last executing test programs: 5.16987298s ago: executing program 2 (id=258): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 5.135973061s ago: executing program 2 (id=259): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 3.719558545s ago: executing program 2 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.598090102s ago: executing program 2 (id=268): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) 3.558169764s ago: executing program 2 (id=269): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086", 0x17, 0x24040050, &(0x7f0000000040)={0xc9, 0x17, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.741951157s ago: executing program 2 (id=273): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xaa}], 0x1, 0x2000, 0x0) 2.074685632s ago: executing program 1 (id=291): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) fsetxattr$security_evm(r0, &(0x7f0000000140), 0x0, 0x0, 0x1) 1.992618626s ago: executing program 1 (id=293): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r2 = socket(0xa, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.205358467s ago: executing program 1 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000295e80c20000015db073ba0f078100310008004700001c006320"], 0x32) 614.127178ms ago: executing program 0 (id=303): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x83, 0x8, 0x0, 0xb, "c1d533d6012416d3"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x1) 608.686468ms ago: executing program 1 (id=304): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x81, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x9d, 0x10001, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xd) ptrace$pokeuser(0x6, r2, 0x358, 0xfffffffffffffff8) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0xffff) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) getpid() r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a36"], 0x1c}}, 0x0) 582.67444ms ago: executing program 0 (id=305): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xffffffffffffff6d, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r0, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 510.348853ms ago: executing program 4 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008"], 0x4c}}, 0x0) 510.242684ms ago: executing program 3 (id=307): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x2, 0x0) syz_open_procfs(r0, 0x0) 498.188284ms ago: executing program 0 (id=308): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1d, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0) 497.023844ms ago: executing program 4 (id=309): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) rt_tgsigqueueinfo(r0, r1, 0x25, &(0x7f0000000100)={0x35, 0xc, 0xdd9}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x4100) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 470.607846ms ago: executing program 1 (id=310): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 390.32272ms ago: executing program 4 (id=311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}]}, 0x10) 390.21949ms ago: executing program 0 (id=312): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2}, 0x20) 390.12683ms ago: executing program 3 (id=313): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56af, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x1, 0xa0002f5}) syz_clone(0x0, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0) 380.40546ms ago: executing program 4 (id=314): openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 344.754932ms ago: executing program 0 (id=315): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) fcntl$setstatus(r1, 0x4, 0x2000) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) shutdown(r0, 0x1) 270.348056ms ago: executing program 4 (id=316): r0 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x40) pwrite64(r0, 0x0, 0x0, 0xfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x7f7) 270.167156ms ago: executing program 3 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 256.552087ms ago: executing program 4 (id=318): syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 180.59053ms ago: executing program 3 (id=319): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10040, &(0x7f0000000400)=ANY=[], 0x1, 0x351, &(0x7f0000000d80)="$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") 98.287835ms ago: executing program 1 (id=320): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x1800004, &(0x7f0000000800)=ANY=[], 0x1, 0x19e, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f0000003f00)={0x2020}, 0x2020) 81.066916ms ago: executing program 3 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, 0x0}, 0x20) 80.226216ms ago: executing program 0 (id=322): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 3 (id=323): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000eb072b9ff13f9c24543a1529929bea41be75fedf30f7e325d0b9fee01e3c3a12f30201fad033ff278a6ebe256984af4d307d4a51e80ed5ac2103553ea2031a40"], 0x1, 0x192, &(0x7f0000009480)="$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") write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 28.567546][ T4308] cgroup: Unknown subsys name 'net' [ 28.784503][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.039379][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.795543][ T4321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.797936][ T4323] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.799571][ T4323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.801133][ T4323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.803410][ T4323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.804905][ T4323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.806340][ T4323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.808015][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.810195][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.830520][ T4323] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.833160][ T4323] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.840952][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.842756][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.844333][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.846454][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.847686][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.849438][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.850799][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.850862][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.852347][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.854027][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.854409][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.855829][ T4332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.856847][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.858038][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.859717][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.860566][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.880048][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.881638][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.884104][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.936698][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 30.013244][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 30.033618][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.035657][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.059380][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.060582][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.062914][ T4320] device bridge_slave_0 entered promiscuous mode [ 30.066478][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.067670][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.069256][ T4320] device bridge_slave_1 entered promiscuous mode [ 30.078231][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.079445][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.081049][ T4324] device bridge_slave_0 entered promiscuous mode [ 30.090576][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.092565][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.093690][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.095317][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.098265][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.099418][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.100894][ T4324] device bridge_slave_1 entered promiscuous mode [ 30.108355][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.110064][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.111257][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.112945][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.116617][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.129558][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.140541][ T4320] team0: Port device team_slave_0 added [ 30.143570][ T4320] team0: Port device team_slave_1 added [ 30.148348][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.152699][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.154823][ T4324] team0: Port device team_slave_0 added [ 30.159067][ T4324] team0: Port device team_slave_1 added [ 30.166282][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.167398][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.168926][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.175496][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.176543][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.180778][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.184761][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.190659][ T4328] team0: Port device team_slave_0 added [ 30.192510][ T4328] team0: Port device team_slave_1 added [ 30.195421][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.196498][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.198019][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.203019][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.204071][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.208250][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.216206][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.217378][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.222346][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.230308][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.231368][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.236138][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.243777][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.244944][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.249447][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.252329][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.260662][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.264554][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.265618][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.269723][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.283732][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.285029][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.286641][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.288562][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.289676][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.291304][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.332850][ T4320] device hsr_slave_0 entered promiscuous mode [ 30.371950][ T4320] device hsr_slave_1 entered promiscuous mode [ 30.412821][ T4329] team0: Port device team_slave_0 added [ 30.414695][ T4329] team0: Port device team_slave_1 added [ 30.482740][ T4324] device hsr_slave_0 entered promiscuous mode [ 30.521815][ T4324] device hsr_slave_1 entered promiscuous mode [ 30.571782][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.573179][ T4324] Cannot create hsr debugfs directory [ 30.582916][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.584077][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.588189][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.597767][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.598866][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.604086][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.608461][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.616360][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.662817][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.701835][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.741699][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.742850][ T4328] Cannot create hsr debugfs directory [ 30.757360][ T4330] team0: Port device team_slave_0 added [ 30.758997][ T4330] team0: Port device team_slave_1 added [ 30.780572][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.781842][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.786584][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.823004][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.861813][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.911735][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.913004][ T4329] Cannot create hsr debugfs directory [ 30.922354][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.923507][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.927685][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.012931][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.061959][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.101689][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.102859][ T4330] Cannot create hsr debugfs directory [ 31.130749][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.172820][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.221925][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.262909][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.310638][ T4324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.374055][ T4324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.413203][ T4324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.458148][ T4324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.516530][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.561806][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.617279][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.691287][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.750416][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.802840][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.835904][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.842071][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 31.862720][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.912673][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.922028][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 31.922083][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 31.923039][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 31.924097][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 31.957245][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.992817][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.038326][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.087067][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.104379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.106667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.117464][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.120578][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.133546][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.135206][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.136848][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.138099][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.144484][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.145996][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.147697][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.149624][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.150783][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.153602][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.158715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.160144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.167074][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.171141][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.183537][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.186133][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.188005][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.189582][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.197517][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.199485][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.201187][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.204731][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.206329][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.207762][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.208988][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.210504][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.218180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.219578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.224741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.226419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.230088][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.234453][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.235994][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.237458][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.238646][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.240051][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.242946][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.244336][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.245563][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.247020][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.248625][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.250031][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.251210][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.255235][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.257411][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.259004][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.260407][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.262993][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.264772][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.266140][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.267372][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.279192][ T4324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.280997][ T4324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.286737][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.288311][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.289887][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.291492][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.293845][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.295669][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.297244][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.298746][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.300146][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.302005][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.304392][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.305886][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.314672][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.316245][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.317822][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.319602][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.321164][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.323589][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.325567][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.327127][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.328754][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.330217][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.334004][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.339283][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.340520][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.342353][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.343991][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.345260][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.351193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.358079][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.359648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.376708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.378468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.379959][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.382650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.384193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.392317][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.394124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.395970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.397503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.399194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.400903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.408085][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.412398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.414129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.418930][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.424840][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.430498][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.432191][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.446125][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.447452][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.450583][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.452315][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.453694][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.454890][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.456489][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.466860][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.479799][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.483528][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.484814][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.486072][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.487808][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.489257][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.490390][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.501012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.502805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.504293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.524867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.530305][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.532202][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.533631][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.535134][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.540684][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.548267][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.549999][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.556720][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.558504][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.560069][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.565263][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.567315][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.569012][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.570604][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.573026][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.578107][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.579665][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.581176][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.586557][ T4324] device veth0_vlan entered promiscuous mode [ 32.589935][ T4324] device veth1_vlan entered promiscuous mode [ 32.594073][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.595649][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.597185][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.598868][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.600343][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.606019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.607356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.610331][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.630157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.631982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.633238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.639914][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.647712][ T4324] device veth0_macvtap entered promiscuous mode [ 32.649690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.651297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.653657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.656319][ T4320] device veth0_vlan entered promiscuous mode [ 32.666660][ T4324] device veth1_macvtap entered promiscuous mode [ 32.670958][ T4320] device veth1_vlan entered promiscuous mode [ 32.676698][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.678157][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.679642][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.681238][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.697117][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.698703][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.700320][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.707086][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.709862][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.713478][ T4324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715002][ T4324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.716451][ T4324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.718005][ T4324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721211][ T4328] device veth0_vlan entered promiscuous mode [ 32.723438][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.725017][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.726530][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.728358][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.729994][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.734849][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.739496][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.740862][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.748948][ T4328] device veth1_vlan entered promiscuous mode [ 32.750871][ T4320] device veth0_macvtap entered promiscuous mode [ 32.756063][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.757552][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.759161][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.760715][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.765374][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.778886][ T4320] device veth1_macvtap entered promiscuous mode [ 32.780327][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.782055][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.783573][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.784972][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.808015][ T4328] device veth0_macvtap entered promiscuous mode [ 32.811060][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.812936][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.814416][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.826306][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.828047][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.830333][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.834861][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.836646][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.838350][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.840730][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.843732][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.845181][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.846793][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.848337][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.853775][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.853940][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.855012][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.856754][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.860151][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.861382][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.867867][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.869498][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.874670][ T4328] device veth1_macvtap entered promiscuous mode [ 32.876136][ T4330] device veth0_vlan entered promiscuous mode [ 32.881256][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.883427][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.884865][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.886277][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.890575][ T4330] device veth1_vlan entered promiscuous mode [ 32.899274][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.900786][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.904940][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.906491][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.909617][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.910821][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.913649][ T4329] device veth0_vlan entered promiscuous mode [ 32.915881][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.917322][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.918763][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.920314][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.927084][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.928869][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.930596][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.933930][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.936386][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.939556][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.941228][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.955284][ T4330] device veth0_macvtap entered promiscuous mode [ 32.958388][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.959971][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.966651][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.968731][ T4330] device veth1_macvtap entered promiscuous mode [ 32.973746][ T4329] device veth1_vlan entered promiscuous mode [ 32.976930][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.978687][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.980458][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.983345][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.985762][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.986944][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.988635][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.990181][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.995595][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.002707][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.004431][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.006089][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.007939][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.009668][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.011481][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.015819][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.021874][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.023154][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.030239][ T4329] device veth0_macvtap entered promiscuous mode [ 33.035552][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.037088][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.041241][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.045429][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.046957][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.049006][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.056940][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.058319][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.059797][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.061308][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.069617][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.071226][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.076373][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.078090][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.079749][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.081384][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.084844][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.087418][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.088764][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.090146][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.095065][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.131649][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.133182][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.134840][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.146963][ T4329] device veth1_macvtap entered promiscuous mode [ 33.151027][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.152345][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.156760][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.163211][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.164415][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.169417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.226389][ T4406] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.333402][ T4406] loop1: detected capacity change from 0 to 4096 [ 33.497280][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.499480][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.503158][ T4406] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 33.510623][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.512548][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.514405][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.515914][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.518106][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.520022][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.527703][ T4406] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 33.529986][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.531185][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.542765][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.554926][ T4404] ntfs3: loop1: ino=5, "/" directory corrupted [ 33.568803][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.570217][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.573963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.583957][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.585810][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.597189][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.599351][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.600047][ T4408] loop3: detected capacity change from 0 to 1024 [ 33.601071][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.604191][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.605918][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.607866][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.610372][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.621023][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.622912][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624507][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626639][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.639201][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.640910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.650734][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.653351][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.654626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.675408][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.676882][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.687468][ T233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.719738][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.721220][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.724921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.737693][ T39] hfsplus: b-tree write err: -5, ino 3 [ 33.739300][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.740507][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.742830][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.784467][ T4410] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 33.823662][ T4412] loop4: detected capacity change from 0 to 2048 [ 33.837356][ T4416] loop0: detected capacity change from 0 to 2048 [ 33.860716][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 33.866610][ T4416] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 33.866829][ T4412] Alternate GPT is invalid, using primary GPT. [ 33.869467][ T4412] loop4: p2 p3 p7 [ 33.921822][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 33.969656][ T4420] fuse: Bad value for 'rootmode' [ 34.031751][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 34.032820][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 34.033866][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 34.034914][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 34.100477][ T4424] netlink: 'syz.0.8': attribute type 29 has an invalid length. [ 34.102147][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 34.242502][ T4421] binder: 4419:4421 ioctl c0306201 200001c0 returned -14 [ 34.248560][ T4426] usb usb8: usbfs: process 4426 (syz.0.8) did not claim interface 0 before use [ 34.293386][ T4426] loop0: detected capacity change from 0 to 256 [ 34.297276][ T4426] ======================================================= [ 34.297276][ T4426] WARNING: The mand mount option has been deprecated and [ 34.297276][ T4426] and is ignored by this kernel. Remove the mand [ 34.297276][ T4426] option from the mount to silence this warning. [ 34.297276][ T4426] ======================================================= [ 34.337814][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 34.339670][ T4424] netlink: 'syz.0.8': attribute type 29 has an invalid length. [ 34.340866][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 34.364248][ T4415] loop2: detected capacity change from 0 to 32768 [ 34.450383][ T4432] loop4: detected capacity change from 0 to 256 [ 34.506271][ T4432] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 34.933787][ T4415] JBD2: Ignoring recovery information on journal [ 35.245345][ T4415] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 35.612591][ T4441] loop3: detected capacity change from 0 to 16 [ 35.814317][ T4441] erofs: (device loop3): mounted with root inode @ nid 36. [ 35.914644][ T4441] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 35.916424][ T4441] syz.3.10: attempt to access beyond end of device [ 35.916424][ T4441] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 35.920562][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.922403][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.924200][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.926095][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.929741][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.931499][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.934195][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.935857][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.938624][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.940299][ T4441] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 35.977595][ T4422] udevd[4422]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 36.002855][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 36.016676][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 36.044808][ T4446] udevd[4446]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 36.050437][ T4328] ocfs2: Unmounting device (7,2) on (node local) [ 36.082843][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 36.082859][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 36.085185][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 36.085217][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 36.098012][ T4422] udevd[4422]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 36.139934][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 36.147982][ T4446] udevd[4446]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 36.479356][ T4452] loop2: detected capacity change from 0 to 40427 [ 36.488867][ T4452] F2FS-fs (loop2): Unrecognized mount option "backg|o—nd_gc=sync" or missing value [ 36.518895][ T4462] loop3: detected capacity change from 0 to 40427 [ 36.523704][ T4462] F2FS-fs (loop3): Unrecognized mount option "backg|o—nd_gc=sync" or missing value [ 36.563591][ T4312] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.604250][ T4469] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 36.612200][ T4470] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 36.613648][ T4470] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 36.627406][ T4470] EXT4-fs (loop2): 1 truncate cleaned up [ 36.634926][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.650093][ T4469] bond0: (slave veth3): Enslaving as an active interface with an up link [ 36.684074][ T4470] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 36.727856][ T4469] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 36.731115][ T4469] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 36.801015][ T4473] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 36.804871][ T4473] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 36.816665][ T4473] EXT4-fs (loop3): 1 truncate cleaned up [ 36.833868][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.877593][ T4447] F2FS-fs (loop4): Unrecognized mount option "/dev/vga_arbiter" or missing value [ 36.905513][ T4473] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 37.442391][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 37.500338][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 37.553853][ T4488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 38.073881][ T4446] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.082400][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 38.148316][ T4507] netlink: 'syz.4.25': attribute type 29 has an invalid length. [ 38.156760][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 38.160147][ T4507] netlink: 'syz.4.25': attribute type 29 has an invalid length. [ 38.161904][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 38.163005][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 38.164549][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 38.171967][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 38.172954][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 38.185314][ T4507] usb usb8: usbfs: process 4507 (syz.4.25) did not claim interface 0 before use [ 38.235670][ T4515] tipc: Started in network mode [ 38.236743][ T4515] tipc: Node identity 5671cc2c7b16, cluster identity 4711 [ 38.238176][ T4515] tipc: Enabled bearer , priority 0 [ 38.240277][ T4515] +: renamed from syzkaller0 [ 38.274230][ T4515] tipc: Disabling bearer [ 38.396964][ T4518] set_capacity_and_notify: 6 callbacks suppressed [ 38.396974][ T4518] loop4: detected capacity change from 0 to 64 [ 38.937957][ T4523] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 39.024387][ T4525] loop4: detected capacity change from 0 to 1024 [ 39.798536][ T4534] loop2: detected capacity change from 0 to 256 [ 39.810545][ T4534] process 'syz.2.33' launched '/dev/fd/7' with NULL argv: empty string added [ 39.919128][ T4541] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 39.921298][ T4526] Bluetooth: hci5: Frame reassembly failed (-84) [ 39.987339][ T4536] loop4: detected capacity change from 0 to 32768 [ 40.015581][ T4539] loop1: detected capacity change from 0 to 32768 [ 40.028132][ T4536] XFS (loop4): Mounting V5 Filesystem [ 40.028559][ T4534] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 40.049045][ T4536] XFS (loop4): Ending clean mount [ 40.054164][ T4536] XFS (loop4): Quotacheck needed: Please wait. [ 40.076966][ T4536] XFS (loop4): Quotacheck: Done. [ 40.076968][ T4534] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 40.116452][ T4550] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 40.317517][ T4554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'. [ 40.340224][ T4554] loop2: detected capacity change from 0 to 2048 [ 40.377870][ T4536] Bluetooth: MGMT ver 1.22 [ 40.824837][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.826853][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.915132][ T4330] XFS (loop4): Unmounting Filesystem [ 41.156324][ T4567] loop1: detected capacity change from 0 to 512 [ 41.163314][ T4567] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 41.169019][ T4567] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 41.179527][ T4567] EXT4-fs (loop1): 1 truncate cleaned up [ 41.180629][ T4567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.186893][ T4567] EXT4-fs: group quota file already specified [ 41.207042][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 41.284057][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 41.285781][ T4576] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 41.321239][ T4576] loop4: detected capacity change from 0 to 8192 [ 41.335553][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.337911][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.339295][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.341343][ T4579] device bridge_slave_0 left promiscuous mode [ 41.343339][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.368349][ T4576] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 41.370255][ T4576] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 41.372036][ T4576] loop4: unable to read partition table [ 41.373226][ T4576] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 41.380772][ T4579] device bridge_slave_1 left promiscuous mode [ 41.382550][ T4579] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.440833][ T4579] bond0: (slave bond_slave_0): Releasing backup interface [ 41.489875][ T4579] bond0: (slave bond_slave_1): Releasing backup interface [ 41.534536][ T4579] team0: Port device team_slave_0 removed [ 41.545436][ T4579] team0: Port device team_slave_1 removed [ 41.546678][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.547883][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.549857][ T4579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.551098][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.557445][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 41.559816][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.561200][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.705231][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.707386][ T4607] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 41.736262][ T4609] binder: 4608:4609 tried to acquire reference to desc 0, got 1 instead [ 41.765093][ T4609] loop4: detected capacity change from 0 to 4096 [ 41.808305][ T4609] Cannot load nls mprealloc [ 41.815218][ T4614] loop1: detected capacity change from 0 to 512 [ 41.835090][ T3897] binder: release 4608:4609 transaction 5 out, still active [ 41.836463][ T3897] binder: undelivered TRANSACTION_COMPLETE [ 41.853801][ T4614] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 41.853967][ T3897] binder: send failed reply for transaction 5, target dead [ 41.855127][ T4614] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 41.858879][ T4614] EXT4-fs (loop1): 1 truncate cleaned up [ 41.860021][ T4614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.866100][ T4614] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 41.876024][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 41.921761][ T4327] Bluetooth: hci5: command 0x1003 tx timeout [ 41.923858][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.091092][ T4628] XFS: noattr2 mount option is deprecated. [ 42.176280][ T4633] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 42.178114][ T4633] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 42.182978][ T4633] EXT4-fs (loop4): mount failed [ 42.189545][ T4628] XFS (loop0): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 42.250064][ T4633] capability: warning: `syz.4.60' uses deprecated v2 capabilities in a way that may be insecure [ 42.636388][ T4656] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 42.766242][ T4650] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 42.766263][ T4625] F2FS-fs (loop1): invalid crc value [ 42.767339][ T4650] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.770230][ T4650] F2FS-fs (loop4): invalid crc value [ 42.790710][ T4625] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.804117][ T4650] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.811117][ T4625] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 42.840271][ T4650] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.841690][ T4650] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 42.855457][ T4625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 42.859247][ T4650] F2FS-fs (loop4): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 42.871472][ T4666] 9pnet_fd: Insufficient options for proto=fd [ 42.875852][ T4656] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.66 (4656) [ 42.888781][ T4656] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 42.906079][ T4656] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 42.907663][ T4656] BTRFS info (device loop3): using free space tree [ 43.030035][ T4656] BTRFS info (device loop3): enabling ssd optimizations [ 43.097282][ T4685] syz.1.69 uses obsolete (PF_INET,SOCK_PACKET) [ 43.484131][ T4694] input: syz0 as /devices/virtual/input/input2 [ 43.709817][ T4694] set_capacity_and_notify: 5 callbacks suppressed [ 43.709836][ T4694] loop4: detected capacity change from 0 to 4096 [ 43.740701][ T4694] ntfs: volume version 3.1. [ 44.530938][ T4320] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 44.536200][ T4698] loop1: detected capacity change from 0 to 4096 [ 44.594271][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.692933][ T4705] loop2: detected capacity change from 0 to 2048 [ 44.732806][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 44.765980][ T4705] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.810857][ T27] audit: type=1326 audit(44.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.1.75" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffe0000 [ 44.837957][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 44.838019][ T4687] loop0: detected capacity change from 0 to 40427 [ 44.864962][ T4687] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 131073) [ 44.866249][ T4687] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.867760][ T4687] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x7f52010) [ 44.869199][ T4687] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 45.106296][ T4727] loop2: detected capacity change from 0 to 32768 [ 45.145207][ T4726] ERROR: (device loop2): dbAllocAG: Corrupt dmapctl page [ 45.145207][ T4726] [ 45.151197][ T4726] ERROR: (device loop2): remounting filesystem as read-only [ 45.154572][ T4726] ERROR: (device loop2): dbDiscardAG: -EIO [ 45.154572][ T4726] [ 45.159348][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 45.290372][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 45.382726][ T4748] loop0: detected capacity change from 0 to 512 [ 45.400521][ T4748] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 45.403132][ T4748] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 45.410219][ T4748] EXT4-fs (loop0): 1 truncate cleaned up [ 45.418493][ T4748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.437571][ T4745] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 45.479452][ T4746] loop3: detected capacity change from 0 to 32768 [ 45.482207][ T4746] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.83 (4746) [ 45.496374][ T4750] loop2: detected capacity change from 0 to 4096 [ 45.498331][ T4750] ntfs: (device loop2): ntfs_read_inode_mount(): $MFT must be non-resident but a resident extent was found. $MFT is corrupt. Run chkdsk. [ 45.500702][ T4750] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 45.502865][ T4750] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata. [ 45.511181][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 45.521086][ T4746] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 45.523227][ T4746] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 45.524930][ T4746] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 45.526597][ T4746] BTRFS info (device loop3): use zstd compression, level 3 [ 45.528305][ T4746] BTRFS info (device loop3): using free space tree [ 45.558803][ T4750] overlayfs: unrecognized mount option "audit" or missing value [ 45.592014][ T4755] loop0: detected capacity change from 0 to 4096 [ 45.597091][ T4755] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 45.647825][ T4746] BTRFS info (device loop3): enabling ssd optimizations [ 45.782639][ T4776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 46.025848][ T4965] loop4: detected capacity change from 0 to 32768 [ 46.060810][ T4320] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 46.081611][ T4965] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 46.082972][ T4965] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 46.092574][ T4965] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 46.097350][ T3897] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 46.098459][ T3897] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 46.190358][ T3897] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 46.205503][ T3897] gfs2: fsid=syz:syz.0: jid=0: Done [ 46.207252][ T4965] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 46.476227][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.538680][ T5880] exfat: Deprecated parameter 'utf8' [ 46.543114][ T5880] exfat: Deprecated parameter 'namecase' [ 46.558763][ T5880] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 46.593206][ T4835] device bridge_slave_1 left promiscuous mode [ 46.594239][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.597913][ T5659] XFS (loop3): Mounting V5 Filesystem [ 46.615942][ T5659] XFS (loop3): Ending clean mount [ 46.619505][ T5659] XFS (loop3): Quotacheck needed: Please wait. [ 46.654449][ T5659] XFS (loop3): Quotacheck: Done. [ 46.719083][ T4973] team0: Port device team_slave_0 removed [ 46.720453][ T4973] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 46.748559][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.750101][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.751472][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.769211][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.770681][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.777981][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.800835][ T4335] Bluetooth: hci1: SCO packet for unknown connection handle 1583 [ 46.806282][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.810237][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.822832][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 46.880820][ T5925] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 46.890448][ T4320] XFS (loop3): Unmounting Filesystem [ 46.916512][ T5918] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 46.926720][ T5917] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 46.939770][ T5933] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.959749][ T5918] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 47.229820][ T5983] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 47.469636][ T6005] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 47.471659][ T6005] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.473640][ T6005] F2FS-fs (loop2): invalid crc value [ 47.475985][ T6005] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 47.487617][ T6005] F2FS-fs (loop2): recover fsync data on readonly fs [ 47.489497][ T6005] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 47.490834][ T6005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.496300][ T6005] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 47.614643][ T6017] xt_bpf: check failed: parse error [ 47.695639][ T6026] EXT4-fs: Ignoring removed orlov option [ 47.703478][ T6026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.756829][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 47.789326][ T27] audit: type=1326 audit(47.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.4.116" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b789e8 code=0x0 [ 47.849056][ T6049] binder: 6048:6049 tried to acquire reference to desc 0, got 1 instead [ 47.851523][ T6049] binder: 6048:6049 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.854081][ T6049] binder: 6049 RLIMIT_NICE not set [ 47.855051][ T6049] binder: 6049 RLIMIT_NICE not set [ 47.856146][ T6049] binder: 6049 RLIMIT_NICE not set [ 47.870894][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 47.899292][ T6055] cgroup: name respecified [ 47.964886][ T6056] ext4: Unknown parameter 'euid' [ 47.965627][ T6064] fuse: Bad value for 'user_id' [ 48.005914][ T4312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.032137][ T4446] Dev loop9: unable to read RDB block 7 [ 48.033246][ T4446] loop9: unable to read partition table [ 48.034249][ T4446] loop9: partition table beyond EOD, truncated [ 48.056321][ T6074] Dev loop9: unable to read RDB block 7 [ 48.057203][ T6074] loop9: unable to read partition table [ 48.058191][ T6074] loop9: partition table beyond EOD, truncated [ 48.059197][ T6074] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 48.067843][ T6079] hpfs: bad mount options. [ 48.085053][ T6083] nbd: illegal input index 620756992 [ 48.110612][ T4312] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.295313][ T6109] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.298003][ T6109] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 48.299666][ T6109] REISERFS (device loop1): using ordered data mode [ 48.300892][ T6109] reiserfs: using flush barriers [ 48.305852][ T6109] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (65792). FSCK? [ 48.674993][ T6109] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 48.719426][ T6115] set_capacity_and_notify: 11 callbacks suppressed [ 48.719443][ T6115] loop2: detected capacity change from 0 to 32768 [ 48.722820][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 48.725217][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 48.750524][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: invalid metadata block [ 48.750524][ T6115] bh = 19 (type: exp=5, found=4) [ 48.750524][ T6115] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492 [ 48.754788][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: about to withdraw this file system [ 48.756519][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: Journal recovery skipped for jid 0 until next mount. [ 48.758467][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: Glock dequeues delayed: 0 [ 48.761543][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: File system withdrawn [ 48.763472][ T6115] CPU: 1 PID: 6115 Comm: syz.2.127 Not tainted syzkaller #0 [ 48.764601][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 48.766240][ T6115] Call trace: [ 48.766750][ T6115] dump_backtrace+0x1c0/0x1ec [ 48.767455][ T6115] show_stack+0x2c/0x3c [ 48.768205][ T6115] __dump_stack+0x30/0x40 [ 48.768943][ T6115] dump_stack_lvl+0xf4/0x15c [ 48.769710][ T6115] dump_stack+0x1c/0x5c [ 48.770412][ T6115] gfs2_withdraw+0x9ec/0x127c [ 48.771260][ T6115] gfs2_metatype_check_ii+0x8c/0xac [ 48.772158][ T6115] gfs2_meta_buffer+0x258/0x2ec [ 48.773044][ T6115] __fillup_metapath+0x138/0x2e0 [ 48.773872][ T6115] gfs2_hole_size+0xa3c/0xf1c [ 48.774697][ T6115] __gfs2_iomap_get+0x5fc/0x1044 [ 48.775587][ T6115] gfs2_block_map+0x240/0x6f0 [ 48.776415][ T6115] gfs2_write_alloc_required+0x2c4/0x520 [ 48.777369][ T6115] gfs2_jdesc_check+0x19c/0x264 [ 48.777599][ T6104] loop0: detected capacity change from 0 to 32768 [ 48.778190][ T6115] init_journal+0xad8/0x1e94 [ 48.779974][ T6115] init_inodes+0xe0/0x2d4 [ 48.780727][ T6115] gfs2_fill_super+0x11c0/0x194c [ 48.781582][ T6115] get_tree_bdev+0x358/0x544 [ 48.782389][ T6115] gfs2_get_tree+0x54/0x1b4 [ 48.783188][ T6115] vfs_get_tree+0x90/0x274 [ 48.783941][ T6115] do_new_mount+0x228/0x810 [ 48.784743][ T6115] path_mount+0x5bc/0xe80 [ 48.785482][ T6115] __arm64_sys_mount+0x49c/0x59c [ 48.786410][ T6115] invoke_syscall+0x98/0x2b4 [ 48.787236][ T6115] el0_svc_common+0x138/0x258 [ 48.788076][ T6115] do_el0_svc+0x58/0x130 [ 48.788821][ T6115] el0_svc+0x58/0x128 [ 48.789480][ T6115] el0t_64_sync_handler+0x84/0xf0 [ 48.790343][ T6115] el0t_64_sync+0x18c/0x190 [ 48.791185][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:5 [ 48.793575][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xe0/0x2d4 [ 48.795550][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 48.797344][ T6115] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5 [ 48.813509][ T6109] raw_sendmsg: syz.1.130 forgot to set AF_INET. Fix it! [ 48.859988][ T6126] loop4: detected capacity change from 0 to 4096 [ 48.866255][ T6126] EXT4-fs: Ignoring removed bh option [ 48.868567][ T6126] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 48.897369][ T6104] netlink: 'syz.0.128': attribute type 12 has an invalid length. [ 48.986650][ T6157] loop9: detected capacity change from 0 to 7 [ 49.002040][ T6151] loop3: detected capacity change from 0 to 164 [ 49.009495][ T6157] Dev loop9: unable to read RDB block 7 [ 49.010451][ T6157] loop9: unable to read partition table [ 49.011451][ T6157] loop9: partition table beyond EOD, truncated [ 49.013361][ T6157] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 49.055621][ T6166] kernel read not supported for file /] (pid: 6166 comm: syz.4.140) [ 49.094799][ T51] block nbd4: Attempted send on invalid socket [ 49.095918][ T51] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.158746][ T6184] loop2: detected capacity change from 0 to 128 [ 49.162218][ T6184] ext4: Unknown parameter 'noacl' [ 49.337870][ T6207] loop1: detected capacity change from 0 to 512 [ 49.358629][ T6215] capability: warning: `syz.3.149' uses 32-bit capabilities (legacy support in use) [ 49.370711][ T6179] loop0: detected capacity change from 0 to 40427 [ 49.390331][ T6179] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 49.392385][ T6179] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x724 [ 49.394287][ T6179] F2FS-fs (loop0): invalid crc value [ 49.396459][ T6220] loop9: detected capacity change from 0 to 7 [ 49.399185][ T6220] Dev loop9: unable to read RDB block 7 [ 49.400324][ T6220] loop9: unable to read partition table [ 49.401460][ T6220] loop9: partition table beyond EOD, truncated [ 49.405870][ T6220] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 49.416312][ T6179] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.427065][ T6179] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x54c/0x884 [ 49.448555][ T6179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.530989][ T6249] loop4: detected capacity change from 0 to 512 [ 49.533749][ T6249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.557295][ T6249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.561527][ T6249] overlayfs: unrecognized mount option "fsname=lowerdir" or missing value [ 49.652701][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 49.716969][ T6266] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.736481][ T6266] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.158: bg 0: bad block bitmap checksum [ 49.750377][ T6278] comedi comedi0: comedi_config --init_data is deprecated [ 49.778717][ T6266] Quota error (device loop1): write_blk: dquota write failed [ 49.792280][ T6266] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 49.793990][ T6266] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.158: Failed to acquire dquot type 1 [ 49.827307][ T6281] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 1312: 0x9e != 0xb3 [ 49.829080][ T6281] UDF-fs: error (device loop4): udf_read_inode: (ino 1312) failed !bh [ 49.840888][ T6281] UDF-fs: Scanning with blocksize 512 failed [ 49.876000][ T6281] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 49.877283][ T6281] UDF-fs: Scanning with blocksize 1024 failed [ 49.890839][ T6281] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 49.899970][ T6281] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 49.901235][ T6281] UDF-fs: Scanning with blocksize 2048 failed [ 49.908405][ T6281] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 49.915350][ T4324] EXT4-fs (loop1): unmounting filesystem. [ 49.925944][ T6281] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 49.931220][ T6281] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 49.936594][ T6281] UDF-fs: Scanning with blocksize 4096 failed [ 49.937595][ T6281] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 50.080719][ T6308] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 50.098952][ T6313] Zero length message leads to an empty skb [ 50.247257][ T6331] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 50.282787][ T6343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.364106][ T6360] FAT-fs (loop4): Directory bread(block 199916) failed [ 50.365447][ T6360] FAT-fs (loop4): Directory bread(block 199917) failed [ 50.366683][ T6360] FAT-fs (loop4): Directory bread(block 199918) failed [ 50.367915][ T6360] FAT-fs (loop4): Directory bread(block 199919) failed [ 50.369187][ T6360] FAT-fs (loop4): Directory bread(block 199920) failed [ 50.412487][ T6360] FAT-fs (loop4): Directory bread(block 199921) failed [ 50.413637][ T6360] FAT-fs (loop4): Directory bread(block 199922) failed [ 50.414782][ T6360] FAT-fs (loop4): Directory bread(block 199923) failed [ 50.430750][ T6360] FAT-fs (loop4): Directory bread(block 199916) failed [ 50.431921][ T6360] FAT-fs (loop4): Directory bread(block 199917) failed [ 50.589201][ T6405] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:19999 [ 50.782506][ T6395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.180 (6395) [ 50.799799][ T6424] 8021q: VLANs not supported on sit0 [ 50.812279][ T6395] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.815336][ T6395] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 50.816779][ T6395] BTRFS info (device loop3): force clearing of disk cache [ 50.817949][ T6395] BTRFS info (device loop3): enabling auto defrag [ 50.821893][ T6423] UDF-fs: bad mount option "uid=ѯ&7?F5¡Ÿ—‰‡¶‰Ì{‚µN1°`/8ñk!œÖ-Ø &8p¨Ñõ)ÓHÖóœ’ÓÏ 8~Ké÷" or missing value [ 50.832845][ T6395] BTRFS info (device loop3): using free space tree [ 50.847763][ T4335] Bluetooth: hci3: command 0x0407 tx timeout [ 50.902000][ T6409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.182 (6409) [ 50.908537][ T6409] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.910145][ T6409] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 50.911682][ T6409] BTRFS info (device loop0): setting nodatasum [ 50.913741][ T6409] BTRFS info (device loop0): force zlib compression, level 3 [ 50.920952][ T6409] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 50.922448][ T6409] BTRFS info (device loop0): use lzo compression, level 0 [ 50.924629][ T6409] BTRFS info (device loop0): turning on flush-on-commit [ 50.925759][ T6409] BTRFS info (device loop0): enabling auto defrag [ 50.926898][ T6409] BTRFS info (device loop0): max_inline at 4096 [ 50.928470][ T6409] BTRFS info (device loop0): using free space tree [ 51.016309][ T6393] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 51.023857][ T6395] BTRFS info (device loop3): enabling ssd optimizations [ 51.025362][ T6395] BTRFS info (device loop3): rebuilding free space tree [ 51.035197][ T6393] F2FS-fs (loop4): invalid crc value [ 51.045099][ T6393] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.128097][ T6409] BTRFS info (device loop0): enabling ssd optimizations [ 51.129741][ T6393] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.139937][ T27] audit: type=1326 audit(32825.165:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.148887][ T27] audit: type=1326 audit(32825.176:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.153913][ T27] audit: type=1326 audit(32825.186:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.157553][ T27] audit: type=1326 audit(32825.186:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.184192][ T27] audit: type=1326 audit(32825.186:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.188043][ T27] audit: type=1326 audit(32825.186:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.219620][ T27] audit: type=1326 audit(32825.186:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 51.255087][ T4330] syz-executor: attempt to access beyond end of device [ 51.255087][ T4330] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 51.310169][ T6519] fuse: Invalid rootmode [ 51.588524][ T4329] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.050459][ T6581] ptrace attach of "./syz-executor exec"[6583] was attempted by "./syz-executor exec"[6581] [ 52.079283][ T4320] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 52.715801][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 52.715812][ T27] audit: type=1326 audit(32826.824:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.720925][ T27] audit: type=1326 audit(32826.824:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.730460][ T27] audit: type=1326 audit(32826.824:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.743362][ T27] audit: type=1326 audit(32826.824:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=75 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.747014][ T27] audit: type=1326 audit(32826.824:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.760634][ T27] audit: type=1326 audit(32826.824:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.764676][ T27] audit: type=1326 audit(32826.824:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff939789e8 code=0x7ffc0000 [ 52.903968][ T6630] block device autoloading is deprecated and will be removed. [ 52.992914][ T27] audit: type=1326 audit(32827.118:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b789e8 code=0x7ffc0000 [ 52.996645][ T27] audit: type=1326 audit(32827.118:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=132 compat=0 ip=0xffff83b789e8 code=0x7ffc0000 [ 53.000922][ T27] audit: type=1326 audit(32827.118:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b789e8 code=0x7ffc0000 [ 53.463750][ T6664] __nla_validate_parse: 51 callbacks suppressed [ 53.463764][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.229'. [ 53.871933][ T6692] set_capacity_and_notify: 14 callbacks suppressed [ 53.871943][ T6692] loop3: detected capacity change from 0 to 1764 [ 53.958842][ T6702] mmap: syz.0.241 (6702) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.536778][ T6793] overlayfs: overlapping lowerdir path [ 57.638664][ T6830] overlayfs: statfs failed on './file0' [ 57.848082][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.4.282'. [ 57.855361][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.885370][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.915304][ T6853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.378168][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.379608][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.853603][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.878832][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.209571][ T6893] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.211229][ T6893] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.212765][ T6893] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.217826][ T6893] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.480499][ T6927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.514925][ T6927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.540957][ T6957] syzkaller0: tun_chr_ioctl cmd 35111 [ 59.658720][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 59.661671][ T6975] device ip6gre1 entered promiscuous mode [ 59.671951][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.673523][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.695910][ T4372] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.734035][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.820059][ T6997] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 59.865494][ T7008] overlayfs: missing 'lowerdir' [ 60.205066][ T7035] loop1: detected capacity change from 0 to 16 [ 60.215664][ T7035] erofs: (device loop1): mounted with root inode @ nid 36. [ 60.231172][ T7035] syz.1.320: attempt to access beyond end of device [ 60.231172][ T7035] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 60.237885][ T7035] syz.1.320: attempt to access beyond end of device [ 60.237885][ T7035] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 60.261520][ T7035] ================================================================== [ 60.262913][ T7035] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 60.264454][ T7035] Read of size 4096 at addr ffff0000d9333000 by task syz.1.320/7035 [ 60.265920][ T7035] [ 60.266344][ T7035] CPU: 0 PID: 7035 Comm: syz.1.320 Not tainted syzkaller #0 [ 60.267663][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 60.269619][ T7035] Call trace: [ 60.270198][ T7035] dump_backtrace+0x1c0/0x1ec [ 60.270997][ T7035] show_stack+0x2c/0x3c [ 60.271690][ T7035] __dump_stack+0x30/0x40 [ 60.272358][ T7035] dump_stack_lvl+0xf4/0x15c [ 60.273116][ T7035] print_address_description+0x88/0x218 [ 60.274031][ T7035] print_report+0x50/0x68 [ 60.274879][ T7035] kasan_report+0xa8/0xfc [ 60.275657][ T7035] kasan_check_range+0x258/0x290 [ 60.276475][ T7035] memcpy+0x48/0x90 [ 60.277134][ T7035] z_erofs_transform_plain+0x3a4/0x490 [ 60.278073][ T7035] z_erofs_decompress+0x9c/0xd4 [ 60.278943][ T7035] z_erofs_decompress_queue+0x100c/0x1b40 [ 60.279910][ T7035] z_erofs_runqueue+0x152c/0x16cc [ 60.280741][ T7035] z_erofs_read_folio+0x2d8/0x5c8 [ 60.281738][ T7035] filemap_read_folio+0x134/0x384 [ 60.282640][ T7035] filemap_read+0x12cc/0x2104 [ 60.283381][ T7035] generic_file_read_iter+0xf8/0x5c4 [ 60.284263][ T7035] vfs_read+0x3d4/0x7f0 [ 60.284910][ T7035] ksys_read+0x12c/0x224 [ 60.285573][ T7035] __arm64_sys_read+0x7c/0x90 [ 60.286343][ T7035] invoke_syscall+0x98/0x2b4 [ 60.287165][ T7035] el0_svc_common+0x138/0x258 [ 60.287966][ T7035] do_el0_svc+0x58/0x130 [ 60.288765][ T7035] el0_svc+0x58/0x128 [ 60.289444][ T7035] el0t_64_sync_handler+0x84/0xf0 [ 60.290324][ T7035] el0t_64_sync+0x18c/0x190 [ 60.291094][ T7035] [ 60.291477][ T7035] Allocated by task 6772: [ 60.292238][ T7035] kasan_set_track+0x4c/0x80 [ 60.292970][ T7035] kasan_save_alloc_info+0x24/0x30 [ 60.293798][ T7035] __kasan_slab_alloc+0x70/0x88 [ 60.294694][ T7035] slab_post_alloc_hook+0x74/0x430 [ 60.295621][ T7035] kmem_cache_alloc_node+0x250/0x33c [ 60.296554][ T7035] __alloc_skb+0x128/0x714 [ 60.297257][ T7035] skb_copy+0x104/0x5f0 [ 60.297987][ T7035] mac80211_hwsim_tx_frame_no_nl+0xb54/0x111c [ 60.299061][ T7035] mac80211_hwsim_tx_frame+0x1c0/0x1f4 [ 60.299972][ T7035] mac80211_hwsim_beacon_tx+0x4c8/0x914 [ 60.300864][ T7035] __iterate_interfaces+0x204/0x484 [ 60.301768][ T7035] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 60.302967][ T7035] mac80211_hwsim_beacon+0xc8/0x1b8 [ 60.303809][ T7035] __hrtimer_run_queues+0x438/0xc3c [ 60.304706][ T7035] hrtimer_run_softirq+0x160/0x400 [ 60.305569][ T7035] handle_softirqs+0x318/0xc60 [ 60.306401][ T7035] __do_softirq+0x14/0x20 [ 60.307117][ T7035] [ 60.307490][ T7035] Freed by task 233: [ 60.308113][ T7035] kasan_set_track+0x4c/0x80 [ 60.308976][ T7035] kasan_save_free_info+0x38/0x5c [ 60.309886][ T7035] ____kasan_slab_free+0x148/0x1b0 [ 60.310760][ T7035] __kasan_slab_free+0x18/0x28 [ 60.311572][ T7035] slab_free_freelist_hook+0x16c/0x1e8 [ 60.312576][ T7035] kmem_cache_free+0x118/0x314 [ 60.313387][ T7035] kfree_skbmem+0x10c/0x198 [ 60.314184][ T7035] kfree_skb_reason+0x1a0/0x418 [ 60.315057][ T7035] ieee80211_iface_work+0x610/0xa34 [ 60.315988][ T7035] cfg80211_wiphy_work+0x1d8/0x218 [ 60.316867][ T7035] process_one_work+0x7f8/0x13a4 [ 60.317758][ T7035] worker_thread+0x8c4/0xfec [ 60.318549][ T7035] kthread+0x250/0x2d8 [ 60.319258][ T7035] ret_from_fork+0x10/0x20 [ 60.319913][ T7035] [ 60.320267][ T7035] The buggy address belongs to the object at ffff0000d9333000 [ 60.320267][ T7035] which belongs to the cache skbuff_head_cache of size 240 [ 60.322525][ T7035] The buggy address is located 0 bytes inside of [ 60.322525][ T7035] 240-byte region [ffff0000d9333000, ffff0000d93330f0) [ 60.324515][ T7035] [ 60.324956][ T7035] The buggy address belongs to the physical page: [ 60.325972][ T7035] page:00000000faa719cd refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119333 [ 60.327511][ T7035] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 60.328756][ T7035] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c086c180 [ 60.330109][ T7035] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 60.331529][ T7035] page dumped because: kasan: bad access detected [ 60.332574][ T7035] [ 60.332970][ T7035] Memory state around the buggy address: [ 60.333856][ T7035] ffff0000d9332f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.335101][ T7035] ffff0000d9332f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 60.336335][ T7035] >ffff0000d9333000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 60.337612][ T7035] ^ [ 60.338301][ T7035] ffff0000d9333080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 60.339559][ T7035] ffff0000d9333100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 60.340872][ T7035] ================================================================== [ 60.348612][ T7035] Disabling lock debugging due to kernel taint [ 60.349710][ T7035] syz.1.320: attempt to access beyond end of device [ 60.349710][ T7035] loop1: rw=0, sector=1056, nr_sectors = 8 limit=16 [ 60.448738][ T4708] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.734511][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.801828][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.802861][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.677529][ T1514] cfg80211: failed to load regulatory.db