Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts.
2026/10/09 13:14:55 parsed 1 programs
2026/10/09 13:14:55 serving rpc on tcp://46785
[ 78.851552][ T5781] cgroup: Unknown subsys name 'net'
[ 79.010296][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 80.402097][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.347333][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.368532][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.403492][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.411377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.358451][ T5826] chnl_net:caif_netlink_parms(): no params data found
[ 83.430645][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.438868][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.449208][ T5826] bridge_slave_0: entered allmulticast mode
[ 83.456166][ T5826] bridge_slave_0: entered promiscuous mode
[ 83.465180][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.472304][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.479573][ T5826] bridge_slave_1: entered allmulticast mode
[ 83.486798][ T5826] bridge_slave_1: entered promiscuous mode
[ 83.518953][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.530481][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.560228][ T5826] team0: Port device team_slave_0 added
[ 83.575907][ T5826] team0: Port device team_slave_1 added
[ 83.595578][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.602544][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.628803][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.641605][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.648621][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.674673][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.716636][ T5826] hsr_slave_0: entered promiscuous mode
[ 83.723155][ T5826] hsr_slave_1: entered promiscuous mode
[ 83.879862][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.892229][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.902204][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.912269][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.970544][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.977813][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.985852][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.992943][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.066235][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.093432][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.103218][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.119848][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.136045][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.143193][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.162071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.169272][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.215701][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 84.365692][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.408934][ T5826] veth0_vlan: entered promiscuous mode
[ 84.421894][ T5826] veth1_vlan: entered promiscuous mode
[ 84.453009][ T5826] veth0_macvtap: entered promiscuous mode
[ 84.469567][ T5826] veth1_macvtap: entered promiscuous mode
[ 84.493722][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.506664][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.519072][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.529031][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.539904][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.548842][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.692120][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.701774][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.710622][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.718823][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.727605][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 84.735768][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.047252][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/10/09 13:15:05 executed programs: 0
[ 86.697126][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.706197][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.714728][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.722657][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.731257][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.739523][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.857892][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 86.911117][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.918588][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.925994][ T5886] bridge_slave_0: entered allmulticast mode
[ 86.932735][ T5886] bridge_slave_0: entered promiscuous mode
[ 86.940675][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.948133][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.955941][ T5886] bridge_slave_1: entered allmulticast mode
[ 86.962658][ T5886] bridge_slave_1: entered promiscuous mode
[ 86.986029][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.998139][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.015578][ T27] cfg80211: failed to load regulatory.db
[ 87.070624][ T5886] team0: Port device team_slave_0 added
[ 87.081486][ T5886] team0: Port device team_slave_1 added
[ 87.116441][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.125818][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.154753][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.169253][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.177415][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.206622][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.267421][ T5886] hsr_slave_0: entered promiscuous mode
[ 87.274757][ T5886] hsr_slave_1: entered promiscuous mode
[ 87.281140][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 87.292529][ T5886] Cannot create hsr debugfs directory
[ 87.504402][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.764149][ T5086] Bluetooth: hci0: command tx timeout
[ 89.735089][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.787264][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.755747][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.782502][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.792514][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.802767][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.829503][ T1103] hsr_slave_0: left promiscuous mode
[ 90.836047][ T1103] hsr_slave_1: left promiscuous mode
[ 90.842261][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 90.850292][ T5086] Bluetooth: hci0: command tx timeout
[ 90.856125][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 90.864400][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 90.871804][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 90.880745][ T1103] bridge_slave_1: left allmulticast mode
[ 90.886511][ T1103] bridge_slave_1: left promiscuous mode
[ 90.892876][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.906469][ T1103] bridge_slave_0: left allmulticast mode
[ 90.912138][ T1103] bridge_slave_0: left promiscuous mode
[ 90.918189][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.938102][ T1103] veth1_macvtap: left promiscuous mode
[ 90.943965][ T1103] veth0_macvtap: left promiscuous mode
[ 90.950053][ T1103] veth1_vlan: left promiscuous mode
[ 90.955659][ T1103] veth0_vlan: left promiscuous mode
[ 91.352259][ T1103] team0 (unregistering): Port device team_slave_1 removed
[ 91.385750][ T1103] team0 (unregistering): Port device team_slave_0 removed
[ 91.416231][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 91.447056][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 91.651917][ T1103] bond0 (unregistering): Released all slaves
[ 91.750737][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.771904][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.795813][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.802990][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.813275][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.820427][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.046534][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.086869][ T5886] veth0_vlan: entered promiscuous mode
[ 92.098497][ T5886] veth1_vlan: entered promiscuous mode
[ 92.131125][ T5886] veth0_macvtap: entered promiscuous mode
[ 92.141877][ T5886] veth1_macvtap: entered promiscuous mode
[ 92.168576][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.182532][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.209204][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.219576][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.229015][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.238447][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.344900][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.353025][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.386657][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.394725][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.437373][ T5928] ==================================================================
[ 92.445497][ T5928] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[ 92.453309][ T5928] Write of size 72 at addr ffff888028b4da90 by task syz.0.17/5928
[ 92.461122][ T5928]
[ 92.463468][ T5928] CPU: 1 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0
[ 92.470670][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 92.480754][ T5928] Call Trace:
[ 92.484040][ T5928]
[ 92.486968][ T5928] dump_stack_lvl+0x18c/0x250
[ 92.491670][ T5928] ? read_lock_is_recursive+0x20/0x20
[ 92.497039][ T5928] ? show_regs_print_info+0x20/0x20
[ 92.502232][ T5928] ? load_image+0x420/0x420
[ 92.506742][ T5928] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 92.512201][ T5928] ? __virt_addr_valid+0x10c/0x380
[ 92.517306][ T5928] ? __virt_addr_valid+0x10c/0x380
[ 92.522413][ T5928] ? __virt_addr_valid+0x10c/0x380
[ 92.527525][ T5928] print_report+0xa8/0x210
[ 92.532027][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 92.537141][ T5928] kasan_report+0x117/0x150
[ 92.541644][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 92.546758][ T5928] kasan_check_range+0x241/0x290
[ 92.551693][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 92.556804][ T5928] __asan_memcpy+0x40/0x70
[ 92.561220][ T5928] __bpf_get_stackid+0x6c7/0x900
[ 92.566161][ T5928] bpf_get_stackid_pe+0x343/0x410
[ 92.571211][ T5928] bpf_prog_7c3121bd7c2431ec+0x30/0x48
[ 92.576669][ T5928] bpf_overflow_handler+0x1fc/0x510
[ 92.581871][ T5928] ? bpf_overflow_handler+0xde/0x510
[ 92.587158][ T5928] ? tp_perf_event_destroy+0x20/0x20
[ 92.592447][ T5928] ? mark_lock+0x94/0x320
[ 92.596775][ T5928] ? verify_lock_unused+0x140/0x140
[ 92.602079][ T5928] ? __perf_event_account_interrupt+0x187/0x280
[ 92.608314][ T5928] __perf_event_overflow+0x461/0x660
[ 92.613600][ T5928] perf_swevent_overflow+0x274/0x340
[ 92.618884][ T5928] ? perf_event_switch_output+0x790/0x790
[ 92.624603][ T5928] ? rcu_is_watching+0x15/0xb0
[ 92.629388][ T5928] perf_swevent_event+0x45c/0x570
[ 92.634419][ T5928] ? perf_tp_event+0x1550/0x1550
[ 92.639372][ T5928] ___perf_sw_event+0x4ab/0x730
[ 92.644221][ T5928] ? ___perf_sw_event+0x19e/0x730
[ 92.649243][ T5928] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 92.655668][ T5928] ? __lock_acquire+0x1431/0x7eb0
[ 92.660723][ T5928] ? verify_lock_unused+0x140/0x140
[ 92.665929][ T5928] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 92.671904][ T5928] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 92.677716][ T5928] ? lock_chain_count+0x20/0x20
[ 92.682566][ T5928] __perf_sw_event+0x139/0x270
[ 92.687341][ T5928] do_user_addr_fault+0x1242/0x12d0
[ 92.692542][ T5928] ? rcu_is_watching+0x15/0xb0
[ 92.697306][ T5928] exc_page_fault+0x64/0x100
[ 92.701894][ T5928] asm_exc_page_fault+0x26/0x30
[ 92.706741][ T5928] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 92.712546][ T5928] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[ 92.732157][ T5928] RSP: 0018:ffffc9000343fb48 EFLAGS: 00050216
[ 92.738263][ T5928] RAX: ffffffff8434c401 RBX: 0000000000000020 RCX: 0000000000000020
[ 92.746236][ T5928] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900015ee048
[ 92.754294][ T5928] RBP: 0000000000000000 R08: ffffc900015ee067 R09: 1ffff920002bdc0c
[ 92.762260][ T5928] R10: dffffc0000000000 R11: fffff520002bdc0d R12: 0000000000000020
[ 92.770230][ T5928] R13: dffffc0000000000 R14: ffffc900015ee048 R15: 0000000000000000
[ 92.778551][ T5928] ? rcuref_put_slowpath+0x141/0x150
[ 92.783841][ T5928] _copy_from_user+0x8b/0xe0
[ 92.788429][ T5928] copy_from_bpfptr+0x67/0x80
[ 92.793098][ T5928] bpf_prog_load+0xa3a/0x1610
[ 92.797771][ T5928] ? map_freeze+0x420/0x420
[ 92.802272][ T5928] ? __might_fault+0xaa/0x120
[ 92.806946][ T5928] ? __might_fault+0xc6/0x120
[ 92.811635][ T5928] ? __might_fault+0xaa/0x120
[ 92.816304][ T5928] ? bpf_lsm_bpf+0x9/0x10
[ 92.820636][ T5928] ? security_bpf+0x7e/0xa0
[ 92.825134][ T5928] __sys_bpf+0x5ba/0x890
[ 92.829465][ T5928] ? bpf_link_show_fdinfo+0x560/0x560
[ 92.834842][ T5928] ? lock_chain_count+0x20/0x20
[ 92.839695][ T5928] __x64_sys_bpf+0x7c/0x90
[ 92.844117][ T5928] do_syscall_64+0x55/0xb0
[ 92.848534][ T5928] ? clear_bhb_loop+0x40/0x90
[ 92.853217][ T5928] ? clear_bhb_loop+0x40/0x90
[ 92.857920][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.863815][ T5928] RIP: 0033:0x7fa15ff9e1d9
[ 92.868227][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 92.887835][ T5928] RSP: 002b:00007ffc6d410598 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 92.896246][ T5928] RAX: ffffffffffffffda RBX: 00007fa160225fa0 RCX: 00007fa15ff9e1d9
[ 92.904215][ T5928] RDX: 0000000000000094 RSI: 00002000000023c0 RDI: 0000000000000005
[ 92.912183][ T5928] RBP: 00007fa160035888 R08: 0000000000000000 R09: 0000000000000000
[ 92.920154][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.928122][ T5928] R13: 00007fa160225fac R14: 00007fa160225fa0 R15: 00007fa160225fa0
[ 92.936100][ T5928]
[ 92.939129][ T5928]
[ 92.941440][ T5928] Allocated by task 5928:
[ 92.945761][ T5928] kasan_set_track+0x4e/0x70
[ 92.950353][ T5928] __kasan_kmalloc+0x8f/0xa0
[ 92.954939][ T5928] __kmalloc_node+0xb6/0x240
[ 92.959525][ T5928] bpf_map_area_alloc+0x5e/0x110
[ 92.964462][ T5928] prealloc_elems_and_freelist+0x86/0x1c0
[ 92.970175][ T5928] stack_map_alloc+0x32b/0x4b0
[ 92.974947][ T5928] map_create+0x877/0x12f0
[ 92.979358][ T5928] __sys_bpf+0x651/0x890
[ 92.983592][ T5928] __x64_sys_bpf+0x7c/0x90
[ 92.988000][ T5928] do_syscall_64+0x55/0xb0
[ 92.992405][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.998293][ T5928]
[ 93.000607][ T5928] The buggy address belongs to the object at ffff888028b4da80
[ 93.000607][ T5928] which belongs to the cache kmalloc-cg-64 of size 64
[ 93.014744][ T5928] The buggy address is located 16 bytes inside of
[ 93.014744][ T5928] allocated 40-byte region [ffff888028b4da80, ffff888028b4daa8)
[ 93.028713][ T5928]
[ 93.031025][ T5928] The buggy address belongs to the physical page:
[ 93.037433][ T5928] page:ffffea0000a2d340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28b4d
[ 93.047594][ T5928] memcg:ffff888075d93a01
[ 93.051909][ T5928] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 93.059464][ T5928] page_type: 0xffffffff()
[ 93.063834][ T5928] raw: 00fff00000000800 ffff88801884da00 dead000000000122 0000000000000000
[ 93.072498][ T5928] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888075d93a01
[ 93.081069][ T5928] page dumped because: kasan: bad access detected
[ 93.087486][ T5928] page_owner tracks the page as allocated
[ 93.093190][ T5928] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1078, tgid 1078 (kworker/u4:6), ts 92152133256, free_ts 92055523276
[ 93.111545][ T5928] post_alloc_hook+0x1c1/0x200
[ 93.116316][ T5928] get_page_from_freelist+0x2181/0x22a0
[ 93.121855][ T5928] __alloc_pages+0x1f0/0x460
[ 93.126529][ T5928] alloc_slab_page+0x5d/0x180
[ 93.131196][ T5928] new_slab+0x87/0x2d0
[ 93.135265][ T5928] ___slab_alloc+0xc5c/0x12f0
[ 93.139932][ T5928] __kmem_cache_alloc_node+0x11f/0x250
[ 93.145386][ T5928] __kmalloc_node+0xa6/0x240
[ 93.149973][ T5928] kvmalloc_node+0x70/0x180
[ 93.154473][ T5928] __nf_hook_entries_try_shrink+0x336/0x700
[ 93.160362][ T5928] __nf_unregister_net_hook+0x4da/0x6d0
[ 93.165900][ T5928] nf_unregister_net_hooks+0xcb/0x130
[ 93.171263][ T5928] nf_ct_netns_put+0x36d/0x520
[ 93.176017][ T5928] nf_conncount_destroy+0x41/0x150
[ 93.181299][ T5928] ovs_ct_exit_finish+0xa5/0x210
[ 93.186231][ T5928] ovs_exit_net+0xed/0x7a0
[ 93.190652][ T5928] page last free stack trace:
[ 93.195315][ T5928] free_unref_page_prepare+0x7d7/0x8f0
[ 93.200770][ T5928] free_unref_page+0x32/0x2e0
[ 93.205443][ T5928] __slab_free+0x35a/0x400
[ 93.209851][ T5928] qlist_free_all+0x75/0xd0
[ 93.214349][ T5928] kasan_quarantine_reduce+0x143/0x160
[ 93.219804][ T5928] __kasan_slab_alloc+0x22/0x80
[ 93.224656][ T5928] slab_post_alloc_hook+0x6a/0x4d0
[ 93.229762][ T5928] kmem_cache_alloc_node+0x1af/0x310
[ 93.235043][ T5928] __alloc_skb+0x103/0x2c0
[ 93.239457][ T5928] alloc_skb_with_frags+0xcd/0x7a0
[ 93.244564][ T5928] sock_alloc_send_pskb+0x883/0x9a0
[ 93.249767][ T5928] unix_dgram_sendmsg+0x5a9/0x16e0
[ 93.254879][ T5928] __sys_sendto+0x4a9/0x6b0
[ 93.259379][ T5928] __x64_sys_sendto+0xde/0xf0
[ 93.264051][ T5928] do_syscall_64+0x55/0xb0
[ 93.268463][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 93.274358][ T5928]
[ 93.276693][ T5928] Memory state around the buggy address:
[ 93.282344][ T5928] ffff888028b4d980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 93.290396][ T5928] ffff888028b4da00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 93.298447][ T5928] >ffff888028b4da80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 93.306587][ T5928] ^
[ 93.311944][ T5928] ffff888028b4db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 93.319996][ T5928] ffff888028b4db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 93.328048][ T5928] ==================================================================
[ 93.336096][ T5928] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.343276][ T5928] CPU: 1 PID: 5928 Comm: syz.0.17 Not tainted syzkaller #0
[ 93.350469][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 93.360698][ T5928] Call Trace:
[ 93.364011][ T5928]
[ 93.366935][ T5928] dump_stack_lvl+0x18c/0x250
[ 93.371615][ T5928] ? show_regs_print_info+0x20/0x20
[ 93.376804][ T5928] ? load_image+0x420/0x420
[ 93.381305][ T5928] panic+0x2ca/0x720
[ 93.385209][ T5928] ? __lock_acquire+0x7eb0/0x7eb0
[ 93.390339][ T5928] ? bpf_jit_dump+0xd0/0xd0
[ 93.394952][ T5928] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 93.400853][ T5928] ? _raw_spin_unlock+0x40/0x40
[ 93.405703][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 93.410807][ T5928] check_panic_on_warn+0x84/0xa0
[ 93.415739][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 93.420845][ T5928] end_report+0x6f/0x130
[ 93.425085][ T5928] kasan_report+0x128/0x150
[ 93.429630][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 93.434739][ T5928] kasan_check_range+0x241/0x290
[ 93.439677][ T5928] ? __bpf_get_stackid+0x6c7/0x900
[ 93.444871][ T5928] __asan_memcpy+0x40/0x70
[ 93.449285][ T5928] __bpf_get_stackid+0x6c7/0x900
[ 93.454220][ T5928] bpf_get_stackid_pe+0x343/0x410
[ 93.459252][ T5928] bpf_prog_7c3121bd7c2431ec+0x30/0x48
[ 93.466279][ T5928] bpf_overflow_handler+0x1fc/0x510
[ 93.471481][ T5928] ? bpf_overflow_handler+0xde/0x510
[ 93.476762][ T5928] ? tp_perf_event_destroy+0x20/0x20
[ 93.482043][ T5928] ? mark_lock+0x94/0x320
[ 93.486372][ T5928] ? verify_lock_unused+0x140/0x140
[ 93.491658][ T5928] ? __perf_event_account_interrupt+0x187/0x280
[ 93.497922][ T5928] __perf_event_overflow+0x461/0x660
[ 93.503203][ T5928] perf_swevent_overflow+0x274/0x340
[ 93.508485][ T5928] ? perf_event_switch_output+0x790/0x790
[ 93.514203][ T5928] ? rcu_is_watching+0x15/0xb0
[ 93.518962][ T5928] perf_swevent_event+0x45c/0x570
[ 93.523984][ T5928] ? perf_tp_event+0x1550/0x1550
[ 93.528941][ T5928] ___perf_sw_event+0x4ab/0x730
[ 93.533786][ T5928] ? ___perf_sw_event+0x19e/0x730
[ 93.538829][ T5928] ? perf_swevent_put_recursion_context+0xb0/0xb0
[ 93.545237][ T5928] ? __lock_acquire+0x1431/0x7eb0
[ 93.550263][ T5928] ? verify_lock_unused+0x140/0x140
[ 93.555454][ T5928] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 93.561429][ T5928] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[ 93.567238][ T5928] ? lock_chain_count+0x20/0x20
[ 93.572083][ T5928] __perf_sw_event+0x139/0x270
[ 93.576844][ T5928] do_user_addr_fault+0x1242/0x12d0
[ 93.582041][ T5928] ? rcu_is_watching+0x15/0xb0
[ 93.586801][ T5928] exc_page_fault+0x64/0x100
[ 93.591385][ T5928] asm_exc_page_fault+0x26/0x30
[ 93.596227][ T5928] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 93.602028][ T5928] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08
[ 93.621634][ T5928] RSP: 0018:ffffc9000343fb48 EFLAGS: 00050216
[ 93.627696][ T5928] RAX: ffffffff8434c401 RBX: 0000000000000020 RCX: 0000000000000020
[ 93.635748][ T5928] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900015ee048
[ 93.643713][ T5928] RBP: 0000000000000000 R08: ffffc900015ee067 R09: 1ffff920002bdc0c
[ 93.651701][ T5928] R10: dffffc0000000000 R11: fffff520002bdc0d R12: 0000000000000020
[ 93.659671][ T5928] R13: dffffc0000000000 R14: ffffc900015ee048 R15: 0000000000000000
[ 93.667650][ T5928] ? rcuref_put_slowpath+0x141/0x150
[ 93.672940][ T5928] _copy_from_user+0x8b/0xe0
[ 93.677532][ T5928] copy_from_bpfptr+0x67/0x80
[ 93.682206][ T5928] bpf_prog_load+0xa3a/0x1610
[ 93.686882][ T5928] ? map_freeze+0x420/0x420
[ 93.691385][ T5928] ? __might_fault+0xaa/0x120
[ 93.696053][ T5928] ? __might_fault+0xc6/0x120
[ 93.700718][ T5928] ? __might_fault+0xaa/0x120
[ 93.705386][ T5928] ? bpf_lsm_bpf+0x9/0x10
[ 93.709713][ T5928] ? security_bpf+0x7e/0xa0
[ 93.714212][ T5928] __sys_bpf+0x5ba/0x890
[ 93.718447][ T5928] ? bpf_link_show_fdinfo+0x560/0x560
[ 93.723817][ T5928] ? lock_chain_count+0x20/0x20
[ 93.728674][ T5928] __x64_sys_bpf+0x7c/0x90
[ 93.733080][ T5928] do_syscall_64+0x55/0xb0
[ 93.737488][ T5928] ? clear_bhb_loop+0x40/0x90
[ 93.742155][ T5928] ? clear_bhb_loop+0x40/0x90
[ 93.746829][ T5928] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 93.752720][ T5928] RIP: 0033:0x7fa15ff9e1d9
[ 93.757127][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.776904][ T5928] RSP: 002b:00007ffc6d410598 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 93.785313][ T5928] RAX: ffffffffffffffda RBX: 00007fa160225fa0 RCX: 00007fa15ff9e1d9
[ 93.793281][ T5928] RDX: 0000000000000094 RSI: 00002000000023c0 RDI: 0000000000000005
[ 93.801265][ T5928] RBP: 00007fa160035888 R08: 0000000000000000 R09: 0000000000000000
[ 93.809231][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.817196][ T5928] R13: 00007fa160225fac R14: 00007fa160225fa0 R15: 00007fa160225fa0
[ 93.825186][ T5928]
[ 93.828332][ T5928] Kernel Offset: disabled
[ 93.832647][ T5928] Rebooting in 86400 seconds..