no interfaces have a carrier
[ 60.789790][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0
[ 60.799942][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts.
2026/07/12 00:21:44 parsed 1 programs
2026/07/12 00:21:44 serving rpc on tcp://44141
syzkaller login: [ 91.294634][ T5787] cgroup: Unknown subsys name 'net'
[ 91.430548][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.184327][ T9] cfg80211: failed to load regulatory.db
[ 93.226121][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.556728][ T5812] chnl_net:caif_netlink_parms(): no params data found
[ 95.642414][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.650191][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.657851][ T5812] bridge_slave_0: entered allmulticast mode
[ 95.665441][ T5812] bridge_slave_0: entered promiscuous mode
[ 95.675512][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.682853][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.690042][ T5812] bridge_slave_1: entered allmulticast mode
[ 95.697301][ T5812] bridge_slave_1: entered promiscuous mode
[ 95.730252][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.743026][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.779595][ T5812] team0: Port device team_slave_0 added
[ 95.789113][ T5812] team0: Port device team_slave_1 added
[ 95.815345][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.822429][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.848774][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.862229][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.869239][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.895633][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.946468][ T5812] hsr_slave_0: entered promiscuous mode
[ 95.954337][ T5812] hsr_slave_1: entered promiscuous mode
[ 96.126162][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.138812][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.150029][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.161137][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.203817][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.211094][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.219143][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.226348][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.296269][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.323091][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.331459][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.350048][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.369180][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.376401][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.390846][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.398344][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.625514][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.679339][ T5812] veth0_vlan: entered promiscuous mode
[ 96.698685][ T5812] veth1_vlan: entered promiscuous mode
[ 96.735655][ T5812] veth0_macvtap: entered promiscuous mode
[ 96.747469][ T5812] veth1_macvtap: entered promiscuous mode
[ 96.774165][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.790432][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.805521][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.816185][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.825058][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.834057][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.986881][ T5812] syz-executor (5812) used greatest stack depth: 19976 bytes left
[ 97.025907][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.519153][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.527786][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.535727][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.544052][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.552124][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 98.559538][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.839131][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.851381][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.881021][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.889248][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.450246][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/12 00:21:56 executed programs: 0
[ 100.939994][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.949622][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.959146][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.967949][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.976402][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.983955][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.174766][ T5891] chnl_net:caif_netlink_parms(): no params data found
[ 101.287847][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.295244][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.303573][ T5891] bridge_slave_0: entered allmulticast mode
[ 101.315124][ T5891] bridge_slave_0: entered promiscuous mode
[ 101.325056][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.332352][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.339627][ T5891] bridge_slave_1: entered allmulticast mode
[ 101.348318][ T5891] bridge_slave_1: entered promiscuous mode
[ 101.386182][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.399636][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.443152][ T5891] team0: Port device team_slave_0 added
[ 101.453583][ T5891] team0: Port device team_slave_1 added
[ 101.495929][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.505757][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.534618][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.548315][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.558760][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.594605][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.644890][ T5891] hsr_slave_0: entered promiscuous mode
[ 101.652262][ T5891] hsr_slave_1: entered promiscuous mode
[ 101.658526][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 101.666744][ T5891] Cannot create hsr debugfs directory
[ 101.903764][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.987314][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.886754][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.898665][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.912628][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.928271][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.955355][ T12] hsr_slave_0: left promiscuous mode
[ 102.964375][ T12] hsr_slave_1: left promiscuous mode
[ 102.970830][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.980319][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.992504][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.999974][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.012212][ T12] bridge_slave_1: left allmulticast mode
[ 103.017945][ T12] bridge_slave_1: left promiscuous mode
[ 103.027367][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.041293][ T12] bridge_slave_0: left allmulticast mode
[ 103.051122][ T12] bridge_slave_0: left promiscuous mode
[ 103.057408][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.073114][ T5085] Bluetooth: hci0: command tx timeout
[ 103.098664][ T12] veth1_macvtap: left promiscuous mode
[ 103.104766][ T12] veth0_macvtap: left promiscuous mode
[ 103.110472][ T12] veth1_vlan: left promiscuous mode
[ 103.118080][ T12] veth0_vlan: left promiscuous mode
[ 103.603514][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 103.649130][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 103.681290][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 103.719064][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 103.964741][ T12] bond0 (unregistering): Released all slaves
[ 104.130314][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.168448][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.183945][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.191105][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.206999][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.214217][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.497656][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.584405][ T5891] veth0_vlan: entered promiscuous mode
[ 104.603100][ T5891] veth1_vlan: entered promiscuous mode
[ 104.652268][ T5891] veth0_macvtap: entered promiscuous mode
[ 104.667498][ T5891] veth1_macvtap: entered promiscuous mode
[ 104.719079][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.738548][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.757044][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.766554][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.776974][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.786512][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.866220][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.878013][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.906816][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.915097][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.975611][ T5930] ==================================================================
[ 104.983746][ T5930] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[ 104.991629][ T5930] Write of size 72 at addr ffff88807645af10 by task syz.0.17/5930
[ 104.999685][ T5930]
[ 105.002071][ T5930] CPU: 1 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0
[ 105.009308][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 105.019412][ T5930] Call Trace:
[ 105.022728][ T5930]
[ 105.025683][ T5930] dump_stack_lvl+0x18c/0x250
[ 105.030398][ T5930] ? read_lock_is_recursive+0x20/0x20
[ 105.035797][ T5930] ? show_regs_print_info+0x20/0x20
[ 105.041032][ T5930] ? load_image+0x420/0x420
[ 105.045574][ T5930] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 105.051062][ T5930] ? __virt_addr_valid+0x10c/0x380
[ 105.056198][ T5930] ? __virt_addr_valid+0x10c/0x380
[ 105.061341][ T5930] ? __virt_addr_valid+0x10c/0x380
[ 105.066484][ T5930] print_report+0xa8/0x210
[ 105.070942][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.076089][ T5930] kasan_report+0x117/0x150
[ 105.080620][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.085761][ T5930] kasan_check_range+0x241/0x290
[ 105.090727][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.095866][ T5930] __asan_memcpy+0x40/0x70
[ 105.100313][ T5930] __bpf_get_stackid+0x6c7/0x900
[ 105.105285][ T5930] bpf_get_stackid_pe+0x343/0x410
[ 105.110434][ T5930] bpf_prog_7018bb76bd3f7f7a+0x30/0x45
[ 105.115915][ T5930] bpf_overflow_handler+0x1fc/0x510
[ 105.121153][ T5930] ? bpf_overflow_handler+0xde/0x510
[ 105.126473][ T5930] ? tp_perf_event_destroy+0x20/0x20
[ 105.131788][ T5930] ? mark_lock+0x94/0x320
[ 105.136138][ T5930] ? verify_lock_unused+0x140/0x140
[ 105.141373][ T5930] ? __perf_event_account_interrupt+0x187/0x280
[ 105.147651][ T5930] __perf_event_overflow+0x461/0x660
[ 105.152964][ T5930] perf_swevent_overflow+0x274/0x340
[ 105.158275][ T5930] ? perf_event_switch_output+0x790/0x790
[ 105.164021][ T5930] ? rcu_is_watching+0x15/0xb0
[ 105.168903][ T5930] perf_swevent_event+0x45c/0x570
[ 105.173965][ T5930] ? perf_tp_event+0x1550/0x1550
[ 105.178934][ T5930] ___perf_sw_event+0x4ab/0x730
[ 105.183818][ T5930] ? ___perf_sw_event+0x19e/0x730
[ 105.188871][ T5930] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 105.195312][ T5930] ? __lock_acquire+0x1336/0x7d80
[ 105.200379][ T5930] ? verify_lock_unused+0x140/0x140
[ 105.205604][ T5930] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 105.211619][ T5930] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 105.217456][ T5930] ? lock_chain_count+0x20/0x20
[ 105.222343][ T5930] __perf_sw_event+0x139/0x270
[ 105.227139][ T5930] do_user_addr_fault+0x1242/0x12d0
[ 105.232367][ T5930] ? rcu_is_watching+0x15/0xb0
[ 105.237158][ T5930] exc_page_fault+0x64/0x100
[ 105.241778][ T5930] asm_exc_page_fault+0x26/0x30
[ 105.246678][ T5930] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 105.252506][ T5930] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[ 105.272132][ T5930] RSP: 0018:ffffc90004587b48 EFLAGS: 00050202
[ 105.278226][ T5930] RAX: ffffffff84312701 RBX: 0000000000000018 RCX: 0000000000000018
[ 105.286216][ T5930] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000255e048
[ 105.294208][ T5930] RBP: 0000000000000000 R08: ffffc9000255e05f R09: 1ffff920004abc0b
[ 105.302209][ T5930] R10: dffffc0000000000 R11: fffff520004abc0c R12: 0000000000000018
[ 105.310216][ T5930] R13: dffffc0000000000 R14: ffffc9000255e048 R15: 0000000000000000
[ 105.318223][ T5930] ? _copy_from_user+0x51/0xe0
[ 105.323023][ T5930] _copy_from_user+0x8b/0xe0
[ 105.327642][ T5930] copy_from_bpfptr+0x67/0x80
[ 105.332369][ T5930] bpf_prog_load+0xa3a/0x1610
[ 105.337076][ T5930] ? map_freeze+0x420/0x420
[ 105.341643][ T5930] ? __might_fault+0xaa/0x120
[ 105.346346][ T5930] ? __might_fault+0xc6/0x120
[ 105.351054][ T5930] ? __might_fault+0xaa/0x120
[ 105.355750][ T5930] ? bpf_lsm_bpf+0x9/0x10
[ 105.360109][ T5930] ? security_bpf+0x7e/0xa0
[ 105.364632][ T5930] __sys_bpf+0x5ba/0x890
[ 105.368901][ T5930] ? bpf_link_show_fdinfo+0x390/0x390
[ 105.374311][ T5930] ? lock_chain_count+0x20/0x20
[ 105.379189][ T5930] __x64_sys_bpf+0x7c/0x90
[ 105.383661][ T5930] do_syscall_64+0x55/0xb0
[ 105.388126][ T5930] ? clear_bhb_loop+0x40/0x90
[ 105.392833][ T5930] ? clear_bhb_loop+0x40/0x90
[ 105.397535][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 105.403551][ T5930] RIP: 0033:0x7f567dd9de59
[ 105.407992][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.427720][ T5930] RSP: 002b:00007ffccc82c858 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 105.436155][ T5930] RAX: ffffffffffffffda RBX: 00007f567e025fa0 RCX: 00007f567dd9de59
[ 105.444158][ T5930] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 105.452152][ T5930] RBP: 00007f567de33e6f R08: 0000000000000000 R09: 0000000000000000
[ 105.460145][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.468135][ T5930] R13: 00007f567e025fac R14: 00007f567e025fa0 R15: 00007f567e025fa0
[ 105.476135][ T5930]
[ 105.479170][ T5930]
[ 105.481510][ T5930] Allocated by task 5930:
[ 105.485895][ T5930] kasan_set_track+0x4e/0x70
[ 105.490515][ T5930] __kasan_kmalloc+0x8f/0xa0
[ 105.495129][ T5930] __kmalloc_node+0xb6/0x240
[ 105.499748][ T5930] bpf_map_area_alloc+0x5e/0x110
[ 105.504724][ T5930] prealloc_elems_and_freelist+0x86/0x1c0
[ 105.510471][ T5930] stack_map_alloc+0x32b/0x4b0
[ 105.515253][ T5930] map_create+0x877/0x12f0
[ 105.519688][ T5930] __sys_bpf+0x651/0x890
[ 105.523957][ T5930] __x64_sys_bpf+0x7c/0x90
[ 105.528393][ T5930] do_syscall_64+0x55/0xb0
[ 105.532835][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 105.538771][ T5930]
[ 105.541114][ T5930] The buggy address belongs to the object at ffff88807645af00
[ 105.541114][ T5930] which belongs to the cache kmalloc-cg-64 of size 64
[ 105.555278][ T5930] The buggy address is located 16 bytes inside of
[ 105.555278][ T5930] allocated 40-byte region [ffff88807645af00, ffff88807645af28)
[ 105.569268][ T5930]
[ 105.571616][ T5930] The buggy address belongs to the physical page:
[ 105.578055][ T5930] page:ffffea0001d91680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7645a
[ 105.588232][ T5930] memcg:ffff888077b26c01
[ 105.592492][ T5930] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 105.600064][ T5930] page_type: 0xffffffff()
[ 105.604429][ T5930] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000
[ 105.613034][ T5930] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888077b26c01
[ 105.621633][ T5930] page dumped because: kasan: bad access detected
[ 105.628078][ T5930] page_owner tracks the page as allocated
[ 105.633807][ T5930] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1086, tgid 1086 (kworker/u4:7), ts 104518067559, free_ts 104494959340
[ 105.652253][ T5930] post_alloc_hook+0x1c1/0x200
[ 105.657049][ T5930] get_page_from_freelist+0x2181/0x22a0
[ 105.662625][ T5930] __alloc_pages+0x1f0/0x460
[ 105.667241][ T5930] alloc_slab_page+0x5d/0x180
[ 105.671939][ T5930] new_slab+0x87/0x2d0
[ 105.676036][ T5930] ___slab_alloc+0xc5c/0x12f0
[ 105.680766][ T5930] __kmem_cache_alloc_node+0x11f/0x250
[ 105.686256][ T5930] __kmalloc_node+0xa6/0x240
[ 105.690878][ T5930] kvmalloc_node+0x70/0x180
[ 105.695417][ T5930] __nf_hook_entries_try_shrink+0x336/0x700
[ 105.701334][ T5930] __nf_unregister_net_hook+0x4da/0x6d0
[ 105.706912][ T5930] nf_unregister_net_hooks+0xcb/0x130
[ 105.712316][ T5930] nf_ct_netns_put+0x36d/0x520
[ 105.717115][ T5930] nf_conncount_destroy+0x41/0x150
[ 105.722254][ T5930] ovs_ct_exit+0x9c/0x200
[ 105.726613][ T5930] ovs_exit_net+0xed/0x7a0
[ 105.731080][ T5930] page last free stack trace:
[ 105.735769][ T5930] free_unref_page_prepare+0x7d7/0x8f0
[ 105.741266][ T5930] free_unref_page+0x32/0x2e0
[ 105.745972][ T5930] __unfreeze_partials+0x1cf/0x210
[ 105.751104][ T5930] put_cpu_partial+0x17c/0x250
[ 105.755888][ T5930] __slab_free+0x319/0x400
[ 105.760330][ T5930] qlist_free_all+0x75/0xd0
[ 105.764861][ T5930] kasan_quarantine_reduce+0x143/0x160
[ 105.770352][ T5930] __kasan_slab_alloc+0x22/0x80
[ 105.775225][ T5930] slab_post_alloc_hook+0x6a/0x4d0
[ 105.780384][ T5930] __kmem_cache_alloc_node+0x194/0x250
[ 105.785887][ T5930] __kmalloc_node_track_caller+0xa4/0x230
[ 105.791650][ T5930] kmalloc_reserve+0x116/0x240
[ 105.796464][ T5930] __alloc_skb+0x138/0x2c0
[ 105.800921][ T5930] rtmsg_ifinfo_build_skb+0x83/0x260
[ 105.806257][ T5930] rtnetlink_event+0x1b7/0x260
[ 105.811053][ T5930] notifier_call_chain+0x18f/0x380
[ 105.816210][ T5930]
[ 105.818555][ T5930] Memory state around the buggy address:
[ 105.824202][ T5930] ffff88807645ae00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 105.832285][ T5930] ffff88807645ae80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 105.840369][ T5930] >ffff88807645af00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 105.848446][ T5930] ^
[ 105.853840][ T5930] ffff88807645af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.861921][ T5930] ffff88807645b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 105.870003][ T5930] ==================================================================
[ 105.878100][ T5930] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.885309][ T5930] CPU: 1 PID: 5930 Comm: syz.0.17 Not tainted syzkaller #0
[ 105.892524][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 105.902601][ T5930] Call Trace:
[ 105.905906][ T5930]
[ 105.908895][ T5930] dump_stack_lvl+0x18c/0x250
[ 105.913631][ T5930] ? show_regs_print_info+0x20/0x20
[ 105.918972][ T5930] ? load_image+0x420/0x420
[ 105.923513][ T5930] panic+0x2ca/0x720
[ 105.927439][ T5930] ? __lock_acquire+0x7d80/0x7d80
[ 105.932511][ T5930] ? bpf_jit_dump+0xd0/0xd0
[ 105.937055][ T5930] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 105.942998][ T5930] ? _raw_spin_unlock+0x40/0x40
[ 105.947893][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.953042][ T5930] check_panic_on_warn+0x84/0xa0
[ 105.958010][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.963162][ T5930] end_report+0x6f/0x130
[ 105.967460][ T5930] kasan_report+0x128/0x150
[ 105.972005][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.977156][ T5930] kasan_check_range+0x241/0x290
[ 105.982145][ T5930] ? __bpf_get_stackid+0x6c7/0x900
[ 105.987289][ T5930] __asan_memcpy+0x40/0x70
[ 105.991771][ T5930] __bpf_get_stackid+0x6c7/0x900
[ 105.996740][ T5930] bpf_get_stackid_pe+0x343/0x410
[ 106.001797][ T5930] bpf_prog_7018bb76bd3f7f7a+0x30/0x45
[ 106.007274][ T5930] bpf_overflow_handler+0x1fc/0x510
[ 106.012502][ T5930] ? bpf_overflow_handler+0xde/0x510
[ 106.017819][ T5930] ? tp_perf_event_destroy+0x20/0x20
[ 106.023132][ T5930] ? mark_lock+0x94/0x320
[ 106.027490][ T5930] ? verify_lock_unused+0x140/0x140
[ 106.032730][ T5930] ? __perf_event_account_interrupt+0x187/0x280
[ 106.038993][ T5930] __perf_event_overflow+0x461/0x660
[ 106.044310][ T5930] perf_swevent_overflow+0x274/0x340
[ 106.049625][ T5930] ? perf_event_switch_output+0x790/0x790
[ 106.055377][ T5930] ? rcu_is_watching+0x15/0xb0
[ 106.060176][ T5930] perf_swevent_event+0x45c/0x570
[ 106.065227][ T5930] ? perf_tp_event+0x1550/0x1550
[ 106.070202][ T5930] ___perf_sw_event+0x4ab/0x730
[ 106.075084][ T5930] ? ___perf_sw_event+0x19e/0x730
[ 106.080139][ T5930] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 106.086585][ T5930] ? __lock_acquire+0x1336/0x7d80
[ 106.091653][ T5930] ? verify_lock_unused+0x140/0x140
[ 106.096879][ T5930] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 106.102889][ T5930] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 106.108723][ T5930] ? lock_chain_count+0x20/0x20
[ 106.113605][ T5930] __perf_sw_event+0x139/0x270
[ 106.118400][ T5930] do_user_addr_fault+0x1242/0x12d0
[ 106.123628][ T5930] ? rcu_is_watching+0x15/0xb0
[ 106.128425][ T5930] exc_page_fault+0x64/0x100
[ 106.133081][ T5930] asm_exc_page_fault+0x26/0x30
[ 106.137968][ T5930] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 106.143830][ T5930] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[ 106.163567][ T5930] RSP: 0018:ffffc90004587b48 EFLAGS: 00050202
[ 106.169786][ T5930] RAX: ffffffff84312701 RBX: 0000000000000018 RCX: 0000000000000018
[ 106.177796][ T5930] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000255e048
[ 106.185795][ T5930] RBP: 0000000000000000 R08: ffffc9000255e05f R09: 1ffff920004abc0b
[ 106.193793][ T5930] R10: dffffc0000000000 R11: fffff520004abc0c R12: 0000000000000018
[ 106.201788][ T5930] R13: dffffc0000000000 R14: ffffc9000255e048 R15: 0000000000000000
[ 106.209787][ T5930] ? _copy_from_user+0x51/0xe0
[ 106.214593][ T5930] _copy_from_user+0x8b/0xe0
[ 106.219208][ T5930] copy_from_bpfptr+0x67/0x80
[ 106.223918][ T5930] bpf_prog_load+0xa3a/0x1610
[ 106.228631][ T5930] ? map_freeze+0x420/0x420
[ 106.233165][ T5930] ? __might_fault+0xaa/0x120
[ 106.237877][ T5930] ? __might_fault+0xc6/0x120
[ 106.242575][ T5930] ? __might_fault+0xaa/0x120
[ 106.247277][ T5930] ? bpf_lsm_bpf+0x9/0x10
[ 106.251636][ T5930] ? security_bpf+0x7e/0xa0
[ 106.256162][ T5930] __sys_bpf+0x5ba/0x890
[ 106.260428][ T5930] ? bpf_link_show_fdinfo+0x390/0x390
[ 106.265836][ T5930] ? lock_chain_count+0x20/0x20
[ 106.270714][ T5930] __x64_sys_bpf+0x7c/0x90
[ 106.275158][ T5930] do_syscall_64+0x55/0xb0
[ 106.279605][ T5930] ? clear_bhb_loop+0x40/0x90
[ 106.284310][ T5930] ? clear_bhb_loop+0x40/0x90
[ 106.289015][ T5930] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.294943][ T5930] RIP: 0033:0x7f567dd9de59
[ 106.299390][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.319019][ T5930] RSP: 002b:00007ffccc82c858 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 106.327464][ T5930] RAX: ffffffffffffffda RBX: 00007f567e025fa0 RCX: 00007f567dd9de59
[ 106.335481][ T5930] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 106.343476][ T5930] RBP: 00007f567de33e6f R08: 0000000000000000 R09: 0000000000000000
[ 106.351469][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.359460][ T5930] R13: 00007f567e025fac R14: 00007f567e025fa0 R15: 00007f567e025fa0
[ 106.367568][ T5930]
[ 106.370747][ T5930] Kernel Offset: disabled
[ 106.375105][ T5930] Rebooting in 86400 seconds..