Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. 2025/09/20 16:23:39 parsed 1 programs [ 78.834444][ T5792] cgroup: Unknown subsys name 'net' [ 78.973907][ T5792] cgroup: Unknown subsys name 'rlimit' [ 80.651762][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.242234][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 83.307008][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.314632][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.323109][ T5823] bridge_slave_0: entered allmulticast mode [ 83.330090][ T5823] bridge_slave_0: entered promiscuous mode [ 83.338931][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.346248][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.353402][ T5823] bridge_slave_1: entered allmulticast mode [ 83.362100][ T5823] bridge_slave_1: entered promiscuous mode [ 83.391677][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.402881][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.432134][ T5823] team0: Port device team_slave_0 added [ 83.442226][ T5823] team0: Port device team_slave_1 added [ 83.471220][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.478302][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.504308][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.517517][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.524475][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.550396][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.591126][ T5823] hsr_slave_0: entered promiscuous mode [ 83.598039][ T5823] hsr_slave_1: entered promiscuous mode [ 83.747646][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.761996][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.797565][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.807997][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.834646][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.841894][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.849811][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.856962][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.922892][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.949717][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.959181][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.981503][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.994027][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.001165][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.014751][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.021917][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.229864][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.274561][ T5823] veth0_vlan: entered promiscuous mode [ 84.290429][ T5823] veth1_vlan: entered promiscuous mode [ 84.331599][ T5823] veth0_macvtap: entered promiscuous mode [ 84.341231][ T5823] veth1_macvtap: entered promiscuous mode [ 84.363938][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.381702][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.395758][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.405048][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.414683][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.423522][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.569241][ T5823] syz-executor (5823) used greatest stack depth: 19600 bytes left [ 84.603157][ T3459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.942289][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.950400][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.958635][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.967852][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.975579][ T5872] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.983877][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.876471][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.885610][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.914902][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.923146][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.092478][ T3459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.109887][ T785] cfg80211: failed to load regulatory.db 2025/09/20 16:23:50 executed programs: 0 [ 87.794667][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.803213][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.813048][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.822569][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.831202][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.838940][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.979765][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 88.039831][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.047131][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.054349][ T5903] bridge_slave_0: entered allmulticast mode [ 88.062002][ T5903] bridge_slave_0: entered promiscuous mode [ 88.070294][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.077762][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.084910][ T5903] bridge_slave_1: entered allmulticast mode [ 88.093063][ T5903] bridge_slave_1: entered promiscuous mode [ 88.120615][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.133239][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.164617][ T5903] team0: Port device team_slave_0 added [ 88.172923][ T5903] team0: Port device team_slave_1 added [ 88.200264][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.207327][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.233922][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.248033][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.254995][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.281047][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.324735][ T5903] hsr_slave_0: entered promiscuous mode [ 88.331748][ T5903] hsr_slave_1: entered promiscuous mode [ 88.338620][ T5903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.346993][ T5903] Cannot create hsr debugfs directory [ 89.597608][ T3459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.680033][ T3459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.898388][ T5105] Bluetooth: hci0: command tx timeout [ 90.605333][ T3459] hsr_slave_0: left promiscuous mode [ 90.611911][ T3459] hsr_slave_1: left promiscuous mode [ 90.618693][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.626625][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.636170][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.643599][ T3459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.653644][ T3459] bridge_slave_1: left allmulticast mode [ 90.662019][ T3459] bridge_slave_1: left promiscuous mode [ 90.669079][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.684287][ T3459] bridge_slave_0: left allmulticast mode [ 90.691507][ T3459] bridge_slave_0: left promiscuous mode [ 90.700500][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.720736][ T3459] veth1_macvtap: left promiscuous mode [ 90.727039][ T3459] veth0_macvtap: left promiscuous mode [ 90.732610][ T3459] veth1_vlan: left promiscuous mode [ 90.738133][ T3459] veth0_vlan: left promiscuous mode [ 91.108107][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 91.139850][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 91.171587][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.205148][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.505495][ T3459] bond0 (unregistering): Released all slaves [ 91.579230][ T5903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.590240][ T5903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.599677][ T5903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.612549][ T5903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.705356][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.739612][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.751603][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.758799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.782523][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.789712][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.980627][ T5105] Bluetooth: hci0: command tx timeout [ 92.029242][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.125116][ T5903] veth0_vlan: entered promiscuous mode [ 92.151723][ T5903] veth1_vlan: entered promiscuous mode [ 92.190680][ T5903] veth0_macvtap: entered promiscuous mode [ 92.212884][ T5903] veth1_macvtap: entered promiscuous mode [ 92.257716][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.282304][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.295718][ T5903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.305645][ T5903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.314598][ T5903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.323341][ T5903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399265][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.411795][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438560][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.448019][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.499252][ T5950] syz.0.17[5950]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.510985][ T5950] loop0: detected capacity change from 0 to 16 [ 92.527236][ T5950] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.548707][ T5950] syz.0.17: attempt to access beyond end of device [ 92.548707][ T5950] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 92.564064][ T5950] syz.0.17: attempt to access beyond end of device [ 92.564064][ T5950] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 92.579528][ T5950] syz.0.17: attempt to access beyond end of device [ 92.579528][ T5950] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 92.601905][ T5903] BUG: Bad page state in process syz-executor pfn:76c0e [ 92.609471][ T5903] page:ffffea0001db0380 refcount:0 mapcount:0 mapping:ffff888061a987c8 index:0x2 pfn:0x76c0e [ 92.619893][ T5903] aops:z_erofs_cache_aops ino:0 [ 92.624800][ T5903] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 92.632740][ T5903] page_type: 0xffffffff() [ 92.637147][ T5903] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff888061a987c8 [ 92.645771][ T5903] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 92.654432][ T5903] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 92.661852][ T5903] page_owner tracks the page as allocated [ 92.667904][ T5903] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5950, tgid 5950 (syz.0.17), ts 92548327552, free_ts 92497387115 [ 92.689638][ T5903] post_alloc_hook+0x1cd/0x210 [ 92.694449][ T5903] get_page_from_freelist+0x195c/0x19f0 [ 92.700660][ T5903] __alloc_pages+0x1e3/0x460 [ 92.705306][ T5903] z_erofs_do_read_page+0x20c0/0x3680 [ 92.710927][ T5903] z_erofs_readahead+0x862/0xd50 [ 92.715980][ T5903] read_pages+0x177/0x840 [ 92.720356][ T5903] page_cache_ra_unbounded+0x692/0x770 [ 92.725917][ T5903] force_page_cache_ra+0x2c1/0x320 [ 92.731069][ T5903] generic_fadvise+0x44f/0x730 [ 92.735965][ T5903] __x64_sys_fadvise64+0x140/0x180 [ 92.741119][ T5903] do_syscall_64+0x55/0xb0 [ 92.745589][ T5903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.751645][ T5903] page last free stack trace: [ 92.756395][ T5903] free_unref_page_prepare+0x7ce/0x8e0 [ 92.761910][ T5903] free_unref_page+0x32/0x2e0 [ 92.766804][ T5903] __unfreeze_partials+0x1cf/0x210 [ 92.772273][ T5903] put_cpu_partial+0x17c/0x250 [ 92.777439][ T5903] __slab_free+0x31d/0x410 [ 92.781902][ T5903] qlist_free_all+0x75/0xe0 [ 92.786535][ T5903] kasan_quarantine_reduce+0x143/0x160 [ 92.792037][ T5903] __kasan_slab_alloc+0x22/0x80 [ 92.797011][ T5903] slab_post_alloc_hook+0x6e/0x4d0 [ 92.802605][ T5903] kmem_cache_alloc_node+0x150/0x330 [ 92.808157][ T5903] __alloc_skb+0x108/0x2c0 [ 92.812729][ T5903] mld_newpack+0x143/0xbf0 [ 92.817251][ T5903] add_grhead+0x5a/0x2a0 [ 92.821839][ T5903] add_grec+0x13ad/0x1660 [ 92.826247][ T5903] mld_ifc_work+0x6e6/0xb40 [ 92.831019][ T5903] process_scheduled_works+0xa45/0x15b0 [ 92.836661][ T5903] Modules linked in: [ 92.840665][ T5903] CPU: 1 PID: 5903 Comm: syz-executor Not tainted syzkaller #0 [ 92.848241][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.858331][ T5903] Call Trace: [ 92.861643][ T5903] [ 92.864600][ T5903] dump_stack_lvl+0x16c/0x230 [ 92.869315][ T5903] ? show_regs_print_info+0x20/0x20 [ 92.874545][ T5903] ? swiotlb_print_info+0x70/0x70 [ 92.879619][ T5903] bad_page+0x14b/0x170 [ 92.883804][ T5903] free_unref_page_prepare+0x887/0x8e0 [ 92.889309][ T5903] free_unref_page+0x32/0x2e0 [ 92.894021][ T5903] ? __folio_put+0xef/0x210 [ 92.898567][ T5903] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 92.905020][ T5903] erofs_shrink_workstation+0x118/0x290 [ 92.910591][ T5903] ? erofs_shrinker_unregister+0x170/0x170 [ 92.916417][ T5903] ? io_schedule+0xd0/0xd0 [ 92.920855][ T5903] ? kobject_put+0x43c/0x470 [ 92.925467][ T5903] erofs_shrinker_unregister+0x5d/0x170 [ 92.931038][ T5903] erofs_put_super+0x4e/0x150 [ 92.935752][ T5903] ? erofs_free_inode+0xb0/0xb0 [ 92.940649][ T5903] generic_shutdown_super+0x134/0x2b0 [ 92.946064][ T5903] kill_block_super+0x44/0x90 [ 92.950857][ T5903] erofs_kill_sb+0x4c/0x140 [ 92.955382][ T5903] deactivate_locked_super+0x97/0x100 [ 92.960788][ T5903] cleanup_mnt+0x429/0x4c0 [ 92.965220][ T5903] task_work_run+0x1ce/0x250 [ 92.969830][ T5903] ? task_work_cancel+0x240/0x240 [ 92.974872][ T5903] ? exit_to_user_mode_loop+0x3b/0x110 [ 92.980349][ T5903] exit_to_user_mode_loop+0xe6/0x110 [ 92.985645][ T5903] exit_to_user_mode_prepare+0xf6/0x180 [ 92.991205][ T5903] syscall_exit_to_user_mode+0x1a/0x50 [ 92.996681][ T5903] do_syscall_64+0x61/0xb0 [ 93.001136][ T5903] ? clear_bhb_loop+0x40/0x90 [ 93.005839][ T5903] ? clear_bhb_loop+0x40/0x90 [ 93.010569][ T5903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.016497][ T5903] RIP: 0033:0x7f9dee58ff57 [ 93.020933][ T5903] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 93.040558][ T5903] RSP: 002b:00007ffde9a90d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.048990][ T5903] RAX: 0000000000000000 RBX: 00007f9dee611c2d RCX: 00007f9dee58ff57 [ 93.056970][ T5903] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde9a90df0 [ 93.064949][ T5903] RBP: 00007ffde9a90df0 R08: 0000000000000000 R09: 0000000000000000 [ 93.072925][ T5903] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde9a91e80 [ 93.081476][ T5903] R13: 00007f9dee611c2d R14: 0000000000016984 R15: 00007ffde9a91ec0 [ 93.089475][ T5903] [ 93.093980][ T5903] Disabling lock debugging due to kernel taint