Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2026/02/23 13:43:28 parsed 1 programs [ 88.252942][ T5771] cgroup: Unknown subsys name 'net' [ 88.419415][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.238966][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.235954][ T1187] cfg80211: failed to load regulatory.db [ 92.837272][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 92.926472][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.935458][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.943189][ T5803] bridge_slave_0: entered allmulticast mode [ 92.950808][ T5803] bridge_slave_0: entered promiscuous mode [ 92.960219][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.967852][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.975299][ T5803] bridge_slave_1: entered allmulticast mode [ 92.982750][ T5803] bridge_slave_1: entered promiscuous mode [ 93.016194][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.028160][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.058835][ T5803] team0: Port device team_slave_0 added [ 93.072466][ T5803] team0: Port device team_slave_1 added [ 93.102716][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.109828][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.136018][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.150693][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.157680][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.184229][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.237012][ T5803] hsr_slave_0: entered promiscuous mode [ 93.244178][ T5803] hsr_slave_1: entered promiscuous mode [ 93.440923][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.460455][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.472477][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.484335][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.524153][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.531686][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.540017][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.547289][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.594804][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.604877][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.649082][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.672404][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.697259][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.704455][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.718893][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.726081][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.957864][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.018963][ T5803] veth0_vlan: entered promiscuous mode [ 94.034129][ T5803] veth1_vlan: entered promiscuous mode [ 94.075561][ T5803] veth0_macvtap: entered promiscuous mode [ 94.086264][ T5803] veth1_macvtap: entered promiscuous mode [ 94.107166][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.123818][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.136808][ T5803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.145890][ T5803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.155526][ T5803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.164361][ T5803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.346840][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.688222][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.697704][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.706034][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.715830][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.723774][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.731752][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.116153][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.128466][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.161607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.169668][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.877879][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/23 13:43:40 executed programs: 0 [ 97.982769][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.994582][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.003628][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.013108][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.021750][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.029292][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.190015][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 98.266723][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.274194][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.281725][ T5876] bridge_slave_0: entered allmulticast mode [ 98.289079][ T5876] bridge_slave_0: entered promiscuous mode [ 98.299098][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.306515][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.314050][ T5876] bridge_slave_1: entered allmulticast mode [ 98.321571][ T5876] bridge_slave_1: entered promiscuous mode [ 98.352008][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.365571][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.397955][ T5876] team0: Port device team_slave_0 added [ 98.408888][ T5876] team0: Port device team_slave_1 added [ 98.435012][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.442113][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.468380][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.481723][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.488715][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.516131][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.559584][ T5876] hsr_slave_0: entered promiscuous mode [ 98.568453][ T5876] hsr_slave_1: entered promiscuous mode [ 98.575074][ T5876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.583098][ T5876] Cannot create hsr debugfs directory [ 99.301753][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.356028][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.074560][ T5083] Bluetooth: hci0: command tx timeout [ 100.264249][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.278125][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.296186][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.307157][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.334442][ T11] hsr_slave_0: left promiscuous mode [ 100.341527][ T11] hsr_slave_1: left promiscuous mode [ 100.348315][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.358690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.374294][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.382184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.393153][ T11] bridge_slave_1: left allmulticast mode [ 100.398891][ T11] bridge_slave_1: left promiscuous mode [ 100.406440][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.424793][ T11] bridge_slave_0: left allmulticast mode [ 100.431902][ T11] bridge_slave_0: left promiscuous mode [ 100.437957][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.477261][ T11] veth1_macvtap: left promiscuous mode [ 100.485892][ T11] veth0_macvtap: left promiscuous mode [ 100.492536][ T11] veth1_vlan: left promiscuous mode [ 100.498196][ T11] veth0_vlan: left promiscuous mode [ 101.058480][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.103391][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.140228][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.184877][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.437196][ T11] bond0 (unregistering): Released all slaves [ 101.601344][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.634018][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.649097][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.656284][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.680790][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.688003][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.755416][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.945110][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.005628][ T5876] veth0_vlan: entered promiscuous mode [ 102.022896][ T5876] veth1_vlan: entered promiscuous mode [ 102.097048][ T5876] veth0_macvtap: entered promiscuous mode [ 102.117211][ T5876] veth1_macvtap: entered promiscuous mode [ 102.147674][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.161478][ T5083] Bluetooth: hci0: command tx timeout [ 102.182859][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.197913][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.208751][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.218851][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.228885][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.371336][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.379252][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.433201][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.442632][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.504252][ C1] ================================================================== [ 102.504266][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 102.504305][ C1] Write of size 128 at addr ffff88802d0c9890 by task syz.0.17/5920 [ 102.504320][ C1] [ 102.504337][ C1] CPU: 1 PID: 5920 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.504354][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.504376][ C1] Call Trace: [ 102.504391][ C1] <#DB> [ 102.504397][ C1] dump_stack_lvl+0x18c/0x250 [ 102.504426][ C1] ? read_lock_is_recursive+0x20/0x20 [ 102.504449][ C1] ? show_regs_print_info+0x20/0x20 [ 102.504476][ C1] ? load_image+0x400/0x400 [ 102.504498][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 102.504522][ C1] ? __virt_addr_valid+0x18c/0x540 [ 102.504546][ C1] ? __virt_addr_valid+0x469/0x540 [ 102.504572][ C1] print_report+0xa8/0x210 [ 102.504596][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.504618][ C1] kasan_report+0x117/0x150 [ 102.504643][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.504672][ C1] kasan_check_range+0x241/0x290 [ 102.504703][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.504729][ C1] __asan_memcpy+0x40/0x70 [ 102.504757][ C1] __bpf_get_stackid+0x6bf/0x900 [ 102.504787][ C1] bpf_get_stackid_pe+0x343/0x410 [ 102.504816][ C1] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 102.504840][ C1] bpf_overflow_handler+0x1fc/0x510 [ 102.504869][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 102.504890][ C1] ? bpf_overflow_handler+0xde/0x510 [ 102.504917][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 102.504949][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 102.504973][ C1] __perf_event_overflow+0x447/0x630 [ 102.505000][ C1] perf_swevent_event+0x324/0x630 [ 102.505025][ C1] ? perf_tp_event+0x1450/0x1450 [ 102.505053][ C1] perf_bp_event+0x2a7/0x380 [ 102.505078][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 102.505119][ C1] ? lock_acquire+0x2c2/0x420 [ 102.505145][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 102.505173][ C1] notifier_call_chain+0x197/0x380 [ 102.505199][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 102.505225][ C1] atomic_notifier_call_chain+0xda/0x180 [ 102.505251][ C1] notify_die+0x145/0x1a0 [ 102.505277][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 102.505310][ C1] notify_debug+0x2e/0x50 [ 102.505327][ C1] exc_debug+0xde/0x140 [ 102.505358][ C1] asm_exc_debug+0x1e/0x40 [ 102.505376][ C1] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 102.505409][ C1] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 102.505426][ C1] RSP: 0000:ffffc900044cf618 EFLAGS: 00040802 [ 102.505444][ C1] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92000899ee2 [ 102.505459][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 102.505471][ C1] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 102.505483][ C1] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: 0000000000000001 [ 102.505496][ C1] R13: 1ffff92000899ee0 R14: 000000000000007f R15: dffffc0000000000 [ 102.505520][ C1] [ 102.505526][ C1] [ 102.505531][ C1] perf_callchain_user+0xbe4/0x15c0 [ 102.505571][ C1] get_perf_callchain+0x394/0x510 [ 102.505593][ C1] ? put_callchain_entry+0xb0/0xb0 [ 102.505613][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 102.505631][ C1] ? local_clock_noinstr+0xc/0xd0 [ 102.505650][ C1] ? __perf_event_header__init_id+0x3c5/0x480 [ 102.505673][ C1] perf_prepare_sample+0x3c7/0x1df0 [ 102.505704][ C1] ? read_lock_is_recursive+0x20/0x20 [ 102.505724][ C1] ? perf_callchain+0x220/0x220 [ 102.505743][ C1] ? bpf_get_stackid_pe+0x343/0x410 [ 102.505768][ C1] perf_event_output_forward+0x187/0x3e0 [ 102.505789][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 102.505808][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 102.505829][ C1] ? bpf_overflow_handler+0xde/0x510 [ 102.505855][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 102.505880][ C1] ? __se_sys_ioctl+0x48/0x170 [ 102.505906][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 102.505930][ C1] __perf_event_overflow+0x447/0x630 [ 102.505956][ C1] perf_swevent_event+0x324/0x630 [ 102.505982][ C1] ? perf_tp_event+0x1450/0x1450 [ 102.506008][ C1] perf_bp_event+0x2a7/0x380 [ 102.506029][ C1] ? get_futex_key+0x7f0/0x1010 [ 102.506060][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 102.506083][ C1] ? verify_lock_unused+0x140/0x140 [ 102.506127][ C1] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 102.506153][ C1] notifier_call_chain+0x197/0x380 [ 102.506177][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 102.506202][ C1] atomic_notifier_call_chain+0xda/0x180 [ 102.506226][ C1] notify_die+0x145/0x1a0 [ 102.506252][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 102.506284][ C1] notify_debug+0x2e/0x50 [ 102.506301][ C1] noist_exc_debug+0x77/0x120 [ 102.506329][ C1] ? clear_bhb_loop+0x40/0x90 [ 102.506351][ C1] asm_exc_debug+0x33/0x40 [ 102.506369][ C1] RIP: 0033:0x7eff12d7b43d [ 102.506385][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 102.506400][ C1] RSP: 002b:00007fff3f9c82b8 EFLAGS: 00000283 [ 102.506414][ C1] RAX: 0000000000000300 RBX: 00007fff3f9c87f0 RCX: 2f666c65732f636f [ 102.506427][ C1] RDX: 0000200000000300 RSI: 00007eff12e5c9c0 RDI: 0000200000000300 [ 102.506438][ C1] RBP: 0000200000000300 R08: 00007fff3f9c8a20 R09: 00000000ffffffff [ 102.506450][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 102.506460][ C1] R13: 0000000000000073 R14: 00007eff12e31e03 R15: 00007fff3f9c88b0 [ 102.506481][ C1] [ 102.506487][ C1] [ 102.506490][ C1] Allocated by task 5920: [ 102.506497][ C1] kasan_set_track+0x4e/0x70 [ 102.506533][ C1] __kasan_kmalloc+0x8f/0xa0 [ 102.506553][ C1] __kmalloc_node+0xb4/0x230 [ 102.506576][ C1] bpf_map_area_alloc+0x5e/0x110 [ 102.506602][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 102.506624][ C1] stack_map_alloc+0x33a/0x4c0 [ 102.506644][ C1] map_create+0x877/0x12f0 [ 102.506661][ C1] __sys_bpf+0x651/0x890 [ 102.506677][ C1] __x64_sys_bpf+0x7c/0x90 [ 102.506699][ C1] do_syscall_64+0x55/0xa0 [ 102.506723][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.506741][ C1] [ 102.506744][ C1] The buggy address belongs to the object at ffff88802d0c9880 [ 102.506744][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 102.506758][ C1] The buggy address is located 16 bytes inside of [ 102.506758][ C1] allocated 40-byte region [ffff88802d0c9880, ffff88802d0c98a8) [ 102.506775][ C1] [ 102.506778][ C1] The buggy address belongs to the physical page: [ 102.506792][ C1] page:ffffea0000b43240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d0c9 [ 102.506816][ C1] memcg:ffff88803177d801 [ 102.506823][ C1] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 102.506846][ C1] page_type: 0xffffffff() [ 102.506862][ C1] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 102.506878][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88803177d801 [ 102.506886][ C1] page dumped because: kasan: bad access detected [ 102.506894][ C1] page_owner tracks the page as allocated [ 102.506900][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 11, tgid 11 (kworker/u4:0), ts 99501997825, free_ts 99478466886 [ 102.506935][ C1] post_alloc_hook+0x1c1/0x200 [ 102.506968][ C1] get_page_from_freelist+0x1951/0x19e0 [ 102.506985][ C1] __alloc_pages+0x1f0/0x460 [ 102.506998][ C1] alloc_slab_page+0x5d/0x160 [ 102.507012][ C1] new_slab+0x87/0x2d0 [ 102.507039][ C1] ___slab_alloc+0xc5d/0x12f0 [ 102.507063][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 102.507087][ C1] __kmalloc_node+0xa4/0x230 [ 102.507110][ C1] kvmalloc_node+0x70/0x180 [ 102.507133][ C1] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 102.507154][ C1] __nf_unregister_net_hook+0x4e1/0x6e0 [ 102.507174][ C1] nf_unregister_net_hooks+0xcb/0x130 [ 102.507193][ C1] nf_defrag_ipv6_disable+0x95/0xe0 [ 102.507211][ C1] nf_ct_netns_put+0x375/0x520 [ 102.507231][ C1] nf_conncount_destroy+0x41/0x150 [ 102.507246][ C1] ovs_ct_exit+0x9c/0x200 [ 102.507266][ C1] page last free stack trace: [ 102.507270][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 102.507297][ C1] free_unref_page+0x32/0x2e0 [ 102.507322][ C1] __slab_free+0x35a/0x400 [ 102.507336][ C1] qlist_free_all+0x75/0xd0 [ 102.507359][ C1] kasan_quarantine_reduce+0x143/0x160 [ 102.507384][ C1] __kasan_slab_alloc+0x22/0x80 [ 102.507403][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 102.507428][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 102.507452][ C1] getname_flags+0xbb/0x500 [ 102.507477][ C1] do_sys_openat2+0xda/0x1d0 [ 102.507498][ C1] __x64_sys_openat+0x139/0x160 [ 102.507518][ C1] do_syscall_64+0x55/0xa0 [ 102.507541][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.507560][ C1] [ 102.507562][ C1] Memory state around the buggy address: [ 102.507571][ C1] ffff88802d0c9780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 102.507583][ C1] ffff88802d0c9800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 102.507594][ C1] >ffff88802d0c9880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 102.507603][ C1] ^ [ 102.507612][ C1] ffff88802d0c9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.507623][ C1] ffff88802d0c9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.507631][ C1] ================================================================== [ 102.507646][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.507654][ C1] CPU: 1 PID: 5920 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.507671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.507681][ C1] Call Trace: [ 102.507694][ C1] <#DB> [ 102.507701][ C1] dump_stack_lvl+0x18c/0x250 [ 102.507731][ C1] ? show_regs_print_info+0x20/0x20 [ 102.507758][ C1] ? load_image+0x400/0x400 [ 102.507787][ C1] panic+0x2dc/0x730 [ 102.507806][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 102.507829][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 102.507854][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 102.507875][ C1] ? _raw_spin_unlock+0x40/0x40 [ 102.507896][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.507918][ C1] check_panic_on_warn+0x84/0xa0 [ 102.507940][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.507962][ C1] end_report+0x6f/0x130 [ 102.507983][ C1] kasan_report+0x128/0x150 [ 102.508007][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.508035][ C1] kasan_check_range+0x241/0x290 [ 102.508058][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 102.508082][ C1] __asan_memcpy+0x40/0x70 [ 102.508108][ C1] __bpf_get_stackid+0x6bf/0x900 [ 102.508136][ C1] bpf_get_stackid_pe+0x343/0x410 [ 102.508163][ C1] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 102.508181][ C1] bpf_overflow_handler+0x1fc/0x510 [ 102.508208][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 102.508229][ C1] ? bpf_overflow_handler+0xde/0x510 [ 102.508255][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 102.508284][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 102.508306][ C1] __perf_event_overflow+0x447/0x630 [ 102.508332][ C1] perf_swevent_event+0x324/0x630 [ 102.508357][ C1] ? perf_tp_event+0x1450/0x1450 [ 102.508384][ C1] perf_bp_event+0x2a7/0x380 [ 102.508409][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 102.508449][ C1] ? lock_acquire+0x2c2/0x420 [ 102.508475][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 102.508502][ C1] notifier_call_chain+0x197/0x380 [ 102.508526][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 102.508550][ C1] atomic_notifier_call_chain+0xda/0x180 [ 102.508574][ C1] notify_die+0x145/0x1a0 [ 102.508597][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 102.508628][ C1] notify_debug+0x2e/0x50 [ 102.508644][ C1] exc_debug+0xde/0x140 [ 102.508673][ C1] asm_exc_debug+0x1e/0x40 [ 102.508699][ C1] RIP: 0010:__get_user_nocheck_8+0xd/0x20 [ 102.508731][ C1] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca [ 102.508746][ C1] RSP: 0000:ffffc900044cf618 EFLAGS: 00040802 [ 102.508762][ C1] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff92000899ee2 [ 102.508776][ C1] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000 [ 102.508788][ C1] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000 [ 102.508799][ C1] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: 0000000000000001 [ 102.508812][ C1] R13: 1ffff92000899ee0 R14: 000000000000007f R15: dffffc0000000000 [ 102.508836][ C1] [ 102.508841][ C1] [ 102.508846][ C1] perf_callchain_user+0xbe4/0x15c0 [ 102.508885][ C1] get_perf_callchain+0x394/0x510 [ 102.508906][ C1] ? put_callchain_entry+0xb0/0xb0 [ 102.508925][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 102.508942][ C1] ? local_clock_noinstr+0xc/0xd0 [ 102.508962][ C1] ? __perf_event_header__init_id+0x3c5/0x480 [ 102.508986][ C1] perf_prepare_sample+0x3c7/0x1df0 [ 102.509009][ C1] ? read_lock_is_recursive+0x20/0x20 [ 102.509031][ C1] ? perf_callchain+0x220/0x220 [ 102.509051][ C1] ? bpf_get_stackid_pe+0x343/0x410 [ 102.509078][ C1] perf_event_output_forward+0x187/0x3e0 [ 102.509099][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 102.509118][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 102.509138][ C1] ? bpf_overflow_handler+0xde/0x510 [ 102.509165][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 102.509192][ C1] ? __se_sys_ioctl+0x48/0x170 [ 102.509218][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 102.509242][ C1] __perf_event_overflow+0x447/0x630 [ 102.509268][ C1] perf_swevent_event+0x324/0x630 [ 102.509294][ C1] ? perf_tp_event+0x1450/0x1450 [ 102.509321][ C1] perf_bp_event+0x2a7/0x380 [ 102.509343][ C1] ? get_futex_key+0x7f0/0x1010 [ 102.509374][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 102.509396][ C1] ? verify_lock_unused+0x140/0x140 [ 102.509442][ C1] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 102.509469][ C1] notifier_call_chain+0x197/0x380 [ 102.509495][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 102.509521][ C1] atomic_notifier_call_chain+0xda/0x180 [ 102.509546][ C1] notify_die+0x145/0x1a0 [ 102.509569][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 102.509599][ C1] notify_debug+0x2e/0x50 [ 102.509615][ C1] noist_exc_debug+0x77/0x120 [ 102.509643][ C1] ? clear_bhb_loop+0x40/0x90 [ 102.509665][ C1] asm_exc_debug+0x33/0x40 [ 102.509683][ C1] RIP: 0033:0x7eff12d7b43d [ 102.509706][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 102.509720][ C1] RSP: 002b:00007fff3f9c82b8 EFLAGS: 00000283 [ 102.509736][ C1] RAX: 0000000000000300 RBX: 00007fff3f9c87f0 RCX: 2f666c65732f636f [ 102.509749][ C1] RDX: 0000200000000300 RSI: 00007eff12e5c9c0 RDI: 0000200000000300 [ 102.509761][ C1] RBP: 0000200000000300 R08: 00007fff3f9c8a20 R09: 00000000ffffffff [ 102.509773][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 102.509783][ C1] R13: 0000000000000073 R14: 00007eff12e31e03 R15: 00007fff3f9c88b0 [ 102.509805][ C1] [ 102.510380][ C1] Kernel Offset: disabled