Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. 2026/05/23 22:10:44 parsed 1 programs [ 72.867830][ T4283] cgroup: Unknown subsys name 'net' [ 72.969809][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.266921][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.840401][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.848635][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.859981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.888093][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.896075][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.904474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.076307][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.085631][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.093943][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.101788][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.116576][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.124057][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.182909][ T4355] chnl_net:caif_netlink_parms(): no params data found [ 78.238229][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.247394][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.255687][ T4355] device bridge_slave_0 entered promiscuous mode [ 78.265475][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.272607][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.280405][ T4355] device bridge_slave_1 entered promiscuous mode [ 78.308816][ T4355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.320565][ T4355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.353638][ T4355] team0: Port device team_slave_0 added [ 78.360718][ T4355] team0: Port device team_slave_1 added [ 78.376246][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.383258][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.409335][ T4355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.422275][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.429473][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.455712][ T4355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.496135][ T4355] device hsr_slave_0 entered promiscuous mode [ 78.502822][ T4355] device hsr_slave_1 entered promiscuous mode [ 78.612748][ T4355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.623021][ T4355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.640942][ T4355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.650006][ T4355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.671990][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.679246][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.687266][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.694478][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.750819][ T4355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.800121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.816341][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.825837][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.840023][ T4355] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.862762][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.871769][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.879061][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.887218][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.896217][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.903369][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.947304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.956301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.970951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.997403][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.006044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.017984][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.229233][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.238455][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.254168][ T4355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.286429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.295480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.317415][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.326290][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.335201][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.343020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.354956][ T4355] device veth0_vlan entered promiscuous mode [ 79.366064][ T4355] device veth1_vlan entered promiscuous mode [ 79.385417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.394297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.402499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.411187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.426620][ T4355] device veth0_macvtap entered promiscuous mode [ 79.435941][ T4355] device veth1_macvtap entered promiscuous mode [ 79.451375][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.471001][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.481644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.490613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.498731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.507405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.516097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.524950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.538598][ T4355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.548339][ T4355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.557584][ T4355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.566386][ T4355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/23 22:10:53 executed programs: 0 [ 79.958465][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.974536][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.983278][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.993466][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.001757][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.009724][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.098946][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.155990][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 80.195230][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.202470][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.210394][ T4376] device bridge_slave_0 entered promiscuous mode [ 80.219477][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.227335][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.235210][ T4376] device bridge_slave_1 entered promiscuous mode [ 80.252852][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.264893][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.291279][ T4376] team0: Port device team_slave_0 added [ 80.298420][ T4376] team0: Port device team_slave_1 added [ 80.313659][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.320678][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.347311][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.360022][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.367080][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.394625][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.424119][ T4376] device hsr_slave_0 entered promiscuous mode [ 80.431022][ T4376] device hsr_slave_1 entered promiscuous mode [ 80.438090][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.446223][ T4376] Cannot create hsr debugfs directory [ 82.023933][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 82.104220][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.103264][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 84.262156][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.314576][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.129379][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.141961][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.152257][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.176869][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.219117][ T57] device hsr_slave_0 left promiscuous mode [ 85.228065][ T57] device hsr_slave_1 left promiscuous mode [ 85.235585][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.243002][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.251937][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.259768][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.268392][ T57] device bridge_slave_1 left promiscuous mode [ 85.275693][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.287588][ T57] device bridge_slave_0 left promiscuous mode [ 85.295177][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.319262][ T57] device veth1_macvtap left promiscuous mode [ 85.325880][ T57] device veth0_macvtap left promiscuous mode [ 85.332008][ T57] device veth1_vlan left promiscuous mode [ 85.338502][ T57] device veth0_vlan left promiscuous mode [ 85.678349][ T57] team0 (unregistering): Port device team_slave_1 removed [ 85.707116][ T57] team0 (unregistering): Port device team_slave_0 removed [ 85.734157][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.765842][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.957023][ T57] bond0 (unregistering): Released all slaves [ 86.035771][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.060737][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.072947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.081053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.092049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.100985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.110323][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.117988][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.126532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.150455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.159142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.167737][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.174844][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.184702][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 86.191931][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.201899][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.212469][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.227306][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.237103][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.252205][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.261197][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.272374][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.281267][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.292056][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.301695][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.312767][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.479964][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.487985][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.500832][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.522523][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.531705][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.549769][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.558125][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.566892][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.574923][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.584849][ T4376] device veth0_vlan entered promiscuous mode [ 86.595314][ T4376] device veth1_vlan entered promiscuous mode [ 86.613944][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.622164][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.630721][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.639251][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.650006][ T4376] device veth0_macvtap entered promiscuous mode [ 86.660128][ T4376] device veth1_macvtap entered promiscuous mode [ 86.675638][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.683095][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.691749][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.700365][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.709379][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.721378][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.730679][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.739884][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.751208][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.761285][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.770134][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.779119][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.826156][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.839378][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.848224][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.867901][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/05/23 22:11:00 executed programs: 2 [ 86.876066][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.884579][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.926712][ T3534] cfg80211: failed to load regulatory.db [ 86.953396][ C1] hrtimer: interrupt took 58763 ns [ 87.286511][ C0] ================================================================== [ 87.294634][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 87.302476][ C0] Write of size 48 at addr ffff88802cc35f60 by task syz.0.26/4433 [ 87.310287][ C0] [ 87.312614][ C0] CPU: 0 PID: 4433 Comm: syz.0.26 Not tainted syzkaller #0 [ 87.319805][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.329904][ C0] Call Trace: [ 87.333189][ C0] [ 87.336114][ C0] dump_stack_lvl+0x188/0x24e [ 87.340782][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 87.345801][ C0] ? show_regs_print_info+0x12/0x12 [ 87.350997][ C0] ? load_image+0x400/0x400 [ 87.355506][ C0] ? __virt_addr_valid+0x465/0x540 [ 87.360604][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 87.365712][ C0] print_report+0xa8/0x210 [ 87.370119][ C0] kasan_report+0x10b/0x140 [ 87.374871][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 87.380054][ C0] kasan_check_range+0x235/0x290 [ 87.384999][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 87.390123][ C0] memcpy+0x3c/0x60 [ 87.393923][ C0] __bpf_get_stackid+0x6c9/0x920 [ 87.398849][ C0] bpf_get_stackid_pe+0x2ec/0x400 [ 87.403871][ C0] bpf_prog_644fb7c94e15512a+0x2b/0x40 [ 87.409342][ C0] bpf_overflow_handler+0x522/0x7c0 [ 87.414608][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 87.419891][ C0] ? perf_swevent_overflow+0x230/0x230 [ 87.425342][ C0] ? sched_clock_cpu+0x6e/0x260 [ 87.430185][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 87.436422][ C0] __perf_event_overflow+0x448/0x610 [ 87.441703][ C0] perf_swevent_hrtimer+0x472/0x630 [ 87.446907][ C0] ? cpu_clock_event_read+0x50/0x50 [ 87.452124][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.458017][ C0] ? _raw_spin_unlock+0x40/0x40 [ 87.462874][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 87.468072][ C0] ? cpu_clock_event_read+0x50/0x50 [ 87.473302][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 87.478403][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 87.484469][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 87.489403][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 87.495376][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 87.501000][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 87.507070][ C0] RIP: 0033:0x7f5cc0a65715 [ 87.511476][ C0] Code: e8 60 52 ff ff 48 8b 05 69 00 ee 00 83 05 52 00 ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 4f 00 ee 00 44 88 78 ff <44> 8b 3d 34 00 ee 00 e8 2f 52 ff ff 48 8b 05 40 00 ee 00 44 89 38 [ 87.531084][ C0] RSP: 002b:00007ffe1e883d00 EFLAGS: 00000202 [ 87.537178][ C0] RAX: 0000001b2e263fbc RBX: 0000000000000000 RCX: 0000000000000000 [ 87.545163][ C0] RDX: 0000001b2e263fbb RSI: 0000000000000008 RDI: 00007f5cc1945720 [ 87.553151][ C0] RBP: 00007f5cc1945720 R08: 0000000000000000 R09: 00007f5cc0e16038 [ 87.561153][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 87.569113][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 87.577075][ C0] [ 87.580076][ C0] [ 87.582392][ C0] Allocated by task 4433: [ 87.586714][ C0] kasan_set_track+0x4b/0x70 [ 87.591392][ C0] __kasan_kmalloc+0x8e/0xa0 [ 87.596067][ C0] __kmalloc_node+0xb0/0x240 [ 87.600650][ C0] bpf_map_area_alloc+0x47/0xe0 [ 87.605490][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 87.611197][ C0] stack_map_alloc+0x390/0x520 [ 87.615947][ C0] map_create+0x534/0x1000 [ 87.620350][ C0] __sys_bpf+0x38b/0x780 [ 87.624591][ C0] __x64_sys_bpf+0x78/0x90 [ 87.629020][ C0] do_syscall_64+0x4c/0xa0 [ 87.633520][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.639404][ C0] [ 87.641714][ C0] The buggy address belongs to the object at ffff88802cc35f00 [ 87.641714][ C0] which belongs to the cache kmalloc-cg-128 of size 128 [ 87.656025][ C0] The buggy address is located 96 bytes inside of [ 87.656025][ C0] 128-byte region [ffff88802cc35f00, ffff88802cc35f80) [ 87.669213][ C0] [ 87.671530][ C0] The buggy address belongs to the physical page: [ 87.677941][ C0] page:ffffea0000b30d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cc35 [ 87.688108][ C0] memcg:ffff888072e8fe01 [ 87.692337][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 87.699909][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442a00 [ 87.708497][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff888072e8fe01 [ 87.717089][ C0] page dumped because: kasan: bad access detected [ 87.723589][ C0] page_owner tracks the page as allocated [ 87.729291][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4376, tgid 4376 (syz-executor), ts 86903325614, free_ts 86903095769 [ 87.747538][ C0] post_alloc_hook+0x173/0x1a0 [ 87.752306][ C0] get_page_from_freelist+0x1a1e/0x1ab0 [ 87.757845][ C0] __alloc_pages+0x1ec/0x4f0 [ 87.762426][ C0] alloc_slab_page+0x5d/0x160 [ 87.767099][ C0] new_slab+0x87/0x2c0 [ 87.771155][ C0] ___slab_alloc+0xbc6/0x1240 [ 87.775837][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 87.781317][ C0] __kmalloc_node+0xa0/0x240 [ 87.785910][ C0] kvmalloc_node+0x6c/0x180 [ 87.790405][ C0] nf_hook_entries_grow+0x309/0x730 [ 87.795680][ C0] __nf_register_net_hook+0x2c9/0x910 [ 87.801046][ C0] nf_register_net_hook+0xae/0x190 [ 87.806141][ C0] nf_register_net_hooks+0x40/0x1a0 [ 87.811325][ C0] nf_nat_register_fn+0x3cb/0x580 [ 87.816341][ C0] iptable_nat_table_init+0xd0/0x2d0 [ 87.821611][ C0] xt_find_table_lock+0x220/0x360 [ 87.826623][ C0] page last free stack trace: [ 87.831280][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 87.836750][ C0] free_unref_page+0x2e/0x3f0 [ 87.841466][ C0] __vunmap+0x856/0xa00 [ 87.845891][ C0] do_ipt_get_ctl+0xead/0x1190 [ 87.850652][ C0] nf_getsockopt+0x25e/0x280 [ 87.855237][ C0] ip_getsockopt+0x19b/0x230 [ 87.859841][ C0] __sys_getsockopt+0x1b0/0x230 [ 87.864707][ C0] __x64_sys_getsockopt+0xb1/0xc0 [ 87.869732][ C0] do_syscall_64+0x4c/0xa0 [ 87.874142][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.880023][ C0] [ 87.882332][ C0] Memory state around the buggy address: [ 87.887947][ C0] ffff88802cc35e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.895994][ C0] ffff88802cc35e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.904039][ C0] >ffff88802cc35f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 87.912082][ C0] ^ [ 87.920218][ C0] ffff88802cc35f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.928266][ C0] ffff88802cc36000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.936321][ C0] ================================================================== [ 87.944377][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.951554][ C0] CPU: 0 PID: 4433 Comm: syz.0.26 Not tainted syzkaller #0 [ 87.958736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.968786][ C0] Call Trace: [ 87.972055][ C0] [ 87.974974][ C0] dump_stack_lvl+0x188/0x24e [ 87.979655][ C0] ? memcpy+0x3c/0x60 [ 87.983713][ C0] ? show_regs_print_info+0x12/0x12 [ 87.988988][ C0] ? load_image+0x400/0x400 [ 87.993659][ C0] panic+0x2e5/0x730 [ 87.997545][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 88.002063][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 88.007964][ C0] ? _raw_spin_unlock+0x40/0x40 [ 88.012803][ C0] ? print_memory_metadata+0x314/0x400 [ 88.018253][ C0] check_panic_on_warn+0x80/0xa0 [ 88.023195][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 88.028323][ C0] end_report+0x66/0x110 [ 88.032571][ C0] kasan_report+0x118/0x140 [ 88.037070][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 88.042177][ C0] kasan_check_range+0x235/0x290 [ 88.047130][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 88.052245][ C0] memcpy+0x3c/0x60 [ 88.056045][ C0] __bpf_get_stackid+0x6c9/0x920 [ 88.060977][ C0] bpf_get_stackid_pe+0x2ec/0x400 [ 88.066000][ C0] bpf_prog_644fb7c94e15512a+0x2b/0x40 [ 88.071450][ C0] bpf_overflow_handler+0x522/0x7c0 [ 88.076641][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 88.081912][ C0] ? perf_swevent_overflow+0x230/0x230 [ 88.087362][ C0] ? sched_clock_cpu+0x6e/0x260 [ 88.092222][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 88.098472][ C0] __perf_event_overflow+0x448/0x610 [ 88.103761][ C0] perf_swevent_hrtimer+0x472/0x630 [ 88.108967][ C0] ? cpu_clock_event_read+0x50/0x50 [ 88.114199][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 88.120098][ C0] ? _raw_spin_unlock+0x40/0x40 [ 88.124962][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 88.130174][ C0] ? cpu_clock_event_read+0x50/0x50 [ 88.135458][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 88.140574][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 88.146636][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 88.151573][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 88.157550][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 88.163180][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 88.169150][ C0] RIP: 0033:0x7f5cc0a65715 [ 88.173574][ C0] Code: e8 60 52 ff ff 48 8b 05 69 00 ee 00 83 05 52 00 ee 00 01 be 08 00 00 00 48 89 ef 48 8d 50 ff 48 89 15 4f 00 ee 00 44 88 78 ff <44> 8b 3d 34 00 ee 00 e8 2f 52 ff ff 48 8b 05 40 00 ee 00 44 89 38 [ 88.193194][ C0] RSP: 002b:00007ffe1e883d00 EFLAGS: 00000202 [ 88.199263][ C0] RAX: 0000001b2e263fbc RBX: 0000000000000000 RCX: 0000000000000000 [ 88.207232][ C0] RDX: 0000001b2e263fbb RSI: 0000000000000008 RDI: 00007f5cc1945720 [ 88.215189][ C0] RBP: 00007f5cc1945720 R08: 0000000000000000 R09: 00007f5cc0e16038 [ 88.223154][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 88.231114][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 88.239076][ C0] [ 88.242370][ C0] Kernel Offset: disabled [ 88.246683][ C0] Rebooting in 86400 seconds..