Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. 2025/09/05 13:07:07 parsed 1 programs [ 75.243059][ T5871] cgroup: Unknown subsys name 'net' [ 75.392787][ T5871] cgroup: Unknown subsys name 'cpuset' [ 75.401188][ T5871] cgroup: Unknown subsys name 'rlimit' [ 76.828929][ T5871] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.647000][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.369266][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.378476][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.388173][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.396557][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.404801][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.677227][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 81.771424][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.782388][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.801754][ T5923] bridge_slave_0: entered allmulticast mode [ 81.811555][ T5923] bridge_slave_0: entered promiscuous mode [ 81.823183][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.832691][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.841828][ T5923] bridge_slave_1: entered allmulticast mode [ 81.849888][ T5923] bridge_slave_1: entered promiscuous mode [ 81.909021][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.925414][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.972933][ T5923] team0: Port device team_slave_0 added [ 81.983565][ T5923] team0: Port device team_slave_1 added [ 82.031400][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.040224][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.071842][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.086115][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.094931][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.123830][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.164803][ T5923] hsr_slave_0: entered promiscuous mode [ 82.171339][ T5923] hsr_slave_1: entered promiscuous mode [ 82.303404][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.315323][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.326829][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.337468][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.366375][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.373652][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.381507][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.388624][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.439907][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.459369][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.468130][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.486611][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.500595][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.507723][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.522394][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.529662][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.702810][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.747135][ T5923] veth0_vlan: entered promiscuous mode [ 82.761069][ T5923] veth1_vlan: entered promiscuous mode [ 82.788993][ T5923] veth0_macvtap: entered promiscuous mode [ 82.798268][ T5923] veth1_macvtap: entered promiscuous mode [ 82.819237][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.836285][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.852173][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862425][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.875268][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.884538][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.997800][ T1111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.064807][ T1111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.147426][ T1111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.250338][ T1111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.307095][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.318669][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.344776][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.353965][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/05 13:07:18 executed programs: 0 [ 84.526634][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.534666][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.544983][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.553064][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.561801][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.718946][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 84.787218][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.794546][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.803396][ T5977] bridge_slave_0: entered allmulticast mode [ 84.811438][ T5977] bridge_slave_0: entered promiscuous mode [ 84.820608][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.827823][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.835770][ T5977] bridge_slave_1: entered allmulticast mode [ 84.842851][ T5977] bridge_slave_1: entered promiscuous mode [ 84.878888][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.891747][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.923823][ T5977] team0: Port device team_slave_0 added [ 84.932089][ T5977] team0: Port device team_slave_1 added [ 84.960014][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.967020][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.993217][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.006704][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.013817][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.040559][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.082730][ T5977] hsr_slave_0: entered promiscuous mode [ 85.088958][ T5977] hsr_slave_1: entered promiscuous mode [ 85.095376][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 85.101435][ T5977] Cannot create hsr debugfs directory [ 85.799518][ T1111] bridge_slave_1: left allmulticast mode [ 85.806341][ T1111] bridge_slave_1: left promiscuous mode [ 85.815458][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.833992][ T1111] bridge_slave_0: left allmulticast mode [ 85.848649][ T1111] bridge_slave_0: left promiscuous mode [ 85.855371][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.255808][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.272424][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.283289][ T1111] bond0 (unregistering): Released all slaves [ 86.423391][ T1111] hsr_slave_0: left promiscuous mode [ 86.436280][ T1111] hsr_slave_1: left promiscuous mode [ 86.445100][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.453314][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.461916][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.475757][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.500270][ T1111] veth1_macvtap: left promiscuous mode [ 86.506356][ T1111] veth0_macvtap: left promiscuous mode [ 86.514042][ T1111] veth1_vlan: left promiscuous mode [ 86.520506][ T1111] veth0_vlan: left promiscuous mode [ 86.641578][ T5185] Bluetooth: hci0: command tx timeout [ 86.896835][ T1213] cfg80211: failed to load regulatory.db [ 87.048374][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 87.084199][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 87.644165][ T5977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.668106][ T5977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.684503][ T5977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.705905][ T5977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.207202][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.267613][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.315302][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.322843][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.394409][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.402449][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.722390][ T5185] Bluetooth: hci0: command tx timeout [ 88.928352][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.998030][ T5977] veth0_vlan: entered promiscuous mode [ 89.018310][ T5977] veth1_vlan: entered promiscuous mode [ 89.063218][ T5977] veth0_macvtap: entered promiscuous mode [ 89.076954][ T5977] veth1_macvtap: entered promiscuous mode [ 89.108476][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.128947][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.152952][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.175443][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.192096][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.223616][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.294451][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.312783][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.344963][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.354658][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/05 13:07:23 executed programs: 3 [ 89.632660][ C1] hrtimer: interrupt took 89391 ns [ 90.799592][ T5185] Bluetooth: hci0: command tx timeout [ 92.881841][ T5185] Bluetooth: hci0: command tx timeout 2025/09/05 13:07:28 executed programs: 81 2025/09/05 13:07:33 executed programs: 156 2025/09/05 13:07:38 executed programs: 236 2025/09/05 13:07:43 executed programs: 317 2025/09/05 13:07:49 executed programs: 393 2025/09/05 13:07:54 executed programs: 499 [ 121.340197][ C0] ================================================================== [ 121.349857][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x868/0xcf0 [ 121.357986][ C0] Write of size 8 at addr ffff88803019c258 by task syz.0.549/6604 [ 121.366468][ C0] [ 121.368822][ C0] CPU: 0 UID: 0 PID: 6604 Comm: syz.0.549 Not tainted syzkaller #0 PREEMPT(full) [ 121.368837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.368849][ C0] Call Trace: [ 121.368855][ C0] [ 121.368861][ C0] dump_stack_lvl+0x189/0x250 [ 121.368877][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 121.368889][ C0] ? rcu_is_watching+0x15/0xb0 [ 121.368903][ C0] ? __kasan_check_byte+0x12/0x40 [ 121.368917][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.368928][ C0] ? rcu_is_watching+0x15/0xb0 [ 121.368938][ C0] ? lock_release+0x4b/0x3e0 [ 121.368952][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 121.368964][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 121.368977][ C0] print_report+0xca/0x240 [ 121.368987][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 121.369001][ C0] kasan_report+0x118/0x150 [ 121.369015][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 121.369029][ C0] ? rcu_core+0xcab/0x1770 [ 121.369043][ C0] __bpf_get_stackid+0x868/0xcf0 [ 121.369060][ C0] ? bpf_prog_b724608cae728045+0x27/0x2f [ 121.369072][ C0] bpf_get_stackid_raw_tp+0x196/0x210 [ 121.369085][ C0] bpf_prog_b724608cae728045+0x27/0x2f [ 121.369093][ C0] bpf_trace_run2+0x281/0x4b0 [ 121.369105][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.369116][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 121.369131][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 121.369143][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 121.369155][ C0] ? rcu_core+0xc37/0x1770 [ 121.369169][ C0] ? rcu_core+0xc37/0x1770 [ 121.369181][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 121.369192][ C0] kfree+0x3a0/0x440 [ 121.369204][ C0] ? rcu_core+0xc37/0x1770 [ 121.369218][ C0] slab_free_after_rcu_debug+0x60/0x2a0 [ 121.369229][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 121.369274][ C0] ? rcu_core+0xc37/0x1770 [ 121.369288][ C0] rcu_core+0xcab/0x1770 [ 121.369312][ C0] ? __pfx_rcu_core+0x10/0x10 [ 121.369337][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 121.369367][ C0] handle_softirqs+0x283/0x870 [ 121.369378][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 121.369388][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 121.369400][ C0] __irq_exit_rcu+0xca/0x1f0 [ 121.369409][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 121.369421][ C0] irq_exit_rcu+0x9/0x30 [ 121.369429][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 121.369444][ C0] [ 121.369447][ C0] [ 121.369451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.369464][ C0] RIP: 0010:preempt_count_add+0x6/0x1a0 [ 121.369484][ C0] Code: 24 e8 de 25 93 00 eb 8c e9 f1 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 20 93 ab 99 48 c1 [ 121.369495][ C0] RSP: 0018:ffffc90003b6fab0 EFLAGS: 00000246 [ 121.369510][ C0] RAX: 1ffffffff1c31c88 RBX: ffffc90003b6fba0 RCX: ffffffff99ab9303 [ 121.369518][ C0] RDX: ffff88802e511e00 RSI: ffffffff8dba5d03 RDI: 0000000000000001 [ 121.369525][ C0] RBP: ffffc90003b6fc70 R08: ffffc90003b6fbe7 R09: 0000000000000000 [ 121.369532][ C0] R10: ffffc90003b6fbc0 R11: fffff5200076df7d R12: ffffffff8e18e3e0 [ 121.369539][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.369550][ C0] __mutex_lock+0x15c/0x1360 [ 121.369565][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 121.369579][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 121.369590][ C0] ? tracepoint_probe_unregister+0x30/0x9b0 [ 121.369605][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 121.369620][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 121.369632][ C0] ? bpf_link_free+0x9e/0x330 [ 121.369645][ C0] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 121.369658][ C0] tracepoint_probe_unregister+0x30/0x9b0 [ 121.369672][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 121.369681][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 121.369693][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 121.369705][ C0] bpf_raw_tp_link_release+0x43/0x70 [ 121.369715][ C0] bpf_link_free+0xed/0x330 [ 121.369727][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 121.369739][ C0] bpf_link_release+0x6b/0x80 [ 121.369750][ C0] __fput+0x449/0xa70 [ 121.369763][ C0] task_work_run+0x1d1/0x260 [ 121.369777][ C0] ? __pfx_task_work_run+0x10/0x10 [ 121.369790][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 121.369804][ C0] exit_to_user_mode_loop+0xec/0x110 [ 121.369818][ C0] do_syscall_64+0x2bd/0x3b0 [ 121.369832][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.369841][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.369851][ C0] ? clear_bhb_loop+0x60/0xb0 [ 121.369862][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.369872][ C0] RIP: 0033:0x7f4712d8ebe9 [ 121.369881][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.369889][ C0] RSP: 002b:00007ffecd1fea78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 121.369899][ C0] RAX: 0000000000000000 RBX: 000000000001d9ca RCX: 00007f4712d8ebe9 [ 121.369906][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 121.369912][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000005cd1fed6f [ 121.369918][ C0] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007f4712fc5fac [ 121.369925][ C0] R13: 00007f4712fc5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 121.369939][ C0] [ 121.369943][ C0] [ 121.918192][ C0] Allocated by task 6604: [ 121.922505][ C0] kasan_save_track+0x3e/0x80 [ 121.927351][ C0] __kasan_kmalloc+0x93/0xb0 [ 121.932249][ C0] __kmalloc_node_noprof+0x276/0x4e0 [ 121.937735][ C0] bpf_map_area_alloc+0x64/0x180 [ 121.942790][ C0] prealloc_elems_and_freelist+0x86/0x1d0 [ 121.948596][ C0] stack_map_alloc+0x33f/0x4c0 [ 121.953370][ C0] map_create+0xaa0/0x14d0 [ 121.957933][ C0] __sys_bpf+0x60f/0x870 [ 121.963514][ C0] __x64_sys_bpf+0x7c/0x90 [ 121.969530][ C0] do_syscall_64+0xfa/0x3b0 [ 121.974554][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.980639][ C0] [ 121.983421][ C0] The buggy address belongs to the object at ffff88803019c000 [ 121.983421][ C0] which belongs to the cache kmalloc-cg-1k of size 1024 [ 121.998033][ C0] The buggy address is located 24 bytes to the right of [ 121.998033][ C0] allocated 576-byte region [ffff88803019c000, ffff88803019c240) [ 122.013037][ C0] [ 122.015352][ C0] The buggy address belongs to the physical page: [ 122.022980][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30198 [ 122.031948][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 122.040542][ C0] memcg:ffff88803364ea01 [ 122.047024][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 122.054587][ C0] page_type: f5(slab) [ 122.058687][ C0] raw: 00fff00000000040 ffff88801a44b280 ffffea0000c26000 0000000000000002 [ 122.067815][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff88803364ea01 [ 122.076665][ C0] head: 00fff00000000040 ffff88801a44b280 ffffea0000c26000 0000000000000002 [ 122.085445][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 ffff88803364ea01 [ 122.094125][ C0] head: 00fff00000000003 ffffea0000c06601 00000000ffffffff 00000000ffffffff [ 122.102807][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 122.112460][ C0] page dumped because: kasan: bad access detected [ 122.119441][ C0] page_owner tracks the page as allocated [ 122.125400][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5529, tgid 5529 (dhcpcd), ts 79177848787, free_ts 77855014860 [ 122.150375][ C0] post_alloc_hook+0x240/0x2a0 [ 122.155406][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 122.161272][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 122.167446][ C0] alloc_pages_mpol+0x232/0x4a0 [ 122.172302][ C0] allocate_slab+0x8a/0x370 [ 122.177040][ C0] ___slab_alloc+0xbeb/0x1410 [ 122.182333][ C0] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 122.188949][ C0] kmalloc_reserve+0x136/0x290 [ 122.193826][ C0] __alloc_skb+0x142/0x2d0 [ 122.198679][ C0] alloc_skb_with_frags+0xca/0x890 [ 122.204496][ C0] sock_alloc_send_pskb+0x857/0x990 [ 122.209701][ C0] unix_dgram_sendmsg+0x461/0x1850 [ 122.214824][ C0] __sock_sendmsg+0x21c/0x270 [ 122.219500][ C0] sock_write_iter+0x258/0x330 [ 122.224272][ C0] do_iter_readv_writev+0x61c/0x8b0 [ 122.229551][ C0] vfs_writev+0x31a/0x960 [ 122.233959][ C0] page last free pid 5871 tgid 5871 stack trace: [ 122.240366][ C0] __free_frozen_pages+0xbc4/0xd30 [ 122.245637][ C0] __folio_put+0x21b/0x2c0 [ 122.250420][ C0] skb_release_data+0x49a/0x7c0 [ 122.255454][ C0] __kfree_skb+0x55/0x70 [ 122.259780][ C0] tcp_ack+0x1fd2/0x6150 [ 122.264617][ C0] tcp_rcv_established+0xe96/0x1eb0 [ 122.270078][ C0] tcp_v4_do_rcv+0xa23/0xce0 [ 122.274853][ C0] __release_sock+0x21c/0x350 [ 122.279610][ C0] release_sock+0x5f/0x1f0 [ 122.284636][ C0] tcp_sendmsg+0x39/0x50 [ 122.288937][ C0] __sock_sendmsg+0x19c/0x270 [ 122.293628][ C0] sock_write_iter+0x258/0x330 [ 122.298496][ C0] vfs_write+0x5c6/0xb30 [ 122.302750][ C0] ksys_write+0x145/0x250 [ 122.307079][ C0] do_syscall_64+0xfa/0x3b0 [ 122.311602][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.317920][ C0] [ 122.320239][ C0] Memory state around the buggy address: [ 122.326397][ C0] ffff88803019c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.334451][ C0] ffff88803019c180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 122.342735][ C0] >ffff88803019c200: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 122.350868][ C0] ^ [ 122.360310][ C0] ffff88803019c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.369492][ C0] ffff88803019c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.377608][ C0] ================================================================== [ 122.386369][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.393670][ C0] CPU: 0 UID: 0 PID: 6604 Comm: syz.0.549 Not tainted syzkaller #0 PREEMPT(full) [ 122.402989][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.414057][ C0] Call Trace: [ 122.417419][ C0] [ 122.420268][ C0] dump_stack_lvl+0x99/0x250 [ 122.424969][ C0] ? __asan_memcpy+0x40/0x70 [ 122.429732][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.434922][ C0] ? __pfx__printk+0x10/0x10 [ 122.440406][ C0] vpanic+0x281/0x750 [ 122.445977][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 122.451522][ C0] ? __pfx_vpanic+0x10/0x10 [ 122.456140][ C0] ? irqentry_exit+0x74/0x90 [ 122.460738][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.466031][ C0] panic+0xb9/0xc0 [ 122.469753][ C0] ? __pfx_panic+0x10/0x10 [ 122.474273][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 122.480962][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 122.487328][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 122.492497][ C0] check_panic_on_warn+0x89/0xb0 [ 122.497478][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 122.502609][ C0] end_report+0x78/0x160 [ 122.506932][ C0] kasan_report+0x129/0x150 [ 122.511434][ C0] ? __bpf_get_stackid+0x868/0xcf0 [ 122.516980][ C0] ? rcu_core+0xcab/0x1770 [ 122.521489][ C0] __bpf_get_stackid+0x868/0xcf0 [ 122.526684][ C0] ? bpf_prog_b724608cae728045+0x27/0x2f [ 122.532306][ C0] bpf_get_stackid_raw_tp+0x196/0x210 [ 122.539876][ C0] bpf_prog_b724608cae728045+0x27/0x2f [ 122.545546][ C0] bpf_trace_run2+0x281/0x4b0 [ 122.550401][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 122.555774][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 122.560713][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 122.566353][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 122.572074][ C0] ? rcu_core+0xc37/0x1770 [ 122.576680][ C0] ? rcu_core+0xc37/0x1770 [ 122.581326][ C0] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 122.587511][ C0] kfree+0x3a0/0x440 [ 122.591792][ C0] ? rcu_core+0xc37/0x1770 [ 122.596475][ C0] slab_free_after_rcu_debug+0x60/0x2a0 [ 122.602088][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 122.608227][ C0] ? rcu_core+0xc37/0x1770 [ 122.612636][ C0] rcu_core+0xcab/0x1770 [ 122.616965][ C0] ? __pfx_rcu_core+0x10/0x10 [ 122.621726][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 122.627368][ C0] handle_softirqs+0x283/0x870 [ 122.632247][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 122.637102][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 122.642489][ C0] __irq_exit_rcu+0xca/0x1f0 [ 122.647706][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 122.653010][ C0] irq_exit_rcu+0x9/0x30 [ 122.657360][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 122.663010][ C0] [ 122.665947][ C0] [ 122.668876][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.674983][ C0] RIP: 0010:preempt_count_add+0x6/0x1a0 [ 122.681206][ C0] Code: 24 e8 de 25 93 00 eb 8c e9 f1 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 20 93 ab 99 48 c1 [ 122.701502][ C0] RSP: 0018:ffffc90003b6fab0 EFLAGS: 00000246 [ 122.710113][ C0] RAX: 1ffffffff1c31c88 RBX: ffffc90003b6fba0 RCX: ffffffff99ab9303 [ 122.718303][ C0] RDX: ffff88802e511e00 RSI: ffffffff8dba5d03 RDI: 0000000000000001 [ 122.726364][ C0] RBP: ffffc90003b6fc70 R08: ffffc90003b6fbe7 R09: 0000000000000000 [ 122.735422][ C0] R10: ffffc90003b6fbc0 R11: fffff5200076df7d R12: ffffffff8e18e3e0 [ 122.744693][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.752848][ C0] __mutex_lock+0x15c/0x1360 [ 122.757446][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 122.764065][ C0] ? perf_trace_run_bpf_submit+0xee/0x170 [ 122.769800][ C0] ? tracepoint_probe_unregister+0x30/0x9b0 [ 122.775708][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 122.780729][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 122.786094][ C0] ? bpf_link_free+0x9e/0x330 [ 122.790769][ C0] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 122.796238][ C0] tracepoint_probe_unregister+0x30/0x9b0 [ 122.802141][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 122.807873][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 122.813261][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 122.818651][ C0] bpf_raw_tp_link_release+0x43/0x70 [ 122.823931][ C0] bpf_link_free+0xed/0x330 [ 122.828425][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 122.833786][ C0] bpf_link_release+0x6b/0x80 [ 122.838460][ C0] __fput+0x449/0xa70 [ 122.842484][ C0] task_work_run+0x1d1/0x260 [ 122.847086][ C0] ? __pfx_task_work_run+0x10/0x10 [ 122.852286][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 122.857736][ C0] exit_to_user_mode_loop+0xec/0x110 [ 122.863015][ C0] do_syscall_64+0x2bd/0x3b0 [ 122.867610][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.873683][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.879832][ C0] ? clear_bhb_loop+0x60/0xb0 [ 122.884678][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.890582][ C0] RIP: 0033:0x7f4712d8ebe9 [ 122.894988][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.914578][ C0] RSP: 002b:00007ffecd1fea78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 122.922996][ C0] RAX: 0000000000000000 RBX: 000000000001d9ca RCX: 00007f4712d8ebe9 [ 122.930964][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 122.938926][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000005cd1fed6f [ 122.946962][ C0] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007f4712fc5fac [ 122.954922][ C0] R13: 00007f4712fc5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 122.962887][ C0] [ 122.966193][ C0] Kernel Offset: disabled [ 122.970516][ C0] Rebooting in 86400 seconds..