Warning: Permanently added '[localhost]:21568' (ED25519) to the list of known hosts. [ 138.114001][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.118457][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/19 13:49:33 parsed 1 programs [ 143.825094][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 153.464675][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.468223][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.159732][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.172224][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.669195][ T5661] chnl_net:caif_netlink_parms(): no params data found [ 157.855394][ T5680] syz-executor (5680) used greatest stack depth: 17304 bytes left [ 158.473305][ T5390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.478293][ T5390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.483594][ T5390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.488534][ T5390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.496536][ T5390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.678627][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.692043][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.695473][ T5661] bridge_slave_0: entered allmulticast mode [ 158.732765][ T5661] bridge_slave_0: entered promiscuous mode [ 158.918814][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.929306][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.938514][ T5661] bridge_slave_1: entered allmulticast mode [ 158.943565][ T5661] bridge_slave_1: entered promiscuous mode [ 159.178544][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.255954][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.338458][ T5661] team0: Port device team_slave_0 added [ 159.361818][ T5661] team0: Port device team_slave_1 added [ 159.500354][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.512320][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.572394][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.601089][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.615346][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.668368][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.215659][ T5661] hsr_slave_0: entered promiscuous mode [ 160.235781][ T5661] hsr_slave_1: entered promiscuous mode [ 160.672298][ T5390] Bluetooth: hci0: command tx timeout [ 160.745215][ T5661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.772528][ T5661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.779388][ T5661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.794956][ T5661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.996905][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.028078][ T5661] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.053491][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.056907][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.087641][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.090753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.626315][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.200204][ T5661] veth0_vlan: entered promiscuous mode [ 162.225288][ T5661] veth1_vlan: entered promiscuous mode [ 162.288684][ T5661] veth0_macvtap: entered promiscuous mode [ 162.320299][ T5661] veth1_macvtap: entered promiscuous mode [ 162.404034][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.424426][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.466311][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.474302][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.478247][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.502787][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.751236][ T5390] Bluetooth: hci0: command tx timeout 2025/09/19 13:49:58 executed programs: 0 [ 163.704882][ T4707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.713384][ T4707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.717672][ T4707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.727238][ T4707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.768528][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.773307][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.778193][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.812332][ T45] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.816685][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.837621][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.012344][ T5768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.017185][ T5768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.021887][ T5768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.041601][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.047379][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.054112][ T5768] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.057506][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.063771][ T5768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.067288][ T5768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.091052][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.137766][ T5661] syz-executor (5661) used greatest stack depth: 17080 bytes left [ 164.274078][ T4707] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.278771][ T4707] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.297714][ T4707] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.351205][ T5390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.366669][ T5390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.678444][ T5390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 164.695162][ T5390] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 164.700143][ T5390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.731728][ T5390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.747208][ T5390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.800595][ T1037] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.952151][ T4707] Bluetooth: hci1: command tx timeout [ 165.954897][ T4707] Bluetooth: hci2: command tx timeout [ 166.122547][ T1037] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.288134][ T5390] Bluetooth: hci4: command tx timeout [ 166.359506][ T5390] Bluetooth: hci3: command tx timeout [ 166.394735][ T1037] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.434466][ T5390] Bluetooth: hci5: command tx timeout [ 166.481682][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 166.674121][ T1037] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.841146][ T5390] Bluetooth: hci6: command tx timeout [ 167.248836][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.262501][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.265965][ T5762] bridge_slave_0: entered allmulticast mode [ 167.282364][ T5762] bridge_slave_0: entered promiscuous mode [ 167.452128][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.455687][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.459138][ T5762] bridge_slave_1: entered allmulticast mode [ 167.491754][ T5762] bridge_slave_1: entered promiscuous mode [ 167.632812][ T1037] bridge_slave_1: left allmulticast mode [ 167.635807][ T1037] bridge_slave_1: left promiscuous mode [ 167.639420][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.701166][ T1037] bridge_slave_0: left allmulticast mode [ 167.704371][ T1037] bridge_slave_0: left promiscuous mode [ 167.708104][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.033345][ T5390] Bluetooth: hci2: command tx timeout [ 168.035894][ T5390] Bluetooth: hci1: command tx timeout [ 168.352696][ T4707] Bluetooth: hci4: command tx timeout [ 168.432117][ T4707] Bluetooth: hci3: command tx timeout [ 168.511010][ T4707] Bluetooth: hci5: command tx timeout [ 168.589045][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.603471][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.608535][ T1037] bond0 (unregistering): Released all slaves [ 168.786973][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.817177][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.920940][ T4707] Bluetooth: hci6: command tx timeout [ 169.073236][ T1037] hsr_slave_0: left promiscuous mode [ 169.119294][ T1037] hsr_slave_1: left promiscuous mode [ 169.136001][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.139381][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.221667][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.224944][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.279360][ T1037] veth1_macvtap: left promiscuous mode [ 169.311459][ T1037] veth0_macvtap: left promiscuous mode [ 169.314792][ T1037] veth1_vlan: left promiscuous mode [ 169.317721][ T1037] veth0_vlan: left promiscuous mode [ 170.116261][ T4707] Bluetooth: hci1: command tx timeout [ 170.118874][ T4707] Bluetooth: hci2: command tx timeout [ 170.290328][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 170.316574][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 170.432983][ T4707] Bluetooth: hci4: command tx timeout [ 170.511185][ T4707] Bluetooth: hci3: command tx timeout [ 170.592866][ T4707] Bluetooth: hci5: command tx timeout [ 170.992958][ T4707] Bluetooth: hci6: command tx timeout [ 171.044557][ T5762] team0: Port device team_slave_0 added [ 171.075467][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 171.153062][ T5762] team0: Port device team_slave_1 added [ 171.308719][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 171.415721][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.419090][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.462888][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.508534][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 171.546788][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.550060][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.596687][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.626347][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 171.738977][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 171.963034][ T5762] hsr_slave_0: entered promiscuous mode [ 171.967071][ T5762] hsr_slave_1: entered promiscuous mode [ 172.142255][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.145486][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.149019][ T5777] bridge_slave_0: entered allmulticast mode [ 172.156999][ T5777] bridge_slave_0: entered promiscuous mode [ 172.193913][ T4707] Bluetooth: hci2: command tx timeout [ 172.196250][ T4707] Bluetooth: hci1: command tx timeout [ 172.276154][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.279521][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.292033][ T5777] bridge_slave_1: entered allmulticast mode [ 172.296455][ T5777] bridge_slave_1: entered promiscuous mode [ 172.454214][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.457857][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.471990][ T5778] bridge_slave_0: entered allmulticast mode [ 172.484089][ T5778] bridge_slave_0: entered promiscuous mode [ 172.512572][ T5390] Bluetooth: hci4: command tx timeout [ 172.546517][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.549747][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.562801][ T5771] bridge_slave_0: entered allmulticast mode [ 172.581456][ T5771] bridge_slave_0: entered promiscuous mode [ 172.591106][ T5390] Bluetooth: hci3: command tx timeout [ 172.625111][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.629047][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.639277][ T5763] bridge_slave_0: entered allmulticast mode [ 172.653147][ T5763] bridge_slave_0: entered promiscuous mode [ 172.659331][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.671021][ T5390] Bluetooth: hci5: command tx timeout [ 172.675935][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.679126][ T5778] bridge_slave_1: entered allmulticast mode [ 172.692598][ T5778] bridge_slave_1: entered promiscuous mode [ 172.719943][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.723563][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.726440][ T5773] bridge_slave_0: entered allmulticast mode [ 172.747027][ T5773] bridge_slave_0: entered promiscuous mode [ 172.756719][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.763821][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.767472][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.776216][ T5773] bridge_slave_1: entered allmulticast mode [ 172.780268][ T5773] bridge_slave_1: entered promiscuous mode [ 172.785600][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.789648][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.796236][ T5771] bridge_slave_1: entered allmulticast mode [ 172.800063][ T5771] bridge_slave_1: entered promiscuous mode [ 172.819283][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.823365][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.826689][ T5763] bridge_slave_1: entered allmulticast mode [ 172.830563][ T5763] bridge_slave_1: entered promiscuous mode [ 172.863361][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.920019][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.928798][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.984836][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.016888][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.024769][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.030507][ T5777] team0: Port device team_slave_0 added [ 173.038912][ T5777] team0: Port device team_slave_1 added [ 173.043777][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.075459][ T5390] Bluetooth: hci6: command tx timeout [ 173.083031][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.089530][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.143207][ T5778] team0: Port device team_slave_0 added [ 173.356897][ T5778] team0: Port device team_slave_1 added [ 173.385363][ T5773] team0: Port device team_slave_0 added [ 173.396825][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.400003][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.434482][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.445061][ T5771] team0: Port device team_slave_0 added [ 173.538971][ T5763] team0: Port device team_slave_0 added [ 173.548621][ T5773] team0: Port device team_slave_1 added [ 173.584278][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.588038][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.631009][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.638012][ T5771] team0: Port device team_slave_1 added [ 173.707488][ T5763] team0: Port device team_slave_1 added [ 173.776546][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.779701][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.795134][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.801936][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.805168][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.820590][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.922911][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.926284][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.947407][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.954665][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.957731][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.974516][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.994362][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.997463][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.016834][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.024797][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.028210][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.072204][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.087303][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.103727][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.128249][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.188309][ T5777] hsr_slave_0: entered promiscuous mode [ 174.191846][ T5777] hsr_slave_1: entered promiscuous mode [ 174.195453][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 174.198574][ T5777] Cannot create hsr debugfs directory [ 174.225109][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.228580][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.263930][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.562446][ T5763] hsr_slave_0: entered promiscuous mode [ 174.574364][ T5763] hsr_slave_1: entered promiscuous mode [ 174.581553][ T5763] debugfs: 'hsr0' already exists in 'hsr' [ 174.584385][ T5763] Cannot create hsr debugfs directory [ 174.636331][ T5778] hsr_slave_0: entered promiscuous mode [ 174.654524][ T5778] hsr_slave_1: entered promiscuous mode [ 174.658375][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 174.676303][ T5778] Cannot create hsr debugfs directory [ 174.687701][ T5773] hsr_slave_0: entered promiscuous mode [ 174.702474][ T5773] hsr_slave_1: entered promiscuous mode [ 174.705719][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 174.708475][ T5773] Cannot create hsr debugfs directory [ 174.858538][ T5771] hsr_slave_0: entered promiscuous mode [ 174.874184][ T5771] hsr_slave_1: entered promiscuous mode [ 174.877339][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 174.879845][ T5771] Cannot create hsr debugfs directory [ 175.294779][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.439888][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.452692][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.531828][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.509952][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.628520][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.724680][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.728096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.778874][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.783156][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.080690][ T5773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.132394][ T5773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.186192][ T5773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.207285][ T5773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.525165][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.571150][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.590447][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.651222][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.745692][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.935233][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.956344][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.049205][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.117592][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.238796][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.315985][ T5762] veth0_vlan: entered promiscuous mode [ 178.343173][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.350255][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.463909][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.467833][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.521731][ T5762] veth1_vlan: entered promiscuous mode [ 178.525293][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.582919][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.586193][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.645706][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.741274][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.792098][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.979745][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.996032][ T5762] veth0_macvtap: entered promiscuous mode [ 179.014696][ T5777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.042363][ T5777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.104628][ T5762] veth1_macvtap: entered promiscuous mode [ 179.155815][ T5777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.175250][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.178490][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.286722][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.291377][ T5777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.309184][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.312518][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.444859][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.549482][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.611696][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.646247][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.702590][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.726852][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.869981][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.884918][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.897590][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.977174][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.980893][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.146830][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.150927][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.201782][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.205201][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.325179][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.328461][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.578230][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.610199][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.629049][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.719815][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.858569][ T5763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.927903][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.008961][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.100209][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.170231][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.198710][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.202266][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.219856][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.326442][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.329729][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.506492][ T5778] veth0_vlan: entered promiscuous mode 2025/09/19 13:50:16 executed programs: 12 [ 181.729049][ T5778] veth1_vlan: entered promiscuous mode [ 182.071258][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.093713][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.117737][ T5778] veth0_macvtap: entered promiscuous mode [ 182.233094][ T5778] veth1_macvtap: entered promiscuous mode [ 182.253713][ T5999] loop0: detected capacity change from 0 to 16384 [ 182.456817][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.632949][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.840137][ T5773] veth0_vlan: entered promiscuous mode [ 182.885704][ T5773] veth1_vlan: entered promiscuous mode [ 182.936077][ T1044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.971805][ T5999] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none [ 182.971824][ T5999] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 183.033578][ T5771] veth0_vlan: entered promiscuous mode [ 183.037732][ T5999] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 183.046135][ T1044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.093923][ T1044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.099685][ T1044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.122905][ T5999] bcachefs (loop0): invalid bkey in superblock btree=accounting level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2964fe5219fc11c5 written 16 min_key 347136:0:0 durability: 0 (invalid extent entry 0000000000017200) [ 183.122956][ T5999] invalid extent entry type (got 9, max 7), deleting [ 183.179376][ T5763] veth0_vlan: entered promiscuous mode [ 183.206198][ T5999] bcachefs (loop0): recovering from clean shutdown, journal seq 15 [ 183.209853][ T5999] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 183.209853][ T5999] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 183.287091][ T5771] veth1_vlan: entered promiscuous mode [ 183.327016][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.340463][ T5773] veth0_macvtap: entered promiscuous mode [ 183.558254][ T5773] veth1_macvtap: entered promiscuous mode [ 183.595212][ T5763] veth1_vlan: entered promiscuous mode [ 183.633698][ T5999] ================================================================== [ 183.638044][ T5999] BUG: KASAN: use-after-free in string+0x231/0x2b0 [ 183.641967][ T5999] Read of size 1 at addr ffff8880584374f7 by task syz.0.17/5999 [ 183.646478][ T5999] [ 183.647611][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 183.647632][ T5999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.647640][ T5999] Call Trace: [ 183.647647][ T5999] [ 183.647654][ T5999] dump_stack_lvl+0x189/0x250 [ 183.647673][ T5999] ? __kasan_check_byte+0x12/0x40 [ 183.647732][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.647745][ T5999] ? lock_release+0x4b/0x3e0 [ 183.647764][ T5999] ? __virt_addr_valid+0x4a5/0x5c0 [ 183.647780][ T5999] print_report+0xca/0x240 [ 183.647792][ T5999] ? string+0x231/0x2b0 [ 183.647806][ T5999] kasan_report+0x118/0x150 [ 183.647820][ T5999] ? number+0xd18/0xf60 [ 183.647834][ T5999] ? string+0x231/0x2b0 [ 183.647849][ T5999] string+0x231/0x2b0 [ 183.647866][ T5999] vsnprintf+0x739/0xf00 [ 183.647882][ T5999] bch2_prt_printf+0x1c6/0x740 [ 183.647901][ T5999] ? __pfx_bch2_prt_printf+0x10/0x10 [ 183.647915][ T5999] ? __pfx_bch2_prt_printf+0x10/0x10 [ 183.647930][ T5999] bch2_dirent_to_text+0x2bd/0xd20 [ 183.647950][ T5999] ? bch2_bkey_val_to_text+0xe4/0x150 [ 183.647967][ T5999] __bch2_bkey_fsck_err+0x3f7/0x540 [ 183.647981][ T5999] ? kernel_text_address+0xa5/0xe0 [ 183.647998][ T5999] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 183.648014][ T5999] ? do_raw_spin_lock+0x121/0x290 [ 183.648031][ T5999] bch2_dirent_validate+0x7b3/0xfb0 [ 183.648052][ T5999] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 183.648069][ T5999] ? __free_frozen_pages+0x65e/0xd30 [ 183.648085][ T5999] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 183.648102][ T5999] bch2_bkey_val_validate+0x202/0x3e0 [ 183.648119][ T5999] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 183.648134][ T5999] ? __asan_memset+0x22/0x50 [ 183.648145][ T5999] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 183.648160][ T5999] bch2_btree_node_read_done+0x4051/0x5550 [ 183.648189][ T5999] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 183.648207][ T5999] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 183.648226][ T5999] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 183.648238][ T5999] ? bch2_printbuf_make_room+0xdb/0x360 [ 183.648253][ T5999] ? enumerated_ref_put+0xbe/0x270 [ 183.648270][ T5999] btree_node_read_work+0x40e/0xe60 [ 183.648291][ T5999] ? __pfx_btree_node_read_work+0x10/0x10 [ 183.648307][ T5999] ? bch2_latency_acct+0x436/0x520 [ 183.648320][ T5999] ? __pfx_bch2_latency_acct+0x10/0x10 [ 183.648332][ T5999] ? bio_associate_blkg+0x6d/0x230 [ 183.648355][ T5999] bch2_btree_node_read+0x887/0x2a00 [ 183.648379][ T5999] ? bch2_btree_node_hash_insert+0x88/0xc0 [ 183.648393][ T5999] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 183.648406][ T5999] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 183.648427][ T5999] ? bch2_trans_unlock+0x8a/0x580 [ 183.648441][ T5999] ? bch2_trans_unlock+0x491/0x580 [ 183.648456][ T5999] bch2_btree_root_read+0x5f0/0x760 [ 183.648474][ T5999] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 183.648495][ T5999] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 183.648511][ T5999] read_btree_roots+0x2c6/0x840 [ 183.648527][ T5999] ? __pfx_read_btree_roots+0x10/0x10 [ 183.648543][ T5999] bch2_fs_recovery+0x261f/0x3a50 [ 183.648563][ T5999] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 183.648578][ T5999] ? __lock_acquire+0xab9/0xd20 [ 183.648597][ T5999] ? __mutex_trylock_common+0x153/0x260 [ 183.648611][ T5999] ? __pfx___mutex_trylock_common+0x10/0x10 [ 183.648635][ T5999] ? rcu_is_watching+0x15/0xb0 [ 183.648650][ T5999] ? __lock_acquire+0xab9/0xd20 [ 183.648676][ T5999] ? bch2_fs_start+0xa0f/0xda0 [ 183.648690][ T5999] ? up_write+0x1c4/0x420 [ 183.648702][ T5999] ? bch2_fs_start+0x5e7/0xda0 [ 183.648715][ T5999] bch2_fs_start+0xaaf/0xda0 [ 183.648729][ T5999] ? bch2_fs_start+0x5e7/0xda0 [ 183.648742][ T5999] ? __pfx_bch2_fs_start+0x10/0x10 [ 183.648760][ T5999] ? sget+0x267/0x620 [ 183.648774][ T5999] bch2_fs_get_tree+0xb39/0x1520 [ 183.648797][ T5999] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 183.648816][ T5999] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 183.648837][ T5999] vfs_get_tree+0x92/0x2b0 [ 183.648852][ T5999] do_new_mount+0x2a2/0x9e0 [ 183.648869][ T5999] ? ns_capable+0x8a/0xf0 [ 183.648880][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 183.648894][ T5999] ? path_mount+0x61c/0xfe0 [ 183.648912][ T5999] ? user_path_at+0x44/0x60 [ 183.648925][ T5999] __se_sys_mount+0x317/0x410 [ 183.648943][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 183.648960][ T5999] ? do_syscall_64+0xbe/0x3b0 [ 183.648972][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 183.648988][ T5999] do_syscall_64+0xfa/0x3b0 [ 183.648999][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.649010][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.649024][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 183.649038][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.649051][ T5999] RIP: 0033:0x7f4a0ad9038a [ 183.649063][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.649074][ T5999] RSP: 002b:00007f4a0bc11e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.649089][ T5999] RAX: ffffffffffffffda RBX: 00007f4a0bc11ef0 RCX: 00007f4a0ad9038a [ 183.649098][ T5999] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007f4a0bc11eb0 [ 183.649107][ T5999] RBP: 0000200000000040 R08: 00007f4a0bc11ef0 R09: 0000000000004000 [ 183.649115][ T5999] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940 [ 183.649123][ T5999] R13: 00007f4a0bc11eb0 R14: 000000000000496e R15: 0000200000000000 [ 183.649136][ T5999] [ 183.649141][ T5999] [ 183.899835][ T5999] The buggy address belongs to the physical page: [ 183.902730][ T5999] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x345e pfn:0x58437 [ 183.906755][ T5999] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 183.910255][ T5999] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 183.914525][ T5999] raw: 000000000000345e 0000000000000000 00000000ffffffff 0000000000000000 [ 183.918471][ T5999] page dumped because: kasan: bad access detected [ 183.921237][ T5999] page_owner tracks the page as freed [ 183.923554][ T5999] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 31, tgid 31 (kworker/u4:2), ts 182184553962, free_ts 183598225023 [ 183.934088][ T5999] post_alloc_hook+0x240/0x2a0 [ 183.936317][ T5999] get_page_from_freelist+0x21e4/0x22c0 [ 183.938775][ T5999] __alloc_frozen_pages_noprof+0x181/0x370 [ 183.941421][ T5999] alloc_pages_mpol+0x232/0x4a0 [ 183.943664][ T5999] allocate_slab+0x8a/0x370 [ 183.945962][ T5999] ___slab_alloc+0xbeb/0x1420 [ 183.948741][ T5999] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 183.952191][ T5999] kmalloc_reserve+0x136/0x290 [ 183.954365][ T5999] __alloc_skb+0x142/0x2d0 [ 183.956410][ T5999] nsim_dev_trap_report_work+0x29a/0xb80 [ 183.958900][ T5999] process_scheduled_works+0xae1/0x17b0 [ 183.961383][ T5999] worker_thread+0x8a0/0xda0 [ 183.963463][ T5999] kthread+0x70e/0x8a0 [ 183.965333][ T5999] ret_from_fork+0x439/0x7d0 [ 183.967441][ T5999] ret_from_fork_asm+0x1a/0x30 [ 183.969816][ T5999] page last free pid 5763 tgid 5763 stack trace: [ 183.972919][ T5999] __free_frozen_pages+0xbc4/0xd30 [ 183.975219][ T5999] __put_partials+0x156/0x1a0 [ 183.977340][ T5999] put_cpu_partial+0x17c/0x250 [ 183.979434][ T5999] __slab_free+0x2d5/0x3c0 [ 183.981675][ T5999] qlist_free_all+0x97/0x140 [ 183.984011][ T5999] kasan_quarantine_reduce+0x148/0x160 [ 183.987003][ T5999] __kasan_slab_alloc+0x22/0x80 [ 183.989619][ T5999] __kmalloc_cache_noprof+0x1be/0x3d0 [ 183.992272][ T5999] netdevice_event+0x3a1/0x8a0 [ 183.994451][ T5999] notifier_call_chain+0x1b3/0x3e0 [ 183.996811][ T5999] __dev_notify_flags+0x18d/0x2e0 [ 183.999098][ T5999] netif_change_flags+0xe8/0x1a0 [ 184.001344][ T5999] do_setlink+0xc55/0x41c0 [ 184.003359][ T5999] rtnl_newlink+0x160b/0x1c70 [ 184.005477][ T5999] rtnetlink_rcv_msg+0x7cc/0xb70 [ 184.008320][ T5999] netlink_rcv_skb+0x208/0x470 [ 184.011217][ T5999] [ 184.013001][ T5999] Memory state around the buggy address: [ 184.015608][ T5999] ffff888058437380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.019044][ T5999] ffff888058437400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.022420][ T5999] >ffff888058437480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.025804][ T5999] ^ [ 184.029224][ T5999] ffff888058437500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.032812][ T5999] ffff888058437580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.036665][ T5999] ================================================================== [ 184.213033][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.217677][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.251996][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.255806][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.330265][ T5771] veth0_macvtap: entered promiscuous mode [ 184.345152][ T5771] veth1_macvtap: entered promiscuous mode [ 184.379775][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.393535][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.613475][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.631288][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.816006][ T1044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.979799][ T1044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.026776][ T1044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.030710][ T1044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.098304][ T5763] veth0_macvtap: entered promiscuous mode [ 185.141558][ T1044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.203200][ T5763] veth1_macvtap: entered promiscuous mode [ 185.303474][ T1044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.428559][ T1044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.433436][ T1044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.452279][ T5999] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.455579][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 185.459524][ T5999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.465009][ T5999] Call Trace: [ 185.466823][ T5999] [ 185.468342][ T5999] dump_stack_lvl+0x99/0x250 [ 185.470312][ T5999] ? __asan_memcpy+0x40/0x70 [ 185.472330][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.475096][ T5999] ? __pfx__printk+0x10/0x10 [ 185.477374][ T5999] vpanic+0x281/0x750 [ 185.479458][ T5999] ? preempt_schedule+0xae/0xc0 [ 185.482150][ T5999] ? __pfx_vpanic+0x10/0x10 [ 185.484397][ T5999] ? preempt_schedule_common+0x83/0xd0 [ 185.486963][ T5999] ? preempt_schedule+0xae/0xc0 [ 185.488965][ T5999] ? __pfx_preempt_schedule+0x10/0x10 [ 185.491224][ T5999] panic+0xb9/0xc0 [ 185.492897][ T5999] ? __pfx_panic+0x10/0x10 [ 185.494944][ T5999] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 185.497744][ T5999] ? string+0x231/0x2b0 [ 185.499690][ T5999] check_panic_on_warn+0x89/0xb0 [ 185.502510][ T5999] ? string+0x231/0x2b0 [ 185.505034][ T5999] end_report+0x78/0x160 [ 185.506976][ T5999] kasan_report+0x129/0x150 [ 185.508916][ T5999] ? number+0xd18/0xf60 [ 185.510783][ T5999] ? string+0x231/0x2b0 [ 185.512614][ T5999] string+0x231/0x2b0 [ 185.514454][ T5999] vsnprintf+0x739/0xf00 [ 185.516304][ T5999] bch2_prt_printf+0x1c6/0x740 [ 185.518614][ T5999] ? __pfx_bch2_prt_printf+0x10/0x10 [ 185.520944][ T5999] ? __pfx_bch2_prt_printf+0x10/0x10 [ 185.523412][ T5999] bch2_dirent_to_text+0x2bd/0xd20 [ 185.525902][ T5999] ? bch2_bkey_val_to_text+0xe4/0x150 [ 185.528244][ T5999] __bch2_bkey_fsck_err+0x3f7/0x540 [ 185.530457][ T5999] ? kernel_text_address+0xa5/0xe0 [ 185.532743][ T5999] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 185.535291][ T5999] ? do_raw_spin_lock+0x121/0x290 [ 185.537563][ T5999] bch2_dirent_validate+0x7b3/0xfb0 [ 185.540150][ T5999] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 185.543269][ T5999] ? __free_frozen_pages+0x65e/0xd30 [ 185.545686][ T5999] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 185.548115][ T5999] bch2_bkey_val_validate+0x202/0x3e0 [ 185.550650][ T5999] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 185.553236][ T5999] ? __asan_memset+0x22/0x50 [ 185.555567][ T5999] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 185.558469][ T5999] bch2_btree_node_read_done+0x4051/0x5550 [ 185.561030][ T5999] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 185.563721][ T5999] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 185.566266][ T5999] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 185.568923][ T5999] ? bch2_printbuf_make_room+0xdb/0x360 [ 185.571578][ T5999] ? enumerated_ref_put+0xbe/0x270 [ 185.573868][ T5999] btree_node_read_work+0x40e/0xe60 [ 185.576043][ T5999] ? __pfx_btree_node_read_work+0x10/0x10 [ 185.578542][ T5999] ? bch2_latency_acct+0x436/0x520 [ 185.581117][ T5999] ? __pfx_bch2_latency_acct+0x10/0x10 [ 185.583856][ T5999] ? bio_associate_blkg+0x6d/0x230 [ 185.586482][ T5999] bch2_btree_node_read+0x887/0x2a00 [ 185.589028][ T5999] ? bch2_btree_node_hash_insert+0x88/0xc0 [ 185.591695][ T5999] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 185.594274][ T5999] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 185.596825][ T5999] ? bch2_trans_unlock+0x8a/0x580 [ 185.599264][ T5999] ? bch2_trans_unlock+0x491/0x580 [ 185.602519][ T5999] bch2_btree_root_read+0x5f0/0x760 [ 185.605582][ T5999] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 185.608340][ T5999] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 185.611006][ T5999] read_btree_roots+0x2c6/0x840 [ 185.613055][ T5999] ? __pfx_read_btree_roots+0x10/0x10 [ 185.615468][ T5999] bch2_fs_recovery+0x261f/0x3a50 [ 185.617751][ T5999] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 185.620161][ T5999] ? __lock_acquire+0xab9/0xd20 [ 185.622267][ T5999] ? __mutex_trylock_common+0x153/0x260 [ 185.624717][ T5999] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.627330][ T5999] ? rcu_is_watching+0x15/0xb0 [ 185.629905][ T5999] ? __lock_acquire+0xab9/0xd20 [ 185.632961][ T5999] ? bch2_fs_start+0xa0f/0xda0 [ 185.635755][ T5999] ? up_write+0x1c4/0x420 [ 185.637753][ T5999] ? bch2_fs_start+0x5e7/0xda0 [ 185.639893][ T5999] bch2_fs_start+0xaaf/0xda0 [ 185.641896][ T5999] ? bch2_fs_start+0x5e7/0xda0 [ 185.644074][ T5999] ? __pfx_bch2_fs_start+0x10/0x10 [ 185.646291][ T5999] ? sget+0x267/0x620 [ 185.648078][ T5999] bch2_fs_get_tree+0xb39/0x1520 [ 185.650376][ T5999] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 185.653154][ T5999] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 185.656180][ T5999] vfs_get_tree+0x92/0x2b0 [ 185.658526][ T5999] do_new_mount+0x2a2/0x9e0 [ 185.660712][ T5999] ? ns_capable+0x8a/0xf0 [ 185.662686][ T5999] ? __pfx_do_new_mount+0x10/0x10 [ 185.665058][ T5999] ? path_mount+0x61c/0xfe0 [ 185.667428][ T5999] ? user_path_at+0x44/0x60 [ 185.669943][ T5999] __se_sys_mount+0x317/0x410 [ 185.672352][ T5999] ? __pfx___se_sys_mount+0x10/0x10 [ 185.674807][ T5999] ? do_syscall_64+0xbe/0x3b0 [ 185.676927][ T5999] ? __x64_sys_mount+0x20/0xc0 [ 185.679153][ T5999] do_syscall_64+0xfa/0x3b0 [ 185.681591][ T5999] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.684463][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.687538][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 185.689693][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.692441][ T5999] RIP: 0033:0x7f4a0ad9038a [ 185.694465][ T5999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.703721][ T5999] RSP: 002b:00007f4a0bc11e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.708866][ T5999] RAX: ffffffffffffffda RBX: 00007f4a0bc11ef0 RCX: 00007f4a0ad9038a [ 185.712484][ T5999] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007f4a0bc11eb0 [ 185.716003][ T5999] RBP: 0000200000000040 R08: 00007f4a0bc11ef0 R09: 0000000000004000 [ 185.719416][ T5999] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940 [ 185.722970][ T5999] R13: 00007f4a0bc11eb0 R14: 000000000000496e R15: 0000200000000000 [ 185.727410][ T5999] [ 185.729569][ T5999] Kernel Offset: disabled [ 185.731463][ T5999] Rebooting in 86400 seconds..