Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
2026/06/14 12:22:13 parsed 1 programs
[ 78.866335][ T5642] cgroup: Unknown subsys name 'net'
[ 78.998840][ T5642] cgroup: Unknown subsys name 'cpuset'
[ 79.008066][ T5642] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 80.359529][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 83.200334][ T5656] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 84.027170][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.035089][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.042251][ T5672] bridge_slave_0: entered allmulticast mode
[ 84.049927][ T5672] bridge_slave_0: entered promiscuous mode
[ 84.058943][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.066185][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.073330][ T5672] bridge_slave_1: entered allmulticast mode
[ 84.080586][ T5672] bridge_slave_1: entered promiscuous mode
[ 84.104677][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.116235][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.142078][ T5672] team0: Port device team_slave_0 added
[ 84.149544][ T5672] team0: Port device team_slave_1 added
[ 84.170893][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.177865][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 84.203925][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.216620][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.223569][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 84.249803][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.286815][ T5672] hsr_slave_0: entered promiscuous mode
[ 84.293207][ T5672] hsr_slave_1: entered promiscuous mode
[ 84.415034][ T5672] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.427421][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 84.435890][ T5672] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.445330][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 84.453034][ T5672] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.463191][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 84.472002][ T5672] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.482847][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 84.509905][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.517339][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.525227][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.532304][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.581196][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.600033][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.609304][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.625944][ T5672] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.638226][ T765] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.645384][ T765] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.658429][ T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.665576][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.940424][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.987325][ T5672] veth0_vlan: entered promiscuous mode
[ 84.999107][ T5672] veth1_vlan: entered promiscuous mode
[ 85.028139][ T5672] veth0_macvtap: entered promiscuous mode
[ 85.038371][ T5672] veth1_macvtap: entered promiscuous mode
[ 85.056256][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.071140][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.086894][ T765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.101811][ T765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.111485][ T765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.122026][ T765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.258287][ T1117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.322268][ T1117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.378677][ T1117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.408974][ T765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.421426][ T765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.450322][ T1117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.476395][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.484740][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.638537][ T9] cfg80211: failed to load regulatory.db
[ 87.399820][ T4949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.410303][ T4949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.418814][ T4949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.428384][ T4949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.436560][ T4949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/06/14 12:22:24 executed programs: 0
[ 87.968920][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.980450][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.988832][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.999720][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.007905][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.109449][ T1117] bridge_slave_1: left allmulticast mode
[ 88.116486][ T1117] bridge_slave_1: left promiscuous mode
[ 88.124164][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.141133][ T1117] bridge_slave_0: left allmulticast mode
[ 88.153647][ T1117] bridge_slave_0: left promiscuous mode
[ 88.159524][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.427643][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 88.439412][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 88.450478][ T1117] bond0 (unregistering): Released all slaves
[ 88.552943][ T1117] hsr_slave_0: left promiscuous mode
[ 88.560499][ T1117] hsr_slave_1: left promiscuous mode
[ 88.567730][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 88.575412][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 88.584283][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 88.591863][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 88.611340][ T1117] veth1_macvtap: left promiscuous mode
[ 88.617909][ T1117] veth0_macvtap: left promiscuous mode
[ 88.623515][ T1117] veth1_vlan: left promiscuous mode
[ 88.628997][ T1117] veth0_vlan: left promiscuous mode
[ 88.791951][ T1117] team0 (unregistering): Port device team_slave_1 removed
[ 88.809333][ T1117] team0 (unregistering): Port device team_slave_0 removed
[ 88.925050][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1
[ 89.443105][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.450403][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.458016][ T5767] bridge_slave_0: entered allmulticast mode
[ 89.465981][ T5767] bridge_slave_0: entered promiscuous mode
[ 89.475466][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.482680][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.490473][ T5767] bridge_slave_1: entered allmulticast mode
[ 89.498760][ T5767] bridge_slave_1: entered promiscuous mode
[ 89.536059][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.549891][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.913384][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2
[ 89.933834][ T5767] team0: Port device team_slave_0 added
[ 89.942405][ T5767] team0: Port device team_slave_1 added
[ 89.986829][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.993792][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.020540][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.033659][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.046251][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.074192][ T50] Bluetooth: hci0: command tx timeout
[ 90.080688][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.164936][ T5767] hsr_slave_0: entered promiscuous mode
[ 90.181477][ T5767] hsr_slave_1: entered promiscuous mode
[ 90.653033][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3
[ 90.994952][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.007221][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 91.016570][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.031544][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 91.041242][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.057527][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 91.067267][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.077244][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 91.242786][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.290067][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.303124][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.310328][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.340021][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.347267][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.815662][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.876346][ T5767] veth0_vlan: entered promiscuous mode
[ 91.891194][ T5767] veth1_vlan: entered promiscuous mode
[ 91.935901][ T5767] veth0_macvtap: entered promiscuous mode
[ 91.946709][ T5767] veth1_macvtap: entered promiscuous mode
[ 91.969353][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.988305][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.009032][ T1117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.027558][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.048035][ T1117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.085907][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.136686][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.144789][ T50] Bluetooth: hci0: command tx timeout
[ 92.169330][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.208973][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.218283][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/14 12:22:29 executed programs: 4
[ 93.026540][ T5908] ==================================================================
[ 93.034641][ T5908] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x8d3/0xf30
[ 93.042475][ T5908] Read of size 4 at addr ffff88807e116828 by task syz.0.19/5908
[ 93.050102][ T5908]
[ 93.052442][ T5908] CPU: 1 UID: 0 PID: 5908 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 93.052462][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 93.052478][ T5908] Call Trace:
[ 93.052485][ T5908]
[ 93.052496][ T5908] dump_stack_lvl+0xe8/0x150
[ 93.052519][ T5908] print_address_description+0x55/0x1e0
[ 93.052538][ T5908] ? __sk_msg_recvmsg+0x8d3/0xf30
[ 93.052560][ T5908] print_report+0x58/0x70
[ 93.052576][ T5908] kasan_report+0x117/0x150
[ 93.052601][ T5908] ? __sk_msg_recvmsg+0x8d3/0xf30
[ 93.052627][ T5908] __sk_msg_recvmsg+0x8d3/0xf30
[ 93.052654][ T5908] ? sk_psock_get+0x7a/0x440
[ 93.052677][ T5908] udp_bpf_recvmsg+0x18b/0xa90
[ 93.052700][ T5908] ? aa_sk_perm+0x6d5/0x900
[ 93.052725][ T5908] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 93.052745][ T5908] ? __lock_acquire+0x683/0x2cd0
[ 93.052762][ T5908] ? sock_rps_record_flow+0x19/0x350
[ 93.052781][ T5908] ? inet_recvmsg+0x101/0x120
[ 93.052798][ T5908] ? __pfx_inet_recvmsg+0x10/0x10
[ 93.052816][ T5908] sock_recvmsg+0x155/0x1b0
[ 93.052837][ T5908] ____sys_recvmsg+0x1e6/0x4a0
[ 93.052866][ T5908] ? __pfx_____sys_recvmsg+0x10/0x10
[ 93.052897][ T5908] ? import_iovec+0x73/0xa0
[ 93.052918][ T5908] ___sys_recvmsg+0x213/0x590
[ 93.052933][ T5908] ? page_table_check_set+0x126/0x510
[ 93.052958][ T5908] ? __pfx____sys_recvmsg+0x10/0x10
[ 93.052976][ T5908] ? __fget_files+0x2a/0x420
[ 93.053004][ T5908] ? __fget_files+0x3a2/0x420
[ 93.053028][ T5908] do_recvmmsg+0x329/0x810
[ 93.053048][ T5908] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.053070][ T5908] ? __pfx_do_recvmmsg+0x10/0x10
[ 93.053086][ T5908] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 93.053107][ T5908] ? __might_fault+0xaf/0x130
[ 93.053135][ T5908] ? lockdep_hardirqs_on+0x7a/0x110
[ 93.053170][ T5908] __x64_sys_recvmmsg+0x198/0x250
[ 93.053188][ T5908] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 93.053209][ T5908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.053227][ T5908] do_syscall_64+0x174/0x580
[ 93.053243][ T5908] ? trace_irq_disable+0x3b/0x140
[ 93.053266][ T5908] ? clear_bhb_loop+0x40/0x90
[ 93.053285][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.053302][ T5908] RIP: 0033:0x7fab9339ce59
[ 93.053322][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.053336][ T5908] RSP: 002b:00007fab94214028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 93.053354][ T5908] RAX: ffffffffffffffda RBX: 00007fab93616090 RCX: 00007fab9339ce59
[ 93.053367][ T5908] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003
[ 93.053378][ T5908] RBP: 00007fab93432d6f R08: 0000000000000000 R09: 0000000000000000
[ 93.053389][ T5908] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[ 93.053400][ T5908] R13: 00007fab93616128 R14: 00007fab93616090 R15: 00007ffd8b347018
[ 93.053421][ T5908]
[ 93.053427][ T5908]
[ 93.338290][ T5908] Allocated by task 5907:
[ 93.342598][ T5908] kasan_save_track+0x3e/0x80
[ 93.347267][ T5908] __kasan_kmalloc+0x93/0xb0
[ 93.351844][ T5908] __kmalloc_cache_noprof+0x318/0x660
[ 93.357199][ T5908] sk_psock_skb_ingress_self+0x5e/0x320
[ 93.362734][ T5908] sk_psock_verdict_recv+0x7e4/0x8f0
[ 93.368006][ T5908] udp_read_skb+0x5f4/0x6d0
[ 93.372496][ T5908] sk_psock_verdict_data_ready+0x470/0x960
[ 93.378290][ T5908] __udp_enqueue_schedule_skb+0xc26/0x12d0
[ 93.384166][ T5908] udp_queue_rcv_one_skb+0x750/0x10e0
[ 93.389531][ T5908] __udp4_lib_mcast_deliver+0xace/0xb60
[ 93.395064][ T5908] udp_rcv+0xd3e/0x1db0
[ 93.399204][ T5908] ip_protocol_deliver_rcu+0x27e/0x440
[ 93.404649][ T5908] ip_local_deliver_finish+0x3bb/0x6f0
[ 93.410131][ T5908] NF_HOOK+0x336/0x3c0
[ 93.414187][ T5908] ip_sublist_rcv_finish+0x1f0/0x240
[ 93.419459][ T5908] ip_sublist_rcv+0x5cc/0xa70
[ 93.424124][ T5908] ip_list_rcv+0x3ec/0x440
[ 93.428544][ T5908] __netif_receive_skb_list_core+0x804/0x830
[ 93.434520][ T5908] netif_receive_skb_list_internal+0x995/0xcf0
[ 93.440680][ T5908] netif_receive_skb_list+0x55/0x450
[ 93.445950][ T5908] bpf_test_run_xdp_live+0x187e/0x1c20
[ 93.451396][ T5908] bpf_prog_test_run_xdp+0x7d8/0x11d0
[ 93.456750][ T5908] bpf_prog_test_run+0x2c5/0x340
[ 93.461691][ T5908] __sys_bpf+0x643/0x950
[ 93.465918][ T5908] __x64_sys_bpf+0x7c/0x90
[ 93.470316][ T5908] do_syscall_64+0x174/0x580
[ 93.474885][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.480758][ T5908]
[ 93.483060][ T5908] Freed by task 5909:
[ 93.487364][ T5908] kasan_save_track+0x3e/0x80
[ 93.492024][ T5908] kasan_save_free_info+0x40/0x50
[ 93.497031][ T5908] __kasan_slab_free+0x5c/0x80
[ 93.501781][ T5908] kfree+0x1c5/0x640
[ 93.505661][ T5908] __sk_msg_recvmsg+0xd2d/0xf30
[ 93.510508][ T5908] udp_bpf_recvmsg+0x18b/0xa90
[ 93.515250][ T5908] sock_recvmsg+0x155/0x1b0
[ 93.519736][ T5908] ____sys_recvmsg+0x1e6/0x4a0
[ 93.524492][ T5908] ___sys_recvmsg+0x213/0x590
[ 93.529152][ T5908] do_recvmmsg+0x329/0x810
[ 93.533550][ T5908] __x64_sys_recvmmsg+0x198/0x250
[ 93.538557][ T5908] do_syscall_64+0x174/0x580
[ 93.543131][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.549090][ T5908]
[ 93.551400][ T5908] The buggy address belongs to the object at ffff88807e116800
[ 93.551400][ T5908] which belongs to the cache kmalloc-1k of size 1024
[ 93.565431][ T5908] The buggy address is located 40 bytes inside of
[ 93.565431][ T5908] freed 1024-byte region [ffff88807e116800, ffff88807e116c00)
[ 93.579205][ T5908]
[ 93.581518][ T5908] The buggy address belongs to the physical page:
[ 93.587915][ T5908] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e110
[ 93.596661][ T5908] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 93.605142][ T5908] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 93.612674][ T5908] page_type: f5(slab)
[ 93.616635][ T5908] raw: 00fff00000000040 ffff88813fe18dc0 dead000000000100 dead000000000122
[ 93.625198][ T5908] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 93.633762][ T5908] head: 00fff00000000040 ffff88813fe18dc0 dead000000000100 dead000000000122
[ 93.642411][ T5908] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 93.651059][ T5908] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 93.659709][ T5908] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 93.668360][ T5908] page dumped because: kasan: bad access detected
[ 93.674797][ T5908] page_owner tracks the page as allocated
[ 93.680492][ T5908] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5907, tgid 5906 (syz.0.19), ts 92967997504, free_ts 92967731187
[ 93.700871][ T5908] post_alloc_hook+0x22d/0x280
[ 93.705626][ T5908] get_page_from_freelist+0x24ae/0x2530
[ 93.711158][ T5908] __alloc_frozen_pages_noprof+0x18d/0x380
[ 93.716949][ T5908] allocate_slab+0x77/0x660
[ 93.721429][ T5908] refill_objects+0x336/0x3d0
[ 93.726088][ T5908] __pcs_replace_empty_main+0x320/0x720
[ 93.731610][ T5908] __kmalloc_cache_node_noprof+0x44a/0x690
[ 93.737662][ T5908] sk_psock_init+0x130/0x6e0
[ 93.742241][ T5908] sock_map_link+0x653/0xd60
[ 93.746807][ T5908] sock_map_update_common+0xd7/0x5f0
[ 93.752079][ T5908] sock_map_update_elem_sys+0x31e/0x4d0
[ 93.757609][ T5908] map_update_elem+0x5fa/0x9d0
[ 93.762356][ T5908] __sys_bpf+0x6fa/0x950
[ 93.766583][ T5908] __x64_sys_bpf+0x7c/0x90
[ 93.770982][ T5908] do_syscall_64+0x174/0x580
[ 93.775551][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.781425][ T5908] page last free pid 5907 tgid 5906 stack trace:
[ 93.787728][ T5908] __free_frozen_pages+0xc0d/0xd20
[ 93.792824][ T5908] bpf_check+0x39e1/0x4c30
[ 93.797224][ T5908] bpf_prog_load+0x1419/0x1a10
[ 93.801970][ T5908] __sys_bpf+0x618/0x950
[ 93.806200][ T5908] __x64_sys_bpf+0x7c/0x90
[ 93.810618][ T5908] do_syscall_64+0x174/0x580
[ 93.815191][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.821065][ T5908]
[ 93.823367][ T5908] Memory state around the buggy address:
[ 93.828973][ T5908] ffff88807e116700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 93.837012][ T5908] ffff88807e116780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 93.845049][ T5908] >ffff88807e116800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.853089][ T5908] ^
[ 93.858432][ T5908] ffff88807e116880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.866470][ T5908] ffff88807e116900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 93.874509][ T5908] ==================================================================
[ 93.935152][ T5908] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.942391][ T5908] CPU: 1 UID: 0 PID: 5908 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 93.951506][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 93.961568][ T5908] Call Trace:
[ 93.964856][ T5908]
[ 93.967787][ T5908] vpanic+0x56c/0xa60
[ 93.971778][ T5908] ? __pfx_vpanic+0x10/0x10
[ 93.976291][ T5908] panic+0xc5/0xd0
[ 93.980021][ T5908] ? __pfx_panic+0x10/0x10
[ 93.984444][ T5908] ? preempt_schedule_thunk+0x16/0x30
[ 93.989827][ T5908] ? preempt_schedule_thunk+0x16/0x30
[ 93.995210][ T5908] ? __sk_msg_recvmsg+0x8d3/0xf30
[ 94.000242][ T5908] check_panic_on_warn+0x89/0xb0
[ 94.005187][ T5908] ? __sk_msg_recvmsg+0x8d3/0xf30
[ 94.010222][ T5908] end_report+0x73/0x170
[ 94.014474][ T5908] ? __sk_msg_recvmsg+0x8d3/0xf30
[ 94.019507][ T5908] kasan_report+0x128/0x150
[ 94.024041][ T5908] ? __sk_msg_recvmsg+0x8d3/0xf30
[ 94.029087][ T5908] __sk_msg_recvmsg+0x8d3/0xf30
[ 94.033971][ T5908] ? sk_psock_get+0x7a/0x440
[ 94.038577][ T5908] udp_bpf_recvmsg+0x18b/0xa90
[ 94.043350][ T5908] ? aa_sk_perm+0x6d5/0x900
[ 94.047860][ T5908] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 94.053149][ T5908] ? __lock_acquire+0x683/0x2cd0
[ 94.058098][ T5908] ? sock_rps_record_flow+0x19/0x350
[ 94.063387][ T5908] ? inet_recvmsg+0x101/0x120
[ 94.068071][ T5908] ? __pfx_inet_recvmsg+0x10/0x10
[ 94.073093][ T5908] sock_recvmsg+0x155/0x1b0
[ 94.077601][ T5908] ____sys_recvmsg+0x1e6/0x4a0
[ 94.082377][ T5908] ? __pfx_____sys_recvmsg+0x10/0x10
[ 94.087678][ T5908] ? import_iovec+0x73/0xa0
[ 94.092188][ T5908] ___sys_recvmsg+0x213/0x590
[ 94.096866][ T5908] ? page_table_check_set+0x126/0x510
[ 94.102249][ T5908] ? __pfx____sys_recvmsg+0x10/0x10
[ 94.107453][ T5908] ? __fget_files+0x2a/0x420
[ 94.112061][ T5908] ? __fget_files+0x3a2/0x420
[ 94.116740][ T5908] do_recvmmsg+0x329/0x810
[ 94.121150][ T5908] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.126170][ T5908] ? __pfx_do_recvmmsg+0x10/0x10
[ 94.131094][ T5908] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.136455][ T5908] ? __might_fault+0xaf/0x130
[ 94.141124][ T5908] ? lockdep_hardirqs_on+0x7a/0x110
[ 94.146315][ T5908] __x64_sys_recvmmsg+0x198/0x250
[ 94.151326][ T5908] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 94.156858][ T5908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.162906][ T5908] do_syscall_64+0x174/0x580
[ 94.167481][ T5908] ? trace_irq_disable+0x3b/0x140
[ 94.172493][ T5908] ? clear_bhb_loop+0x40/0x90
[ 94.177152][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.183027][ T5908] RIP: 0033:0x7fab9339ce59
[ 94.187424][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.207361][ T5908] RSP: 002b:00007fab94214028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 94.216467][ T5908] RAX: ffffffffffffffda RBX: 00007fab93616090 RCX: 00007fab9339ce59
[ 94.224451][ T5908] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003
[ 94.232423][ T5908] RBP: 00007fab93432d6f R08: 0000000000000000 R09: 0000000000000000
[ 94.240390][ T5908] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[ 94.248359][ T5908] R13: 00007fab93616128 R14: 00007fab93616090 R15: 00007ffd8b347018
[ 94.256330][ T5908]
[ 94.259679][ T5908] Kernel Offset: disabled
[ 94.264011][ T5908] Rebooting in 86400 seconds..