Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
2026/01/06 05:11:06 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 122.216068][ T6169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 125.714449][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 125.725871][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 125.736635][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 125.746500][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 125.754282][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 126.066440][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.079014][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.111556][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.119487][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.958808][ T6244] chnl_net:caif_netlink_parms(): no params data found
[ 128.063869][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.071247][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.078913][ T6244] bridge_slave_0: entered allmulticast mode
[ 128.086972][ T6244] bridge_slave_0: entered promiscuous mode
[ 128.099180][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.106849][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.114080][ T6244] bridge_slave_1: entered allmulticast mode
[ 128.121278][ T6244] bridge_slave_1: entered promiscuous mode
[ 128.152735][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 128.165156][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 128.199640][ T6244] team0: Port device team_slave_0 added
[ 128.207406][ T6244] team0: Port device team_slave_1 added
[ 128.231144][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 128.239103][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 128.265665][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 128.277767][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 128.285282][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 128.311630][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 128.348869][ T6244] hsr_slave_0: entered promiscuous mode
[ 128.355849][ T6244] hsr_slave_1: entered promiscuous mode
[ 128.851152][ T6244] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 128.864362][ T6244] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 128.878672][ T6244] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 128.890954][ T6244] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 129.008111][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0
[ 129.055439][ T6244] 8021q: adding VLAN 0 to HW filter on device team0
[ 129.071217][ T50] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.078538][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 129.094989][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.102354][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.355979][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.416756][ T6244] veth0_vlan: entered promiscuous mode
[ 129.434960][ T6244] veth1_vlan: entered promiscuous mode
[ 129.475254][ T6244] veth0_macvtap: entered promiscuous mode
[ 129.487397][ T6244] veth1_macvtap: entered promiscuous mode
[ 129.512823][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.532113][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.554177][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.573302][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.588696][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.612437][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.754134][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 129.879483][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 129.974537][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.078900][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/01/06 05:11:18 executed programs: 0
[ 130.517104][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 130.526327][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 130.534495][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 130.546120][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 130.559329][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 130.793384][ T6326] chnl_net:caif_netlink_parms(): no params data found
[ 130.968005][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.975479][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state
[ 130.984219][ T6326] bridge_slave_0: entered allmulticast mode
[ 130.992299][ T6326] bridge_slave_0: entered promiscuous mode
[ 131.002543][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.009808][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.017654][ T6326] bridge_slave_1: entered allmulticast mode
[ 131.026464][ T6326] bridge_slave_1: entered promiscuous mode
[ 131.074076][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 131.087512][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 131.141914][ T6326] team0: Port device team_slave_0 added
[ 131.150632][ T6326] team0: Port device team_slave_1 added
[ 131.195142][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 131.203013][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 131.230164][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 131.243846][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 131.250899][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 131.277617][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 131.340149][ T6326] hsr_slave_0: entered promiscuous mode
[ 131.349006][ T6326] hsr_slave_1: entered promiscuous mode
[ 131.356246][ T6326] debugfs: 'hsr0' already exists in 'hsr'
[ 131.362773][ T6326] Cannot create hsr debugfs directory
[ 132.116101][ T61] bridge_slave_1: left allmulticast mode
[ 132.123652][ T61] bridge_slave_1: left promiscuous mode
[ 132.129455][ T61] bridge0: port 2(bridge_slave_1) entered disabled state
[ 132.139705][ T61] bridge_slave_0: left allmulticast mode
[ 132.155998][ T61] bridge_slave_0: left promiscuous mode
[ 132.162414][ T61] bridge0: port 1(bridge_slave_0) entered disabled state
[ 132.463628][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 132.482621][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 132.493596][ T61] bond0 (unregistering): Released all slaves
[ 132.605995][ T61] hsr_slave_0: left promiscuous mode
[ 132.614007][ T61] hsr_slave_1: left promiscuous mode
[ 132.620185][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 132.621497][ T5149] Bluetooth: hci0: command tx timeout
[ 132.633812][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 132.642034][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 132.649533][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 132.667298][ T61] veth1_macvtap: left promiscuous mode
[ 132.676618][ T61] veth0_macvtap: left promiscuous mode
[ 132.682838][ T61] veth1_vlan: left promiscuous mode
[ 132.688178][ T61] veth0_vlan: left promiscuous mode
[ 133.039593][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.051161][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.074609][ T61] team0 (unregistering): Port device team_slave_1 removed
[ 133.100472][ T61] team0 (unregistering): Port device team_slave_0 removed
[ 133.737303][ T6326] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 133.772276][ T6326] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 133.823965][ T6326] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 133.859421][ T6326] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 134.136250][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0
[ 134.169370][ T6326] 8021q: adding VLAN 0 to HW filter on device team0
[ 134.183135][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.190457][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 134.214327][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.221698][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 134.469989][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 134.516979][ T6326] veth0_vlan: entered promiscuous mode
[ 134.537572][ T6326] veth1_vlan: entered promiscuous mode
[ 134.577546][ T6326] veth0_macvtap: entered promiscuous mode
[ 134.589148][ T6326] veth1_macvtap: entered promiscuous mode
[ 134.616813][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 134.632966][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 134.652801][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.665609][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.682211][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.691049][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 134.705855][ T5149] Bluetooth: hci0: command tx timeout
[ 134.780027][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 134.800233][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 134.835318][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 134.843405][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 134.914074][ T6458] ==================================================================
[ 134.922294][ T6458] BUG: KASAN: slab-out-of-bounds in strnchr+0x5e/0x80
[ 134.929063][ T6458] Read of size 1 at addr ffff888029166bb0 by task syz.0.17/6458
[ 134.937114][ T6458]
[ 134.939446][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 134.939461][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 134.939475][ T6458] Call Trace:
[ 134.939482][ T6458]
[ 134.939489][ T6458] dump_stack_lvl+0x189/0x250
[ 134.939507][ T6458] ? __virt_addr_valid+0x1c8/0x5c0
[ 134.939524][ T6458] ? rcu_is_watching+0x15/0xb0
[ 134.939538][ T6458] ? __kasan_check_byte+0x12/0x40
[ 134.939552][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10
[ 134.939571][ T6458] ? rcu_is_watching+0x15/0xb0
[ 134.939585][ T6458] ? lock_release+0x4b/0x3b0
[ 134.939599][ T6458] ? __virt_addr_valid+0x1c8/0x5c0
[ 134.939614][ T6458] ? __virt_addr_valid+0x4a5/0x5c0
[ 134.939630][ T6458] print_report+0xca/0x240
[ 134.939643][ T6458] ? strnchr+0x5e/0x80
[ 134.939656][ T6458] kasan_report+0x118/0x150
[ 134.939670][ T6458] ? strnchr+0x5e/0x80
[ 134.939685][ T6458] strnchr+0x5e/0x80
[ 134.939699][ T6458] bpf_bprintf_prepare+0x167/0x13d0
[ 134.939720][ T6458] ? __lock_acquire+0x6b6/0x2cf0
[ 134.939732][ T6458] ? __pfx_bpf_bprintf_prepare+0x10/0x10
[ 134.939747][ T6458] ? switch_ldt+0x10a/0x240
[ 134.939763][ T6458] ? bpf_snprintf+0x47/0x1b0
[ 134.939780][ T6458] bpf_snprintf+0xd3/0x1b0
[ 134.939798][ T6458] bpf_prog_c2925c0a7ac12d80+0x58/0x60
[ 134.939815][ T6458] bpf_trace_run1+0x27f/0x4c0
[ 134.939831][ T6458] ? check_path+0x21/0x40
[ 134.939844][ T6458] ? bpf_trace_run1+0x181/0x4c0
[ 134.939859][ T6458] ? __pfx_bpf_trace_run1+0x10/0x10
[ 134.939883][ T6458] ? __lock_acquire+0x6b6/0x2cf0
[ 134.939894][ T6458] ? switch_ldt+0x10a/0x240
[ 134.939907][ T6458] ? __bpf_trace_rcu_utilization+0x94/0xf0
[ 134.939924][ T6458] __bpf_trace_rcu_utilization+0xa1/0xf0
[ 134.939938][ T6458] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10
[ 134.939954][ T6458] ? switch_mm_irqs_off+0x5c2/0x7b0
[ 134.939973][ T6458] trace_rcu_utilization+0x191/0x1c0
[ 134.939988][ T6458] rcu_note_context_switch+0xc9/0x1120
[ 134.940001][ T6458] ? __pfx_call_function_single_prep_ipi+0x10/0x10
[ 134.940020][ T6458] ? smp_call_function_many_cond+0xf43/0x12b0
[ 134.940038][ T6458] ? lockdep_hardirqs_on+0x98/0x140
[ 134.940051][ T6458] ? __pfx_do_sync_core+0x10/0x10
[ 134.940066][ T6458] ? smp_call_function_many_cond+0xdd4/0x12b0
[ 134.940084][ T6458] ? __pfx_rcu_note_context_switch+0x10/0x10
[ 134.940095][ T6458] ? __pfx_do_sync_core+0x10/0x10
[ 134.940111][ T6458] ? rcu_is_watching+0x15/0xb0
[ 134.940126][ T6458] __schedule+0x346/0x5000
[ 134.940136][ T6458] ? __lock_acquire+0x6b6/0x2cf0
[ 134.940151][ T6458] ? place_entity+0x4b4/0x580
[ 134.940168][ T6458] ? __pfx___schedule+0x10/0x10
[ 134.940179][ T6458] ? rcu_is_watching+0x15/0xb0
[ 134.940194][ T6458] ? __resched_curr+0x202/0x3e0
[ 134.940208][ T6458] ? preempt_schedule+0xae/0xc0
[ 134.940220][ T6458] preempt_schedule_common+0x83/0xd0
[ 134.940232][ T6458] preempt_schedule+0xae/0xc0
[ 134.940243][ T6458] ? __pfx_preempt_schedule+0x10/0x10
[ 134.940255][ T6458] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 134.940272][ T6458] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 134.940290][ T6458] preempt_schedule_thunk+0x16/0x30
[ 134.940304][ T6458] try_to_wake_up+0x82b/0x12b0
[ 134.940323][ T6458] wake_up_q+0x85/0xd0
[ 134.940335][ T6458] futex_wake+0x4a0/0x560
[ 134.940352][ T6458] ? __pfx_futex_wake+0x10/0x10
[ 134.940367][ T6458] ? __fget_files+0x2a/0x420
[ 134.940385][ T6458] do_futex+0x395/0x420
[ 134.940400][ T6458] ? __pfx_do_futex+0x10/0x10
[ 134.940415][ T6458] __se_sys_futex+0x36f/0x400
[ 134.940429][ T6458] ? __pfx___se_sys_futex+0x10/0x10
[ 134.940444][ T6458] ? __x64_sys_futex+0x21/0xf0
[ 134.940457][ T6458] do_syscall_64+0xfa/0xf80
[ 134.940470][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.940483][ T6458] ? clear_bhb_loop+0x60/0xb0
[ 134.940496][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.940509][ T6458] RIP: 0033:0x7f540bd8f749
[ 134.940520][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 134.940531][ T6458] RSP: 002b:00007f540cc950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 134.940549][ T6458] RAX: ffffffffffffffda RBX: 00007f540bfe5fa8 RCX: 00007f540bd8f749
[ 134.940568][ T6458] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f540bfe5fac
[ 134.940576][ T6458] RBP: 00007f540bfe5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 134.940585][ T6458] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[ 134.940592][ T6458] R13: 00007f540bfe6038 R14: 00007ffe4f3ebe10 R15: 00007ffe4f3ebef8
[ 134.940607][ T6458]
[ 134.940612][ T6458]
[ 135.388866][ T6458] Allocated by task 6458:
[ 135.393180][ T6458] kasan_save_track+0x3e/0x80
[ 135.397941][ T6458] __kasan_kmalloc+0x93/0xb0
[ 135.402511][ T6458] __kmalloc_node_noprof+0x57a/0x820
[ 135.407951][ T6458] bpf_map_area_alloc+0x64/0x180
[ 135.412877][ T6458] insn_array_alloc+0x52/0x140
[ 135.417630][ T6458] map_create+0xafd/0x16a0
[ 135.422143][ T6458] __sys_bpf+0x5f0/0x860
[ 135.426457][ T6458] __x64_sys_bpf+0x7c/0x90
[ 135.430859][ T6458] do_syscall_64+0xfa/0xf80
[ 135.435348][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.441404][ T6458]
[ 135.443715][ T6458] The buggy address belongs to the object at ffff888029166800
[ 135.443715][ T6458] which belongs to the cache kmalloc-cg-1k of size 1024
[ 135.458271][ T6458] The buggy address is located 0 bytes to the right of
[ 135.458271][ T6458] allocated 944-byte region [ffff888029166800, ffff888029166bb0)
[ 135.473002][ T6458]
[ 135.475409][ T6458] The buggy address belongs to the physical page:
[ 135.482159][ T6458] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29160
[ 135.491102][ T6458] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 135.499780][ T6458] memcg:ffff8880287ecb01
[ 135.504027][ T6458] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 135.511659][ T6458] page_type: f5(slab)
[ 135.515701][ T6458] raw: 00fff00000000040 ffff88813ffb0280 ffffea0000c50e00 dead000000000002
[ 135.524275][ T6458] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff8880287ecb01
[ 135.532842][ T6458] head: 00fff00000000040 ffff88813ffb0280 ffffea0000c50e00 dead000000000002
[ 135.541582][ T6458] head: 0000000000000000 0000000080100010 00000000f5000000 ffff8880287ecb01
[ 135.550236][ T6458] head: 00fff00000000003 ffffea0000a45801 00000000ffffffff 00000000ffffffff
[ 135.558890][ T6458] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 135.567803][ T6458] page dumped because: kasan: bad access detected
[ 135.574217][ T6458] page_owner tracks the page as allocated
[ 135.579936][ T6458] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5651, tgid 5651 (dhcpcd-run-hook), ts 58371581863, free_ts 57441834104
[ 135.601895][ T6458] post_alloc_hook+0x234/0x290
[ 135.606663][ T6458] get_page_from_freelist+0x2365/0x2440
[ 135.612285][ T6458] __alloc_frozen_pages_noprof+0x181/0x370
[ 135.618261][ T6458] alloc_pages_mpol+0x232/0x4a0
[ 135.623301][ T6458] allocate_slab+0x86/0x3b0
[ 135.627977][ T6458] ___slab_alloc+0xf2b/0x1960
[ 135.632910][ T6458] __slab_alloc+0x65/0x100
[ 135.637579][ T6458] __kmalloc_noprof+0x47d/0x800
[ 135.642412][ T6458] alloc_pipe_info+0x1fd/0x4d0
[ 135.647250][ T6458] create_pipe_files+0x8a/0x7e0
[ 135.652203][ T6458] __do_pipe_flags+0x46/0x1f0
[ 135.656870][ T6458] do_pipe2+0x9c/0x170
[ 135.660920][ T6458] __x64_sys_pipe2+0x5a/0x70
[ 135.665500][ T6458] do_syscall_64+0xfa/0xf80
[ 135.669985][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.676550][ T6458] page last free pid 5493 tgid 5493 stack trace:
[ 135.682963][ T6458] __free_frozen_pages+0xbc8/0xd30
[ 135.688261][ T6458] __put_partials+0x146/0x170
[ 135.693358][ T6458] put_cpu_partial+0x1f2/0x2d0
[ 135.698371][ T6458] __slab_free+0x288/0x2a0
[ 135.702775][ T6458] qlist_free_all+0x97/0x100
[ 135.707519][ T6458] kasan_quarantine_reduce+0x148/0x160
[ 135.712970][ T6458] __kasan_slab_alloc+0x22/0x80
[ 135.717990][ T6458] kmem_cache_alloc_node_noprof+0x43c/0x720
[ 135.724061][ T6458] __alloc_skb+0x255/0x430
[ 135.728563][ T6458] alloc_skb_with_frags+0xca/0x890
[ 135.733930][ T6458] sock_alloc_send_pskb+0x84d/0x980
[ 135.739119][ T6458] unix_dgram_sendmsg+0x454/0x1840
[ 135.744315][ T6458] __sock_sendmsg+0x21c/0x270
[ 135.749074][ T6458] sock_write_iter+0x279/0x360
[ 135.753853][ T6458] vfs_write+0x5c9/0xb30
[ 135.758080][ T6458] ksys_write+0x145/0x250
[ 135.762564][ T6458]
[ 135.764954][ T6458] Memory state around the buggy address:
[ 135.770559][ T6458] ffff888029166a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 135.778620][ T6458] ffff888029166b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 135.787197][ T6458] >ffff888029166b80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 135.795443][ T6458] ^
[ 135.801163][ T6458] ffff888029166c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 135.809472][ T6458] ffff888029166c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 135.817533][ T6458] ==================================================================
[ 135.825717][ T6458] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 135.833128][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 135.842320][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 135.852488][ T6458] Call Trace:
[ 135.855764][ T6458]
[ 135.858711][ T6458] dump_stack_lvl+0x99/0x250
[ 135.863422][ T6458] ? __asan_memcpy+0x40/0x70
[ 135.868098][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10
[ 135.873294][ T6458] ? __pfx__printk+0x10/0x10
[ 135.877981][ T6458] vpanic+0x237/0x6d0
[ 135.882126][ T6458] ? __pfx_vpanic+0x10/0x10
[ 135.886624][ T6458] panic+0xb9/0xc0
[ 135.890342][ T6458] ? __pfx_panic+0x10/0x10
[ 135.894834][ T6458] ? do_raw_spin_unlock+0x122/0x240
[ 135.900039][ T6458] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 135.906372][ T6458] ? strnchr+0x5e/0x80
[ 135.910471][ T6458] check_panic_on_warn+0x89/0xb0
[ 135.915505][ T6458] ? strnchr+0x5e/0x80
[ 135.919578][ T6458] end_report+0x6f/0x140
[ 135.923916][ T6458] kasan_report+0x129/0x150
[ 135.928431][ T6458] ? strnchr+0x5e/0x80
[ 135.932588][ T6458] strnchr+0x5e/0x80
[ 135.936472][ T6458] bpf_bprintf_prepare+0x167/0x13d0
[ 135.941667][ T6458] ? __lock_acquire+0x6b6/0x2cf0
[ 135.946592][ T6458] ? __pfx_bpf_bprintf_prepare+0x10/0x10
[ 135.952227][ T6458] ? switch_ldt+0x10a/0x240
[ 135.956872][ T6458] ? bpf_snprintf+0x47/0x1b0
[ 135.961713][ T6458] bpf_snprintf+0xd3/0x1b0
[ 135.966133][ T6458] bpf_prog_c2925c0a7ac12d80+0x58/0x60
[ 135.971605][ T6458] bpf_trace_run1+0x27f/0x4c0
[ 135.976283][ T6458] ? check_path+0x21/0x40
[ 135.980606][ T6458] ? bpf_trace_run1+0x181/0x4c0
[ 135.985456][ T6458] ? __pfx_bpf_trace_run1+0x10/0x10
[ 135.990731][ T6458] ? __lock_acquire+0x6b6/0x2cf0
[ 135.995748][ T6458] ? switch_ldt+0x10a/0x240
[ 136.000512][ T6458] ? __bpf_trace_rcu_utilization+0x94/0xf0
[ 136.006405][ T6458] __bpf_trace_rcu_utilization+0xa1/0xf0
[ 136.012029][ T6458] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10
[ 136.018444][ T6458] ? switch_mm_irqs_off+0x5c2/0x7b0
[ 136.023632][ T6458] trace_rcu_utilization+0x191/0x1c0
[ 136.028996][ T6458] rcu_note_context_switch+0xc9/0x1120
[ 136.034442][ T6458] ? __pfx_call_function_single_prep_ipi+0x10/0x10
[ 136.041105][ T6458] ? smp_call_function_many_cond+0xf43/0x12b0
[ 136.047331][ T6458] ? lockdep_hardirqs_on+0x98/0x140
[ 136.052784][ T6458] ? __pfx_do_sync_core+0x10/0x10
[ 136.057881][ T6458] ? smp_call_function_many_cond+0xdd4/0x12b0
[ 136.063950][ T6458] ? __pfx_rcu_note_context_switch+0x10/0x10
[ 136.070210][ T6458] ? __pfx_do_sync_core+0x10/0x10
[ 136.075243][ T6458] ? rcu_is_watching+0x15/0xb0
[ 136.080017][ T6458] __schedule+0x346/0x5000
[ 136.084775][ T6458] ? __lock_acquire+0x6b6/0x2cf0
[ 136.089731][ T6458] ? place_entity+0x4b4/0x580
[ 136.094413][ T6458] ? __pfx___schedule+0x10/0x10
[ 136.099374][ T6458] ? rcu_is_watching+0x15/0xb0
[ 136.104160][ T6458] ? __resched_curr+0x202/0x3e0
[ 136.109100][ T6458] ? preempt_schedule+0xae/0xc0
[ 136.113941][ T6458] preempt_schedule_common+0x83/0xd0
[ 136.119308][ T6458] preempt_schedule+0xae/0xc0
[ 136.124057][ T6458] ? __pfx_preempt_schedule+0x10/0x10
[ 136.129590][ T6458] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 136.135485][ T6458] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 136.141903][ T6458] preempt_schedule_thunk+0x16/0x30
[ 136.147099][ T6458] try_to_wake_up+0x82b/0x12b0
[ 136.151950][ T6458] wake_up_q+0x85/0xd0
[ 136.156123][ T6458] futex_wake+0x4a0/0x560
[ 136.160619][ T6458] ? __pfx_futex_wake+0x10/0x10
[ 136.165526][ T6458] ? __fget_files+0x2a/0x420
[ 136.170197][ T6458] do_futex+0x395/0x420
[ 136.174339][ T6458] ? __pfx_do_futex+0x10/0x10
[ 136.179089][ T6458] __se_sys_futex+0x36f/0x400
[ 136.183763][ T6458] ? __pfx___se_sys_futex+0x10/0x10
[ 136.189061][ T6458] ? __x64_sys_futex+0x21/0xf0
[ 136.194163][ T6458] do_syscall_64+0xfa/0xf80
[ 136.198679][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.204824][ T6458] ? clear_bhb_loop+0x60/0xb0
[ 136.209747][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.215624][ T6458] RIP: 0033:0x7f540bd8f749
[ 136.220029][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 136.239794][ T6458] RSP: 002b:00007f540cc950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 136.248311][ T6458] RAX: ffffffffffffffda RBX: 00007f540bfe5fa8 RCX: 00007f540bd8f749
[ 136.256359][ T6458] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f540bfe5fac
[ 136.264404][ T6458] RBP: 00007f540bfe5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 136.272539][ T6458] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[ 136.280495][ T6458] R13: 00007f540bfe6038 R14: 00007ffe4f3ebe10 R15: 00007ffe4f3ebef8
[ 136.288557][ T6458]
[ 136.292148][ T6458] Kernel Offset: disabled
[ 136.296467][ T6458] Rebooting in 86400 seconds..