Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts.
2026/08/16 19:42:54 parsed 1 programs
2026/08/16 19:42:54 serving rpc on tcp://34399
[ 68.625024][ T4286] cgroup: Unknown subsys name 'net'
[ 68.751318][ T4286] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 70.028372][ T4286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 71.299679][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.306156][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.313183][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.325497][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.331182][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.333614][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.343593][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 71.357599][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 71.565962][ T4298] chnl_net:caif_netlink_parms(): no params data found
[ 71.608320][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.615973][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.624752][ T4298] device bridge_slave_0 entered promiscuous mode
[ 71.633611][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.640811][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.649124][ T4298] device bridge_slave_1 entered promiscuous mode
[ 71.671219][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.682294][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.703399][ T4298] team0: Port device team_slave_0 added
[ 71.710304][ T4298] team0: Port device team_slave_1 added
[ 71.726109][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.733156][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.759148][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.773474][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.780850][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.806782][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.835121][ T4298] device hsr_slave_0 entered promiscuous mode
[ 71.843138][ T4298] device hsr_slave_1 entered promiscuous mode
[ 71.932725][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.943044][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.953345][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.964128][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.984636][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.991885][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.999777][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.006942][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.079728][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.107105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 72.119426][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.128848][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.143086][ T4298] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.174211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 72.183391][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.190533][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.209893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.218703][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.225761][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.237479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.245884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.265442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.283312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.295499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.307560][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.465879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.473525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.486439][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.503246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 72.511987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 72.529293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 72.538655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 72.547689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 72.555711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 72.567471][ T4298] device veth0_vlan entered promiscuous mode
[ 72.578379][ T4298] device veth1_vlan entered promiscuous mode
[ 72.595801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 72.604407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 72.612565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 72.621459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 72.632789][ T4298] device veth0_macvtap entered promiscuous mode
[ 72.642513][ T4298] device veth1_macvtap entered promiscuous mode
[ 72.658375][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.666853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 72.674990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 72.688213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 72.696869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 72.708540][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.715837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 72.724645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 72.735502][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.745418][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.754709][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.764435][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.868594][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 74.418242][ T4359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.426145][ T4359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.434428][ T4359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.442464][ T4359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.450139][ T4359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.457956][ T4359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/08/16 19:43:02 executed programs: 0
[ 75.246712][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.254584][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.262251][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.270371][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.287044][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.287741][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 75.304620][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.404227][ T4375] chnl_net:caif_netlink_parms(): no params data found
[ 75.441362][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.448655][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.456389][ T4375] device bridge_slave_0 entered promiscuous mode
[ 75.464537][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.471849][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.480310][ T4375] device bridge_slave_1 entered promiscuous mode
[ 75.499492][ T4375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.510273][ T4375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.531246][ T4375] team0: Port device team_slave_0 added
[ 75.538397][ T4375] team0: Port device team_slave_1 added
[ 75.555387][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.562539][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.588741][ T4375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.600556][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.607669][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.633757][ T4375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.660856][ T4375] device hsr_slave_0 entered promiscuous mode
[ 75.667508][ T4375] device hsr_slave_1 entered promiscuous mode
[ 75.673952][ T4375] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 75.683044][ T4375] Cannot create hsr debugfs directory
[ 77.386875][ T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.465116][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.537600][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.354753][ T11] device hsr_slave_0 left promiscuous mode
[ 78.361650][ T11] device hsr_slave_1 left promiscuous mode
[ 78.370787][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 78.378727][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 78.389908][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 78.398308][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 78.406894][ T11] device bridge_slave_1 left promiscuous mode
[ 78.413646][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.424428][ T11] device bridge_slave_0 left promiscuous mode
[ 78.431396][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.449288][ T11] device veth1_macvtap left promiscuous mode
[ 78.455554][ T11] device veth0_macvtap left promiscuous mode
[ 78.461805][ T11] device veth1_vlan left promiscuous mode
[ 78.468016][ T11] device veth0_vlan left promiscuous mode
[ 78.748550][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 78.776095][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 78.800157][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 78.826105][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 78.981747][ T11] bond0 (unregistering): Released all slaves
[ 79.095667][ T4375] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.104338][ T4375] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.116782][ T4375] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.125865][ T4375] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.183607][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.208810][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 79.217683][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 79.228544][ T4375] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.238539][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 79.248935][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 79.258123][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.265352][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.273374][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 79.295380][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 79.304396][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.313251][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.320420][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.331972][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 79.342978][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 79.359107][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 79.368680][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.379006][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.389780][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.398410][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.416297][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.425107][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.438461][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.447221][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.457059][ T4359] Bluetooth: hci0: command 0x041b tx timeout
[ 79.460508][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.709217][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.717057][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.730912][ T4375] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.753548][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.769285][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 79.801997][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 79.810317][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 79.820479][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 79.828611][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 79.837793][ T4375] device veth0_vlan entered promiscuous mode
[ 79.848653][ T4375] device veth1_vlan entered promiscuous mode
[ 79.864697][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.873307][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.882226][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.891782][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.902106][ T4375] device veth0_macvtap entered promiscuous mode
[ 79.912517][ T4375] device veth1_macvtap entered promiscuous mode
[ 79.926316][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.934087][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.942706][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.951195][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 79.960348][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 79.972181][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.979929][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 79.990801][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 80.002122][ T4375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.010925][ T4375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.020372][ T4375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.029343][ T4375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.078180][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.086015][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.108833][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 80.120582][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.129812][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.138069][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/08/16 19:43:07 executed programs: 3
[ 80.213582][ C0] hrtimer: interrupt took 27511 ns
[ 80.321833][ C0] ==================================================================
[ 80.329947][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920
[ 80.337788][ C0] Write of size 32 at addr ffff888027231e60 by task syz.0.22/4441
[ 80.345609][ C0]
[ 80.347947][ C0] CPU: 0 PID: 4441 Comm: syz.0.22 Not tainted syzkaller #0
[ 80.355118][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 80.365175][ C0] Call Trace:
[ 80.368462][ C0]
[ 80.371380][ C0] dump_stack_lvl+0x188/0x24e
[ 80.376042][ C0] ? __lock_acquire+0x7c40/0x7c40
[ 80.381048][ C0] ? show_regs_print_info+0x12/0x12
[ 80.386242][ C0] ? load_image+0x410/0x410
[ 80.390734][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 80.396187][ C0] ? __virt_addr_valid+0x188/0x540
[ 80.401292][ C0] ? __virt_addr_valid+0x467/0x540
[ 80.406390][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 80.411481][ C0] print_report+0xa8/0x210
[ 80.415880][ C0] kasan_report+0x10b/0x140
[ 80.420379][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 80.425475][ C0] kasan_check_range+0x235/0x290
[ 80.430416][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 80.435506][ C0] memcpy+0x3c/0x60
[ 80.439291][ C0] __bpf_get_stackid+0x6c9/0x920
[ 80.444224][ C0] bpf_get_stackid_pe+0x2ec/0x400
[ 80.449240][ C0] bpf_prog_d499e7ac612d6085+0x24/0x3c
[ 80.454687][ C0] bpf_overflow_handler+0x50b/0x790
[ 80.459865][ C0] ? bpf_overflow_handler+0xd9/0x790
[ 80.465123][ C0] ? perf_swevent_overflow+0x230/0x230
[ 80.470565][ C0] ? sched_clock_cpu+0x6e/0x260
[ 80.475406][ C0] ? __perf_event_account_interrupt+0x187/0x280
[ 80.481651][ C0] __perf_event_overflow+0x457/0x630
[ 80.486922][ C0] perf_swevent_hrtimer+0x472/0x630
[ 80.492099][ C0] ? cpu_clock_event_read+0x50/0x50
[ 80.497277][ C0] ? do_raw_spin_unlock+0x11d/0x230
[ 80.502451][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 80.508319][ C0] ? _raw_spin_unlock+0x40/0x40
[ 80.513149][ C0] __hrtimer_run_queues+0x4e7/0xc90
[ 80.518328][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 80.524317][ C0] ? cpu_clock_event_read+0x50/0x50
[ 80.529501][ C0] ? hrtimer_interrupt+0x980/0x980
[ 80.534587][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 80.540645][ C0] hrtimer_interrupt+0x399/0x980
[ 80.545564][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 80.551522][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0
[ 80.557130][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 80.563102][ C0] RIP: 0033:0x7f4eb2e56670
[ 80.567496][ C0] Code: 8b 4c 24 18 48 8b 00 48 89 01 eb 91 48 8b 54 24 08 48 8d 35 f2 e7 1d 00 48 8d 3d f5 e7 1d 00 31 c0 e8 94 cd ff ff 0f 1f 40 00 <53> 48 8b 1d 28 17 3d 00 45 31 d2 31 c9 48 8b 17 45 31 db 4c 8d 83
[ 80.587085][ C0] RSP: 002b:00007ffea0d6a128 EFLAGS: 00000246
[ 80.593127][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4eb2f9e0d9
[ 80.601074][ C0] RDX: ffffffffffffffff RSI: 0000000000000081 RDI: 00007f4eb3225fb0
[ 80.609024][ C0] RBP: 00007f4eb3225fb0 R08: 001090412cf88a28 R09: 0000000000000000
[ 80.616982][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4eb3225fa0
[ 80.624947][ C0] R13: 0000200000000000 R14: 00007ffea0d6a138 R15: 00007f4eb3225fa0
[ 80.632930][ C0]
[ 80.635928][ C0]
[ 80.638233][ C0] Allocated by task 4441:
[ 80.642534][ C0] kasan_set_track+0x4b/0x70
[ 80.647116][ C0] __kasan_kmalloc+0x8e/0xa0
[ 80.651684][ C0] __kmalloc_node+0xb2/0x240
[ 80.656265][ C0] bpf_map_area_alloc+0x47/0xe0
[ 80.661093][ C0] prealloc_elems_and_freelist+0x86/0x1c0
[ 80.666792][ C0] stack_map_alloc+0x386/0x510
[ 80.671532][ C0] map_create+0x524/0xff0
[ 80.675838][ C0] __sys_bpf+0x38b/0x780
[ 80.680062][ C0] __x64_sys_bpf+0x78/0x90
[ 80.684458][ C0] do_syscall_64+0x4c/0xa0
[ 80.688882][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 80.694753][ C0]
[ 80.697057][ C0] The buggy address belongs to the object at ffff888027231e00
[ 80.697057][ C0] which belongs to the cache kmalloc-cg-128 of size 128
[ 80.711346][ C0] The buggy address is located 96 bytes inside of
[ 80.711346][ C0] 128-byte region [ffff888027231e00, ffff888027231e80)
[ 80.724600][ C0]
[ 80.726919][ C0] The buggy address belongs to the physical page:
[ 80.733313][ C0] page:ffffea00009c8c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27231
[ 80.743444][ C0] memcg:ffff88801e3fde01
[ 80.747655][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 80.755173][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442a00
[ 80.763744][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88801e3fde01
[ 80.772302][ C0] page dumped because: kasan: bad access detected
[ 80.778700][ C0] page_owner tracks the page as allocated
[ 80.784396][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4375, tgid 4375 (syz-executor), ts 80158608932, free_ts 80158452155
[ 80.802604][ C0] post_alloc_hook+0x173/0x1a0
[ 80.807368][ C0] get_page_from_freelist+0x206b/0x2180
[ 80.812890][ C0] __alloc_pages+0x1ec/0x4f0
[ 80.817460][ C0] alloc_slab_page+0x5d/0x180
[ 80.822115][ C0] new_slab+0x87/0x2d0
[ 80.826157][ C0] ___slab_alloc+0xbc5/0x1240
[ 80.830808][ C0] __kmem_cache_alloc_node+0x126/0x270
[ 80.836241][ C0] __kmalloc_node+0xa2/0x240
[ 80.840828][ C0] kvmalloc_node+0x6c/0x180
[ 80.845305][ C0] nf_hook_entries_grow+0x31a/0x760
[ 80.850482][ C0] __nf_register_net_hook+0x2c9/0x910
[ 80.855827][ C0] nf_register_net_hook+0xae/0x190
[ 80.860916][ C0] nf_register_net_hooks+0x40/0x1a0
[ 80.866092][ C0] ipt_register_table+0x516/0x7b0
[ 80.871090][ C0] iptable_mangle_table_init+0x3d/0x60
[ 80.876528][ C0] xt_find_table_lock+0x220/0x360
[ 80.881526][ C0] page last free stack trace:
[ 80.886196][ C0] free_unref_page_prepare+0x8e5/0x9e0
[ 80.891635][ C0] free_unref_page+0x2e/0x3f0
[ 80.896288][ C0] __vunmap+0x874/0xa40
[ 80.900421][ C0] do_ipt_get_ctl+0xe89/0x11a0
[ 80.905156][ C0] nf_getsockopt+0x25e/0x280
[ 80.909724][ C0] ip_getsockopt+0x19b/0x230
[ 80.914290][ C0] __sys_getsockopt+0x1b0/0x230
[ 80.919125][ C0] __x64_sys_getsockopt+0xb1/0xc0
[ 80.924127][ C0] do_syscall_64+0x4c/0xa0
[ 80.928520][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 80.934402][ C0]
[ 80.936703][ C0] Memory state around the buggy address:
[ 80.942308][ C0] ffff888027231d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 80.950343][ C0] ffff888027231d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.958392][ C0] >ffff888027231e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[ 80.966429][ C0] ^
[ 80.974400][ C0] ffff888027231e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.982436][ C0] ffff888027231f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.990473][ C0] ==================================================================
[ 80.998520][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 81.005691][ C0] CPU: 0 PID: 4441 Comm: syz.0.22 Not tainted syzkaller #0
[ 81.012866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 81.022902][ C0] Call Trace:
[ 81.026161][ C0]
[ 81.029070][ C0] dump_stack_lvl+0x188/0x24e
[ 81.033750][ C0] ? memcpy+0x3c/0x60
[ 81.037707][ C0] ? show_regs_print_info+0x12/0x12
[ 81.042886][ C0] ? load_image+0x410/0x410
[ 81.047367][ C0] panic+0x2d3/0x710
[ 81.051270][ C0] ? __lock_acquire+0x7c40/0x7c40
[ 81.056276][ C0] ? bpf_jit_dump+0xd0/0xd0
[ 81.060763][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 81.067075][ C0] ? _raw_spin_unlock+0x40/0x40
[ 81.071921][ C0] check_panic_on_warn+0x80/0xa0
[ 81.076839][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 81.081947][ C0] end_report+0x66/0x110
[ 81.086169][ C0] kasan_report+0x118/0x140
[ 81.090672][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 81.095764][ C0] kasan_check_range+0x235/0x290
[ 81.100684][ C0] ? __bpf_get_stackid+0x6c9/0x920
[ 81.105773][ C0] memcpy+0x3c/0x60
[ 81.109559][ C0] __bpf_get_stackid+0x6c9/0x920
[ 81.114473][ C0] bpf_get_stackid_pe+0x2ec/0x400
[ 81.119474][ C0] bpf_prog_d499e7ac612d6085+0x24/0x3c
[ 81.124911][ C0] bpf_overflow_handler+0x50b/0x790
[ 81.130088][ C0] ? bpf_overflow_handler+0xd9/0x790
[ 81.135350][ C0] ? perf_swevent_overflow+0x230/0x230
[ 81.140783][ C0] ? sched_clock_cpu+0x6e/0x260
[ 81.145609][ C0] ? __perf_event_account_interrupt+0x187/0x280
[ 81.151827][ C0] __perf_event_overflow+0x457/0x630
[ 81.157090][ C0] perf_swevent_hrtimer+0x472/0x630
[ 81.162267][ C0] ? cpu_clock_event_read+0x50/0x50
[ 81.167448][ C0] ? do_raw_spin_unlock+0x11d/0x230
[ 81.172639][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 81.178507][ C0] ? _raw_spin_unlock+0x40/0x40
[ 81.183334][ C0] __hrtimer_run_queues+0x4e7/0xc90
[ 81.188508][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 81.194468][ C0] ? cpu_clock_event_read+0x50/0x50
[ 81.199651][ C0] ? hrtimer_interrupt+0x980/0x980
[ 81.204754][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0
[ 81.210799][ C0] hrtimer_interrupt+0x399/0x980
[ 81.215714][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0
[ 81.221675][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0
[ 81.227301][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 81.233258][ C0] RIP: 0033:0x7f4eb2e56670
[ 81.237652][ C0] Code: 8b 4c 24 18 48 8b 00 48 89 01 eb 91 48 8b 54 24 08 48 8d 35 f2 e7 1d 00 48 8d 3d f5 e7 1d 00 31 c0 e8 94 cd ff ff 0f 1f 40 00 <53> 48 8b 1d 28 17 3d 00 45 31 d2 31 c9 48 8b 17 45 31 db 4c 8d 83
[ 81.257232][ C0] RSP: 002b:00007ffea0d6a128 EFLAGS: 00000246
[ 81.263279][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4eb2f9e0d9
[ 81.271243][ C0] RDX: ffffffffffffffff RSI: 0000000000000081 RDI: 00007f4eb3225fb0
[ 81.279192][ C0] RBP: 00007f4eb3225fb0 R08: 001090412cf88a28 R09: 0000000000000000
[ 81.287141][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4eb3225fa0
[ 81.295093][ C0] R13: 0000200000000000 R14: 00007ffea0d6a138 R15: 00007f4eb3225fa0
[ 81.303052][ C0]
[ 81.306184][ C0] Kernel Offset: disabled
[ 81.310490][ C0] Rebooting in 86400 seconds..