Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts.
2026/05/24 02:49:27 parsed 1 programs
syzkaller login: [ 79.264104][ T5783] cgroup: Unknown subsys name 'net'
[ 79.398837][ T5783] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 81.154914][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 84.745884][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.754576][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.767115][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.775784][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.783904][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 84.791320][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.301784][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.309790][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.340345][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.354259][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.972509][ T23] cfg80211: failed to load regulatory.db
[ 87.373815][ T5870] chnl_net:caif_netlink_parms(): no params data found
[ 87.453555][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.460749][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.469550][ T5870] bridge_slave_0: entered allmulticast mode
[ 87.476671][ T5870] bridge_slave_0: entered promiscuous mode
[ 87.496003][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.503729][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.510935][ T5870] bridge_slave_1: entered allmulticast mode
[ 87.518707][ T5870] bridge_slave_1: entered promiscuous mode
[ 87.545625][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.583336][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.627730][ T5870] team0: Port device team_slave_0 added
[ 87.653838][ T5870] team0: Port device team_slave_1 added
[ 87.677052][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.684208][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.710290][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.724521][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.731634][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.757679][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.811229][ T5870] hsr_slave_0: entered promiscuous mode
[ 87.817995][ T5870] hsr_slave_1: entered promiscuous mode
[ 87.994708][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.009318][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.021701][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.034542][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.088165][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.095768][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.103985][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.111153][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.173239][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.198726][ T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.207458][ T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.223071][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.237554][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.245225][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.259649][ T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.266852][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.493202][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.540921][ T5870] veth0_vlan: entered promiscuous mode
[ 88.553341][ T5870] veth1_vlan: entered promiscuous mode
[ 88.589221][ T5870] veth0_macvtap: entered promiscuous mode
[ 88.598781][ T5870] veth1_macvtap: entered promiscuous mode
[ 88.627375][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.643739][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.656954][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.667299][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.676820][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.686405][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.893687][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/24 02:49:39 executed programs: 0
[ 89.388440][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.397023][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.407598][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.416280][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.424286][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 89.431890][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.576729][ T5891] chnl_net:caif_netlink_parms(): no params data found
[ 89.643780][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.650938][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.658512][ T5891] bridge_slave_0: entered allmulticast mode
[ 89.665534][ T5891] bridge_slave_0: entered promiscuous mode
[ 89.674728][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.682189][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.689367][ T5891] bridge_slave_1: entered allmulticast mode
[ 89.697872][ T5891] bridge_slave_1: entered promiscuous mode
[ 89.723665][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.735655][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.765584][ T5891] team0: Port device team_slave_0 added
[ 89.775633][ T5891] team0: Port device team_slave_1 added
[ 89.804542][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.811647][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.837902][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.852056][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.859125][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.887944][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.939406][ T5891] hsr_slave_0: entered promiscuous mode
[ 89.948531][ T5891] hsr_slave_1: entered promiscuous mode
[ 89.954850][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 89.963185][ T5891] Cannot create hsr debugfs directory
[ 91.493455][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.532020][ T5833] Bluetooth: hci0: command tx timeout
[ 93.602851][ T5833] Bluetooth: hci0: command tx timeout
[ 94.023070][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.098813][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.114465][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.135337][ T49] hsr_slave_0: left promiscuous mode
[ 95.143424][ T49] hsr_slave_1: left promiscuous mode
[ 95.149739][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 95.157678][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 95.166596][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 95.174569][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 95.183898][ T49] bridge_slave_1: left allmulticast mode
[ 95.189590][ T49] bridge_slave_1: left promiscuous mode
[ 95.197008][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.210838][ T49] bridge_slave_0: left allmulticast mode
[ 95.218013][ T49] bridge_slave_0: left promiscuous mode
[ 95.224602][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.253586][ T49] veth1_macvtap: left promiscuous mode
[ 95.259673][ T49] veth0_macvtap: left promiscuous mode
[ 95.268574][ T49] veth1_vlan: left promiscuous mode
[ 95.274346][ T49] veth0_vlan: left promiscuous mode
[ 95.685411][ T5833] Bluetooth: hci0: command tx timeout
[ 95.740611][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 95.781604][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 95.819899][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 95.857388][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 96.098129][ T49] bond0 (unregistering): Released all slaves
[ 96.193609][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.205084][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.214528][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.329229][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.347628][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.366191][ T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.373460][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.405578][ T41] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.412843][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.638736][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.681251][ T5891] veth0_vlan: entered promiscuous mode
[ 96.694263][ T5891] veth1_vlan: entered promiscuous mode
[ 96.729108][ T5891] veth0_macvtap: entered promiscuous mode
[ 96.738105][ T5891] veth1_macvtap: entered promiscuous mode
[ 96.760177][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.776269][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.787394][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.796962][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.806403][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.815682][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.884872][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.897598][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.923747][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/05/24 02:49:46 executed programs: 2
[ 96.933173][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.992968][ C1] hrtimer: interrupt took 65239 ns
[ 97.762394][ T5833] Bluetooth: hci0: command tx timeout
[ 100.666450][ C1] ==================================================================
[ 100.674542][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900
[ 100.682352][ C1] Write of size 32 at addr ffff88802ece9c60 by task syz.0.144/6191
[ 100.690242][ C1]
[ 100.693054][ C1] CPU: 1 PID: 6191 Comm: syz.0.144 Not tainted syzkaller #0
[ 100.700378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 100.710536][ C1] Call Trace:
[ 100.713847][ C1]
[ 100.716786][ C1] dump_stack_lvl+0x18c/0x250
[ 100.721487][ C1] ? __lock_acquire+0x7d40/0x7d40
[ 100.726524][ C1] ? show_regs_print_info+0x20/0x20
[ 100.731907][ C1] ? load_image+0x420/0x420
[ 100.736452][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 100.742007][ C1] ? __virt_addr_valid+0x18c/0x540
[ 100.747143][ C1] ? __virt_addr_valid+0x469/0x540
[ 100.752253][ C1] print_report+0xa8/0x210
[ 100.756672][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 100.761789][ C1] kasan_report+0x117/0x150
[ 100.766329][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 100.771460][ C1] kasan_check_range+0x241/0x290
[ 100.776394][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 100.781587][ C1] __asan_memcpy+0x40/0x70
[ 100.785999][ C1] __bpf_get_stackid+0x6bf/0x900
[ 100.790936][ C1] bpf_get_stackid_pe+0x2f0/0x410
[ 100.795974][ C1] bpf_prog_644fb7c94e15512a+0x33/0x48
[ 100.801431][ C1] bpf_overflow_handler+0x1fc/0x510
[ 100.806631][ C1] ? verify_lock_unused+0x140/0x140
[ 100.811854][ C1] ? bpf_overflow_handler+0xde/0x510
[ 100.817161][ C1] ? tp_perf_event_destroy+0x20/0x20
[ 100.822453][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 100.828739][ C1] __perf_event_overflow+0x447/0x630
[ 100.834043][ C1] perf_swevent_hrtimer+0x439/0x610
[ 100.839254][ C1] ? cpu_clock_event_read+0x40/0x40
[ 100.844480][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 100.850381][ C1] ? _raw_spin_unlock+0x40/0x40
[ 100.855242][ C1] __hrtimer_run_queues+0x4e1/0xc40
[ 100.860441][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0
[ 100.866425][ C1] ? cpu_clock_event_read+0x40/0x40
[ 100.871647][ C1] ? hrtimer_interrupt+0x9c0/0x9c0
[ 100.876755][ C1] ? read_tsc+0x9/0x20
[ 100.880848][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0
[ 100.886932][ C1] hrtimer_interrupt+0x3c9/0x9c0
[ 100.891874][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0
[ 100.897902][ C1] sysvec_apic_timer_interrupt+0x51/0xc0
[ 100.903538][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 100.909628][ C1] RIP: 0033:0x7ffe00acc980
[ 100.914042][ C1] Code: ff 0f 0f 87 64 01 00 00 b8 01 00 00 00 89 f9 d3 e0 a9 83 08 00 00 0f 84 f5 00 00 00 4c 8d 35 07 b7 ff ff 41 89 fc 49 c1 e4 04 <4b> 8d 5c 26 20 45 8b 3e 41 f6 c7 01 75 32 41 8b 46 04 83 f8 01 75
[ 100.933654][ C1] RSP: 002b:00007f404e827ff0 EFLAGS: 00000202
[ 100.939869][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000001
[ 100.947964][ C1] RDX: 00007f404dab9b40 RSI: 00007f404e8280b0 RDI: 0000000000000001
[ 100.955939][ C1] RBP: 00007f404e828030 R08: 0000000000000000 R09: 0000000000000000
[ 100.964016][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[ 100.972010][ C1] R13: 00007f404dc16038 R14: 00007ffe00ac8080 R15: 00007ffe00a24e58
[ 100.980003][ C1]
[ 100.983032][ C1]
[ 100.985361][ C1] Allocated by task 6191:
[ 100.989691][ C1] kasan_set_track+0x4e/0x70
[ 100.994298][ C1] __kasan_kmalloc+0x8f/0xa0
[ 100.998894][ C1] __kmalloc_node+0xb4/0x230
[ 101.003486][ C1] bpf_map_area_alloc+0x5e/0x110
[ 101.008437][ C1] prealloc_elems_and_freelist+0x86/0x1c0
[ 101.014167][ C1] stack_map_alloc+0x33a/0x4c0
[ 101.018932][ C1] map_create+0x877/0x12f0
[ 101.023345][ C1] __sys_bpf+0x651/0x890
[ 101.027580][ C1] __x64_sys_bpf+0x7c/0x90
[ 101.032003][ C1] do_syscall_64+0x55/0xb0
[ 101.036431][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.042347][ C1]
[ 101.044686][ C1] Last potentially related work creation:
[ 101.050415][ C1] kasan_save_stack+0x3e/0x60
[ 101.055100][ C1] __kasan_record_aux_stack+0xaf/0xc0
[ 101.060483][ C1] call_rcu+0x153/0x950
[ 101.064645][ C1] __nf_register_net_hook+0x788/0x910
[ 101.070031][ C1] nf_register_net_hook+0xb2/0x190
[ 101.075226][ C1] nf_register_net_hooks+0x44/0x1b0
[ 101.080488][ C1] ipt_register_table+0x53d/0x7d0
[ 101.085508][ C1] iptable_mangle_table_init+0x41/0x60
[ 101.091064][ C1] xt_find_table_lock+0x306/0x3e0
[ 101.096078][ C1] xt_request_find_table_lock+0x26/0x100
[ 101.101708][ C1] do_ipt_get_ctl+0x717/0x1200
[ 101.106478][ C1] nf_getsockopt+0x262/0x280
[ 101.111069][ C1] ip_getsockopt+0x19f/0x230
[ 101.115746][ C1] do_sock_getsockopt+0x379/0x450
[ 101.120801][ C1] __x64_sys_getsockopt+0x1d6/0x280
[ 101.125993][ C1] do_syscall_64+0x55/0xb0
[ 101.130402][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 101.136298][ C1]
[ 101.138616][ C1] The buggy address belongs to the object at ffff88802ece9c00
[ 101.138616][ C1] which belongs to the cache kmalloc-cg-128 of size 128
[ 101.152949][ C1] The buggy address is located 96 bytes inside of
[ 101.152949][ C1] allocated 120-byte region [ffff88802ece9c00, ffff88802ece9c78)
[ 101.167018][ C1]
[ 101.169347][ C1] The buggy address belongs to the physical page:
[ 101.175755][ C1] page:ffffea0000bb3a40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ece9
[ 101.185904][ C1] memcg:ffff88801cf1f701
[ 101.190146][ C1] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 101.198037][ C1] page_type: 0xffffffff()
[ 101.202371][ C1] raw: 00fff00000000800 ffff888017c4dc80 ffffea0001aebec0 0000000000000003
[ 101.210955][ C1] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88801cf1f701
[ 101.219540][ C1] page dumped because: kasan: bad access detected
[ 101.225946][ C1] page_owner tracks the page as allocated
[ 101.231654][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5865, tgid 5865 (syz-executor), ts 87018708063, free_ts 87017068833
[ 101.249884][ C1] post_alloc_hook+0x1c1/0x200
[ 101.254653][ C1] get_page_from_freelist+0x1951/0x19e0
[ 101.260192][ C1] __alloc_pages+0x1f0/0x460
[ 101.264772][ C1] alloc_slab_page+0x5d/0x160
[ 101.269439][ C1] new_slab+0x87/0x2d0
[ 101.273503][ C1] ___slab_alloc+0xc5d/0x12f0
[ 101.278273][ C1] __kmem_cache_alloc_node+0x19e/0x250
[ 101.283815][ C1] __kmalloc+0xa4/0x230
[ 101.288100][ C1] __register_sysctl_table+0x6e/0x1240
[ 101.293801][ C1] mpls_dev_sysctl_register+0x207/0x2f0
[ 101.299364][ C1] mpls_dev_notify+0x357/0x7a0
[ 101.304149][ C1] notifier_call_chain+0x197/0x380
[ 101.309257][ C1] register_netdevice+0x16a5/0x1bb0
[ 101.314458][ C1] __ip_tunnel_create+0x3bc/0x4d0
[ 101.319564][ C1] ip_tunnel_init_net+0x2df/0x790
[ 101.324588][ C1] ops_init+0x397/0x640
[ 101.328738][ C1] page last free stack trace:
[ 101.333416][ C1] free_unref_page_prepare+0x7b2/0x8c0
[ 101.338980][ C1] free_unref_page+0x32/0x2e0
[ 101.343654][ C1] __unfreeze_partials+0x1cf/0x210
[ 101.348771][ C1] put_cpu_partial+0x17c/0x250
[ 101.353540][ C1] __slab_free+0x319/0x400
[ 101.357951][ C1] qlist_free_all+0x75/0xd0
[ 101.362466][ C1] kasan_quarantine_reduce+0x143/0x160
[ 101.367973][ C1] __kasan_slab_alloc+0x22/0x80
[ 101.372832][ C1] slab_post_alloc_hook+0x6e/0x4b0
[ 101.377973][ C1] __kmem_cache_alloc_node+0x13a/0x250
[ 101.383434][ C1] kmalloc_trace+0x2a/0xe0
[ 101.387866][ C1] kset_create_and_add+0x5a/0x160
[ 101.392903][ C1] netdev_register_kobject+0x1b2/0x320
[ 101.398369][ C1] register_netdevice+0x12ee/0x1bb0
[ 101.403579][ C1] __ip_tunnel_create+0x3bc/0x4d0
[ 101.408686][ C1] ip_tunnel_init_net+0x2df/0x790
[ 101.413803][ C1]
[ 101.416139][ C1] Memory state around the buggy address:
[ 101.421770][ C1] ffff88802ece9b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.429839][ C1] ffff88802ece9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.437933][ C1] >ffff88802ece9c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 101.446000][ C1] ^
[ 101.453978][ C1] ffff88802ece9c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 101.462057][ C1] ffff88802ece9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 101.470243][ C1] ==================================================================
[ 101.478331][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.485535][ C1] CPU: 1 PID: 6191 Comm: syz.0.144 Not tainted syzkaller #0
[ 101.492908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 101.502992][ C1] Call Trace:
[ 101.506286][ C1]
[ 101.509231][ C1] dump_stack_lvl+0x18c/0x250
[ 101.513928][ C1] ? show_regs_print_info+0x20/0x20
[ 101.519151][ C1] ? load_image+0x420/0x420
[ 101.523691][ C1] panic+0x2dc/0x730
[ 101.527627][ C1] ? __lock_acquire+0x7d40/0x7d40
[ 101.532666][ C1] ? bpf_jit_dump+0xd0/0xd0
[ 101.537182][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 101.543081][ C1] ? _raw_spin_unlock+0x40/0x40
[ 101.547936][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 101.553052][ C1] check_panic_on_warn+0x84/0xa0
[ 101.557998][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 101.563117][ C1] end_report+0x6f/0x130
[ 101.567388][ C1] kasan_report+0x128/0x150
[ 101.571917][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 101.577051][ C1] kasan_check_range+0x241/0x290
[ 101.582004][ C1] ? __bpf_get_stackid+0x6bf/0x900
[ 101.587124][ C1] __asan_memcpy+0x40/0x70
[ 101.591551][ C1] __bpf_get_stackid+0x6bf/0x900
[ 101.596584][ C1] bpf_get_stackid_pe+0x2f0/0x410
[ 101.601638][ C1] bpf_prog_644fb7c94e15512a+0x33/0x48
[ 101.607155][ C1] bpf_overflow_handler+0x1fc/0x510
[ 101.612375][ C1] ? verify_lock_unused+0x140/0x140
[ 101.617583][ C1] ? bpf_overflow_handler+0xde/0x510
[ 101.622881][ C1] ? tp_perf_event_destroy+0x20/0x20
[ 101.628180][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 101.634691][ C1] __perf_event_overflow+0x447/0x630
[ 101.639997][ C1] perf_swevent_hrtimer+0x439/0x610
[ 101.645289][ C1] ? cpu_clock_event_read+0x40/0x40
[ 101.650502][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 101.656405][ C1] ? _raw_spin_unlock+0x40/0x40
[ 101.661265][ C1] __hrtimer_run_queues+0x4e1/0xc40
[ 101.666473][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0
[ 101.672459][ C1] ? cpu_clock_event_read+0x40/0x40
[ 101.677683][ C1] ? hrtimer_interrupt+0x9c0/0x9c0
[ 101.682808][ C1] ? read_tsc+0x9/0x20
[ 101.686897][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0
[ 101.693058][ C1] hrtimer_interrupt+0x3c9/0x9c0
[ 101.698006][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0
[ 101.703914][ C1] sysvec_apic_timer_interrupt+0x51/0xc0
[ 101.709551][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 101.715544][ C1] RIP: 0033:0x7ffe00acc980
[ 101.719967][ C1] Code: ff 0f 0f 87 64 01 00 00 b8 01 00 00 00 89 f9 d3 e0 a9 83 08 00 00 0f 84 f5 00 00 00 4c 8d 35 07 b7 ff ff 41 89 fc 49 c1 e4 04 <4b> 8d 5c 26 20 45 8b 3e 41 f6 c7 01 75 32 41 8b 46 04 83 f8 01 75
[ 101.739603][ C1] RSP: 002b:00007f404e827ff0 EFLAGS: 00000202
[ 101.745793][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000001
[ 101.753784][ C1] RDX: 00007f404dab9b40 RSI: 00007f404e8280b0 RDI: 0000000000000001
[ 101.762219][ C1] RBP: 00007f404e828030 R08: 0000000000000000 R09: 0000000000000000
[ 101.770301][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[ 101.778364][ C1] R13: 00007f404dc16038 R14: 00007ffe00ac8080 R15: 00007ffe00a24e58
[ 101.786349][ C1]
[ 101.789488][ C1] Kernel Offset: disabled
[ 101.793801][ C1] Rebooting in 86400 seconds..