Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs [ 30.428770][ T6535] cgroup: Unknown subsys name 'net' [ 30.533064][ T6535] cgroup: Unknown subsys name 'cpuset' [ 30.535127][ T6535] cgroup: Unknown subsys name 'rlimit' [ 30.688821][ T6535] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 37.804720][ T6544] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.245176][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 38.290651][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.290985][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.291057][ T6572] bridge_slave_0: entered allmulticast mode [ 38.291529][ T6572] bridge_slave_0: entered promiscuous mode [ 38.293125][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.293170][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.293231][ T6572] bridge_slave_1: entered allmulticast mode [ 38.293617][ T6572] bridge_slave_1: entered promiscuous mode [ 38.304586][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.305433][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.312004][ T6572] team0: Port device team_slave_0 added [ 38.312742][ T6572] team0: Port device team_slave_1 added [ 38.320024][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.320049][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.320120][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.320849][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.320856][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.320867][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.338508][ T6572] hsr_slave_0: entered promiscuous mode [ 38.338833][ T6572] hsr_slave_1: entered promiscuous mode [ 38.385241][ T6572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.388363][ T6572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.391309][ T6572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.393639][ T6572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.403141][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.403187][ T6572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.403359][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.403383][ T6572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.416532][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.419786][ T245] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.421925][ T245] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.502489][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.505391][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.505423][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.510503][ T245] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.510554][ T245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.522838][ T6572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.522873][ T6572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.562772][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.573250][ T6572] veth0_vlan: entered promiscuous mode [ 38.574920][ T6572] veth1_vlan: entered promiscuous mode [ 38.581207][ T6572] veth0_macvtap: entered promiscuous mode [ 38.584425][ T6572] veth1_macvtap: entered promiscuous mode [ 38.588089][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.589320][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.592811][ T245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.593034][ T245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.593049][ T245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.593063][ T245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836641][ T693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.885000][ T693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.942872][ T693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.977929][ T693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.078589][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.080625][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.087879][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.089246][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.194066][ T6625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.195760][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.197272][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.198879][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.200341][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:39 executed programs: 0 [ 39.562609][ T6126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.564291][ T6126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.565530][ T6126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.567027][ T6126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.568500][ T6126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.620057][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 39.640564][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.640633][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.640694][ T6644] bridge_slave_0: entered allmulticast mode [ 39.641130][ T6644] bridge_slave_0: entered promiscuous mode [ 39.642951][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.643002][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.643057][ T6644] bridge_slave_1: entered allmulticast mode [ 39.643467][ T6644] bridge_slave_1: entered promiscuous mode [ 39.655026][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.656005][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.666818][ T6644] team0: Port device team_slave_0 added [ 39.667579][ T6644] team0: Port device team_slave_1 added [ 39.674265][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.674285][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.674300][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.675155][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.675162][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.675176][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.697713][ T6644] hsr_slave_0: entered promiscuous mode [ 39.698132][ T6644] hsr_slave_1: entered promiscuous mode [ 39.698322][ T6644] debugfs: 'hsr0' already exists in 'hsr' [ 39.698355][ T6644] Cannot create hsr debugfs directory [ 41.612044][ T6126] Bluetooth: hci0: command tx timeout [ 42.231378][ T693] bridge_slave_1: left allmulticast mode [ 42.231418][ T693] bridge_slave_1: left promiscuous mode [ 42.231713][ T693] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.238274][ T693] bridge_slave_0: left allmulticast mode [ 42.239304][ T693] bridge_slave_0: left promiscuous mode [ 42.240427][ T693] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.375610][ T693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.402961][ T693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.413692][ T693] bond0 (unregistering): Released all slaves [ 42.502583][ T693] hsr_slave_0: left promiscuous mode [ 42.503951][ T693] hsr_slave_1: left promiscuous mode [ 42.505470][ T693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.506724][ T693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.508767][ T693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.508803][ T693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.516794][ T693] veth1_macvtap: left promiscuous mode [ 42.517998][ T693] veth0_macvtap: left promiscuous mode [ 42.519190][ T693] veth1_vlan: left promiscuous mode [ 42.520322][ T693] veth0_vlan: left promiscuous mode [ 42.637555][ T693] team0 (unregistering): Port device team_slave_1 removed [ 42.644985][ T693] team0 (unregistering): Port device team_slave_0 removed [ 42.922933][ T6644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.925598][ T6644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.928827][ T6644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.931783][ T6644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.961378][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.967215][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.971273][ T245] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.971313][ T245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.982474][ T245] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.982526][ T245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.042179][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.051295][ T6644] veth0_vlan: entered promiscuous mode [ 43.188362][ T6644] veth1_vlan: entered promiscuous mode [ 43.194128][ T6644] veth0_macvtap: entered promiscuous mode [ 43.195028][ T6644] veth1_macvtap: entered promiscuous mode [ 43.198485][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.199422][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.204248][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.205844][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.208478][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.209836][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.247669][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.247702][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.264551][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.264584][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.391497][ T6706] loop0: detected capacity change from 0 to 32768 [ 43.457459][ T6706] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 43.457488][ T6706] allowing incompatible features above 0.0: (unknown version) [ 43.457837][ T6706] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 43.457866][ T6706] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 43.458205][ T6706] bcachefs (loop0): invalid bkey in superblock btree=extents level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 43.458212][ T6706] pointer before first bucket (27 < 1024), deleting [ 43.458387][ T6706] ================================================================== [ 43.458391][ T6706] BUG: KASAN: use-after-free in bch2_extent_ptr_to_text+0x76c/0x770 [ 43.458405][ T6706] Read of size 1 at addr ffff000152fd1a4e by task syz.0.17/6706 [ 43.458409][ T6706] [ 43.458413][ T6706] CPU: 1 UID: 0 PID: 6706 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 43.458419][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 43.458423][ T6706] Call trace: [ 43.458425][ T6706] show_stack+0x2c/0x3c (C) [ 43.458434][ T6706] __dump_stack+0x30/0x40 [ 43.458440][ T6706] dump_stack_lvl+0xd8/0x12c [ 43.458445][ T6706] print_address_description+0xa8/0x238 [ 43.458455][ T6706] print_report+0x68/0x84 [ 43.458461][ T6706] kasan_report+0xb0/0x110 [ 43.458470][ T6706] __asan_report_load1_noabort+0x20/0x2c [ 43.458476][ T6706] bch2_extent_ptr_to_text+0x76c/0x770 [ 43.458481][ T6706] bch2_bkey_ptrs_to_text+0xcb0/0x13f0 [ 43.458487][ T6706] bch2_btree_ptr_v2_to_text+0x198/0x238 [ 43.458492][ T6706] bch2_bkey_val_to_text+0xf0/0x140 [ 43.458498][ T6706] __bch2_bkey_fsck_err+0x338/0x4a0 [ 43.458503][ T6706] bch2_bkey_ptrs_validate+0x15d0/0x1790 [ 43.458509][ T6706] bch2_btree_ptr_v2_validate+0x318/0x5f0 [ 43.458514][ T6706] bch2_bkey_validate+0x1c8/0x2c8 [ 43.458519][ T6706] journal_validate_key+0x540/0xc0c [ 43.458526][ T6706] journal_entry_btree_root_validate+0x184/0x4a0 [ 43.458532][ T6706] bch2_journal_entry_validate+0x114/0x188 [ 43.458538][ T6706] bch2_sb_clean_validate_late+0x1c4/0x370 [ 43.458544][ T6706] bch2_read_superblock_clean+0xbc/0x238 [ 43.458550][ T6706] bch2_fs_recovery+0x134/0x2fb4 [ 43.458554][ T6706] bch2_fs_start+0x940/0xbec [ 43.458560][ T6706] bch2_fs_get_tree+0x880/0x107c [ 43.458566][ T6706] vfs_get_tree+0x90/0x28c [ 43.458572][ T6706] do_new_mount+0x278/0x7f4 [ 43.458577][ T6706] path_mount+0x5b4/0xde0 [ 43.458582][ T6706] __arm64_sys_mount+0x3e8/0x468 [ 43.458587][ T6706] invoke_syscall+0x98/0x254 [ 43.458592][ T6706] el0_svc_common+0x130/0x23c [ 43.458597][ T6706] do_el0_svc+0x48/0x58 [ 43.458601][ T6706] el0_svc+0x5c/0x254 [ 43.458610][ T6706] el0t_64_sync_handler+0x84/0x12c [ 43.458616][ T6706] el0t_64_sync+0x198/0x19c [ 43.458623][ T6706] [ 43.458624][ T6706] The buggy address belongs to the physical page: [ 43.458628][ T6706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x192fd1 [ 43.458633][ T6706] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 43.458641][ T6706] raw: 05ffc00000000000 fffffdffc54bf448 fffffdffc54bf448 0000000000000000 [ 43.458646][ T6706] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 43.458648][ T6706] page dumped because: kasan: bad access detected [ 43.458650][ T6706] [ 43.458651][ T6706] Memory state around the buggy address: [ 43.458654][ T6706] ffff000152fd1900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.458657][ T6706] ffff000152fd1980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.458661][ T6706] >ffff000152fd1a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.458663][ T6706] ^ [ 43.458666][ T6706] ffff000152fd1a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.458669][ T6706] ffff000152fd1b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.458671][ T6706] ================================================================== [ 43.458674][ T6706] Disabling lock debugging due to kernel taint [ 43.458773][ T6706] bcachefs (loop0): invalid bkey in superblock btree=inodes level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:1879048230:0 gen 0 [ 43.458777][ T6706] pointer past last bucket (1879048230 > 128), deleting [ 43.460538][ T6706] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, shutting down [ 43.460549][ T6706] error not marked as autofix and not in fsck [ 43.460553][ T6706] run fsck, and forward to devs so error can be marked for self-healing [ 43.460556][ T6706] emergency read only at seq 0 [ 43.460737][ T6706] bcachefs (loop0): error in recovery: fsck_errors_not_fixed [ 43.460759][ T6706] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 43.460770][ T6706] bcachefs (loop0): shutting down [ 43.465751][ T6706] bcachefs (loop0): shutdown complete [ 43.691667][ T6126] Bluetooth: hci0: command tx timeout [ 44.442465][ T6706] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed