syzkaller login: [ 96.995174][ T53] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:30459' (ED25519) to the list of known hosts. 2026/02/20 08:07:34 parsed 1 programs [ 109.314198][ T5319] cgroup: Unknown subsys name 'net' [ 109.360986][ T5319] cgroup: Unknown subsys name 'cpuset' [ 109.366668][ T5319] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 111.268140][ T5319] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.336915][ T79] ODEBUG: Out of memory. ODEBUG disabled [ 117.286487][ T5329] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 130.683567][ T5330] chnl_net:caif_netlink_parms(): no params data found [ 131.219555][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.227416][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.230779][ T5330] bridge_slave_0: entered allmulticast mode [ 131.250707][ T5330] bridge_slave_0: entered promiscuous mode [ 131.308369][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.311610][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.314815][ T5330] bridge_slave_1: entered allmulticast mode [ 131.366681][ T5330] bridge_slave_1: entered promiscuous mode [ 131.541319][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.585908][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.799015][ T5330] team0: Port device team_slave_0 added [ 131.832298][ T5330] team0: Port device team_slave_1 added [ 132.566932][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.605465][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.707408][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.726222][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.761933][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.787394][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.118718][ T5330] hsr_slave_0: entered promiscuous mode [ 133.122936][ T5330] hsr_slave_1: entered promiscuous mode [ 133.647737][ T5402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.652073][ T5402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.655226][ T5402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.660349][ T5402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.663801][ T5402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.612719][ T5330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.638076][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.642089][ T5330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.655229][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.659737][ T5330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.679375][ T5330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.721276][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.726421][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.881877][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.912564][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.932500][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.936750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.952341][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.955354][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.280659][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.336624][ T5330] veth0_vlan: entered promiscuous mode [ 135.358787][ T5330] veth1_vlan: entered promiscuous mode [ 135.404478][ T5330] veth0_macvtap: entered promiscuous mode [ 135.421267][ T5330] veth1_macvtap: entered promiscuous mode [ 135.444231][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.460848][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.483087][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.487102][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.502654][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.506251][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.708561][ T5402] Bluetooth: hci0: command tx timeout [ 137.787539][ T5402] Bluetooth: hci0: command tx timeout 2026/02/20 08:08:06 executed programs: 0 [ 139.254164][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.259655][ T45] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.263920][ T45] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.272387][ T45] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.276045][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.281375][ T45] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.284643][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.288112][ T45] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.301600][ T5447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.318582][ T5450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.357635][ T5330] syz-executor (5330) used greatest stack depth: 16824 bytes left [ 139.388726][ T5402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.396194][ T5402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.401661][ T5447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.405522][ T5447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.410268][ T5447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.414621][ T45] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.436080][ T5447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.447368][ T5447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.458813][ T5450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.464804][ T5450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.469839][ T45] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.481028][ T5450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.484351][ T5450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.489175][ T5450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.493587][ T5450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.557750][ T5402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.568476][ T5402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.573007][ T5402] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.578690][ T5402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.582067][ T5402] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.753392][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.948425][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.119392][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.142782][ T5440] chnl_net:caif_netlink_parms(): no params data found [ 141.204398][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.310884][ T5402] Bluetooth: hci1: command tx timeout [ 141.387962][ T5402] Bluetooth: hci2: command tx timeout [ 141.467592][ T5402] Bluetooth: hci3: command tx timeout [ 141.547760][ T5402] Bluetooth: hci5: command tx timeout [ 141.552000][ T5447] Bluetooth: hci4: command tx timeout [ 141.627819][ T5402] Bluetooth: hci6: command tx timeout [ 141.673370][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.676854][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.681322][ T5440] bridge_slave_0: entered allmulticast mode [ 141.687939][ T5440] bridge_slave_0: entered promiscuous mode [ 141.705188][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.718544][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.721808][ T5440] bridge_slave_1: entered allmulticast mode [ 141.727811][ T5440] bridge_slave_1: entered promiscuous mode [ 141.870087][ T1092] bridge_slave_1: left allmulticast mode [ 141.872970][ T1092] bridge_slave_1: left promiscuous mode [ 141.879714][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.886126][ T1092] bridge_slave_0: left allmulticast mode [ 141.890392][ T1092] bridge_slave_0: left promiscuous mode [ 141.893200][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.102981][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.111225][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.115971][ T1092] bond0 (unregistering): Released all slaves [ 142.345694][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.388062][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.602196][ T5441] chnl_net:caif_netlink_parms(): no params data found [ 142.655962][ T5456] chnl_net:caif_netlink_parms(): no params data found [ 142.675738][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 142.706038][ T1092] hsr_slave_0: left promiscuous mode [ 142.713578][ T1092] hsr_slave_1: left promiscuous mode [ 142.726776][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.747657][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.751665][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.754923][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.772992][ T1092] veth1_macvtap: left promiscuous mode [ 142.775821][ T1092] veth0_macvtap: left promiscuous mode [ 142.798795][ T1092] veth1_vlan: left promiscuous mode [ 142.801410][ T1092] veth0_vlan: left promiscuous mode [ 143.039514][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 143.055507][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 143.070499][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.073644][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.163963][ T5440] team0: Port device team_slave_0 added [ 143.182919][ T5448] chnl_net:caif_netlink_parms(): no params data found [ 143.215954][ T5440] team0: Port device team_slave_1 added [ 143.390428][ T5402] Bluetooth: hci1: command tx timeout [ 143.434696][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.452674][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.468826][ T5402] Bluetooth: hci2: command tx timeout [ 143.477406][ T5440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.488947][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.497609][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.525286][ T5440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.547510][ T5402] Bluetooth: hci3: command tx timeout [ 143.627902][ T5402] Bluetooth: hci5: command tx timeout [ 143.630242][ T5402] Bluetooth: hci4: command tx timeout [ 143.652861][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 143.708217][ T5447] Bluetooth: hci6: command tx timeout [ 143.731644][ T5440] hsr_slave_0: entered promiscuous mode [ 143.734854][ T5440] hsr_slave_1: entered promiscuous mode [ 143.832250][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.835413][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.839299][ T5456] bridge_slave_0: entered allmulticast mode [ 143.843289][ T5456] bridge_slave_0: entered promiscuous mode [ 143.869304][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.872378][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.875464][ T5449] bridge_slave_0: entered allmulticast mode [ 143.891831][ T5449] bridge_slave_0: entered promiscuous mode [ 143.895976][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.900377][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.903271][ T5441] bridge_slave_0: entered allmulticast mode [ 143.908129][ T5441] bridge_slave_0: entered promiscuous mode [ 143.919447][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.922325][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.925196][ T5448] bridge_slave_0: entered allmulticast mode [ 143.930461][ T5448] bridge_slave_0: entered promiscuous mode [ 143.935018][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.938479][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.941538][ T5448] bridge_slave_1: entered allmulticast mode [ 143.946027][ T5448] bridge_slave_1: entered promiscuous mode [ 143.959176][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.962216][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.965214][ T5456] bridge_slave_1: entered allmulticast mode [ 143.970011][ T5456] bridge_slave_1: entered promiscuous mode [ 143.988113][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.991325][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.994488][ T5449] bridge_slave_1: entered allmulticast mode [ 144.003467][ T5449] bridge_slave_1: entered promiscuous mode [ 144.006763][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.013789][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.016984][ T5441] bridge_slave_1: entered allmulticast mode [ 144.021169][ T5441] bridge_slave_1: entered promiscuous mode [ 144.163652][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.179337][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.185044][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.224561][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.282273][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.321713][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.348262][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.361027][ T5456] team0: Port device team_slave_0 added [ 144.386969][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.459116][ T5456] team0: Port device team_slave_1 added [ 144.475105][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.478985][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.481790][ T5458] bridge_slave_0: entered allmulticast mode [ 144.485656][ T5458] bridge_slave_0: entered promiscuous mode [ 144.534258][ T5448] team0: Port device team_slave_0 added [ 144.537691][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.541032][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.544170][ T5458] bridge_slave_1: entered allmulticast mode [ 144.557743][ T5458] bridge_slave_1: entered promiscuous mode [ 144.583242][ T5449] team0: Port device team_slave_0 added [ 144.587163][ T5441] team0: Port device team_slave_0 added [ 144.600216][ T5441] team0: Port device team_slave_1 added [ 144.622660][ T5448] team0: Port device team_slave_1 added [ 144.642409][ T5449] team0: Port device team_slave_1 added [ 144.658877][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.661950][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.676307][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.712169][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.726890][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.733862][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.747667][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.786849][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.792684][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.795853][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.808922][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.820616][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.823636][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.835513][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.841695][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.844802][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.856923][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.863558][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.866736][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.881284][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.911851][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.914762][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.938471][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.943742][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.952279][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.997583][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.093166][ T5458] team0: Port device team_slave_0 added [ 145.200323][ T5458] team0: Port device team_slave_1 added [ 145.260605][ T5449] hsr_slave_0: entered promiscuous mode [ 145.268112][ T5449] hsr_slave_1: entered promiscuous mode [ 145.278020][ T5449] debugfs: 'hsr0' already exists in 'hsr' [ 145.280631][ T5449] Cannot create hsr debugfs directory [ 145.298530][ T5456] hsr_slave_0: entered promiscuous mode [ 145.306949][ T5456] hsr_slave_1: entered promiscuous mode [ 145.312921][ T5456] debugfs: 'hsr0' already exists in 'hsr' [ 145.315392][ T5456] Cannot create hsr debugfs directory [ 145.339777][ T5448] hsr_slave_0: entered promiscuous mode [ 145.342967][ T5448] hsr_slave_1: entered promiscuous mode [ 145.345871][ T5448] debugfs: 'hsr0' already exists in 'hsr' [ 145.349104][ T5448] Cannot create hsr debugfs directory [ 145.380486][ T5441] hsr_slave_0: entered promiscuous mode [ 145.384300][ T5441] hsr_slave_1: entered promiscuous mode [ 145.388187][ T5441] debugfs: 'hsr0' already exists in 'hsr' [ 145.390995][ T5441] Cannot create hsr debugfs directory [ 145.408773][ T5440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.470045][ T5447] Bluetooth: hci1: command tx timeout [ 145.492348][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.495457][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.509044][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.513982][ T5440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.547973][ T5447] Bluetooth: hci2: command tx timeout [ 145.553750][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.557194][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.569097][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.574585][ T5440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.627534][ T5447] Bluetooth: hci3: command tx timeout [ 145.658029][ T5440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.707633][ T5447] Bluetooth: hci4: command tx timeout [ 145.709952][ T5447] Bluetooth: hci5: command tx timeout [ 145.787592][ T5402] Bluetooth: hci6: command tx timeout [ 145.891028][ T5458] hsr_slave_0: entered promiscuous mode [ 145.894566][ T5458] hsr_slave_1: entered promiscuous mode [ 145.898291][ T5458] debugfs: 'hsr0' already exists in 'hsr' [ 145.900869][ T5458] Cannot create hsr debugfs directory [ 146.201209][ T5441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.236075][ T5441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.243944][ T5441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.261237][ T5441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.298248][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.317105][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.345382][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.348786][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.374781][ T5456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.390437][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.393722][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.401836][ T5456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.435491][ T5456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.462405][ T5456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.535822][ T5449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.650049][ T5449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.690222][ T5449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.706589][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.758820][ T5449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.824540][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.014495][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.017827][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.065597][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.091980][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.095187][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.206662][ T5441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.227885][ T5441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.245518][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.340001][ T5440] veth0_vlan: entered promiscuous mode [ 147.373487][ T5440] veth1_vlan: entered promiscuous mode [ 147.439792][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.463058][ T5448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.551099][ T5402] Bluetooth: hci1: command tx timeout [ 147.613537][ T5448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.629146][ T5447] Bluetooth: hci2: command tx timeout [ 147.650965][ T5448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.674212][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.694162][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.697503][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.709997][ T5447] Bluetooth: hci3: command tx timeout [ 147.733108][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.735799][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.771014][ T5448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.788405][ T5447] Bluetooth: hci5: command tx timeout [ 147.790850][ T5447] Bluetooth: hci4: command tx timeout [ 147.835132][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.867745][ T5402] Bluetooth: hci6: command tx timeout [ 147.902610][ T5440] veth0_macvtap: entered promiscuous mode [ 147.954768][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.962693][ T5458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.979967][ T5458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.994137][ T5440] veth1_macvtap: entered promiscuous mode [ 148.029632][ T5458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.035324][ T5458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.049966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.053117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.086136][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.113583][ T5456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.144960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.148273][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.172978][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.263330][ T3079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.327821][ T3079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.339283][ T5441] veth0_vlan: entered promiscuous mode [ 148.408321][ T3079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.467010][ T3079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.481261][ T5441] veth1_vlan: entered promiscuous mode [ 148.503545][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.515746][ T5449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.701768][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.849755][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.853162][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.890203][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.893530][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.941042][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.944234][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.032924][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.042667][ T5441] veth0_macvtap: entered promiscuous mode [ 149.163581][ T5441] veth1_macvtap: entered promiscuous mode [ 149.180033][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.188449][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.250536][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.295495][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.355118][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0 2026/02/20 08:08:16 executed programs: 12 [ 149.485626][ T5655] loop0: detected capacity change from 0 to 16 [ 149.501437][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.513398][ T5655] ======================================================= [ 149.513398][ T5655] WARNING: The mand mount option has been deprecated and [ 149.513398][ T5655] and is ignored by this kernel. Remove the mand [ 149.513398][ T5655] option from the mount to silence this warning. [ 149.513398][ T5655] ======================================================= [ 149.565080][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.631522][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.652135][ T5655] erofs (device loop0): mounted with root inode @ nid 36. [ 149.738214][ T5655] erofs (device loop0): unknown algorithm 7 @ pos 8192 for nid 89, please upgrade kernel [ 149.745498][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.760708][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.764474][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.771997][ T5655] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 149.789942][ T5655] syz.0.17: attempt to access beyond end of device [ 149.789942][ T5655] loop0: rw=524288, sector=256, nr_sectors = 8 limit=16 [ 149.822061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.825152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.845735][ T5655] syz.0.17: attempt to access beyond end of device [ 149.845735][ T5655] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 149.873718][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.876934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.892683][ T1092] ================================================================== [ 149.896260][ T1092] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x33c/0xa00 [ 149.899933][ T1092] Read of size 4096 at addr ffff888058d46800 by task kworker/u4:9/1092 [ 149.904352][ T1092] [ 149.905378][ T1092] CPU: 0 UID: 0 PID: 1092 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 149.905393][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.905402][ T1092] Workqueue: loop0 loop_workfn [ 149.905425][ T1092] Call Trace: [ 149.905433][ T1092] [ 149.905439][ T1092] dump_stack_lvl+0xe8/0x150 [ 149.905456][ T1092] print_report+0xba/0x230 [ 149.905468][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 149.905480][ T1092] kasan_report+0x117/0x150 [ 149.905492][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 149.905504][ T1092] kasan_check_range+0x264/0x2c0 [ 149.905515][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 149.905525][ T1092] __asan_memcpy+0x29/0x70 [ 149.905539][ T1092] z_erofs_transform_plain+0x33c/0xa00 [ 149.905552][ T1092] ? z_erofs_decompress_queue+0x9ee/0x3740 [ 149.905563][ T1092] ? __kmalloc_cache_noprof+0x15b/0x660 [ 149.905580][ T1092] z_erofs_decompress_queue+0x1af7/0x3740 [ 149.905599][ T1092] ? __pfx_z_erofs_decompress_queue+0x10/0x10 [ 149.905611][ T1092] ? lockdep_unlock+0x5d/0xd0 [ 149.905624][ T1092] ? __lock_acquire+0x146e/0x2cf0 [ 149.905643][ T1092] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 149.905654][ T1092] ? lockdep_hardirqs_on+0x7a/0x110 [ 149.905723][ T1092] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 149.905735][ T1092] ? seqcount_lockdep_reader_access+0xea/0x100 [ 149.905747][ T1092] z_erofs_decompress_kickoff+0x2a2/0x330 [ 149.905761][ T1092] ? __pfx_z_erofs_decompress_kickoff+0x10/0x10 [ 149.905772][ T1092] ? blkg_put+0x22/0x240 [ 149.905789][ T1092] ? bio_first_folio+0x468/0x670 [ 149.905802][ T1092] z_erofs_endio+0x5c5/0x6d0 [ 149.905816][ T1092] blk_update_request+0x57e/0xe60 [ 149.905831][ T1092] blk_mq_end_request+0x3e/0x70 [ 149.905843][ T1092] lo_rw_aio+0xcde/0xf00 [ 149.905887][ T1092] ? __pfx_lo_rw_aio+0x10/0x10 [ 149.905906][ T1092] ? kthread_associate_blkcg+0x490/0x600 [ 149.905917][ T1092] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.905931][ T1092] loop_process_work+0x958/0x11a0 [ 149.905946][ T1092] ? arch_stack_walk+0x11b/0x150 [ 149.905965][ T1092] ? __pfx_loop_process_work+0x10/0x10 [ 149.905981][ T1092] ? check_path+0x21/0x40 [ 149.905996][ T1092] ? add_lock_to_list+0xc7/0x100 [ 149.906011][ T1092] ? lockdep_unlock+0x5d/0xd0 [ 149.906022][ T1092] ? __lock_acquire+0x146e/0x2cf0 [ 149.906039][ T1092] ? process_scheduled_works+0xa25/0x1830 [ 149.906053][ T1092] ? process_scheduled_works+0xa25/0x1830 [ 149.906067][ T1092] process_scheduled_works+0xb02/0x1830 [ 149.906087][ T1092] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.906102][ T1092] ? assign_work+0x3d5/0x5e0 [ 149.906116][ T1092] worker_thread+0xa50/0xfc0 [ 149.906135][ T1092] kthread+0x388/0x470 [ 149.906146][ T1092] ? __pfx_worker_thread+0x10/0x10 [ 149.906158][ T1092] ? __pfx_kthread+0x10/0x10 [ 149.906168][ T1092] ret_from_fork+0x51e/0xb90 [ 149.906184][ T1092] ? __pfx_ret_from_fork+0x10/0x10 [ 149.906197][ T1092] ? __switch_to+0xc7d/0x1450 [ 149.906209][ T1092] ? __pfx_kthread+0x10/0x10 [ 149.906219][ T1092] ret_from_fork_asm+0x1a/0x30 [ 149.906239][ T1092] [ 149.906243][ T1092] [ 150.032706][ T1092] The buggy address belongs to the physical page: [ 150.035640][ T1092] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58d46 [ 150.039441][ T1092] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 150.042456][ T1092] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 150.046109][ T1092] raw: 0000000000000000 fffffffffffffffc 00000001ffffffff 0000000000000000 [ 150.049664][ T1092] page dumped because: kasan: bad access detected [ 150.052351][ T1092] page_owner tracks the page as allocated [ 150.054797][ T1092] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xc40(GFP_NOFS), pid 5655, tgid 5655 (syz.0.17), ts 149891190113, free_ts 149890717788 [ 150.061376][ T1092] post_alloc_hook+0x231/0x280 [ 150.063451][ T1092] get_page_from_freelist+0x24dc/0x2580 [ 150.065799][ T1092] __alloc_frozen_pages_noprof+0x18d/0x380 [ 150.068267][ T1092] alloc_pages_mpol+0x232/0x4a0 [ 150.070608][ T1092] alloc_pages_noprof+0xa8/0x190 [ 150.072872][ T1092] __erofs_allocpage+0x193/0x260 [ 150.075121][ T1092] z_erofs_runqueue+0xb2f/0x20f0 [ 150.077218][ T1092] z_erofs_readahead+0x8ad/0xc10 [ 150.079195][ T1092] read_pages+0x193/0x5a0 [ 150.080812][ T1092] page_cache_ra_order+0x926/0xeb0 [ 150.082900][ T1092] filemap_get_pages+0x897/0x1f10 [ 150.085037][ T1092] filemap_read+0x447/0x1230 [ 150.087039][ T1092] erofs_file_read_iter+0x247/0x2d0 [ 150.089158][ T1092] __kernel_read+0x504/0x9b0 [ 150.091180][ T1092] integrity_kernel_read+0x89/0xd0 [ 150.093390][ T1092] ima_calc_file_hash+0x12c3/0x17f0 [ 150.095573][ T1092] page last free pid 5655 tgid 5655 stack trace: [ 150.098184][ T1092] __free_frozen_pages+0xc2b/0xdb0 [ 150.100022][ T1092] __folio_put+0x414/0x4f0 [ 150.101883][ T1092] erofs_release_pages+0x1c0/0x270 [ 150.104037][ T1092] z_erofs_decompress_kickoff+0x2aa/0x330 [ 150.106622][ T1092] z_erofs_runqueue+0x1db8/0x20f0 [ 150.108838][ T1092] z_erofs_readahead+0x8ad/0xc10 [ 150.110857][ T1092] read_pages+0x193/0x5a0 [ 150.112709][ T1092] page_cache_ra_order+0x926/0xeb0 [ 150.114768][ T1092] filemap_get_pages+0x4c0/0x1f10 [ 150.116815][ T1092] filemap_read+0x447/0x1230 [ 150.118765][ T1092] erofs_file_read_iter+0x247/0x2d0 [ 150.120761][ T1092] __kernel_read+0x504/0x9b0 [ 150.122600][ T1092] integrity_kernel_read+0x89/0xd0 [ 150.124720][ T1092] ima_calc_file_hash+0x12c3/0x17f0 [ 150.126931][ T1092] ima_collect_measurement+0x48b/0x930 [ 150.129274][ T1092] process_measurement+0x12cd/0x1c80 [ 150.131609][ T1092] [ 150.132714][ T1092] Memory state around the buggy address: [ 150.135131][ T1092] ffff888058d46f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.138624][ T1092] ffff888058d46f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.142053][ T1092] >ffff888058d47000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.145409][ T1092] ^ [ 150.147407][ T1092] ffff888058d47080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.150827][ T1092] ffff888058d47100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.154143][ T1092] ================================================================== [ 150.176878][ T5655] syz.0.17: attempt to access beyond end of device [ 150.176878][ T5655] loop0: rw=0, sector=256, nr_sectors = 8 limit=16 [ 150.201527][ T5655] erofs (device loop0): read error -5 @ 1 of nid 89 [ 150.224110][ T24] audit: type=1800 audit(1771574897.394:2): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 150.275961][ T5458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.280953][ T5458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.350684][ T5449] veth0_vlan: entered promiscuous mode [ 150.419912][ T5449] veth1_vlan: entered promiscuous mode [ 150.470748][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.594424][ T5449] veth0_macvtap: entered promiscuous mode [ 150.640072][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.643617][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.656387][ T5449] veth1_macvtap: entered promiscuous mode [ 150.733393][ T5456] veth0_vlan: entered promiscuous mode [ 150.766047][ T5448] veth0_vlan: entered promiscuous mode [ 150.807566][ T1092] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.810509][ T1092] CPU: 0 UID: 0 PID: 1092 Comm: kworker/u4:9 Not tainted syzkaller #0 PREEMPT(full) [ 150.814681][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.819218][ T1092] Workqueue: loop0 loop_workfn [ 150.821380][ T1092] Call Trace: [ 150.822885][ T1092] [ 150.824194][ T1092] vpanic+0x56c/0xa60 [ 150.826017][ T1092] ? __pfx_vpanic+0x10/0x10 [ 150.828141][ T1092] panic+0xc5/0xd0 [ 150.829903][ T1092] ? __pfx_panic+0x10/0x10 [ 150.831926][ T1092] ? preempt_schedule_thunk+0x16/0x30 [ 150.834305][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 150.836773][ T1092] ? preempt_schedule_thunk+0x16/0x30 [ 150.839243][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 150.841525][ T1092] check_panic_on_warn+0x89/0xb0 [ 150.843715][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 150.845925][ T1092] end_report+0x73/0x180 [ 150.847448][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 150.849541][ T1092] kasan_report+0x128/0x150 [ 150.851236][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 150.853194][ T1092] kasan_check_range+0x264/0x2c0 [ 150.855067][ T1092] ? z_erofs_transform_plain+0x33c/0xa00 [ 150.857116][ T1092] __asan_memcpy+0x29/0x70 [ 150.858829][ T1092] z_erofs_transform_plain+0x33c/0xa00 [ 150.861068][ T1092] ? z_erofs_decompress_queue+0x9ee/0x3740 [ 150.863494][ T1092] ? __kmalloc_cache_noprof+0x15b/0x660 [ 150.865771][ T1092] z_erofs_decompress_queue+0x1af7/0x3740 [ 150.868080][ T1092] ? __pfx_z_erofs_decompress_queue+0x10/0x10 [ 150.870486][ T1092] ? lockdep_unlock+0x5d/0xd0 [ 150.872427][ T1092] ? __lock_acquire+0x146e/0x2cf0 [ 150.874503][ T1092] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 150.877020][ T1092] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.879188][ T1092] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 150.881655][ T1092] ? seqcount_lockdep_reader_access+0xea/0x100 [ 150.884273][ T1092] z_erofs_decompress_kickoff+0x2a2/0x330 [ 150.886755][ T1092] ? __pfx_z_erofs_decompress_kickoff+0x10/0x10 [ 150.889539][ T1092] ? blkg_put+0x22/0x240 [ 150.891504][ T1092] ? bio_first_folio+0x468/0x670 [ 150.893743][ T1092] z_erofs_endio+0x5c5/0x6d0 [ 150.895876][ T1092] blk_update_request+0x57e/0xe60 [ 150.898102][ T1092] blk_mq_end_request+0x3e/0x70 [ 150.900126][ T1092] lo_rw_aio+0xcde/0xf00 [ 150.901914][ T1092] ? __pfx_lo_rw_aio+0x10/0x10 [ 150.903882][ T1092] ? kthread_associate_blkcg+0x490/0x600 [ 150.906237][ T1092] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.908631][ T1092] loop_process_work+0x958/0x11a0 [ 150.910972][ T1092] ? arch_stack_walk+0x11b/0x150 [ 150.913177][ T1092] ? __pfx_loop_process_work+0x10/0x10 [ 150.915599][ T1092] ? check_path+0x21/0x40 [ 150.917541][ T1092] ? add_lock_to_list+0xc7/0x100 [ 150.919783][ T1092] ? lockdep_unlock+0x5d/0xd0 [ 150.921835][ T1092] ? __lock_acquire+0x146e/0x2cf0 [ 150.924092][ T1092] ? process_scheduled_works+0xa25/0x1830 [ 150.926567][ T1092] ? process_scheduled_works+0xa25/0x1830 [ 150.929050][ T1092] process_scheduled_works+0xb02/0x1830 [ 150.931533][ T1092] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.934184][ T1092] ? assign_work+0x3d5/0x5e0 [ 150.936271][ T1092] worker_thread+0xa50/0xfc0 [ 150.938303][ T1092] kthread+0x388/0x470 [ 150.940099][ T1092] ? __pfx_worker_thread+0x10/0x10 [ 150.942369][ T1092] ? __pfx_kthread+0x10/0x10 [ 150.944401][ T1092] ret_from_fork+0x51e/0xb90 [ 150.946501][ T1092] ? __pfx_ret_from_fork+0x10/0x10 [ 150.948700][ T1092] ? __switch_to+0xc7d/0x1450 [ 150.950764][ T1092] ? __pfx_kthread+0x10/0x10 [ 150.952809][ T1092] ret_from_fork_asm+0x1a/0x30 [ 150.954933][ T1092] [ 150.956685][ T1092] Kernel Offset: disabled [ 150.958579][ T1092] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:08:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90005756930 R8 =ffff888034ce0237 R9 =1ffff1100699c046 R10=dffffc0000000000 R11=ffffffff85416ba0 R12=dffffc0000000000 R13=ffffffff9a2bba66 R14=ffffffff9a5d3c60 R15=0000000000000000 RIP=ffffffff85416c1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808ca5b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb48753286 CR3=00000000565b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c67178f2bef9a3f7 a4506ceb90befffa ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0b0a090803020100 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b0a090803020100 ffffffffffffffff ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000