last executing test programs: 156.548382ms ago: executing program 0 (id=1): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 155.632662ms ago: executing program 1 (id=2): syz_read_part_table(0x626, &(0x7f0000000000)="$eJzs272LHGUcB/Df7Mvs7plw+BcYbHKmSWDRJiQgx7GIYAKiSSHRNJJmqyusVlddkRSXWPgCadYiIJ4HaazkEAIh3AUhEEEUwSoRORQEC/FER+Zlz9vjbI61CHw+xTy/Z57fzHeWebac4KFWi0/fiXpeZa29a8WJRlFm+SEpi2F1YUS8sHpu6cW3zj5drhW2/3gvIppZvZxO7nqoHDqTtu56o7+y2oonI+LzI3/+8kgRlMawuG+kcefahWhH1NJ9HztpVGM5FI9U36/xqcNV8U07/rOJA1tYPnYzGd6LcTk9Odc/fymNJ2prd7fz+d/l62/svexIPD+b/Bunbs+3q132bW9wv/dT7bdfexHj4+nViGTrRNE19dbnJrsmmUF+/69z6WfXby2OHnS6G+3q5GCpGeW+vXxxOyvt+ncdmkEuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/j4XlYzcfS+49+kUnPt48vXlyrn/+0trRxTfW7p5tRsQnSdV3vFWOyb+XvjmL/Bunbs+/PcqymM9ng/u9nyOJ3nMfjU+nVztxdOtE1fdKcVz57tXXynm22Y50Bvn9TkRcv7U4etDpbjx75sz7zfggBvHl6PVGRKSXL0anbEzyuFoaX3/4chbRmkE0AAAAAAAAAAAAAAAAAAAA7FhqRWNSv5RGxPiZ7/M6a8WVnaY04vGq/KGVL0Z01xv9ldXeu1cWqoXqi/hh7XAMI+LHO9cu7IrZaBfDep71VXmqiP09y7LpBxpOiuX69MLU1/5J3tg++M+m8k8AAAD//2C3eO4=") syz_io_uring_setup(0x937, 0x0, 0x0, 0x0) 131.802334ms ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 60.389017ms ago: executing program 0 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x8000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@noxattr}]}}) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) 17.543779ms ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000012400)={0x2020}, 0x2020) read$alg(r2, &(0x7f0000000000)=""/74, 0x4a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 23.568213][ T4302] cgroup: Unknown subsys name 'net' [ 23.788155][ T4302] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.086900][ T4302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 24.795876][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.798809][ T4324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.800135][ T4324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.801590][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.802984][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 24.804212][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.821880][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.823912][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.825157][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.826951][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.828617][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.830169][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.831464][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.832626][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.833856][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.835602][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.836789][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.838244][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.839808][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.841059][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.845990][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.847285][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.848423][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 24.849609][ T4333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 24.851050][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 24.851164][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 24.853997][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 24.855208][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 24.856921][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.857002][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.911611][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 24.971122][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.972386][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.973845][ T4319] device bridge_slave_0 entered promiscuous mode [ 24.981493][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.982749][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.984234][ T4319] device bridge_slave_1 entered promiscuous mode [ 25.008305][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 25.011417][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.013380][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 25.028897][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.031600][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 25.055997][ T4319] team0: Port device team_slave_0 added [ 25.059570][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.060638][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.062052][ T4320] device bridge_slave_0 entered promiscuous mode [ 25.071650][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072832][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.074294][ T4325] device bridge_slave_0 entered promiscuous mode [ 25.077801][ T4319] team0: Port device team_slave_1 added [ 25.081911][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.083087][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.084616][ T4320] device bridge_slave_1 entered promiscuous mode [ 25.086166][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.087237][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.088765][ T4325] device bridge_slave_1 entered promiscuous mode [ 25.108027][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109215][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.110721][ T4323] device bridge_slave_0 entered promiscuous mode [ 25.118680][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.119764][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.123840][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.128225][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.131172][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.136862][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.137971][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.139374][ T4323] device bridge_slave_1 entered promiscuous mode [ 25.146124][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.148632][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.150326][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.151466][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.155673][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.161507][ T4320] team0: Port device team_slave_0 added [ 25.163332][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.165961][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.167739][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 25.172303][ T4320] team0: Port device team_slave_1 added [ 25.256713][ T4319] device hsr_slave_0 entered promiscuous mode [ 25.295664][ T4319] device hsr_slave_1 entered promiscuous mode [ 25.358164][ T4323] team0: Port device team_slave_0 added [ 25.362034][ T4325] team0: Port device team_slave_0 added [ 25.363784][ T4325] team0: Port device team_slave_1 added [ 25.369120][ T4323] team0: Port device team_slave_1 added [ 25.370429][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.371586][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.375911][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.385109][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.386846][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.391028][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.402267][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.403366][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.407828][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.413316][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.414490][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.418584][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.421214][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.422308][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.426351][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.428809][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.429956][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.434235][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.438355][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.439448][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.440899][ T4326] device bridge_slave_0 entered promiscuous mode [ 25.448431][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.449689][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.451383][ T4326] device bridge_slave_1 entered promiscuous mode [ 25.517004][ T4320] device hsr_slave_0 entered promiscuous mode [ 25.555686][ T4320] device hsr_slave_1 entered promiscuous mode [ 25.605585][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.606856][ T4320] Cannot create hsr debugfs directory [ 25.623491][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.634591][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.676609][ T4323] device hsr_slave_0 entered promiscuous mode [ 25.715654][ T4323] device hsr_slave_1 entered promiscuous mode [ 25.755600][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.756721][ T4323] Cannot create hsr debugfs directory [ 25.796553][ T4325] device hsr_slave_0 entered promiscuous mode [ 25.835704][ T4325] device hsr_slave_1 entered promiscuous mode [ 25.875565][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.876831][ T4325] Cannot create hsr debugfs directory [ 25.895156][ T4326] team0: Port device team_slave_0 added [ 25.902794][ T4326] team0: Port device team_slave_1 added [ 25.932676][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.933931][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.938246][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.963821][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.964933][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.971323][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.036696][ T4326] device hsr_slave_0 entered promiscuous mode [ 26.075745][ T4326] device hsr_slave_1 entered promiscuous mode [ 26.115574][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.116771][ T4326] Cannot create hsr debugfs directory [ 26.121486][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.158350][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.207115][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.261609][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.297838][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.346705][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.406152][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.446746][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.503162][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.540267][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.579678][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.619885][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.656755][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.707360][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.750510][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.786732][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.866525][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.885956][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 26.887039][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 26.888077][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 26.889083][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 26.890051][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 26.899092][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.951010][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.990301][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.070732][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.083125][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.085278][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.096340][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.098543][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.102161][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.105278][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.110073][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.111807][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.113459][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.114700][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.121295][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.125163][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.127667][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.129035][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.130534][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.132106][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.134023][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.135150][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.139993][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.143938][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.145202][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.150855][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.152207][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.153648][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.155150][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.157641][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.159222][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.160693][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.161831][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.174000][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.175634][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.177033][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.178298][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.179651][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.181206][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.182704][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.183844][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.185200][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.187808][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.189474][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.190813][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.191917][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.193292][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.194922][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.198243][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.199383][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.200772][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.202213][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.210989][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.212623][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.214307][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.217571][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.219113][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.221038][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.222517][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.224075][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.227294][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.228744][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.230129][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.231278][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.232665][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.242925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.244647][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.249147][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.250813][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.257691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.259331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.260831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.262507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.264113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.272210][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.277405][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.279230][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.280709][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.282173][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.283545][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.287901][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.290254][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.292609][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.294032][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.295371][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.300473][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.301993][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.303349][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.304381][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.306363][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.308032][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.309587][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.311344][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.312844][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.314229][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.322750][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.324298][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.326060][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.328692][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.336526][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.338071][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.339582][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.341196][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.348998][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.353093][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.354715][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.356413][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.357933][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.359303][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.360903][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.362418][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.363496][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.365341][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.371603][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.373133][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.379575][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.381681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.385383][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.397383][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.399476][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.401085][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.417781][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.419650][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.431183][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.433420][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.437416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.439085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.440760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.442268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.444021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.473671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.475011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.486087][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.497172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.498429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.508278][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.525020][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.527124][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.532636][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.533907][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.542624][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.549720][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.550965][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.553261][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.557335][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.558986][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.570964][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.572525][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.574431][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.577060][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.584343][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.589433][ T4323] device veth0_vlan entered promiscuous mode [ 27.592327][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.593567][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.594791][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.597272][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.599460][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.600963][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.608873][ T4323] device veth1_vlan entered promiscuous mode [ 27.612158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.613746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.615331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.623783][ T4325] device veth0_vlan entered promiscuous mode [ 27.626376][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.628272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.630436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.632052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.646225][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.647962][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.650030][ T4325] device veth1_vlan entered promiscuous mode [ 27.653942][ T4319] device veth0_vlan entered promiscuous mode [ 27.662608][ T4319] device veth1_vlan entered promiscuous mode [ 27.675249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.678027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.679464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.680961][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.682391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.683885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.690567][ T4323] device veth0_macvtap entered promiscuous mode [ 27.692985][ T4323] device veth1_macvtap entered promiscuous mode [ 27.700435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.701904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.703326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.704774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.709019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.710515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.711964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.715225][ T4320] device veth0_vlan entered promiscuous mode [ 27.729021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.730654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.732052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.733680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.739161][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.740773][ T4320] device veth1_vlan entered promiscuous mode [ 27.743014][ T4319] device veth0_macvtap entered promiscuous mode [ 27.750023][ T4325] device veth0_macvtap entered promiscuous mode [ 27.751387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.752812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.754249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.757963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.759492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.761075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.762661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.771522][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.774100][ T4325] device veth1_macvtap entered promiscuous mode [ 27.776333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.777817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.779317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.780828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.783438][ T4319] device veth1_macvtap entered promiscuous mode [ 27.786845][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.788289][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.789493][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.790803][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.802737][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.804292][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.806285][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.807763][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.809275][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.810770][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.812089][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.814751][ T4326] device veth0_vlan entered promiscuous mode [ 27.824766][ T4320] device veth0_macvtap entered promiscuous mode [ 27.831068][ T4326] device veth1_vlan entered promiscuous mode [ 27.832947][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.834478][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.838213][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.840603][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.842295][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.843930][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.848806][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.851189][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.857049][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.858515][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.859909][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.861702][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.863289][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.864792][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.868840][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.870435][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.872462][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.874974][ T4320] device veth1_macvtap entered promiscuous mode [ 27.878235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.879800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.881258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.882830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.884962][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.889483][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.890956][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.892541][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.894753][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.899417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.900932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.905443][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.909615][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.911203][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.912920][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.914456][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.916418][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.918883][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.920411][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.921712][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.923059][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.924341][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.931741][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.933185][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.934621][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.936444][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.942544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.944080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.947604][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.949331][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.950853][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.952360][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.953839][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.956116][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.958438][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.965360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.967405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.974701][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.977164][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.979100][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.980495][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.981849][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.983230][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.991643][ T4326] device veth0_macvtap entered promiscuous mode [ 28.002421][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.031038][ T4326] device veth1_macvtap entered promiscuous mode [ 28.054978][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.056738][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.059785][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.059946][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.060941][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.063409][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.068877][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.070055][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.071707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.076557][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.078299][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.079908][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.081412][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.083062][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.084738][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.087903][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.089548][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.092225][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.093468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.095140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.107105][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.108409][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.112087][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.113708][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.115238][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.119907][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.121408][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.122990][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.124514][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.126660][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.128880][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.130052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.131578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.133215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.137936][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.139155][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.143500][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.144853][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.146506][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.147846][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.149873][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.163596][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.164798][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.167301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.174454][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.181462][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.184354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.190688][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.191981][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.204381][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.213805][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.215033][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.223872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.279365][ T4403] loop1: detected capacity change from 0 to 2048 [ 28.363481][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.364741][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.366479][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.368804][ T4403] loop1: p1 p2 p3 [ 28.368804][ T4403] p1: [ 28.372086][ T4403] loop1: p2 size 458752 extends beyond EOD, truncated [ 28.376136][ T4403] loop1: p3 start 65280 is beyond EOD, truncated [ 28.810282][ T4418] loop0: detected capacity change from 0 to 16 [ 28.878755][ T4418] erofs: (device loop0): mounted with root inode @ nid 36. [ 28.928446][ T4418] syz.0.6: attempt to access beyond end of device [ 28.928446][ T4418] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 28.930872][ T4418] syz.0.6: attempt to access beyond end of device [ 28.930872][ T4418] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 28.945777][ T4418] ================================================================== [ 28.947057][ T4418] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 28.948419][ T4418] Read of size 4096 at addr ffff0000dcd60000 by task syz.0.6/4418 [ 28.949729][ T4418] [ 28.950088][ T4418] CPU: 1 PID: 4418 Comm: syz.0.6 Not tainted syzkaller #0 [ 28.951240][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 28.952830][ T4418] Call trace: [ 28.953456][ T4418] dump_backtrace+0x1c0/0x1ec [ 28.954254][ T4418] show_stack+0x2c/0x3c [ 28.954894][ T4418] __dump_stack+0x30/0x40 [ 28.955570][ T4418] dump_stack_lvl+0xf4/0x15c [ 28.956334][ T4418] print_address_description+0x88/0x218 [ 28.957225][ T4418] print_report+0x50/0x68 [ 28.957967][ T4418] kasan_report+0xa8/0xfc [ 28.958686][ T4418] kasan_check_range+0x258/0x290 [ 28.959495][ T4418] memcpy+0x48/0x90 [ 28.960115][ T4418] z_erofs_transform_plain+0x3a4/0x490 [ 28.961033][ T4418] z_erofs_decompress+0x9c/0xd4 [ 28.961850][ T4418] z_erofs_decompress_queue+0x100c/0x1b40 [ 28.962783][ T4418] z_erofs_runqueue+0x14d4/0x1694 [ 28.963596][ T4418] z_erofs_read_folio+0x2d8/0x5c8 [ 28.964425][ T4418] filemap_read_folio+0x134/0x384 [ 28.965265][ T4418] filemap_read+0x12cc/0x2104 [ 28.966048][ T4418] generic_file_read_iter+0xf8/0x5c4 [ 28.966949][ T4418] vfs_read+0x3d4/0x7f0 [ 28.967623][ T4418] ksys_read+0x12c/0x224 [ 28.968332][ T4418] __arm64_sys_read+0x7c/0x90 [ 28.969095][ T4418] invoke_syscall+0x98/0x2b4 [ 28.969929][ T4418] el0_svc_common+0x138/0x258 [ 28.970715][ T4418] do_el0_svc+0x58/0x130 [ 28.971445][ T4418] el0_svc+0x58/0x128 [ 28.972204][ T4418] el0t_64_sync_handler+0x84/0xf0 [ 28.973044][ T4418] el0t_64_sync+0x18c/0x190 [ 28.973825][ T4418] [ 28.974217][ T4418] Allocated by task 4398: [ 28.974918][ T4418] kasan_set_track+0x4c/0x80 [ 28.975699][ T4418] kasan_save_alloc_info+0x24/0x30 [ 28.976546][ T4418] __kasan_slab_alloc+0x70/0x88 [ 28.977377][ T4418] slab_post_alloc_hook+0x74/0x430 [ 28.978237][ T4418] kmem_cache_alloc_bulk+0x41c/0x4e4 [ 28.979047][ T4418] mas_alloc_nodes+0x484/0x754 [ 28.979794][ T4418] mas_preallocate+0x13c/0x310 [ 28.980518][ T4418] mmap_region+0xc4c/0x1900 [ 28.981214][ T4418] do_mmap+0x9cc/0x1138 [ 28.981914][ T4418] vm_mmap_pgoff+0x190/0x294 [ 28.982662][ T4418] vm_mmap+0x8c/0xb4 [ 28.983317][ T4418] elf_map+0xec/0x224 [ 28.983936][ T4418] load_elf_interp+0x3c4/0x924 [ 28.984674][ T4418] load_elf_binary+0x124c/0x1b5c [ 28.985491][ T4418] bprm_execve+0x804/0x1558 [ 28.986269][ T4418] kernel_execve+0x6c0/0x7b8 [ 28.987044][ T4418] call_usermodehelper_exec_async+0x1f8/0x39c [ 28.987989][ T4418] ret_from_fork+0x10/0x20 [ 28.988701][ T4418] [ 28.989109][ T4418] Freed by task 39: [ 28.989683][ T4418] kasan_set_track+0x4c/0x80 [ 28.990409][ T4418] kasan_save_free_info+0x38/0x5c [ 28.991194][ T4418] ____kasan_slab_free+0x148/0x1b0 [ 28.991990][ T4418] __kasan_slab_free+0x18/0x28 [ 28.992713][ T4418] slab_free_freelist_hook+0x16c/0x1e8 [ 28.993589][ T4418] kmem_cache_free+0x118/0x314 [ 28.994336][ T4418] mt_free_rcu+0x28/0x38 [ 28.995003][ T4418] rcu_core+0x828/0x18b0 [ 28.995735][ T4418] rcu_core_si+0x10/0x1c [ 28.996458][ T4418] handle_softirqs+0x318/0xc60 [ 28.997248][ T4418] __do_softirq+0x14/0x20 [ 28.997975][ T4418] [ 28.998332][ T4418] Last potentially related work creation: [ 28.999232][ T4418] kasan_save_stack+0x40/0x70 [ 28.999951][ T4418] __kasan_record_aux_stack+0xc0/0xdc [ 29.000789][ T4418] kasan_record_aux_stack_noalloc+0x14/0x20 [ 29.001814][ T4418] call_rcu+0x100/0x94c [ 29.002523][ T4418] mas_replace+0x5f0/0xa14 [ 29.003265][ T4418] mas_wr_modify+0x1c58/0x41cc [ 29.004081][ T4418] mas_wr_store_entry+0x754/0xb28 [ 29.004898][ T4418] mas_store_prealloc+0x240/0x354 [ 29.005725][ T4418] vma_mas_store+0x194/0x430 [ 29.006467][ T4418] __vma_adjust+0xf18/0x1724 [ 29.007210][ T4418] __split_vma+0x324/0x444 [ 29.007864][ T4418] do_mas_align_munmap+0x2ec/0xf38 [ 29.008694][ T4418] __vm_munmap+0x25c/0x38c [ 29.009385][ T4418] vm_munmap+0x2c/0x3c [ 29.010042][ T4418] elf_map+0x148/0x224 [ 29.010682][ T4418] load_elf_interp+0x3c4/0x924 [ 29.011462][ T4418] load_elf_binary+0x124c/0x1b5c [ 29.012237][ T4418] bprm_execve+0x804/0x1558 [ 29.012991][ T4418] kernel_execve+0x6c0/0x7b8 [ 29.013781][ T4418] call_usermodehelper_exec_async+0x1f8/0x39c [ 29.014756][ T4418] ret_from_fork+0x10/0x20 [ 29.015498][ T4418] [ 29.015897][ T4418] The buggy address belongs to the object at ffff0000dcd60000 [ 29.015897][ T4418] which belongs to the cache maple_node of size 256 [ 29.018075][ T4418] The buggy address is located 0 bytes inside of [ 29.018075][ T4418] 256-byte region [ffff0000dcd60000, ffff0000dcd60100) [ 29.020196][ T4418] [ 29.020551][ T4418] The buggy address belongs to the physical page: [ 29.021526][ T4418] page:00000000b9601d92 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000dcd61e00 pfn:0x11cd60 [ 29.023432][ T4418] head:00000000b9601d92 order:1 compound_mapcount:0 compound_pincount:0 [ 29.024774][ T4418] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 29.026062][ T4418] raw: 05ffc00000010200 fffffc0003734988 fffffc0003735888 ffff0000c000d680 [ 29.027485][ T4418] raw: ffff0000dcd61e00 000000000010000f 00000001ffffffff 0000000000000000 [ 29.028824][ T4418] page dumped because: kasan: bad access detected [ 29.029855][ T4418] [ 29.030230][ T4418] Memory state around the buggy address: [ 29.031122][ T4418] ffff0000dcd5ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.032379][ T4418] ffff0000dcd5ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.033680][ T4418] >ffff0000dcd60000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.034949][ T4418] ^ [ 29.035585][ T4418] ffff0000dcd60080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.036927][ T4418] ffff0000dcd60100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.038256][ T4418] ================================================================== [ 29.039617][ T4418] Disabling lock debugging due to kernel taint [ 29.041003][ T4418] syz.0.6: attempt to access beyond end of device [ 29.041003][ T4418] loop0: rw=0, sector=1056, nr_sectors = 8 limit=16 [ 29.085540][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 29.085997][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 29.086594][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 29.087553][ T4335] Bluetooth: hci2: command 0x041b tx timeout [ 29.088540][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 29.168947][ T4310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.246472][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 29.249821][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 31.125515][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 31.125885][ T4324] Bluetooth: hci3: command 0x040f tx timeout [ 31.126505][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 31.135744][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 31.135759][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 33.206120][ T4324] Bluetooth: hci0: command 0x0419 tx timeout [ 33.207149][ T4324] Bluetooth: hci3: command 0x0419 tx timeout [ 33.208071][ T4324] Bluetooth: hci1: command 0x0419 tx timeout [ 33.215971][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 33.216054][ T4324] Bluetooth: hci4: command 0x0419 tx timeout