no interfaces have a carrier [ 60.814222][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.819317][ T5501] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 86.833910][ T989] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. 2025/09/05 13:21:10 parsed 1 programs [ 92.515650][ T5842] cgroup: Unknown subsys name 'net' [ 92.746465][ T5842] cgroup: Unknown subsys name 'cpuset' [ 92.821736][ T5842] cgroup: Unknown subsys name 'rlimit' [ 94.733566][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.654942][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.656472][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.657230][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.658599][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.659369][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.616404][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.616432][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.750892][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 101.768345][ T4865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.768363][ T4865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.514492][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.514655][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.515018][ T5902] bridge_slave_0: entered allmulticast mode [ 102.517922][ T5902] bridge_slave_0: entered promiscuous mode [ 102.549652][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.549799][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.550394][ T5902] bridge_slave_1: entered allmulticast mode [ 102.558335][ T5902] bridge_slave_1: entered promiscuous mode [ 102.731177][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.737062][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.875877][ T5902] team0: Port device team_slave_0 added [ 102.881030][ T5902] team0: Port device team_slave_1 added [ 103.045916][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.045928][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.045946][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.049432][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.049446][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.049469][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.639528][ T5902] hsr_slave_0: entered promiscuous mode [ 103.640614][ T5902] hsr_slave_1: entered promiscuous mode [ 104.514179][ T5902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.543986][ T5902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.577097][ T5902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.617110][ T5902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.744128][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.770301][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.783977][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.784468][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.791023][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.791171][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.028279][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.079678][ T5902] veth0_vlan: entered promiscuous mode [ 105.089871][ T5902] veth1_vlan: entered promiscuous mode [ 105.123486][ T5902] veth0_macvtap: entered promiscuous mode [ 105.127754][ T5902] veth1_macvtap: entered promiscuous mode [ 105.152594][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.170795][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.186905][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187181][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187251][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187300][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/05 13:21:26 executed programs: 0 [ 105.594368][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.600380][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.603210][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.616628][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.617837][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.759984][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.761914][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.762742][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.764047][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.765325][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.854325][ T5966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.856438][ T5966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.857406][ T5966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.858647][ T5966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.859462][ T5966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.935957][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.939590][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.962157][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.968927][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.989683][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.991121][ T5972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.014192][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.015306][ T5972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.044296][ T5972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.062960][ T5972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.349631][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 107.496717][ T1200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.627622][ T5966] Bluetooth: hci0: command tx timeout [ 107.678984][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 107.927764][ T1200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.941461][ T5966] Bluetooth: hci2: command tx timeout [ 107.941576][ T5966] Bluetooth: hci1: command tx timeout [ 108.025524][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 108.071077][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 108.080181][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 108.101401][ T5155] Bluetooth: hci3: command tx timeout [ 108.101522][ T5155] Bluetooth: hci4: command tx timeout [ 108.316848][ T1200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.955997][ T1200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.003227][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.004558][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.004746][ T5957] bridge_slave_0: entered allmulticast mode [ 109.007308][ T5957] bridge_slave_0: entered promiscuous mode [ 109.132710][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.132859][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.133080][ T5957] bridge_slave_1: entered allmulticast mode [ 109.136220][ T5957] bridge_slave_1: entered promiscuous mode [ 109.459838][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.460042][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.460250][ T5961] bridge_slave_0: entered allmulticast mode [ 109.464287][ T5961] bridge_slave_0: entered promiscuous mode [ 109.701703][ T5966] Bluetooth: hci0: command tx timeout [ 109.864449][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.864603][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.864826][ T5961] bridge_slave_1: entered allmulticast mode [ 109.867998][ T5961] bridge_slave_1: entered promiscuous mode [ 109.906780][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.950831][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.950949][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.951091][ T5959] bridge_slave_0: entered allmulticast mode [ 109.975479][ T5959] bridge_slave_0: entered promiscuous mode [ 110.022772][ T5155] Bluetooth: hci2: command tx timeout [ 110.022896][ T5966] Bluetooth: hci1: command tx timeout [ 110.181624][ T5155] Bluetooth: hci3: command tx timeout [ 110.181715][ T5966] Bluetooth: hci4: command tx timeout [ 110.221430][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.221945][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.222092][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.222284][ T5959] bridge_slave_1: entered allmulticast mode [ 110.224797][ T5959] bridge_slave_1: entered promiscuous mode [ 110.227438][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.227516][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.227635][ T5964] bridge_slave_0: entered allmulticast mode [ 110.229212][ T5964] bridge_slave_0: entered promiscuous mode [ 110.236003][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.236201][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.236404][ T5967] bridge_slave_0: entered allmulticast mode [ 110.239318][ T5967] bridge_slave_0: entered promiscuous mode [ 110.589942][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.590086][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.590334][ T5964] bridge_slave_1: entered allmulticast mode [ 110.604543][ T5964] bridge_slave_1: entered promiscuous mode [ 110.606576][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.606732][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.606956][ T5967] bridge_slave_1: entered allmulticast mode [ 110.621631][ T5967] bridge_slave_1: entered promiscuous mode [ 110.651963][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.946922][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.963816][ T5957] team0: Port device team_slave_0 added [ 110.972395][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.200255][ T5957] team0: Port device team_slave_1 added [ 111.205166][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.365966][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.377815][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.596757][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.599390][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.618249][ T5961] team0: Port device team_slave_0 added [ 111.781528][ T5966] Bluetooth: hci0: command tx timeout [ 111.994108][ T5961] team0: Port device team_slave_1 added [ 111.995067][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.995076][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.995093][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.997402][ T5959] team0: Port device team_slave_0 added [ 112.101365][ T5966] Bluetooth: hci1: command tx timeout [ 112.101412][ T5966] Bluetooth: hci2: command tx timeout [ 112.243689][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.243705][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.243731][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.250504][ T5959] team0: Port device team_slave_1 added [ 112.259444][ T5964] team0: Port device team_slave_0 added [ 112.261652][ T5155] Bluetooth: hci4: command tx timeout [ 112.261682][ T5155] Bluetooth: hci3: command tx timeout [ 112.263193][ T5967] team0: Port device team_slave_0 added [ 112.605991][ T5967] team0: Port device team_slave_1 added [ 112.608535][ T5964] team0: Port device team_slave_1 added [ 112.609366][ T1200] bridge_slave_1: left allmulticast mode [ 112.609512][ T1200] bridge_slave_1: left promiscuous mode [ 112.611142][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.699052][ T1200] bridge_slave_0: left allmulticast mode [ 112.699073][ T1200] bridge_slave_0: left promiscuous mode [ 112.699255][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.861862][ T5966] Bluetooth: hci0: command tx timeout [ 114.181366][ T5966] Bluetooth: hci1: command tx timeout [ 114.184695][ T5966] Bluetooth: hci2: command tx timeout [ 114.341440][ T5155] Bluetooth: hci4: command tx timeout [ 114.341485][ T5966] Bluetooth: hci3: command tx timeout [ 114.462535][ T1200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.541829][ T1200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.565751][ T1200] bond0 (unregistering): Released all slaves [ 114.666892][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.666905][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.666924][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.992813][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.992828][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.992857][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.999956][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.999970][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.999996][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.375110][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.375127][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.375144][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.376234][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.376245][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.376263][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.378533][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.378546][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.378562][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.894033][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.894049][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.894073][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.897079][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.897094][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.897122][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.020974][ T5957] hsr_slave_0: entered promiscuous mode [ 116.023871][ T5957] hsr_slave_1: entered promiscuous mode [ 116.025027][ T5957] debugfs: 'hsr0' already exists in 'hsr' [ 116.025152][ T5957] Cannot create hsr debugfs directory [ 116.577392][ T5961] hsr_slave_0: entered promiscuous mode [ 116.582072][ T5961] hsr_slave_1: entered promiscuous mode [ 116.582922][ T5961] debugfs: 'hsr0' already exists in 'hsr' [ 116.582943][ T5961] Cannot create hsr debugfs directory [ 116.968343][ T5959] hsr_slave_0: entered promiscuous mode [ 116.969542][ T5959] hsr_slave_1: entered promiscuous mode [ 116.970605][ T5959] debugfs: 'hsr0' already exists in 'hsr' [ 116.970630][ T5959] Cannot create hsr debugfs directory [ 117.199420][ T5967] hsr_slave_0: entered promiscuous mode [ 117.200249][ T5967] hsr_slave_1: entered promiscuous mode [ 117.200788][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 117.200804][ T5967] Cannot create hsr debugfs directory [ 117.377622][ T5964] hsr_slave_0: entered promiscuous mode [ 117.378484][ T5964] hsr_slave_1: entered promiscuous mode [ 117.379087][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 117.379106][ T5964] Cannot create hsr debugfs directory [ 118.081524][ T1200] hsr_slave_0: left promiscuous mode [ 118.121524][ T1200] hsr_slave_1: left promiscuous mode [ 118.122215][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.122261][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.150391][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.150426][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.242056][ T1200] veth1_macvtap: left promiscuous mode [ 118.242300][ T1200] veth0_macvtap: left promiscuous mode [ 118.242613][ T1200] veth1_vlan: left promiscuous mode [ 118.242944][ T1200] veth0_vlan: left promiscuous mode [ 120.252653][ T1200] team0 (unregistering): Port device team_slave_1 removed [ 120.452577][ T1200] team0 (unregistering): Port device team_slave_0 removed [ 123.557689][ T5957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.612890][ T5957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.796842][ T5957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.883029][ T5957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.579672][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.624120][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.647262][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.647490][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.666237][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.666436][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.943908][ T5961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.997762][ T5961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.042131][ T5961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.118476][ T5961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.363609][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.428997][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.516224][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.557065][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.713853][ T5967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.764975][ T5967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.809598][ T5967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.873261][ T5967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.954097][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.029102][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.078016][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.127047][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 126.160746][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 126.284994][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.390015][ T5957] veth0_vlan: entered promiscuous mode [ 126.406899][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.475397][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.478414][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.478656][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.503920][ T5957] veth1_vlan: entered promiscuous mode [ 126.536558][ T4897] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.536712][ T4897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.620030][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.672241][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.677764][ T4897] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.678090][ T4897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.736613][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.736736][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.777451][ T5957] veth0_macvtap: entered promiscuous mode [ 126.812932][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.813726][ T5957] veth1_macvtap: entered promiscuous mode [ 126.848049][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.880334][ T4897] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.880525][ T4897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.971800][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.971950][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.012450][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.024333][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.090978][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.110401][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.110557][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.197082][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.207958][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.208250][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.219410][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.228127][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.244804][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.576214][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.658075][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.658095][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.803327][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.832762][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.832779][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/05 13:21:49 executed programs: 10 [ 128.015926][ T5961] veth0_vlan: entered promiscuous mode [ 128.113593][ T5961] veth1_vlan: entered promiscuous mode [ 128.194670][ T5959] veth0_vlan: entered promiscuous mode [ 128.286322][ T5959] veth1_vlan: entered promiscuous mode [ 128.322060][ T5961] veth0_macvtap: entered promiscuous mode [ 128.357689][ T5961] veth1_macvtap: entered promiscuous mode [ 128.414407][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.449120][ T6095] loop0: detected capacity change from 0 to 16384 [ 128.567222][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.570290][ T5959] veth0_macvtap: entered promiscuous mode [ 128.620669][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.625762][ T5959] veth1_macvtap: entered promiscuous mode [ 128.632709][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.683726][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.701849][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.725011][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.761409][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.940385][ T6095] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none [ 128.940407][ T6095] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 128.940455][ T6095] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 128.945246][ T6095] bcachefs (loop0): invalid bkey in superblock btree=accounting level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2964fe5219fc11c5 written 16 min_key 347136:0:0 durability: 0 (invalid extent entry 0000000000017200) [ 128.945272][ T6095] invalid extent entry type (got 9, max 7), deleting [ 128.945380][ T6095] bcachefs (loop0): recovering from clean shutdown, journal seq 15 [ 128.945536][ T6095] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 128.945536][ T6095] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 129.019850][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.083552][ T6095] ================================================================== [ 129.083571][ T6095] BUG: KASAN: use-after-free in string+0x231/0x2b0 [ 129.083600][ T6095] Read of size 1 at addr ffff888047d934f7 by task syz.0.17/6095 [ 129.083614][ T6095] [ 129.083645][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{[ 129.083645][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.083666][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.083684][ T6095] Call Trace: [ 129.083691][ T6095] [ 129.083698][ T6095] dump_stack_lvl+0x189/0x250 [ 129.083731][ T6095] ? __kasan_check_byte+0x12/0x40 [ 129.083757][ T6095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.083785][ T6095] ? lock_release+0x4b/0x3e0 [ 129.083815][ T6095] ? __virt_addr_valid+0x4a5/0x5c0 [ 129.083834][ T6095] print_report+0xca/0x240 [ 129.083857][ T6095] ? string+0x231/0x2b0 [ 129.083874][ T6095] kasan_report+0x118/0x150 [ 129.083899][ T6095] ? number+0xd18/0xf60 [ 129.083918][ T6095] ? string+0x231/0x2b0 [ 129.083937][ T6095] string+0x231/0x2b0 [ 129.083955][ T6095] vsnprintf+0x739/0xf00 [ 129.083975][ T6095] bch2_prt_printf+0x1c6/0x740 [ 129.084002][ T6095] ? __pfx_bch2_prt_printf+0x10/0x10 [ 129.084023][ T6095] ? __pfx_bch2_prt_printf+0x10/0x10 [ 129.084046][ T6095] bch2_dirent_to_text+0x2bd/0xd20 [ 129.084073][ T6095] ? bch2_bkey_val_to_text+0xe4/0x150 [ 129.084110][ T6095] __bch2_bkey_fsck_err+0x3f7/0x540 [ 129.084132][ T6095] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 129.084148][ T6095] ? do_raw_spin_lock+0x121/0x290 [ 129.084173][ T6095] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 129.084199][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.084222][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.084247][ T6095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.084276][ T6095] bch2_dirent_validate+0x7b3/0xfb0 [ 129.084309][ T6095] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 129.084343][ T6095] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 129.084374][ T6095] bch2_bkey_val_validate+0x205/0x3e0 [ 129.084401][ T6095] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 129.084428][ T6095] ? __asan_memset+0x22/0x50 [ 129.084449][ T6095] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 129.084483][ T6095] bch2_btree_node_read_done+0x4051/0x5550 [ 129.084538][ T6095] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 129.084569][ T6095] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 129.084614][ T6095] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 129.084634][ T6095] ? bch2_printbuf_make_room+0xdb/0x360 [ 129.084661][ T6095] ? enumerated_ref_put+0xbe/0x270 [ 129.084691][ T6095] btree_node_read_work+0x40e/0xe60 [ 129.084728][ T6095] ? __pfx_btree_node_read_work+0x10/0x10 [ 129.084755][ T6095] ? bch2_latency_acct+0x436/0x520 [ 129.084777][ T6095] ? __pfx_bch2_latency_acct+0x10/0x10 [ 129.084797][ T6095] ? bio_associate_blkg+0x6d/0x230 [ 129.084818][ T6095] bch2_btree_node_read+0x887/0x2a00 [ 129.084852][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.084876][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.084900][ T6095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.084925][ T6095] ? __bch2_btree_node_hash_insert+0x142d/0x1ab0 [ 129.084947][ T6095] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 129.084973][ T6095] ? bch2_trans_unlock+0x8a/0x580 [ 129.084995][ T6095] ? bch2_trans_unlock+0x491/0x580 [ 129.085019][ T6095] bch2_btree_root_read+0x5f0/0x760 [ 129.085048][ T6095] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 129.085082][ T6095] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 129.085107][ T6095] read_btree_roots+0x2c6/0x840 [ 129.085128][ T6095] ? __pfx_read_btree_roots+0x10/0x10 [ 129.085152][ T6095] bch2_fs_recovery+0x261f/0x3a50 [ 129.085177][ T6095] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 129.085195][ T6095] ? lockdep_unlock+0x89/0x120 [ 129.085216][ T6095] ? validate_chain+0x897/0x2140 [ 129.085245][ T6095] ? __lock_acquire+0xab9/0xd20 [ 129.085271][ T6095] ? do_raw_spin_lock+0x121/0x290 [ 129.085296][ T6095] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 129.085321][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.085344][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.085368][ T6095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.085391][ T6095] ? do_raw_spin_lock+0x121/0x290 [ 129.085416][ T6095] ? rt_mutex_slowunlock+0x493/0x8a0 [ 129.085443][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.085474][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.085496][ T6095] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 129.085520][ T6095] ? bch2_fs_start+0xa0f/0xda0 [ 129.085542][ T6095] bch2_fs_start+0xaaf/0xda0 [ 129.085559][ T6095] ? bch2_fs_start+0x5e7/0xda0 [ 129.085576][ T6095] ? __pfx_bch2_fs_start+0x10/0x10 [ 129.085601][ T6095] ? sget+0x267/0x620 [ 129.085619][ T6095] bch2_fs_get_tree+0xb39/0x1520 [ 129.085667][ T6095] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 129.085693][ T6095] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 129.085723][ T6095] ? rcu_is_watching+0x15/0xb0 [ 129.085749][ T6095] ? cap_capable+0x11f/0x460 [ 129.085770][ T6095] ? safesetid_security_capable+0xa9/0x1a0 [ 129.085794][ T6095] vfs_get_tree+0x8f/0x2b0 [ 129.085818][ T6095] do_new_mount+0x2a2/0x9e0 [ 129.085845][ T6095] ? ns_capable+0x8a/0xf0 [ 129.085868][ T6095] ? __pfx_do_new_mount+0x10/0x10 [ 129.085890][ T6095] ? path_mount+0x61c/0xfe0 [ 129.085920][ T6095] __se_sys_mount+0x317/0x410 [ 129.085947][ T6095] ? __pfx___se_sys_mount+0x10/0x10 [ 129.085974][ T6095] ? do_syscall_64+0xbe/0x3b0 [ 129.085996][ T6095] ? __x64_sys_mount+0x20/0xc0 [ 129.086021][ T6095] do_syscall_64+0xfa/0x3b0 [ 129.086043][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.086063][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.086085][ T6095] ? clear_bhb_loop+0x60/0xb0 [ 129.086104][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.086140][ T6095] RIP: 0033:0x7f4e2abe038a [ 129.086161][ T6095] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.086174][ T6095] RSP: 002b:00007f4e2a245e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.086199][ T6095] RAX: ffffffffffffffda RBX: 00007f4e2a245ef0 RCX: 00007f4e2abe038a [ 129.086211][ T6095] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007f4e2a245eb0 [ 129.086224][ T6095] RBP: 0000200000000040 R08: 00007f4e2a245ef0 R09: 0000000000004000 [ 129.086237][ T6095] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940 [ 129.086249][ T6095] R13: 00007f4e2a245eb0 R14: 000000000000496e R15: 0000200000000000 [ 129.086270][ T6095] [ 129.086276][ T6095] [ 129.086280][ T6095] The buggy address belongs to the physical page: [ 129.086297][ T6095] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f04ca401 pfn:0x47d93 [ 129.086320][ T6095] flags: 0x80000000000000(node=0|zone=1) [ 129.086346][ T6095] raw: 0080000000000000 dead000000000100 dead000000000122 0000000000000000 [ 129.086361][ T6095] raw: 00000007f04ca401 0000000000000000 00000000ffffffff 0000000000000000 [ 129.086370][ T6095] page dumped because: kasan: bad access detected [ 129.086382][ T6095] page_owner tracks the page as freed [ 129.086389][ T6095] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5891, tgid 5891 (syz-executor), ts 99549782746, free_ts 100809868769 [ 129.086422][ T6095] post_alloc_hook+0x240/0x2a0 [ 129.086450][ T6095] get_page_from_freelist+0x2119/0x21b0 [ 129.086475][ T6095] __alloc_frozen_pages_noprof+0x181/0x370 [ 129.086493][ T6095] alloc_pages_mpol+0xd1/0x380 [ 129.086516][ T6095] alloc_pages_noprof+0xcf/0x1e0 [ 129.086540][ T6095] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 129.086564][ T6095] vmalloc_user_noprof+0xad/0xf0 [ 129.086590][ T6095] kcov_ioctl+0x58/0x650 [ 129.086611][ T6095] __se_sys_ioctl+0xfc/0x170 [ 129.086630][ T6095] do_syscall_64+0xfa/0x3b0 [ 129.086651][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.086666][ T6095] page last free pid 5894 tgid 5894 stack trace: [ 129.086675][ T6095] __free_frozen_pages+0xb59/0xce0 [ 129.086697][ T6095] vfree+0x2ad/0x470 [ 129.086718][ T6095] kcov_close+0x2e/0x60 [ 129.086738][ T6095] __fput+0x45b/0xa80 [ 129.086751][ T6095] task_work_run+0x1d4/0x260 [ 129.086766][ T6095] do_exit+0x6b5/0x2300 [ 129.086778][ T6095] do_group_exit+0x21c/0x2d0 [ 129.086792][ T6095] get_signal+0x125e/0x1310 [ 129.086811][ T6095] arch_do_signal_or_restart+0x9a/0x750 [ 129.086831][ T6095] exit_to_user_mode_loop+0x75/0x110 [ 129.086853][ T6095] do_syscall_64+0x2bd/0x3b0 [ 129.086876][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.086893][ T6095] [ 129.086897][ T6095] Memory state around the buggy address: [ 129.086906][ T6095] ffff888047d93380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 129.086918][ T6095] ffff888047d93400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 129.086931][ T6095] >ffff888047d93480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 129.086939][ T6095] ^ [ 129.086950][ T6095] ffff888047d93500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 129.086961][ T6095] ffff888047d93580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 129.086970][ T6095] ================================================================== [ 129.120777][ T6095] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.120800][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.120826][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.120839][ T6095] Call Trace: [ 129.120848][ T6095] [ 129.120856][ T6095] dump_stack_lvl+0x99/0x250 [ 129.120894][ T6095] ? __asan_memcpy+0x40/0x70 [ 129.120916][ T6095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.120947][ T6095] ? __pfx__printk+0x10/0x10 [ 129.120976][ T6095] vpanic+0x281/0x750 [ 129.121006][ T6095] ? preempt_schedule+0xae/0xc0 [ 129.121033][ T6095] ? __pfx_vpanic+0x10/0x10 [ 129.121063][ T6095] ? preempt_schedule_common+0x83/0xd0 [ 129.121089][ T6095] ? preempt_schedule+0xae/0xc0 [ 129.121114][ T6095] ? __pfx_preempt_schedule+0x10/0x10 [ 129.121145][ T6095] panic+0xb9/0xc0 [ 129.121180][ T6095] ? __pfx_panic+0x10/0x10 [ 129.121208][ T6095] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 129.121238][ T6095] ? string+0x231/0x2b0 [ 129.121260][ T6095] check_panic_on_warn+0x89/0xb0 [ 129.121281][ T6095] ? string+0x231/0x2b0 [ 129.121302][ T6095] end_report+0x78/0x160 [ 129.121329][ T6095] kasan_report+0x129/0x150 [ 129.121353][ T6095] ? number+0xd18/0xf60 [ 129.121372][ T6095] ? string+0x231/0x2b0 [ 129.121394][ T6095] string+0x231/0x2b0 [ 129.121416][ T6095] vsnprintf+0x739/0xf00 [ 129.121440][ T6095] bch2_prt_printf+0x1c6/0x740 [ 129.121481][ T6095] ? __pfx_bch2_prt_printf+0x10/0x10 [ 129.121508][ T6095] ? __pfx_bch2_prt_printf+0x10/0x10 [ 129.121538][ T6095] bch2_dirent_to_text+0x2bd/0xd20 [ 129.121573][ T6095] ? bch2_bkey_val_to_text+0xe4/0x150 [ 129.121622][ T6095] __bch2_bkey_fsck_err+0x3f7/0x540 [ 129.121651][ T6095] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 129.121673][ T6095] ? do_raw_spin_lock+0x121/0x290 [ 129.121706][ T6095] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 129.121738][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.121781][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.121809][ T6095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.121841][ T6095] bch2_dirent_validate+0x7b3/0xfb0 [ 129.121900][ T6095] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 129.121939][ T6095] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 129.121975][ T6095] bch2_bkey_val_validate+0x205/0x3e0 [ 129.122009][ T6095] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 129.122042][ T6095] ? __asan_memset+0x22/0x50 [ 129.122063][ T6095] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 129.122094][ T6095] bch2_btree_node_read_done+0x4051/0x5550 [ 129.122155][ T6095] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 129.122192][ T6095] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 129.122240][ T6095] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 129.122264][ T6095] ? bch2_printbuf_make_room+0xdb/0x360 [ 129.122293][ T6095] ? enumerated_ref_put+0xbe/0x270 [ 129.122326][ T6095] btree_node_read_work+0x40e/0xe60 [ 129.122385][ T6095] ? __pfx_btree_node_read_work+0x10/0x10 [ 129.122421][ T6095] ? bch2_latency_acct+0x436/0x520 [ 129.122449][ T6095] ? __pfx_bch2_latency_acct+0x10/0x10 [ 129.122480][ T6095] ? bio_associate_blkg+0x6d/0x230 [ 129.122506][ T6095] bch2_btree_node_read+0x887/0x2a00 [ 129.122546][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.122576][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.122607][ T6095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.122636][ T6095] ? __bch2_btree_node_hash_insert+0x142d/0x1ab0 [ 129.122665][ T6095] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 129.122700][ T6095] ? bch2_trans_unlock+0x8a/0x580 [ 129.122728][ T6095] ? bch2_trans_unlock+0x491/0x580 [ 129.122771][ T6095] bch2_btree_root_read+0x5f0/0x760 [ 129.122806][ T6095] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 129.122843][ T6095] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 129.122874][ T6095] read_btree_roots+0x2c6/0x840 [ 129.122900][ T6095] ? __pfx_read_btree_roots+0x10/0x10 [ 129.122929][ T6095] bch2_fs_recovery+0x261f/0x3a50 [ 129.122960][ T6095] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 129.122984][ T6095] ? lockdep_unlock+0x89/0x120 [ 129.123009][ T6095] ? validate_chain+0x897/0x2140 [ 129.123044][ T6095] ? __lock_acquire+0xab9/0xd20 [ 129.123086][ T6095] ? do_raw_spin_lock+0x121/0x290 [ 129.123113][ T6095] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 129.123140][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.123166][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.123193][ T6095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.123219][ T6095] ? do_raw_spin_lock+0x121/0x290 [ 129.123245][ T6095] ? rt_mutex_slowunlock+0x493/0x8a0 [ 129.123273][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.123299][ T6095] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.123325][ T6095] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 129.123356][ T6095] ? bch2_fs_start+0xa0f/0xda0 [ 129.123382][ T6095] bch2_fs_start+0xaaf/0xda0 [ 129.123405][ T6095] ? bch2_fs_start+0x5e7/0xda0 [ 129.123428][ T6095] ? __pfx_bch2_fs_start+0x10/0x10 [ 129.123484][ T6095] ? sget+0x267/0x620 [ 129.123510][ T6095] bch2_fs_get_tree+0xb39/0x1520 [ 129.123546][ T6095] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 129.123584][ T6095] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 129.123617][ T6095] ? rcu_is_watching+0x15/0xb0 [ 129.123649][ T6095] ? cap_capable+0x11f/0x460 [ 129.123673][ T6095] ? safesetid_security_capable+0xa9/0x1a0 [ 129.123703][ T6095] vfs_get_tree+0x8f/0x2b0 [ 129.123731][ T6095] do_new_mount+0x2a2/0x9e0 [ 129.123761][ T6095] ? ns_capable+0x8a/0xf0 [ 129.123786][ T6095] ? __pfx_do_new_mount+0x10/0x10 [ 129.123815][ T6095] ? path_mount+0x61c/0xfe0 [ 129.123848][ T6095] __se_sys_mount+0x317/0x410 [ 129.123879][ T6095] ? __pfx___se_sys_mount+0x10/0x10 [ 129.123912][ T6095] ? do_syscall_64+0xbe/0x3b0 [ 129.123941][ T6095] ? __x64_sys_mount+0x20/0xc0 [ 129.123971][ T6095] do_syscall_64+0xfa/0x3b0 [ 129.124000][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.124026][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.124047][ T6095] ? clear_bhb_loop+0x60/0xb0 [ 129.124071][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.124092][ T6095] RIP: 0033:0x7f4e2abe038a [ 129.124110][ T6095] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.124128][ T6095] RSP: 002b:00007f4e2a245e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.124152][ T6095] RAX: ffffffffffffffda RBX: 00007f4e2a245ef0 RCX: 00007f4e2abe038a [ 129.124168][ T6095] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007f4e2a245eb0 [ 129.124182][ T6095] RBP: 0000200000000040 R08: 00007f4e2a245ef0 R09: 0000000000004000 [ 129.124197][ T6095] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940 [ 129.124212][ T6095] R13: 00007f4e2a245eb0 R14: 000000000000496e R15: 0000200000000000 [ 129.124235][ T6095] [ 129.124572][ T6095] Kernel Offset: disabled