Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts.
2026/03/22 15:42:03 parsed 1 programs
[ 126.891084][ T6106] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 129.542510][ T6111] chnl_net:caif_netlink_parms(): no params data found
[ 129.815271][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.815393][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 129.815499][ T6111] bridge_slave_0: entered allmulticast mode
[ 129.816795][ T6111] bridge_slave_0: entered promiscuous mode
[ 129.820823][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.820943][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 129.821043][ T6111] bridge_slave_1: entered allmulticast mode
[ 129.822629][ T6111] bridge_slave_1: entered promiscuous mode
[ 129.967322][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 129.969842][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 130.096629][ T6111] team0: Port device team_slave_0 added
[ 130.099099][ T6111] team0: Port device team_slave_1 added
[ 130.215509][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 130.215525][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 130.215547][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 130.216810][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 130.216822][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 130.216842][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 130.379509][ T6111] hsr_slave_0: entered promiscuous mode
[ 130.380185][ T6111] hsr_slave_1: entered promiscuous mode
[ 132.086005][ T6111] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 132.130635][ T6111] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 132.168119][ T6111] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 132.208386][ T6111] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 132.364112][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0
[ 132.390394][ T6111] 8021q: adding VLAN 0 to HW filter on device team0
[ 132.411216][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 132.413033][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 132.415195][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 132.415314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 132.747211][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 132.825874][ T6111] veth0_vlan: entered promiscuous mode
[ 132.840267][ T6111] veth1_vlan: entered promiscuous mode
[ 132.878761][ T6111] veth0_macvtap: entered promiscuous mode
[ 132.883494][ T6111] veth1_macvtap: entered promiscuous mode
[ 132.908604][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 132.922722][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 132.937853][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.938324][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.938553][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.938590][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.973425][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.973511][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.808346][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.090439][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.366905][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 135.033047][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 135.039969][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 135.040793][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 135.043760][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 135.046030][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 135.229328][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.037862][ T12] bridge_slave_1: left allmulticast mode
[ 136.037890][ T12] bridge_slave_1: left promiscuous mode
[ 136.038139][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.121736][ T12] bridge_slave_0: left allmulticast mode
[ 136.121765][ T12] bridge_slave_0: left promiscuous mode
[ 136.122018][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.885585][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 136.967111][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 136.985477][ T12] bond0 (unregistering): Released all slaves
[ 137.334104][ T12] hsr_slave_0: left promiscuous mode
[ 137.376891][ T12] hsr_slave_1: left promiscuous mode
[ 137.378464][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 137.378489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 137.443755][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 137.443782][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 137.505366][ T12] veth1_macvtap: left promiscuous mode
[ 137.505467][ T12] veth0_macvtap: left promiscuous mode
[ 137.505705][ T12] veth1_vlan: left promiscuous mode
[ 137.505876][ T12] veth0_vlan: left promiscuous mode
[ 138.074307][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 138.114343][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 140.259584][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.259604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 140.312625][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.312645][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/22 15:42:24 executed programs: 0
[ 143.129406][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 143.133173][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 143.135323][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 143.136450][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 143.137082][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 144.172484][ T6440] chnl_net:caif_netlink_parms(): no params data found
[ 144.435470][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.435682][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state
[ 144.435850][ T6440] bridge_slave_0: entered allmulticast mode
[ 144.439362][ T6440] bridge_slave_0: entered promiscuous mode
[ 144.442272][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.442467][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.442630][ T6440] bridge_slave_1: entered allmulticast mode
[ 144.446281][ T6440] bridge_slave_1: entered promiscuous mode
[ 144.587845][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 144.590219][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 144.909982][ T6440] team0: Port device team_slave_0 added
[ 144.911901][ T6440] team0: Port device team_slave_1 added
[ 145.085626][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 145.085642][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 145.085660][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 145.086862][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 145.086880][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 145.086895][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 145.183778][ T60] Bluetooth: hci0: command tx timeout
[ 145.328260][ T6440] hsr_slave_0: entered promiscuous mode
[ 145.329016][ T6440] hsr_slave_1: entered promiscuous mode
[ 146.953593][ T6440] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 146.998725][ T6440] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 147.040697][ T6440] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 147.077802][ T6440] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 147.242866][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0
[ 147.266174][ T60] Bluetooth: hci0: command tx timeout
[ 147.272514][ T6440] 8021q: adding VLAN 0 to HW filter on device team0
[ 147.292153][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.292346][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 147.320214][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.320301][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 147.629883][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 147.701588][ T6440] veth0_vlan: entered promiscuous mode
[ 147.713059][ T6440] veth1_vlan: entered promiscuous mode
[ 147.753566][ T6440] veth0_macvtap: entered promiscuous mode
[ 147.760657][ T6440] veth1_macvtap: entered promiscuous mode
[ 147.786768][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 147.798566][ T6440] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 147.811367][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.812213][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.812255][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 147.812288][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 148.024039][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.024058][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 148.076870][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 148.076889][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/22 15:42:29 executed programs: 2
[ 148.218292][ T6536] loop0: detected capacity change from 0 to 128
[ 148.241302][ T6536] =======================================================
[ 148.241302][ T6536] WARNING: The mand mount option has been deprecated and
[ 148.241302][ T6536] and is ignored by this kernel. Remove the mand
[ 148.241302][ T6536] option from the mount to silence this warning.
[ 148.241302][ T6536] =======================================================
[ 148.279331][ T6536] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 148.279535][ T6536] hpfs: filesystem error: improperly stopped
[ 148.279549][ T6536] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 148.279561][ T6536] hpfs: You really don't want any checks? You are crazy...
[ 148.280123][ T6536] hpfs: hpf[ 148.280123][ T6536] hpfs: hpfs_map_sector(): read error
[ 148.280133][ T6536] hpfs: code page support is disabled
[ 148.280818][ T6536] HPFS: de_next_de: de->length = 84ba
[ 148.280830][ T6536] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 148.280848][ T6536] ==================================================================
[ 148.280857][ T6536] BUG: KASAN: slab-use-after-free in hpfs_count_dnodes+0x874/0xb70
[ 148.280888][ T6536] Read of size 2 at addr ffff8880329c84d0 by task syz.0.17/6536
[ 148.280903][ T6536]
[ 148.280924][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 148.280945][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 148.280968][ T6536] Call Trace:
[ 148.280975][ T6536]
[ 148.280983][ T6536] dump_stack_lvl+0xe8/0x150
[ 148.281011][ T6536] print_report+0xba/0x230
[ 148.281034][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.281052][ T6536] kasan_report+0x117/0x150
[ 148.281070][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.281093][ T6536] hpfs_count_dnodes+0x874/0xb70
[ 148.281116][ T6536] ? __pfx_hpfs_count_dnodes+0x10/0x10
[ 148.281134][ T6536] ? __bread_gfp+0xc3/0x3b0
[ 148.281160][ T6536] ? hpfs_map_sector+0x167/0x3a0
[ 148.281180][ T6536] ? hpfs_map_fnode+0x27e/0x6a0
[ 148.281201][ T6536] ? set_normalized_timespec64+0xf0/0x1a0
[ 148.281231][ T6536] hpfs_read_inode+0xc79/0x1050
[ 148.281254][ T6536] ? __pfx_hpfs_read_inode+0x10/0x10
[ 148.281274][ T6536] ? inode_set_ctime_to_ts+0x116/0x310
[ 148.281301][ T6536] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 148.281328][ T6536] ? rt_spin_unlock+0x160/0x200
[ 148.281353][ T6536] ? hpfs_init_inode+0x216/0x350
[ 148.281374][ T6536] hpfs_fill_super+0x123d/0x1fa0
[ 148.281407][ T6536] ? __pfx_hpfs_fill_super+0x10/0x10
[ 148.281432][ T6536] ? __pfx_snprintf+0x10/0x10
[ 148.281452][ T6536] ? set_blocksize+0x1c8/0x3d0
[ 148.281470][ T6536] ? rt_spin_unlock+0x14f/0x200
[ 148.281497][ T6536] ? sb_set_blocksize+0x11b/0x210
[ 148.281517][ T6536] ? setup_bdev_super+0x4c1/0x5b0
[ 148.281544][ T6536] get_tree_bdev_flags+0x431/0x4f0
[ 148.281569][ T6536] ? __pfx_hpfs_fill_super+0x10/0x10
[ 148.281592][ T6536] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 148.281618][ T6536] ? cap_capable+0x123/0x490
[ 148.281644][ T6536] ? safesetid_security_capable+0xa9/0x1a0
[ 148.281673][ T6536] vfs_get_tree+0x92/0x2a0
[ 148.281699][ T6536] do_new_mount+0x341/0xd30
[ 148.281723][ T6536] ? __pfx_do_new_mount+0x10/0x10
[ 148.281748][ T6536] ? user_path_at+0xd4/0x160
[ 148.281772][ T6536] __se_sys_mount+0x31d/0x420
[ 148.281801][ T6536] ? __pfx___se_sys_mount+0x10/0x10
[ 148.281825][ T6536] ? __x64_sys_mount+0x20/0xc0
[ 148.281846][ T6536] do_syscall_64+0x14d/0xf80
[ 148.281871][ T6536] ? trace_irq_disable+0x3b/0x150
[ 148.281891][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.281909][ T6536] ? clear_bhb_loop+0x40/0x90
[ 148.281929][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.281947][ T6536] RIP: 0033:0x7ff1f404b90a
[ 148.281967][ T6536] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 148.281982][ T6536] RSP: 002b:00007ff1f36ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 148.282001][ T6536] RAX: ffffffffffffffda RBX: 00007ff1f36adee0 RCX: 00007ff1f404b90a
[ 148.282015][ T6536] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007ff1f36adea0
[ 148.282028][ T6536] RBP: 000020000000a000 R08: 00007ff1f36adee0 R09: 0000000003200041
[ 148.282040][ T6536] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 148.282052][ T6536] R13: 00007ff1f36adea0 R14: 0000000000009e21 R15: 0000200000000000
[ 148.282071][ T6536]
[ 148.282077][ T6536]
[ 148.282082][ T6536] Allocated by task 6111:
[ 148.282090][ T6536] kasan_save_track+0x3e/0x80
[ 148.282113][ T6536] __kasan_kmalloc+0x93/0xb0
[ 148.282135][ T6536] __kmalloc_noprof+0x3e7/0x7b0
[ 148.282159][ T6536] __register_sysctl_table+0x72/0x1340
[ 148.282179][ T6536] __addrconf_sysctl_register+0x331/0x4d0
[ 148.282196][ T6536] addrconf_sysctl_register+0x168/0x1c0
[ 148.282214][ T6536] ipv6_add_dev+0xd64/0x1400
[ 148.282235][ T6536] addrconf_notify+0x771/0x1050
[ 148.282251][ T6536] notifier_call_chain+0x1be/0x400
[ 148.282267][ T6536] register_netdevice+0x1751/0x1d10
[ 148.282284][ T6536] veth_newlink+0x4a4/0xb70
[ 148.282303][ T6536] rtnl_newlink_create+0x329/0xb70
[ 148.282327][ T6536] rtnl_newlink+0x1666/0x1be0
[ 148.282347][ T6536] rtnetlink_rcv_msg+0x7d5/0xbe0
[ 148.282366][ T6536] netlink_rcv_skb+0x232/0x4b0
[ 148.282387][ T6536] netlink_unicast+0x831/0x9f0
[ 148.282404][ T6536] netlink_sendmsg+0x813/0xb40
[ 148.282424][ T6536] __sys_sendto+0x67f/0x710
[ 148.282446][ T6536] __x64_sys_sendto+0xde/0x100
[ 148.282469][ T6536] do_syscall_64+0x14d/0xf80
[ 148.282492][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.282508][ T6536]
[ 148.282512][ T6536] Freed by task 1060:
[ 148.282519][ T6536] kasan_save_track+0x3e/0x80
[ 148.282540][ T6536] kasan_save_free_info+0x46/0x50
[ 148.282558][ T6536] __kasan_slab_free+0x5c/0x80
[ 148.282580][ T6536] kmem_cache_free_bulk+0x313/0x1220
[ 148.282596][ T6536] kvfree_rcu_bulk+0xe5/0x1b0
[ 148.282614][ T6536] kfree_rcu_work+0xed/0x170
[ 148.282629][ T6536] process_scheduled_works+0xb6e/0x18c0
[ 148.282651][ T6536] worker_thread+0xa53/0xfc0
[ 148.282672][ T6536] kthread+0x388/0x470
[ 148.282686][ T6536] ret_from_fork+0x51e/0xb90
[ 148.282708][ T6536] ret_from_fork_asm+0x1a/0x30
[ 148.282722][ T6536]
[ 148.282726][ T6536] Last potentially related work creation:
[ 148.282732][ T6536] kasan_save_stack+0x3e/0x60
[ 148.282753][ T6536] kasan_record_aux_stack+0xbd/0xd0
[ 148.282771][ T6536] kvfree_call_rcu+0x90/0x3c0
[ 148.282786][ T6536] drop_sysctl_table+0x404/0x5e0
[ 148.282811][ T6536] unregister_sysctl_table+0x41/0x60
[ 148.282830][ T6536] addrconf_ifdown+0x1718/0x1aa0
[ 148.282852][ T6536] addrconf_notify+0x1bc/0x1050
[ 148.282868][ T6536] notifier_call_chain+0x1be/0x400
[ 148.282883][ T6536] unregister_netdevice_many_notify+0x186a/0x2360
[ 148.282902][ T6536] default_device_exit_batch+0x981/0xa00
[ 148.282924][ T6536] ops_undo_list+0x52b/0x940
[ 148.282947][ T6536] cleanup_net+0x56e/0x800
[ 148.282969][ T6536] process_scheduled_works+0xb6e/0x18c0
[ 148.282988][ T6536] worker_thread+0xa53/0xfc0
[ 148.283009][ T6536] kthread+0x388/0x470
[ 148.283024][ T6536] ret_from_fork+0x51e/0xb90
[ 148.283046][ T6536] ret_from_fork_asm+0x1a/0x30
[ 148.283060][ T6536]
[ 148.283064][ T6536] The buggy address belongs to the object at ffff8880329c8000
[ 148.283064][ T6536] which belongs to the cache kmalloc-cg-4k of size 4096
[ 148.283079][ T6536] The buggy address is located 1232 bytes inside of
[ 148.283079][ T6536] freed 4096-byte region [ffff8880329c8000, ffff8880329c9000)
[ 148.283097][ T6536]
[ 148.283101][ T6536] The buggy address belongs to the physical page:
[ 148.283118][ T6536] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x329c8
[ 148.283135][ T6536] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 148.283149][ T6536] memcg:ffff8880329c9011
[ 148.283157][ T6536] flags: 0x80000000000040(head|node=0|zone=1)
[ 148.283175][ T6536] page_type: f5(slab)
[ 148.283190][ T6536] raw: 0080000000000040 ffff88813fe35500 dead000000000122 0000000000000000
[ 148.283207][ T6536] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880329c9011
[ 148.283222][ T6536] head: 0080000000000040 ffff88813fe35500 dead000000000122 0000000000000000
[ 148.283237][ T6536] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880329c9011
[ 148.283253][ T6536] head: 0080000000000003 ffffea0000ca7201 00000000ffffffff 00000000ffffffff
[ 148.283267][ T6536] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 148.283276][ T6536] page dumped because: kasan: bad access detected
[ 148.283288][ T6536] page_owner tracks the page as allocated
[ 148.283294][ T6536] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6111, tgid 6111 (syz-executor), ts 130465743967, free_ts 127935429632
[ 148.283325][ T6536] post_alloc_hook+0x231/0x280
[ 148.283349][ T6536] get_page_from_freelist+0x28bb/0x2950
[ 148.283366][ T6536] __alloc_frozen_pages_noprof+0x18d/0x380
[ 148.283382][ T6536] allocate_slab+0x77/0x660
[ 148.283400][ T6536] refill_objects+0x334/0x3c0
[ 148.283417][ T6536] __pcs_replace_empty_main+0x35c/0x710
[ 148.283437][ T6536] __kmalloc_cache_noprof+0x44e/0x690
[ 148.283460][ T6536] ipv6_add_dev+0x22e/0x1400
[ 148.283481][ T6536] addrconf_notify+0x771/0x1050
[ 148.283496][ T6536] notifier_call_chain+0x1be/0x400
[ 148.283511][ T6536] register_netdevice+0x1751/0x1d10
[ 148.283527][ T6536] veth_newlink+0x4a4/0xb70
[ 148.283546][ T6536] rtnl_newlink_create+0x329/0xb70
[ 148.283569][ T6536] rtnl_newlink+0x1666/0x1be0
[ 148.283589][ T6536] rtnetlink_rcv_msg+0x7d5/0xbe0
[ 148.283607][ T6536] netlink_rcv_skb+0x232/0x4b0
[ 148.283624][ T6536] page last free pid 6109 tgid 6098 stack trace:
[ 148.283632][ T6536] __free_frozen_pages+0xfe3/0x1170
[ 148.283652][ T6536] __folio_put+0x25d/0x310
[ 148.283671][ T6536] skb_release_data+0x4cb/0x940
[ 148.283683][ T6536] __kfree_skb+0x5d/0x210
[ 148.283706][ T6536] skb_attempt_defer_free+0x4ff/0x760
[ 148.283727][ T6536] tcp_recvmsg_locked+0x2460/0x36b0
[ 148.283741][ T6536] tcp_recvmsg+0x104/0x550
[ 148.283755][ T6536] inet6_recvmsg+0x13e/0x6c0
[ 148.283774][ T6536] sock_recvmsg+0xfa/0x1b0
[ 148.283800][ T6536] sock_read_iter+0x25a/0x330
[ 148.283817][ T6536] vfs_read+0x58b/0xa80
[ 148.283838][ T6536] ksys_read+0x156/0x270
[ 148.283859][ T6536] do_syscall_64+0x14d/0xf80
[ 148.283881][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.283898][ T6536]
[ 148.283902][ T6536] Memory state around the buggy address:
[ 148.283911][ T6536] ffff8880329c8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 148.283923][ T6536] ffff8880329c8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 148.283935][ T6536] >ffff8880329c8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 148.283944][ T6536] ^
[ 148.283953][ T6536] ffff8880329c8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 148.283964][ T6536] ffff8880329c8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 148.283973][ T6536] ==================================================================
[ 148.316417][ T6536] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 148.316436][ T6536] CPU: 1 UID: 0 PID: 6536 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 148.316458][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 148.316469][ T6536] Call Trace:
[ 148.316477][ T6536]
[ 148.316484][ T6536] vpanic+0x56c/0xa60
[ 148.316515][ T6536] ? __pfx_vpanic+0x10/0x10
[ 148.316545][ T6536] panic+0xc5/0xd0
[ 148.316569][ T6536] ? __pfx_panic+0x10/0x10
[ 148.316594][ T6536] ? preempt_schedule_thunk+0x16/0x30
[ 148.316617][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.316637][ T6536] ? preempt_schedule_thunk+0x16/0x30
[ 148.316658][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.316676][ T6536] check_panic_on_warn+0x89/0xb0
[ 148.316697][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.316716][ T6536] end_report+0x73/0x180
[ 148.316733][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.316750][ T6536] kasan_report+0x128/0x150
[ 148.316767][ T6536] ? hpfs_count_dnodes+0x874/0xb70
[ 148.316796][ T6536] hpfs_count_dnodes+0x874/0xb70
[ 148.316820][ T6536] ? __pfx_hpfs_count_dnodes+0x10/0x10
[ 148.316837][ T6536] ? __bread_gfp+0xc3/0x3b0
[ 148.316863][ T6536] ? hpfs_map_sector+0x167/0x3a0
[ 148.316883][ T6536] ? hpfs_map_fnode+0x27e/0x6a0
[ 148.316904][ T6536] ? set_normalized_timespec64+0xf0/0x1a0
[ 148.316933][ T6536] hpfs_read_inode+0xc79/0x1050
[ 148.316957][ T6536] ? __pfx_hpfs_read_inode+0x10/0x10
[ 148.316977][ T6536] ? inode_set_ctime_to_ts+0x116/0x310
[ 148.317003][ T6536] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 148.317030][ T6536] ? rt_spin_unlock+0x160/0x200
[ 148.317054][ T6536] ? hpfs_init_inode+0x216/0x350
[ 148.317076][ T6536] hpfs_fill_super+0x123d/0x1fa0
[ 148.317110][ T6536] ? __pfx_hpfs_fill_super+0x10/0x10
[ 148.317134][ T6536] ? __pfx_snprintf+0x10/0x10
[ 148.317155][ T6536] ? set_blocksize+0x1c8/0x3d0
[ 148.317173][ T6536] ? rt_spin_unlock+0x14f/0x200
[ 148.317196][ T6536] ? sb_set_blocksize+0x11b/0x210
[ 148.317215][ T6536] ? setup_bdev_super+0x4c1/0x5b0
[ 148.317242][ T6536] get_tree_bdev_flags+0x431/0x4f0
[ 148.317269][ T6536] ? __pfx_hpfs_fill_super+0x10/0x10
[ 148.317292][ T6536] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 148.317318][ T6536] ? cap_capable+0x123/0x490
[ 148.317343][ T6536] ? safesetid_security_capable+0xa9/0x1a0
[ 148.317373][ T6536] vfs_get_tree+0x92/0x2a0
[ 148.317400][ T6536] do_new_mount+0x341/0xd30
[ 148.317423][ T6536] ? __pfx_do_new_mount+0x10/0x10
[ 148.317448][ T6536] ? user_path_at+0xd4/0x160
[ 148.317472][ T6536] __se_sys_mount+0x31d/0x420
[ 148.317496][ T6536] ? __pfx___se_sys_mount+0x10/0x10
[ 148.317520][ T6536] ? __x64_sys_mount+0x20/0xc0
[ 148.317541][ T6536] do_syscall_64+0x14d/0xf80
[ 148.317566][ T6536] ? trace_irq_disable+0x3b/0x150
[ 148.317587][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.317605][ T6536] ? clear_bhb_loop+0x40/0x90
[ 148.317625][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.317642][ T6536] RIP: 0033:0x7ff1f404b90a
[ 148.317659][ T6536] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 148.317674][ T6536] RSP: 002b:00007ff1f36ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 148.317694][ T6536] RAX: ffffffffffffffda RBX: 00007ff1f36adee0 RCX: 00007ff1f404b90a
[ 148.317707][ T6536] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007ff1f36adea0
[ 148.317720][ T6536] RBP: 000020000000a000 R08: 00007ff1f36adee0 R09: 0000000003200041
[ 148.317732][ T6536] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 148.317744][ T6536] R13: 00007ff1f36adea0 R14: 0000000000009e21 R15: 0000200000000000
[ 148.317764][ T6536]
[ 148.318142][ T6536] Kernel Offset: disabled