Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. 2025/07/09 05:29:25 ignoring optional flag "sandboxArg"="0" 2025/07/09 05:29:27 parsed 1 programs [ 64.578675][ T5787] cgroup: Unknown subsys name 'net' [ 64.738463][ T5787] cgroup: Unknown subsys name 'rlimit' [ 66.135977][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.916989][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 68.981525][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.988971][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.996304][ T5819] bridge_slave_0: entered allmulticast mode [ 69.003215][ T5819] bridge_slave_0: entered promiscuous mode [ 69.011120][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.018659][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.027435][ T5819] bridge_slave_1: entered allmulticast mode [ 69.034874][ T5819] bridge_slave_1: entered promiscuous mode [ 69.067275][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.078666][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.112579][ T5819] team0: Port device team_slave_0 added [ 69.119802][ T5819] team0: Port device team_slave_1 added [ 69.140961][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.148006][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.173942][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.186907][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.194339][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.220282][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.258619][ T5819] hsr_slave_0: entered promiscuous mode [ 69.264899][ T5819] hsr_slave_1: entered promiscuous mode [ 69.411322][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.422563][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.432510][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.441491][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.481315][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.488533][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.496329][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.503651][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.559783][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.576336][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.586628][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.601310][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.621042][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.628141][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.640841][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.647978][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.842292][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.884391][ T5819] veth0_vlan: entered promiscuous mode [ 69.896567][ T5819] veth1_vlan: entered promiscuous mode [ 69.929713][ T5819] veth0_macvtap: entered promiscuous mode [ 69.938950][ T5819] veth1_macvtap: entered promiscuous mode [ 69.961073][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.977137][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.989321][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.999804][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.009512][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.018459][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.181506][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.190027][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.197987][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.208123][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.216176][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.223665][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.262472][ T2930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.491566][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.498422][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.688892][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.698129][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.721575][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.730500][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/09 05:29:36 executed programs: 0 [ 72.165364][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.175352][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.183547][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.191598][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.199371][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.206935][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.325998][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 72.378560][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.385929][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.393281][ T5890] bridge_slave_0: entered allmulticast mode [ 72.399881][ T5890] bridge_slave_0: entered promiscuous mode [ 72.408127][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.415319][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.422522][ T5890] bridge_slave_1: entered allmulticast mode [ 72.429149][ T5890] bridge_slave_1: entered promiscuous mode [ 72.454022][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.465325][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.492672][ T5890] team0: Port device team_slave_0 added [ 72.500293][ T5890] team0: Port device team_slave_1 added [ 72.523505][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.530468][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.557346][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.569267][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.576263][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.602628][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.637689][ T5890] hsr_slave_0: entered promiscuous mode [ 72.643939][ T5890] hsr_slave_1: entered promiscuous mode [ 72.649961][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.658249][ T5890] Cannot create hsr debugfs directory [ 73.041535][ T2930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.282818][ T5104] Bluetooth: hci0: command tx timeout [ 75.120772][ T2930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.184400][ T2930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.056103][ T2930] hsr_slave_0: left promiscuous mode [ 76.062534][ T2930] hsr_slave_1: left promiscuous mode [ 76.068790][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.077048][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.085085][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.092531][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.100070][ T2930] bridge_slave_1: left allmulticast mode [ 76.105871][ T2930] bridge_slave_1: left promiscuous mode [ 76.112149][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.124460][ T2930] bridge_slave_0: left allmulticast mode [ 76.130088][ T2930] bridge_slave_0: left promiscuous mode [ 76.136272][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.154834][ T2930] veth1_macvtap: left promiscuous mode [ 76.160619][ T2930] veth0_macvtap: left promiscuous mode [ 76.166718][ T2930] veth1_vlan: left promiscuous mode [ 76.174187][ T2930] veth0_vlan: left promiscuous mode [ 76.361919][ T5104] Bluetooth: hci0: command tx timeout [ 76.486249][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 76.513174][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 76.542680][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.570942][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.921490][ T2930] bond0 (unregistering): Released all slaves [ 77.020270][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.030590][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.055581][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.066087][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.150716][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.182213][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.195736][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.202836][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.222236][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.229367][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.459305][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.538087][ T5890] veth0_vlan: entered promiscuous mode [ 77.548102][ T5890] veth1_vlan: entered promiscuous mode [ 77.573068][ T5890] veth0_macvtap: entered promiscuous mode [ 77.581027][ T5890] veth1_macvtap: entered promiscuous mode [ 77.598379][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.611644][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.624279][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.634400][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.643327][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.652303][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.706011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.717571][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.740748][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.749120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.819764][ T5941] syz.0.16[5941]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.839551][ T5941] loop0: detected capacity change from 0 to 16 [ 77.864176][ T5941] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.875739][ T5941] syz.0.16: attempt to access beyond end of device [ 77.875739][ T5941] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 77.889835][ T5941] syz.0.16: attempt to access beyond end of device [ 77.889835][ T5941] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 77.908407][ T5941] syz.0.16: attempt to access beyond end of device [ 77.908407][ T5941] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 77.931482][ T5890] BUG: Bad page state in process syz-executor pfn:73e89 [ 77.939936][ T5890] page:ffffea0001cfa240 refcount:0 mapcount:0 mapping:ffff88805ec707c8 index:0x2 pfn:0x73e89 [ 77.950630][ T5890] aops:z_erofs_cache_aops ino:0 [ 77.955580][ T5890] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 77.963494][ T5890] page_type: 0xffffffff() [ 77.967835][ T5890] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805ec707c8 [ 77.976546][ T5890] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 77.985187][ T5890] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 77.992630][ T5890] page_owner tracks the page as allocated [ 77.998583][ T5890] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5941, tgid 5941 (syz.0.16), ts 77875412418, free_ts 77832329314 [ 78.020970][ T5890] post_alloc_hook+0x1cd/0x210 [ 78.025923][ T5890] get_page_from_freelist+0x195c/0x19f0 [ 78.031483][ T5890] __alloc_pages+0x1e3/0x460 [ 78.036155][ T5890] z_erofs_do_read_page+0x20c0/0x3680 [ 78.041555][ T5890] z_erofs_readahead+0x862/0xd50 [ 78.047976][ T5890] read_pages+0x177/0x840 [ 78.052417][ T5890] page_cache_ra_unbounded+0x692/0x770 [ 78.057895][ T5890] force_page_cache_ra+0x2c1/0x320 [ 78.063140][ T5890] generic_fadvise+0x44f/0x730 [ 78.067927][ T5890] __x64_sys_fadvise64+0x140/0x180 [ 78.073221][ T5890] do_syscall_64+0x55/0xb0 [ 78.077661][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.083642][ T5890] page last free stack trace: [ 78.088322][ T5890] free_unref_page_prepare+0x7ce/0x8e0 [ 78.093867][ T5890] free_unref_page+0x32/0x2e0 [ 78.098560][ T5890] __unfreeze_partials+0x1cf/0x210 [ 78.103741][ T5890] put_cpu_partial+0x17c/0x250 [ 78.108515][ T5890] __slab_free+0x31d/0x410 [ 78.113013][ T5890] qlist_free_all+0x75/0xe0 [ 78.118153][ T5890] kasan_quarantine_reduce+0x143/0x160 [ 78.123965][ T5890] __kasan_slab_alloc+0x22/0x80 [ 78.128836][ T5890] slab_post_alloc_hook+0x6e/0x4d0 [ 78.134028][ T5890] kmem_cache_alloc+0x11e/0x2e0 [ 78.138887][ T5890] security_file_alloc+0x34/0x120 [ 78.143978][ T5890] init_file+0x94/0x1f0 [ 78.148146][ T5890] alloc_empty_file+0xb7/0x1d0 [ 78.152990][ T5890] path_openat+0x100/0x3190 [ 78.157502][ T5890] do_filp_open+0x1c5/0x3d0 [ 78.162105][ T5890] do_sys_openat2+0x12c/0x1c0 [ 78.166811][ T5890] Modules linked in: [ 78.170730][ T5890] CPU: 0 PID: 5890 Comm: syz-executor Not tainted 6.6.96-syzkaller #0 [ 78.178887][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.188958][ T5890] Call Trace: [ 78.192244][ T5890] [ 78.195185][ T5890] dump_stack_lvl+0x16c/0x230 [ 78.199878][ T5890] ? show_regs_print_info+0x20/0x20 [ 78.205092][ T5890] ? swiotlb_print_info+0x70/0x70 [ 78.210149][ T5890] bad_page+0x14b/0x170 [ 78.214323][ T5890] free_unref_page_prepare+0x887/0x8e0 [ 78.219799][ T5890] free_unref_page+0x32/0x2e0 [ 78.224489][ T5890] ? __folio_put+0xef/0x210 [ 78.229008][ T5890] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 78.235449][ T5890] erofs_shrink_workstation+0x118/0x290 [ 78.241006][ T5890] ? erofs_shrinker_unregister+0x170/0x170 [ 78.246822][ T5890] ? io_schedule+0xd0/0xd0 [ 78.251253][ T5890] ? kobject_put+0x43c/0x470 [ 78.255857][ T5890] erofs_shrinker_unregister+0x5d/0x170 [ 78.261412][ T5890] erofs_put_super+0x4e/0x150 [ 78.266098][ T5890] ? erofs_free_inode+0xb0/0xb0 [ 78.270953][ T5890] generic_shutdown_super+0x134/0x2b0 [ 78.276334][ T5890] kill_block_super+0x44/0x90 [ 78.281007][ T5890] erofs_kill_sb+0x4c/0x140 [ 78.285498][ T5890] deactivate_locked_super+0x97/0x100 [ 78.290859][ T5890] cleanup_mnt+0x429/0x4c0 [ 78.295270][ T5890] task_work_run+0x1ce/0x250 [ 78.299854][ T5890] ? task_work_cancel+0x240/0x240 [ 78.304875][ T5890] ? exit_to_user_mode_loop+0x3b/0x110 [ 78.310327][ T5890] exit_to_user_mode_loop+0xe6/0x110 [ 78.315600][ T5890] exit_to_user_mode_prepare+0xb1/0x140 [ 78.321147][ T5890] syscall_exit_to_user_mode+0x1a/0x50 [ 78.326598][ T5890] do_syscall_64+0x61/0xb0 [ 78.331008][ T5890] ? clear_bhb_loop+0x40/0x90 [ 78.335675][ T5890] ? clear_bhb_loop+0x40/0x90 [ 78.340342][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.346220][ T5890] RIP: 0033:0x7f0020b8fc57 [ 78.350628][ T5890] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 78.370222][ T5890] RSP: 002b:00007ffdbc62fb48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.378624][ T5890] RAX: 0000000000000000 RBX: 00007f0020c10925 RCX: 00007f0020b8fc57 [ 78.386588][ T5890] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbc62fc00 [ 78.394545][ T5890] RBP: 00007ffdbc62fc00 R08: 0000000000000000 R09: 0000000000000000 [ 78.402513][ T5890] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbc630c90 [ 78.410477][ T5890] R13: 00007f0020c10925 R14: 000000000001303a R15: 00007ffdbc630cd0 [ 78.418457][ T5890] [ 78.422849][ T5890] Disabling lock debugging due to kernel taint [ 78.445199][ T5104] Bluetooth: hci0: command tx timeout