Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. 2026/02/08 05:59:26 parsed 1 programs [ 86.619530][ T5771] cgroup: Unknown subsys name 'net' [ 86.782271][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.663871][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.407452][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.417093][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.455554][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.463423][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.049424][ T786] cfg80211: failed to load regulatory.db [ 93.268345][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.352613][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.365453][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.372806][ T5838] bridge_slave_0: entered allmulticast mode [ 93.383313][ T5838] bridge_slave_0: entered promiscuous mode [ 93.393543][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.400877][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.408136][ T5838] bridge_slave_1: entered allmulticast mode [ 93.415442][ T5838] bridge_slave_1: entered promiscuous mode [ 93.458915][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.470432][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.499393][ T5838] team0: Port device team_slave_0 added [ 93.507448][ T5838] team0: Port device team_slave_1 added [ 93.530289][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.537286][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.563287][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.576641][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.583618][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.609738][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.652191][ T5838] hsr_slave_0: entered promiscuous mode [ 93.658874][ T5838] hsr_slave_1: entered promiscuous mode [ 93.832122][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.844091][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.853720][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.878058][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.912746][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.920124][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.928200][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.935518][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.962128][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.977903][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.052097][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.087498][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.115670][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.122793][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.138168][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.145355][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.401082][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.459863][ T5838] veth0_vlan: entered promiscuous mode [ 94.477394][ T5838] veth1_vlan: entered promiscuous mode [ 94.508495][ T5838] veth0_macvtap: entered promiscuous mode [ 94.518983][ T5838] veth1_macvtap: entered promiscuous mode [ 94.537058][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.551559][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.571880][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.581969][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591691][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.603054][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.771984][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.172081][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.181762][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.194825][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.205803][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.213519][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.222241][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/02/08 05:59:38 executed programs: 0 [ 96.076348][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.086154][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.093753][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.107776][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.116339][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.123685][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.274939][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 96.340616][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.348275][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.355820][ T5884] bridge_slave_0: entered allmulticast mode [ 96.362812][ T5884] bridge_slave_0: entered promiscuous mode [ 96.372756][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.380062][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.387467][ T5884] bridge_slave_1: entered allmulticast mode [ 96.394784][ T5884] bridge_slave_1: entered promiscuous mode [ 96.431201][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.444144][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.475318][ T5884] team0: Port device team_slave_0 added [ 96.483356][ T5884] team0: Port device team_slave_1 added [ 96.510479][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.518069][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.544629][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.557517][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.565085][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.592288][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.637973][ T5884] hsr_slave_0: entered promiscuous mode [ 96.644999][ T5884] hsr_slave_1: entered promiscuous mode [ 96.651250][ T5884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.659800][ T5884] Cannot create hsr debugfs directory [ 97.517044][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.184698][ T5867] Bluetooth: hci0: command tx timeout [ 99.706204][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.757360][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.271121][ T5867] Bluetooth: hci0: command tx timeout [ 100.662249][ T11] hsr_slave_0: left promiscuous mode [ 100.686576][ T11] hsr_slave_1: left promiscuous mode [ 100.692766][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.700627][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.709890][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.718087][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.726408][ T11] bridge_slave_1: left allmulticast mode [ 100.732126][ T11] bridge_slave_1: left promiscuous mode [ 100.739202][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.752469][ T11] bridge_slave_0: left allmulticast mode [ 100.759307][ T11] bridge_slave_0: left promiscuous mode [ 100.766274][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.794047][ T11] veth1_macvtap: left promiscuous mode [ 100.799949][ T11] veth0_macvtap: left promiscuous mode [ 100.806903][ T11] veth1_vlan: left promiscuous mode [ 100.812524][ T11] veth0_vlan: left promiscuous mode [ 101.274008][ T11] team0 (unregistering): Port device team_slave_1 removed [ 101.307688][ T11] team0 (unregistering): Port device team_slave_0 removed [ 101.342345][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.381716][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.619204][ T11] bond0 (unregistering): Released all slaves [ 101.770533][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.788339][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.799267][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.811583][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.912590][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.947250][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.959047][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.966273][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.985698][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.992853][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.204429][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.286948][ T5884] veth0_vlan: entered promiscuous mode [ 102.319116][ T5884] veth1_vlan: entered promiscuous mode [ 102.345150][ T5867] Bluetooth: hci0: command tx timeout [ 102.371780][ T5884] veth0_macvtap: entered promiscuous mode [ 102.382794][ T5884] veth1_macvtap: entered promiscuous mode [ 102.401682][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.415520][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.443549][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.452731][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.461933][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.470795][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.566897][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.577062][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/08 05:59:44 executed programs: 2 [ 102.617813][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.625814][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.693021][ C0] hrtimer: interrupt took 57274 ns [ 102.703584][ C0] ================================================================== [ 102.711666][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 102.719495][ C0] Write of size 40 at addr ffff88807600f710 by task syz.0.17/5930 [ 102.727296][ C0] [ 102.729629][ C0] CPU: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.736821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 102.746913][ C0] Call Trace: [ 102.750190][ C0] [ 102.753031][ C0] dump_stack_lvl+0x18c/0x250 [ 102.757730][ C0] ? read_lock_is_recursive+0x20/0x20 [ 102.763129][ C0] ? show_regs_print_info+0x20/0x20 [ 102.768338][ C0] ? load_image+0x400/0x400 [ 102.772838][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 102.778297][ C0] ? __virt_addr_valid+0x18c/0x540 [ 102.783415][ C0] ? __virt_addr_valid+0x469/0x540 [ 102.788529][ C0] print_report+0xa8/0x210 [ 102.792946][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 102.798057][ C0] kasan_report+0x117/0x150 [ 102.802584][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 102.807710][ C0] kasan_check_range+0x241/0x290 [ 102.812674][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 102.817793][ C0] __asan_memcpy+0x40/0x70 [ 102.822226][ C0] __bpf_get_stackid+0x6bf/0x900 [ 102.827166][ C0] bpf_get_stackid_pe+0x343/0x410 [ 102.832196][ C0] bpf_prog_fa73c8c086b491e8+0x29/0x39 [ 102.837662][ C0] bpf_overflow_handler+0x1fc/0x510 [ 102.842875][ C0] ? verify_lock_unused+0x140/0x140 [ 102.848091][ C0] ? bpf_overflow_handler+0xde/0x510 [ 102.853378][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 102.858683][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 102.864946][ C0] __perf_event_overflow+0x447/0x630 [ 102.870243][ C0] perf_swevent_hrtimer+0x4aa/0x570 [ 102.875469][ C0] ? cpu_clock_event_read+0x40/0x40 [ 102.880671][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 102.886585][ C0] ? _raw_spin_unlock+0x40/0x40 [ 102.891466][ C0] ? debug_object_deactivate+0x67/0x390 [ 102.897021][ C0] __hrtimer_run_queues+0x4eb/0xc40 [ 102.902222][ C0] ? cpu_clock_event_read+0x40/0x40 [ 102.907434][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 102.912573][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 102.918675][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 102.923649][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 102.929551][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 102.935196][ C0] [ 102.938137][ C0] [ 102.941235][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.947232][ C0] RIP: 0010:perf_ioctl+0x2183/0x24a0 [ 102.952525][ C0] Code: 39 de 0f 84 cb 00 00 00 e8 ba 8b d5 ff eb cb e8 b3 8b d5 ff 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 41 c6 46 16 f8 41 c6 46 1a f8 <48> 8b 9c 24 98 00 00 00 48 89 df 48 83 c7 40 e8 29 58 db 08 48 89 [ 102.972162][ C0] RSP: 0018:ffffc90003347c00 EFLAGS: 00010246 [ 102.978252][ C0] RAX: ffffffff81b176cc RBX: 0000000000000000 RCX: ffff88802b541e00 [ 102.986230][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.994206][ C0] RBP: ffffc90003347ed8 R08: ffff88802dafc007 R09: 1ffff11005b5f800 [ 103.002193][ C0] R10: dffffc0000000000 R11: ffffed1005b5f801 R12: 0000000040042408 [ 103.010266][ C0] R13: dffffc0000000000 R14: fffff52000668f94 R15: 0000000000000000 [ 103.018262][ C0] ? perf_ioctl+0xf3c/0x24a0 [ 103.022859][ C0] ? tomoyo_path_number_perm+0x217/0x620 [ 103.028494][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.033978][ C0] ? perf_poll+0x1b0/0x1b0 [ 103.038394][ C0] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 103.044637][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 103.050616][ C0] ? lock_chain_count+0x20/0x20 [ 103.055479][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.061661][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 103.066860][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.073021][ C0] ? perf_poll+0x1b0/0x1b0 [ 103.077439][ C0] ? __se_sys_ioctl+0xf1/0x170 [ 103.082201][ C0] ? perf_poll+0x1b0/0x1b0 [ 103.086625][ C0] __se_sys_ioctl+0xfd/0x170 [ 103.091221][ C0] do_syscall_64+0x55/0xa0 [ 103.095641][ C0] ? clear_bhb_loop+0x40/0x90 [ 103.100318][ C0] ? clear_bhb_loop+0x40/0x90 [ 103.105005][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.110928][ C0] RIP: 0033:0x7fb24c59aeb9 [ 103.115382][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.135090][ C0] RSP: 002b:00007ffda6c3e948 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.143506][ C0] RAX: ffffffffffffffda RBX: 00007fb24c815fa0 RCX: 00007fb24c59aeb9 [ 103.151482][ C0] RDX: 0000000000000004 RSI: 0000000040042408 RDI: 0000000000000005 [ 103.159480][ C0] RBP: 00007fb24c608c1f R08: 0000000000000000 R09: 0000000000000000 [ 103.167487][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.175458][ C0] R13: 00007fb24c815fac R14: 00007fb24c815fa0 R15: 00007fb24c815fa0 [ 103.183439][ C0] [ 103.186460][ C0] [ 103.188802][ C0] Allocated by task 5930: [ 103.193124][ C0] kasan_set_track+0x4e/0x70 [ 103.197734][ C0] __kasan_kmalloc+0x8f/0xa0 [ 103.202326][ C0] __kmalloc_node+0xb4/0x230 [ 103.206940][ C0] bpf_map_area_alloc+0x5e/0x110 [ 103.211959][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 103.217701][ C0] stack_map_alloc+0x33a/0x4c0 [ 103.222464][ C0] map_create+0x877/0x12f0 [ 103.226879][ C0] __sys_bpf+0x651/0x890 [ 103.231122][ C0] __x64_sys_bpf+0x7c/0x90 [ 103.235538][ C0] do_syscall_64+0x55/0xa0 [ 103.239959][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.245865][ C0] [ 103.248201][ C0] The buggy address belongs to the object at ffff88807600f700 [ 103.248201][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 103.262337][ C0] The buggy address is located 16 bytes inside of [ 103.262337][ C0] allocated 40-byte region [ffff88807600f700, ffff88807600f728) [ 103.276305][ C0] [ 103.278626][ C0] The buggy address belongs to the physical page: [ 103.285039][ C0] page:ffffea0001d803c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7600f [ 103.295189][ C0] memcg:ffff8880760f1801 [ 103.299429][ C0] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 103.307046][ C0] page_type: 0xffffffff() [ 103.311427][ C0] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 103.320028][ C0] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880760f1801 [ 103.328621][ C0] page dumped because: kasan: bad access detected [ 103.335035][ C0] page_owner tracks the page as allocated [ 103.340754][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5884, tgid 5884 (syz-executor), ts 102651226628, free_ts 102646597102 [ 103.359199][ C0] post_alloc_hook+0x1c1/0x200 [ 103.364005][ C0] get_page_from_freelist+0x1951/0x19e0 [ 103.369565][ C0] __alloc_pages+0x1f0/0x460 [ 103.374166][ C0] alloc_slab_page+0x5d/0x160 [ 103.378853][ C0] new_slab+0x87/0x2d0 [ 103.382959][ C0] ___slab_alloc+0xc5d/0x12f0 [ 103.387646][ C0] __kmem_cache_alloc_node+0x19e/0x250 [ 103.393106][ C0] __kmalloc_node+0xa4/0x230 [ 103.397699][ C0] kvmalloc_node+0x70/0x180 [ 103.402210][ C0] nf_hook_entries_grow+0x27d/0x6d0 [ 103.407434][ C0] __nf_register_net_hook+0x2c9/0x910 [ 103.412853][ C0] nf_register_net_hook+0xb2/0x190 [ 103.418010][ C0] nf_register_net_hooks+0x44/0x1b0 [ 103.423245][ C0] arpt_register_table+0x5f4/0x720 [ 103.428395][ C0] arptable_filter_table_init+0x41/0x60 [ 103.433975][ C0] xt_find_table_lock+0x306/0x3e0 [ 103.439024][ C0] page last free stack trace: [ 103.443690][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 103.449161][ C0] free_unref_page+0x32/0x2e0 [ 103.453844][ C0] __slab_free+0x35a/0x400 [ 103.458255][ C0] qlist_free_all+0x75/0xd0 [ 103.462767][ C0] kasan_quarantine_reduce+0x143/0x160 [ 103.468246][ C0] __kasan_slab_alloc+0x22/0x80 [ 103.473098][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 103.478226][ C0] __kmem_cache_alloc_node+0x13a/0x250 [ 103.483684][ C0] __kmalloc+0xa4/0x230 [ 103.487859][ C0] tomoyo_encode+0x28b/0x540 [ 103.492461][ C0] tomoyo_mount_permission+0x4bf/0x9c0 [ 103.497920][ C0] security_sb_mount+0x87/0xc0 [ 103.502702][ C0] path_mount+0xbc/0xff0 [ 103.506998][ C0] __se_sys_mount+0x2e7/0x3d0 [ 103.511723][ C0] do_syscall_64+0x55/0xa0 [ 103.516179][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.522109][ C0] [ 103.524446][ C0] Memory state around the buggy address: [ 103.530111][ C0] ffff88807600f600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 103.538176][ C0] ffff88807600f680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 103.546250][ C0] >ffff88807600f700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 103.554316][ C0] ^ [ 103.559709][ C0] ffff88807600f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.567808][ C0] ffff88807600f800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.575918][ C0] ================================================================== [ 103.584024][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.591300][ C0] CPU: 0 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.598523][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 103.608598][ C0] Call Trace: [ 103.611891][ C0] [ 103.614767][ C0] dump_stack_lvl+0x18c/0x250 [ 103.619465][ C0] ? show_regs_print_info+0x20/0x20 [ 103.624680][ C0] ? load_image+0x400/0x400 [ 103.629250][ C0] panic+0x2dc/0x730 [ 103.633159][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 103.638188][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 103.642696][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 103.648596][ C0] ? _raw_spin_unlock+0x40/0x40 [ 103.653461][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 103.658612][ C0] check_panic_on_warn+0x84/0xa0 [ 103.663589][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 103.668726][ C0] end_report+0x6f/0x130 [ 103.672976][ C0] kasan_report+0x128/0x150 [ 103.677493][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 103.682605][ C0] kasan_check_range+0x241/0x290 [ 103.687540][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 103.692652][ C0] __asan_memcpy+0x40/0x70 [ 103.697082][ C0] __bpf_get_stackid+0x6bf/0x900 [ 103.702045][ C0] bpf_get_stackid_pe+0x343/0x410 [ 103.707097][ C0] bpf_prog_fa73c8c086b491e8+0x29/0x39 [ 103.712670][ C0] bpf_overflow_handler+0x1fc/0x510 [ 103.717921][ C0] ? verify_lock_unused+0x140/0x140 [ 103.723158][ C0] ? bpf_overflow_handler+0xde/0x510 [ 103.728478][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 103.733813][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 103.740079][ C0] __perf_event_overflow+0x447/0x630 [ 103.745374][ C0] perf_swevent_hrtimer+0x4aa/0x570 [ 103.750569][ C0] ? cpu_clock_event_read+0x40/0x40 [ 103.755793][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 103.761709][ C0] ? _raw_spin_unlock+0x40/0x40 [ 103.766581][ C0] ? debug_object_deactivate+0x67/0x390 [ 103.772157][ C0] __hrtimer_run_queues+0x4eb/0xc40 [ 103.777361][ C0] ? cpu_clock_event_read+0x40/0x40 [ 103.782669][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 103.787802][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 103.793889][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 103.798883][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 103.804819][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 103.810523][ C0] [ 103.813573][ C0] [ 103.816503][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.822535][ C0] RIP: 0010:perf_ioctl+0x2183/0x24a0 [ 103.827826][ C0] Code: 39 de 0f 84 cb 00 00 00 e8 ba 8b d5 ff eb cb e8 b3 8b d5 ff 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 41 c6 46 16 f8 41 c6 46 1a f8 <48> 8b 9c 24 98 00 00 00 48 89 df 48 83 c7 40 e8 29 58 db 08 48 89 [ 103.847460][ C0] RSP: 0018:ffffc90003347c00 EFLAGS: 00010246 [ 103.853549][ C0] RAX: ffffffff81b176cc RBX: 0000000000000000 RCX: ffff88802b541e00 [ 103.861527][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.869506][ C0] RBP: ffffc90003347ed8 R08: ffff88802dafc007 R09: 1ffff11005b5f800 [ 103.877488][ C0] R10: dffffc0000000000 R11: ffffed1005b5f801 R12: 0000000040042408 [ 103.885473][ C0] R13: dffffc0000000000 R14: fffff52000668f94 R15: 0000000000000000 [ 103.893469][ C0] ? perf_ioctl+0xf3c/0x24a0 [ 103.898072][ C0] ? tomoyo_path_number_perm+0x217/0x620 [ 103.903709][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 103.909189][ C0] ? perf_poll+0x1b0/0x1b0 [ 103.913646][ C0] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 103.919934][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 103.925947][ C0] ? lock_chain_count+0x20/0x20 [ 103.930801][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.936962][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 103.942172][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.948327][ C0] ? perf_poll+0x1b0/0x1b0 [ 103.952753][ C0] ? __se_sys_ioctl+0xf1/0x170 [ 103.957534][ C0] ? perf_poll+0x1b0/0x1b0 [ 103.961989][ C0] __se_sys_ioctl+0xfd/0x170 [ 103.966616][ C0] do_syscall_64+0x55/0xa0 [ 103.971066][ C0] ? clear_bhb_loop+0x40/0x90 [ 103.975773][ C0] ? clear_bhb_loop+0x40/0x90 [ 103.980473][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.986385][ C0] RIP: 0033:0x7fb24c59aeb9 [ 103.990803][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.010431][ C0] RSP: 002b:00007ffda6c3e948 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.018883][ C0] RAX: ffffffffffffffda RBX: 00007fb24c815fa0 RCX: 00007fb24c59aeb9 [ 104.026906][ C0] RDX: 0000000000000004 RSI: 0000000040042408 RDI: 0000000000000005 [ 104.034898][ C0] RBP: 00007fb24c608c1f R08: 0000000000000000 R09: 0000000000000000 [ 104.042871][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.050849][ C0] R13: 00007fb24c815fac R14: 00007fb24c815fa0 R15: 00007fb24c815fa0 [ 104.058856][ C0] [ 104.062048][ C0] Kernel Offset: disabled [ 104.066393][ C0] Rebooting in 86400 seconds..