Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs [ 31.581285][ T6534] cgroup: Unknown subsys name 'net' [ 31.709709][ T6534] cgroup: Unknown subsys name 'cpuset' [ 31.711777][ T6534] cgroup: Unknown subsys name 'rlimit' [ 31.896597][ T6534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.711193][ T6540] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.872610][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.872637][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.882731][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.884149][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.943043][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.944773][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.945622][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.946069][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.946298][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.034472][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 40.102078][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.102373][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.102444][ T6612] bridge_slave_0: entered allmulticast mode [ 40.102919][ T6612] bridge_slave_0: entered promiscuous mode [ 40.104506][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.104548][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.104597][ T6612] bridge_slave_1: entered allmulticast mode [ 40.104994][ T6612] bridge_slave_1: entered promiscuous mode [ 40.117103][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.120409][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.131718][ T6612] team0: Port device team_slave_0 added [ 40.134251][ T6612] team0: Port device team_slave_1 added [ 40.143025][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.144300][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.148423][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.149462][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.149471][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.149482][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.163843][ T6612] hsr_slave_0: entered promiscuous mode [ 40.164153][ T6612] hsr_slave_1: entered promiscuous mode [ 40.330181][ T6612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.333639][ T6612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.335966][ T6612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.338728][ T6612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.352240][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.352293][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.352465][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.352489][ T6612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.371213][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.374480][ T2228] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.376303][ T2228] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.381473][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.383699][ T2228] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.383739][ T2228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.385751][ T2228] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.385772][ T2228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.435987][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.448096][ T6612] veth0_vlan: entered promiscuous mode [ 40.451163][ T6612] veth1_vlan: entered promiscuous mode [ 40.458457][ T6612] veth0_macvtap: entered promiscuous mode [ 40.460345][ T6612] veth1_macvtap: entered promiscuous mode [ 40.464175][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.467312][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.472601][ T4887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.475179][ T4887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.475221][ T4887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.475240][ T4887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.734612][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.787907][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.845719][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.886160][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:40 executed programs: 0 [ 40.953752][ T6130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.955512][ T6130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.956645][ T6130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.956966][ T6130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.957157][ T6130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.003469][ T6643] chnl_net:caif_netlink_parms(): no params data found [ 41.023691][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.023733][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.023789][ T6643] bridge_slave_0: entered allmulticast mode [ 41.024203][ T6643] bridge_slave_0: entered promiscuous mode [ 41.024773][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.024804][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.024846][ T6643] bridge_slave_1: entered allmulticast mode [ 41.025221][ T6643] bridge_slave_1: entered promiscuous mode [ 41.034617][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.036017][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.044274][ T6643] team0: Port device team_slave_0 added [ 41.045112][ T6643] team0: Port device team_slave_1 added [ 41.053942][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.053968][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.053982][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.054512][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.054519][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.054529][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.073387][ T6643] hsr_slave_0: entered promiscuous mode [ 41.073657][ T6643] hsr_slave_1: entered promiscuous mode [ 41.073830][ T6643] debugfs: 'hsr0' already exists in 'hsr' [ 41.073877][ T6643] Cannot create hsr debugfs directory [ 42.968592][ T6130] Bluetooth: hci0: command tx timeout [ 43.861387][ T41] bridge_slave_1: left allmulticast mode [ 43.861429][ T41] bridge_slave_1: left promiscuous mode [ 43.861777][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.867717][ T41] bridge_slave_0: left allmulticast mode [ 43.867744][ T41] bridge_slave_0: left promiscuous mode [ 43.868111][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.022729][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.050149][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.099233][ T41] bond0 (unregistering): Released all slaves [ 44.162356][ T41] hsr_slave_0: left promiscuous mode [ 44.163483][ T41] hsr_slave_1: left promiscuous mode [ 44.163743][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.163756][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.164120][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.164130][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.171173][ T41] veth1_macvtap: left promiscuous mode [ 44.171370][ T41] veth0_macvtap: left promiscuous mode [ 44.171421][ T41] veth1_vlan: left promiscuous mode [ 44.171470][ T41] veth0_vlan: left promiscuous mode [ 44.293347][ T41] team0 (unregistering): Port device team_slave_1 removed [ 44.300592][ T41] team0 (unregistering): Port device team_slave_0 removed [ 44.621435][ T6643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.623962][ T6643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.624976][ T6643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.626340][ T6643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.670554][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.675489][ T6643] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.678807][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.678851][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.682697][ T2228] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.682751][ T2228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.765134][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.776400][ T6643] veth0_vlan: entered promiscuous mode [ 44.780473][ T6643] veth1_vlan: entered promiscuous mode [ 44.786378][ T6643] veth0_macvtap: entered promiscuous mode [ 44.787468][ T6643] veth1_macvtap: entered promiscuous mode [ 44.792574][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.793465][ T6643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.795505][ T4887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.795590][ T4887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.795612][ T4887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.795628][ T4887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.826726][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.826758][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.840888][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.840923][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.945888][ T6718] loop0: detected capacity change from 0 to 32768 [ 44.992610][ T6718] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 44.992636][ T6718] allowing incompatible features above 0.0: (unknown version) [ 44.992917][ T6718] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.992935][ T6718] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 44.993191][ T6718] bcachefs (loop0): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 44.993207][ T6718] pointer before first bucket (27 < 1024), deleting [ 44.993268][ T6718] ================================================================== [ 44.993271][ T6718] BUG: KASAN: use-after-free in bch2_extent_ptr_to_text+0x76c/0x770 [ 44.993285][ T6718] Read of size 1 at addr ffff000136ce9e4e by task syz.0.17/6718 [ 44.993290][ T6718] [ 44.993294][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 44.993300][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.993303][ T6718] Call trace: [ 44.993305][ T6718] show_stack+0x2c/0x3c (C) [ 44.993314][ T6718] __dump_stack+0x30/0x40 [ 44.993321][ T6718] dump_stack_lvl+0xd8/0x12c [ 44.993326][ T6718] print_address_description+0xa8/0x238 [ 44.993335][ T6718] print_report+0x68/0x84 [ 44.993341][ T6718] kasan_report+0xb0/0x110 [ 44.993351][ T6718] __asan_report_load1_noabort+0x20/0x2c [ 44.993356][ T6718] bch2_extent_ptr_to_text+0x76c/0x770 [ 44.993362][ T6718] bch2_bkey_ptrs_to_text+0xcb0/0x13f0 [ 44.993367][ T6718] bch2_btree_ptr_v2_to_text+0x198/0x238 [ 44.993372][ T6718] bch2_bkey_val_to_text+0xf0/0x140 [ 44.993379][ T6718] __bch2_bkey_fsck_err+0x338/0x4a0 [ 44.993384][ T6718] bch2_bkey_ptrs_validate+0x15d0/0x1790 [ 44.993389][ T6718] bch2_btree_ptr_v2_validate+0x318/0x5f0 [ 44.993394][ T6718] bch2_bkey_validate+0x1c8/0x2c8 [ 44.993399][ T6718] journal_validate_key+0x540/0xc0c [ 44.993407][ T6718] journal_entry_btree_root_validate+0x184/0x4a0 [ 44.993413][ T6718] bch2_journal_entry_validate+0x114/0x188 [ 44.993418][ T6718] bch2_sb_clean_validate_late+0x1c4/0x370 [ 44.993424][ T6718] bch2_read_superblock_clean+0xbc/0x238 [ 44.993430][ T6718] bch2_fs_recovery+0x134/0x2fb4 [ 44.993435][ T6718] bch2_fs_start+0x940/0xbec [ 44.993441][ T6718] bch2_fs_get_tree+0x880/0x107c [ 44.993447][ T6718] vfs_get_tree+0x90/0x28c [ 44.993453][ T6718] do_new_mount+0x278/0x7f4 [ 44.993458][ T6718] path_mount+0x5b4/0xde0 [ 44.993462][ T6718] __arm64_sys_mount+0x3e8/0x468 [ 44.993467][ T6718] invoke_syscall+0x98/0x254 [ 44.993473][ T6718] el0_svc_common+0x130/0x23c [ 44.993478][ T6718] do_el0_svc+0x48/0x58 [ 44.993482][ T6718] el0_svc+0x5c/0x254 [ 44.993491][ T6718] el0t_64_sync_handler+0x84/0x12c [ 44.993497][ T6718] el0t_64_sync+0x198/0x19c [ 44.993504][ T6718] [ 44.993505][ T6718] The buggy address belongs to the physical page: [ 44.993509][ T6718] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x176ce9 [ 44.993514][ T6718] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 44.993522][ T6718] raw: 05ffc00000000000 fffffdffc4db3a48 fffffdffc4db3a48 0000000000000000 [ 44.993527][ T6718] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 44.993529][ T6718] page dumped because: kasan: bad access detected [ 44.993531][ T6718] [ 44.993532][ T6718] Memory state around the buggy address: [ 44.993535][ T6718] ffff000136ce9d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.993538][ T6718] ffff000136ce9d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.993541][ T6718] >ffff000136ce9e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.993544][ T6718] ^ [ 44.993547][ T6718] ffff000136ce9e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.993550][ T6718] ffff000136ce9f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.993552][ T6718] ================================================================== [ 44.993555][ T6718] Disabling lock debugging due to kernel taint [ 44.993610][ T6718] bcachefs (loop0): invalid bkey in superblock btree=inodes level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:1879048230:0 gen 0 [ 44.993615][ T6718] pointer past last bucket (1879048230 > 128), deleting [ 44.993707][ T6718] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, shutting down [ 44.993712][ T6718] error not marked as autofix and not in fsck [ 44.993714][ T6718] run fsck, and forward to devs so error can be marked for self-healing [ 44.993717][ T6718] emergency read only at seq 0 [ 44.993752][ T6718] bcachefs (loop0): error in recovery: fsck_errors_not_fixed [ 44.993759][ T6718] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 44.993764][ T6718] bcachefs (loop0): shutting down [ 44.999756][ T6718] bcachefs (loop0): shutdown complete [ 45.058599][ T6130] Bluetooth: hci0: command tx timeout [ 45.989357][ T6718] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed