Warning: Permanently added '[localhost]:59310' (ED25519) to the list of known hosts.
2025/09/05 11:34:03 parsed 1 programs
syzkaller login: [ 90.056509][ T5347] cgroup: Unknown subsys name 'net'
[ 90.125407][ T5347] cgroup: Unknown subsys name 'cpuset'
[ 90.130796][ T5347] cgroup: Unknown subsys name 'rlimit'
[ 91.895704][ T5347] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.013908][ T54] cfg80211: failed to load regulatory.db
[ 96.289212][ T5372] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.886427][ T5398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.901834][ T5398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.909094][ T5398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.913573][ T5398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.917318][ T5398] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.018778][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.045299][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.053600][ T5398] Bluetooth: hci0: command tx timeout
[ 99.433525][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.436679][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.057760][ T5394] chnl_net:caif_netlink_parms(): no params data found
[ 101.696260][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.712482][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.715798][ T5394] bridge_slave_0: entered allmulticast mode
[ 101.752046][ T5394] bridge_slave_0: entered promiscuous mode
[ 101.767344][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.787341][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.790434][ T5394] bridge_slave_1: entered allmulticast mode
[ 101.824301][ T5394] bridge_slave_1: entered promiscuous mode
[ 101.933209][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.950565][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.021683][ T5394] team0: Port device team_slave_0 added
[ 102.026455][ T5394] team0: Port device team_slave_1 added
[ 102.092489][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.095321][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.127166][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.163080][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.166082][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.196299][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.268723][ T5394] hsr_slave_0: entered promiscuous mode
[ 102.282253][ T5394] hsr_slave_1: entered promiscuous mode
[ 102.469233][ T5394] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 102.482240][ T5394] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 102.488201][ T5394] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 102.496658][ T5394] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 102.634810][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.664091][ T5394] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.677868][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.681206][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.710409][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.713490][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.083533][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.124021][ T5394] veth0_vlan: entered promiscuous mode
[ 103.144372][ T5394] veth1_vlan: entered promiscuous mode
[ 103.186897][ T5394] veth0_macvtap: entered promiscuous mode
[ 103.206676][ T5394] veth1_macvtap: entered promiscuous mode
[ 103.237255][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.255487][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.279698][ T1038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.285365][ T1038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.288993][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.311340][ T1038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/09/05 11:34:18 executed programs: 0
[ 103.572220][ T4703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.576615][ T4703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.580070][ T4703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.588727][ T4703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.592911][ T4703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 103.727120][ T5398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 103.751428][ T5398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 103.757297][ T5398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 103.789366][ T5398] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 103.796212][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 103.800476][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 103.804286][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 103.808894][ T45] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 103.814154][ T4703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 103.817787][ T4703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 103.923684][ T5477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 103.941723][ T45] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 103.946807][ T45] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 103.952012][ T45] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 103.955670][ T45] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 103.985596][ T5398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 103.992748][ T5398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 103.996519][ T5398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 104.000404][ T5398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 104.006196][ T5398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 104.012834][ T5398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 104.021848][ T5477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 104.025751][ T5477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 104.029689][ T5477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 104.052172][ T45] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 104.556483][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.985047][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.278180][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.549692][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.691788][ T5477] Bluetooth: hci0: command tx timeout
[ 105.854170][ T5477] Bluetooth: hci1: command tx timeout
[ 105.932689][ T5477] Bluetooth: hci2: command tx timeout
[ 106.011624][ T5477] Bluetooth: hci3: command tx timeout
[ 106.093851][ T5477] Bluetooth: hci5: command tx timeout
[ 106.096504][ T5477] Bluetooth: hci4: command tx timeout
[ 106.178728][ T5467] chnl_net:caif_netlink_parms(): no params data found
[ 106.601755][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.604766][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.607964][ T5467] bridge_slave_0: entered allmulticast mode
[ 106.618140][ T5467] bridge_slave_0: entered promiscuous mode
[ 106.746545][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.749957][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.755366][ T5467] bridge_slave_1: entered allmulticast mode
[ 106.759199][ T5467] bridge_slave_1: entered promiscuous mode
[ 106.834981][ T5470] chnl_net:caif_netlink_parms(): no params data found
[ 107.070654][ T5480] chnl_net:caif_netlink_parms(): no params data found
[ 107.129259][ T5475] chnl_net:caif_netlink_parms(): no params data found
[ 107.148837][ T5482] chnl_net:caif_netlink_parms(): no params data found
[ 107.167455][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.186731][ T5481] chnl_net:caif_netlink_parms(): no params data found
[ 107.302799][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.340435][ T13] bridge_slave_1: left allmulticast mode
[ 107.354231][ T13] bridge_slave_1: left promiscuous mode
[ 107.357934][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.415358][ T13] bridge_slave_0: left allmulticast mode
[ 107.417947][ T13] bridge_slave_0: left promiscuous mode
[ 107.420599][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.774480][ T45] Bluetooth: hci0: command tx timeout
[ 107.938767][ T45] Bluetooth: hci1: command tx timeout
[ 108.011604][ T45] Bluetooth: hci2: command tx timeout
[ 108.092036][ T45] Bluetooth: hci3: command tx timeout
[ 108.171200][ T45] Bluetooth: hci4: command tx timeout
[ 108.173595][ T45] Bluetooth: hci5: command tx timeout
[ 108.221813][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 108.256702][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 108.266451][ T13] bond0 (unregistering): Released all slaves
[ 108.437140][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.440279][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.455103][ T5470] bridge_slave_0: entered allmulticast mode
[ 108.491471][ T5470] bridge_slave_0: entered promiscuous mode
[ 108.537447][ T13] hsr_slave_0: left promiscuous mode
[ 108.545409][ T13] hsr_slave_1: left promiscuous mode
[ 108.556348][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 108.559722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 108.586852][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 108.589999][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.633646][ T13] veth1_macvtap: left promiscuous mode
[ 108.635992][ T13] veth0_macvtap: left promiscuous mode
[ 108.638728][ T13] veth1_vlan: left promiscuous mode
[ 108.659491][ T13] veth0_vlan: left promiscuous mode
[ 109.088295][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 109.125000][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 109.495473][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.498431][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.505943][ T5470] bridge_slave_1: entered allmulticast mode
[ 109.509908][ T5470] bridge_slave_1: entered promiscuous mode
[ 109.529561][ T5467] team0: Port device team_slave_0 added
[ 109.539425][ T5467] team0: Port device team_slave_1 added
[ 109.612680][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.629037][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.854339][ T5477] Bluetooth: hci0: command tx timeout
[ 109.940004][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.955233][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.981716][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.012138][ T5477] Bluetooth: hci1: command tx timeout
[ 110.018997][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.032087][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.035535][ T5481] bridge_slave_0: entered allmulticast mode
[ 110.052005][ T5481] bridge_slave_0: entered promiscuous mode
[ 110.056996][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.060406][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.084647][ T5480] bridge_slave_0: entered allmulticast mode
[ 110.088969][ T5480] bridge_slave_0: entered promiscuous mode
[ 110.092362][ T5477] Bluetooth: hci2: command tx timeout
[ 110.108229][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.122080][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.125941][ T5480] bridge_slave_1: entered allmulticast mode
[ 110.130168][ T5480] bridge_slave_1: entered promiscuous mode
[ 110.143252][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.146830][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.150546][ T5475] bridge_slave_0: entered allmulticast mode
[ 110.173752][ T5477] Bluetooth: hci3: command tx timeout
[ 110.177760][ T5475] bridge_slave_0: entered promiscuous mode
[ 110.186715][ T5470] team0: Port device team_slave_0 added
[ 110.190334][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.202262][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.205406][ T5475] bridge_slave_1: entered allmulticast mode
[ 110.226023][ T5475] bridge_slave_1: entered promiscuous mode
[ 110.229654][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.233880][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.237101][ T5482] bridge_slave_0: entered allmulticast mode
[ 110.251616][ T5477] Bluetooth: hci5: command tx timeout
[ 110.253983][ T5477] Bluetooth: hci4: command tx timeout
[ 110.266760][ T5482] bridge_slave_0: entered promiscuous mode
[ 110.276338][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.279455][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.296162][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.304285][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.307835][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.314762][ T5481] bridge_slave_1: entered allmulticast mode
[ 110.319295][ T5481] bridge_slave_1: entered promiscuous mode
[ 110.342008][ T5470] team0: Port device team_slave_1 added
[ 110.374714][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.377991][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.382672][ T5482] bridge_slave_1: entered allmulticast mode
[ 110.386553][ T5482] bridge_slave_1: entered promiscuous mode
[ 110.477334][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.482389][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.485669][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.502739][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.515096][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.548370][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.557363][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.786362][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.789351][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.836213][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.890918][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.918559][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.938537][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.950554][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.119933][ T5480] team0: Port device team_slave_0 added
[ 111.149732][ T5467] hsr_slave_0: entered promiscuous mode
[ 111.157069][ T5467] hsr_slave_1: entered promiscuous mode
[ 111.162857][ T5475] team0: Port device team_slave_0 added
[ 111.179124][ T5481] team0: Port device team_slave_0 added
[ 111.188964][ T5480] team0: Port device team_slave_1 added
[ 111.267288][ T5470] hsr_slave_0: entered promiscuous mode
[ 111.279985][ T5470] hsr_slave_1: entered promiscuous mode
[ 111.298935][ T5470] debugfs: 'hsr0' already exists in 'hsr'
[ 111.318211][ T5470] Cannot create hsr debugfs directory
[ 111.330001][ T5475] team0: Port device team_slave_1 added
[ 111.352758][ T5482] team0: Port device team_slave_0 added
[ 111.360197][ T5482] team0: Port device team_slave_1 added
[ 111.364730][ T5481] team0: Port device team_slave_1 added
[ 111.489658][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.493568][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.519694][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.536306][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.539857][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.573153][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.691747][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.694774][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.709136][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.738835][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.745293][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.757170][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.766621][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.769522][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.792611][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.799356][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.807147][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.818805][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.833818][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.836475][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.850665][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.856195][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.859006][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 111.871836][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.931349][ T45] Bluetooth: hci0: command tx timeout
[ 111.959030][ T5480] hsr_slave_0: entered promiscuous mode
[ 111.964474][ T5480] hsr_slave_1: entered promiscuous mode
[ 111.967362][ T5480] debugfs: 'hsr0' already exists in 'hsr'
[ 111.970124][ T5480] Cannot create hsr debugfs directory
[ 112.086696][ T5482] hsr_slave_0: entered promiscuous mode
[ 112.091473][ T45] Bluetooth: hci1: command tx timeout
[ 112.105725][ T5482] hsr_slave_1: entered promiscuous mode
[ 112.110830][ T5482] debugfs: 'hsr0' already exists in 'hsr'
[ 112.121432][ T5482] Cannot create hsr debugfs directory
[ 112.162151][ T5475] hsr_slave_0: entered promiscuous mode
[ 112.172666][ T45] Bluetooth: hci2: command tx timeout
[ 112.178343][ T5475] hsr_slave_1: entered promiscuous mode
[ 112.181750][ T5475] debugfs: 'hsr0' already exists in 'hsr'
[ 112.184075][ T5475] Cannot create hsr debugfs directory
[ 112.251207][ T45] Bluetooth: hci3: command tx timeout
[ 112.338588][ T45] Bluetooth: hci4: command tx timeout
[ 112.340787][ T45] Bluetooth: hci5: command tx timeout
[ 112.355140][ T5481] hsr_slave_0: entered promiscuous mode
[ 112.375529][ T5481] hsr_slave_1: entered promiscuous mode
[ 112.380487][ T5481] debugfs: 'hsr0' already exists in 'hsr'
[ 112.391791][ T5481] Cannot create hsr debugfs directory
[ 112.923220][ T5467] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.015116][ T5467] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.084781][ T5467] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.106586][ T5467] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.586140][ T5470] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 113.633788][ T5470] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 113.654353][ T5470] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 113.698400][ T5470] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 113.735603][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.796057][ T5467] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.874416][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.877663][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.894644][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.898238][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.936718][ T5475] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 114.016836][ T5475] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 114.079188][ T5475] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 114.103502][ T5475] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 114.263939][ T5480] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 114.341709][ T5480] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 114.349626][ T5480] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 114.465853][ T5480] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 114.739861][ T5482] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 114.794900][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.878751][ T5482] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 114.929629][ T5470] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.989270][ T5482] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 115.004378][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 115.059357][ T5482] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 115.078279][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.081813][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.163298][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.166588][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.197164][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.272086][ T5481] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 115.289896][ T5481] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 115.375271][ T5475] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.380535][ T5470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 115.402791][ T5470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 115.423270][ T5481] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 115.439351][ T5481] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 115.604549][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.607688][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.643798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.646892][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.700438][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.834606][ T5467] veth0_vlan: entered promiscuous mode
[ 115.850327][ T5480] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.034388][ T5467] veth1_vlan: entered promiscuous mode
[ 116.100123][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.103227][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.135075][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.138317][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.166777][ T5475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 116.364135][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.493162][ T5467] veth0_macvtap: entered promiscuous mode
[ 116.514701][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.555144][ T5467] veth1_macvtap: entered promiscuous mode
[ 116.650092][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.718797][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.746694][ T5482] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.812116][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.816356][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.820228][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.856041][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.890693][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.898876][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.901981][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.920417][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.923671][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.001902][ T5470] veth0_vlan: entered promiscuous mode
[ 117.020624][ T5481] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.064629][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.075020][ T5480] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.128883][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.131977][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.176552][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.179547][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.206113][ T5470] veth1_vlan: entered promiscuous mode
[ 117.433164][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.436151][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.629342][ T5470] veth0_macvtap: entered promiscuous mode
[ 117.666738][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.677275][ T5475] veth0_vlan: entered promiscuous mode
[ 117.682988][ T5470] veth1_macvtap: entered promiscuous mode
[ 117.691656][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.777858][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.875406][ T5475] veth1_vlan: entered promiscuous mode
2025/09/05 11:34:33 executed programs: 12
[ 117.961899][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.051216][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.055137][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.059017][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.146985][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.190218][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.239097][ T5475] veth0_macvtap: entered promiscuous mode
[ 118.297945][ T5475] veth1_macvtap: entered promiscuous mode
[ 118.369467][ T5480] veth0_vlan: entered promiscuous mode
[ 118.423805][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.462888][ T5685] loop0: detected capacity change from 0 to 16384
[ 118.501643][ T5480] veth1_vlan: entered promiscuous mode
[ 118.566107][ T5481] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.575340][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.644706][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.647994][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.705766][ T3017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.766261][ T5480] veth0_macvtap: entered promiscuous mode
[ 118.776410][ T3017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.830137][ T5482] veth0_vlan: entered promiscuous mode
[ 118.857507][ T5685] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none
[ 118.857520][ T5685] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 118.918649][ T5685] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 118.944694][ T5480] veth1_macvtap: entered promiscuous mode
[ 118.966069][ T5685] bcachefs (loop0): invalid bkey in superblock btree=accounting level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2964fe5219fc11c5 written 16 min_key 347136:0:0 durability: 0 (invalid extent entry 0000000000017200)
[ 118.966109][ T5685] invalid extent entry type (got 9, max 7), deleting
[ 118.979022][ T1042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.980102][ T1042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.025217][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.025260][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.112328][ T5482] veth1_vlan: entered promiscuous mode
[ 119.205467][ T5685] bcachefs (loop0): recovering from clean shutdown, journal seq 15
[ 119.208984][ T5685] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[ 119.208984][ T5685] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 119.277057][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.330313][ T5482] veth0_macvtap: entered promiscuous mode
[ 119.426729][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.458737][ T5685] ==================================================================
[ 119.462206][ T5685] BUG: KASAN: use-after-free in string+0x231/0x2b0
[ 119.464612][ T5685] Read of size 1 at addr ffff888051df74f7 by task syz.0.17/5685
[ 119.468314][ T5685]
[ 119.469081][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 119.469090][ T5685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 119.469095][ T5685] Call Trace:
[ 119.469100][ T5685]
[ 119.469103][ T5685] dump_stack_lvl+0x189/0x250
[ 119.469116][ T5685] ? __kasan_check_byte+0x12/0x40
[ 119.469166][ T5685] ? __pfx_dump_stack_lvl+0x10/0x10
[ 119.469173][ T5685] ? lock_release+0x4b/0x3e0
[ 119.469185][ T5685] ? __virt_addr_valid+0x4a5/0x5c0
[ 119.469194][ T5685] print_report+0xca/0x240
[ 119.469201][ T5685] ? string+0x231/0x2b0
[ 119.469209][ T5685] kasan_report+0x118/0x150
[ 119.469218][ T5685] ? number+0xd18/0xf60
[ 119.469225][ T5685] ? string+0x231/0x2b0
[ 119.469233][ T5685] string+0x231/0x2b0
[ 119.469241][ T5685] vsnprintf+0x739/0xf00
[ 119.469250][ T5685] bch2_prt_printf+0x1c6/0x740
[ 119.469261][ T5685] ? __pfx_bch2_prt_printf+0x10/0x10
[ 119.469269][ T5685] ? __pfx_bch2_prt_printf+0x10/0x10
[ 119.469277][ T5685] bch2_dirent_to_text+0x2bd/0xd20
[ 119.469289][ T5685] ? bch2_bkey_val_to_text+0xe4/0x150
[ 119.469299][ T5685] __bch2_bkey_fsck_err+0x3f7/0x540
[ 119.469307][ T5685] ? kernel_text_address+0xa5/0xe0
[ 119.469317][ T5685] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 119.469325][ T5685] ? do_raw_spin_lock+0x121/0x290
[ 119.469334][ T5685] bch2_dirent_validate+0x7b3/0xfb0
[ 119.469346][ T5685] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 119.469356][ T5685] ? __free_frozen_pages+0x65e/0xd30
[ 119.469367][ T5685] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 119.469377][ T5685] bch2_bkey_val_validate+0x202/0x3e0
[ 119.469386][ T5685] ? __pfx_bch2_bkey_val_validate+0x10/0x10
[ 119.469396][ T5685] ? __asan_memset+0x22/0x50
[ 119.469402][ T5685] ? __bch2_bkey_unpack_key+0x98b/0xe10
[ 119.469411][ T5685] bch2_btree_node_read_done+0x4051/0x5550
[ 119.469428][ T5685] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 119.469438][ T5685] ? bch2_extent_ptr_to_text+0x5a/0x890
[ 119.469448][ T5685] ? bch2_bkey_ptrs_to_text+0x1161/0x1310
[ 119.469455][ T5685] ? bch2_printbuf_make_room+0xdb/0x360
[ 119.469464][ T5685] ? enumerated_ref_put+0xbe/0x270
[ 119.469474][ T5685] btree_node_read_work+0x40e/0xe60
[ 119.469485][ T5685] ? __pfx_btree_node_read_work+0x10/0x10
[ 119.469494][ T5685] ? bch2_latency_acct+0x436/0x520
[ 119.469502][ T5685] ? __pfx_bch2_latency_acct+0x10/0x10
[ 119.469509][ T5685] ? bio_associate_blkg+0x6d/0x230
[ 119.469519][ T5685] bch2_btree_node_read+0x887/0x2a00
[ 119.469530][ T5685] ? bch2_btree_node_hash_insert+0x88/0xc0
[ 119.469538][ T5685] ? __mutex_unlock_slowpath+0x1a1/0x740
[ 119.469549][ T5685] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 119.469558][ T5685] ? bch2_trans_unlock+0x8a/0x580
[ 119.469565][ T5685] ? bch2_trans_unlock+0x491/0x580
[ 119.469574][ T5685] bch2_btree_root_read+0x5f0/0x760
[ 119.469583][ T5685] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 119.469594][ T5685] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 119.469604][ T5685] read_btree_roots+0x2c6/0x840
[ 119.469616][ T5685] ? __pfx_read_btree_roots+0x10/0x10
[ 119.469628][ T5685] bch2_fs_recovery+0x261f/0x3a50
[ 119.469642][ T5685] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 119.469653][ T5685] ? __lock_acquire+0xab9/0xd20
[ 119.469669][ T5685] ? __mutex_trylock_common+0x153/0x260
[ 119.469680][ T5685] ? __pfx___mutex_trylock_common+0x10/0x10
[ 119.469694][ T5685] ? rcu_is_watching+0x15/0xb0
[ 119.469705][ T5685] ? __lock_acquire+0xab9/0xd20
[ 119.469724][ T5685] ? bch2_fs_start+0xa0f/0xda0
[ 119.469738][ T5685] ? up_write+0x1c4/0x420
[ 119.469748][ T5685] ? bch2_fs_start+0x5e7/0xda0
[ 119.469759][ T5685] bch2_fs_start+0xaaf/0xda0
[ 119.469771][ T5685] ? bch2_fs_start+0x5e7/0xda0
[ 119.469782][ T5685] ? __pfx_bch2_fs_start+0x10/0x10
[ 119.469798][ T5685] ? sget+0x267/0x620
[ 119.469809][ T5685] bch2_fs_get_tree+0xb39/0x1520
[ 119.469827][ T5685] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 119.469842][ T5685] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 119.469858][ T5685] vfs_get_tree+0x8f/0x2b0
[ 119.469871][ T5685] do_new_mount+0x2a2/0x9e0
[ 119.469887][ T5685] ? ns_capable+0x8a/0xf0
[ 119.469896][ T5685] ? __pfx_do_new_mount+0x10/0x10
[ 119.469907][ T5685] ? path_mount+0x61c/0xfe0
[ 119.469918][ T5685] ? user_path_at+0x44/0x60
[ 119.469929][ T5685] __se_sys_mount+0x317/0x410
[ 119.469942][ T5685] ? __pfx___se_sys_mount+0x10/0x10
[ 119.469955][ T5685] ? do_syscall_64+0xbe/0x3b0
[ 119.469971][ T5685] ? __x64_sys_mount+0x20/0xc0
[ 119.469983][ T5685] do_syscall_64+0xfa/0x3b0
[ 119.469997][ T5685] ? lockdep_hardirqs_on+0x9c/0x150
[ 119.470010][ T5685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.470021][ T5685] ? clear_bhb_loop+0x60/0xb0
[ 119.470032][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.470042][ T5685] RIP: 0033:0x7feb73b9038a
[ 119.470060][ T5685] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 119.470069][ T5685] RSP: 002b:00007feb74ad9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 119.470081][ T5685] RAX: ffffffffffffffda RBX: 00007feb74ad9ef0 RCX: 00007feb73b9038a
[ 119.470089][ T5685] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007feb74ad9eb0
[ 119.470096][ T5685] RBP: 0000200000000040 R08: 00007feb74ad9ef0 R09: 0000000000004000
[ 119.470103][ T5685] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940
[ 119.470110][ T5685] R13: 00007feb74ad9eb0 R14: 000000000000496e R15: 0000200000000000
[ 119.470120][ T5685]
[ 119.470124][ T5685]
[ 119.690803][ T5685] The buggy address belongs to the physical page:
[ 119.693409][ T5685] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x356 pfn:0x51df7
[ 119.697109][ T5685] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 119.700206][ T5685] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 119.703879][ T5685] raw: 0000000000000356 0000000000000000 00000000ffffffff 0000000000000000
[ 119.707491][ T5685] page dumped because: kasan: bad access detected
[ 119.710102][ T5685] page_owner tracks the page as freed
[ 119.712550][ T5685] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4753, tgid 4753 (udevd), ts 117117451331, free_ts 119394521019
[ 119.721549][ T5685] post_alloc_hook+0x240/0x2a0
[ 119.723624][ T5685] get_page_from_freelist+0x21e4/0x22c0
[ 119.725800][ T5685] __alloc_frozen_pages_noprof+0x181/0x370
[ 119.728038][ T5685] alloc_pages_mpol+0x232/0x4a0
[ 119.729965][ T5685] allocate_slab+0x8a/0x370
[ 119.731878][ T5685] ___slab_alloc+0xbeb/0x1420
[ 119.733773][ T5685] __kmalloc_noprof+0x305/0x4f0
[ 119.735778][ T5685] tomoyo_realpath_from_path+0xe3/0x5d0
[ 119.738052][ T5685] tomoyo_check_open_permission+0x1c1/0x3b0
[ 119.740520][ T5685] security_file_open+0xb1/0x270
[ 119.742668][ T5685] do_dentry_open+0x384/0x13f0
[ 119.744663][ T5685] vfs_open+0x3b/0x340
[ 119.746361][ T5685] path_openat+0x2ee5/0x3830
[ 119.748308][ T5685] do_filp_open+0x1fa/0x410
[ 119.750185][ T5685] do_sys_openat2+0x121/0x1c0
[ 119.752325][ T5685] __x64_sys_openat+0x138/0x170
[ 119.754385][ T5685] page last free pid 5482 tgid 5482 stack trace:
[ 119.757114][ T5685] __free_frozen_pages+0xbc4/0xd30
[ 119.759246][ T5685] __put_partials+0x156/0x1a0
[ 119.761216][ T5685] put_cpu_partial+0x17c/0x250
[ 119.763169][ T5685] __slab_free+0x2d5/0x3c0
[ 119.765087][ T5685] qlist_free_all+0x97/0x140
[ 119.767006][ T5685] kasan_quarantine_reduce+0x148/0x160
[ 119.769160][ T5685] __kasan_slab_alloc+0x22/0x80
[ 119.771129][ T5685] kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[ 119.773581][ T5685] __alloc_skb+0x112/0x2d0
[ 119.775545][ T5685] netlink_ack+0x146/0xa50
[ 119.777556][ T5685] netlink_rcv_skb+0x28c/0x470
[ 119.779625][ T5685] netlink_unicast+0x82c/0x9e0
[ 119.781727][ T5685] netlink_sendmsg+0x805/0xb30
[ 119.783830][ T5685] __sock_sendmsg+0x219/0x270
[ 119.785890][ T5685] __sys_sendto+0x3bd/0x520
[ 119.787832][ T5685] __x64_sys_sendto+0xde/0x100
[ 119.789957][ T5685]
[ 119.791034][ T5685] Memory state around the buggy address:
[ 119.793419][ T5685] ffff888051df7380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 119.797009][ T5685] ffff888051df7400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 119.800484][ T5685] >ffff888051df7480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 119.803915][ T5685] ^
[ 119.807332][ T5685] ffff888051df7500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 119.810945][ T5685] ffff888051df7580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 119.814467][ T5685] ==================================================================
[ 119.854181][ T5482] veth1_macvtap: entered promiscuous mode
[ 119.904648][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.910693][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.121892][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.125570][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.206021][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.209530][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.262257][ T948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.411667][ T3017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.560186][ T1042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.577582][ T1042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.595675][ T5481] veth0_vlan: entered promiscuous mode
[ 120.648132][ T1042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.660678][ T1042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.788278][ T5481] veth1_vlan: entered promiscuous mode
[ 120.829470][ T1042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.844240][ T1042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.886621][ T948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.889839][ T948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.967481][ T5481] veth0_macvtap: entered promiscuous mode
[ 121.012985][ T5685] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 121.016024][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 121.019686][ T5685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 121.024464][ T5685] Call Trace:
[ 121.026042][ T5685]
[ 121.027232][ T5685] dump_stack_lvl+0x99/0x250
[ 121.029179][ T5685] ? __asan_memcpy+0x40/0x70
[ 121.031144][ T5685] ? __pfx_dump_stack_lvl+0x10/0x10
[ 121.033328][ T5685] ? __pfx__printk+0x10/0x10
[ 121.035333][ T5685] vpanic+0x281/0x750
[ 121.037079][ T5685] ? preempt_schedule+0xae/0xc0
[ 121.039108][ T5685] ? __pfx_vpanic+0x10/0x10
[ 121.041077][ T5685] ? preempt_schedule_common+0x83/0xd0
[ 121.043378][ T5685] ? preempt_schedule+0xae/0xc0
[ 121.045448][ T5685] ? __pfx_preempt_schedule+0x10/0x10
[ 121.047750][ T5685] panic+0xb9/0xc0
[ 121.049272][ T5685] ? __pfx_panic+0x10/0x10
[ 121.051179][ T5685] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 121.053728][ T5685] ? string+0x231/0x2b0
[ 121.055579][ T5685] check_panic_on_warn+0x89/0xb0
[ 121.057669][ T5685] ? string+0x231/0x2b0
[ 121.059518][ T5685] end_report+0x78/0x160
[ 121.061354][ T5685] kasan_report+0x129/0x150
[ 121.063210][ T5685] ? number+0xd18/0xf60
[ 121.064978][ T5685] ? string+0x231/0x2b0
[ 121.066771][ T5685] string+0x231/0x2b0
[ 121.068430][ T5685] vsnprintf+0x739/0xf00
[ 121.070213][ T5685] bch2_prt_printf+0x1c6/0x740
[ 121.072176][ T5685] ? __pfx_bch2_prt_printf+0x10/0x10
[ 121.074351][ T5685] ? __pfx_bch2_prt_printf+0x10/0x10
[ 121.076540][ T5685] bch2_dirent_to_text+0x2bd/0xd20
[ 121.078698][ T5685] ? bch2_bkey_val_to_text+0xe4/0x150
[ 121.081016][ T5685] __bch2_bkey_fsck_err+0x3f7/0x540
[ 121.083251][ T5685] ? kernel_text_address+0xa5/0xe0
[ 121.085448][ T5685] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 121.087699][ T5685] ? do_raw_spin_lock+0x121/0x290
[ 121.089793][ T5685] bch2_dirent_validate+0x7b3/0xfb0
[ 121.092004][ T5685] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 121.094344][ T5685] ? __free_frozen_pages+0x65e/0xd30
[ 121.096710][ T5685] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 121.099029][ T5685] bch2_bkey_val_validate+0x202/0x3e0
[ 121.101297][ T5685] ? __pfx_bch2_bkey_val_validate+0x10/0x10
[ 121.103683][ T5685] ? __asan_memset+0x22/0x50
[ 121.105636][ T5685] ? __bch2_bkey_unpack_key+0x98b/0xe10
[ 121.107983][ T5685] bch2_btree_node_read_done+0x4051/0x5550
[ 121.110436][ T5685] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 121.112900][ T5685] ? bch2_extent_ptr_to_text+0x5a/0x890
[ 121.115198][ T5685] ? bch2_bkey_ptrs_to_text+0x1161/0x1310
[ 121.117617][ T5685] ? bch2_printbuf_make_room+0xdb/0x360
[ 121.119992][ T5685] ? enumerated_ref_put+0xbe/0x270
[ 121.122222][ T5685] btree_node_read_work+0x40e/0xe60
[ 121.124640][ T5685] ? __pfx_btree_node_read_work+0x10/0x10
[ 121.127115][ T5685] ? bch2_latency_acct+0x436/0x520
[ 121.129387][ T5685] ? __pfx_bch2_latency_acct+0x10/0x10
[ 121.131674][ T5685] ? bio_associate_blkg+0x6d/0x230
[ 121.133861][ T5685] bch2_btree_node_read+0x887/0x2a00
[ 121.136351][ T5685] ? bch2_btree_node_hash_insert+0x88/0xc0
[ 121.138902][ T5685] ? __mutex_unlock_slowpath+0x1a1/0x740
[ 121.141208][ T5685] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 121.143629][ T5685] ? bch2_trans_unlock+0x8a/0x580
[ 121.145710][ T5685] ? bch2_trans_unlock+0x491/0x580
[ 121.147854][ T5685] bch2_btree_root_read+0x5f0/0x760
[ 121.150060][ T5685] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 121.152490][ T5685] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 121.155049][ T5685] read_btree_roots+0x2c6/0x840
[ 121.157196][ T5685] ? __pfx_read_btree_roots+0x10/0x10
[ 121.159515][ T5685] bch2_fs_recovery+0x261f/0x3a50
[ 121.161659][ T5685] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 121.163844][ T5685] ? __lock_acquire+0xab9/0xd20
[ 121.165886][ T5685] ? __mutex_trylock_common+0x153/0x260
[ 121.168191][ T5685] ? __pfx___mutex_trylock_common+0x10/0x10
[ 121.170682][ T5685] ? rcu_is_watching+0x15/0xb0
[ 121.172840][ T5685] ? __lock_acquire+0xab9/0xd20
[ 121.174972][ T5685] ? bch2_fs_start+0xa0f/0xda0
[ 121.177090][ T5685] ? up_write+0x1c4/0x420
[ 121.178961][ T5685] ? bch2_fs_start+0x5e7/0xda0
[ 121.180981][ T5685] bch2_fs_start+0xaaf/0xda0
[ 121.182890][ T5685] ? bch2_fs_start+0x5e7/0xda0
[ 121.184990][ T5685] ? __pfx_bch2_fs_start+0x10/0x10
[ 121.187117][ T5685] ? sget+0x267/0x620
[ 121.188863][ T5685] bch2_fs_get_tree+0xb39/0x1520
[ 121.191130][ T5685] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 121.193474][ T5685] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 121.196012][ T5685] vfs_get_tree+0x8f/0x2b0
[ 121.197897][ T5685] do_new_mount+0x2a2/0x9e0
[ 121.199836][ T5685] ? ns_capable+0x8a/0xf0
[ 121.201668][ T5685] ? __pfx_do_new_mount+0x10/0x10
[ 121.203771][ T5685] ? path_mount+0x61c/0xfe0
[ 121.205755][ T5685] ? user_path_at+0x44/0x60
[ 121.207853][ T5685] __se_sys_mount+0x317/0x410
[ 121.210126][ T5685] ? __pfx___se_sys_mount+0x10/0x10
[ 121.212372][ T5685] ? do_syscall_64+0xbe/0x3b0
[ 121.214303][ T5685] ? __x64_sys_mount+0x20/0xc0
[ 121.216311][ T5685] do_syscall_64+0xfa/0x3b0
[ 121.218232][ T5685] ? lockdep_hardirqs_on+0x9c/0x150
[ 121.220471][ T5685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.223128][ T5685] ? clear_bhb_loop+0x60/0xb0
[ 121.225148][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.227596][ T5685] RIP: 0033:0x7feb73b9038a
[ 121.229978][ T5685] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 121.239268][ T5685] RSP: 002b:00007feb74ad9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 121.242711][ T5685] RAX: ffffffffffffffda RBX: 00007feb74ad9ef0 RCX: 00007feb73b9038a
[ 121.246127][ T5685] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007feb74ad9eb0
[ 121.250358][ T5685] RBP: 0000200000000040 R08: 00007feb74ad9ef0 R09: 0000000000004000
[ 121.254011][ T5685] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940
[ 121.257462][ T5685] R13: 00007feb74ad9eb0 R14: 000000000000496e R15: 0000200000000000
[ 121.260866][ T5685]
[ 121.262484][ T5685] Kernel Offset: disabled
[ 121.264308][ T5685] Rebooting in 86400 seconds..
VM DIAGNOSIS:
11:34:35 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d55daf0
R8 =ffff888033e48237 R9 =1ffff110067c9046 R10=dffffc0000000000 R11=ffffffff8550d600
R12=dffffc0000000000 R13=ffffffff99b088e7 R14=ffffffff99dfd820 R15=0000000000000000
RIP=ffffffff8550d67c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feb74ada6c0 ffffffff 00c00000
GS =0000 ffff88808d20d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f48cb8ab000 CR3=00000000530dc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000007ffec400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee877734aaf4ff5f 98f1b86dccbbf858
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f904ccf582f76ca9 e5682a156a094819
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6b4b942a876d10 77a665d2a45331a8
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e979c839c1b4a55 0550c5bbe2225cdd
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004580
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 966e1a3800000011 9eaa9062aaaaaaaa
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa0000004f a3ecddfeaaaa0000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004f989f02080000 3b583aaa0000004f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004f9eaf3faaaaaa c0e63faa00000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 15ec1609bc568657 f79877928a0b9ffe
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 13886521711757ad 6dae8eb66d0d7464
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100007f234e0002 0000000000000000 0100007f224e0002
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000000fc 00007ffd3b00356d 697376656474656e
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000