Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs [ 32.140867][ T4337] cgroup: Unknown subsys name 'net' [ 32.418165][ T4337] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.682104][ T4337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 35.721948][ T4356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.723413][ T4356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.724705][ T4356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.726853][ T4356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.728289][ T4356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.729603][ T4356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.180366][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.181782][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.183945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.194965][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.196394][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.198012][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.793533][ T4408] chnl_net:caif_netlink_parms(): no params data found [ 36.809899][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.811136][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.812701][ T4408] device bridge_slave_0 entered promiscuous mode [ 36.814732][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.816734][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.818316][ T4408] device bridge_slave_1 entered promiscuous mode [ 36.825719][ T4408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.828393][ T4408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.834687][ T4408] team0: Port device team_slave_0 added [ 36.839575][ T4408] team0: Port device team_slave_1 added [ 36.845166][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.846795][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.851037][ T4408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.853751][ T4408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.854885][ T4408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.859306][ T4408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.916806][ T4408] device hsr_slave_0 entered promiscuous mode [ 36.955962][ T4408] device hsr_slave_1 entered promiscuous mode [ 37.047817][ T4408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.076731][ T4408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.124030][ T4408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.167830][ T4408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.219736][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.220914][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.222187][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.223372][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.240421][ T4408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.243962][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.248181][ T1867] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.249909][ T1867] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.251632][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.256859][ T4408] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.260097][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.261657][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.262895][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.275376][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.277310][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.278506][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.286758][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.288564][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.291950][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.295053][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.298556][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.301693][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.369603][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.370989][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.374735][ T4408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.381295][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.389905][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.391732][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.393164][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.395523][ T4408] device veth0_vlan entered promiscuous mode [ 37.407214][ T4408] device veth1_vlan entered promiscuous mode [ 37.415085][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.417106][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.418627][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.421257][ T4408] device veth0_macvtap entered promiscuous mode [ 37.423649][ T4408] device veth1_macvtap entered promiscuous mode [ 37.429838][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.431221][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.433270][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.436399][ T4408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.437939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.440391][ T4408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.441777][ T4408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.443131][ T4408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.444514][ T4408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:37 executed programs: 0 [ 37.921471][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.923032][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.924493][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.926407][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.927807][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.929073][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.305698][ T4431] chnl_net:caif_netlink_parms(): no params data found [ 38.320687][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.321954][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.323547][ T4431] device bridge_slave_0 entered promiscuous mode [ 38.328899][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.330166][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.331856][ T4431] device bridge_slave_1 entered promiscuous mode [ 38.339354][ T4431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.436406][ T4431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.626773][ T4431] team0: Port device team_slave_0 added [ 38.693159][ T4431] team0: Port device team_slave_1 added [ 38.700022][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.701245][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.705909][ T4431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.708423][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.709574][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.713918][ T4431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.736965][ T4431] device hsr_slave_0 entered promiscuous mode [ 38.775883][ T4431] device hsr_slave_1 entered promiscuous mode [ 38.815663][ T4431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.817095][ T4431] Cannot create hsr debugfs directory [ 39.228443][ T4431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.996157][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 42.075933][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 42.416698][ T4431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.068238][ T4431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.237205][ T4431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.517790][ T4431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.610178][ T4431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.702940][ T4431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.747026][ T4431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.880879][ T4431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.884299][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.887263][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.951218][ T4431] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.953581][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.955151][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.956764][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.958001][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.959643][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.962584][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.964108][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.965740][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.966892][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.969411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.971953][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.975068][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.977287][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.978896][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.981584][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.983199][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.986957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.988594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.990873][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.992375][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.994699][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.089893][ T11] device hsr_slave_0 left promiscuous mode [ 44.125975][ T11] device hsr_slave_1 left promiscuous mode [ 44.165588][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 44.237051][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.238307][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.240083][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.241191][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.242667][ T11] device bridge_slave_1 left promiscuous mode [ 44.244062][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.296292][ T11] device bridge_slave_0 left promiscuous mode [ 44.297331][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.415850][ T11] device veth1_macvtap left promiscuous mode [ 44.416967][ T11] device veth0_macvtap left promiscuous mode [ 44.417942][ T11] device veth1_vlan left promiscuous mode [ 44.418940][ T11] device veth0_vlan left promiscuous mode [ 46.235563][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 46.567240][ T11] team0 (unregistering): Port device team_slave_1 removed [ 46.736164][ T11] team0 (unregistering): Port device team_slave_0 removed [ 46.906295][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.105951][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.626424][ T11] bond0 (unregistering): Released all slaves [ 48.967401][ T4431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.981286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.982508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.983776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.985318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.986968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.988574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.990351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.991766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.993988][ T4431] device veth0_vlan entered promiscuous mode [ 48.997843][ T4431] device veth1_vlan entered promiscuous mode [ 49.004238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.007153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.009481][ T4431] device veth0_macvtap entered promiscuous mode [ 49.011848][ T4431] device veth1_macvtap entered promiscuous mode [ 49.019046][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.020336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.021846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.023102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.024643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.028972][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.031273][ T4431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.032661][ T4431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.034153][ T4431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.036149][ T4431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.038280][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.040170][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.059230][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.063842][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.065706][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.074161][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.075394][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.078224][ T1867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.114237][ T4455] loop0: detected capacity change from 0 to 16 [ 49.120566][ T4455] erofs: (device loop0): mounted with root inode @ nid 36. [ 49.122916][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.125114][ T4455] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 49.127241][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.128840][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.130396][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 49.131916][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.133547][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 49.135074][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.137267][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 49.138700][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 49.140080][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 49.141729][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 49.143264][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.144844][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 49.147491][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 49.148889][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 49.150405][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 49.152273][ T4455] syz.0.17: attempt to access beyond end of device [ 49.152273][ T4455] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 49.154375][ T4455] syz.0.17: attempt to access beyond end of device [ 49.154375][ T4455] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 49.157172][ T4455] syz.0.17: attempt to access beyond end of device [ 49.157172][ T4455] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 49.160168][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 49.161637][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 49.163122][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.164726][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 49.166726][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.168382][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 49.169900][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 49.171360][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 49.172905][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.174428][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 49.176530][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.177976][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 49.179680][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 49.181030][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 49.182510][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 49.183876][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 49.185764][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 49.187251][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 49.188739][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.190292][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 49.191772][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.193135][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 49.194655][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 49.196723][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.198072][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 49.199553][ T4455] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 49.201275][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 49.202685][ T4455] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 49.204207][ T4455] syz.0.17: attempt to access beyond end of device [ 49.204207][ T4455] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 49.206634][ T4455] syz.0.17: attempt to access beyond end of device [ 49.206634][ T4455] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 49.208783][ T4455] syz.0.17: attempt to access beyond end of device [ 49.208783][ T4455] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 49.211405][ T4455] ================================================================== [ 49.212681][ T4455] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 49.214022][ T4455] Read of size 1622 at addr ffff0000d2a67e5b by task syz.0.17/4455 [ 49.215271][ T4455] [ 49.215680][ T4455] CPU: 1 PID: 4455 Comm: syz.0.17 Not tainted syzkaller #0 [ 49.216882][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 49.218552][ T4455] Call trace: [ 49.219120][ T4455] dump_backtrace+0x1c0/0x1ec [ 49.219942][ T4455] show_stack+0x2c/0x3c [ 49.220653][ T4455] __dump_stack+0x30/0x40 [ 49.221409][ T4455] dump_stack_lvl+0xf4/0x15c [ 49.222220][ T4455] print_address_description+0x88/0x218 [ 49.223248][ T4455] print_report+0x50/0x68 [ 49.223988][ T4455] kasan_report+0xa8/0xfc [ 49.224737][ T4455] kasan_check_range+0x258/0x290 [ 49.225615][ T4455] memcpy+0x48/0x90 [ 49.226246][ T4455] z_erofs_transform_plain+0x3a4/0x490 [ 49.227136][ T4455] z_erofs_decompress+0x9c/0xd4 [ 49.227951][ T4455] z_erofs_decompress_queue+0x100c/0x1b40 [ 49.228958][ T4455] z_erofs_runqueue+0x152c/0x16cc [ 49.229851][ T4455] z_erofs_readahead+0x84c/0xbf4 [ 49.230639][ T4455] read_pages+0x158/0x680 [ 49.231375][ T4455] page_cache_ra_unbounded+0x490/0x574 [ 49.232367][ T4455] force_page_cache_ra+0x248/0x2b0 [ 49.233228][ T4455] generic_fadvise+0x340/0x5b8 [ 49.234022][ T4455] __arm64_sys_fadvise64_64+0x12c/0x174 [ 49.234974][ T4455] invoke_syscall+0x98/0x2b4 [ 49.235850][ T4455] el0_svc_common+0x138/0x258 [ 49.236614][ T4455] do_el0_svc+0x58/0x130 [ 49.237331][ T4455] el0_svc+0x58/0x128 [ 49.238008][ T4455] el0t_64_sync_handler+0x84/0xf0 [ 49.238835][ T4455] el0t_64_sync+0x18c/0x190 [ 49.239612][ T4455] [ 49.239964][ T4455] The buggy address belongs to the physical page: [ 49.241131][ T4455] page:0000000032c728ad refcount:2 mapcount:0 mapping:0000000044d71d02 index:0x1 pfn:0x112a67 [ 49.242904][ T4455] memcg:ffff0000da914000 [ 49.243633][ T4455] aops:managed_cache_aops ino:0 [ 49.244519][ T4455] flags: 0x5ffd00000002014(uptodate|lru|private|node=0|zone=2|lastcpupid=0x7ff) [ 49.246085][ T4455] raw: 05ffd00000002014 fffffc0003791948 fffffc0003791e88 ffff0000e57f07c8 [ 49.247440][ T4455] raw: 0000000000000001 ffff0000e2494000 00000002ffffffff ffff0000da914000 [ 49.248850][ T4455] page dumped because: kasan: bad access detected [ 49.250029][ T4455] [ 49.250413][ T4455] Memory state around the buggy address: [ 49.251292][ T4455] ffff0000d2a67f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.252511][ T4455] ffff0000d2a67f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.253814][ T4455] >ffff0000d2a68000: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 49.255221][ T4455] ^ [ 49.255947][ T4455] ffff0000d2a68080: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 49.257268][ T4455] ffff0000d2a68100: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 49.258589][ T4455] ================================================================== [ 49.260186][ T4455] Disabling lock debugging due to kernel taint