no interfaces have a carrier [ 59.969031][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.979257][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. 2026/04/02 08:47:56 parsed 1 programs syzkaller login: [ 89.760556][ T4270] cgroup: Unknown subsys name 'net' [ 89.891109][ T4270] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.497301][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 93.267703][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 93.328936][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.336807][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.345807][ T4287] device bridge_slave_0 entered promiscuous mode [ 93.360522][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.367957][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.376330][ T4287] device bridge_slave_1 entered promiscuous mode [ 93.399878][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.415387][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.446326][ T4287] team0: Port device team_slave_0 added [ 93.455811][ T4287] team0: Port device team_slave_1 added [ 93.478807][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.486229][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.512217][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.525129][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.532136][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.558123][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.592770][ T4287] device hsr_slave_0 entered promiscuous mode [ 93.599716][ T4287] device hsr_slave_1 entered promiscuous mode [ 93.723818][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.736229][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.747315][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.759969][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.793469][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.800897][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.809025][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.816344][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.880651][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.897127][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.908418][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.917922][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.926985][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.941751][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.954876][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.963447][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.970661][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.979943][ T1170] cfg80211: failed to load regulatory.db [ 93.998504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.008292][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.015489][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.037866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.049955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.059110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.072613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.087441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.098930][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.296980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.305762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.320966][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.341332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.350308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.370293][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.386271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.396009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.404941][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.415890][ T4287] device veth0_vlan entered promiscuous mode [ 94.429664][ T4287] device veth1_vlan entered promiscuous mode [ 94.451311][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.460872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.469528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.478380][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.491810][ T4287] device veth0_macvtap entered promiscuous mode [ 94.502431][ T4287] device veth1_macvtap entered promiscuous mode [ 94.520823][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.528518][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.542253][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.550865][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.560173][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.573237][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.581871][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.591635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.605843][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.614987][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623721][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.632679][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.770062][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.922308][ T4312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.931461][ T4312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.942112][ T4312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.950694][ T4312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.958821][ T4312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.967022][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.956387][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.969057][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.989934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.011847][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.027930][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.035953][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.044186][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/02 08:48:07 executed programs: 0 [ 98.052227][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.060883][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.069688][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.078473][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.086995][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.094616][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.229153][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 98.281999][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.289287][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.298652][ T4362] device bridge_slave_0 entered promiscuous mode [ 98.308000][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.315379][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.323601][ T4362] device bridge_slave_1 entered promiscuous mode [ 98.346581][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.358335][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.384365][ T4362] team0: Port device team_slave_0 added [ 98.392641][ T4362] team0: Port device team_slave_1 added [ 98.412651][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.419899][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.445880][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.460458][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.467559][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.493518][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.531539][ T4362] device hsr_slave_0 entered promiscuous mode [ 98.539439][ T4362] device hsr_slave_1 entered promiscuous mode [ 98.546873][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.555264][ T4362] Cannot create hsr debugfs directory [ 99.426649][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.488309][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.135530][ T4312] Bluetooth: hci0: command 0x0409 tx timeout [ 100.338810][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.351367][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.362716][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.381473][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.463418][ T11] device hsr_slave_0 left promiscuous mode [ 100.473365][ T11] device hsr_slave_1 left promiscuous mode [ 100.483102][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.493181][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.502569][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.512885][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.521289][ T11] device bridge_slave_1 left promiscuous mode [ 100.530807][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.543681][ T11] device bridge_slave_0 left promiscuous mode [ 100.551557][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.582655][ T11] device veth1_macvtap left promiscuous mode [ 100.591448][ T11] device veth0_macvtap left promiscuous mode [ 100.598293][ T11] device veth1_vlan left promiscuous mode [ 100.607032][ T11] device veth0_vlan left promiscuous mode [ 101.066652][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.102656][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.133432][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.170084][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.376105][ T11] bond0 (unregistering): Released all slaves [ 101.476167][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.490664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.499187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.513008][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.537319][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.550160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.560085][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.567397][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.577044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.586614][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.596953][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.604162][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.625728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.640727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.649935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.669045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.678631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.687798][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.696753][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.706633][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.729246][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.738511][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.749939][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.760128][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.772411][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.015932][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.023461][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.065775][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.115133][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.125586][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.147929][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.157693][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.171939][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.180797][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.196305][ T4362] device veth0_vlan entered promiscuous mode [ 102.208684][ T4362] device veth1_vlan entered promiscuous mode [ 102.215165][ T4312] Bluetooth: hci0: command 0x041b tx timeout [ 102.247083][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.257060][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.272008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.283473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.301068][ T4362] device veth0_macvtap entered promiscuous mode [ 102.319022][ T4362] device veth1_macvtap entered promiscuous mode [ 102.365445][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.372923][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.383154][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.395049][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.405965][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.428578][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.436966][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.447240][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.464917][ T4362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.473834][ T4362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.483090][ T4362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.491975][ T4362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.552975][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.565475][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.574778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.597320][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.607250][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.615930][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.676085][ C0] ================================================================== [ 102.676098][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 102.676133][ C0] Write of size 56 at addr ffff88805d567c90 by task syz.0.17/4419 [ 102.676145][ C0] [ 102.676158][ C0] CPU: 0 PID: 4419 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.676172][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.676185][ C0] Call Trace: [ 102.676198][ C0] <#DB> [ 102.676209][ C0] dump_stack_lvl+0x188/0x24e [ 102.676242][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 102.676268][ C0] ? show_regs_print_info+0x12/0x12 [ 102.676289][ C0] ? load_image+0x400/0x400 [ 102.676306][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 102.676326][ C0] ? __virt_addr_valid+0x188/0x540 [ 102.676348][ C0] ? __virt_addr_valid+0x465/0x540 [ 102.676368][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.676384][ C0] print_report+0xa8/0x210 [ 102.676405][ C0] kasan_report+0x10b/0x140 [ 102.676437][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.676456][ C0] kasan_check_range+0x235/0x290 [ 102.676477][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.676493][ C0] memcpy+0x3c/0x60 [ 102.676507][ C0] __bpf_get_stackid+0x6c9/0x920 [ 102.676526][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 102.676545][ C0] bpf_prog_a82986b851e905af+0x21/0x33 [ 102.676564][ C0] bpf_overflow_handler+0x522/0x7c0 [ 102.676587][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 102.676603][ C0] ? perf_swevent_overflow+0x230/0x230 [ 102.676622][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 102.676646][ C0] __perf_event_overflow+0x448/0x610 [ 102.676671][ C0] perf_swevent_event+0x315/0x570 [ 102.676694][ C0] ? perf_tp_event+0xc30/0xc30 [ 102.676720][ C0] perf_bp_event+0x312/0x3f0 [ 102.676744][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 102.676777][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 102.676795][ C0] ? read_lock_is_recursive+0x10/0x10 [ 102.676818][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 102.676842][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 102.676858][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 102.676876][ C0] notify_die+0x141/0x1a0 [ 102.676893][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 102.676915][ C0] notify_debug+0x20/0x30 [ 102.676933][ C0] exc_debug+0xd9/0x130 [ 102.676955][ C0] asm_exc_debug+0x1a/0x40 [ 102.676972][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 102.676997][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 102.677012][ C0] RSP: 0018:ffffc90003447d48 EFLAGS: 00050202 [ 102.677026][ C0] RAX: ffffffff84114301 RBX: 0000000000000050 RCX: 000000000000000f [ 102.677036][ C0] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc90003447e01 [ 102.677046][ C0] RBP: 0000000000000000 R08: ffffc90003447e0f R09: 1ffff92000688fc1 [ 102.677056][ C0] R10: dffffc0000000000 R11: fffff52000688fc2 R12: 00007fffffffefb0 [ 102.677066][ C0] R13: 0000000000000050 R14: ffffc90003447dc0 R15: 00002000000002c0 [ 102.677079][ C0] ? _copy_from_user+0x61/0x170 [ 102.677104][ C0] [ 102.677108][ C0] [ 102.677118][ C0] _copy_from_user+0xf4/0x170 [ 102.677137][ C0] __sys_bpf+0x2ea/0x780 [ 102.677158][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 102.677185][ C0] ? lock_chain_count+0x20/0x20 [ 102.677208][ C0] __x64_sys_bpf+0x78/0x90 [ 102.677231][ C0] do_syscall_64+0x4c/0xa0 [ 102.677251][ C0] ? clear_bhb_loop+0x60/0xb0 [ 102.677269][ C0] ? clear_bhb_loop+0x60/0xb0 [ 102.677290][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.677308][ C0] RIP: 0033:0x7fee8bd9c819 [ 102.677318][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.677329][ C0] RSP: 002b:00007ffd747af6b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.677343][ C0] RAX: ffffffffffffffda RBX: 00007fee8c015fa0 RCX: 00007fee8bd9c819 [ 102.677353][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 102.677362][ C0] RBP: 00007fee8be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 102.677371][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.677379][ C0] R13: 00007fee8c015fac R14: 00007fee8c015fa0 R15: 00007fee8c015fa0 [ 102.677395][ C0] [ 102.677400][ C0] [ 102.677404][ C0] Allocated by task 4419: [ 102.677419][ C0] kasan_set_track+0x4b/0x70 [ 102.677441][ C0] __kasan_kmalloc+0x8e/0xa0 [ 102.677460][ C0] __kmalloc_node+0xb0/0x240 [ 102.677480][ C0] bpf_map_area_alloc+0x47/0xe0 [ 102.677495][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 102.677510][ C0] stack_map_alloc+0x390/0x520 [ 102.677524][ C0] map_create+0x534/0x1000 [ 102.677542][ C0] __sys_bpf+0x38b/0x780 [ 102.677559][ C0] __x64_sys_bpf+0x78/0x90 [ 102.677575][ C0] do_syscall_64+0x4c/0xa0 [ 102.677593][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.677609][ C0] [ 102.677611][ C0] The buggy address belongs to the object at ffff88805d567c80 [ 102.677611][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 102.677628][ C0] The buggy address is located 16 bytes inside of [ 102.677628][ C0] 64-byte region [ffff88805d567c80, ffff88805d567cc0) [ 102.677642][ C0] [ 102.677644][ C0] The buggy address belongs to the physical page: [ 102.677657][ C0] page:ffffea00017559c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d567 [ 102.677675][ C0] memcg:ffff888078713401 [ 102.677680][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 102.677705][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442780 [ 102.677718][ C0] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888078713401 [ 102.677724][ C0] page dumped because: kasan: bad access detected [ 102.677733][ C0] page_owner tracks the page as allocated [ 102.677740][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4357, tgid 4357 (syz-executor), ts 97479062266, free_ts 97432292251 [ 102.677762][ C0] post_alloc_hook+0x173/0x1a0 [ 102.677781][ C0] get_page_from_freelist+0x1a1e/0x1ab0 [ 102.677802][ C0] __alloc_pages+0x1ec/0x4f0 [ 102.677820][ C0] alloc_slab_page+0x5d/0x160 [ 102.677836][ C0] new_slab+0x87/0x2c0 [ 102.677850][ C0] ___slab_alloc+0xbc6/0x1240 [ 102.677864][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 102.677878][ C0] __kmalloc_node+0xa0/0x240 [ 102.677900][ C0] kvmalloc_node+0x6c/0x180 [ 102.677922][ C0] nf_hook_entries_grow+0x309/0x730 [ 102.677940][ C0] __nf_register_net_hook+0x2c9/0x910 [ 102.677958][ C0] nf_register_net_hook+0xae/0x190 [ 102.677973][ C0] nf_register_net_hooks+0x40/0x1a0 [ 102.677988][ C0] ops_init+0x355/0x5f0 [ 102.678007][ C0] setup_net+0x4f2/0xbd0 [ 102.678023][ C0] copy_net_ns+0x348/0x5b0 [ 102.678039][ C0] page last free stack trace: [ 102.678042][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 102.678061][ C0] free_unref_page+0x2e/0x3f0 [ 102.678079][ C0] tlb_finish_mmu+0x140/0x220 [ 102.678105][ C0] exit_mmap+0x384/0x960 [ 102.678122][ C0] __mmput+0x118/0x3c0 [ 102.678134][ C0] exit_mm+0x1fe/0x2d0 [ 102.678152][ C0] do_exit+0x905/0x2480 [ 102.678170][ C0] do_group_exit+0x217/0x2d0 [ 102.678189][ C0] get_signal+0x1272/0x1350 [ 102.678209][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 102.678225][ C0] exit_to_user_mode_loop+0x70/0x110 [ 102.678246][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 102.678266][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 102.678279][ C0] do_syscall_64+0x58/0xa0 [ 102.678298][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.678314][ C0] [ 102.678316][ C0] Memory state around the buggy address: [ 102.678322][ C0] ffff88805d567b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 102.678330][ C0] ffff88805d567c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 102.678339][ C0] >ffff88805d567c80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 102.678349][ C0] ^ [ 102.678356][ C0] ffff88805d567d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.678364][ C0] ffff88805d567d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.678370][ C0] ================================================================== [ 102.678378][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.678383][ C0] CPU: 0 PID: 4419 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.678396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.678403][ C0] Call Trace: [ 102.678407][ C0] <#DB> [ 102.678411][ C0] dump_stack_lvl+0x188/0x24e [ 102.678438][ C0] ? memcpy+0x3c/0x60 [ 102.678451][ C0] ? show_regs_print_info+0x12/0x12 [ 102.678471][ C0] ? load_image+0x400/0x400 [ 102.678492][ C0] panic+0x2e5/0x730 [ 102.678505][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 102.678526][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 102.678542][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 102.678558][ C0] ? _raw_spin_unlock+0x40/0x40 [ 102.678574][ C0] check_panic_on_warn+0x80/0xa0 [ 102.678591][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.678606][ C0] end_report+0x66/0x110 [ 102.678629][ C0] kasan_report+0x118/0x140 [ 102.678650][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.678669][ C0] kasan_check_range+0x235/0x290 [ 102.678689][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.678705][ C0] memcpy+0x3c/0x60 [ 102.678718][ C0] __bpf_get_stackid+0x6c9/0x920 [ 102.678737][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 102.678755][ C0] bpf_prog_a82986b851e905af+0x21/0x33 [ 102.678769][ C0] bpf_overflow_handler+0x522/0x7c0 [ 102.678786][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 102.678801][ C0] ? perf_swevent_overflow+0x230/0x230 [ 102.678820][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 102.678843][ C0] __perf_event_overflow+0x448/0x610 [ 102.678867][ C0] perf_swevent_event+0x315/0x570 [ 102.678889][ C0] ? perf_tp_event+0xc30/0xc30 [ 102.678915][ C0] perf_bp_event+0x312/0x3f0 [ 102.678938][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 102.678971][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 102.678988][ C0] ? read_lock_is_recursive+0x10/0x10 [ 102.679010][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 102.679032][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 102.679048][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 102.679065][ C0] notify_die+0x141/0x1a0 [ 102.679082][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 102.679103][ C0] notify_debug+0x20/0x30 [ 102.679120][ C0] exc_debug+0xd9/0x130 [ 102.679141][ C0] asm_exc_debug+0x1a/0x40 [ 102.679157][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 102.679178][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 102.679189][ C0] RSP: 0018:ffffc90003447d48 EFLAGS: 00050202 [ 102.679200][ C0] RAX: ffffffff84114301 RBX: 0000000000000050 RCX: 000000000000000f [ 102.679209][ C0] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc90003447e01 [ 102.679218][ C0] RBP: 0000000000000000 R08: ffffc90003447e0f R09: 1ffff92000688fc1 [ 102.679228][ C0] R10: dffffc0000000000 R11: fffff52000688fc2 R12: 00007fffffffefb0 [ 102.679238][ C0] R13: 0000000000000050 R14: ffffc90003447dc0 R15: 00002000000002c0 [ 102.679250][ C0] ? _copy_from_user+0x61/0x170 [ 102.679270][ C0] [ 102.679274][ C0] [ 102.679277][ C0] _copy_from_user+0xf4/0x170 [ 102.679296][ C0] __sys_bpf+0x2ea/0x780 [ 102.679316][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 102.679342][ C0] ? lock_chain_count+0x20/0x20 [ 102.679365][ C0] __x64_sys_bpf+0x78/0x90 [ 102.679383][ C0] do_syscall_64+0x4c/0xa0 [ 102.679402][ C0] ? clear_bhb_loop+0x60/0xb0 [ 102.679420][ C0] ? clear_bhb_loop+0x60/0xb0 [ 102.679446][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.679463][ C0] RIP: 0033:0x7fee8bd9c819 [ 102.679473][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.679483][ C0] RSP: 002b:00007ffd747af6b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.679496][ C0] RAX: ffffffffffffffda RBX: 00007fee8c015fa0 RCX: 00007fee8bd9c819 [ 102.679506][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 102.679515][ C0] RBP: 00007fee8be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 102.679530][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.679538][ C0] R13: 00007fee8c015fac R14: 00007fee8c015fa0 R15: 00007fee8c015fa0 [ 102.679554][ C0] [ 102.680173][ C0] Kernel Offset: disabled [ 102.680179][ C0] [ 102.680182][ C0] ================================ [ 102.680187][ C0] WARNING: inconsistent lock state [ 102.680196][ C0] syzkaller #0 Not tainted [ 102.680204][ C0] -------------------------------- [ 102.680207][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 102.680215][ C0] syz.0.17/4419 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 102.680229][ C0] ffffffff8cb217d8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0x1c/0xa0 [ 102.680272][ C0] {INITIAL USE} state was registered at: [ 102.680277][ C0] irq event stamp: 1890 [ 102.680281][ C0] hardirqs last enabled at (1889): [] syscall_enter_from_user_mode+0x21/0x80 [ 102.680300][ C0] hardirqs last disabled at (1890): [] exc_debug+0x6e/0x130 [ 102.680324][ C0] softirqs last enabled at (1840): [] bpf_prog_load+0x1127/0x1560 [ 102.680347][ C0] softirqs last disabled at (1838): [] bpf_ksym_add+0x29/0x340 [ 102.680362][ C0] [ 102.680362][ C0] other info that might help us debug this: [ 102.680366][ C0] Possible unsafe locking scenario: [ 102.680366][ C0] [ 102.680369][ C0] CPU0 [ 102.680371][ C0] ---- [ 102.680373][ C0] lock((console_sem).lock); [ 102.680381][ C0] [ 102.680383][ C0] lock((console_sem).lock); [ 102.680390][ C0] [ 102.680390][ C0] *** DEADLOCK *** [ 102.680390][ C0] [ 102.680393][ C0] no locks held by syz.0.17/4419. [ 102.680398][ C0] [ 102.680398][ C0] stack backtrace: [ 102.680401][ C0] CPU: 0 PID: 4419 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.680414][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.680421][ C0] Call Trace: [ 102.680425][ C0] <#DB> [ 102.680435][ C0] dump_stack_lvl+0x188/0x24e [ 102.680456][ C0] ? show_regs_print_info+0x12/0x12 [ 102.680479][ C0] ? print_usage_bug+0x42a/0x690 [ 102.680500][ C0] ? verify_lock_unused+0x18/0x140 [ 102.680521][ C0] lock_acquire+0x2df/0x4a0 [ 102.680542][ C0] ? down_trylock+0x1c/0xa0 [ 102.680563][ C0] ? read_lock_is_recursive+0x10/0x10 [ 102.680583][ C0] ? __wake_up_klogd+0xd9/0x100 [ 102.680608][ C0] ? vprintk_emit+0x12f/0x6a0 [ 102.680628][ C0] ? printk_sprint+0x460/0x460 [ 102.680649][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 102.680664][ C0] ? down_trylock+0x1c/0xa0 [ 102.680684][ C0] ? _raw_spin_lock+0x40/0x40 [ 102.680698][ C0] ? verify_lock_unused+0x18/0x140 [ 102.680719][ C0] down_trylock+0x1c/0xa0 [ 102.680741][ C0] __down_trylock_console_sem+0xd4/0x1f0 [ 102.680763][ C0] ? kmsg_dump+0x1b/0x240 [ 102.680783][ C0] ? panic+0x376/0x730 [ 102.680795][ C0] ? console_trylock+0x160/0x160 [ 102.680816][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 102.680836][ C0] ? kmsg_dump+0x1b/0x240 [ 102.680858][ C0] console_unblank+0x28/0x170 [ 102.680879][ C0] panic+0x376/0x730 [ 102.680892][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 102.680912][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 102.680928][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 102.680943][ C0] ? _raw_spin_unlock+0x40/0x40 [ 102.680959][ C0] check_panic_on_warn+0x80/0xa0 [ 102.680976][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.680991][ C0] end_report+0x66/0x110 [ 102.681010][ C0] kasan_report+0x118/0x140 [ 102.681031][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.681049][ C0] kasan_check_range+0x235/0x290 [ 102.681069][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 102.681085][ C0] memcpy+0x3c/0x60 [ 102.681098][ C0] __bpf_get_stackid+0x6c9/0x920 [ 102.681116][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 102.681134][ C0] bpf_prog_a82986b851e905af+0x21/0x33 [ 102.681147][ C0] bpf_overflow_handler+0x522/0x7c0 [ 102.681165][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 102.681180][ C0] ? perf_swevent_overflow+0x230/0x230 [ 102.681200][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 102.681223][ C0] __perf_event_overflow+0x448/0x610 [ 102.681247][ C0] perf_swevent_event+0x315/0x570 [ 102.681269][ C0] ? perf_tp_event+0xc30/0xc30 [ 102.681294][ C0] perf_bp_event+0x312/0x3f0 [ 102.681316][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 102.681347][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 102.681369][ C0] ? read_lock_is_recursive+0x10/0x10 [ 102.681392][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 102.681414][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 102.681434][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 102.681452][ C0] notify_die+0x141/0x1a0 [ 102.681471][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 102.681495][ C0] notify_debug+0x20/0x30 [ 102.681512][ C0] exc_debug+0xd9/0x130 [ 102.681534][ C0] asm_exc_debug+0x1a/0x40 [ 102.681550][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 102.681571][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 102.681582][ C0] RSP: 0018:ffffc90003447d48 EFLAGS: 00050202 [ 102.681593][ C0] RAX: ffffffff84114301 RBX: 0000000000000050 RCX: 000000000000000f [ 102.681602][ C0] RDX: 0000000000000050 RSI: 0000200000000301 RDI: ffffc90003447e01 [ 102.681611][ C0] RBP: 0000000000000000 R08: ffffc90003447e0f R09: 1ffff92000688fc1 [ 102.681621][ C0] R10: dffffc0000000000 R11: fffff52000688fc2 R12: 00007fffffffefb0 [ 102.681631][ C0] R13: 0000000000000050 R14: ffffc90003447dc0 R15: 00002000000002c0 [ 102.681642][ C0] ? _copy_from_user+0x61/0x170 [ 102.681663][ C0] [ 102.681666][ C0] [ 102.681670][ C0] _copy_from_user+0xf4/0x170 [ 102.681688][ C0] __sys_bpf+0x2ea/0x780 [ 102.681708][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 102.681733][ C0] ? lock_chain_count+0x20/0x20 [ 102.681755][ C0] __x64_sys_bpf+0x78/0x90 [ 102.681773][ C0] do_syscall_64+0x4c/0xa0 [ 102.681792][ C0] ? clear_bhb_loop+0x60/0xb0 [ 102.681810][ C0] ? clear_bhb_loop+0x60/0xb0 [ 102.681828][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.681845][ C0] RIP: 0033:0x7fee8bd9c819 [ 102.681855][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.681865][ C0] RSP: 002b:00007ffd747af6b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.681878][ C0] RAX: ffffffffffffffda RBX: 00007fee8c015fa0 RCX: 00007fee8bd9c819 [ 102.681888][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 102.681896][ C0] RBP: 00007fee8be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 102.681905][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.681913][ C0] R13: 00007fee8c015fac R14: 00007fee8c015fa0 R15: 00007fee8c015fa0 [ 102.681927][ C0]