Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts.
2025/09/27 08:53:33 parsed 1 programs
[ 86.703414][ T10] cfg80211: failed to load regulatory.db
[ 87.370459][ T5844] cgroup: Unknown subsys name 'net'
[ 87.613798][ T5844] cgroup: Unknown subsys name 'cpuset'
[ 87.649019][ T5844] cgroup: Unknown subsys name 'rlimit'
[ 89.360471][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 94.218350][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.218375][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.275595][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.275615][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.840580][ T5893] chnl_net:caif_netlink_parms(): no params data found
[ 97.281184][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.282260][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.282405][ T5893] bridge_slave_0: entered allmulticast mode
[ 97.283975][ T5893] bridge_slave_0: entered promiscuous mode
[ 97.289203][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.289412][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.289569][ T5893] bridge_slave_1: entered allmulticast mode
[ 97.292121][ T5893] bridge_slave_1: entered promiscuous mode
[ 97.494646][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.497213][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.741298][ T5893] team0: Port device team_slave_0 added
[ 97.744774][ T5893] team0: Port device team_slave_1 added
[ 97.881521][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 97.881538][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.881562][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.886880][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.886892][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.886906][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.234978][ T5893] hsr_slave_0: entered promiscuous mode
[ 98.235950][ T5893] hsr_slave_1: entered promiscuous mode
[ 98.605056][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.625110][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.664453][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.702959][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.831694][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.888162][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.902039][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.902526][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.905648][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.906146][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.148384][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.197286][ T5893] veth0_vlan: entered promiscuous mode
[ 99.207252][ T5893] veth1_vlan: entered promiscuous mode
[ 99.243257][ T5893] veth0_macvtap: entered promiscuous mode
[ 99.247369][ T5893] veth1_macvtap: entered promiscuous mode
[ 99.266058][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.277849][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.295893][ T996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.297262][ T996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.297306][ T996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.297341][ T996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.054785][ T1093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.294270][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.511094][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.727537][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.782795][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.792386][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.793424][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.794527][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.795240][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/09/27 08:53:51 executed programs: 0
[ 102.447207][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.452644][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.453459][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.454732][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.455405][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.745037][ T5950] chnl_net:caif_netlink_parms(): no params data found
[ 102.902061][ T1093] bridge_slave_1: left allmulticast mode
[ 102.902158][ T1093] bridge_slave_1: left promiscuous mode
[ 102.904502][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.950324][ T1093] bridge_slave_0: left allmulticast mode
[ 102.950358][ T1093] bridge_slave_0: left promiscuous mode
[ 102.950646][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.540333][ T59] Bluetooth: hci0: command tx timeout
[ 104.659585][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.719218][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.743673][ T1093] bond0 (unregistering): Released all slaves
[ 105.121340][ T1093] hsr_slave_0: left promiscuous mode
[ 105.141320][ T1093] hsr_slave_1: left promiscuous mode
[ 105.142195][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.142245][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.190571][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.190602][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.281665][ T1093] veth1_macvtap: left promiscuous mode
[ 105.281807][ T1093] veth0_macvtap: left promiscuous mode
[ 105.281978][ T1093] veth1_vlan: left promiscuous mode
[ 105.283558][ T1093] veth0_vlan: left promiscuous mode
[ 106.618629][ T59] Bluetooth: hci0: command tx timeout
[ 107.181223][ T1093] team0 (unregistering): Port device team_slave_1 removed
[ 107.379130][ T1093] team0 (unregistering): Port device team_slave_0 removed
[ 108.702245][ T59] Bluetooth: hci0: command tx timeout
[ 109.389611][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.390132][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.390351][ T5950] bridge_slave_0: entered allmulticast mode
[ 109.393114][ T5950] bridge_slave_0: entered promiscuous mode
[ 109.428722][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.428829][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.429019][ T5950] bridge_slave_1: entered allmulticast mode
[ 109.431555][ T5950] bridge_slave_1: entered promiscuous mode
[ 109.597243][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.613329][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.805188][ T5950] team0: Port device team_slave_0 added
[ 109.814725][ T5950] team0: Port device team_slave_1 added
[ 110.054597][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.054614][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.054638][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.057005][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.057017][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.057042][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.267556][ T5950] hsr_slave_0: entered promiscuous mode
[ 110.268331][ T5950] hsr_slave_1: entered promiscuous mode
[ 110.781880][ T59] Bluetooth: hci0: command tx timeout
[ 112.443472][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.521869][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 112.581018][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 112.660474][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.158978][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.188052][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.207568][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.208687][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.234409][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.234561][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.569946][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.655898][ T5950] veth0_vlan: entered promiscuous mode
[ 113.672259][ T5950] veth1_vlan: entered promiscuous mode
[ 113.727103][ T5950] veth0_macvtap: entered promiscuous mode
[ 113.734445][ T5950] veth1_macvtap: entered promiscuous mode
[ 113.765550][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.786741][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.812878][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.813129][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.813341][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.813974][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.032931][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.032952][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.090982][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.091002][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/27 08:54:03 executed programs: 2
[ 114.422361][ T6055] loop0: detected capacity change from 0 to 32768
[ 114.565990][ T6055] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 114.566003][ T6055] allowing incompatible features above 0.0: (unknown version)
[ 114.566008][ T6055] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,all[ 114.566008][ T6055] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 114.566023][ T6055] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 114.566428][ T6055] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 114.566592][ T6055] bcachefs (loop0): Version upgrade required:
[ 114.566592][ T6055] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 114.566592][ T6055] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 114.566592][ T6055] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 114.596746][ T6055] ==================================================================
[ 114.596765][ T6055] BUG: KASAN: slab-out-of-bounds in bch2_btree_node_read_done+0x950/0x5550
[ 114.596800][ T6055] Read of size 8 at addr ffff88805874a010 by task syz.0.17/6055
[ 114.596821][ T6055]
[ 114.596845][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.596866][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 114.596883][ T6055] Call Trace:
[ 114.596890][ T6055]
[ 114.596897][ T6055] dump_stack_lvl+0x189/0x250
[ 114.596922][ T6055] ? __kasan_check_byte+0x12/0x40
[ 114.596946][ T6055] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.596969][ T6055] ? lock_release+0x4b/0x3e0
[ 114.596994][ T6055] ? __virt_addr_valid+0x4a5/0x5c0
[ 114.597011][ T6055] print_report+0xca/0x240
[ 114.597033][ T6055] ? bch2_btree_node_read_done+0x950/0x5550
[ 114.597056][ T6055] kasan_report+0x118/0x150
[ 114.597079][ T6055] ? bch2_btree_node_read_done+0x950/0x5550
[ 114.597105][ T6055] bch2_btree_node_read_done+0x950/0x5550
[ 114.597149][ T6055] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 114.597176][ T6055] ? bch2_extent_ptr_to_text+0x5a/0x890
[ 114.597205][ T6055] ? bch2_bkey_ptrs_to_text+0x1161/0x1310
[ 114.597225][ T6055] ? bch2_printbuf_make_room+0xdb/0x360
[ 114.597251][ T6055] ? enumerated_ref_put+0xbe/0x270
[ 114.597268][ T6055] btree_node_read_work+0x40e/0xe60
[ 114.597300][ T6055] ? __pfx_btree_node_read_work+0x10/0x10
[ 114.597324][ T6055] ? bch2_latency_acct+0x436/0x520
[ 114.597346][ T6055] ? __pfx_bch2_latency_acct+0x10/0x10
[ 114.597365][ T6055] ? bio_associate_blkg+0x6d/0x230
[ 114.597387][ T6055] bch2_btree_node_read+0x887/0x2a00
[ 114.597416][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.597442][ T6055] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.597466][ T6055] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 114.597491][ T6055] ? __bch2_btree_node_hash_insert+0x142d/0x1ab0
[ 114.597513][ T6055] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 114.597539][ T6055] ? bch2_trans_unlock+0x8a/0x580
[ 114.597560][ T6055] ? bch2_trans_unlock+0x491/0x580
[ 114.597583][ T6055] bch2_btree_root_read+0x5f0/0x760
[ 114.597609][ T6055] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 114.597638][ T6055] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 114.597662][ T6055] read_btree_roots+0x2c6/0x840
[ 114.597683][ T6055] ? __pfx_read_btree_roots+0x10/0x10
[ 114.597708][ T6055] bch2_fs_recovery+0x261f/0x3a50
[ 114.597734][ T6055] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 114.597754][ T6055] ? lockdep_unlock+0x89/0x120
[ 114.597773][ T6055] ? validate_chain+0x897/0x2140
[ 114.597799][ T6055] ? __lock_acquire+0xab9/0xd20
[ 114.597828][ T6055] ? do_raw_spin_lock+0x121/0x290
[ 114.597852][ T6055] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 114.597876][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.597901][ T6055] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.597925][ T6055] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 114.597949][ T6055] ? do_raw_spin_lock+0x121/0x290
[ 114.597971][ T6055] ? rt_mutex_slowunlock+0x493/0x8a0
[ 114.597989][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.598013][ T6055] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.598038][ T6055] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 114.598058][ T6055] ? bch2_fs_start+0xa0f/0xda0
[ 114.598080][ T6055] bch2_fs_start+0xaaf/0xda0
[ 114.598101][ T6055] ? bch2_fs_start+0x5e7/0xda0
[ 114.598121][ T6055] ? __pfx_bch2_fs_start+0x10/0x10
[ 114.598150][ T6055] ? sget+0x267/0x620
[ 114.598170][ T6055] bch2_fs_get_tree+0xb39/0x1520
[ 114.598199][ T6055] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 114.598229][ T6055] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 114.598254][ T6055] ? rcu_is_watching+0x15/0xb0
[ 114.598278][ T6055] ? cap_capable+0x11f/0x460
[ 114.598298][ T6055] ? safesetid_security_capable+0xa9/0x1a0
[ 114.598322][ T6055] vfs_get_tree+0x8f/0x2b0
[ 114.598344][ T6055] do_new_mount+0x2a2/0x9e0
[ 114.598367][ T6055] ? ns_capable+0x8a/0xf0
[ 114.598388][ T6055] ? __pfx_do_new_mount+0x10/0x10
[ 114.598410][ T6055] ? path_mount+0x61c/0xfe0
[ 114.598437][ T6055] __se_sys_mount+0x317/0x410
[ 114.598460][ T6055] ? __pfx___se_sys_mount+0x10/0x10
[ 114.598482][ T6055] ? do_syscall_64+0xbe/0x3b0
[ 114.598497][ T6055] ? __x64_sys_mount+0x20/0xc0
[ 114.598519][ T6055] do_syscall_64+0xfa/0x3b0
[ 114.598534][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.598554][ T6055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.598570][ T6055] ? clear_bhb_loop+0x60/0xb0
[ 114.598587][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.598604][ T6055] RIP: 0033:0x7feb1599066a
[ 114.598626][ T6055] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.598640][ T6055] RSP: 002b:00007ffe09e19a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 114.598668][ T6055] RAX: ffffffffffffffda RBX: 00007ffe09e19b20 RCX: 00007feb1599066a
[ 114.598682][ T6055] RDX: 00002000000058c0 RSI: 0000200000000000 RDI: 00007ffe09e19ae0
[ 114.598694][ T6055] RBP: 00002000000058c0 R08: 00007ffe09e19b20 R09: 0000000000000000
[ 114.598706][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 114.598718][ T6055] R13: 00007ffe09e19ae0 R14: 00000000000058f2 R15: 0000200000000180
[ 114.598737][ T6055]
[ 114.598743][ T6055]
[ 114.598747][ T6055] Allocated by task 6055:
[ 114.598756][ T6055] kasan_save_track+0x3e/0x80
[ 114.598775][ T6055] __kasan_kmalloc+0x93/0xb0
[ 114.598792][ T6055] __kvmalloc_node_noprof+0x28d/0x550
[ 114.598820][ T6055] btree_node_data_alloc+0xdc/0x270
[ 114.598836][ T6055] __bch2_btree_node_mem_alloc+0x1dc/0x2e0
[ 114.598852][ T6055] bch2_fs_btree_cache_init+0x314/0x880
[ 114.598870][ T6055] bch2_fs_open+0x1da6/0x26e0
[ 114.598889][ T6055] bch2_fs_get_tree+0x44f/0x1520
[ 114.598904][ T6055] vfs_get_tree+0x8f/0x2b0
[ 114.598922][ T6055] do_new_mount+0x2a2/0x9e0
[ 114.598942][ T6055] __se_sys_mount+0x317/0x410
[ 114.598962][ T6055] do_syscall_64+0xfa/0x3b0
[ 114.598977][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.598992][ T6055]
[ 114.598996][ T6055] The buggy address belongs to the object at ffff888058748000
[ 114.598996][ T6055] which belongs to the cache kmalloc-rcl-8k of size 8192
[ 114.599011][ T6055] The buggy address is located 16 bytes to the right of
[ 114.599011][ T6055] allocated 8192-byte region [ffff888058748000, ffff88805874a000)
[ 114.599029][ T6055]
[ 114.599034][ T6055] The buggy address belongs to the physical page:
[ 114.599054][ T6055] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58748
[ 114.599075][ T6055] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 114.599089][ T6055] memcg:ffff8880273c6ce1
[ 114.599096][ T6055] flags: 0x80000000000040(head|node=0|zone=1)
[ 114.599114][ T6055] page_type: f5(slab)
[ 114.599130][ T6055] raw: 0080000000000040 ffff8880198483c0 dead000000000122 0000000000000000
[ 114.599145][ T6055] raw: 0000000000000000 0000000080020002 00000000f5000000 ffff8880273c6ce1
[ 114.599161][ T6055] head: 0080000000000040 ffff8880198483c0 dead000000000122 0000000000000000
[ 114.599176][ T6055] head: 0000000000000000 0000000080020002 00000000f5000000 ffff8880273c6ce1
[ 114.599191][ T6055] head: 0080000000000003 ffffea000161d201 00000000ffffffff 00000000ffffffff
[ 114.599206][ T6055] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 114.599215][ T6055] page dumped because: kasan: bad access detected
[ 114.599228][ T6055] page_owner tracks the page as allocated
[ 114.599234][ T6055] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x528d0(GFP_NOWAIT|__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 6055, tgid 6055 (syz.0.17), ts 114481807879, free_ts 0
[ 114.599264][ T6055] post_alloc_hook+0x240/0x2a0
[ 114.599286][ T6055] get_page_from_freelist+0x2119/0x21b0
[ 114.599302][ T6055] __alloc_frozen_pages_noprof+0x181/0x370
[ 114.599318][ T6055] alloc_pages_mpol+0xd1/0x380
[ 114.599338][ T6055] allocate_slab+0x8a/0x370
[ 114.599352][ T6055] ___slab_alloc+0x8d1/0xdc0
[ 114.599365][ T6055] __kvmalloc_node_noprof+0x1d6/0x550
[ 114.599386][ T6055] btree_node_data_alloc+0xdc/0x270
[ 114.599402][ T6055] __bch2_btree_node_mem_alloc+0x1dc/0x2e0
[ 114.599418][ T6055] bch2_fs_btree_cache_init+0x314/0x880
[ 114.599435][ T6055] bch2_fs_open+0x1da6/0x26e0
[ 114.599453][ T6055] bch2_fs_get_tree+0x44f/0x1520
[ 114.599469][ T6055] vfs_get_tree+0x8f/0x2b0
[ 114.599487][ T6055] do_new_mount+0x2a2/0x9e0
[ 114.599507][ T6055] __se_sys_mount+0x317/0x410
[ 114.599527][ T6055] do_syscall_64+0xfa/0x3b0
[ 114.599541][ T6055] page_owner free stack trace missing
[ 114.599550][ T6055]
[ 114.599554][ T6055] Memory state around the buggy address:
[ 114.599563][ T6055] ffff888058749f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.599575][ T6055] ffff888058749f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.599586][ T6055] >ffff88805874a000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 114.599595][ T6055] ^
[ 114.599604][ T6055] ffff88805874a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 114.599615][ T6055] ffff88805874a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 114.599624][ T6055] ==================================================================
[ 114.600107][ T6055] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 114.600122][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.600143][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 114.600154][ T6055] Call Trace:
[ 114.600161][ T6055]
[ 114.600168][ T6055] dump_stack_lvl+0x99/0x250
[ 114.600193][ T6055] ? __asan_memcpy+0x40/0x70
[ 114.600212][ T6055] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.600235][ T6055] ? __pfx__printk+0x10/0x10
[ 114.600259][ T6055] vpanic+0x281/0x750
[ 114.600282][ T6055] ? preempt_schedule+0xae/0xc0
[ 114.600306][ T6055] ? __pfx_vpanic+0x10/0x10
[ 114.600328][ T6055] ? preempt_schedule_common+0x83/0xd0
[ 114.600352][ T6055] ? preempt_schedule+0xae/0xc0
[ 114.600375][ T6055] ? __pfx_preempt_schedule+0x10/0x10
[ 114.600400][ T6055] panic+0xb9/0xc0
[ 114.600423][ T6055] ? __pfx_panic+0x10/0x10
[ 114.600447][ T6055] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 114.600475][ T6055] ? bch2_btree_node_read_done+0x950/0x5550
[ 114.600499][ T6055] check_panic_on_warn+0x89/0xb0
[ 114.600517][ T6055] ? bch2_btree_node_read_done+0x950/0x5550
[ 114.600540][ T6055] end_report+0x78/0x160
[ 114.600561][ T6055] kasan_report+0x129/0x150
[ 114.600583][ T6055] ? bch2_btree_node_read_done+0x950/0x5550
[ 114.600610][ T6055] bch2_btree_node_read_done+0x950/0x5550
[ 114.600654][ T6055] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 114.600681][ T6055] ? bch2_extent_ptr_to_text+0x5a/0x890
[ 114.600710][ T6055] ? bch2_bkey_ptrs_to_text+0x1161/0x1310
[ 114.600730][ T6055] ? bch2_printbuf_make_room+0xdb/0x360
[ 114.600754][ T6055] ? enumerated_ref_put+0xbe/0x270
[ 114.600772][ T6055] btree_node_read_work+0x40e/0xe60
[ 114.600803][ T6055] ? __pfx_btree_node_read_work+0x10/0x10
[ 114.600833][ T6055] ? bch2_latency_acct+0x436/0x520
[ 114.600855][ T6055] ? __pfx_bch2_latency_acct+0x10/0x10
[ 114.600874][ T6055] ? bio_associate_blkg+0x6d/0x230
[ 114.600896][ T6055] bch2_btree_node_read+0x887/0x2a00
[ 114.600925][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.600950][ T6055] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.600975][ T6055] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 114.600999][ T6055] ? __bch2_btree_node_hash_insert+0x142d/0x1ab0
[ 114.601021][ T6055] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 114.601047][ T6055] ? bch2_trans_unlock+0x8a/0x580
[ 114.601069][ T6055] ? bch2_trans_unlock+0x491/0x580
[ 114.601092][ T6055] bch2_btree_root_read+0x5f0/0x760
[ 114.601118][ T6055] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 114.601148][ T6055] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 114.601173][ T6055] read_btree_roots+0x2c6/0x840
[ 114.601195][ T6055] ? __pfx_read_btree_roots+0x10/0x10
[ 114.601220][ T6055] bch2_fs_recovery+0x261f/0x3a50
[ 114.601245][ T6055] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 114.601265][ T6055] ? lockdep_unlock+0x89/0x120
[ 114.601284][ T6055] ? validate_chain+0x897/0x2140
[ 114.601311][ T6055] ? __lock_acquire+0xab9/0xd20
[ 114.601335][ T6055] ? do_raw_spin_lock+0x121/0x290
[ 114.601359][ T6055] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 114.601383][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.601408][ T6055] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.601433][ T6055] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 114.601457][ T6055] ? do_raw_spin_lock+0x121/0x290
[ 114.601480][ T6055] ? rt_mutex_slowunlock+0x493/0x8a0
[ 114.601498][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.601522][ T6055] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.601547][ T6055] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 114.601566][ T6055] ? bch2_fs_start+0xa0f/0xda0
[ 114.601589][ T6055] bch2_fs_start+0xaaf/0xda0
[ 114.601609][ T6055] ? bch2_fs_start+0x5e7/0xda0
[ 114.601630][ T6055] ? __pfx_bch2_fs_start+0x10/0x10
[ 114.601658][ T6055] ? sget+0x267/0x620
[ 114.601678][ T6055] bch2_fs_get_tree+0xb39/0x1520
[ 114.601707][ T6055] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 114.601737][ T6055] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 114.601762][ T6055] ? rcu_is_watching+0x15/0xb0
[ 114.601786][ T6055] ? cap_capable+0x11f/0x460
[ 114.601810][ T6055] ? safesetid_security_capable+0xa9/0x1a0
[ 114.601834][ T6055] vfs_get_tree+0x8f/0x2b0
[ 114.601856][ T6055] do_new_mount+0x2a2/0x9e0
[ 114.601880][ T6055] ? ns_capable+0x8a/0xf0
[ 114.601900][ T6055] ? __pfx_do_new_mount+0x10/0x10
[ 114.601922][ T6055] ? path_mount+0x61c/0xfe0
[ 114.601948][ T6055] __se_sys_mount+0x317/0x410
[ 114.601973][ T6055] ? __pfx___se_sys_mount+0x10/0x10
[ 114.601998][ T6055] ? do_syscall_64+0xbe/0x3b0
[ 114.602014][ T6055] ? __x64_sys_mount+0x20/0xc0
[ 114.602038][ T6055] do_syscall_64+0xfa/0x3b0
[ 114.602054][ T6055] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.602077][ T6055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.602095][ T6055] ? clear_bhb_loop+0x60/0xb0
[ 114.602114][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.602131][ T6055] RIP: 0033:0x7feb1599066a
[ 114.602146][ T6055] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.602160][ T6055] RSP: 002b:00007ffe09e19a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 114.602179][ T6055] RAX: ffffffffffffffda RBX: 00007ffe09e19b20 RCX: 00007feb1599066a
[ 114.602193][ T6055] RDX: 00002000000058c0 RSI: 0000200000000000 RDI: 00007ffe09e19ae0
[ 114.602206][ T6055] RBP: 00002000000058c0 R08: 00007ffe09e19b20 R09: 0000000000000000
[ 114.602218][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[ 114.602230][ T6055] R13: 00007ffe09e19ae0 R14: 00000000000058f2 R15: 0000200000000180
[ 114.602249][ T6055]
[ 114.602513][ T6055] Kernel Offset: disabled