last executing test programs: 2.736329582s ago: executing program 0 (id=1): unshare(0x60600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40040) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x15b540) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000180)=r2}, 0x20) close(r2) 2.457318358s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x801c582d, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) 1.280885887s ago: executing program 3 (id=7): socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0x10, 0x2, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=r0]) 1.054781361s ago: executing program 0 (id=8): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$alg(0x26, 0x5, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='./bus\x00', 0x0) unlinkat(r2, &(0x7f0000000400)='./file1\x00', 0x200) renameat2(r3, &(0x7f0000000380)='./bus\x00', r2, &(0x7f0000000180)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e2dd36bcf70000000000000000000095000000c88fd2b29dcbf026d193b986fed200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001dc0)=ANY=[@ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=r6], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r5}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r7, 0x29, 0x10, 0x0, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000001c0)={0x2, 0x0, 0x4}) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/24, 0x18}], 0x2}}], 0x1, 0x0, 0x0) 788.952109ms ago: executing program 3 (id=9): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000041000701000000000000000001f0000008000200", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5) read$FUSE(r0, &(0x7f0000003cc0)={0x2020}, 0x2020) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r8, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000023c0)=ANY=[@ANYRES64, @ANYBLOB="000209002000b70547bd4964b99aabcde21938de62e1109615a615a9c3c5ea000b00000000000000800000000100"], 0x14}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ftruncate(r9, 0x2000009) sendfile(r4, r9, 0x0, 0x7ffff000) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=2): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80801, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0xfffe, @loopback}}}, 0x80) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40186f40, 0x20000502) read$FUSE(r1, &(0x7f0000003500)={0x2020}, 0xd) ioctl$BLKTRACESTART(r0, 0x125f, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) syz_io_uring_setup(0x676a, &(0x7f0000000000)={0x0, 0x91a6, 0x40, 0x2, 0x390}, &(0x7f00000000c0), &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 71.296901][ T5209] cgroup: Unknown subsys name 'net' [ 71.502172][ T5209] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.082496][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.374815][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.390482][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.409887][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.420197][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.432728][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.440851][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.449272][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.471333][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.490833][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.495231][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.507028][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.511269][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.516198][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.530179][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.535012][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.538764][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.545988][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.551955][ T5244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.559487][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.566186][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.572439][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.580335][ T5244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.586551][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.594497][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.601505][ T5248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.610120][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.614173][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.621479][ T5247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.628578][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.634994][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.641815][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.660055][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.675366][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.682885][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.690191][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.698299][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.432764][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 78.444586][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 78.696397][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 78.778394][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 78.812772][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.820383][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.828377][ T5220] bridge_slave_0: entered allmulticast mode [ 78.835984][ T5220] bridge_slave_0: entered promiscuous mode [ 78.850898][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.858095][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.865869][ T5220] bridge_slave_1: entered allmulticast mode [ 78.873952][ T5220] bridge_slave_1: entered promiscuous mode [ 78.940882][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 78.984131][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 79.002309][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.009477][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.016802][ T5227] bridge_slave_0: entered allmulticast mode [ 79.024287][ T5227] bridge_slave_0: entered promiscuous mode [ 79.033199][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.040768][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.047943][ T5227] bridge_slave_1: entered allmulticast mode [ 79.055571][ T5227] bridge_slave_1: entered promiscuous mode [ 79.089924][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.161089][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.174371][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.242016][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.355658][ T5220] team0: Port device team_slave_0 added [ 79.410451][ T5227] team0: Port device team_slave_0 added [ 79.419499][ T5227] team0: Port device team_slave_1 added [ 79.429046][ T5220] team0: Port device team_slave_1 added [ 79.456585][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.463882][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.471225][ T5222] bridge_slave_0: entered allmulticast mode [ 79.478688][ T5222] bridge_slave_0: entered promiscuous mode [ 79.486397][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.494045][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.501536][ T5221] bridge_slave_0: entered allmulticast mode [ 79.509104][ T5221] bridge_slave_0: entered promiscuous mode [ 79.554678][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.562279][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.589050][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.609136][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.616496][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.624369][ T5222] bridge_slave_1: entered allmulticast mode [ 79.632105][ T5222] bridge_slave_1: entered promiscuous mode [ 79.638898][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.646421][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.654107][ T5221] bridge_slave_1: entered allmulticast mode [ 79.661576][ T5221] bridge_slave_1: entered promiscuous mode [ 79.711413][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.718407][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.745072][ T5230] Bluetooth: hci0: command tx timeout [ 79.750920][ T5230] Bluetooth: hci4: command tx timeout [ 79.750922][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.767047][ T5247] Bluetooth: hci3: command tx timeout [ 79.767106][ T5233] Bluetooth: hci5: command tx timeout [ 79.778413][ T5246] Bluetooth: hci2: command tx timeout [ 79.783991][ T4612] Bluetooth: hci1: command tx timeout [ 79.870037][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.877475][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.904195][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.934186][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.947488][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.960133][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.976661][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.986755][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.995156][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.002622][ T5223] bridge_slave_0: entered allmulticast mode [ 80.009887][ T5223] bridge_slave_0: entered promiscuous mode [ 80.018953][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.026059][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.057255][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.082203][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.089396][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.097089][ T5228] bridge_slave_0: entered allmulticast mode [ 80.104590][ T5228] bridge_slave_0: entered promiscuous mode [ 80.113984][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.121636][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.128814][ T5228] bridge_slave_1: entered allmulticast mode [ 80.136799][ T5228] bridge_slave_1: entered promiscuous mode [ 80.202831][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.210038][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.218998][ T5223] bridge_slave_1: entered allmulticast mode [ 80.226484][ T5223] bridge_slave_1: entered promiscuous mode [ 80.261255][ T5220] hsr_slave_0: entered promiscuous mode [ 80.267903][ T5220] hsr_slave_1: entered promiscuous mode [ 80.313214][ T5222] team0: Port device team_slave_0 added [ 80.323422][ T5221] team0: Port device team_slave_0 added [ 80.364962][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.378845][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.394143][ T5222] team0: Port device team_slave_1 added [ 80.402230][ T5221] team0: Port device team_slave_1 added [ 80.428094][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.455469][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.615454][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.622535][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.649110][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.667591][ T5227] hsr_slave_0: entered promiscuous mode [ 80.674591][ T5227] hsr_slave_1: entered promiscuous mode [ 80.681091][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.688932][ T5227] Cannot create hsr debugfs directory [ 80.713107][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.720064][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.746682][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.769298][ T5223] team0: Port device team_slave_0 added [ 80.778899][ T5228] team0: Port device team_slave_0 added [ 80.788993][ T5228] team0: Port device team_slave_1 added [ 80.796080][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.803578][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.830218][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.848589][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.855963][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.881954][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.962301][ T5223] team0: Port device team_slave_1 added [ 81.053639][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.060735][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.087757][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.101424][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.108379][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.134348][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.225993][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.233342][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.259491][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.279217][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.292948][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.325771][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.350363][ T5221] hsr_slave_0: entered promiscuous mode [ 81.357753][ T5221] hsr_slave_1: entered promiscuous mode [ 81.364841][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.372566][ T5221] Cannot create hsr debugfs directory [ 81.543619][ T5222] hsr_slave_0: entered promiscuous mode [ 81.551630][ T5222] hsr_slave_1: entered promiscuous mode [ 81.558163][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.566099][ T5222] Cannot create hsr debugfs directory [ 81.628306][ T5223] hsr_slave_0: entered promiscuous mode [ 81.635327][ T5223] hsr_slave_1: entered promiscuous mode [ 81.646293][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.654222][ T5223] Cannot create hsr debugfs directory [ 81.811464][ T5246] Bluetooth: hci4: command tx timeout [ 81.816923][ T5246] Bluetooth: hci3: command tx timeout [ 81.822450][ T4612] Bluetooth: hci0: command tx timeout [ 81.827869][ T4612] Bluetooth: hci2: command tx timeout [ 81.834089][ T5233] Bluetooth: hci1: command tx timeout [ 81.839509][ T5233] Bluetooth: hci5: command tx timeout [ 81.869180][ T5228] hsr_slave_0: entered promiscuous mode [ 81.876097][ T5228] hsr_slave_1: entered promiscuous mode [ 81.883002][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.890567][ T5228] Cannot create hsr debugfs directory [ 82.369257][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.391449][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.414956][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.435199][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.503016][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.525839][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.537282][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.552037][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.641916][ T5221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.657945][ T5221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.669721][ T5221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.687831][ T5221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.782905][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.808025][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.837433][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.855212][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.003254][ T5222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.016948][ T5222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.029123][ T5222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.074108][ T5222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.170136][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.214797][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.250591][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.301867][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.318178][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.337284][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.361685][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.388867][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.424244][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.431592][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.444776][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.451931][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.462018][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.469311][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.486856][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.494210][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.526565][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.629480][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.669757][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.677133][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.745316][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.752534][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.783061][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.878869][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.892137][ T5246] Bluetooth: hci3: command tx timeout [ 83.897575][ T5246] Bluetooth: hci2: command tx timeout [ 83.903182][ T4612] Bluetooth: hci5: command tx timeout [ 83.908595][ T4612] Bluetooth: hci1: command tx timeout [ 83.914206][ T5233] Bluetooth: hci0: command tx timeout [ 83.914534][ T5230] Bluetooth: hci4: command tx timeout [ 83.975182][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.059053][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.124836][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.132058][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.157617][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.164822][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.197789][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.205014][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.286273][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.293489][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.369006][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.545476][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.628840][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.673456][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.739351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.746594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.807396][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.814621][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.872797][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.970416][ T5227] veth0_vlan: entered promiscuous mode [ 85.102850][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.182685][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.192737][ T5227] veth1_vlan: entered promiscuous mode [ 85.223851][ T5220] veth0_vlan: entered promiscuous mode [ 85.270133][ T5220] veth1_vlan: entered promiscuous mode [ 85.328015][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.449482][ T5227] veth0_macvtap: entered promiscuous mode [ 85.590314][ T5227] veth1_macvtap: entered promiscuous mode [ 85.599710][ T5220] veth0_macvtap: entered promiscuous mode [ 85.642572][ T5220] veth1_macvtap: entered promiscuous mode [ 85.675446][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.724257][ T5222] veth0_vlan: entered promiscuous mode [ 85.780030][ T5222] veth1_vlan: entered promiscuous mode [ 85.806814][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.830472][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.841915][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.856693][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.899049][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.913005][ T5221] veth0_vlan: entered promiscuous mode [ 85.923398][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.934394][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.947566][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.971170][ T5230] Bluetooth: hci4: command tx timeout [ 85.973895][ T4612] Bluetooth: hci5: command tx timeout [ 85.976593][ T5230] Bluetooth: hci3: command tx timeout [ 85.982174][ T5246] Bluetooth: hci1: command tx timeout [ 85.988291][ T5230] Bluetooth: hci2: command tx timeout [ 85.993091][ T5233] Bluetooth: hci0: command tx timeout [ 86.059554][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.069892][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.080737][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.089485][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.112440][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.121314][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.130117][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.139788][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.166437][ T5221] veth1_vlan: entered promiscuous mode [ 86.228846][ T5223] veth0_vlan: entered promiscuous mode [ 86.263356][ T5228] veth0_vlan: entered promiscuous mode [ 86.294067][ T58] cfg80211: failed to load regulatory.db [ 86.344213][ T5228] veth1_vlan: entered promiscuous mode [ 86.389436][ T5223] veth1_vlan: entered promiscuous mode [ 86.405193][ T5222] veth0_macvtap: entered promiscuous mode [ 86.478773][ T5222] veth1_macvtap: entered promiscuous mode [ 86.498232][ T971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.520427][ T971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.537783][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.555643][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.579126][ T5221] veth0_macvtap: entered promiscuous mode [ 86.622668][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.624116][ T5221] veth1_macvtap: entered promiscuous mode [ 86.630504][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.655105][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.671700][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.682146][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.693844][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.705935][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.717955][ T5223] veth0_macvtap: entered promiscuous mode [ 86.731176][ T5223] veth1_macvtap: entered promiscuous mode [ 86.738550][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.750553][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.767162][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.779525][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.789890][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.800387][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.812923][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.838010][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.848586][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.859892][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.870454][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.883801][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.930485][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.942262][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.955053][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.965597][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.975473][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.986045][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.002188][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.024642][ T5222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.043986][ T5222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.055235][ T5222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.064400][ T5222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.076883][ T5228] veth0_macvtap: entered promiscuous mode [ 87.095905][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.105254][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.138797][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.193074][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.203444][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.215564][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.228559][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.241281][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.251639][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.263665][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.278162][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.298973][ T5221] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.319368][ T5221] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.343360][ T5221] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.352565][ T5332] Zero length message leads to an empty skb [ 87.360795][ T5221] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.427164][ T5228] veth1_macvtap: entered promiscuous mode [ 87.476837][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.500834][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.511803][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.522731][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.537509][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.556030][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.569237][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.671727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.799714][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.813298][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.750478][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.774410][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.800222][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.809587][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.865337][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.899012][ T5340] program syz.3.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.908561][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.929096][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.942964][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.956709][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.967744][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.978116][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.989150][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.001205][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.013930][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.049468][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.119121][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.150933][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.176245][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.187893][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.200312][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.222793][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.233022][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.243621][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.254620][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.265447][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.277938][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.322431][ T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.338866][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.365717][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.375492][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.389149][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417743][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.428809][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.549696][ T58] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.564828][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.572079][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.577751][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.641173][ T58] usb 1-1: config 0 descriptor?? [ 89.695332][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.724281][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.785030][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.794452][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.926858][ T58] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 89.958708][ T58] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 89.974206][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.010383][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.063411][ T5351] ================================================================== [ 90.071540][ T5351] BUG: KASAN: slab-use-after-free in iov_iter_folioq_advance+0x10c/0x360 [ 90.079985][ T5351] Read of size 8 at addr ffff8880277d7520 by task syz.3.9/5351 [ 90.087545][ T5351] [ 90.089877][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: syz.3.9 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 90.099971][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 90.110040][ T5351] Call Trace: [ 90.113337][ T5351] [ 90.116287][ T5351] dump_stack_lvl+0x241/0x360 [ 90.120995][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.126222][ T5351] ? __pfx__printk+0x10/0x10 [ 90.130849][ T5351] ? _printk+0xd5/0x120 [ 90.135030][ T5351] ? __virt_addr_valid+0x183/0x530 [ 90.140169][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.143564][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.145824][ T5351] print_report+0x169/0x550 [ 90.145875][ T5351] ? __virt_addr_valid+0x183/0x530 [ 90.159795][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.163237][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.163288][ T5351] ? __virt_addr_valid+0x45f/0x530 [ 90.163317][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.163357][ T5351] ? __phys_addr+0xba/0x170 [ 90.163383][ T5351] ? iov_iter_folioq_advance+0x10c/0x360 [ 90.163412][ T5351] kasan_report+0x143/0x180 [ 90.163454][ T5351] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 90.163493][ T5351] ? iov_iter_folioq_advance+0x10c/0x360 [ 90.163525][ T5351] iov_iter_folioq_advance+0x10c/0x360 [ 90.163557][ T5351] netfs_write_folio+0x154b/0x1fe0 [ 90.163601][ T5351] netfs_writepages+0x89f/0xe80 [ 90.163635][ T5351] ? __pfx_netfs_writepages+0x10/0x10 [ 90.163667][ T5351] ? __pfx_netfs_writepages+0x10/0x10 [ 90.163697][ T5351] do_writepages+0x35f/0x870 [ 90.163735][ T5351] ? __pfx_do_writepages+0x10/0x10 [ 90.163767][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.163811][ T5351] ? filemap_fdatawrite_wbc+0x11a/0x180 [ 90.163845][ T5351] ? do_raw_spin_lock+0x14f/0x370 [ 90.163877][ T5351] ? __pfx_lock_release+0x10/0x10 [ 90.163921][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.163960][ T5351] ? do_raw_spin_unlock+0x13c/0x8b0 [ 90.163993][ T5351] ? wbc_attach_and_unlock_inode+0x565/0x580 [ 90.164033][ T5351] filemap_fdatawrite_wbc+0x125/0x180 [ 90.164070][ T5351] filemap_fdatawrite+0xfb/0x160 [ 90.164103][ T5351] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 90.164163][ T5351] ? __pfx_ima_file_free+0x10/0x10 [ 90.164203][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.164249][ T5351] v9fs_dir_release+0x151/0x560 [ 90.164295][ T5351] ? __pfx___might_resched+0x10/0x10 [ 90.164332][ T5351] ? __pfx_v9fs_dir_release+0x10/0x10 [ 90.164367][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.164409][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.164449][ T5351] ? evm_file_release+0x11c/0x1c0 [ 90.164491][ T5351] ? __pfx_v9fs_dir_release+0x10/0x10 [ 90.164526][ T5351] __fput+0x241/0x880 [ 90.164560][ T5351] task_work_run+0x251/0x310 [ 90.164589][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.164634][ T5351] ? __pfx_task_work_run+0x10/0x10 [ 90.164665][ T5351] ? __pfx_task_work_add+0x10/0x10 [ 90.164695][ T5351] get_signal+0x15e6/0x1740 [ 90.164732][ T5351] ? fput+0x1af/0x230 [ 90.164757][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.164797][ T5351] ? do_sendfile+0xc70/0xe10 [ 90.164838][ T5351] ? __pfx_get_signal+0x10/0x10 [ 90.164877][ T5351] arch_do_signal_or_restart+0x96/0x860 [ 90.164917][ T5351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 90.164951][ T5351] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.417940][ T5351] ? syscall_exit_to_user_mode+0xa3/0x370 [ 90.423697][ T5351] syscall_exit_to_user_mode+0xc9/0x370 [ 90.429277][ T5351] do_syscall_64+0x100/0x230 [ 90.433903][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.439574][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.445515][ T5351] RIP: 0033:0x7f07f117def9 [ 90.449964][ T5351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.469604][ T5351] RSP: 002b:00007f07f2032038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 90.478045][ T5351] RAX: 0000000000ea0000 RBX: 00007f07f1336058 RCX: 00007f07f117def9 [ 90.486032][ T5351] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000007 [ 90.494021][ T5351] RBP: 00007f07f11f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 90.502008][ T5351] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 90.509999][ T5351] R13: 0000000000000000 R14: 00007f07f1336058 R15: 00007ffccf46aca8 [ 90.517999][ T5351] [ 90.521116][ T5351] [ 90.523455][ T5351] Allocated by task 5351: [ 90.527789][ T5351] kasan_save_track+0x3f/0x80 [ 90.532501][ T5351] __kasan_kmalloc+0x98/0xb0 [ 90.537127][ T5351] __kmalloc_cache_noprof+0x19c/0x2c0 [ 90.542521][ T5351] netfs_buffer_append_folio+0x1f1/0x8b0 [ 90.548196][ T5351] netfs_write_folio+0xe69/0x1fe0 [ 90.553241][ T5351] netfs_writepages+0x89f/0xe80 [ 90.558110][ T5351] do_writepages+0x35f/0x870 [ 90.562722][ T5351] filemap_fdatawrite_wbc+0x125/0x180 [ 90.568122][ T5351] filemap_fdatawrite+0xfb/0x160 [ 90.573100][ T5351] v9fs_dir_release+0x151/0x560 [ 90.578006][ T5351] __fput+0x241/0x880 [ 90.582097][ T5351] task_work_run+0x251/0x310 [ 90.586797][ T5351] get_signal+0x15e6/0x1740 [ 90.591328][ T5351] arch_do_signal_or_restart+0x96/0x860 [ 90.596988][ T5351] syscall_exit_to_user_mode+0xc9/0x370 [ 90.602561][ T5351] do_syscall_64+0x100/0x230 [ 90.607175][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.613101][ T5351] [ 90.615438][ T5351] Freed by task 11: [ 90.619255][ T5351] kasan_save_track+0x3f/0x80 [ 90.623975][ T5351] kasan_save_free_info+0x40/0x50 [ 90.629030][ T5351] poison_slab_object+0xe0/0x150 [ 90.634004][ T5351] __kasan_slab_free+0x37/0x60 [ 90.638801][ T5351] kfree+0x149/0x360 [ 90.642715][ T5351] netfs_delete_buffer_head+0x9f/0xd0 [ 90.648129][ T5351] netfs_write_collection_worker+0x1b9a/0x4950 [ 90.654319][ T5351] process_scheduled_works+0xa2e/0x1830 [ 90.659898][ T5351] worker_thread+0x870/0xd30 [ 90.664525][ T5351] kthread+0x2f2/0x390 [ 90.668616][ T5351] ret_from_fork+0x4d/0x80 [ 90.673062][ T5351] ret_from_fork_asm+0x1a/0x30 [ 90.677858][ T5351] [ 90.680191][ T5351] The buggy address belongs to the object at ffff8880277d7400 [ 90.680191][ T5351] which belongs to the cache kmalloc-512 of size 512 [ 90.694264][ T5351] The buggy address is located 288 bytes inside of [ 90.694264][ T5351] freed 512-byte region [ffff8880277d7400, ffff8880277d7600) [ 90.708090][ T5351] [ 90.710514][ T5351] The buggy address belongs to the physical page: [ 90.716930][ T5351] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x277d4 [ 90.725800][ T5351] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.734325][ T5351] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 90.741894][ T5351] page_type: 0xfdffffff(slab) [ 90.746593][ T5351] raw: 00fff00000000040 ffff88801ac41c80 dead000000000122 0000000000000000 [ 90.755293][ T5351] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 90.763905][ T5351] head: 00fff00000000040 ffff88801ac41c80 dead000000000122 0000000000000000 [ 90.772599][ T5351] head: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000 [ 90.781297][ T5351] head: 00fff00000000002 ffffea00009df501 ffffffffffffffff 0000000000000000 [ 90.789994][ T5351] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 90.798680][ T5351] page dumped because: kasan: bad access detected [ 90.805102][ T5351] page_owner tracks the page as allocated [ 90.810827][ T5351] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 144, tgid 144 (kworker/u8:5), ts 90045910545, free_ts 89924642566 [ 90.833446][ T5351] post_alloc_hook+0x1f3/0x230 [ 90.838275][ T5351] get_page_from_freelist+0x2e4c/0x2f10 [ 90.843866][ T5351] __alloc_pages_noprof+0x256/0x6c0 [ 90.849104][ T5351] alloc_slab_page+0x5f/0x120 [ 90.853818][ T5351] allocate_slab+0x5a/0x2f0 [ 90.858351][ T5351] ___slab_alloc+0xcd1/0x14b0 [ 90.863055][ T5351] __slab_alloc+0x58/0xa0 [ 90.867421][ T5351] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 90.872822][ T5351] __ipv6_dev_mc_inc+0x429/0xaa0 [ 90.877796][ T5351] addrconf_dad_work+0x448/0x16f0 [ 90.882856][ T5351] process_scheduled_works+0xa2e/0x1830 [ 90.888442][ T5351] worker_thread+0x870/0xd30 [ 90.893063][ T5351] kthread+0x2f2/0x390 [ 90.897147][ T5351] ret_from_fork+0x4d/0x80 [ 90.901598][ T5351] ret_from_fork_asm+0x1a/0x30 [ 90.906396][ T5351] page last free pid 5221 tgid 5221 stack trace: [ 90.912736][ T5351] free_unref_page+0xd22/0xea0 [ 90.917543][ T5351] __slab_free+0x31b/0x3d0 [ 90.921992][ T5351] qlist_free_all+0x9e/0x140 [ 90.926615][ T5351] kasan_quarantine_reduce+0x14f/0x170 [ 90.932105][ T5351] __kasan_slab_alloc+0x23/0x80 [ 90.936967][ T5351] __kmalloc_noprof+0x1a6/0x400 [ 90.937001][ T5351] tomoyo_realpath_from_path+0xcf/0x5e0 [ 90.937028][ T5351] tomoyo_path_number_perm+0x23a/0x880 [ 90.937061][ T5351] security_file_ioctl+0x77/0xb0 [ 90.957876][ T5351] __se_sys_ioctl+0x47/0x170 [ 90.962494][ T5351] do_syscall_64+0xf3/0x230 [ 90.967021][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.972944][ T5351] [ 90.975284][ T5351] Memory state around the buggy address: [ 90.980924][ T5351] ffff8880277d7400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.989003][ T5351] ffff8880277d7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.997085][ T5351] >ffff8880277d7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.005156][ T5351] ^ [ 91.010282][ T5351] ffff8880277d7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.018362][ T5351] ffff8880277d7600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.026442][ T5351] ================================================================== [ 91.104530][ T5356] ubi1: attaching mtd0 [ 91.108932][ T5356] ubi1 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74) [ 91.372379][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.393866][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437869][ T5351] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.445144][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: syz.3.9 Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 91.455242][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.465334][ T5351] Call Trace: [ 91.468628][ T5351] [ 91.471584][ T5351] dump_stack_lvl+0x241/0x360 [ 91.476295][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.481529][ T5351] ? __pfx__printk+0x10/0x10 [ 91.486148][ T5351] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.492169][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.497839][ T5351] ? vscnprintf+0x5d/0x90 [ 91.502202][ T5351] panic+0x349/0x860 [ 91.506126][ T5351] ? check_panic_on_warn+0x21/0xb0 [ 91.511263][ T5351] ? __pfx_panic+0x10/0x10 [ 91.515715][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.521388][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.527493][ T5351] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 91.533596][ T5351] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.539953][ T5351] check_panic_on_warn+0x86/0xb0 [ 91.544915][ T5351] ? iov_iter_folioq_advance+0x10c/0x360 [ 91.550570][ T5351] end_report+0x77/0x160 [ 91.554855][ T5351] kasan_report+0x154/0x180 [ 91.559395][ T5351] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 91.565149][ T5351] ? iov_iter_folioq_advance+0x10c/0x360 [ 91.570809][ T5351] iov_iter_folioq_advance+0x10c/0x360 [ 91.576299][ T5351] netfs_write_folio+0x154b/0x1fe0 [ 91.581452][ T5351] netfs_writepages+0x89f/0xe80 [ 91.586330][ T5351] ? __pfx_netfs_writepages+0x10/0x10 [ 91.591734][ T5351] ? __pfx_netfs_writepages+0x10/0x10 [ 91.597131][ T5351] do_writepages+0x35f/0x870 [ 91.601757][ T5351] ? __pfx_do_writepages+0x10/0x10 [ 91.606894][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.612567][ T5351] ? filemap_fdatawrite_wbc+0x11a/0x180 [ 91.618143][ T5351] ? do_raw_spin_lock+0x14f/0x370 [ 91.623194][ T5351] ? __pfx_lock_release+0x10/0x10 [ 91.628255][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.633923][ T5351] ? do_raw_spin_unlock+0x13c/0x8b0 [ 91.639151][ T5351] ? wbc_attach_and_unlock_inode+0x565/0x580 [ 91.645168][ T5351] filemap_fdatawrite_wbc+0x125/0x180 [ 91.650584][ T5351] filemap_fdatawrite+0xfb/0x160 [ 91.655557][ T5351] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 91.661169][ T5351] ? __pfx_ima_file_free+0x10/0x10 [ 91.666317][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.671997][ T5351] v9fs_dir_release+0x151/0x560 [ 91.676884][ T5351] ? __pfx___might_resched+0x10/0x10 [ 91.682206][ T5351] ? __pfx_v9fs_dir_release+0x10/0x10 [ 91.687609][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.693283][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.698953][ T5351] ? evm_file_release+0x11c/0x1c0 [ 91.704017][ T5351] ? __pfx_v9fs_dir_release+0x10/0x10 [ 91.709419][ T5351] __fput+0x241/0x880 [ 91.713434][ T5351] task_work_run+0x251/0x310 [ 91.718045][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.723718][ T5351] ? __pfx_task_work_run+0x10/0x10 [ 91.728854][ T5351] ? __pfx_task_work_add+0x10/0x10 [ 91.733998][ T5351] get_signal+0x15e6/0x1740 [ 91.738535][ T5351] ? fput+0x1af/0x230 [ 91.742541][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.748211][ T5351] ? do_sendfile+0xc70/0xe10 [ 91.752837][ T5351] ? __pfx_get_signal+0x10/0x10 [ 91.757717][ T5351] arch_do_signal_or_restart+0x96/0x860 [ 91.763293][ T5351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 91.769647][ T5351] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.775668][ T5351] ? syscall_exit_to_user_mode+0xa3/0x370 [ 91.781413][ T5351] syscall_exit_to_user_mode+0xc9/0x370 [ 91.786986][ T5351] do_syscall_64+0x100/0x230 [ 91.791607][ T5351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.797282][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.803208][ T5351] RIP: 0033:0x7f07f117def9 [ 91.807645][ T5351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.827280][ T5351] RSP: 002b:00007f07f2032038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 91.835724][ T5351] RAX: 0000000000ea0000 RBX: 00007f07f1336058 RCX: 00007f07f117def9 [ 91.843718][ T5351] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000007 [ 91.851707][ T5351] RBP: 00007f07f11f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 91.859701][ T5351] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 91.867697][ T5351] R13: 0000000000000000 R14: 00007f07f1336058 R15: 00007ffccf46aca8 [ 91.875716][ T5351] [ 91.878976][ T5351] Kernel Offset: disabled [ 91.883301][ T5351] Rebooting in 86400 seconds..