no interfaces have a carrier
[ 57.230118][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0
[ 57.253395][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts.
2026/09/17 23:52:41 parsed 1 programs
2026/09/17 23:52:41 serving rpc on tcp://40371
syzkaller login: [ 88.872121][ T5784] cgroup: Unknown subsys name 'net'
[ 89.009018][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 90.787694][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.952636][ T1192] cfg80211: failed to load regulatory.db
[ 92.884026][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.898592][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.910031][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.918990][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.929067][ T5808] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 92.937048][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.232523][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.241106][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.275783][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.283773][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.822444][ T5854] chnl_net:caif_netlink_parms(): no params data found
[ 95.907400][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.915728][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.923345][ T5854] bridge_slave_0: entered allmulticast mode
[ 95.933509][ T5854] bridge_slave_0: entered promiscuous mode
[ 95.953441][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.960683][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.967828][ T5854] bridge_slave_1: entered allmulticast mode
[ 95.975079][ T5854] bridge_slave_1: entered promiscuous mode
[ 96.012079][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.024441][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.065905][ T5854] team0: Port device team_slave_0 added
[ 96.074328][ T5854] team0: Port device team_slave_1 added
[ 96.101517][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.108520][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.134870][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.157472][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.164583][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.191976][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.244436][ T5854] hsr_slave_0: entered promiscuous mode
[ 96.251792][ T5854] hsr_slave_1: entered promiscuous mode
[ 96.434972][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.447778][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.459596][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.471722][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.513865][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.521256][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.529144][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.536420][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.597843][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.618551][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.628403][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.647397][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.666096][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.673306][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.696526][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.703682][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.919853][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.966199][ T5854] veth0_vlan: entered promiscuous mode
[ 96.982817][ T5854] veth1_vlan: entered promiscuous mode
[ 97.021581][ T5854] veth0_macvtap: entered promiscuous mode
[ 97.031523][ T5854] veth1_macvtap: entered promiscuous mode
[ 97.049943][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.068911][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.086393][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.095474][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.105360][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.115715][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.344571][ T1074] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/17 23:52:53 executed programs: 0
[ 98.761212][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.769474][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.779252][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.787819][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.795691][ T5808] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 98.803717][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.958821][ T5890] chnl_net:caif_netlink_parms(): no params data found
[ 99.037626][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.044946][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.052383][ T5890] bridge_slave_0: entered allmulticast mode
[ 99.059522][ T5890] bridge_slave_0: entered promiscuous mode
[ 99.068403][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.076175][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.083754][ T5890] bridge_slave_1: entered allmulticast mode
[ 99.091270][ T5890] bridge_slave_1: entered promiscuous mode
[ 99.123554][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.135232][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.168060][ T5890] team0: Port device team_slave_0 added
[ 99.176542][ T5890] team0: Port device team_slave_1 added
[ 99.207137][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.214536][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.241316][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.254346][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.261363][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.287520][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.332324][ T5890] hsr_slave_0: entered promiscuous mode
[ 99.338741][ T5890] hsr_slave_1: entered promiscuous mode
[ 99.345357][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 99.353335][ T5890] Cannot create hsr debugfs directory
[ 99.653283][ T1074] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.831510][ T5808] Bluetooth: hci0: command tx timeout
[ 102.062271][ T1074] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.143964][ T1074] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.912344][ T5808] Bluetooth: hci0: command tx timeout
[ 103.067191][ T1074] hsr_slave_0: left promiscuous mode
[ 103.074420][ T1074] hsr_slave_1: left promiscuous mode
[ 103.082492][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 103.089984][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 103.099316][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 103.108100][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.116346][ T1074] bridge_slave_1: left allmulticast mode
[ 103.122430][ T1074] bridge_slave_1: left promiscuous mode
[ 103.129133][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.143932][ T1074] bridge_slave_0: left allmulticast mode
[ 103.149609][ T1074] bridge_slave_0: left promiscuous mode
[ 103.162362][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.192507][ T1074] veth1_macvtap: left promiscuous mode
[ 103.198500][ T1074] veth0_macvtap: left promiscuous mode
[ 103.206580][ T1074] veth1_vlan: left promiscuous mode
[ 103.212256][ T1074] veth0_vlan: left promiscuous mode
[ 103.714836][ T1074] team0 (unregistering): Port device team_slave_1 removed
[ 103.748720][ T1074] team0 (unregistering): Port device team_slave_0 removed
[ 103.786541][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 103.817522][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.043756][ T1074] bond0 (unregistering): Released all slaves
[ 104.152369][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.162664][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.176725][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.188147][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.295476][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.326170][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.342971][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.350101][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.365621][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.372840][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.642295][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.689619][ T5890] veth0_vlan: entered promiscuous mode
[ 104.703419][ T5890] veth1_vlan: entered promiscuous mode
[ 104.734073][ T5890] veth0_macvtap: entered promiscuous mode
[ 104.744461][ T5890] veth1_macvtap: entered promiscuous mode
[ 104.783153][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.799295][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.813078][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.822432][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.831696][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.840900][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.944404][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.956832][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/17 23:53:00 executed programs: 2
[ 105.000777][ T5808] Bluetooth: hci0: command tx timeout
[ 105.014916][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.025260][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.099463][ T5929] ==================================================================
[ 105.107589][ T5929] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720
[ 105.116497][ T5929] Write of size 4 at addr ffff88802e738b30 by task syz.0.17/5929
[ 105.124274][ T5929]
[ 105.126618][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 105.133811][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 105.143882][ T5929] Call Trace:
[ 105.147181][ T5929]
[ 105.150110][ T5929] dump_stack_lvl+0x18c/0x250
[ 105.154803][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 105.159844][ T5929] ? show_regs_print_info+0x20/0x20
[ 105.165068][ T5929] ? load_image+0x420/0x420
[ 105.169593][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 105.174708][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 105.179822][ T5929] ? __virt_addr_valid+0x10c/0x380
[ 105.184987][ T5929] print_report+0xa8/0x210
[ 105.189464][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 105.195637][ T5929] kasan_report+0x117/0x150
[ 105.200154][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 105.206327][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 105.212323][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 105.217443][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 105.222565][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 105.227781][ T5929] ? perf_reg_abi+0x62/0x90
[ 105.232298][ T5929] __bpf_get_stackid+0x564/0x900
[ 105.237277][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 105.242318][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 105.247786][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 105.252996][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 105.258291][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 105.263605][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 105.269856][ T5929] __perf_event_overflow+0x461/0x660
[ 105.275155][ T5929] perf_swevent_event+0x319/0x570
[ 105.280205][ T5929] ? perf_tp_event+0x1550/0x1550
[ 105.285219][ T5929] ___perf_sw_event+0x4ab/0x730
[ 105.290078][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 105.295110][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 105.301556][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 105.306588][ T5929] ? rep_movs_alternative+0x33/0x90
[ 105.311807][ T5929] ? verify_lock_unused+0x140/0x140
[ 105.317014][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 105.322999][ T5929] ? arch_stack_walk+0x160/0x190
[ 105.327937][ T5929] ? lock_chain_count+0x20/0x20
[ 105.332790][ T5929] __perf_sw_event+0x139/0x270
[ 105.337575][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 105.342789][ T5929] ? rcu_is_watching+0x15/0xb0
[ 105.347565][ T5929] exc_page_fault+0x64/0x100
[ 105.352160][ T5929] asm_exc_page_fault+0x26/0x30
[ 105.357025][ T5929] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 105.362846][ T5929] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 105.382464][ T5929] RSP: 0018:ffffc90002e7f310 EFLAGS: 00050206
[ 105.388537][ T5929] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[ 105.396511][ T5929] RDX: 0000000000000000 RSI: ffff88807898068c RDI: 000020000000cf3d
[ 105.404491][ T5929] RBP: ffff888078980668 R08: ffff888078980696 R09: 1ffff1100f1300d2
[ 105.412486][ T5929] R10: dffffc0000000000 R11: ffffed100f1300d3 R12: 000020000000cf48
[ 105.420469][ T5929] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88807898068c
[ 105.428452][ T5929] _copy_to_user+0x85/0xa0
[ 105.432881][ T5929] bpf_verifier_vlog+0x2f1/0x840
[ 105.437835][ T5929] verbose+0x11e/0x1a0
[ 105.441930][ T5929] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 105.447480][ T5929] ? kvmalloc_node+0x70/0x180
[ 105.452167][ T5929] ? add_subprog+0x2c0/0x3d0
[ 105.456763][ T5929] bpf_check+0x305c/0xec40
[ 105.461193][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 105.466220][ T5929] ? bpf_get_btf_vmlinux+0x20/0x20
[ 105.471350][ T5929] ? __lock_acquire+0x1262/0x7d80
[ 105.476435][ T5929] ? mark_lock+0x94/0x320
[ 105.480799][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 105.485883][ T5929] ? verify_lock_unused+0x140/0x140
[ 105.491087][ T5929] ? verify_lock_unused+0x140/0x140
[ 105.496306][ T5929] ? verify_lock_unused+0x140/0x140
[ 105.501529][ T5929] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 105.507381][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 105.513379][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 105.518412][ T5929] ? lock_chain_count+0x20/0x20
[ 105.523272][ T5929] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 105.529520][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 105.534726][ T5929] ? ktime_get_with_offset+0x103/0x330
[ 105.540186][ T5929] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 105.546476][ T5929] ? ktime_get_real_ts64+0x440/0x440
[ 105.551781][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 105.557014][ T5929] ? bpf_obj_name_cpy+0x194/0x1e0
[ 105.562042][ T5929] bpf_prog_load+0x10fa/0x1610
[ 105.566820][ T5929] ? map_freeze+0x420/0x420
[ 105.571357][ T5929] ? __might_fault+0xaa/0x120
[ 105.576035][ T5929] ? __might_fault+0xc6/0x120
[ 105.580716][ T5929] ? __might_fault+0xaa/0x120
[ 105.585419][ T5929] ? bpf_lsm_bpf+0x9/0x10
[ 105.589772][ T5929] ? security_bpf+0x7e/0xa0
[ 105.594278][ T5929] __sys_bpf+0x5ba/0x890
[ 105.598526][ T5929] ? bpf_link_show_fdinfo+0x560/0x560
[ 105.603926][ T5929] ? lock_chain_count+0x20/0x20
[ 105.608807][ T5929] __x64_sys_bpf+0x7c/0x90
[ 105.613242][ T5929] do_syscall_64+0x55/0xb0
[ 105.617661][ T5929] ? clear_bhb_loop+0x40/0x90
[ 105.622374][ T5929] ? clear_bhb_loop+0x40/0x90
[ 105.627075][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 105.632973][ T5929] RIP: 0033:0x7fe65b99e159
[ 105.637387][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.656994][ T5929] RSP: 002b:00007ffee168b4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 105.665412][ T5929] RAX: ffffffffffffffda RBX: 00007fe65bc25fa0 RCX: 00007fe65b99e159
[ 105.673394][ T5929] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 105.681376][ T5929] RBP: 00007fe65ba3506b R08: 0000000000000000 R09: 0000000000000000
[ 105.689390][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.697374][ T5929] R13: 00007fe65bc25fac R14: 00007fe65bc25fa0 R15: 00007fe65bc25fa0
[ 105.705382][ T5929]
[ 105.708436][ T5929]
[ 105.710758][ T5929] Allocated by task 5929:
[ 105.715079][ T5929] kasan_set_track+0x4e/0x70
[ 105.719686][ T5929] __kasan_kmalloc+0x8f/0xa0
[ 105.724302][ T5929] __kmalloc_node+0xb6/0x240
[ 105.728911][ T5929] bpf_map_area_alloc+0x5e/0x110
[ 105.733863][ T5929] prealloc_elems_and_freelist+0x86/0x1c0
[ 105.739594][ T5929] stack_map_alloc+0x32b/0x4b0
[ 105.744367][ T5929] map_create+0x877/0x12f0
[ 105.748790][ T5929] __sys_bpf+0x651/0x890
[ 105.753035][ T5929] __x64_sys_bpf+0x7c/0x90
[ 105.757454][ T5929] do_syscall_64+0x55/0xb0
[ 105.761876][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 105.767770][ T5929]
[ 105.770093][ T5929] The buggy address belongs to the object at ffff88802e738800
[ 105.770093][ T5929] which belongs to the cache kmalloc-cg-1k of size 1024
[ 105.784490][ T5929] The buggy address is located 0 bytes to the right of
[ 105.784490][ T5929] allocated 816-byte region [ffff88802e738800, ffff88802e738b30)
[ 105.799001][ T5929]
[ 105.801337][ T5929] The buggy address belongs to the physical page:
[ 105.807772][ T5929] page:ffffea0000b9ce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802e73f800 pfn:0x2e738
[ 105.819263][ T5929] head:ffffea0000b9ce00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 105.828228][ T5929] memcg:ffff88801eb6a401
[ 105.832468][ T5929] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 105.840459][ T5929] page_type: 0xffffffff()
[ 105.844814][ T5929] raw: 00fff00000000840 ffff888017c4f280 ffffea0000b48000 0000000000000002
[ 105.853399][ T5929] raw: ffff88802e73f800 0000000080100005 00000001ffffffff ffff88801eb6a401
[ 105.861978][ T5929] page dumped because: kasan: bad access detected
[ 105.868391][ T5929] page_owner tracks the page as allocated
[ 105.874116][ T5929] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5433, tgid 5433 (dhcpcd), ts 72834193337, free_ts 72833135233
[ 105.894997][ T5929] post_alloc_hook+0x1c1/0x200
[ 105.899775][ T5929] get_page_from_freelist+0x2181/0x22a0
[ 105.905319][ T5929] __alloc_pages+0x1f0/0x460
[ 105.909925][ T5929] alloc_slab_page+0x5d/0x180
[ 105.914631][ T5929] new_slab+0x87/0x2d0
[ 105.918706][ T5929] ___slab_alloc+0xc5c/0x12f0
[ 105.923384][ T5929] __kmem_cache_alloc_node+0x11f/0x250
[ 105.928851][ T5929] __kmalloc_node_track_caller+0xa4/0x230
[ 105.934580][ T5929] kmalloc_reserve+0x116/0x240
[ 105.939384][ T5929] __alloc_skb+0x138/0x2c0
[ 105.943836][ T5929] alloc_skb_with_frags+0xcd/0x7a0
[ 105.948956][ T5929] sock_alloc_send_pskb+0x883/0x9a0
[ 105.954177][ T5929] unix_dgram_sendmsg+0x5a9/0x16e0
[ 105.959326][ T5929] sock_write_iter+0x2dc/0x420
[ 105.964120][ T5929] do_iter_write+0x747/0xc50
[ 105.968740][ T5929] do_writev+0x27f/0x480
[ 105.972987][ T5929] page last free stack trace:
[ 105.977657][ T5929] free_unref_page_prepare+0x7d7/0x8f0
[ 105.983119][ T5929] free_unref_page+0x32/0x2e0
[ 105.987801][ T5929] free_large_kmalloc+0x101/0x1b0
[ 105.992831][ T5929] skb_release_data+0x609/0x7f0
[ 105.997688][ T5929] consume_skb+0xb2/0x110
[ 106.002026][ T5929] netlink_recvmsg+0x5e7/0xe60
[ 106.006803][ T5929] ____sys_recvmsg+0x2bd/0x5d0
[ 106.011582][ T5929] ___sys_recvmsg+0x214/0x590
[ 106.016286][ T5929] __x64_sys_recvmsg+0x21e/0x2f0
[ 106.021240][ T5929] do_syscall_64+0x55/0xb0
[ 106.025667][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.031572][ T5929]
[ 106.033898][ T5929] Memory state around the buggy address:
[ 106.039519][ T5929] ffff88802e738a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 106.047609][ T5929] ffff88802e738a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 106.055681][ T5929] >ffff88802e738b00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 106.063742][ T5929] ^
[ 106.069371][ T5929] ffff88802e738b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 106.077434][ T5929] ffff88802e738c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 106.085508][ T5929] ==================================================================
[ 106.093569][ T5929] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 106.100761][ T5929] CPU: 1 PID: 5929 Comm: syz.0.17 Not tainted syzkaller #0
[ 106.107954][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 106.118011][ T5929] Call Trace:
[ 106.121298][ T5929]
[ 106.124244][ T5929] dump_stack_lvl+0x18c/0x250
[ 106.128938][ T5929] ? show_regs_print_info+0x20/0x20
[ 106.134159][ T5929] ? load_image+0x420/0x420
[ 106.138680][ T5929] panic+0x2ca/0x720
[ 106.142585][ T5929] ? bpf_jit_dump+0xd0/0xd0
[ 106.147089][ T5929] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 106.152987][ T5929] ? _raw_spin_unlock+0x40/0x40
[ 106.157865][ T5929] ? print_memory_metadata+0x314/0x400
[ 106.163355][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.169522][ T5929] check_panic_on_warn+0x84/0xa0
[ 106.174472][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.180638][ T5929] end_report+0x6f/0x130
[ 106.184890][ T5929] kasan_report+0x128/0x150
[ 106.189421][ T5929] ? stack_map_get_build_id_offset+0x6c0/0x720
[ 106.195602][ T5929] stack_map_get_build_id_offset+0x6c0/0x720
[ 106.201645][ T5929] ? pcpu_freelist_pop+0x12a/0x190
[ 106.206800][ T5929] ? __bpf_get_stackid+0x900/0x900
[ 106.211945][ T5929] ? perf_get_regs_user+0x5bb/0x6b0
[ 106.217173][ T5929] ? perf_reg_abi+0x62/0x90
[ 106.221714][ T5929] __bpf_get_stackid+0x564/0x900
[ 106.226711][ T5929] bpf_get_stackid_pe+0x343/0x410
[ 106.231777][ T5929] bpf_prog_2414a5d5030ea31b+0x29/0x2d
[ 106.237267][ T5929] bpf_overflow_handler+0x1fc/0x510
[ 106.242507][ T5929] ? bpf_overflow_handler+0xde/0x510
[ 106.247847][ T5929] ? tp_perf_event_destroy+0x20/0x20
[ 106.253171][ T5929] ? __perf_event_account_interrupt+0x187/0x280
[ 106.259450][ T5929] __perf_event_overflow+0x461/0x660
[ 106.264773][ T5929] perf_swevent_event+0x319/0x570
[ 106.269809][ T5929] ? perf_tp_event+0x1550/0x1550
[ 106.274762][ T5929] ___perf_sw_event+0x4ab/0x730
[ 106.279622][ T5929] ? ___perf_sw_event+0x19e/0x730
[ 106.284659][ T5929] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 106.291086][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 106.296121][ T5929] ? rep_movs_alternative+0x33/0x90
[ 106.301336][ T5929] ? verify_lock_unused+0x140/0x140
[ 106.306540][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 106.312529][ T5929] ? arch_stack_walk+0x160/0x190
[ 106.317475][ T5929] ? lock_chain_count+0x20/0x20
[ 106.322336][ T5929] __perf_sw_event+0x139/0x270
[ 106.327111][ T5929] do_user_addr_fault+0x1242/0x12d0
[ 106.332323][ T5929] ? rcu_is_watching+0x15/0xb0
[ 106.337096][ T5929] exc_page_fault+0x64/0x100
[ 106.341714][ T5929] asm_exc_page_fault+0x26/0x30
[ 106.346575][ T5929] RIP: 0010:rep_movs_alternative+0x33/0x90
[ 106.352958][ T5929] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 106.372651][ T5929] RSP: 0018:ffffc90002e7f310 EFLAGS: 00050206
[ 106.378727][ T5929] RAX: 40203023636e7566 RBX: 000000000000000b RCX: 000000000000000b
[ 106.386734][ T5929] RDX: 0000000000000000 RSI: ffff88807898068c RDI: 000020000000cf3d
[ 106.394755][ T5929] RBP: ffff888078980668 R08: ffff888078980696 R09: 1ffff1100f1300d2
[ 106.402749][ T5929] R10: dffffc0000000000 R11: ffffed100f1300d3 R12: 000020000000cf48
[ 106.410731][ T5929] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88807898068c
[ 106.418730][ T5929] _copy_to_user+0x85/0xa0
[ 106.423185][ T5929] bpf_verifier_vlog+0x2f1/0x840
[ 106.428170][ T5929] verbose+0x11e/0x1a0
[ 106.432269][ T5929] ? check_func_arg_reg_off+0x2f0/0x2f0
[ 106.438276][ T5929] ? kvmalloc_node+0x70/0x180
[ 106.443016][ T5929] ? add_subprog+0x2c0/0x3d0
[ 106.447728][ T5929] bpf_check+0x305c/0xec40
[ 106.452211][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 106.457250][ T5929] ? bpf_get_btf_vmlinux+0x20/0x20
[ 106.462398][ T5929] ? __lock_acquire+0x1262/0x7d80
[ 106.467467][ T5929] ? mark_lock+0x94/0x320
[ 106.471884][ T5929] ? __lock_acquire+0x1336/0x7d80
[ 106.476955][ T5929] ? verify_lock_unused+0x140/0x140
[ 106.482190][ T5929] ? verify_lock_unused+0x140/0x140
[ 106.487400][ T5929] ? verify_lock_unused+0x140/0x140
[ 106.492622][ T5929] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 106.498470][ T5929] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 106.504462][ T5929] ? __lock_acquire+0x7d80/0x7d80
[ 106.509497][ T5929] ? lock_chain_count+0x20/0x20
[ 106.514361][ T5929] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 106.520615][ T5929] ? lockdep_hardirqs_on+0x98/0x150
[ 106.525826][ T5929] ? ktime_get_with_offset+0x103/0x330
[ 106.531295][ T5929] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 106.537545][ T5929] ? ktime_get_real_ts64+0x440/0x440
[ 106.542866][ T5929] ? do_raw_spin_unlock+0x121/0x230
[ 106.548091][ T5929] ? bpf_obj_name_cpy+0x194/0x1e0
[ 106.553150][ T5929] bpf_prog_load+0x10fa/0x1610
[ 106.557932][ T5929] ? map_freeze+0x420/0x420
[ 106.562453][ T5929] ? __might_fault+0xaa/0x120
[ 106.567148][ T5929] ? __might_fault+0xc6/0x120
[ 106.571831][ T5929] ? __might_fault+0xaa/0x120
[ 106.576512][ T5929] ? bpf_lsm_bpf+0x9/0x10
[ 106.580854][ T5929] ? security_bpf+0x7e/0xa0
[ 106.585367][ T5929] __sys_bpf+0x5ba/0x890
[ 106.589618][ T5929] ? bpf_link_show_fdinfo+0x560/0x560
[ 106.595004][ T5929] ? lock_chain_count+0x20/0x20
[ 106.599867][ T5929] __x64_sys_bpf+0x7c/0x90
[ 106.604290][ T5929] do_syscall_64+0x55/0xb0
[ 106.608718][ T5929] ? clear_bhb_loop+0x40/0x90
[ 106.613434][ T5929] ? clear_bhb_loop+0x40/0x90
[ 106.618147][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.624059][ T5929] RIP: 0033:0x7fe65b99e159
[ 106.628484][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.648110][ T5929] RSP: 002b:00007ffee168b4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 106.656543][ T5929] RAX: ffffffffffffffda RBX: 00007fe65bc25fa0 RCX: 00007fe65b99e159
[ 106.664536][ T5929] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005
[ 106.672513][ T5929] RBP: 00007fe65ba3506b R08: 0000000000000000 R09: 0000000000000000
[ 106.680499][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.688515][ T5929] R13: 00007fe65bc25fac R14: 00007fe65bc25fa0 R15: 00007fe65bc25fa0
[ 106.696499][ T5929]
[ 106.700111][ T5929] Kernel Offset: disabled
[ 106.704467][ T5929] Rebooting in 86400 seconds..