BUG: stack guard page was hit in corrupted

Status: closed as invalid on 2026/10/06 02:14
Labels: prio:normal
[Documentation on labels]
First crash: 43d, last: 43d
▶ ▼ ✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
6da66bd9 assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ BUG: stack guard page was hit in corrupted 2026/08/30 07:40 2026/08/30 07:40 2026/08/30 08:22 2f52988a
▶ ▼ Similar bugs (24)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 BUG: stack guard page was hit in corrupted (14) -1 syz, C error 2 1664d 1664d 0/2 closed as dup on 2022/03/24 14:58
android-5-10 BUG: stack guard page was hit in corrupted (16) -1 syz, C error 2 1657d 1660d 0/2 closed as dup on 2022/03/30 17:23
android-5-10 BUG: stack guard page was hit in corrupted (9) -1 syz, C error 1 1672d 1672d 0/2 closed as dup on 2022/03/16 16:28
android-5-10 BUG: stack guard page was hit in corrupted (13) -1 syz, C error 1 1665d 1665d 0/2 closed as dup on 2022/03/22 16:23
android-5-10 BUG: stack guard page was hit in corrupted (17) -1 syz, C error 3 1654d 1654d 0/2 closed as dup on 2022/04/04 16:48
android-6-1 BUG: stack guard page was hit in corrupted origin:lts -1 syz, C 2 500d 796d 0/2 auto-obsoleted due to no activity on 2025/09/07 08:00
android-5-10 BUG: stack guard page was hit in corrupted (5) -1 syz, C error 3 1676d 1676d 0/2 closed as dup on 2022/03/11 15:58
android-5-10 BUG: stack guard page was hit in corrupted (19) -1 syz, C 1 1648d 1648d 0/2 closed as dup on 2022/04/08 17:06
android-5-10 BUG: stack guard page was hit in corrupted (6) -1 syz, C error 1 1675d 1675d 0/2 closed as dup on 2022/03/11 22:51
android-5-10 BUG: stack guard page was hit in corrupted (20) -1 syz, C error 1 1645d 1645d 0/2 closed as dup on 2022/04/11 14:20
android-5-10 BUG: stack guard page was hit in corrupted (21) -1 syz, C error 3 1631d 1632d 0/2 closed as dup on 2022/05/04 16:12
android-5-10 BUG: stack guard page was hit in corrupted (8) -1 syz, C 1 1673d 1673d 0/2 closed as dup on 2022/03/14 15:44
android-5-10 BUG: stack guard page was hit in corrupted (4) -1 syz, C error 1 1678d 1678d 0/2 closed as dup on 2022/03/09 18:22
android-5-10 BUG: stack guard page was hit in corrupted (7) -1 syz, C error 1 1675d 1675d 0/2 closed as dup on 2022/03/13 15:49
android-5-10 BUG: stack guard page was hit in corrupted (18) -1 syz, C error 1 1650d 1650d 0/2 closed as dup on 2022/04/05 20:24
android-5-10 BUG: stack guard page was hit in corrupted -1 syz, C error 3 1707d 1742d 0/2 closed as invalid on 2022/02/28 16:10
android-5-10 BUG: stack guard page was hit in corrupted (10) -1 syz, C error 1 1670d 1670d 0/2 closed as dup on 2022/03/17 16:45
android-5-10 BUG: stack guard page was hit in corrupted (15) -1 syz, C error 1 1662d 1662d 0/2 closed as dup on 2022/03/25 16:30
android-5-10 BUG: stack guard page was hit in corrupted (12) -1 syz, C done 2 1666d 1668d 0/2 closed as dup on 2022/03/21 14:57
android-5-10 BUG: stack guard page was hit in corrupted (2) -1 syz, C error 2 1684d 1685d 0/2 closed as dup on 2022/03/02 15:48
android-5-10 BUG: stack guard page was hit in corrupted (3) -1 syz, C error 1 1678d 1678d 0/2 closed as dup on 2022/03/09 15:36
android-5-10 BUG: stack guard page was hit in corrupted (11) -1 syz, C error 2 1669d 1669d 0/2 closed as dup on 2022/03/18 21:48
android-5-10 BUG: stack guard page was hit in corrupted (22) -1 syz done done 1 1617d 1617d 0/2 auto-closed as invalid on 2022/08/31 02:51
android-5-10 BUG: stack guard page was hit in corrupted (23) -1 syz error error 1 1217d 1217d 0/2 auto-obsoleted due to no activity on 2023/09/30 03:13
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2026/09/13 08:16 12m retest repro upstream report job log log

Sample crash report:
BUG: TASK stack guard page was hit at ffffc9000369ffa8 (stack is ffffc900036a0000..ffffc900036a8000)
Oops: stack guard page: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 6039 Comm: syz-executor254 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:arch_stack_walk+0x3e/0xf0 arch/x86/kernel/stacktrace.c:18
Code: 00 00 00 41 55 49 89 f5 41 54 49 89 fc 53 48 8d 9d 70 ff ff ff 48 89 df 48 83 ec 68 65 48 8b 05 90 29 db 12 48 89 45 d0 31 c0 <f3> 48 ab 4d 85 f6 0f 84 85 00 00 00 49 8b b6 80 00 00 00 4c 89 ef
RSP: 0018:ffffc9000369ffb8 EFLAGS: 00010046
RAX: 0000000000000000 RBX: ffffc9000369ffb8 RCX: 000000000000000c
RDX: ffff88802ad4cb00 RSI: ffffc900036a0078 RDI: ffffc9000369ffb8
RBP: ffffc900036a0048 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000028 R11: 0000000000000001 R12: ffffffff81f5ba50
R13: ffffc900036a0078 R14: 0000000000000000 R15: ffff88802ad4cb00
FS:  0000555586a6e400(0000) GS:ffff8880d5b64000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffc9000369ffa8 CR3: 0000000058fcc000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 stack_trace_save+0x8e/0xc0 kernel/stacktrace.c:122
 save_trace+0x4e/0x420 kernel/locking/lockdep.c:587
 mark_lock+0x1ce/0x1020 kernel/locking/lockdep.c:4764
 mark_usage kernel/locking/lockdep.c:4690 [inline]
 __lock_acquire+0x4c5/0x1ec0 kernel/locking/lockdep.c:5208
 lock_acquire kernel/locking/lockdep.c:5908 [inline]
 lock_acquire+0x1d1/0x380 kernel/locking/lockdep.c:5865
 __raw_spin_trylock include/linux/spinlock_api_smp.h:104 [inline]
 _raw_spin_trylock+0x63/0x80 kernel/locking/spinlock.c:157
 _raw_spin_trylock_irqsave include/linux/spinlock_api_smp.h:135 [inline]
 ___ratelimit+0x642/0xae0 lib/ratelimit.c:60
 __dev_queue_xmit+0x23d9/0x4970 net/core/dev.c:4947
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
 dst_output include/net/dst.h:470 [inline]
 NF_HOOK include/linux/netfilter.h:325 [inline]
 NF_HOOK include/linux/netfilter.h:319 [inline]
 ip_vs_nat_send_or_cont net/netfilter/ipvs/ip_vs_xmit.c:688 [inline]
 ip_vs_nat_send_or_cont+0xf04/0x10d0 net/netfilter/ipvs/ip_vs_xmit.c:666
 ip_vs_nat_xmit+0x585/0xd00 net/netfilter/ipvs/ip_vs_xmit.c:860
 ip_vs_in_hook+0xc86/0x2840 net/netfilter/ipvs/ip_vs_core.c:2254
 nf_hook_entry_hookfn include/linux/netfilter.h:165 [inline]
 nf_hook_slow+0xbf/0x220 net/netfilter/core.c:619
 nf_hook include/linux/netfilter.h:280 [inline]
 __ip_local_out+0x541/0xb80 net/ipv4/ip_output.c:120
 ip_local_out+0x2a/0x1f0 net/ipv4/ip_output.c:129
 ipvlan_process_v4_outbound+0x4c1/0x700 drivers/net/ipvlan/ipvlan_core.c:461
 ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:565 [inline]
 ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:627 [inline]
 ipvlan_queue_xmit+0xd3a/0x1290 drivers/net/ipvlan/ipvlan_core.c:693
 ipvlan_start_xmit+0x49/0x120 drivers/net/ipvlan/ipvlan_main.c:280
 __netdev_start_xmit include/linux/netdevice.h:5429 [inline]
 netdev_start_xmit include/linux/netdevice.h:5438 [inline]
 xmit_one net/core/dev.c:3937 [inline]
 dev_hard_start_xmit+0x121/0x760 net/core/dev.c:3953
 __dev_queue_xmit+0x1bbf/0x4970 net/core/dev.c:4926
 dev_queue_xmit include/linux/netdevice.h:3461 [inline]
 neigh_hh_output include/net/neighbour.h:544 [inline]
 neigh_output include/net/neighbour.h:558 [inline]
 ip_finish_output2+0xf4a/0x2400 net/ipv4/ip_output.c:236
 __ip_finish_output.part.0+0x444/0x6f0 net/ipv4/ip_output.c:314
 __ip_finish_output net/ipv4/ip_output.c:302 [inline]
 ip_finish_output net/ipv4/ip_output.c:324 [inline]
 NF_HOOK_COND include/linux/netfilter.h:314 [inline]
 ip_output+0x39b/0xc10 net/ipv4/ip_output.c:437
----------------
Code disassembly (best guess):
   0:	00 00                	add    %al,(%rax)
   2:	00 41 55             	add    %al,0x55(%rcx)
   5:	49 89 f5             	mov    %rsi,%r13
   8:	41 54                	push   %r12
   a:	49 89 fc             	mov    %rdi,%r12
   d:	53                   	push   %rbx
   e:	48 8d 9d 70 ff ff ff 	lea    -0x90(%rbp),%rbx
  15:	48 89 df             	mov    %rbx,%rdi
  18:	48 83 ec 68          	sub    $0x68,%rsp
  1c:	65 48 8b 05 90 29 db 	mov    %gs:0x12db2990(%rip),%rax        # 0x12db29b4
  23:	12
  24:	48 89 45 d0          	mov    %rax,-0x30(%rbp)
  28:	31 c0                	xor    %eax,%eax
* 2a:	f3 48 ab             	rep stos %rax,%es:(%rdi) <-- trapping instruction
  2d:	4d 85 f6             	test   %r14,%r14
  30:	0f 84 85 00 00 00    	je     0xbb
  36:	49 8b b6 80 00 00 00 	mov    0x80(%r14),%rsi
  3d:	4c 89 ef             	mov    %r13,%rdi

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/30 07:40 git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 08dbfad3f504 bcbc8ceb .config console log report C ci-qemu-upstream BUG: stack guard page was hit in corrupted
* Struck through repros no longer work on HEAD.