Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts.
2026/03/22 10:20:30 parsed 1 programs
[ 80.730695][ T5774] cgroup: Unknown subsys name 'net'
[ 80.866620][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 82.894587][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.334226][ T5816] chnl_net:caif_netlink_parms(): no params data found
[ 86.415515][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.423961][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.431360][ T5816] bridge_slave_0: entered allmulticast mode
[ 86.438362][ T5816] bridge_slave_0: entered promiscuous mode
[ 86.455412][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.462672][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.470028][ T5816] bridge_slave_1: entered allmulticast mode
[ 86.476810][ T5816] bridge_slave_1: entered promiscuous mode
[ 86.504607][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.517078][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.554285][ T5816] team0: Port device team_slave_0 added
[ 86.562786][ T5816] team0: Port device team_slave_1 added
[ 86.592137][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.599187][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.625830][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.640408][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.647495][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 86.673983][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.729051][ T5816] hsr_slave_0: entered promiscuous mode
[ 86.735472][ T5816] hsr_slave_1: entered promiscuous mode
[ 86.891779][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.903407][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.920822][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.932334][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.958416][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.965813][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.974070][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.981324][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.052389][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.077655][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.087498][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.112353][ T787] cfg80211: failed to load regulatory.db
[ 87.121580][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.138616][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.145832][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.164913][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.172081][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.367511][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.416318][ T5816] veth0_vlan: entered promiscuous mode
[ 87.429399][ T5816] veth1_vlan: entered promiscuous mode
[ 87.465148][ T5816] veth0_macvtap: entered promiscuous mode
[ 87.478006][ T5816] veth1_macvtap: entered promiscuous mode
[ 87.499572][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.516412][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.529333][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.538592][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.549378][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.558139][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.723562][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.739516][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.751713][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.759882][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.768181][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.777446][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 87.785346][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.053225][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.066699][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.094913][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.103596][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/22 10:20:41 executed programs: 0
[ 90.055973][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.064145][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.073696][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.082886][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.091624][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.099948][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.230657][ T5879] chnl_net:caif_netlink_parms(): no params data found
[ 90.290023][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.297341][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.304816][ T5879] bridge_slave_0: entered allmulticast mode
[ 90.312489][ T5879] bridge_slave_0: entered promiscuous mode
[ 90.324339][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.331891][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.339270][ T5879] bridge_slave_1: entered allmulticast mode
[ 90.346174][ T5879] bridge_slave_1: entered promiscuous mode
[ 90.371188][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.383144][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.415487][ T5879] team0: Port device team_slave_0 added
[ 90.424066][ T5879] team0: Port device team_slave_1 added
[ 90.446191][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.453413][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.481072][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.493460][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.500629][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 90.527094][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.548166][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.590115][ T5879] hsr_slave_0: entered promiscuous mode
[ 90.596948][ T5879] hsr_slave_1: entered promiscuous mode
[ 90.605301][ T5879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 90.613776][ T5879] Cannot create hsr debugfs directory
[ 92.149812][ T5085] Bluetooth: hci0: command tx timeout
[ 92.899197][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.963674][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.852193][ T49] hsr_slave_0: left promiscuous mode
[ 93.858799][ T49] hsr_slave_1: left promiscuous mode
[ 93.865293][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 93.876157][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 93.885833][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 93.895734][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.906119][ T49] bridge_slave_1: left allmulticast mode
[ 93.914484][ T49] bridge_slave_1: left promiscuous mode
[ 93.922204][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.937488][ T49] bridge_slave_0: left allmulticast mode
[ 93.944434][ T49] bridge_slave_0: left promiscuous mode
[ 93.953712][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.987566][ T49] veth1_macvtap: left promiscuous mode
[ 93.997794][ T49] veth0_macvtap: left promiscuous mode
[ 94.003936][ T49] veth1_vlan: left promiscuous mode
[ 94.012154][ T49] veth0_vlan: left promiscuous mode
[ 94.229621][ T5085] Bluetooth: hci0: command tx timeout
[ 94.482945][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 94.518571][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 94.554812][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 94.591703][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 94.845703][ T49] bond0 (unregistering): Released all slaves
[ 94.960259][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.969965][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.981524][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.992258][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.104367][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.123957][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.143566][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.150880][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.171153][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.178396][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.454284][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.574585][ T5879] veth0_vlan: entered promiscuous mode
[ 95.605794][ T5879] veth1_vlan: entered promiscuous mode
[ 95.678642][ T5879] veth0_macvtap: entered promiscuous mode
[ 95.697882][ T5879] veth1_macvtap: entered promiscuous mode
[ 95.748986][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.773630][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.786243][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.798099][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.807373][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.819606][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.919880][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.927744][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.982802][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.991061][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.101306][ T5921] ==================================================================
[ 96.109529][ T5921] BUG: KASAN: slab-out-of-bounds in __xfrm_decode_session+0x18d7/0x20a0
[ 96.117867][ T5921] Read of size 1 at addr ffff8880780b2ff8 by task syz.0.17/5921
[ 96.125490][ T5921]
[ 96.127896][ T5921] CPU: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0
[ 96.135171][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 96.145221][ T5921] Call Trace:
[ 96.148504][ T5921]
[ 96.151445][ T5921] dump_stack_lvl+0x18c/0x250
[ 96.156155][ T5921] ? __lock_acquire+0x7d40/0x7d40
[ 96.161188][ T5921] ? show_regs_print_info+0x20/0x20
[ 96.166494][ T5921] ? load_image+0x400/0x400
[ 96.170994][ T5921] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 96.176475][ T5921] ? __virt_addr_valid+0x18c/0x540
[ 96.181586][ T5921] ? __virt_addr_valid+0x469/0x540
[ 96.186707][ T5921] print_report+0xa8/0x210
[ 96.191257][ T5921] ? __xfrm_decode_session+0x18d7/0x20a0
[ 96.196901][ T5921] kasan_report+0x117/0x150
[ 96.201501][ T5921] ? __xfrm_decode_session+0x18d7/0x20a0
[ 96.207151][ T5921] __xfrm_decode_session+0x18d7/0x20a0
[ 96.212623][ T5921] icmpv6_route_lookup+0x442/0x600
[ 96.217827][ T5921] ? icmpv6_xrlim_allow+0x620/0x620
[ 96.223112][ T5921] ? icmpv6_xrlim_allow+0x515/0x620
[ 96.228504][ T5921] ? dev_get_by_index+0x22/0x2d0
[ 96.233520][ T5921] ? dev_get_by_index+0x22/0x2d0
[ 96.238549][ T5921] icmp6_send+0x11a2/0x1b40
[ 96.243070][ T5921] ? icmp6_send+0x233/0x1b40
[ 96.247710][ T5921] ? icmpv6_push_pending_frames+0x400/0x400
[ 96.253714][ T5921] ? ip6_neigh_lookup+0x14b/0x480
[ 96.258763][ T5921] ? __ipv6_addr_type+0x10c/0x2f0
[ 96.263810][ T5921] ? ip6_tnl_xmit_ctl+0x19f/0x650
[ 96.268830][ T5921] ip6_link_failure+0x3b/0x4c0
[ 96.273872][ T5921] ? ip6_negative_advice+0x310/0x310
[ 96.279155][ T5921] ip6_tnl_xmit+0xe8b/0x2a80
[ 96.283754][ T5921] ? __sys_sendto+0x4a9/0x6b0
[ 96.288427][ T5921] ? __x64_sys_sendto+0xde/0xf0
[ 96.293361][ T5921] ? do_syscall_64+0x55/0xa0
[ 96.297950][ T5921] ? ip6_tnl_xmit_ctl+0x650/0x650
[ 96.303076][ T5921] ? __put_user_ns+0x50/0x50
[ 96.307849][ T5921] ? iptunnel_handle_offloads+0x2f7/0x620
[ 96.313663][ T5921] ip6_tnl_start_xmit+0xc6c/0x11c0
[ 96.318866][ T5921] ? ip6_tnl_dev_uninit+0x160/0x160
[ 96.324300][ T5921] dev_hard_start_xmit+0x246/0x740
[ 96.329419][ T5921] sch_direct_xmit+0x25e/0x4c0
[ 96.334182][ T5921] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0
[ 96.340184][ T5921] ? sfb_dequeue+0x247/0x370
[ 96.344824][ T5921] __qdisc_run+0xa56/0x1500
[ 96.349354][ T5921] __dev_queue_xmit+0x10ad/0x3660
[ 96.349580][ T5085] Bluetooth: hci0: command tx timeout
[ 96.354403][ T5921] ? __dev_queue_xmit+0x265/0x3660
[ 96.354428][ T5921] ? lockdep_hardirqs_on+0x98/0x150
[ 96.354449][ T5921] ? read_seqbegin+0x1c8/0x270
[ 96.375152][ T5921] ? neigh_event_send+0x110/0x110
[ 96.380289][ T5921] ? netdev_core_pick_tx+0x340/0x340
[ 96.385579][ T5921] ? neigh_connected_output+0x3b0/0x450
[ 96.391123][ T5921] ip6_finish_output2+0xe3d/0x1630
[ 96.396234][ T5921] ? ip6_finish_output2+0x645/0x1630
[ 96.401621][ T5921] ? nf_hook+0x390/0x390
[ 96.405914][ T5921] ip6_fragment+0x1535/0x1fd0
[ 96.410609][ T5921] ? nf_hook+0x390/0x390
[ 96.414852][ T5921] ? ip6_mtu+0x7d/0x3f0
[ 96.419098][ T5921] ? ip6_frag_next+0xb40/0xb40
[ 96.423861][ T5921] ip6_xmit+0x10f1/0x1890
[ 96.428187][ T5921] ? kasan_set_track+0x5f/0x70
[ 96.432969][ T5921] ? ip6_autoflowlabel+0xe0/0xe0
[ 96.437918][ T5921] ? read_lock_is_recursive+0x20/0x20
[ 96.443305][ T5921] sctp_v6_xmit+0x9a4/0x1200
[ 96.447912][ T5921] ? sctp_v6_xmit+0x61d/0x1200
[ 96.452685][ T5921] ? __sctp_v6_cmp_addr+0x510/0x510
[ 96.457885][ T5921] ? sctp_compute_cksum+0xe0/0xe0
[ 96.462914][ T5921] ? __skb_checksum+0x752/0x800
[ 96.467864][ T5921] sctp_packet_transmit+0x247d/0x2a30
[ 96.473258][ T5921] sctp_packet_singleton+0x235/0x340
[ 96.478556][ T5921] ? sctp_outq_select_transport+0x570/0x570
[ 96.484465][ T5921] ? sctp_outq_select_transport+0x45d/0x570
[ 96.490366][ T5921] ? sctp_transport_burst_limited+0x197/0x280
[ 96.496438][ T5921] sctp_outq_flush+0x50e/0x3120
[ 96.501325][ T5921] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 96.507245][ T5921] ? _raw_spin_unlock+0x40/0x40
[ 96.512378][ T5921] ? rcu_is_watching+0x15/0xb0
[ 96.517242][ T5921] ? enqueue_timer+0x23d/0x550
[ 96.522017][ T5921] ? sctp_outq_tail+0x8a0/0x8a0
[ 96.526871][ T5921] ? sctp_outq_tail+0x604/0x8a0
[ 96.531811][ T5921] ? sctp_outq_uncork+0x4d/0xa0
[ 96.536788][ T5921] sctp_do_sm+0x533b/0x5a60
[ 96.541400][ T5921] ? sctp_generate_t3_rtx_event+0x340/0x340
[ 96.547302][ T5921] ? do_syscall_64+0x55/0xa0
[ 96.551939][ T5921] ? __sk_mem_raise_allocated+0xa29/0x1340
[ 96.557779][ T5921] sctp_primitive_ASSOCIATE+0x95/0xc0
[ 96.563159][ T5921] sctp_sendmsg_to_asoc+0x10a6/0x1830
[ 96.568528][ T5921] ? __asan_memcpy+0x40/0x70
[ 96.573118][ T5921] ? sctp_assoc_add_peer+0xcf3/0x1390
[ 96.578583][ T5921] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[ 96.584387][ T5921] ? __sctp_connect+0xd80/0xd80
[ 96.589232][ T5921] ? __local_bh_enable_ip+0x13a/0x1c0
[ 96.594601][ T5921] ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 96.600154][ T5921] ? security_sctp_bind_connect+0x89/0xb0
[ 96.605957][ T5921] sctp_sendmsg+0x1b83/0x28c0
[ 96.610636][ T5921] ? sctp_getsockopt+0xb60/0xb60
[ 96.615566][ T5921] ? aa_sk_perm+0x83c/0x970
[ 96.620074][ T5921] ? aa_af_perm+0x330/0x330
[ 96.624661][ T5921] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 96.631068][ T5921] ? sock_rps_record_flow+0x19/0x3f0
[ 96.636350][ T5921] ? inet_sendmsg+0xe9/0x2f0
[ 96.640937][ T5921] __sys_sendto+0x4a9/0x6b0
[ 96.645441][ T5921] ? __ia32_sys_getpeername+0x90/0x90
[ 96.650841][ T5921] ? __lock_acquire+0x7d40/0x7d40
[ 96.655919][ T5921] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 96.661930][ T5921] ? lock_chain_count+0x20/0x20
[ 96.666798][ T5921] __x64_sys_sendto+0xde/0xf0
[ 96.671575][ T5921] do_syscall_64+0x55/0xa0
[ 96.676087][ T5921] ? clear_bhb_loop+0x40/0x90
[ 96.680770][ T5921] ? clear_bhb_loop+0x40/0x90
[ 96.685656][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 96.691933][ T5921] RIP: 0033:0x7fd11b99c799
[ 96.696357][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 96.716141][ T5921] RSP: 002b:00007ffeaaa454a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 96.724577][ T5921] RAX: ffffffffffffffda RBX: 00007fd11bc15fa0 RCX: 00007fd11b99c799
[ 96.732543][ T5921] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
[ 96.740524][ T5921] RBP: 00007fd11ba32c99 R08: 0000200000000080 R09: 000000000000001c
[ 96.748610][ T5921] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000
[ 96.756604][ T5921] R13: 00007fd11bc15fac R14: 00007fd11bc15fa0 R15: 00007fd11bc15fa0
[ 96.764728][ T5921]
[ 96.767746][ T5921]
[ 96.770066][ T5921] The buggy address belongs to the object at ffff8880780b2000
[ 96.770066][ T5921] which belongs to the cache kmalloc-2k of size 2048
[ 96.784199][ T5921] The buggy address is located 2040 bytes to the right of
[ 96.784199][ T5921] allocated 2048-byte region [ffff8880780b2000, ffff8880780b2800)
[ 96.799168][ T5921]
[ 96.801517][ T5921] The buggy address belongs to the physical page:
[ 96.807953][ T5921] page:ffffea0001e02c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x780b0
[ 96.818123][ T5921] head:ffffea0001e02c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 96.827047][ T5921] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 96.835024][ T5921] page_type: 0xffffffff()
[ 96.839345][ T5921] raw: 00fff00000000840 ffff888017c42000 dead000000000122 0000000000000000
[ 96.847923][ T5921] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000
[ 96.856516][ T5921] page dumped because: kasan: bad access detected
[ 96.862941][ T5921] page_owner tracks the page as allocated
[ 96.868761][ T5921] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5921, tgid 5921 (syz.0.17), ts 96101012200, free_ts 95968154510
[ 96.890739][ T5921] post_alloc_hook+0x1c1/0x200
[ 96.895504][ T5921] get_page_from_freelist+0x1951/0x19e0
[ 96.901090][ T5921] __alloc_pages+0x1f0/0x460
[ 96.905728][ T5921] alloc_slab_page+0x5d/0x160
[ 96.910487][ T5921] new_slab+0x87/0x2d0
[ 96.914730][ T5921] ___slab_alloc+0xc5d/0x12f0
[ 96.919414][ T5921] __kmem_cache_alloc_node+0x19e/0x250
[ 96.924866][ T5921] __kmalloc_node_track_caller+0xa2/0x230
[ 96.930671][ T5921] kmalloc_reserve+0x116/0x240
[ 96.935517][ T5921] pskb_expand_head+0x185/0x1230
[ 96.940557][ T5921] nf_nat_icmpv6_reply_translation+0x144/0xa00
[ 96.946795][ T5921] nf_nat_ipv6_fn+0x1f6/0x2e0
[ 96.951605][ T5921] nf_nat_ipv6_in+0xfd/0x2b0
[ 96.956395][ T5921] nf_hook_slow+0xbd/0x200
[ 96.960894][ T5921] NF_HOOK+0x21d/0x3b0
[ 96.964957][ T5921] __netif_receive_skb+0xcc/0x290
[ 96.969979][ T5921] page last free stack trace:
[ 96.974642][ T5921] free_unref_page_prepare+0x7b2/0x8c0
[ 96.980101][ T5921] free_unref_page+0x32/0x2e0
[ 96.984866][ T5921] __unfreeze_partials+0x1cf/0x210
[ 96.989968][ T5921] put_cpu_partial+0x17c/0x250
[ 96.994719][ T5921] __slab_free+0x319/0x400
[ 96.999134][ T5921] qlist_free_all+0x75/0xd0
[ 97.003657][ T5921] kasan_quarantine_reduce+0x143/0x160
[ 97.009120][ T5921] __kasan_slab_alloc+0x22/0x80
[ 97.013970][ T5921] slab_post_alloc_hook+0x6e/0x4b0
[ 97.019109][ T5921] kmem_cache_alloc_node+0x14c/0x320
[ 97.024425][ T5921] __alloc_skb+0x103/0x2c0
[ 97.028837][ T5921] mpls_netconf_notify_devconf+0x46/0xf0
[ 97.034658][ T5921] mpls_dev_notify+0x533/0x7a0
[ 97.039502][ T5921] notifier_call_chain+0x197/0x380
[ 97.044619][ T5921] unregister_netdevice_many_notify+0x100d/0x1900
[ 97.051161][ T5921] ip6gre_exit_batch_net+0x451/0x4a0
[ 97.056708][ T5921]
[ 97.059024][ T5921] Memory state around the buggy address:
[ 97.064646][ T5921] ffff8880780b2e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.072785][ T5921] ffff8880780b2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.080836][ T5921] >ffff8880780b2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.088889][ T5921] ^
[ 97.096917][ T5921] ffff8880780b3000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.104978][ T5921] ffff8880780b3080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 97.113208][ T5921] ==================================================================
[ 97.121552][ T5921] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 97.128859][ T5921] CPU: 0 PID: 5921 Comm: syz.0.17 Not tainted syzkaller #0
[ 97.136189][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 97.146360][ T5921] Call Trace:
[ 97.149673][ T5921]
[ 97.152619][ T5921] dump_stack_lvl+0x18c/0x250
[ 97.157379][ T5921] ? show_regs_print_info+0x20/0x20
[ 97.162597][ T5921] ? load_image+0x400/0x400
[ 97.167190][ T5921] panic+0x2dc/0x730
[ 97.171102][ T5921] ? bpf_jit_dump+0xd0/0xd0
[ 97.175597][ T5921] ? _raw_spin_unlock_irqrestore+0xc0/0x120
[ 97.181574][ T5921] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 97.187635][ T5921] ? _raw_spin_unlock+0x40/0x40
[ 97.192490][ T5921] ? print_memory_metadata+0x314/0x400
[ 97.198126][ T5921] ? __xfrm_decode_session+0x18d7/0x20a0
[ 97.203882][ T5921] check_panic_on_warn+0x84/0xa0
[ 97.208902][ T5921] ? __xfrm_decode_session+0x18d7/0x20a0
[ 97.214532][ T5921] end_report+0x6f/0x130
[ 97.218856][ T5921] kasan_report+0x128/0x150
[ 97.223370][ T5921] ? __xfrm_decode_session+0x18d7/0x20a0
[ 97.229011][ T5921] __xfrm_decode_session+0x18d7/0x20a0
[ 97.234499][ T5921] icmpv6_route_lookup+0x442/0x600
[ 97.239619][ T5921] ? icmpv6_xrlim_allow+0x620/0x620
[ 97.244816][ T5921] ? icmpv6_xrlim_allow+0x515/0x620
[ 97.250016][ T5921] ? dev_get_by_index+0x22/0x2d0
[ 97.254955][ T5921] ? dev_get_by_index+0x22/0x2d0
[ 97.259886][ T5921] icmp6_send+0x11a2/0x1b40
[ 97.264401][ T5921] ? icmp6_send+0x233/0x1b40
[ 97.269004][ T5921] ? icmpv6_push_pending_frames+0x400/0x400
[ 97.274943][ T5921] ? ip6_neigh_lookup+0x14b/0x480
[ 97.280354][ T5921] ? __ipv6_addr_type+0x10c/0x2f0
[ 97.285434][ T5921] ? ip6_tnl_xmit_ctl+0x19f/0x650
[ 97.290479][ T5921] ip6_link_failure+0x3b/0x4c0
[ 97.295257][ T5921] ? ip6_negative_advice+0x310/0x310
[ 97.300594][ T5921] ip6_tnl_xmit+0xe8b/0x2a80
[ 97.305199][ T5921] ? __sys_sendto+0x4a9/0x6b0
[ 97.309969][ T5921] ? __x64_sys_sendto+0xde/0xf0
[ 97.314823][ T5921] ? do_syscall_64+0x55/0xa0
[ 97.319687][ T5921] ? ip6_tnl_xmit_ctl+0x650/0x650
[ 97.324748][ T5921] ? __put_user_ns+0x50/0x50
[ 97.329366][ T5921] ? iptunnel_handle_offloads+0x2f7/0x620
[ 97.335123][ T5921] ip6_tnl_start_xmit+0xc6c/0x11c0
[ 97.340239][ T5921] ? ip6_tnl_dev_uninit+0x160/0x160
[ 97.345439][ T5921] dev_hard_start_xmit+0x246/0x740
[ 97.350551][ T5921] sch_direct_xmit+0x25e/0x4c0
[ 97.355414][ T5921] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0
[ 97.361394][ T5921] ? sfb_dequeue+0x247/0x370
[ 97.365987][ T5921] __qdisc_run+0xa56/0x1500
[ 97.370582][ T5921] __dev_queue_xmit+0x10ad/0x3660
[ 97.375707][ T5921] ? __dev_queue_xmit+0x265/0x3660
[ 97.380828][ T5921] ? lockdep_hardirqs_on+0x98/0x150
[ 97.386105][ T5921] ? read_seqbegin+0x1c8/0x270
[ 97.390906][ T5921] ? neigh_event_send+0x110/0x110
[ 97.395958][ T5921] ? netdev_core_pick_tx+0x340/0x340
[ 97.401334][ T5921] ? neigh_connected_output+0x3b0/0x450
[ 97.406891][ T5921] ip6_finish_output2+0xe3d/0x1630
[ 97.412017][ T5921] ? ip6_finish_output2+0x645/0x1630
[ 97.417296][ T5921] ? nf_hook+0x390/0x390
[ 97.421624][ T5921] ip6_fragment+0x1535/0x1fd0
[ 97.426299][ T5921] ? nf_hook+0x390/0x390
[ 97.430554][ T5921] ? ip6_mtu+0x7d/0x3f0
[ 97.434748][ T5921] ? ip6_frag_next+0xb40/0xb40
[ 97.439569][ T5921] ip6_xmit+0x10f1/0x1890
[ 97.443911][ T5921] ? kasan_set_track+0x5f/0x70
[ 97.448684][ T5921] ? ip6_autoflowlabel+0xe0/0xe0
[ 97.453749][ T5921] ? read_lock_is_recursive+0x20/0x20
[ 97.459167][ T5921] sctp_v6_xmit+0x9a4/0x1200
[ 97.463773][ T5921] ? sctp_v6_xmit+0x61d/0x1200
[ 97.468541][ T5921] ? __sctp_v6_cmp_addr+0x510/0x510
[ 97.473757][ T5921] ? sctp_compute_cksum+0xe0/0xe0
[ 97.478880][ T5921] ? __skb_checksum+0x752/0x800
[ 97.483774][ T5921] sctp_packet_transmit+0x247d/0x2a30
[ 97.489174][ T5921] sctp_packet_singleton+0x235/0x340
[ 97.494547][ T5921] ? sctp_outq_select_transport+0x570/0x570
[ 97.500443][ T5921] ? sctp_outq_select_transport+0x45d/0x570
[ 97.506624][ T5921] ? sctp_transport_burst_limited+0x197/0x280
[ 97.512972][ T5921] sctp_outq_flush+0x50e/0x3120
[ 97.517910][ T5921] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 97.523820][ T5921] ? _raw_spin_unlock+0x40/0x40
[ 97.528870][ T5921] ? rcu_is_watching+0x15/0xb0
[ 97.533763][ T5921] ? enqueue_timer+0x23d/0x550
[ 97.538523][ T5921] ? sctp_outq_tail+0x8a0/0x8a0
[ 97.543456][ T5921] ? sctp_outq_tail+0x604/0x8a0
[ 97.548299][ T5921] ? sctp_outq_uncork+0x4d/0xa0
[ 97.553352][ T5921] sctp_do_sm+0x533b/0x5a60
[ 97.557859][ T5921] ? sctp_generate_t3_rtx_event+0x340/0x340
[ 97.563853][ T5921] ? do_syscall_64+0x55/0xa0
[ 97.568449][ T5921] ? __sk_mem_raise_allocated+0xa29/0x1340
[ 97.574353][ T5921] sctp_primitive_ASSOCIATE+0x95/0xc0
[ 97.580123][ T5921] sctp_sendmsg_to_asoc+0x10a6/0x1830
[ 97.585602][ T5921] ? __asan_memcpy+0x40/0x70
[ 97.590191][ T5921] ? sctp_assoc_add_peer+0xcf3/0x1390
[ 97.595592][ T5921] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[ 97.601503][ T5921] ? __sctp_connect+0xd80/0xd80
[ 97.606347][ T5921] ? __local_bh_enable_ip+0x13a/0x1c0
[ 97.611724][ T5921] ? bpf_lsm_sctp_bind_connect+0x9/0x10
[ 97.617267][ T5921] ? security_sctp_bind_connect+0x89/0xb0
[ 97.623113][ T5921] sctp_sendmsg+0x1b83/0x28c0
[ 97.627811][ T5921] ? sctp_getsockopt+0xb60/0xb60
[ 97.632773][ T5921] ? aa_sk_perm+0x83c/0x970
[ 97.637365][ T5921] ? aa_af_perm+0x330/0x330
[ 97.641956][ T5921] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 97.648467][ T5921] ? sock_rps_record_flow+0x19/0x3f0
[ 97.653942][ T5921] ? inet_sendmsg+0xe9/0x2f0
[ 97.658523][ T5921] __sys_sendto+0x4a9/0x6b0
[ 97.663066][ T5921] ? __ia32_sys_getpeername+0x90/0x90
[ 97.668536][ T5921] ? __lock_acquire+0x7d40/0x7d40
[ 97.673736][ T5921] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 97.679740][ T5921] ? lock_chain_count+0x20/0x20
[ 97.684963][ T5921] __x64_sys_sendto+0xde/0xf0
[ 97.689647][ T5921] do_syscall_64+0x55/0xa0
[ 97.694055][ T5921] ? clear_bhb_loop+0x40/0x90
[ 97.698731][ T5921] ? clear_bhb_loop+0x40/0x90
[ 97.703412][ T5921] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 97.709301][ T5921] RIP: 0033:0x7fd11b99c799
[ 97.713715][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 97.733321][ T5921] RSP: 002b:00007ffeaaa454a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 97.741834][ T5921] RAX: ffffffffffffffda RBX: 00007fd11bc15fa0 RCX: 00007fd11b99c799
[ 97.750320][ T5921] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005
[ 97.758306][ T5921] RBP: 00007fd11ba32c99 R08: 0000200000000080 R09: 000000000000001c
[ 97.766363][ T5921] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000
[ 97.774329][ T5921] R13: 00007fd11bc15fac R14: 00007fd11bc15fa0 R15: 00007fd11bc15fa0
[ 97.782306][ T5921]
[ 97.785466][ T5921] Kernel Offset: disabled
[ 97.789784][ T5921] Rebooting in 86400 seconds..