Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. 1970/01/01 00:00:26 parsed 1 programs [ 27.742890][ T4325] cgroup: Unknown subsys name 'net' [ 28.030622][ T4325] cgroup: Unknown subsys name 'rlimit' [ 28.297275][ T4325] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.744360][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 33.763002][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.764260][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.765701][ T4341] device bridge_slave_0 entered promiscuous mode [ 33.768332][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.769456][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.770800][ T4341] device bridge_slave_1 entered promiscuous mode [ 33.778223][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.780532][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.787570][ T4341] team0: Port device team_slave_0 added [ 33.789351][ T4341] team0: Port device team_slave_1 added [ 33.795127][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.796272][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.800937][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.805100][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.806131][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.809831][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.878836][ T4341] device hsr_slave_0 entered promiscuous mode [ 33.937928][ T4341] device hsr_slave_1 entered promiscuous mode [ 34.033801][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.060693][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.090942][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.130668][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.187946][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.189248][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.190630][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.191696][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.208932][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.212865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.215605][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.217434][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.222839][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.226028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.227518][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.228699][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.231650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.233069][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.234166][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.244624][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.246262][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.249255][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.251941][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.254932][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.257421][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.309854][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.311151][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.314562][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.320727][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.326514][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.328679][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.330023][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.332185][ T4341] device veth0_vlan entered promiscuous mode [ 34.335958][ T4341] device veth1_vlan entered promiscuous mode [ 34.342782][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.344185][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.345866][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.351147][ T4341] device veth0_macvtap entered promiscuous mode [ 34.353259][ T4341] device veth1_macvtap entered promiscuous mode [ 34.359880][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.361077][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.362991][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.365616][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.366864][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.370531][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.371995][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.373270][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.374577][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.899882][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.054326][ T4384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.055907][ T4384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.057195][ T4384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.059789][ T4384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.061183][ T4384] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.062404][ T4384] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.493587][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.494794][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.496723][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.503949][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.505227][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.506877][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:35 executed programs: 0 [ 35.804099][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.805613][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.806812][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.808834][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.810274][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.811469][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.861871][ T4416] chnl_net:caif_netlink_parms(): no params data found [ 35.878949][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.880122][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.881700][ T4416] device bridge_slave_0 entered promiscuous mode [ 35.884005][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.885188][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.886678][ T4416] device bridge_slave_1 entered promiscuous mode [ 35.894133][ T4416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.896495][ T4416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.904119][ T4416] team0: Port device team_slave_0 added [ 35.906071][ T4416] team0: Port device team_slave_1 added [ 35.912867][ T4416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.913971][ T4416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.918372][ T4416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.922203][ T4416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.923309][ T4416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.927194][ T4416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.978785][ T4416] device hsr_slave_0 entered promiscuous mode [ 36.028012][ T4416] device hsr_slave_1 entered promiscuous mode [ 36.067840][ T4416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.069152][ T4416] Cannot create hsr debugfs directory [ 37.818990][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.838049][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 39.928364][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 40.119041][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.229655][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.280699][ T4416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.381631][ T4416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.460738][ T4416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.530597][ T4416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.631341][ T4416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.634857][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.636516][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.639760][ T4416] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.642036][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.643611][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.645015][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.646137][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.649339][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.700909][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.702904][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.704364][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.705496][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.709110][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.712038][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.714637][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.716466][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.718320][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.720897][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.722558][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.725469][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.726939][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.730673][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.732104][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.734405][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.741661][ T11] device hsr_slave_0 left promiscuous mode [ 41.768303][ T11] device hsr_slave_1 left promiscuous mode [ 41.848165][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.849400][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.851674][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.852701][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.854067][ T11] device bridge_slave_1 left promiscuous mode [ 41.855592][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.888726][ T11] device bridge_slave_0 left promiscuous mode [ 41.889779][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.997789][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 42.018003][ T11] device veth1_macvtap left promiscuous mode [ 42.019090][ T11] device veth0_macvtap left promiscuous mode [ 42.020038][ T11] device veth1_vlan left promiscuous mode [ 42.020963][ T11] device veth0_vlan left promiscuous mode [ 43.769481][ T11] team0 (unregistering): Port device team_slave_1 removed [ 43.989181][ T11] team0 (unregistering): Port device team_slave_0 removed [ 44.077830][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 44.179075][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.408334][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.879486][ T11] bond0 (unregistering): Released all slaves [ 47.116932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.118295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.121462][ T4416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.126898][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.130414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.137091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.140255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.141700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.143033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.145628][ T4416] device veth0_vlan entered promiscuous mode [ 47.149691][ T4416] device veth1_vlan entered promiscuous mode [ 47.155743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.157351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.159890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.161332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.163820][ T4416] device veth0_macvtap entered promiscuous mode [ 47.166131][ T4416] device veth1_macvtap entered promiscuous mode [ 47.172275][ T4416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.173466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.174939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.176328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.178242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.181525][ T4416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.182758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.184473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.186938][ T4416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.188804][ T4416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.190060][ T4416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.191318][ T4416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.213469][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.218475][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.220548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.223703][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.225029][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.226764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:47 executed programs: 2 [ 47.278871][ T4494] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 47.287346][ T4494] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 47.300456][ T4495] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 47.306517][ T4495] netlink: 'syz.0.18': attribute type 4 has an invalid length. [ 47.319548][ T4496] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 47.323570][ T4496] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 47.353687][ T4497] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 47.360486][ T4497] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 47.371026][ T4498] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 47.377103][ T4498] netlink: 'syz.0.21': attribute type 4 has an invalid length. 1970/01/01 00:00:52 executed programs: 183 [ 52.293589][ T4696] validate_nla: 356 callbacks suppressed [ 52.293600][ T4696] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 52.301197][ T4696] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 52.313042][ T4697] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 52.319050][ T4697] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 52.330050][ T4698] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 52.337165][ T4698] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 52.364119][ T4699] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 52.371224][ T4699] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 52.381876][ T4700] netlink: 'syz.0.204': attribute type 4 has an invalid length. [ 52.388827][ T4700] netlink: 'syz.0.204': attribute type 4 has an invalid length. [ 56.638449][ C0] ------------[ cut here ]------------ [ 56.639427][ C0] WARNING: CPU: 0 PID: 4904 at net/ipv4/route.c:1278 ip_rt_bug+0x30/0xf8 [ 56.640767][ C0] Modules linked in: [ 56.641348][ C0] CPU: 0 PID: 4904 Comm: syz.0.408 Not tainted syzkaller #0 [ 56.642541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 56.644105][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 56.645435][ C0] pc : ip_rt_bug+0x30/0xf8 [ 56.646091][ C0] lr : ip_rt_bug+0x30/0xf8 [ 56.646756][ C0] sp : ffff8000080075c0 [ 56.647318][ C0] x29: ffff8000080075c0 x28: 1ffff00001000ef8 x27: ffff0000ed990500 [ 56.648489][ C0] x26: dfff800000000000 x25: 1fffe0001db320ab x24: dfff800000000000 [ 56.649698][ C0] x23: ffff0000ce86e600 x22: ffff0000ce86e630 x21: ffff0000c4fb8d00 [ 56.650802][ C0] x20: ffff0000ed990500 x19: ffff0000ed990500 x18: 0000000000000000 [ 56.652070][ C0] x17: ffff8000181f9000 x16: ffff8000082d22d4 x15: ffff80000fd818b0 [ 56.653318][ C0] x14: ffff80001051e60c x13: ffff80000fd80f00 x12: 0000000000ff0100 [ 56.654645][ C0] x11: ff0080000a8935f4 x10: 0000000000000003 x9 : a8cfd419ac140c00 [ 56.655986][ C0] x8 : a8cfd419ac140c00 x7 : ffff8000083af900 x6 : ffff80000fd80f00 [ 56.657230][ C0] x5 : ffff0000d940b628 x4 : ffff800008007270 x3 : 0000000000000000 [ 56.658463][ C0] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : 0000000000000000 [ 56.659823][ C0] Call trace: [ 56.660312][ C0] ip_rt_bug+0x30/0xf8 [ 56.660927][ C0] ip_send_skb+0x134/0x2b0 [ 56.661664][ C0] ip_push_pending_frames+0x6c/0x88 [ 56.662596][ C0] icmp_push_reply+0x2e0/0x3c0 [ 56.663370][ C0] __icmp_send+0xbd4/0xfc4 [ 56.664121][ C0] ipv4_link_failure+0x54c/0x8b0 [ 56.665005][ C0] arp_error_report+0x11c/0x16c [ 56.665847][ C0] neigh_invalidate+0x29c/0x4ac [ 56.666643][ C0] neigh_timer_handler+0x704/0xe18 [ 56.667460][ C0] call_timer_fn+0x1b8/0x964 [ 56.668240][ C0] __run_timers+0x460/0x6bc [ 56.669015][ C0] run_timer_softirq+0x7c/0x114 [ 56.669748][ C0] handle_softirqs+0x318/0xc6c [ 56.670536][ C0] __do_softirq+0x14/0x20 [ 56.671196][ C0] ____do_softirq+0x14/0x20 [ 56.671864][ C0] call_on_irq_stack+0x30/0x48 [ 56.672600][ C0] do_softirq_own_stack+0x20/0x2c [ 56.673356][ C0] __irq_exit_rcu+0x23c/0x43c [ 56.674210][ C0] irq_exit_rcu+0x14/0x84 [ 56.674924][ C0] el1_interrupt+0x38/0x54 [ 56.675688][ C0] el1h_64_irq_handler+0x18/0x24 [ 56.676464][ C0] el1h_64_irq+0x64/0x68 [ 56.677126][ C0] vsnprintf+0x10b0/0x1890 [ 56.677841][ C0] seq_printf+0x148/0x22c [ 56.678603][ C0] c_show+0x40/0x3f8 [ 56.679168][ C0] seq_read_iter+0x858/0xc00 [ 56.679874][ C0] proc_reg_read_iter+0x184/0x2b0 [ 56.680680][ C0] generic_file_splice_read+0x160/0x404 [ 56.681495][ C0] splice_direct_to_actor+0x300/0x978 [ 56.682219][ C0] do_splice_direct+0x158/0x244 [ 56.683015][ C0] do_sendfile+0x458/0xc88 [ 56.683800][ C0] __arm64_sys_sendfile64+0x130/0x360 [ 56.684661][ C0] invoke_syscall+0x98/0x2bc [ 56.685356][ C0] el0_svc_common+0x138/0x258 [ 56.686152][ C0] do_el0_svc+0x58/0x13c [ 56.686857][ C0] el0_svc+0x58/0x138 [ 56.687500][ C0] el0t_64_sync_handler+0x84/0xf0 [ 56.688285][ C0] el0t_64_sync+0x18c/0x190 [ 56.688985][ C0] irq event stamp: 1921 [ 56.689589][ C0] hardirqs last enabled at (1920): [] kasan_quarantine_put+0xc4/0x204 [ 56.691177][ C0] hardirqs last disabled at (1921): [] el1_dbg+0x24/0x80 [ 56.692459][ C0] softirqs last enabled at (1638): [] release_sock+0x16c/0x1bc [ 56.693845][ C0] softirqs last disabled at (1643): [] __do_softirq+0x14/0x20 [ 56.695366][ C0] ---[ end trace 0000000000000000 ]--- [ 56.697195][ C0] ------------[ cut here ]------------ [ 56.698102][ C0] WARNING: CPU: 0 PID: 4904 at net/ipv4/route.c:1278 ip_rt_bug+0x30/0xf8 [ 56.699552][ C0] Modules linked in: [ 56.700157][ C0] CPU: 0 PID: 4904 Comm: syz.0.408 Tainted: G W syzkaller #0 [ 56.701481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 56.703019][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 56.704165][ C0] pc : ip_rt_bug+0x30/0xf8 [ 56.704780][ C0] lr : ip_rt_bug+0x30/0xf8 [ 56.705459][ C0] sp : ffff8000080075c0 [ 56.706094][ C0] x29: ffff8000080075c0 x28: 1ffff00001000ef8 x27: ffff0000ed990640 [ 56.707328][ C0] x26: dfff800000000000 x25: 1fffe0001db320d3 x24: dfff800000000000 [ 56.708605][ C0] x23: ffff0000ce86e600 x22: ffff0000ce86e630 x21: ffff0000c4fb8d00 [ 56.709791][ C0] x20: ffff0000ed990640 x19: ffff0000ed990640 x18: 0000000036b6d8fa [ 56.711014][ C0] x17: dfff800000000000 x16: ffff8000082d22d4 x15: 0000000000000000 [ 56.712203][ C0] x14: 00000000081a8e9c x13: 0000000031cf6a47 x12: 0000000000ff0100 [ 56.713415][ C0] x11: ff0080000a8935f4 x10: 0000000000000003 x9 : a8cfd419ac140c00 [ 56.714675][ C0] x8 : a8cfd419ac140c00 x7 : 0000000000000000 x6 : 000000000000003f [ 56.715993][ C0] x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 [ 56.717269][ C0] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : 0000000000000000 [ 56.718580][ C0] Call trace: [ 56.719123][ C0] ip_rt_bug+0x30/0xf8 [ 56.719703][ C0] ip_send_skb+0x134/0x2b0 [ 56.720365][ C0] ip_push_pending_frames+0x6c/0x88 [ 56.721116][ C0] icmp_push_reply+0x2e0/0x3c0 [ 56.721802][ C0] __icmp_send+0xbd4/0xfc4 [ 56.722476][ C0] ipv4_link_failure+0x54c/0x8b0 [ 56.723199][ C0] arp_error_report+0x11c/0x16c [ 56.723989][ C0] neigh_invalidate+0x29c/0x4ac [ 56.724783][ C0] neigh_timer_handler+0x704/0xe18 [ 56.725609][ C0] call_timer_fn+0x1b8/0x964 [ 56.726311][ C0] __run_timers+0x460/0x6bc [ 56.726970][ C0] run_timer_softirq+0x7c/0x114 [ 56.727776][ C0] handle_softirqs+0x318/0xc6c [ 56.728639][ C0] __do_softirq+0x14/0x20 [ 56.729360][ C0] ____do_softirq+0x14/0x20 [ 56.730076][ C0] call_on_irq_stack+0x30/0x48 [ 56.730913][ C0] do_softirq_own_stack+0x20/0x2c [ 56.731735][ C0] __irq_exit_rcu+0x23c/0x43c [ 56.732521][ C0] irq_exit_rcu+0x14/0x84 [ 56.733268][ C0] el1_interrupt+0x38/0x54 [ 56.733964][ C0] el1h_64_irq_handler+0x18/0x24 [ 56.734728][ C0] el1h_64_irq+0x64/0x68 [ 56.735375][ C0] vsnprintf+0x10b0/0x1890 [ 56.736295][ C0] seq_printf+0x148/0x22c [ 56.736979][ C0] c_show+0x40/0x3f8 [ 56.737542][ C0] seq_read_iter+0x858/0xc00 [ 56.738199][ C0] proc_reg_read_iter+0x184/0x2b0 [ 56.738898][ C0] generic_file_splice_read+0x160/0x404 [ 56.739748][ C0] splice_direct_to_actor+0x300/0x978 [ 56.740517][ C0] do_splice_direct+0x158/0x244 [ 56.741274][ C0] do_sendfile+0x458/0xc88 [ 56.742012][ C0] __arm64_sys_sendfile64+0x130/0x360 [ 56.742838][ C0] invoke_syscall+0x98/0x2bc [ 56.743509][ C0] el0_svc_common+0x138/0x258 [ 56.744276][ C0] do_el0_svc+0x58/0x13c [ 56.744925][ C0] el0_svc+0x58/0x138 [ 56.745505][ C0] el0t_64_sync_handler+0x84/0xf0 [ 56.746219][ C0] el0t_64_sync+0x18c/0x190 [ 56.746881][ C0] irq event stamp: 2231 [ 56.747569][ C0] hardirqs last enabled at (2230): [] kasan_quarantine_put+0xc4/0x204 [ 56.748997][ C0] hardirqs last disabled at (2231): [] el1_dbg+0x24/0x80 [ 56.750235][ C0] softirqs last enabled at (1638): [] release_sock+0x16c/0x1bc [ 56.751587][ C0] softirqs last disabled at (1643): [] __do_softirq+0x14/0x20 [ 56.752833][ C0] ---[ end trace 0000000000000000 ]--- [ 56.754131][ C0] ------------[ cut here ]------------ [ 56.754948][ C0] WARNING: CPU: 0 PID: 4904 at net/ipv4/route.c:1278 ip_rt_bug+0x30/0xf8 [ 56.756293][ C0] Modules linked in: [ 56.756938][ C0] CPU: 0 PID: 4904 Comm: syz.0.408 Tainted: G W syzkaller #0 [ 56.758312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 56.759877][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 56.761073][ C0] pc : ip_rt_bug+0x30/0xf8 [ 56.761699][ C0] lr : ip_rt_bug+0x30/0xf8 [ 56.762370][ C0] sp : ffff8000080075c0 [ 56.762960][ C0] x29: ffff8000080075c0 x28: 1ffff00001000ef8 x27: ffff0000ed990780 [ 56.764136][ C0] x26: dfff800000000000 x25: 1fffe0001db320fb x24: dfff800000000000 [ 56.765343][ C0] x23: ffff0000ce86e600 x22: ffff0000ce86e630 x21: ffff0000c4fb8d00 [ 56.766552][ C0] x20: ffff0000ed990780 x19: ffff0000ed990780 x18: 0000000036b6d8fa [ 56.767688][ C0] x17: dfff800000000000 x16: ffff8000082d22d4 x15: 0000000000000000 [ 56.768948][ C0] x14: 00000000081a8e9c x13: 0000000031cf6a47 x12: 0000000000ff0100 [ 56.770256][ C0] x11: ff0080000a8935f4 x10: 0000000000000003 x9 : a8cfd419ac140c00 [ 56.771392][ C0] x8 : a8cfd419ac140c00 x7 : 0000000000000000 x6 : 000000000000003f [ 56.772553][ C0] x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 [ 56.773648][ C0] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : 0000000000000000 [ 56.774864][ C0] Call trace: [ 56.775343][ C0] ip_rt_bug+0x30/0xf8 [ 56.775930][ C0] ip_send_skb+0x134/0x2b0 [ 56.776628][ C0] ip_push_pending_frames+0x6c/0x88 [ 56.777460][ C0] icmp_push_reply+0x2e0/0x3c0 [ 56.778159][ C0] __icmp_send+0xbd4/0xfc4 [ 56.778814][ C0] ipv4_link_failure+0x54c/0x8b0 [ 56.779632][ C0] arp_error_report+0x11c/0x16c [ 56.780381][ C0] neigh_invalidate+0x29c/0x4ac [ 56.781106][ C0] neigh_timer_handler+0x704/0xe18 [ 56.781835][ C0] call_timer_fn+0x1b8/0x964 [ 56.782494][ C0] __run_timers+0x460/0x6bc [ 56.783172][ C0] run_timer_softirq+0x7c/0x114 [ 56.783915][ C0] handle_softirqs+0x318/0xc6c [ 56.784606][ C0] __do_softirq+0x14/0x20 [ 56.785379][ C0] ____do_softirq+0x14/0x20 [ 56.786135][ C0] call_on_irq_stack+0x30/0x48 [ 56.786897][ C0] do_softirq_own_stack+0x20/0x2c [ 56.787631][ C0] __irq_exit_rcu+0x23c/0x43c [ 56.788307][ C0] irq_exit_rcu+0x14/0x84 [ 56.788966][ C0] el1_interrupt+0x38/0x54 [ 56.789623][ C0] el1h_64_irq_handler+0x18/0x24 [ 56.790651][ C0] el1h_64_irq+0x64/0x68 [ 56.791343][ C0] vsnprintf+0x10b0/0x1890 [ 56.791959][ C0] seq_printf+0x148/0x22c [ 56.792658][ C0] c_show+0x40/0x3f8 [ 56.793381][ C0] seq_read_iter+0x858/0xc00 [ 56.794192][ C0] proc_reg_read_iter+0x184/0x2b0 [ 56.795016][ C0] generic_file_splice_read+0x160/0x404 [ 56.795903][ C0] splice_direct_to_actor+0x300/0x978 [ 56.796708][ C0] do_splice_direct+0x158/0x244 [ 56.797379][ C0] do_sendfile+0x458/0xc88 [ 56.798120][ C0] __arm64_sys_sendfile64+0x130/0x360 [ 56.799028][ C0] invoke_syscall+0x98/0x2bc [ 56.799697][ C0] el0_svc_common+0x138/0x258 [ 56.800498][ C0] do_el0_svc+0x58/0x13c [ 56.801222][ C0] el0_svc+0x58/0x138 [ 56.801910][ C0] el0t_64_sync_handler+0x84/0xf0 [ 56.802707][ C0] el0t_64_sync+0x18c/0x190 [ 56.803401][ C0] irq event stamp: 2533 [ 56.804035][ C0] hardirqs last enabled at (2532): [] kasan_quarantine_put+0xc4/0x204 [ 56.805650][ C0] hardirqs last disabled at (2533): [] el1_dbg+0x24/0x80 [ 56.807046][ C0] softirqs last enabled at (1638): [] release_sock+0x16c/0x1bc [ 56.808439][ C0] softirqs last disabled at (1643): [] __do_softirq+0x14/0x20 [ 56.809747][ C0] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:00:57 executed programs: 415 [ 57.313741][ T4928] validate_nla: 454 callbacks suppressed [ 57.313751][ T4928] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 57.320899][ T4928] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 57.331757][ T4929] netlink: 'syz.0.433': attribute type 4 has an invalid length. [ 57.339094][ T4929] netlink: 'syz.0.433': attribute type 4 has an invalid length. [ 57.349883][ T4930] netlink: 'syz.0.434': attribute type 4 has an invalid length. [ 57.357414][ T4930] netlink: 'syz.0.434': attribute type 4 has an invalid length. [ 57.373979][ T4931] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 57.379484][ T4931] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 57.390326][ T4932] netlink: 'syz.0.436': attribute type 4 has an invalid length. [ 57.397468][ T4932] netlink: 'syz.0.436': attribute type 4 has an invalid length. [ 59.918636][ C0] ------------[ cut here ]------------ [ 59.919457][ C0] WARNING: CPU: 0 PID: 5055 at net/ipv4/route.c:1278 ip_rt_bug+0x30/0xf8 [ 59.920692][ C0] Modules linked in: [ 59.921283][ C0] CPU: 0 PID: 5055 Comm: syz.0.559 Tainted: G W syzkaller #0 [ 59.922550][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 59.923977][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 59.925033][ C0] pc : ip_rt_bug+0x30/0xf8 [ 59.925700][ C0] lr : ip_rt_bug+0x30/0xf8 [ 59.926357][ C0] sp : ffff8000080075c0 [ 59.926960][ C0] x29: ffff8000080075c0 x28: 1ffff00001000ef8 x27: ffff0000daadfa00 [ 59.928156][ C0] x26: dfff800000000000 x25: 1fffe0001b55bf4b x24: dfff800000000000 [ 59.929441][ C0] x23: ffff0000d064d200 x22: ffff0000d064d230 x21: ffff0000c4fb8d00 [ 59.930728][ C0] x20: ffff0000daadfa00 x19: ffff0000daadfa00 x18: 0000000000000000 [ 59.931900][ C0] x17: ffff8000181f9000 x16: ffff8000082d22d4 x15: 0000000000000000 [ 59.933177][ C0] x14: 00000000081a8e9c x13: 0000000031cf6a47 x12: 0000000000ff0100 [ 59.934465][ C0] x11: ff0080000a8935f4 x10: 0000000000000003 x9 : f690bb1d63e78b00 [ 59.935801][ C0] x8 : f690bb1d63e78b00 x7 : 0000000000000000 x6 : 000000000000003f [ 59.937044][ C0] x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 [ 59.938230][ C0] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : 0000000000000000 [ 59.939546][ C0] Call trace: [ 59.940084][ C0] ip_rt_bug+0x30/0xf8 [ 59.940756][ C0] ip_send_skb+0x134/0x2b0 [ 59.941412][ C0] ip_push_pending_frames+0x6c/0x88 [ 59.942103][ C0] icmp_push_reply+0x2e0/0x3c0 [ 59.942773][ C0] __icmp_send+0xbd4/0xfc4 [ 59.943391][ C0] ipv4_link_failure+0x54c/0x8b0 [ 59.944072][ C0] arp_error_report+0x11c/0x16c [ 59.944734][ C0] neigh_invalidate+0x29c/0x4ac [ 59.945506][ C0] neigh_timer_handler+0x704/0xe18 [ 59.946258][ C0] call_timer_fn+0x1b8/0x964 [ 59.946960][ C0] __run_timers+0x460/0x6bc [ 59.947746][ C0] run_timer_softirq+0x7c/0x114 [ 59.948479][ C0] handle_softirqs+0x318/0xc6c [ 59.949204][ C0] __do_softirq+0x14/0x20 [ 59.949900][ C0] ____do_softirq+0x14/0x20 [ 59.950657][ C0] call_on_irq_stack+0x30/0x48 [ 59.951423][ C0] do_softirq_own_stack+0x20/0x2c [ 59.952232][ C0] __irq_exit_rcu+0x23c/0x43c [ 59.952914][ C0] irq_exit_rcu+0x14/0x84 [ 59.953608][ C0] el1_interrupt+0x38/0x54 [ 59.954292][ C0] el1h_64_irq_handler+0x18/0x24 [ 59.955059][ C0] el1h_64_irq+0x64/0x68 [ 59.955739][ C0] __sanitizer_cov_trace_switch+0x10/0xf4 [ 59.956617][ C0] vsnprintf+0xd0/0x1890 [ 59.957277][ C0] seq_printf+0x148/0x22c [ 59.957941][ C0] crypto_shash_show+0x5c/0xc8 [ 59.958782][ C0] c_show+0x1d8/0x3f8 [ 59.959401][ C0] seq_read_iter+0x858/0xc00 [ 59.960158][ C0] proc_reg_read_iter+0x184/0x2b0 [ 59.961030][ C0] generic_file_splice_read+0x160/0x404 [ 59.961888][ C0] splice_direct_to_actor+0x300/0x978 [ 59.962751][ C0] do_splice_direct+0x158/0x244 [ 59.963548][ C0] do_sendfile+0x458/0xc88 [ 59.964282][ C0] __arm64_sys_sendfile64+0x130/0x360 [ 59.965179][ C0] invoke_syscall+0x98/0x2bc [ 59.965967][ C0] el0_svc_common+0x138/0x258 [ 59.966755][ C0] do_el0_svc+0x58/0x13c [ 59.967426][ C0] el0_svc+0x58/0x138 [ 59.968032][ C0] el0t_64_sync_handler+0x84/0xf0 [ 59.968852][ C0] el0t_64_sync+0x18c/0x190 [ 59.969582][ C0] irq event stamp: 1819 [ 59.970323][ C0] hardirqs last enabled at (1818): [] kasan_quarantine_put+0xc4/0x204 [ 59.972067][ C0] hardirqs last disabled at (1819): [] el1_dbg+0x24/0x80 [ 59.973508][ C0] softirqs last enabled at (1564): [] release_sock+0x16c/0x1bc [ 59.974763][ C0] softirqs last disabled at (1569): [] __do_softirq+0x14/0x20 [ 59.976096][ C0] ---[ end trace 0000000000000000 ]--- [ 59.977379][ C0] ------------[ cut here ]------------ [ 59.978218][ C0] WARNING: CPU: 0 PID: 5055 at net/ipv4/route.c:1278 ip_rt_bug+0x30/0xf8 [ 59.979466][ C0] Modules linked in: [ 59.980007][ C0] CPU: 0 PID: 5055 Comm: syz.0.559 Tainted: G W syzkaller #0 [ 59.981378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 59.982844][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 59.983993][ C0] pc : ip_rt_bug+0x30/0xf8 [ 59.984692][ C0] lr : ip_rt_bug+0x30/0xf8 [ 59.985363][ C0] sp : ffff8000080075c0 [ 59.986044][ C0] x29: ffff8000080075c0 x28: 1ffff00001000ef8 x27: ffff0000daadf8c0 [ 59.987355][ C0] x26: dfff800000000000 x25: 1fffe0001b55bf23 x24: dfff800000000000 [ 59.988635][ C0] x23: ffff0000d064d200 x22: ffff0000d064d230 x21: ffff0000c4fb8d00 [ 59.990007][ C0] x20: ffff0000daadf8c0 x19: ffff0000daadf8c0 x18: 0000000000000000 [ 59.991375][ C0] x17: ffff8000181f9000 x16: ffff8000082d22d4 x15: 0000000000000000 [ 59.992782][ C0] x14: 00000000081a8e9c x13: 0000000031cf6a47 x12: 0000000000ff0100 [ 59.994036][ C0] x11: ff0080000a8935f4 x10: 0000000000000003 x9 : f690bb1d63e78b00 [ 59.995432][ C0] x8 : f690bb1d63e78b00 x7 : 0000000000000000 x6 : 000000000000003f [ 59.996796][ C0] x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 [ 59.998066][ C0] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : 0000000000000000 [ 59.999378][ C0] Call trace: [ 59.999900][ C0] ip_rt_bug+0x30/0xf8 [ 60.000528][ C0] ip_send_skb+0x134/0x2b0 [ 60.001102][ C0] ip_push_pending_frames+0x6c/0x88 [ 60.001996][ C0] icmp_push_reply+0x2e0/0x3c0 [ 60.002837][ C0] __icmp_send+0xbd4/0xfc4 [ 60.003591][ C0] ipv4_link_failure+0x54c/0x8b0 [ 60.004334][ C0] arp_error_report+0x11c/0x16c [ 60.005034][ C0] neigh_invalidate+0x29c/0x4ac [ 60.005707][ C0] neigh_timer_handler+0x704/0xe18 [ 60.006448][ C0] call_timer_fn+0x1b8/0x964 [ 60.007177][ C0] __run_timers+0x460/0x6bc [ 60.007867][ C0] run_timer_softirq+0x7c/0x114 [ 60.008649][ C0] handle_softirqs+0x318/0xc6c [ 60.009399][ C0] __do_softirq+0x14/0x20 [ 60.010037][ C0] ____do_softirq+0x14/0x20 [ 60.010717][ C0] call_on_irq_stack+0x30/0x48 [ 60.011383][ C0] do_softirq_own_stack+0x20/0x2c [ 60.012114][ C0] __irq_exit_rcu+0x23c/0x43c [ 60.012760][ C0] irq_exit_rcu+0x14/0x84 [ 60.013339][ C0] el1_interrupt+0x38/0x54 [ 60.014003][ C0] el1h_64_irq_handler+0x18/0x24 [ 60.014834][ C0] el1h_64_irq+0x64/0x68 [ 60.015530][ C0] __sanitizer_cov_trace_switch+0x10/0xf4 [ 60.016405][ C0] vsnprintf+0xd0/0x1890 [ 60.017119][ C0] seq_printf+0x148/0x22c [ 60.017823][ C0] crypto_shash_show+0x5c/0xc8 [ 60.018585][ C0] c_show+0x1d8/0x3f8 [ 60.019189][ C0] seq_read_iter+0x858/0xc00 [ 60.019956][ C0] proc_reg_read_iter+0x184/0x2b0 [ 60.020843][ C0] generic_file_splice_read+0x160/0x404 [ 60.021781][ C0] splice_direct_to_actor+0x300/0x978 [ 60.022637][ C0] do_splice_direct+0x158/0x244 [ 60.023455][ C0] do_sendfile+0x458/0xc88 [ 60.024198][ C0] __arm64_sys_sendfile64+0x130/0x360 [ 60.025105][ C0] invoke_syscall+0x98/0x2bc [ 60.025789][ C0] el0_svc_common+0x138/0x258 [ 60.026596][ C0] do_el0_svc+0x58/0x13c [ 60.027295][ C0] el0_svc+0x58/0x138 [ 60.027939][ C0] el0t_64_sync_handler+0x84/0xf0 [ 60.028793][ C0] el0t_64_sync+0x18c/0x190 [ 60.029557][ C0] irq event stamp: 2115 [ 60.030269][ C0] hardirqs last enabled at (2114): [] kasan_quarantine_put+0xc4/0x204 [ 60.031818][ C0] hardirqs last disabled at (2115): [] el1_dbg+0x24/0x80 [ 60.033082][ C0] softirqs last enabled at (1564): [] release_sock+0x16c/0x1bc [ 60.034435][ C0] softirqs last disabled at (1569): [] __do_softirq+0x14/0x20 [ 60.035867][ C0] ---[ end trace 0000000000000000 ]--- [ 60.037237][ C0] ------------[ cut here ]------------ [ 60.037986][ C0] WARNING: CPU: 0 PID: 5055 at net/ipv4/route.c:1278 ip_rt_bug+0x30/0xf8 [ 60.039274][ C0] Modules linked in: [ 60.039831][ C0] CPU: 0 PID: 5055 Comm: syz.0.559 Tainted: G W syzkaller #0 [ 60.041294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 60.042984][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.044220][ C0] pc : ip_rt_bug+0x30/0xf8 [ 60.044927][ C0] lr : ip_rt_bug+0x30/0xf8 [ 60.045662][ C0] sp : ffff8000080075c0 [ 60.046216][ C0] x29: ffff8000080075c0 x28: 1ffff00001000ef8 x27: ffff0000daadf780 [ 60.047389][ C0] x26: dfff800000000000 x25: 1fffe0001b55befb x24: dfff800000000000 [ 60.048617][ C0] x23: ffff0000d064d200 x22: ffff0000d064d230 x21: ffff0000c4fb8d00 [ 60.049978][ C0] x20: ffff0000daadf780 x19: ffff0000daadf780 x18: 0000000000000000 [ 60.051338][ C0] x17: ffff8000181f9000 x16: ffff8000082d22d4 x15: 0000000000000000 [ 60.052643][ C0] x14: 00000000081a8e9c x13: 0000000031cf6a47 x12: 0000000000ff0100 [ 60.053929][ C0] x11: ff0080000a8935f4 x10: 0000000000000003 x9 : f690bb1d63e78b00 [ 60.055170][ C0] x8 : f690bb1d63e78b00 x7 : 0000000000000000 x6 : 000000000000003f [ 60.056424][ C0] x5 : 0000000000000040 x4 : 0000000000000001 x3 : 0000000000000000 [ 60.057664][ C0] x2 : 0000000000000002 x1 : ffff800011abd7c0 x0 : 0000000000000000 [ 60.058836][ C0] Call trace: [ 60.059385][ C0] ip_rt_bug+0x30/0xf8 [ 60.059978][ C0] ip_send_skb+0x134/0x2b0 [ 60.060651][ C0] ip_push_pending_frames+0x6c/0x88 [ 60.061362][ C0] icmp_push_reply+0x2e0/0x3c0 [ 60.062016][ C0] __icmp_send+0xbd4/0xfc4 [ 60.062665][ C0] ipv4_link_failure+0x54c/0x8b0 [ 60.063403][ C0] arp_error_report+0x11c/0x16c [ 60.064048][ C0] neigh_invalidate+0x29c/0x4ac [ 60.064830][ C0] neigh_timer_handler+0x704/0xe18 [ 60.065669][ C0] call_timer_fn+0x1b8/0x964 [ 60.066434][ C0] __run_timers+0x460/0x6bc [ 60.067139][ C0] run_timer_softirq+0x7c/0x114 [ 60.067892][ C0] handle_softirqs+0x318/0xc6c [ 60.068690][ C0] __do_softirq+0x14/0x20 [ 60.069390][ C0] ____do_softirq+0x14/0x20 [ 60.070145][ C0] call_on_irq_stack+0x30/0x48 [ 60.070856][ C0] do_softirq_own_stack+0x20/0x2c [ 60.071672][ C0] __irq_exit_rcu+0x23c/0x43c [ 60.072361][ C0] irq_exit_rcu+0x14/0x84 [ 60.073032][ C0] el1_interrupt+0x38/0x54 [ 60.073662][ C0] el1h_64_irq_handler+0x18/0x24 [ 60.074412][ C0] el1h_64_irq+0x64/0x68 [ 60.075013][ C0] __sanitizer_cov_trace_switch+0x10/0xf4 [ 60.075852][ C0] vsnprintf+0xd0/0x1890 [ 60.076435][ C0] seq_printf+0x148/0x22c [ 60.077208][ C0] crypto_shash_show+0x5c/0xc8 [ 60.077993][ C0] c_show+0x1d8/0x3f8 [ 60.078677][ C0] seq_read_iter+0x858/0xc00 [ 60.079399][ C0] proc_reg_read_iter+0x184/0x2b0 [ 60.080169][ C0] generic_file_splice_read+0x160/0x404 [ 60.081129][ C0] splice_direct_to_actor+0x300/0x978 [ 60.081966][ C0] do_splice_direct+0x158/0x244 [ 60.082674][ C0] do_sendfile+0x458/0xc88 [ 60.083409][ C0] __arm64_sys_sendfile64+0x130/0x360 [ 60.084294][ C0] invoke_syscall+0x98/0x2bc [ 60.085032][ C0] el0_svc_common+0x138/0x258 [ 60.085906][ C0] do_el0_svc+0x58/0x13c [ 60.086627][ C0] el0_svc+0x58/0x138 [ 60.087359][ C0] el0t_64_sync_handler+0x84/0xf0 [ 60.088176][ C0] el0t_64_sync+0x18c/0x190 [ 60.088926][ C0] irq event stamp: 2421 [ 60.089581][ C0] hardirqs last enabled at (2420): [] kasan_quarantine_put+0xc4/0x204 [ 60.091070][ C0] hardirqs last disabled at (2421): [] el1_dbg+0x24/0x80 [ 60.092417][ C0] softirqs last enabled at (1564): [] release_sock+0x16c/0x1bc [ 60.093868][ C0] softirqs last disabled at (1569): [] __do_softirq+0x14/0x20 [ 60.095271][ C0] ---[ end trace 0000000000000000 ]--- [ 61.267323][ T4384] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.269659][ T4384] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.271179][ T4384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.272786][ T4384] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.274603][ T4384] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.276024][ T4384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.322604][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 61.341230][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.342413][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.344428][ T5114] device bridge_slave_0 entered promiscuous mode [ 61.346523][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.347673][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.349173][ T5114] device bridge_slave_1 entered promiscuous mode [ 61.355889][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.358235][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.365635][ T5114] team0: Port device team_slave_0 added [ 61.367468][ T5114] team0: Port device team_slave_1 added [ 61.374109][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.375244][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.379891][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.382319][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.383340][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.387106][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.428993][ T5114] device hsr_slave_0 entered promiscuous mode [ 61.457983][ T5114] device hsr_slave_1 entered promiscuous mode [ 61.718959][ T5114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.357769][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 64.478831][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479312][ T7] cfg80211: failed to load regulatory.db [ 64.479888][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.437803][ T47] Bluetooth: hci1: command 0x041b tx timeout