Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. 2025/09/14 16:32:19 parsed 1 programs [ 88.159716][ T5791] cgroup: Unknown subsys name 'net' [ 88.296725][ T5791] cgroup: Unknown subsys name 'rlimit' [ 90.062670][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.158629][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.166491][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.175503][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.186019][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.194406][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.202462][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.204220][ T1189] cfg80211: failed to load regulatory.db [ 92.717452][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 92.830372][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.837531][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.845645][ T5830] bridge_slave_0: entered allmulticast mode [ 92.853371][ T5830] bridge_slave_0: entered promiscuous mode [ 92.863189][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.870873][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.878147][ T5830] bridge_slave_1: entered allmulticast mode [ 92.885171][ T5830] bridge_slave_1: entered promiscuous mode [ 92.927163][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.941807][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.990092][ T5830] team0: Port device team_slave_0 added [ 92.998371][ T5830] team0: Port device team_slave_1 added [ 93.041903][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.049071][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.076232][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.099421][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.106414][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.132496][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.189616][ T5830] hsr_slave_0: entered promiscuous mode [ 93.196018][ T5830] hsr_slave_1: entered promiscuous mode [ 93.396891][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.409130][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.420913][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.431992][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.481900][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.489433][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.497667][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.505284][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.594051][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.616523][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.626008][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.649366][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.665689][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.672941][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.686781][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.694416][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.896456][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.939052][ T5830] veth0_vlan: entered promiscuous mode [ 93.954058][ T5830] veth1_vlan: entered promiscuous mode [ 93.985885][ T5830] veth0_macvtap: entered promiscuous mode [ 93.997119][ T5830] veth1_macvtap: entered promiscuous mode [ 94.018274][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.033946][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.046935][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.057064][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.066405][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075518][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.226339][ T5830] syz-executor (5830) used greatest stack depth: 19920 bytes left [ 94.255171][ T3469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.513155][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.524199][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.560324][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.568341][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.872265][ T3469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/14 16:32:31 executed programs: 0 [ 97.489625][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.497885][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.507888][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.517607][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.526264][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.533897][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.699519][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 97.774249][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.781482][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.788997][ T5902] bridge_slave_0: entered allmulticast mode [ 97.796016][ T5902] bridge_slave_0: entered promiscuous mode [ 97.805380][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.812870][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.820258][ T5902] bridge_slave_1: entered allmulticast mode [ 97.827631][ T5902] bridge_slave_1: entered promiscuous mode [ 97.859630][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.872878][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.910677][ T5902] team0: Port device team_slave_0 added [ 97.919274][ T5902] team0: Port device team_slave_1 added [ 97.948818][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.955819][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.982744][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.997379][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.004527][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.031047][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.076149][ T5902] hsr_slave_0: entered promiscuous mode [ 98.082821][ T5902] hsr_slave_1: entered promiscuous mode [ 98.089760][ T5902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.097612][ T5902] Cannot create hsr debugfs directory [ 99.269632][ T3469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.324543][ T3469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.560373][ T5102] Bluetooth: hci0: command tx timeout [ 100.197209][ T3469] hsr_slave_0: left promiscuous mode [ 100.204859][ T3469] hsr_slave_1: left promiscuous mode [ 100.213576][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.221287][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.233496][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.241139][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.251610][ T3469] bridge_slave_1: left allmulticast mode [ 100.257307][ T3469] bridge_slave_1: left promiscuous mode [ 100.264341][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.281476][ T3469] bridge_slave_0: left allmulticast mode [ 100.287186][ T3469] bridge_slave_0: left promiscuous mode [ 100.293354][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.327537][ T3469] veth1_macvtap: left promiscuous mode [ 100.337974][ T3469] veth0_macvtap: left promiscuous mode [ 100.343999][ T3469] veth1_vlan: left promiscuous mode [ 100.352187][ T3469] veth0_vlan: left promiscuous mode [ 100.816911][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 100.853428][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 100.886852][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.921486][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.250473][ T3469] bond0 (unregistering): Released all slaves [ 101.323280][ T5902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.333806][ T5902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.345066][ T5902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.355030][ T5902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.465925][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.487340][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.509072][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.516250][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.537024][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.544229][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.638263][ T5102] Bluetooth: hci0: command tx timeout [ 101.856800][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.927357][ T5902] veth0_vlan: entered promiscuous mode [ 101.949248][ T5902] veth1_vlan: entered promiscuous mode [ 101.995244][ T5902] veth0_macvtap: entered promiscuous mode [ 102.010604][ T5902] veth1_macvtap: entered promiscuous mode [ 102.036137][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.051856][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.063765][ T5902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.073899][ T5902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.082775][ T5902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.091592][ T5902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.163074][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.177363][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.209284][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.217181][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.266234][ T5948] syz.0.17[5948]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 102.290474][ T5948] loop0: detected capacity change from 0 to 16 [ 102.312553][ T5948] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.330421][ T5948] syz.0.17: attempt to access beyond end of device [ 102.330421][ T5948] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 102.360160][ T5948] syz.0.17: attempt to access beyond end of device [ 102.360160][ T5948] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 102.374500][ T5948] syz.0.17: attempt to access beyond end of device [ 102.374500][ T5948] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 102.395055][ T5902] BUG: Bad page state in process syz-executor pfn:772fe [ 102.402462][ T5902] page:ffffea0001dcbf80 refcount:0 mapcount:0 mapping:ffff88805ec487c8 index:0x2 pfn:0x772fe [ 102.412898][ T5902] aops:z_erofs_cache_aops ino:0 [ 102.417814][ T5902] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 102.425662][ T5902] page_type: 0xffffffff() [ 102.430526][ T5902] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805ec487c8 [ 102.439492][ T5902] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 102.448170][ T5902] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 102.455517][ T5902] page_owner tracks the page as allocated [ 102.461466][ T5902] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5948, tgid 5948 (syz.0.17), ts 102330190764, free_ts 102280684035 [ 102.483427][ T5902] post_alloc_hook+0x1cd/0x210 [ 102.488325][ T5902] get_page_from_freelist+0x195c/0x19f0 [ 102.493913][ T5902] __alloc_pages+0x1e3/0x460 [ 102.498673][ T5902] z_erofs_do_read_page+0x20c0/0x3680 [ 102.504096][ T5902] z_erofs_pcluster_readmore+0x2cf/0x450 [ 102.509821][ T5902] z_erofs_read_folio+0x208/0x540 [ 102.514888][ T5902] filemap_read_folio+0x167/0x760 [ 102.520092][ T5902] do_read_cache_folio+0x470/0x7e0 [ 102.525246][ T5902] erofs_bread+0x16f/0x630 [ 102.529758][ T5902] erofs_namei+0x28c/0xf00 [ 102.534774][ T5902] erofs_lookup+0x135/0x310 [ 102.539487][ T5902] __lookup_slow+0x281/0x3b0 [ 102.544124][ T5902] lookup_slow+0x53/0x70 [ 102.548575][ T5902] link_path_walk+0x970/0xe00 [ 102.553294][ T5902] path_openat+0x283/0x3190 [ 102.557840][ T5902] do_filp_open+0x1c5/0x3d0 [ 102.562453][ T5902] page last free stack trace: [ 102.567131][ T5902] free_unref_page_prepare+0x7ce/0x8e0 [ 102.572710][ T5902] free_unref_page+0x32/0x2e0 [ 102.577432][ T5902] __unfreeze_partials+0x1cf/0x210 [ 102.582712][ T5902] put_cpu_partial+0x17c/0x250 [ 102.587542][ T5902] __slab_free+0x31d/0x410 [ 102.592079][ T5902] qlist_free_all+0x75/0xe0 [ 102.596625][ T5902] kasan_quarantine_reduce+0x143/0x160 [ 102.602268][ T5902] __kasan_slab_alloc+0x22/0x80 [ 102.607156][ T5902] slab_post_alloc_hook+0x6e/0x4d0 [ 102.612389][ T5902] kmem_cache_alloc_node+0x150/0x330 [ 102.617717][ T5902] __alloc_skb+0x108/0x2c0 [ 102.622227][ T5902] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 102.628201][ T5902] addrconf_ifdown+0x1544/0x1880 [ 102.633186][ T5902] addrconf_notify+0x6c6/0x1010 [ 102.638702][ T5902] notifier_call_chain+0x197/0x390 [ 102.643840][ T5902] unregister_netdevice_many_notify+0xf36/0x1810 [ 102.650405][ T5902] Modules linked in: [ 102.654349][ T5902] CPU: 1 PID: 5902 Comm: syz-executor Not tainted syzkaller #0 [ 102.661901][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.671985][ T5902] Call Trace: [ 102.675272][ T5902] [ 102.678235][ T5902] dump_stack_lvl+0x16c/0x230 [ 102.682971][ T5902] ? show_regs_print_info+0x20/0x20 [ 102.688193][ T5902] ? swiotlb_print_info+0x70/0x70 [ 102.693251][ T5902] bad_page+0x14b/0x170 [ 102.697416][ T5902] free_unref_page_prepare+0x887/0x8e0 [ 102.702896][ T5902] free_unref_page+0x32/0x2e0 [ 102.707592][ T5902] ? __folio_put+0xef/0x210 [ 102.712108][ T5902] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 102.718547][ T5902] erofs_shrink_workstation+0x118/0x290 [ 102.724116][ T5902] ? erofs_shrinker_unregister+0x170/0x170 [ 102.729949][ T5902] ? io_schedule+0xd0/0xd0 [ 102.734384][ T5902] ? kobject_put+0x43c/0x470 [ 102.739019][ T5902] erofs_shrinker_unregister+0x5d/0x170 [ 102.744598][ T5902] erofs_put_super+0x4e/0x150 [ 102.749302][ T5902] ? erofs_free_inode+0xb0/0xb0 [ 102.754186][ T5902] generic_shutdown_super+0x134/0x2b0 [ 102.759605][ T5902] kill_block_super+0x44/0x90 [ 102.764329][ T5902] erofs_kill_sb+0x4c/0x140 [ 102.768854][ T5902] deactivate_locked_super+0x97/0x100 [ 102.774247][ T5902] cleanup_mnt+0x429/0x4c0 [ 102.778686][ T5902] task_work_run+0x1ce/0x250 [ 102.783300][ T5902] ? task_work_cancel+0x240/0x240 [ 102.788346][ T5902] ? exit_to_user_mode_loop+0x3b/0x110 [ 102.793828][ T5902] exit_to_user_mode_loop+0xe6/0x110 [ 102.799139][ T5902] exit_to_user_mode_prepare+0xf6/0x180 [ 102.804791][ T5902] syscall_exit_to_user_mode+0x1a/0x50 [ 102.810311][ T5902] do_syscall_64+0x61/0xb0 [ 102.814752][ T5902] ? clear_bhb_loop+0x40/0x90 [ 102.819449][ T5902] ? clear_bhb_loop+0x40/0x90 [ 102.824413][ T5902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.830376][ T5902] RIP: 0033:0x7fd33118fed7 [ 102.834843][ T5902] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 102.854498][ T5902] RSP: 002b:00007fffb078e708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.862948][ T5902] RAX: 0000000000000000 RBX: 00007fd331211c05 RCX: 00007fd33118fed7 [ 102.870945][ T5902] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb078e7c0 [ 102.879104][ T5902] RBP: 00007fffb078e7c0 R08: 0000000000000000 R09: 0000000000000000 [ 102.887086][ T5902] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb078f850 [ 102.895072][ T5902] R13: 00007fd331211c05 R14: 0000000000018fb5 R15: 00007fffb078f890 [ 102.903075][ T5902] [ 102.907618][ T5902] Disabling lock debugging due to kernel taint [ 103.718189][ T5102] Bluetooth: hci0: command tx timeout [ 105.808126][ T5102] Bluetooth: hci0: command tx timeout