x1b1/0x610
[ 98.759460][ C1] ? trace_kmem_cache_alloc+0x29/0xe0
[ 98.759483][ C1] ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[ 98.759506][ C1] ? local_lock_release+0x9c/0x160
[ 98.759528][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[ 98.759552][ C1] ? __alloc_skb+0x276/0x7a0
[ 98.759564][ C1] ? __alloc_skb+0x276/0x7a0
[ 98.759576][ C1] ? __copy_skb_header+0xa3/0x4a0
[ 98.759593][ C1] ? __pfx___dev_queue_xmit+0x10/0x10
[ 98.759610][ C1] ? __pskb_copy_fclone+0xb7e/0x1200
[ 98.759629][ C1] ? __asan_memcpy+0x40/0x70
[ 98.759651][ C1] ? __pskb_copy_fclone+0xb7e/0x1200
[ 98.759670][ C1] ? hsr_create_tagged_frame+0x51f/0xe30
[ 98.759694][ C1] ? __asan_memmove+0x40/0x70
[ 98.759717][ C1] ? hsr_create_tagged_frame+0x8f3/0xe30
[ 98.759743][ C1] hsr_forward_skb+0x152a/0x28c0
[ 98.759768][ C1] ? hsr_forward_skb+0xb3/0x28c0
[ 98.759791][ C1] ? __pfx_hsr_forward_skb+0x10/0x10
[ 98.759813][ C1] ? do_raw_spin_lock+0x12b/0x2f0
[ 98.759840][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 98.759860][ C1] ? hsr_addr_is_self+0x26/0x3e0
[ 98.759888][ C1] ? hsr_addr_is_self+0x26/0x3e0
[ 98.759903][ C1] ? hsr_addr_is_self+0x26/0x3e0
[ 98.759919][ C1] ? hsr_handle_frame+0x695/0xa50
[ 98.759939][ C1] hsr_handle_frame+0x6a0/0xa50
[ 98.759961][ C1] ? __pfx_hsr_handle_frame+0x10/0x10
[ 98.759981][ C1] __netif_receive_skb_core+0x989/0x30b0
[ 98.760003][ C1] ? __kasan_check_byte+0x12/0x40
[ 98.760020][ C1] ? is_bpf_text_address+0x26/0x2b0
[ 98.760036][ C1] ? rcu_is_watching+0x15/0xb0
[ 98.760053][ C1] ? __kasan_check_byte+0x12/0x40
[ 98.760069][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 98.760089][ C1] ? lock_release+0x4b/0x3c0
[ 98.760103][ C1] ? lock_release+0x4b/0x3c0
[ 98.760121][ C1] ? __lock_acquire+0x683/0x2cf0
[ 98.760136][ C1] ? __kernel_text_address+0xd/0x30
[ 98.760154][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 98.760180][ C1] __netif_receive_skb_list_core+0x24d/0x830
[ 98.760206][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10
[ 98.760231][ C1] netif_receive_skb_list_internal+0x995/0xcf0
[ 98.760254][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0
[ 98.760274][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 98.760295][ C1] ? dev_gro_receive+0x1097/0x2380
[ 98.760313][ C1] napi_complete_done+0x299/0x730
[ 98.760335][ C1] ? __pfx_napi_complete_done+0x10/0x10
[ 98.760356][ C1] ? gro_cell_poll+0x175/0x5d0
[ 98.760381][ C1] gro_cell_poll+0x5ab/0x5d0
[ 98.760406][ C1] ? gro_cell_poll+0x175/0x5d0
[ 98.760429][ C1] __napi_poll+0xaa/0x330
[ 98.760450][ C1] net_rx_action+0x61d/0xf50
[ 98.760495][ C1] ? __pfx_net_rx_action+0x10/0x10
[ 98.760517][ C1] ? kvm_sched_clock_read+0x11/0x20
[ 98.760544][ C1] ? __pfx_sched_clock_cpu+0x10/0x10
[ 98.760565][ C1] handle_softirqs+0x225/0x840
[ 98.760588][ C1] ? do_softirq+0x76/0xd0
[ 98.760610][ C1] ? tun_rx_batched+0x185/0x790
[ 98.760634][ C1] do_softirq+0x76/0xd0
[ 98.760655][ C1]
[ 98.760660][ C1]
[ 98.760666][ C1] __local_bh_enable_ip+0xf8/0x130
[ 98.760688][ C1] ? tun_rx_batched+0x185/0x790
[ 98.760711][ C1] tun_rx_batched+0x616/0x790
[ 98.760736][ C1] ? __pfx_tun_rx_batched+0x10/0x10
[ 98.760760][ C1] ? tun_get_user+0x2717/0x4370
[ 98.760783][ C1] ? tun_get_user+0x2717/0x4370
[ 98.760806][ C1] ? tun_get_user+0x23cb/0x4370
[ 98.760833][ C1] ? tun_get_user+0x23cb/0x4370
[ 98.760856][ C1] ? __local_bh_enable_ip+0xd0/0x130
[ 98.760877][ C1] ? tun_get_user+0x2717/0x4370
[ 98.760900][ C1] ? tun_get_user+0x2717/0x4370
[ 98.760922][ C1] tun_get_user+0x2b44/0x4370
[ 98.760951][ C1] ? aa_file_perm+0x18b/0x15f0
[ 98.760972][ C1] ? aa_file_perm+0x4ed/0x15f0
[ 98.760991][ C1] ? __pfx_tun_get_user+0x10/0x10
[ 98.761015][ C1] ? __lock_acquire+0x683/0x2cf0
[ 98.761032][ C1] ? futex_hash+0x4e/0x2b0
[ 98.761049][ C1] ? ref_tracker_alloc+0x341/0x4b0
[ 98.761072][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 98.761095][ C1] ? tun_get+0x1c/0x2f0
[ 98.761117][ C1] ? tun_get+0x1c/0x2f0
[ 98.761141][ C1] ? tun_get+0x1c/0x2f0
[ 98.761162][ C1] ? tun_get+0x1c/0x2f0
[ 98.761186][ C1] tun_chr_write_iter+0x113/0x200
[ 98.761210][ C1] vfs_write+0x612/0xba0
[ 98.761231][ C1] ? __pfx_vfs_write+0x10/0x10
[ 98.761249][ C1] ? __pfx_do_futex+0x10/0x10
[ 98.761272][ C1] ksys_write+0x150/0x270
[ 98.761291][ C1] ? __pfx_ksys_write+0x10/0x10
[ 98.761311][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.761327][ C1] do_syscall_64+0x174/0x580
[ 98.761340][ C1] ? trace_irq_disable+0x3b/0x140
[ 98.761354][ C1] ? clear_bhb_loop+0x40/0x90
[ 98.761371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.761386][ C1] RIP: 0033:0x7f4e05d9ce59
[ 98.761403][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 98.761416][ C1] RSP: 002b:00007ffd0015af88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 98.761433][ C1] RAX: ffffffffffffffda RBX: 00007f4e06015fa0 RCX: 00007f4e05d9ce59
[ 98.761444][ C1] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000005
[ 98.761454][ C1] RBP: 00007f4e05e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 98.761463][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.761472][ C1] R13: 00007f4e06015fac R14: 00007f4e06015fa0 R15: 00007f4e06015fa0
[ 98.761490][ C1]
[ 98.761495][ C1]
[ 99.375737][ C1] The buggy address belongs to the physical page:
[ 99.382156][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17e71e
[ 99.391096][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[ 99.398355][ C1] raw: 057ff00000000000 ffffea0005f9c788 ffffea0005f9c788 0000000000000000
[ 99.406959][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 99.415531][ C1] page dumped because: kasan: bad access detected
[ 99.421960][ C1] page_owner info is not present (never set?)
[ 99.428020][ C1]
[ 99.430339][ C1] Memory state around the buggy address:
[ 99.435985][ C1] ffff88817e71e980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 99.444053][ C1] ffff88817e71ea00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 99.452129][ C1] >ffff88817e71ea80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 99.460187][ C1] ^
[ 99.465821][ C1] ffff88817e71eb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 99.473880][ C1] ffff88817e71eb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 99.481966][ C1] ==================================================================
[ 99.490204][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 99.497441][ C1] CPU: 1 UID: 0 PID: 5836 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 99.506573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 99.516655][ C1] Call Trace:
[ 99.519964][ C1]
[ 99.522862][ C1] vpanic+0x56c/0xa60
[ 99.526890][ C1] ? rcu_is_watching+0x15/0xb0
[ 99.531696][ C1] ? __pfx_vpanic+0x10/0x10
[ 99.536249][ C1] panic+0xc5/0xd0
[ 99.539985][ C1] ? __pfx_panic+0x10/0x10
[ 99.544435][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 99.550104][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 99.555748][ C1] check_panic_on_warn+0x89/0xb0
[ 99.560692][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 99.566351][ C1] end_report+0x73/0x170
[ 99.570697][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 99.576338][ C1] kasan_report+0x128/0x150
[ 99.580859][ C1] ? __local_bh_enable_ip+0xf8/0x130
[ 99.586156][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 99.591824][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30
[ 99.597406][ C1] __dev_queue_xmit+0x27f/0x37f0
[ 99.602340][ C1] ? kmem_cache_alloc_node_noprof+0x1b1/0x610
[ 99.608411][ C1] ? trace_kmem_cache_alloc+0x29/0xe0
[ 99.613874][ C1] ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[ 99.619975][ C1] ? local_lock_release+0x9c/0x160
[ 99.625116][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[ 99.631204][ C1] ? __alloc_skb+0x276/0x7a0
[ 99.635794][ C1] ? __alloc_skb+0x276/0x7a0
[ 99.640395][ C1] ? __copy_skb_header+0xa3/0x4a0
[ 99.645472][ C1] ? __pfx___dev_queue_xmit+0x10/0x10
[ 99.650869][ C1] ? __pskb_copy_fclone+0xb7e/0x1200
[ 99.656186][ C1] ? __asan_memcpy+0x40/0x70
[ 99.660821][ C1] ? __pskb_copy_fclone+0xb7e/0x1200
[ 99.666144][ C1] ? hsr_create_tagged_frame+0x51f/0xe30
[ 99.671817][ C1] ? __asan_memmove+0x40/0x70
[ 99.676505][ C1] ? hsr_create_tagged_frame+0x8f3/0xe30
[ 99.682150][ C1] hsr_forward_skb+0x152a/0x28c0
[ 99.687104][ C1] ? hsr_forward_skb+0xb3/0x28c0
[ 99.692076][ C1] ? __pfx_hsr_forward_skb+0x10/0x10
[ 99.697373][ C1] ? do_raw_spin_lock+0x12b/0x2f0
[ 99.702415][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 99.707800][ C1] ? hsr_addr_is_self+0x26/0x3e0
[ 99.712736][ C1] ? hsr_addr_is_self+0x26/0x3e0
[ 99.717676][ C1] ? hsr_addr_is_self+0x26/0x3e0
[ 99.722618][ C1] ? hsr_handle_frame+0x695/0xa50
[ 99.727646][ C1] hsr_handle_frame+0x6a0/0xa50
[ 99.732515][ C1] ? __pfx_hsr_handle_frame+0x10/0x10
[ 99.737938][ C1] __netif_receive_skb_core+0x989/0x30b0
[ 99.743602][ C1] ? __kasan_check_byte+0x12/0x40
[ 99.748633][ C1] ? is_bpf_text_address+0x26/0x2b0
[ 99.753836][ C1] ? rcu_is_watching+0x15/0xb0
[ 99.758602][ C1] ? __kasan_check_byte+0x12/0x40
[ 99.763633][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10
[ 99.769722][ C1] ? lock_release+0x4b/0x3c0
[ 99.774313][ C1] ? lock_release+0x4b/0x3c0
[ 99.778928][ C1] ? __lock_acquire+0x683/0x2cf0
[ 99.783887][ C1] ? __kernel_text_address+0xd/0x30
[ 99.789097][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 99.795286][ C1] __netif_receive_skb_list_core+0x24d/0x830
[ 99.801397][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10
[ 99.807910][ C1] netif_receive_skb_list_internal+0x995/0xcf0
[ 99.814171][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0
[ 99.820511][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 99.827280][ C1] ? dev_gro_receive+0x1097/0x2380
[ 99.832489][ C1] napi_complete_done+0x299/0x730
[ 99.837535][ C1] ? __pfx_napi_complete_done+0x10/0x10
[ 99.843114][ C1] ? gro_cell_poll+0x175/0x5d0
[ 99.847915][ C1] gro_cell_poll+0x5ab/0x5d0
[ 99.852539][ C1] ? gro_cell_poll+0x175/0x5d0
[ 99.857330][ C1] __napi_poll+0xaa/0x330
[ 99.861679][ C1] net_rx_action+0x61d/0xf50
[ 99.866374][ C1] ? __pfx_net_rx_action+0x10/0x10
[ 99.871513][ C1] ? kvm_sched_clock_read+0x11/0x20
[ 99.876767][ C1] ? __pfx_sched_clock_cpu+0x10/0x10
[ 99.882174][ C1] handle_softirqs+0x225/0x840
[ 99.887036][ C1] ? do_softirq+0x76/0xd0
[ 99.891396][ C1] ? tun_rx_batched+0x185/0x790
[ 99.896292][ C1] do_softirq+0x76/0xd0
[ 99.900560][ C1]
[ 99.903494][ C1]
[ 99.906432][ C1] __local_bh_enable_ip+0xf8/0x130
[ 99.911552][ C1] ? tun_rx_batched+0x185/0x790
[ 99.916412][ C1] tun_rx_batched+0x616/0x790
[ 99.921182][ C1] ? __pfx_tun_rx_batched+0x10/0x10
[ 99.926389][ C1] ? tun_get_user+0x2717/0x4370
[ 99.931243][ C1] ? tun_get_user+0x2717/0x4370
[ 99.936095][ C1] ? tun_get_user+0x23cb/0x4370
[ 99.940954][ C1] ? tun_get_user+0x23cb/0x4370
[ 99.945832][ C1] ? __local_bh_enable_ip+0xd0/0x130
[ 99.951145][ C1] ? tun_get_user+0x2717/0x4370
[ 99.956004][ C1] ? tun_get_user+0x2717/0x4370
[ 99.960871][ C1] tun_get_user+0x2b44/0x4370
[ 99.965588][ C1] ? aa_file_perm+0x18b/0x15f0
[ 99.970442][ C1] ? aa_file_perm+0x4ed/0x15f0
[ 99.975243][ C1] ? __pfx_tun_get_user+0x10/0x10
[ 99.980276][ C1] ? __lock_acquire+0x683/0x2cf0
[ 99.985209][ C1] ? futex_hash+0x4e/0x2b0
[ 99.989712][ C1] ? ref_tracker_alloc+0x341/0x4b0
[ 99.994831][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10
[ 100.000293][ C1] ? tun_get+0x1c/0x2f0
[ 100.004452][ C1] ? tun_get+0x1c/0x2f0
[ 100.008612][ C1] ? tun_get+0x1c/0x2f0
[ 100.012797][ C1] ? tun_get+0x1c/0x2f0
[ 100.016959][ C1] tun_chr_write_iter+0x113/0x200
[ 100.021989][ C1] vfs_write+0x612/0xba0
[ 100.026235][ C1] ? __pfx_vfs_write+0x10/0x10
[ 100.031028][ C1] ? __pfx_do_futex+0x10/0x10
[ 100.035713][ C1] ksys_write+0x150/0x270
[ 100.040054][ C1] ? __pfx_ksys_write+0x10/0x10
[ 100.044953][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.051062][ C1] do_syscall_64+0x174/0x580
[ 100.055692][ C1] ? trace_irq_disable+0x3b/0x140
[ 100.060727][ C1] ? clear_bhb_loop+0x40/0x90
[ 100.065426][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.071319][ C1] RIP: 0033:0x7f4e05d9ce59
[ 100.075734][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 100.095349][ C1] RSP: 002b:00007ffd0015af88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 100.103782][ C1] RAX: ffffffffffffffda RBX: 00007f4e06015fa0 RCX: 00007f4e05d9ce59
[ 100.111837][ C1] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000005
[ 100.119803][ C1] RBP: 00007f4e05e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 100.127894][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 100.135886][ C1] R13: 00007f4e06015fac R14: 00007f4e06015fa0 R15: 00007f4e06015fa0
[ 100.143995][ C1]
[ 100.147631][ C1] Kernel Offset: disabled
[ 100.151961][ C1] Rebooting in 86400 seconds..