Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts.
2026/04/30 08:32:03 parsed 1 programs
[ 85.623099][ T5626] cgroup: Unknown subsys name 'net'
[ 85.753682][ T5626] cgroup: Unknown subsys name 'cpuset'
[ 85.764757][ T5626] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 87.587693][ T5626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.765040][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 91.556911][ T5664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.566180][ T5664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.575154][ T5664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.588610][ T5664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.598048][ T5664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.148499][ T992] cfg80211: failed to load regulatory.db
[ 94.541463][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.549919][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.557151][ T5706] bridge_slave_0: entered allmulticast mode
[ 94.564808][ T5706] bridge_slave_0: entered promiscuous mode
[ 94.575563][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.583000][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.590459][ T5706] bridge_slave_1: entered allmulticast mode
[ 94.598190][ T5706] bridge_slave_1: entered promiscuous mode
[ 94.629941][ T5706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.642626][ T5706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.670156][ T5706] team0: Port device team_slave_0 added
[ 94.677708][ T5706] team0: Port device team_slave_1 added
[ 94.701674][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.708633][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.734671][ T5706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.747206][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.754344][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.780646][ T5706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.822186][ T5706] hsr_slave_0: entered promiscuous mode
[ 94.828822][ T5706] hsr_slave_1: entered promiscuous mode
[ 94.975307][ T5706] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.989251][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 94.997716][ T5706] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.008304][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 95.018063][ T5706] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.029011][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 95.037181][ T5706] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.049951][ T5706] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 95.080575][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.088282][ T5706] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.096450][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.104175][ T5706] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.165994][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.187862][ T867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.196804][ T867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.214220][ T5706] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.230048][ T86] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.237293][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.255600][ T76] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.262780][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.605687][ T5706] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.650515][ T5706] veth0_vlan: entered promiscuous mode
[ 95.663157][ T5706] veth1_vlan: entered promiscuous mode
[ 95.699000][ T5706] veth0_macvtap: entered promiscuous mode
[ 95.709412][ T5706] veth1_macvtap: entered promiscuous mode
[ 95.730327][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.747011][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.762812][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.773243][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.783564][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.792885][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.944225][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.040086][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.090568][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.103215][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.135357][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.173127][ T867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.182055][ T867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.215889][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/30 08:32:17 executed programs: 0
[ 96.705471][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.714271][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.724791][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.734559][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.743284][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.198923][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.206265][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.213830][ T5752] bridge_slave_0: entered allmulticast mode
[ 97.221193][ T5752] bridge_slave_0: entered promiscuous mode
[ 97.229820][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.237012][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.244827][ T5752] bridge_slave_1: entered allmulticast mode
[ 97.252144][ T5752] bridge_slave_1: entered promiscuous mode
[ 97.283619][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.295803][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.333780][ T5752] team0: Port device team_slave_0 added
[ 97.343626][ T5752] team0: Port device team_slave_1 added
[ 97.370610][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.377704][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.404284][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.416905][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.425027][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.450984][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.500599][ T5752] hsr_slave_0: entered promiscuous mode
[ 97.507587][ T5752] hsr_slave_1: entered promiscuous mode
[ 97.514602][ T5752] debugfs: 'hsr0' already exists in 'hsr'
[ 97.520697][ T5752] Cannot create hsr debugfs directory
[ 98.573691][ T13] bridge_slave_1: left allmulticast mode
[ 98.581141][ T13] bridge_slave_1: left promiscuous mode
[ 98.588567][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.604593][ T13] bridge_slave_0: left allmulticast mode
[ 98.611230][ T13] bridge_slave_0: left promiscuous mode
[ 98.618254][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.787966][ T4943] Bluetooth: hci0: command tx timeout
[ 98.887926][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.908034][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.919994][ T13] bond0 (unregistering): Released all slaves
[ 99.068309][ T13] hsr_slave_0: left promiscuous mode
[ 99.075195][ T13] hsr_slave_1: left promiscuous mode
[ 99.082604][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.090548][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.099841][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.107295][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.127936][ T13] veth1_macvtap: left promiscuous mode
[ 99.134570][ T13] veth0_macvtap: left promiscuous mode
[ 99.140881][ T13] veth1_vlan: left promiscuous mode
[ 99.146377][ T13] veth0_vlan: left promiscuous mode
[ 99.337279][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 99.356434][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 99.472270][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[ 99.794236][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.806717][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 99.816293][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.834739][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 99.845684][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.861576][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 99.876382][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.887855][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 100.204434][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.378925][ T5752] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.439625][ T86] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.446831][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.487608][ T86] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.494906][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.859690][ T4943] Bluetooth: hci0: command tx timeout
[ 101.098397][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.143743][ T5752] veth0_vlan: entered promiscuous mode
[ 101.157315][ T5752] veth1_vlan: entered promiscuous mode
[ 101.189190][ T5752] veth0_macvtap: entered promiscuous mode
[ 101.199724][ T5752] veth1_macvtap: entered promiscuous mode
[ 101.217627][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.232182][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.246801][ T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.256235][ T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.268887][ T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.278510][ T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.343673][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.352023][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.382012][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.391132][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/30 08:32:22 executed programs: 3
[ 101.839446][ T5832] ==================================================================
[ 101.847583][ T5832] BUG: KASAN: slab-use-after-free in __sk_msg_recvmsg+0x91c/0xfc0
[ 101.855576][ T5832] Read of size 4 at addr ffff88802b37f828 by task syz.0.18/5832
[ 101.863313][ T5832]
[ 101.865750][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 101.865774][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 101.865786][ T5832] Call Trace:
[ 101.865794][ T5832]
[ 101.865802][ T5832] dump_stack_lvl+0xe8/0x150
[ 101.865828][ T5832] print_address_description+0x55/0x1e0
[ 101.865849][ T5832] ? __sk_msg_recvmsg+0x91c/0xfc0
[ 101.865869][ T5832] print_report+0x58/0x70
[ 101.865887][ T5832] kasan_report+0x117/0x150
[ 101.865916][ T5832] ? __sk_msg_recvmsg+0x91c/0xfc0
[ 101.865942][ T5832] __sk_msg_recvmsg+0x91c/0xfc0
[ 101.865976][ T5832] udp_bpf_recvmsg+0x196/0xac0
[ 101.866006][ T5832] ? aa_sk_perm+0x6d5/0x900
[ 101.866032][ T5832] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 101.866060][ T5832] ? __lock_acquire+0x6b5/0x2cf0
[ 101.866080][ T5832] ? sock_rps_record_flow+0x19/0x350
[ 101.866108][ T5832] ? inet_recvmsg+0x101/0x120
[ 101.866133][ T5832] ? __pfx_inet_recvmsg+0x10/0x10
[ 101.866158][ T5832] sock_recvmsg+0x155/0x1b0
[ 101.866190][ T5832] ____sys_recvmsg+0x1e6/0x4a0
[ 101.866213][ T5832] ? __folio_batch_add_and_move+0x11a/0xc50
[ 101.866245][ T5832] ? __pfx_____sys_recvmsg+0x10/0x10
[ 101.866277][ T5832] ? import_iovec+0x73/0xa0
[ 101.866305][ T5832] ___sys_recvmsg+0x215/0x590
[ 101.866328][ T5832] ? page_table_check_set+0x126/0x510
[ 101.866366][ T5832] ? __pfx____sys_recvmsg+0x10/0x10
[ 101.866389][ T5832] ? css_rstat_updated+0x23a/0x530
[ 101.866410][ T5832] ? __fget_files+0x2a/0x420
[ 101.866441][ T5832] ? __fget_files+0x3a0/0x420
[ 101.866468][ T5832] do_recvmmsg+0x334/0x800
[ 101.866496][ T5832] ? do_raw_spin_lock+0x12b/0x2f0
[ 101.866523][ T5832] ? __pfx_do_recvmmsg+0x10/0x10
[ 101.866548][ T5832] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.866573][ T5832] ? __might_fault+0xaf/0x130
[ 101.866605][ T5832] ? lockdep_hardirqs_on+0x7a/0x110
[ 101.866631][ T5832] __x64_sys_recvmmsg+0x198/0x250
[ 101.866658][ T5832] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 101.866689][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.866710][ T5832] do_syscall_64+0x15f/0xf80
[ 101.866730][ T5832] ? trace_irq_disable+0x3b/0x140
[ 101.866759][ T5832] ? clear_bhb_loop+0x40/0x90
[ 101.866781][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.866801][ T5832] RIP: 0033:0x7fe29e99cdd9
[ 101.866819][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 101.866836][ T5832] RSP: 002b:00007fe29dfdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 101.866859][ T5832] RAX: ffffffffffffffda RBX: 00007fe29ec16090 RCX: 00007fe29e99cdd9
[ 101.866873][ T5832] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003
[ 101.866887][ T5832] RBP: 00007fe29ea32d69 R08: 0000000000000000 R09: 0000000000000000
[ 101.866899][ T5832] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[ 101.866912][ T5832] R13: 00007fe29ec16128 R14: 00007fe29ec16090 R15: 00007ffe2fa06638
[ 101.866935][ T5832]
[ 101.866942][ T5832]
[ 102.162442][ T5832] Allocated by task 5831:
[ 102.166852][ T5832] kasan_save_track+0x3e/0x80
[ 102.171793][ T5832] __kasan_kmalloc+0x93/0xb0
[ 102.176478][ T5832] __kmalloc_cache_noprof+0x31c/0x660
[ 102.181868][ T5832] sk_psock_skb_ingress_self+0x5e/0x370
[ 102.187510][ T5832] sk_psock_verdict_recv+0x7d9/0x8d0
[ 102.192980][ T5832] udp_read_skb+0x5d9/0x6b0
[ 102.197665][ T5832] sk_psock_verdict_data_ready+0x25f/0x690
[ 102.203471][ T5832] __udp_enqueue_schedule_skb+0xc4b/0x12e0
[ 102.209304][ T5832] udp_queue_rcv_one_skb+0x755/0x10f0
[ 102.214785][ T5832] __udp4_lib_mcast_deliver+0xad7/0xb70
[ 102.220420][ T5832] udp_rcv+0xcd0/0x1db0
[ 102.224660][ T5832] ip_protocol_deliver_rcu+0x282/0x440
[ 102.230146][ T5832] ip_local_deliver_finish+0x3bb/0x6f0
[ 102.235633][ T5832] NF_HOOK+0x336/0x3c0
[ 102.239782][ T5832] ip_sublist_rcv_finish+0x1f0/0x240
[ 102.245237][ T5832] ip_sublist_rcv+0x5c6/0xa70
[ 102.249915][ T5832] ip_list_rcv+0x3f1/0x450
[ 102.254355][ T5832] __netif_receive_skb_list_core+0x7e5/0x810
[ 102.260431][ T5832] netif_receive_skb_list_internal+0x995/0xcf0
[ 102.266587][ T5832] netif_receive_skb_list+0x55/0x450
[ 102.271974][ T5832] bpf_test_run_xdp_live+0x1946/0x1cf0
[ 102.277456][ T5832] bpf_prog_test_run_xdp+0x81c/0x1160
[ 102.282829][ T5832] bpf_prog_test_run+0x2c7/0x340
[ 102.287863][ T5832] __sys_bpf+0x643/0x950
[ 102.292391][ T5832] __x64_sys_bpf+0x7c/0x90
[ 102.296830][ T5832] do_syscall_64+0x15f/0xf80
[ 102.301537][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.307534][ T5832]
[ 102.309859][ T5832] Freed by task 5833:
[ 102.314536][ T5832] kasan_save_track+0x3e/0x80
[ 102.319266][ T5832] kasan_save_free_info+0x46/0x50
[ 102.324447][ T5832] __kasan_slab_free+0x5c/0x80
[ 102.329405][ T5832] kfree+0x1c5/0x640
[ 102.333390][ T5832] __sk_msg_recvmsg+0xdb7/0xfc0
[ 102.338525][ T5832] udp_bpf_recvmsg+0x196/0xac0
[ 102.343421][ T5832] sock_recvmsg+0x155/0x1b0
[ 102.347941][ T5832] ____sys_recvmsg+0x1e6/0x4a0
[ 102.352708][ T5832] ___sys_recvmsg+0x215/0x590
[ 102.357402][ T5832] do_recvmmsg+0x334/0x800
[ 102.361913][ T5832] __x64_sys_recvmmsg+0x198/0x250
[ 102.366943][ T5832] do_syscall_64+0x15f/0xf80
[ 102.371633][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.377538][ T5832]
[ 102.379894][ T5832] The buggy address belongs to the object at ffff88802b37f800
[ 102.379894][ T5832] which belongs to the cache kmalloc-1k of size 1024
[ 102.394121][ T5832] The buggy address is located 40 bytes inside of
[ 102.394121][ T5832] freed 1024-byte region [ffff88802b37f800, ffff88802b37fc00)
[ 102.408180][ T5832]
[ 102.410611][ T5832] The buggy address belongs to the physical page:
[ 102.417287][ T5832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b378
[ 102.426239][ T5832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 102.434844][ T5832] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 102.442395][ T5832] page_type: f5(slab)
[ 102.446413][ T5832] raw: 00fff00000000040 ffff88813fe19dc0 dead000000000100 dead000000000122
[ 102.455011][ T5832] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 102.463607][ T5832] head: 00fff00000000040 ffff88813fe19dc0 dead000000000100 dead000000000122
[ 102.472416][ T5832] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 102.481111][ T5832] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 102.489795][ T5832] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 102.498457][ T5832] page dumped because: kasan: bad access detected
[ 102.504951][ T5832] page_owner tracks the page as allocated
[ 102.510665][ T5832] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5830 (syz.0.18), ts 101787257274, free_ts 101782802143
[ 102.531331][ T5832] post_alloc_hook+0x231/0x280
[ 102.536113][ T5832] get_page_from_freelist+0x24ba/0x2540
[ 102.541832][ T5832] __alloc_frozen_pages_noprof+0x18d/0x380
[ 102.547639][ T5832] allocate_slab+0x77/0x660
[ 102.552159][ T5832] refill_objects+0x339/0x3d0
[ 102.556840][ T5832] __pcs_replace_empty_main+0x321/0x720
[ 102.562386][ T5832] __kmalloc_cache_noprof+0x392/0x660
[ 102.567762][ T5832] sk_psock_skb_ingress_self+0x5e/0x370
[ 102.573303][ T5832] sk_psock_verdict_recv+0x7d9/0x8d0
[ 102.578587][ T5832] udp_read_skb+0x5d9/0x6b0
[ 102.583095][ T5832] sk_psock_verdict_data_ready+0x25f/0x690
[ 102.588902][ T5832] __udp_enqueue_schedule_skb+0xc4b/0x12e0
[ 102.594827][ T5832] udp_queue_rcv_one_skb+0x755/0x10f0
[ 102.600253][ T5832] __udp4_lib_mcast_deliver+0xad7/0xb70
[ 102.605826][ T5832] udp_rcv+0xcd0/0x1db0
[ 102.609992][ T5832] ip_protocol_deliver_rcu+0x282/0x440
[ 102.615470][ T5832] page last free pid 5831 tgid 5830 stack trace:
[ 102.621892][ T5832] __free_frozen_pages+0xbc7/0xd30
[ 102.627101][ T5832] bpf_check+0x3b1c/0x49f0
[ 102.631537][ T5832] bpf_prog_load+0x1406/0x1a10
[ 102.636309][ T5832] __sys_bpf+0x618/0x950
[ 102.640643][ T5832] __x64_sys_bpf+0x7c/0x90
[ 102.645163][ T5832] do_syscall_64+0x15f/0xf80
[ 102.649748][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.655633][ T5832]
[ 102.657951][ T5832] Memory state around the buggy address:
[ 102.663566][ T5832] ffff88802b37f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.671706][ T5832] ffff88802b37f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.679768][ T5832] >ffff88802b37f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.687812][ T5832] ^
[ 102.693185][ T5832] ffff88802b37f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.701245][ T5832] ffff88802b37f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.709401][ T5832] ==================================================================
[ 102.732957][ T5832] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.740218][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 102.749467][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 102.759659][ T5832] Call Trace:
[ 102.762975][ T5832]
[ 102.765931][ T5832] vpanic+0x56c/0xa60
[ 102.769941][ T5832] ? __pfx_vpanic+0x10/0x10
[ 102.774555][ T5832] ? __pfx___schedule+0x10/0x10
[ 102.779416][ T5832] panic+0xc5/0xd0
[ 102.783188][ T5832] ? __pfx_panic+0x10/0x10
[ 102.787607][ T5832] ? preempt_schedule_common+0x82/0xd0
[ 102.793086][ T5832] ? __sk_msg_recvmsg+0x91c/0xfc0
[ 102.798106][ T5832] check_panic_on_warn+0x89/0xb0
[ 102.803049][ T5832] ? __sk_msg_recvmsg+0x91c/0xfc0
[ 102.808067][ T5832] end_report+0x73/0x170
[ 102.812319][ T5832] ? __sk_msg_recvmsg+0x91c/0xfc0
[ 102.817363][ T5832] kasan_report+0x128/0x150
[ 102.822058][ T5832] ? __sk_msg_recvmsg+0x91c/0xfc0
[ 102.827098][ T5832] __sk_msg_recvmsg+0x91c/0xfc0
[ 102.831967][ T5832] udp_bpf_recvmsg+0x196/0xac0
[ 102.836864][ T5832] ? aa_sk_perm+0x6d5/0x900
[ 102.841394][ T5832] ? __pfx_udp_bpf_recvmsg+0x10/0x10
[ 102.846797][ T5832] ? __lock_acquire+0x6b5/0x2cf0
[ 102.851911][ T5832] ? sock_rps_record_flow+0x19/0x350
[ 102.857207][ T5832] ? inet_recvmsg+0x101/0x120
[ 102.861907][ T5832] ? __pfx_inet_recvmsg+0x10/0x10
[ 102.867144][ T5832] sock_recvmsg+0x155/0x1b0
[ 102.871681][ T5832] ____sys_recvmsg+0x1e6/0x4a0
[ 102.876458][ T5832] ? __folio_batch_add_and_move+0x11a/0xc50
[ 102.882365][ T5832] ? __pfx_____sys_recvmsg+0x10/0x10
[ 102.887697][ T5832] ? import_iovec+0x73/0xa0
[ 102.892235][ T5832] ___sys_recvmsg+0x215/0x590
[ 102.897040][ T5832] ? page_table_check_set+0x126/0x510
[ 102.902461][ T5832] ? __pfx____sys_recvmsg+0x10/0x10
[ 102.907773][ T5832] ? css_rstat_updated+0x23a/0x530
[ 102.912908][ T5832] ? __fget_files+0x2a/0x420
[ 102.917601][ T5832] ? __fget_files+0x3a0/0x420
[ 102.922294][ T5832] do_recvmmsg+0x334/0x800
[ 102.926740][ T5832] ? do_raw_spin_lock+0x12b/0x2f0
[ 102.931922][ T5832] ? __pfx_do_recvmmsg+0x10/0x10
[ 102.936889][ T5832] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.942282][ T5832] ? __might_fault+0xaf/0x130
[ 102.946985][ T5832] ? lockdep_hardirqs_on+0x7a/0x110
[ 102.952195][ T5832] __x64_sys_recvmmsg+0x198/0x250
[ 102.957324][ T5832] ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 102.962884][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.969045][ T5832] do_syscall_64+0x15f/0xf80
[ 102.973744][ T5832] ? trace_irq_disable+0x3b/0x140
[ 102.978806][ T5832] ? clear_bhb_loop+0x40/0x90
[ 102.983489][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.989397][ T5832] RIP: 0033:0x7fe29e99cdd9
[ 102.993933][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.013627][ T5832] RSP: 002b:00007fe29dfdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 103.022048][ T5832] RAX: ffffffffffffffda RBX: 00007fe29ec16090 RCX: 00007fe29e99cdd9
[ 103.030111][ T5832] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003
[ 103.038088][ T5832] RBP: 00007fe29ea32d69 R08: 0000000000000000 R09: 0000000000000000
[ 103.046060][ T5832] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000000
[ 103.054210][ T5832] R13: 00007fe29ec16128 R14: 00007fe29ec16090 R15: 00007ffe2fa06638
[ 103.062197][ T5832]
[ 103.065876][ T5832] Kernel Offset: disabled
[ 103.070202][ T5832] Rebooting in 86400 seconds..