Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. 2024/06/08 05:46:03 ignoring optional flag "sandboxArg"="0" 2024/06/08 05:46:03 parsed 1 programs 2024/06/08 05:46:05 executed programs: 0 [ 97.546026][ T5392] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.616561][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.624822][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.632755][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.641723][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.649554][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.659188][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.834551][ T5400] chnl_net:caif_netlink_parms(): no params data found [ 97.912694][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.919876][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.927116][ T5400] bridge_slave_0: entered allmulticast mode [ 97.934447][ T5400] bridge_slave_0: entered promiscuous mode [ 97.944034][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.951243][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.958366][ T5400] bridge_slave_1: entered allmulticast mode [ 97.965961][ T5400] bridge_slave_1: entered promiscuous mode [ 98.001560][ T5400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.014041][ T5400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.052344][ T5400] team0: Port device team_slave_0 added [ 98.061565][ T5400] team0: Port device team_slave_1 added [ 98.092277][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.099234][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.125219][ T5400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.137670][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.144711][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.170830][ T5400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.220397][ T5400] hsr_slave_0: entered promiscuous mode [ 98.228442][ T5400] hsr_slave_1: entered promiscuous mode [ 99.000120][ T5400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.013517][ T5400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.025843][ T5400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.043799][ T5400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.169064][ T5400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.198159][ T5400] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.216864][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.224133][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.244941][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.252249][ T5109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.524652][ T5400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.596321][ T5400] veth0_vlan: entered promiscuous mode [ 99.616950][ T5400] veth1_vlan: entered promiscuous mode [ 99.669249][ T5400] veth0_macvtap: entered promiscuous mode [ 99.681697][ T5100] Bluetooth: hci0: command tx timeout [ 99.690377][ T5400] veth1_macvtap: entered promiscuous mode [ 99.722603][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.743441][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.764070][ T5400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.775059][ T5400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.784872][ T5400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794955][ T5400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.897733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.913477][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.959206][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.969332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.408418][ T5464] loop0: detected capacity change from 0 to 32768 [ 100.547294][ T5464] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 100.567162][ T5464] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 100.595738][ T5464] ================================================================== [ 100.603846][ T5464] BUG: KASAN: use-after-free in scatterwalk_copychunks+0x1cc/0x460 [ 100.611785][ T5464] Read of size 40 at addr ffff88806c020000 by task syz-executor.0/5464 [ 100.620039][ T5464] [ 100.622375][ T5464] CPU: 1 PID: 5464 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 100.632805][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 100.642874][ T5464] Call Trace: [ 100.646164][ T5464] [ 100.649102][ T5464] dump_stack_lvl+0x241/0x360 [ 100.653823][ T5464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.659047][ T5464] ? __pfx__printk+0x10/0x10 [ 100.663667][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.669350][ T5464] ? _printk+0xd5/0x120 [ 100.673534][ T5464] ? __virt_addr_valid+0x183/0x520 [ 100.678940][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.684607][ T5464] print_report+0x169/0x550 [ 100.689147][ T5464] ? __virt_addr_valid+0x183/0x520 [ 100.694299][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.699975][ T5464] ? __virt_addr_valid+0x44e/0x520 [ 100.705121][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.710786][ T5464] ? __phys_addr+0xba/0x170 [ 100.715327][ T5464] ? scatterwalk_copychunks+0x1cc/0x460 [ 100.720899][ T5464] kasan_report+0x143/0x180 [ 100.725439][ T5464] ? scatterwalk_copychunks+0x1cc/0x460 [ 100.731019][ T5464] kasan_check_range+0x282/0x290 [ 100.735990][ T5464] ? scatterwalk_copychunks+0x1cc/0x460 [ 100.741563][ T5464] __asan_memcpy+0x29/0x70 [ 100.746005][ T5464] scatterwalk_copychunks+0x1cc/0x460 [ 100.751414][ T5464] skcipher_next_slow+0x39d/0x480 [ 100.756471][ T5464] skcipher_walk_next+0x634/0xba0 [ 100.761541][ T5464] chacha_simd_stream_xor+0x67f/0xd10 [ 100.766948][ T5464] ? __pfx_chacha_simd_stream_xor+0x10/0x10 [ 100.772897][ T5464] do_encrypt+0x4ef/0x7d0 [ 100.777262][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.782948][ T5464] ? __pfx_do_encrypt+0x10/0x10 [ 100.787828][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.793498][ T5464] ? stack_depot_save_flags+0x6e4/0x830 [ 100.799076][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.804740][ T5464] ? kasan_save_track+0x51/0x80 [ 100.809613][ T5464] ? kasan_save_track+0x3f/0x80 [ 100.814488][ T5464] ? kasan_save_free_info+0x40/0x50 [ 100.819703][ T5464] ? poison_slab_object+0xe0/0x150 [ 100.824844][ T5464] ? __kasan_slab_free+0x37/0x60 [ 100.829811][ T5464] ? kfree+0x149/0x360 [ 100.833913][ T5464] ? bch2_printbuf_exit+0x6d/0xa0 [ 100.838959][ T5464] ? __btree_err+0x3cb/0x740 [ 100.843571][ T5464] ? bch2_btree_node_read_done+0x168a/0x6750 [ 100.849577][ T5464] ? btree_node_read_work+0x68b/0x1260 [ 100.855061][ T5464] ? bch2_btree_node_read+0x2433/0x2a10 [ 100.860632][ T5464] ? bch2_btree_root_read+0x61e/0x970 [ 100.866029][ T5464] ? read_btree_roots+0x22d/0x7b0 [ 100.871084][ T5464] ? bch2_fs_recovery+0x2346/0x3720 [ 100.876322][ T5464] ? bch2_fs_start+0x356/0x5b0 [ 100.881113][ T5464] ? bch2_fs_open+0xa8d/0xdf0 [ 100.885817][ T5464] ? bch2_mount+0x6c0/0x1320 [ 100.890438][ T5464] ? legacy_get_tree+0xf0/0x190 [ 100.895319][ T5464] ? vfs_get_tree+0x92/0x2a0 [ 100.899943][ T5464] ? do_new_mount+0x2be/0xb40 [ 100.904645][ T5464] ? __se_sys_mount+0x2d9/0x3c0 [ 100.909524][ T5464] ? do_syscall_64+0xf3/0x230 [ 100.914226][ T5464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.920338][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.925999][ T5464] ? mark_lock+0x9a/0x350 [ 100.930357][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.936018][ T5464] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.942064][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.947729][ T5464] ? bch2_encrypt+0x3d/0xa0 [ 100.952267][ T5464] bch2_btree_node_read_done+0x185b/0x6750 [ 100.958145][ T5464] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 100.964337][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.970003][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 100.975670][ T5464] ? bch2_bkey_pick_read_device+0x1503/0x1800 [ 100.981775][ T5464] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 100.988044][ T5464] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 100.993887][ T5464] ? __pfx_bch2_btree_ptr_v2_to_text+0x10/0x10 [ 101.000071][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.005746][ T5464] btree_node_read_work+0x68b/0x1260 [ 101.011077][ T5464] ? __pfx_btree_node_read_work+0x10/0x10 [ 101.016824][ T5464] ? print_irqtrace_events+0x1c0/0x220 [ 101.022318][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.027982][ T5464] ? lockdep_hardirqs_on+0x99/0x150 [ 101.033205][ T5464] ? __entry_text_end+0x1020c6/0x1020c9 [ 101.038785][ T5464] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 101.044714][ T5464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.051078][ T5464] ? mean_and_variance_weighted_get_mean+0x73/0xc0 [ 101.057620][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.063284][ T5464] ? __bch2_time_stats_update+0x2c6/0x370 [ 101.069033][ T5464] bch2_btree_node_read+0x2433/0x2a10 [ 101.074435][ T5464] ? __pfx_lock_release+0x10/0x10 [ 101.079498][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.085164][ T5464] ? __mutex_unlock_slowpath+0x21d/0x750 [ 101.090831][ T5464] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 101.096756][ T5464] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 101.102513][ T5464] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 101.109051][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.114717][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.120379][ T5464] ? bch2_btree_node_hash_insert+0x18b/0x1d0 [ 101.126399][ T5464] bch2_btree_root_read+0x61e/0x970 [ 101.131634][ T5464] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 101.137399][ T5464] read_btree_roots+0x22d/0x7b0 [ 101.142289][ T5464] bch2_fs_recovery+0x2346/0x3720 [ 101.147359][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.153029][ T5464] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 101.158447][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.164133][ T5464] ? __pfx_lock_release+0x10/0x10 [ 101.169184][ T5464] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 101.174847][ T5464] ? __pfx_lock_release+0x10/0x10 [ 101.179903][ T5464] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 101.185567][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.191240][ T5464] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 101.196993][ T5464] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 101.202657][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.208324][ T5464] ? llist_reverse_order+0x72/0x90 [ 101.213460][ T5464] bch2_fs_start+0x356/0x5b0 [ 101.218082][ T5464] bch2_fs_open+0xa8d/0xdf0 [ 101.222629][ T5464] ? __pfx_bch2_fs_open+0x10/0x10 [ 101.227696][ T5464] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.234054][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.239725][ T5464] ? __pfx_bch2_test_super+0x10/0x10 [ 101.245041][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.250700][ T5464] ? sget+0x2b8/0x620 [ 101.254705][ T5464] ? __pfx_bch2_noset_super+0x10/0x10 [ 101.260108][ T5464] bch2_mount+0x6c0/0x1320 [ 101.264576][ T5464] ? __pfx_bch2_mount+0x10/0x10 [ 101.269469][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.275131][ T5464] ? aa_get_newest_label+0xff/0x6f0 [ 101.280349][ T5464] ? vfs_parse_fs_string+0x190/0x230 [ 101.285662][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.291335][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.296998][ T5464] ? kfree+0x4e/0x360 [ 101.301008][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.306672][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.312340][ T5464] ? vfs_parse_fs_string+0x190/0x230 [ 101.317657][ T5464] legacy_get_tree+0xf0/0x190 [ 101.322360][ T5464] ? __pfx_bch2_mount+0x10/0x10 [ 101.327242][ T5464] vfs_get_tree+0x92/0x2a0 [ 101.331699][ T5464] do_new_mount+0x2be/0xb40 [ 101.336227][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.341896][ T5464] ? __pfx_do_new_mount+0x10/0x10 [ 101.347040][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.352729][ T5464] __se_sys_mount+0x2d9/0x3c0 [ 101.357459][ T5464] ? __pfx___se_sys_mount+0x10/0x10 [ 101.362697][ T5464] ? do_syscall_64+0x100/0x230 [ 101.367489][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.373148][ T5464] ? __x64_sys_mount+0x20/0xc0 [ 101.377953][ T5464] do_syscall_64+0xf3/0x230 [ 101.382485][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.388408][ T5464] RIP: 0033:0x7f1d3247f3aa [ 101.392837][ T5464] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 101.412465][ T5464] RSP: 002b:00007f1d33234ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.420904][ T5464] RAX: ffffffffffffffda RBX: 00007f1d33234f80 RCX: 00007f1d3247f3aa [ 101.428892][ T5464] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007f1d33234f40 [ 101.436879][ T5464] RBP: 0000000020011a00 R08: 00007f1d33234f80 R09: 0000000001200014 [ 101.444864][ T5464] R10: 0000000001200014 R11: 0000000000000246 R12: 0000000020011a40 [ 101.452850][ T5464] R13: 00007f1d33234f40 R14: 00000000000119f9 R15: 0000000020000100 [ 101.460843][ T5464] [ 101.463868][ T5464] [ 101.466193][ T5464] The buggy address belongs to the physical page: [ 101.472608][ T5464] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c020 [ 101.481379][ T5464] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 101.489886][ T5464] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 101.497440][ T5464] page_type: 0xffffefff(slab) [ 101.502130][ T5464] raw: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 101.510731][ T5464] raw: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 101.519330][ T5464] head: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 101.528012][ T5464] head: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 101.536699][ T5464] head: 00fff00000000003 ffffea0001b00801 ffffffffffffffff 0000000000000000 [ 101.545391][ T5464] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 101.554065][ T5464] page dumped because: kasan: bad access detected [ 101.560482][ T5464] page_owner tracks the page as allocated [ 101.566202][ T5464] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5488, tgid 5488 (dhcpcd-run-hook), ts 100703636492, free_ts 100593921077 [ 101.588631][ T5464] post_alloc_hook+0x1f3/0x230 [ 101.593426][ T5464] get_page_from_freelist+0x2e43/0x2f00 [ 101.599005][ T5464] __alloc_pages_noprof+0x256/0x6c0 [ 101.604234][ T5464] alloc_slab_page+0x5f/0x120 [ 101.608932][ T5464] allocate_slab+0x5a/0x2f0 [ 101.613454][ T5464] ___slab_alloc+0xcd1/0x14b0 [ 101.618148][ T5464] __slab_alloc+0x58/0xa0 [ 101.622496][ T5464] __kmalloc_noprof+0x257/0x400 [ 101.627361][ T5464] tomoyo_realpath_from_path+0xcf/0x5e0 [ 101.632930][ T5464] tomoyo_path_perm+0x2b7/0x740 [ 101.637799][ T5464] security_inode_getattr+0xda/0x130 [ 101.643113][ T5464] vfs_getattr+0x45/0x430 [ 101.647560][ T5464] vfs_fstatat+0xd6/0x190 [ 101.651923][ T5464] __x64_sys_newfstatat+0x125/0x1b0 [ 101.657143][ T5464] do_syscall_64+0xf3/0x230 [ 101.661677][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.667607][ T5464] page last free pid 5464 tgid 5463 stack trace: [ 101.673948][ T5464] __free_pages_ok+0xb4e/0xcc0 [ 101.678754][ T5464] __folio_put+0x3b9/0x620 [ 101.683194][ T5464] free_large_kmalloc+0x105/0x1c0 [ 101.688236][ T5464] kfree+0x1c4/0x360 [ 101.692160][ T5464] bch2_btree_node_read_done+0x3e8b/0x6750 [ 101.697993][ T5464] btree_node_read_work+0x68b/0x1260 [ 101.703306][ T5464] bch2_btree_node_read+0x2433/0x2a10 [ 101.708701][ T5464] bch2_btree_root_read+0x61e/0x970 [ 101.713920][ T5464] read_btree_roots+0x22d/0x7b0 [ 101.718797][ T5464] bch2_fs_recovery+0x2346/0x3720 [ 101.723851][ T5464] bch2_fs_start+0x356/0x5b0 [ 101.728472][ T5464] bch2_fs_open+0xa8d/0xdf0 [ 101.733004][ T5464] bch2_mount+0x6c0/0x1320 [ 101.737450][ T5464] legacy_get_tree+0xf0/0x190 [ 101.742154][ T5464] vfs_get_tree+0x92/0x2a0 [ 101.746599][ T5464] do_new_mount+0x2be/0xb40 [ 101.751130][ T5464] [ 101.753457][ T5464] Memory state around the buggy address: [ 101.759094][ T5464] ffff88806c01ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.763683][ T5100] Bluetooth: hci0: command tx timeout [ 101.767147][ T5464] ffff88806c01ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.780590][ T5464] >ffff88806c020000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.788656][ T5464] ^ [ 101.792731][ T5464] ffff88806c020080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.800801][ T5464] ffff88806c020100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.808868][ T5464] ================================================================== [ 101.855225][ T5464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.862479][ T5464] CPU: 1 PID: 5464 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00315-gdc772f8237f9 #0 [ 101.872915][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 101.882985][ T5464] Call Trace: [ 101.886276][ T5464] [ 101.889225][ T5464] dump_stack_lvl+0x241/0x360 [ 101.893931][ T5464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.899159][ T5464] ? __pfx__printk+0x10/0x10 [ 101.903771][ T5464] ? preempt_schedule+0xe1/0xf0 [ 101.908656][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.914319][ T5464] ? vscnprintf+0x5d/0x90 [ 101.918680][ T5464] panic+0x349/0x860 [ 101.922609][ T5464] ? check_panic_on_warn+0x21/0xb0 [ 101.927750][ T5464] ? __pfx_panic+0x10/0x10 [ 101.932186][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.937851][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.943511][ T5464] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 101.949526][ T5464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.955894][ T5464] ? print_report+0x502/0x550 [ 101.960609][ T5464] check_panic_on_warn+0x86/0xb0 [ 101.965577][ T5464] ? scatterwalk_copychunks+0x1cc/0x460 [ 101.971130][ T5464] end_report+0x77/0x160 [ 101.975382][ T5464] kasan_report+0x154/0x180 [ 101.979893][ T5464] ? scatterwalk_copychunks+0x1cc/0x460 [ 101.985447][ T5464] kasan_check_range+0x282/0x290 [ 101.990396][ T5464] ? scatterwalk_copychunks+0x1cc/0x460 [ 101.995946][ T5464] __asan_memcpy+0x29/0x70 [ 102.000367][ T5464] scatterwalk_copychunks+0x1cc/0x460 [ 102.005751][ T5464] skcipher_next_slow+0x39d/0x480 [ 102.010782][ T5464] skcipher_walk_next+0x634/0xba0 [ 102.015826][ T5464] chacha_simd_stream_xor+0x67f/0xd10 [ 102.021212][ T5464] ? __pfx_chacha_simd_stream_xor+0x10/0x10 [ 102.027131][ T5464] do_encrypt+0x4ef/0x7d0 [ 102.031474][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.037121][ T5464] ? __pfx_do_encrypt+0x10/0x10 [ 102.041980][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.047622][ T5464] ? stack_depot_save_flags+0x6e4/0x830 [ 102.053178][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.058825][ T5464] ? kasan_save_track+0x51/0x80 [ 102.063692][ T5464] ? kasan_save_track+0x3f/0x80 [ 102.068547][ T5464] ? kasan_save_free_info+0x40/0x50 [ 102.073750][ T5464] ? poison_slab_object+0xe0/0x150 [ 102.078865][ T5464] ? __kasan_slab_free+0x37/0x60 [ 102.083807][ T5464] ? kfree+0x149/0x360 [ 102.087885][ T5464] ? bch2_printbuf_exit+0x6d/0xa0 [ 102.092919][ T5464] ? __btree_err+0x3cb/0x740 [ 102.097523][ T5464] ? bch2_btree_node_read_done+0x168a/0x6750 [ 102.103516][ T5464] ? btree_node_read_work+0x68b/0x1260 [ 102.108984][ T5464] ? bch2_btree_node_read+0x2433/0x2a10 [ 102.114537][ T5464] ? bch2_btree_root_read+0x61e/0x970 [ 102.119912][ T5464] ? read_btree_roots+0x22d/0x7b0 [ 102.124943][ T5464] ? bch2_fs_recovery+0x2346/0x3720 [ 102.130147][ T5464] ? bch2_fs_start+0x356/0x5b0 [ 102.134912][ T5464] ? bch2_fs_open+0xa8d/0xdf0 [ 102.139597][ T5464] ? bch2_mount+0x6c0/0x1320 [ 102.144194][ T5464] ? legacy_get_tree+0xf0/0x190 [ 102.149049][ T5464] ? vfs_get_tree+0x92/0x2a0 [ 102.153646][ T5464] ? do_new_mount+0x2be/0xb40 [ 102.158328][ T5464] ? __se_sys_mount+0x2d9/0x3c0 [ 102.163188][ T5464] ? do_syscall_64+0xf3/0x230 [ 102.167868][ T5464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.173948][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.179591][ T5464] ? mark_lock+0x9a/0x350 [ 102.183928][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.189571][ T5464] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.195596][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.201234][ T5464] ? bch2_encrypt+0x3d/0xa0 [ 102.205747][ T5464] bch2_btree_node_read_done+0x185b/0x6750 [ 102.211609][ T5464] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 102.217770][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.223413][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.229051][ T5464] ? bch2_bkey_pick_read_device+0x1503/0x1800 [ 102.235128][ T5464] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 102.241370][ T5464] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 102.247181][ T5464] ? __pfx_bch2_btree_ptr_v2_to_text+0x10/0x10 [ 102.253341][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.258988][ T5464] btree_node_read_work+0x68b/0x1260 [ 102.264297][ T5464] ? __pfx_btree_node_read_work+0x10/0x10 [ 102.270023][ T5464] ? print_irqtrace_events+0x1c0/0x220 [ 102.275491][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.281134][ T5464] ? lockdep_hardirqs_on+0x99/0x150 [ 102.286334][ T5464] ? __entry_text_end+0x1020c6/0x1020c9 [ 102.291886][ T5464] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 102.297790][ T5464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.304127][ T5464] ? mean_and_variance_weighted_get_mean+0x73/0xc0 [ 102.310646][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.316324][ T5464] ? __bch2_time_stats_update+0x2c6/0x370 [ 102.322068][ T5464] bch2_btree_node_read+0x2433/0x2a10 [ 102.327456][ T5464] ? __pfx_lock_release+0x10/0x10 [ 102.332500][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.338145][ T5464] ? __mutex_unlock_slowpath+0x21d/0x750 [ 102.343792][ T5464] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 102.349698][ T5464] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 102.355433][ T5464] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 102.361955][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.367605][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.373251][ T5464] ? bch2_btree_node_hash_insert+0x18b/0x1d0 [ 102.379264][ T5464] bch2_btree_root_read+0x61e/0x970 [ 102.384496][ T5464] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 102.390235][ T5464] read_btree_roots+0x22d/0x7b0 [ 102.395104][ T5464] bch2_fs_recovery+0x2346/0x3720 [ 102.400146][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.405799][ T5464] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 102.411197][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.416840][ T5464] ? __pfx_lock_release+0x10/0x10 [ 102.421867][ T5464] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 102.427506][ T5464] ? __pfx_lock_release+0x10/0x10 [ 102.432541][ T5464] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 102.438180][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.443822][ T5464] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 102.449548][ T5464] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 102.455189][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.460831][ T5464] ? llist_reverse_order+0x72/0x90 [ 102.465948][ T5464] bch2_fs_start+0x356/0x5b0 [ 102.470558][ T5464] bch2_fs_open+0xa8d/0xdf0 [ 102.475088][ T5464] ? __pfx_bch2_fs_open+0x10/0x10 [ 102.480131][ T5464] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.486471][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.492119][ T5464] ? __pfx_bch2_test_super+0x10/0x10 [ 102.497413][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.503052][ T5464] ? sget+0x2b8/0x620 [ 102.507036][ T5464] ? __pfx_bch2_noset_super+0x10/0x10 [ 102.512421][ T5464] bch2_mount+0x6c0/0x1320 [ 102.516865][ T5464] ? __pfx_bch2_mount+0x10/0x10 [ 102.521735][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.527376][ T5464] ? aa_get_newest_label+0xff/0x6f0 [ 102.532576][ T5464] ? vfs_parse_fs_string+0x190/0x230 [ 102.537863][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.543507][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.549150][ T5464] ? kfree+0x4e/0x360 [ 102.553142][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.558787][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.564427][ T5464] ? vfs_parse_fs_string+0x190/0x230 [ 102.569736][ T5464] legacy_get_tree+0xf0/0x190 [ 102.574425][ T5464] ? __pfx_bch2_mount+0x10/0x10 [ 102.579290][ T5464] vfs_get_tree+0x92/0x2a0 [ 102.583722][ T5464] do_new_mount+0x2be/0xb40 [ 102.588231][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.593877][ T5464] ? __pfx_do_new_mount+0x10/0x10 [ 102.598909][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.604558][ T5464] __se_sys_mount+0x2d9/0x3c0 [ 102.609247][ T5464] ? __pfx___se_sys_mount+0x10/0x10 [ 102.614453][ T5464] ? do_syscall_64+0x100/0x230 [ 102.619221][ T5464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.624861][ T5464] ? __x64_sys_mount+0x20/0xc0 [ 102.629632][ T5464] do_syscall_64+0xf3/0x230 [ 102.634151][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.640051][ T5464] RIP: 0033:0x7f1d3247f3aa [ 102.644465][ T5464] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 102.664077][ T5464] RSP: 002b:00007f1d33234ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.672504][ T5464] RAX: ffffffffffffffda RBX: 00007f1d33234f80 RCX: 00007f1d3247f3aa [ 102.680479][ T5464] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007f1d33234f40 [ 102.688453][ T5464] RBP: 0000000020011a00 R08: 00007f1d33234f80 R09: 0000000001200014 [ 102.696425][ T5464] R10: 0000000001200014 R11: 0000000000000246 R12: 0000000020011a40 [ 102.704398][ T5464] R13: 00007f1d33234f40 R14: 00000000000119f9 R15: 0000000020000100 [ 102.712381][ T5464] [ 102.715622][ T5464] Kernel Offset: disabled [ 102.719938][ T5464] Rebooting in 86400 seconds..