Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. 2025/12/27 11:44:11 parsed 1 programs [ 62.979168][ T4270] cgroup: Unknown subsys name 'net' [ 63.109151][ T4270] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.422355][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.467505][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.478502][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.486207][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.495021][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.502632][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.510113][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.125339][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.133330][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.155799][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.175016][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.183076][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.192104][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.296653][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 68.346573][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.354952][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.363232][ T4347] device bridge_slave_0 entered promiscuous mode [ 68.373071][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.380242][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.388364][ T4347] device bridge_slave_1 entered promiscuous mode [ 68.416253][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.427217][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.450513][ T4347] team0: Port device team_slave_0 added [ 68.466284][ T4347] team0: Port device team_slave_1 added [ 68.482961][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.490124][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.516335][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.535558][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.542554][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.568776][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.598715][ T4347] device hsr_slave_0 entered promiscuous mode [ 68.606070][ T4347] device hsr_slave_1 entered promiscuous mode [ 68.762688][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.780131][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.798263][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.810603][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.840686][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.848013][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.856012][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.863100][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.927917][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.945622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.956324][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.965713][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.982793][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.998681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.007395][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.014570][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.027105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.036952][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.044141][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.091572][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.120044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.129442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.148134][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.160547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.169775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.180447][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.325458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.332946][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.345369][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.370202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.383987][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.408875][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.417701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.426514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.434399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.444640][ T4347] device veth0_vlan entered promiscuous mode [ 69.464022][ T4347] device veth1_vlan entered promiscuous mode [ 69.482403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.490823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.499414][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.508028][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.527510][ T4347] device veth0_macvtap entered promiscuous mode [ 69.537379][ T4347] device veth1_macvtap entered promiscuous mode [ 69.551977][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.559957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.568873][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.577113][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.585928][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.597698][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.618592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.627408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.640108][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.649191][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.658257][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.667652][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.100460][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/27 11:44:19 executed programs: 0 [ 70.204485][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.212644][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.220953][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.230165][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.238785][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.246340][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.350922][ T4369] chnl_net:caif_netlink_parms(): no params data found [ 70.390705][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.398087][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.405916][ T4369] device bridge_slave_0 entered promiscuous mode [ 70.415436][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.422598][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.430391][ T4369] device bridge_slave_1 entered promiscuous mode [ 70.454204][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.465851][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.489253][ T4369] team0: Port device team_slave_0 added [ 70.499994][ T4369] team0: Port device team_slave_1 added [ 70.518152][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.525644][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.552254][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.564583][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.571547][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.598256][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.628401][ T4369] device hsr_slave_0 entered promiscuous mode [ 70.635152][ T4369] device hsr_slave_1 entered promiscuous mode [ 70.641709][ T4369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.649978][ T4369] Cannot create hsr debugfs directory [ 71.296368][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.302899][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.113828][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.334747][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 74.412492][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.414126][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 74.484140][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.341173][ T11] device hsr_slave_0 left promiscuous mode [ 75.348787][ T11] device hsr_slave_1 left promiscuous mode [ 75.356449][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.364003][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.372074][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.380231][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.387956][ T11] device bridge_slave_1 left promiscuous mode [ 75.395085][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.405815][ T11] device bridge_slave_0 left promiscuous mode [ 75.412027][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.430080][ T11] device veth1_macvtap left promiscuous mode [ 75.436835][ T11] device veth0_macvtap left promiscuous mode [ 75.442900][ T11] device veth1_vlan left promiscuous mode [ 75.449211][ T11] device veth0_vlan left promiscuous mode [ 75.721336][ T11] team0 (unregistering): Port device team_slave_1 removed [ 75.748562][ T11] team0 (unregistering): Port device team_slave_0 removed [ 75.775814][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.804713][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.053233][ T11] bond0 (unregistering): Released all slaves [ 76.127380][ T4369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.136695][ T4369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.147027][ T4369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.159393][ T4369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.220466][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.242927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.251017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.261155][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.270626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.279632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.288441][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.295615][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.315108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.328930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.337699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.347326][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.354482][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.365412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.374447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.383001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.392026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.400614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.409695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.419338][ T32] cfg80211: failed to load regulatory.db [ 76.426157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.447174][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.461526][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.484607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.498100][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 76.512839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.534689][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.784309][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.791798][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.807641][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.829069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.839183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.863161][ T4369] device veth0_vlan entered promiscuous mode [ 76.874333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.882774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.899301][ T4369] device veth1_vlan entered promiscuous mode [ 76.909912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.918408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.926287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.946585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.954824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.963270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.977461][ T4369] device veth0_macvtap entered promiscuous mode [ 76.987115][ T4369] device veth1_macvtap entered promiscuous mode [ 77.000927][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.008329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.016974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.026336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.035689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.046915][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.057816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.067007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.077232][ T4369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.087083][ T4369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.096187][ T4369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.105108][ T4369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153885][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.161916][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.183958][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.193372][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/12/27 11:44:26 executed programs: 2 [ 77.201651][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.210667][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.400056][ T4418] loop0: detected capacity change from 0 to 32768 [ 77.454140][ T4418] UFO tlock:0xffffc9000288a1b0 [ 77.462427][ T4418] ================================================================== [ 77.470614][ T4418] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0x8a5/0x1270 [ 77.478193][ T4418] Read of size 1 at addr ffff888029767e00 by task syz.0.17/4418 [ 77.485850][ T4418] [ 77.488222][ T4418] CPU: 0 PID: 4418 Comm: syz.0.17 Not tainted syzkaller #0 [ 77.495430][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.505510][ T4418] Call Trace: [ 77.508809][ T4418] [ 77.511754][ T4418] dump_stack_lvl+0x168/0x22e [ 77.516451][ T4418] ? __lock_acquire+0x7c50/0x7c50 [ 77.521475][ T4418] ? show_regs_print_info+0x12/0x12 [ 77.526685][ T4418] ? load_image+0x3b0/0x3b0 [ 77.531180][ T4418] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 77.536540][ T4418] ? __virt_addr_valid+0x188/0x540 [ 77.541643][ T4418] ? __virt_addr_valid+0x465/0x540 [ 77.546749][ T4418] ? dtInsertEntry+0x8a5/0x1270 [ 77.551589][ T4418] print_report+0xa8/0x210 [ 77.555997][ T4418] kasan_report+0x10b/0x140 [ 77.560493][ T4418] ? dtInsertEntry+0x8a5/0x1270 [ 77.565336][ T4418] dtInsertEntry+0x8a5/0x1270 [ 77.570006][ T4418] dtInsert+0x92e/0x58a0 [ 77.574341][ T4418] ? show_schedstat+0xef5/0x1190 [ 77.579298][ T4418] ? kasan_quarantine_put+0xd4/0x220 [ 77.584679][ T4418] ? slab_free_freelist_hook+0x131/0x1a0 [ 77.590303][ T4418] ? dtSearch+0x1c67/0x2050 [ 77.594796][ T4418] ? __kmem_cache_free+0xb6/0x1f0 [ 77.599880][ T4418] ? UniStrupr+0x2e0/0x2e0 [ 77.604295][ T4418] ? dtSearch+0x1c67/0x2050 [ 77.608789][ T4418] jfs_link+0x309/0x590 [ 77.612945][ T4418] ? jfs_create+0xa50/0xa50 [ 77.617445][ T4418] ? rwsem_write_trylock+0x12f/0x1b0 [ 77.622744][ T4418] ? clear_nonspinnable+0x60/0x60 [ 77.627758][ T4418] ? generic_permission+0x230/0x510 [ 77.632954][ T4418] ? try_break_deleg+0x79/0x120 [ 77.637792][ T4418] vfs_link+0x615/0x7c0 [ 77.641940][ T4418] ? bpf_lsm_path_link+0x5/0x10 [ 77.646783][ T4418] do_linkat+0x274/0x550 [ 77.651038][ T4418] ? __phys_addr_symbol+0x2b/0x70 [ 77.656094][ T4418] ? fsnotify_link+0x240/0x240 [ 77.660854][ T4418] ? getname_flags+0x206/0x500 [ 77.665615][ T4418] __x64_sys_link+0x82/0x90 [ 77.670111][ T4418] do_syscall_64+0x4c/0xa0 [ 77.674519][ T4418] ? clear_bhb_loop+0x60/0xb0 [ 77.679187][ T4418] ? clear_bhb_loop+0x60/0xb0 [ 77.683893][ T4418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.689783][ T4418] RIP: 0033:0x7f276c58f749 [ 77.694207][ T4418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.713805][ T4418] RSP: 002b:00007ffeb5a18558 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 77.722213][ T4418] RAX: ffffffffffffffda RBX: 00007f276c7e5fa0 RCX: 00007f276c58f749 [ 77.730173][ T4418] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000940 [ 77.738136][ T4418] RBP: 00007f276c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 77.746121][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.754086][ T4418] R13: 00007f276c7e5fa0 R14: 00007f276c7e5fa0 R15: 0000000000000002 [ 77.762053][ T4418] [ 77.765093][ T4418] [ 77.767399][ T4418] Allocated by task 4369: [ 77.771709][ T4418] kasan_set_track+0x4b/0x70 [ 77.776291][ T4418] __kasan_slab_alloc+0x6b/0x80 [ 77.781225][ T4418] slab_post_alloc_hook+0x4b/0x480 [ 77.786336][ T4418] kmem_cache_alloc+0x123/0x2f0 [ 77.791171][ T4418] fib_table_insert+0x4a4/0x1b50 [ 77.796100][ T4418] fib_magic+0x2c1/0x390 [ 77.800332][ T4418] fib_add_ifaddr+0x140/0x5e0 [ 77.804998][ T4418] fib_inetaddr_event+0x13c/0x1c0 [ 77.810118][ T4418] blocking_notifier_call_chain+0x103/0x1b0 [ 77.816000][ T4418] __inet_insert_ifa+0x9aa/0xb60 [ 77.820941][ T4418] inet_rtm_newaddr+0x930/0x1890 [ 77.825898][ T4418] rtnetlink_rcv_msg+0x79b/0xed0 [ 77.830823][ T4418] netlink_rcv_skb+0x1de/0x420 [ 77.835582][ T4418] netlink_unicast+0x74d/0x8d0 [ 77.840385][ T4418] netlink_sendmsg+0x89e/0xbc0 [ 77.845141][ T4418] __sys_sendto+0x44f/0x5c0 [ 77.849636][ T4418] __x64_sys_sendto+0xda/0xf0 [ 77.854317][ T4418] do_syscall_64+0x4c/0xa0 [ 77.858751][ T4418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.864647][ T4418] [ 77.866958][ T4418] The buggy address belongs to the object at ffff888029767dc0 [ 77.866958][ T4418] which belongs to the cache ip_fib_alias of size 56 [ 77.881001][ T4418] The buggy address is located 8 bytes to the right of [ 77.881001][ T4418] 56-byte region [ffff888029767dc0, ffff888029767df8) [ 77.894535][ T4418] [ 77.896851][ T4418] The buggy address belongs to the physical page: [ 77.903253][ T4418] page:ffffea0000a5d9c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29767 [ 77.913423][ T4418] memcg:ffff8880745bcc01 [ 77.917649][ T4418] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 77.925197][ T4418] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8881422a6500 [ 77.933766][ T4418] raw: 0000000000000000 00000000002e002e 00000001ffffffff ffff8880745bcc01 [ 77.942332][ T4418] page dumped because: kasan: bad access detected [ 77.948744][ T4418] page_owner tracks the page as allocated [ 77.954445][ T4418] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4347, tgid 4347 (syz-executor), ts 69344912967, free_ts 69324823920 [ 77.972670][ T4418] post_alloc_hook+0x173/0x1a0 [ 77.977432][ T4418] get_page_from_freelist+0x1a26/0x1ac0 [ 77.982974][ T4418] __alloc_pages+0x1df/0x4e0 [ 77.987560][ T4418] alloc_slab_page+0x5d/0x160 [ 77.992224][ T4418] new_slab+0x87/0x2c0 [ 77.996282][ T4418] ___slab_alloc+0xbc6/0x1230 [ 78.000946][ T4418] kmem_cache_alloc+0x1b7/0x2f0 [ 78.005782][ T4418] fib_table_insert+0x4a4/0x1b50 [ 78.010716][ T4418] fib_magic+0x2c1/0x390 [ 78.014988][ T4418] fib_add_ifaddr+0x3f7/0x5e0 [ 78.019677][ T4418] fib_netdev_event+0x361/0x470 [ 78.024529][ T4418] raw_notifier_call_chain+0xcb/0x160 [ 78.029892][ T4418] __dev_notify_flags+0x178/0x2d0 [ 78.034913][ T4418] dev_change_flags+0xe3/0x1a0 [ 78.039667][ T4418] do_setlink+0xc31/0x3c40 [ 78.044077][ T4418] rtnl_newlink+0x17d6/0x1ff0 [ 78.048841][ T4418] page last free stack trace: [ 78.053509][ T4418] free_unref_page_prepare+0x8b4/0x9a0 [ 78.059220][ T4418] free_unref_page+0x2e/0x3f0 [ 78.063888][ T4418] __unfreeze_partials+0x1a5/0x200 [ 78.068988][ T4418] put_cpu_partial+0x17c/0x250 [ 78.073736][ T4418] qlist_free_all+0x76/0xe0 [ 78.078223][ T4418] kasan_quarantine_reduce+0x144/0x160 [ 78.083665][ T4418] __kasan_slab_alloc+0x1e/0x80 [ 78.088520][ T4418] slab_post_alloc_hook+0x4b/0x480 [ 78.093616][ T4418] __kmem_cache_alloc_node+0x140/0x260 [ 78.099063][ T4418] kmalloc_trace+0x26/0xe0 [ 78.103475][ T4418] ____ip_mc_inc_group+0x2ad/0xac0 [ 78.108587][ T4418] ip_mc_up+0x121/0x2f0 [ 78.112734][ T4418] inetdev_event+0xe68/0x1410 [ 78.117395][ T4418] raw_notifier_call_chain+0xcb/0x160 [ 78.122753][ T4418] __dev_notify_flags+0x178/0x2d0 [ 78.127770][ T4418] dev_change_flags+0xe3/0x1a0 [ 78.132611][ T4418] [ 78.134922][ T4418] Memory state around the buggy address: [ 78.140534][ T4418] ffff888029767d00: fc fc 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 [ 78.148583][ T4418] ffff888029767d80: 00 00 00 00 fc fc fc fc 00 00 00 00 00 00 00 fc [ 78.156628][ T4418] >ffff888029767e00: fc fc fc 00 00 00 00 00 00 00 fc fc fc fc 00 00 [ 78.164682][ T4418] ^ [ 78.168731][ T4418] ffff888029767e80: 00 00 00 00 00 fc fc fc fc 00 00 00 00 00 00 00 [ 78.176779][ T4418] ffff888029767f00: fc fc fc fc 00 00 00 00 00 00 00 fc fc fc fc 00 [ 78.184821][ T4418] ================================================================== [ 78.210417][ T4418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.217654][ T4418] CPU: 1 PID: 4418 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.224864][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.234955][ T4418] Call Trace: [ 78.238244][ T4418] [ 78.241185][ T4418] dump_stack_lvl+0x168/0x22e [ 78.245894][ T4418] ? memcpy+0x3c/0x60 [ 78.249892][ T4418] ? show_regs_print_info+0x12/0x12 [ 78.255106][ T4418] ? load_image+0x3b0/0x3b0 [ 78.259622][ T4418] panic+0x2c9/0x710 [ 78.263515][ T4418] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.269679][ T4418] ? bpf_jit_dump+0xd0/0xd0 [ 78.274198][ T4418] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 78.280106][ T4418] ? _raw_spin_unlock+0x40/0x40 [ 78.284974][ T4418] check_panic_on_warn+0x80/0xa0 [ 78.289931][ T4418] ? dtInsertEntry+0x8a5/0x1270 [ 78.294794][ T4418] end_report+0x66/0x110 [ 78.299062][ T4418] kasan_report+0x118/0x140 [ 78.303600][ T4418] ? dtInsertEntry+0x8a5/0x1270 [ 78.308557][ T4418] dtInsertEntry+0x8a5/0x1270 [ 78.313254][ T4418] dtInsert+0x92e/0x58a0 [ 78.317510][ T4418] ? show_schedstat+0xef5/0x1190 [ 78.322472][ T4418] ? kasan_quarantine_put+0xd4/0x220 [ 78.327782][ T4418] ? slab_free_freelist_hook+0x131/0x1a0 [ 78.333439][ T4418] ? dtSearch+0x1c67/0x2050 [ 78.337973][ T4418] ? __kmem_cache_free+0xb6/0x1f0 [ 78.343014][ T4418] ? UniStrupr+0x2e0/0x2e0 [ 78.347447][ T4418] ? dtSearch+0x1c67/0x2050 [ 78.351977][ T4418] jfs_link+0x309/0x590 [ 78.356155][ T4418] ? jfs_create+0xa50/0xa50 [ 78.360672][ T4418] ? rwsem_write_trylock+0x12f/0x1b0 [ 78.365965][ T4418] ? clear_nonspinnable+0x60/0x60 [ 78.370981][ T4418] ? generic_permission+0x230/0x510 [ 78.376183][ T4418] ? try_break_deleg+0x79/0x120 [ 78.381023][ T4418] vfs_link+0x615/0x7c0 [ 78.385262][ T4418] ? bpf_lsm_path_link+0x5/0x10 [ 78.390190][ T4418] do_linkat+0x274/0x550 [ 78.394423][ T4418] ? __phys_addr_symbol+0x2b/0x70 [ 78.399450][ T4418] ? fsnotify_link+0x240/0x240 [ 78.404210][ T4418] ? getname_flags+0x206/0x500 [ 78.408970][ T4418] __x64_sys_link+0x82/0x90 [ 78.413645][ T4418] do_syscall_64+0x4c/0xa0 [ 78.418066][ T4418] ? clear_bhb_loop+0x60/0xb0 [ 78.422754][ T4418] ? clear_bhb_loop+0x60/0xb0 [ 78.427429][ T4418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.433312][ T4418] RIP: 0033:0x7f276c58f749 [ 78.437724][ T4418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.457853][ T4418] RSP: 002b:00007ffeb5a18558 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 78.466259][ T4418] RAX: ffffffffffffffda RBX: 00007f276c7e5fa0 RCX: 00007f276c58f749 [ 78.474269][ T4418] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000940 [ 78.482233][ T4418] RBP: 00007f276c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 78.490229][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.498279][ T4418] R13: 00007f276c7e5fa0 R14: 00007f276c7e5fa0 R15: 0000000000000002 [ 78.506247][ T4418] [ 78.509793][ T4418] Kernel Offset: disabled [ 78.514114][ T4418] Rebooting in 86400 seconds..