Warning: Permanently added '[localhost]:56382' (ED25519) to the list of known hosts.
2025/09/05 11:22:39 parsed 1 programs
syzkaller login: [ 91.235412][ T5349] cgroup: Unknown subsys name 'net'
[ 91.305577][ T5349] cgroup: Unknown subsys name 'cpuset'
[ 91.314251][ T5349] cgroup: Unknown subsys name 'rlimit'
[ 91.942931][ T10] cfg80211: failed to load regulatory.db
[ 93.020140][ T5349] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.547127][ T5365] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 98.442985][ T5377] chnl_net:caif_netlink_parms(): no params data found
[ 98.518024][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.522080][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.525346][ T5377] bridge_slave_0: entered allmulticast mode
[ 98.530322][ T5377] bridge_slave_0: entered promiscuous mode
[ 98.537047][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.540337][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.543972][ T5377] bridge_slave_1: entered allmulticast mode
[ 98.547635][ T5377] bridge_slave_1: entered promiscuous mode
[ 98.574339][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.581241][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.604894][ T5377] team0: Port device team_slave_0 added
[ 98.612140][ T5377] team0: Port device team_slave_1 added
[ 98.632875][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.635667][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.646253][ T5377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.653656][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.656781][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.668252][ T5377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.705511][ T5377] hsr_slave_0: entered promiscuous mode
[ 98.709372][ T5377] hsr_slave_1: entered promiscuous mode
[ 98.883063][ T5377] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.893378][ T5377] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.900111][ T5377] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.907717][ T5377] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.940148][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.944859][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.949931][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.953957][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.031773][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.048460][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.055487][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.074073][ T5377] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.085130][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.088557][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.108546][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.112373][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.315165][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.357238][ T5377] veth0_vlan: entered promiscuous mode
[ 99.368395][ T5377] veth1_vlan: entered promiscuous mode
[ 99.397647][ T5377] veth0_macvtap: entered promiscuous mode
[ 99.406979][ T5377] veth1_macvtap: entered promiscuous mode
[ 99.425820][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.436298][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.448802][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.464138][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.467859][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.483528][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.599834][ T5377] syz-executor (5377) used greatest stack depth: 18920 bytes left
[ 99.633856][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.689429][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.754808][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.884562][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.733271][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.736926][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.779206][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.788431][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.117283][ T1098] bridge_slave_1: left allmulticast mode
[ 102.119790][ T1098] bridge_slave_1: left promiscuous mode
[ 102.131901][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.164858][ T1098] bridge_slave_0: left allmulticast mode
[ 102.167899][ T1098] bridge_slave_0: left promiscuous mode
[ 102.185754][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.625111][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.633375][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.638470][ T1098] bond0 (unregistering): Released all slaves
[ 102.750009][ T1098] hsr_slave_0: left promiscuous mode
[ 102.761956][ T1098] hsr_slave_1: left promiscuous mode
[ 102.765063][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.771106][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.783089][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.786629][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.824815][ T1098] veth1_macvtap: left promiscuous mode
[ 102.827436][ T1098] veth0_macvtap: left promiscuous mode
[ 102.841445][ T1098] veth1_vlan: left promiscuous mode
[ 102.845076][ T1098] veth0_vlan: left promiscuous mode
[ 103.344704][ T1098] team0 (unregistering): Port device team_slave_1 removed
[ 103.368029][ T1098] team0 (unregistering): Port device team_slave_0 removed
[ 105.146084][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.154134][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.158082][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.162842][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.166734][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/09/05 11:22:57 executed programs: 0
[ 106.384722][ T4705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.388953][ T4705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.392781][ T4705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.398681][ T4705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.402818][ T4705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.627528][ T5489] chnl_net:caif_netlink_parms(): no params data found
[ 106.694654][ T5489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.697976][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.701308][ T5489] bridge_slave_0: entered allmulticast mode
[ 106.704709][ T5489] bridge_slave_0: entered promiscuous mode
[ 106.709162][ T5489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.713150][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.716458][ T5489] bridge_slave_1: entered allmulticast mode
[ 106.722126][ T5489] bridge_slave_1: entered promiscuous mode
[ 106.747314][ T5489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.754418][ T5489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 106.778471][ T5489] team0: Port device team_slave_0 added
[ 106.783616][ T5489] team0: Port device team_slave_1 added
[ 106.806341][ T5489] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 106.809035][ T5489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 106.821906][ T5489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 106.828873][ T5489] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 106.832418][ T5489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 106.854947][ T5489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 106.887834][ T5489] hsr_slave_0: entered promiscuous mode
[ 106.891982][ T5489] hsr_slave_1: entered promiscuous mode
[ 107.404473][ T5489] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.417137][ T5489] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.433753][ T5489] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.444295][ T5489] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.614956][ T5489] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.651970][ T5489] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.667873][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.671446][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.696489][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.700093][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.096726][ T5489] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.169632][ T5489] veth0_vlan: entered promiscuous mode
[ 108.201489][ T5489] veth1_vlan: entered promiscuous mode
[ 108.260500][ T5489] veth0_macvtap: entered promiscuous mode
[ 108.284583][ T5489] veth1_macvtap: entered promiscuous mode
[ 108.309821][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.336048][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.364515][ T1138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.375778][ T1138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.379320][ T1138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.392704][ T1138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.423097][ T4705] Bluetooth: hci0: command tx timeout
[ 108.535526][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.538985][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.605563][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.614865][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.919030][ T5533] loop0: detected capacity change from 0 to 16384
[ 109.309946][ T5533] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none
[ 109.309963][ T5533] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 109.412380][ T5533] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 109.416283][ T5533] bcachefs (loop0): invalid bkey in superblock btree=accounting level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2964fe5219fc11c5 written 16 min_key 347136:0:0 durability: 0 (invalid extent entry 0000000000017200)
[ 109.416319][ T5533] invalid extent entry type (got 9, max 7), deleting
[ 109.474222][ T5533] bcachefs (loop0): recovering from clean shutdown, journal seq 15
[ 109.477873][ T5533] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[ 109.477873][ T5533] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 110.055917][ T5533] ==================================================================
[ 110.059527][ T5533] BUG: KASAN: use-after-free in string+0x231/0x2b0
[ 110.062820][ T5533] Read of size 1 at addr ffff888050fe74f7 by task syz.0.17/5533
[ 110.067545][ T5533]
[ 110.068649][ T5533] CPU: 0 UID: 0 PID: 5533 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 110.068666][ T5533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 110.068672][ T5533] Call Trace:
[ 110.068681][ T5533]
[ 110.068686][ T5533] dump_stack_lvl+0x189/0x250
[ 110.068707][ T5533] ? __kasan_check_byte+0x12/0x40
[ 110.068763][ T5533] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.068775][ T5533] ? lock_release+0x4b/0x3e0
[ 110.068793][ T5533] ? __virt_addr_valid+0x4a5/0x5c0
[ 110.068804][ T5533] print_report+0xca/0x240
[ 110.068811][ T5533] ? string+0x231/0x2b0
[ 110.068821][ T5533] kasan_report+0x118/0x150
[ 110.068833][ T5533] ? number+0xd18/0xf60
[ 110.068843][ T5533] ? string+0x231/0x2b0
[ 110.068856][ T5533] string+0x231/0x2b0
[ 110.068869][ T5533] vsnprintf+0x739/0xf00
[ 110.068883][ T5533] bch2_prt_printf+0x1c6/0x740
[ 110.068900][ T5533] ? __pfx_bch2_prt_printf+0x10/0x10
[ 110.068910][ T5533] ? __pfx_bch2_prt_printf+0x10/0x10
[ 110.068919][ T5533] bch2_dirent_to_text+0x2bd/0xd20
[ 110.068931][ T5533] ? bch2_bkey_val_to_text+0xe4/0x150
[ 110.068946][ T5533] __bch2_bkey_fsck_err+0x3f7/0x540
[ 110.068957][ T5533] ? kernel_text_address+0xa5/0xe0
[ 110.068972][ T5533] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 110.068985][ T5533] ? do_raw_spin_lock+0x121/0x290
[ 110.068999][ T5533] bch2_dirent_validate+0x7b3/0xfb0
[ 110.069017][ T5533] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 110.069032][ T5533] ? __free_frozen_pages+0x65e/0xd30
[ 110.069048][ T5533] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 110.069060][ T5533] bch2_bkey_val_validate+0x202/0x3e0
[ 110.069070][ T5533] ? __pfx_bch2_bkey_val_validate+0x10/0x10
[ 110.069078][ T5533] ? __asan_memset+0x22/0x50
[ 110.069086][ T5533] ? __bch2_bkey_unpack_key+0x98b/0xe10
[ 110.069095][ T5533] bch2_btree_node_read_done+0x4051/0x5550
[ 110.069111][ T5533] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 110.069121][ T5533] ? bch2_extent_ptr_to_text+0x5a/0x890
[ 110.069132][ T5533] ? bch2_bkey_ptrs_to_text+0x1161/0x1310
[ 110.069142][ T5533] ? bch2_printbuf_make_room+0xdb/0x360
[ 110.069154][ T5533] ? enumerated_ref_put+0xbe/0x270
[ 110.069169][ T5533] btree_node_read_work+0x40e/0xe60
[ 110.069187][ T5533] ? __pfx_btree_node_read_work+0x10/0x10
[ 110.069202][ T5533] ? bch2_latency_acct+0x436/0x520
[ 110.069214][ T5533] ? __pfx_bch2_latency_acct+0x10/0x10
[ 110.069224][ T5533] ? bio_associate_blkg+0x6d/0x230
[ 110.069241][ T5533] bch2_btree_node_read+0x887/0x2a00
[ 110.069259][ T5533] ? bch2_btree_node_hash_insert+0x88/0xc0
[ 110.069271][ T5533] ? __mutex_unlock_slowpath+0x1a1/0x740
[ 110.069289][ T5533] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 110.069303][ T5533] ? bch2_trans_unlock+0x8a/0x580
[ 110.069316][ T5533] ? bch2_trans_unlock+0x491/0x580
[ 110.069336][ T5533] bch2_btree_root_read+0x5f0/0x760
[ 110.069352][ T5533] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 110.069369][ T5533] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 110.069385][ T5533] read_btree_roots+0x2c6/0x840
[ 110.069398][ T5533] ? __pfx_read_btree_roots+0x10/0x10
[ 110.069411][ T5533] bch2_fs_recovery+0x261f/0x3a50
[ 110.069425][ T5533] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 110.069437][ T5533] ? __lock_acquire+0xab9/0xd20
[ 110.069454][ T5533] ? __mutex_trylock_common+0x153/0x260
[ 110.069468][ T5533] ? __pfx___mutex_trylock_common+0x10/0x10
[ 110.069480][ T5533] ? rcu_is_watching+0x15/0xb0
[ 110.069492][ T5533] ? __lock_acquire+0xab9/0xd20
[ 110.069538][ T5533] ? bch2_fs_start+0xa0f/0xda0
[ 110.069552][ T5533] ? up_write+0x1c4/0x420
[ 110.069562][ T5533] ? bch2_fs_start+0x5e7/0xda0
[ 110.069574][ T5533] bch2_fs_start+0xaaf/0xda0
[ 110.069585][ T5533] ? bch2_fs_start+0x5e7/0xda0
[ 110.069596][ T5533] ? __pfx_bch2_fs_start+0x10/0x10
[ 110.069613][ T5533] ? sget+0x267/0x620
[ 110.069624][ T5533] bch2_fs_get_tree+0xb39/0x1520
[ 110.069642][ T5533] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 110.069657][ T5533] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 110.069670][ T5533] vfs_get_tree+0x8f/0x2b0
[ 110.069678][ T5533] do_new_mount+0x2a2/0x9e0
[ 110.069688][ T5533] ? ns_capable+0x8a/0xf0
[ 110.069697][ T5533] ? __pfx_do_new_mount+0x10/0x10
[ 110.069709][ T5533] ? path_mount+0x61c/0xfe0
[ 110.069721][ T5533] ? user_path_at+0x44/0x60
[ 110.069732][ T5533] __se_sys_mount+0x317/0x410
[ 110.069747][ T5533] ? __pfx___se_sys_mount+0x10/0x10
[ 110.069761][ T5533] ? do_syscall_64+0xbe/0x3b0
[ 110.069776][ T5533] ? __x64_sys_mount+0x20/0xc0
[ 110.069790][ T5533] do_syscall_64+0xfa/0x3b0
[ 110.069805][ T5533] ? lockdep_hardirqs_on+0x9c/0x150
[ 110.069816][ T5533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.069823][ T5533] ? clear_bhb_loop+0x60/0xb0
[ 110.069831][ T5533] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.069839][ T5533] RIP: 0033:0x7fd00ed9038a
[ 110.069847][ T5533] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.069853][ T5533] RSP: 002b:00007fff65054f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 110.069863][ T5533] RAX: ffffffffffffffda RBX: 00007fff65054fa0 RCX: 00007fd00ed9038a
[ 110.069868][ T5533] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007fff65054f60
[ 110.069873][ T5533] RBP: 0000200000000040 R08: 00007fff65054fa0 R09: 0000000000004000
[ 110.069878][ T5533] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940
[ 110.069882][ T5533] R13: 00007fff65054f60 R14: 000000000000496e R15: 0000200000000000
[ 110.069891][ T5533]
[ 110.069895][ T5533]
[ 110.306691][ T5533] The buggy address belongs to the physical page:
[ 110.310359][ T5533] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888050fe7dc0 pfn:0x50fe7
[ 110.315277][ T5533] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 110.318501][ T5533] page_type: f0(buddy)
[ 110.320234][ T5533] raw: 04fff00000000000 ffffea00013e8dc8 ffffea000139e008 0000000000000000
[ 110.324169][ T5533] raw: ffff888050fe7dc0 0000000000000000 00000000f0000000 0000000000000000
[ 110.328167][ T5533] page dumped because: kasan: bad access detected
[ 110.330975][ T5533] page_owner tracks the page as freed
[ 110.333098][ T5533] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5454, tgid 5454 (dhcpcd-run-hook), ts 104016831092, free_ts 104102545739
[ 110.341789][ T5533] post_alloc_hook+0x240/0x2a0
[ 110.343898][ T5533] get_page_from_freelist+0x21e4/0x22c0
[ 110.346499][ T5533] __alloc_frozen_pages_noprof+0x181/0x370
[ 110.348912][ T5533] alloc_pages_mpol+0x232/0x4a0
[ 110.351243][ T5533] alloc_pages_noprof+0xa9/0x190
[ 110.353724][ T5533] pte_alloc_one+0x21/0x170
[ 110.355936][ T5533] __pte_alloc+0x25/0x1a0
[ 110.358164][ T5533] copy_pmd_range+0x6a91/0x71d0
[ 110.360446][ T5533] copy_page_range+0xc14/0x1270
[ 110.362590][ T5533] dup_mmap+0xf57/0x1ac0
[ 110.364297][ T5533] copy_mm+0x13c/0x4b0
[ 110.365953][ T5533] copy_process+0x1706/0x3c00
[ 110.368053][ T5533] kernel_clone+0x21e/0x840
[ 110.370069][ T5533] __x64_sys_clone+0x18b/0x1e0
[ 110.372198][ T5533] do_syscall_64+0xfa/0x3b0
[ 110.374281][ T5533] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.377036][ T5533] page last free pid 15 tgid 15 stack trace:
[ 110.379920][ T5533] __free_frozen_pages+0xbc4/0xd30
[ 110.382328][ T5533] __tlb_remove_table+0x2d2/0x3b0
[ 110.384533][ T5533] tlb_remove_table_rcu+0x85/0x100
[ 110.386784][ T5533] rcu_core+0xcab/0x1770
[ 110.388693][ T5533] handle_softirqs+0x283/0x870
[ 110.390743][ T5533] run_ksoftirqd+0x9b/0x100
[ 110.392858][ T5533] smpboot_thread_fn+0x53f/0xa60
[ 110.395167][ T5533] kthread+0x70e/0x8a0
[ 110.397477][ T5533] ret_from_fork+0x3fc/0x770
[ 110.399839][ T5533] ret_from_fork_asm+0x1a/0x30
[ 110.401824][ T5533]
[ 110.402878][ T5533] Memory state around the buggy address:
[ 110.405347][ T5533] ffff888050fe7380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.409021][ T5533] ffff888050fe7400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.412496][ T5533] >ffff888050fe7480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.415877][ T5533] ^
[ 110.419265][ T5533] ffff888050fe7500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.422850][ T5533] ffff888050fe7580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.426821][ T5533] ==================================================================
[ 110.519002][ T4705] Bluetooth: hci0: command tx timeout
[ 110.525808][ T5533] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 110.529543][ T5533] CPU: 0 UID: 0 PID: 5533 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 110.534422][ T5533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 110.539293][ T5533] Call Trace:
[ 110.540892][ T5533]
[ 110.542297][ T5533] dump_stack_lvl+0x99/0x250
[ 110.544450][ T5533] ? __asan_memcpy+0x40/0x70
[ 110.546931][ T5533] ? __pfx_dump_stack_lvl+0x10/0x10
[ 110.550531][ T5533] ? __pfx__printk+0x10/0x10
[ 110.553211][ T5533] vpanic+0x281/0x750
[ 110.555080][ T5533] ? preempt_schedule+0xae/0xc0
[ 110.557463][ T5533] ? __pfx_vpanic+0x10/0x10
[ 110.559570][ T5533] ? preempt_schedule_common+0x83/0xd0
[ 110.562297][ T5533] ? preempt_schedule+0xae/0xc0
[ 110.565013][ T5533] ? __pfx_preempt_schedule+0x10/0x10
[ 110.568039][ T5533] panic+0xb9/0xc0
[ 110.570101][ T5533] ? __pfx_panic+0x10/0x10
[ 110.572535][ T5533] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 110.575282][ T5533] ? string+0x231/0x2b0
[ 110.577764][ T5533] check_panic_on_warn+0x89/0xb0
[ 110.580381][ T5533] ? string+0x231/0x2b0
[ 110.582234][ T5533] end_report+0x78/0x160
[ 110.584194][ T5533] kasan_report+0x129/0x150
[ 110.586455][ T5533] ? number+0xd18/0xf60
[ 110.588304][ T5533] ? string+0x231/0x2b0
[ 110.590199][ T5533] string+0x231/0x2b0
[ 110.592136][ T5533] vsnprintf+0x739/0xf00
[ 110.594650][ T5533] bch2_prt_printf+0x1c6/0x740
[ 110.597461][ T5533] ? __pfx_bch2_prt_printf+0x10/0x10
[ 110.600305][ T5533] ? __pfx_bch2_prt_printf+0x10/0x10
[ 110.602658][ T5533] bch2_dirent_to_text+0x2bd/0xd20
[ 110.605235][ T5533] ? bch2_bkey_val_to_text+0xe4/0x150
[ 110.607607][ T5533] __bch2_bkey_fsck_err+0x3f7/0x540
[ 110.610019][ T5533] ? kernel_text_address+0xa5/0xe0
[ 110.612373][ T5533] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 110.615183][ T5533] ? do_raw_spin_lock+0x121/0x290
[ 110.617687][ T5533] bch2_dirent_validate+0x7b3/0xfb0
[ 110.620277][ T5533] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 110.622703][ T5533] ? __free_frozen_pages+0x65e/0xd30
[ 110.624978][ T5533] ? __pfx_bch2_dirent_validate+0x10/0x10
[ 110.627435][ T5533] bch2_bkey_val_validate+0x202/0x3e0
[ 110.629675][ T5533] ? __pfx_bch2_bkey_val_validate+0x10/0x10
[ 110.632065][ T5533] ? __asan_memset+0x22/0x50
[ 110.634002][ T5533] ? __bch2_bkey_unpack_key+0x98b/0xe10
[ 110.636538][ T5533] bch2_btree_node_read_done+0x4051/0x5550
[ 110.639352][ T5533] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 110.642232][ T5533] ? bch2_extent_ptr_to_text+0x5a/0x890
[ 110.644640][ T5533] ? bch2_bkey_ptrs_to_text+0x1161/0x1310
[ 110.647186][ T5533] ? bch2_printbuf_make_room+0xdb/0x360
[ 110.649628][ T5533] ? enumerated_ref_put+0xbe/0x270
[ 110.651966][ T5533] btree_node_read_work+0x40e/0xe60
[ 110.654352][ T5533] ? __pfx_btree_node_read_work+0x10/0x10
[ 110.656880][ T5533] ? bch2_latency_acct+0x436/0x520
[ 110.660294][ T5533] ? __pfx_bch2_latency_acct+0x10/0x10
[ 110.663864][ T5533] ? bio_associate_blkg+0x6d/0x230
[ 110.666162][ T5533] bch2_btree_node_read+0x887/0x2a00
[ 110.668626][ T5533] ? bch2_btree_node_hash_insert+0x88/0xc0
[ 110.671201][ T5533] ? __mutex_unlock_slowpath+0x1a1/0x740
[ 110.673816][ T5533] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 110.676521][ T5533] ? bch2_trans_unlock+0x8a/0x580
[ 110.678775][ T5533] ? bch2_trans_unlock+0x491/0x580
[ 110.681064][ T5533] bch2_btree_root_read+0x5f0/0x760
[ 110.683457][ T5533] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 110.686138][ T5533] ? bch2_current_has_btree_trans+0x169/0x1a0
[ 110.688884][ T5533] read_btree_roots+0x2c6/0x840
[ 110.691209][ T5533] ? __pfx_read_btree_roots+0x10/0x10
[ 110.693589][ T5533] bch2_fs_recovery+0x261f/0x3a50
[ 110.695929][ T5533] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 110.698693][ T5533] ? __lock_acquire+0xab9/0xd20
[ 110.701114][ T5533] ? __mutex_trylock_common+0x153/0x260
[ 110.703605][ T5533] ? __pfx___mutex_trylock_common+0x10/0x10
[ 110.706241][ T5533] ? rcu_is_watching+0x15/0xb0
[ 110.708347][ T5533] ? __lock_acquire+0xab9/0xd20
[ 110.710459][ T5533] ? bch2_fs_start+0xa0f/0xda0
[ 110.712559][ T5533] ? up_write+0x1c4/0x420
[ 110.714596][ T5533] ? bch2_fs_start+0x5e7/0xda0
[ 110.716807][ T5533] bch2_fs_start+0xaaf/0xda0
[ 110.718903][ T5533] ? bch2_fs_start+0x5e7/0xda0
[ 110.721307][ T5533] ? __pfx_bch2_fs_start+0x10/0x10
[ 110.723882][ T5533] ? sget+0x267/0x620
[ 110.725708][ T5533] bch2_fs_get_tree+0xb39/0x1520
[ 110.727909][ T5533] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 110.730180][ T5533] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 110.732557][ T5533] vfs_get_tree+0x8f/0x2b0
[ 110.734559][ T5533] do_new_mount+0x2a2/0x9e0
[ 110.736634][ T5533] ? ns_capable+0x8a/0xf0
[ 110.738751][ T5533] ? __pfx_do_new_mount+0x10/0x10
[ 110.741075][ T5533] ? path_mount+0x61c/0xfe0
[ 110.743261][ T5533] ? user_path_at+0x44/0x60
[ 110.745318][ T5533] __se_sys_mount+0x317/0x410
[ 110.747264][ T5533] ? __pfx___se_sys_mount+0x10/0x10
[ 110.749435][ T5533] ? do_syscall_64+0xbe/0x3b0
[ 110.751275][ T5533] ? __x64_sys_mount+0x20/0xc0
[ 110.753273][ T5533] do_syscall_64+0xfa/0x3b0
[ 110.755204][ T5533] ? lockdep_hardirqs_on+0x9c/0x150
[ 110.757441][ T5533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.760492][ T5533] ? clear_bhb_loop+0x60/0xb0
[ 110.762795][ T5533] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.765621][ T5533] RIP: 0033:0x7fd00ed9038a
[ 110.767488][ T5533] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.775248][ T5533] RSP: 002b:00007fff65054f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 110.778837][ T5533] RAX: ffffffffffffffda RBX: 00007fff65054fa0 RCX: 00007fd00ed9038a
[ 110.782218][ T5533] RDX: 0000200000000040 RSI: 0000200000004940 RDI: 00007fff65054f60
[ 110.786171][ T5533] RBP: 0000200000000040 R08: 00007fff65054fa0 R09: 0000000000004000
[ 110.789418][ T5533] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000004940
[ 110.792823][ T5533] R13: 00007fff65054f60 R14: 000000000000496e R15: 0000200000000000
[ 110.796151][ T5533]
[ 110.797855][ T5533] Kernel Offset: disabled
[ 110.799729][ T5533] Rebooting in 86400 seconds..
VM DIAGNOSIS:
11:23:01 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002345af0
R8 =ffff888033b10237 R9 =1ffff11006762046 R10=dffffc0000000000 R11=ffffffff8550d600
R12=dffffc0000000000 R13=ffffffff99b088dd R14=ffffffff99dfd820 R15=0000000000000000
RIP=ffffffff8550d67c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555932e7500 ffffffff 00c00000
GS =0000 ffff88808d20d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f07a9036e9c CR3=000000004fac7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff650553c0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff65055546
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff65055546 00007fff6505554c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00ee12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00ee12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00ee12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00ee12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00ee12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd00ee12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000