Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. 2026/05/21 22:02:05 parsed 1 programs [ 72.779946][ T4283] cgroup: Unknown subsys name 'net' [ 72.913687][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.495601][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.878787][ T4315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.900240][ T4315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.908721][ T4315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.916693][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.924571][ T4315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.932513][ T4315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.222263][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.233584][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.242767][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.275453][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.283422][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.291755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.018114][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 79.112516][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.120373][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.128847][ T4362] device bridge_slave_0 entered promiscuous mode [ 79.163439][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.171672][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.179621][ T4362] device bridge_slave_1 entered promiscuous mode [ 79.211695][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.235207][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.256902][ T4362] team0: Port device team_slave_0 added [ 79.266009][ T4362] team0: Port device team_slave_1 added [ 79.286955][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.294161][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.320150][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.333216][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.340397][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.366453][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.411443][ T4362] device hsr_slave_0 entered promiscuous mode [ 79.418812][ T4362] device hsr_slave_1 entered promiscuous mode [ 79.542986][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.577583][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.593734][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.603278][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.627054][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.634401][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.642518][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.649667][ T4362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.695259][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.711866][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.723976][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.732371][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.741277][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.761739][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.773177][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.782447][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.789741][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.808388][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.817034][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.824675][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.846209][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.855570][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.879677][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.894513][ T4362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.905294][ T4362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.924493][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.933968][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.944516][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.123283][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.131018][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.145987][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.170416][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.179444][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.196648][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.205546][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.214006][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.222437][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.235098][ T4362] device veth0_vlan entered promiscuous mode [ 80.251076][ T4362] device veth1_vlan entered promiscuous mode [ 80.276340][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.289218][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.299389][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.308192][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.319229][ T4362] device veth0_macvtap entered promiscuous mode [ 80.330396][ T4362] device veth1_macvtap entered promiscuous mode [ 80.353806][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.361562][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.378686][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.387678][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.397014][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.410290][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.421023][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.430589][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.443059][ T4362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.452085][ T4362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.461723][ T4362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.471384][ T4362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.617132][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/21 22:02:15 executed programs: 0 [ 81.127708][ T4315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.135832][ T4315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.143732][ T4315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.153592][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.161489][ T4315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.174334][ T4315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.283439][ T4382] chnl_net:caif_netlink_parms(): no params data found [ 81.325847][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.333498][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.342320][ T4382] device bridge_slave_0 entered promiscuous mode [ 81.352986][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.360457][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.369785][ T4382] device bridge_slave_1 entered promiscuous mode [ 81.393030][ T4382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.405452][ T4382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.434222][ T4382] team0: Port device team_slave_0 added [ 81.441725][ T4382] team0: Port device team_slave_1 added [ 81.459503][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.466522][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.492979][ T4382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.512451][ T4382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.519517][ T4382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.545882][ T4382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.584666][ T4382] device hsr_slave_0 entered promiscuous mode [ 81.591669][ T4382] device hsr_slave_1 entered promiscuous mode [ 81.599123][ T4382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.607053][ T4382] Cannot create hsr debugfs directory [ 81.649921][ T41] cfg80211: failed to load regulatory.db [ 83.059787][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.248867][ T4317] Bluetooth: hci0: command 0x0409 tx timeout [ 85.328445][ T4317] Bluetooth: hci0: command 0x041b tx timeout [ 85.669144][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.751508][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.594048][ T40] device hsr_slave_0 left promiscuous mode [ 86.602202][ T40] device hsr_slave_1 left promiscuous mode [ 86.612914][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.620903][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.632318][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.640071][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.647699][ T40] device bridge_slave_1 left promiscuous mode [ 86.656559][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.670081][ T40] device bridge_slave_0 left promiscuous mode [ 86.676396][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.701970][ T40] device veth1_macvtap left promiscuous mode [ 86.709054][ T40] device veth0_macvtap left promiscuous mode [ 86.715509][ T40] device veth1_vlan left promiscuous mode [ 86.722048][ T40] device veth0_vlan left promiscuous mode [ 87.140115][ T40] team0 (unregistering): Port device team_slave_1 removed [ 87.170286][ T40] team0 (unregistering): Port device team_slave_0 removed [ 87.201357][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.234904][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.410111][ T4317] Bluetooth: hci0: command 0x040f tx timeout [ 87.437795][ T40] bond0 (unregistering): Released all slaves [ 87.505258][ T4382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.515015][ T4382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.524774][ T4382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.535090][ T4382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.603497][ T4382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.627775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.636686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.648618][ T4382] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.657637][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.668413][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.676911][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.684284][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.692952][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.709635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.719307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.733799][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.741071][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.753633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.765095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.776795][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.786371][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.795614][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.807565][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.816507][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.829966][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.838805][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.857474][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.867318][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.885315][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.150378][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.158434][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.173694][ T4382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.216463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.230715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.264758][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.276283][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.290435][ T4382] device veth0_vlan entered promiscuous mode [ 88.299363][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.309704][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.322838][ T4382] device veth1_vlan entered promiscuous mode [ 88.350513][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.359953][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.368733][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.377456][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.391294][ T4382] device veth0_macvtap entered promiscuous mode [ 88.406738][ T4382] device veth1_macvtap entered promiscuous mode [ 88.422361][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.430079][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.438905][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.446794][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.462536][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.481902][ T4382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.489355][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.499776][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.511323][ T4382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.520672][ T4382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.530130][ T4382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539727][ T4382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.597230][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.606845][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.621267][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.637801][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/05/21 22:02:23 executed programs: 2 [ 88.646073][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.657482][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.761529][ C1] hrtimer: interrupt took 55033 ns [ 89.383591][ C1] ================================================================== [ 89.391716][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 89.399530][ C1] Write of size 32 at addr ffff888028423e60 by task syz.0.37/4445 [ 89.407326][ C1] [ 89.409666][ C1] CPU: 1 PID: 4445 Comm: syz.0.37 Not tainted syzkaller #0 [ 89.416884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.426945][ C1] Call Trace: [ 89.430267][ C1] [ 89.433204][ C1] dump_stack_lvl+0x188/0x24e [ 89.437913][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 89.442953][ C1] ? show_regs_print_info+0x12/0x12 [ 89.448155][ C1] ? load_image+0x400/0x400 [ 89.452741][ C1] ? __virt_addr_valid+0x465/0x540 [ 89.457864][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 89.463009][ C1] print_report+0xa8/0x210 [ 89.467444][ C1] kasan_report+0x10b/0x140 [ 89.472151][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 89.477372][ C1] kasan_check_range+0x235/0x290 [ 89.482320][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 89.487599][ C1] memcpy+0x3c/0x60 [ 89.491425][ C1] __bpf_get_stackid+0x6c9/0x920 [ 89.496408][ C1] bpf_get_stackid_pe+0x2ec/0x400 [ 89.501466][ C1] bpf_prog_644fb7c94e15512a+0x2b/0x40 [ 89.506940][ C1] bpf_overflow_handler+0x522/0x7c0 [ 89.512237][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 89.517528][ C1] ? perf_swevent_overflow+0x230/0x230 [ 89.522995][ C1] ? sched_clock_cpu+0x6e/0x260 [ 89.527861][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 89.534116][ C1] __perf_event_overflow+0x448/0x610 [ 89.539418][ C1] perf_swevent_hrtimer+0x472/0x630 [ 89.544628][ C1] ? cpu_clock_event_read+0x50/0x50 [ 89.549841][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.555917][ C1] ? _raw_spin_unlock+0x40/0x40 [ 89.560780][ C1] __hrtimer_run_queues+0x50b/0xd50 [ 89.565989][ C1] ? cpu_clock_event_read+0x50/0x50 [ 89.571213][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 89.576333][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 89.582849][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 89.587800][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 89.593805][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 89.599445][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.605433][ C1] RIP: 0033:0x7fff553ec9da [ 89.609853][ C1] Code: 48 89 75 d0 41 89 fd e8 04 03 00 00 44 89 ef 48 8b 75 d0 48 89 c2 48 85 d2 79 ad e9 b1 00 00 00 48 89 d7 4c 29 d7 48 0f af f8 <31> c0 4c 39 d2 48 0f 46 f8 4c 01 cf 48 d3 ef 48 89 7d c8 48 81 ff [ 89.629467][ C1] RSP: 002b:00007fff553d3cb0 EFLAGS: 00000202 [ 89.635574][ C1] RAX: 0000000000745d1e RBX: 00007fff553e80b0 RCX: 0000000000000018 [ 89.643557][ C1] RDX: 0000002ffe060c26 RSI: 00007fff553d3d70 RDI: 000096abcab5ee04 [ 89.651533][ C1] RBP: 00007fff553d3cf0 R08: 0000000000000059 R09: 00136cc807c80a84 [ 89.659519][ C1] R10: 0000002ffcba9248 R11: 0000000000004134 R12: 0000000000000010 [ 89.667495][ C1] R13: 00007f0acda15fac R14: 00007fff553e8080 R15: 0000000000004134 [ 89.675483][ C1] [ 89.678511][ C1] [ 89.680835][ C1] Allocated by task 4445: [ 89.685171][ C1] kasan_set_track+0x4b/0x70 [ 89.689791][ C1] __kasan_kmalloc+0x8e/0xa0 [ 89.694430][ C1] __kmalloc_node+0xb0/0x240 [ 89.699045][ C1] bpf_map_area_alloc+0x47/0xe0 [ 89.704041][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 89.709773][ C1] stack_map_alloc+0x390/0x520 [ 89.714546][ C1] map_create+0x534/0x1000 [ 89.718972][ C1] __sys_bpf+0x38b/0x780 [ 89.723225][ C1] __x64_sys_bpf+0x78/0x90 [ 89.727658][ C1] do_syscall_64+0x4c/0xa0 [ 89.732085][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.737990][ C1] [ 89.740322][ C1] The buggy address belongs to the object at ffff888028423e00 [ 89.740322][ C1] which belongs to the cache kmalloc-cg-128 of size 128 [ 89.754757][ C1] The buggy address is located 96 bytes inside of [ 89.754757][ C1] 128-byte region [ffff888028423e00, ffff888028423e80) [ 89.767962][ C1] [ 89.770293][ C1] The buggy address belongs to the physical page: [ 89.776700][ C1] page:ffffea0000a108c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28423 [ 89.786857][ C1] memcg:ffff88802719e501 [ 89.791105][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 89.798663][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442a00 [ 89.807252][ C1] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88802719e501 [ 89.815844][ C1] page dumped because: kasan: bad access detected [ 89.822267][ C1] page_owner tracks the page as allocated [ 89.827991][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4382, tgid 4382 (syz-executor), ts 88681334943, free_ts 88680932147 [ 89.846223][ C1] post_alloc_hook+0x173/0x1a0 [ 89.851000][ C1] get_page_from_freelist+0x1a1e/0x1ab0 [ 89.856586][ C1] __alloc_pages+0x1ec/0x4f0 [ 89.861215][ C1] alloc_slab_page+0x5d/0x160 [ 89.865899][ C1] new_slab+0x87/0x2c0 [ 89.869975][ C1] ___slab_alloc+0xbc6/0x1240 [ 89.874658][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 89.880123][ C1] __kmalloc_node+0xa0/0x240 [ 89.884722][ C1] kvmalloc_node+0x6c/0x180 [ 89.889265][ C1] nf_hook_entries_grow+0x309/0x730 [ 89.894469][ C1] __nf_register_net_hook+0x2c9/0x910 [ 89.899848][ C1] nf_register_net_hook+0xae/0x190 [ 89.904964][ C1] nf_register_net_hooks+0x40/0x1a0 [ 89.910166][ C1] ip6t_register_table+0x53f/0x7d0 [ 89.915286][ C1] ip6table_filter_table_init+0x71/0xb0 [ 89.920842][ C1] xt_find_table_lock+0x220/0x360 [ 89.925869][ C1] page last free stack trace: [ 89.930549][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 89.936020][ C1] free_unref_page+0x2e/0x3f0 [ 89.940708][ C1] __vunmap+0x856/0xa00 [ 89.945045][ C1] do_ipt_get_ctl+0xead/0x1190 [ 89.949813][ C1] nf_getsockopt+0x25e/0x280 [ 89.954501][ C1] ip_getsockopt+0x19b/0x230 [ 89.959116][ C1] __sys_getsockopt+0x1b0/0x230 [ 89.963978][ C1] __x64_sys_getsockopt+0xb1/0xc0 [ 89.969013][ C1] do_syscall_64+0x4c/0xa0 [ 89.973469][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.979367][ C1] [ 89.981693][ C1] Memory state around the buggy address: [ 89.987331][ C1] ffff888028423d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.995567][ C1] ffff888028423d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.003631][ C1] >ffff888028423e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 90.011707][ C1] ^ [ 90.019678][ C1] ffff888028423e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.027833][ C1] ffff888028423f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.035898][ C1] ================================================================== [ 90.044045][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.051240][ C1] CPU: 1 PID: 4445 Comm: syz.0.37 Not tainted syzkaller #0 [ 90.058448][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.068509][ C1] Call Trace: [ 90.071794][ C1] [ 90.075190][ C1] dump_stack_lvl+0x188/0x24e [ 90.080145][ C1] ? memcpy+0x3c/0x60 [ 90.084224][ C1] ? show_regs_print_info+0x12/0x12 [ 90.089432][ C1] ? load_image+0x400/0x400 [ 90.093948][ C1] panic+0x2e5/0x730 [ 90.097853][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 90.102360][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.108263][ C1] ? _raw_spin_unlock+0x40/0x40 [ 90.113114][ C1] ? print_memory_metadata+0x314/0x400 [ 90.118668][ C1] check_panic_on_warn+0x80/0xa0 [ 90.123610][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 90.128940][ C1] end_report+0x66/0x110 [ 90.133278][ C1] kasan_report+0x118/0x140 [ 90.137966][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 90.143206][ C1] kasan_check_range+0x235/0x290 [ 90.148330][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 90.153545][ C1] memcpy+0x3c/0x60 [ 90.157618][ C1] __bpf_get_stackid+0x6c9/0x920 [ 90.162567][ C1] bpf_get_stackid_pe+0x2ec/0x400 [ 90.167596][ C1] bpf_prog_644fb7c94e15512a+0x2b/0x40 [ 90.173236][ C1] bpf_overflow_handler+0x522/0x7c0 [ 90.178443][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 90.183731][ C1] ? perf_swevent_overflow+0x230/0x230 [ 90.189198][ C1] ? sched_clock_cpu+0x6e/0x260 [ 90.194058][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 90.200318][ C1] __perf_event_overflow+0x448/0x610 [ 90.205615][ C1] perf_swevent_hrtimer+0x472/0x630 [ 90.210839][ C1] ? cpu_clock_event_read+0x50/0x50 [ 90.216137][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.222036][ C1] ? _raw_spin_unlock+0x40/0x40 [ 90.226980][ C1] __hrtimer_run_queues+0x50b/0xd50 [ 90.232185][ C1] ? cpu_clock_event_read+0x50/0x50 [ 90.237390][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 90.242506][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 90.248590][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 90.253541][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 90.259537][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 90.265173][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 90.271164][ C1] RIP: 0033:0x7fff553ec9da [ 90.275589][ C1] Code: 48 89 75 d0 41 89 fd e8 04 03 00 00 44 89 ef 48 8b 75 d0 48 89 c2 48 85 d2 79 ad e9 b1 00 00 00 48 89 d7 4c 29 d7 48 0f af f8 <31> c0 4c 39 d2 48 0f 46 f8 4c 01 cf 48 d3 ef 48 89 7d c8 48 81 ff [ 90.295202][ C1] RSP: 002b:00007fff553d3cb0 EFLAGS: 00000202 [ 90.301278][ C1] RAX: 0000000000745d1e RBX: 00007fff553e80b0 RCX: 0000000000000018 [ 90.309255][ C1] RDX: 0000002ffe060c26 RSI: 00007fff553d3d70 RDI: 000096abcab5ee04 [ 90.317234][ C1] RBP: 00007fff553d3cf0 R08: 0000000000000059 R09: 00136cc807c80a84 [ 90.325210][ C1] R10: 0000002ffcba9248 R11: 0000000000004134 R12: 0000000000000010 [ 90.333193][ C1] R13: 00007f0acda15fac R14: 00007fff553e8080 R15: 0000000000004134 [ 90.341178][ C1] [ 90.344702][ C1] Kernel Offset: disabled [ 90.349109][ C1] Rebooting in 86400 seconds..