Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. 2025/11/05 22:23:50 parsed 1 programs [ 113.098587][ T5804] cgroup: Unknown subsys name 'net' [ 113.237300][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 114.743275][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 117.984037][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 118.041611][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.049333][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.056696][ T5859] bridge_slave_0: entered allmulticast mode [ 118.063858][ T5859] bridge_slave_0: entered promiscuous mode [ 118.092388][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.099524][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.107165][ T5859] bridge_slave_1: entered allmulticast mode [ 118.114064][ T5859] bridge_slave_1: entered promiscuous mode [ 118.158408][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.169792][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.215092][ T5859] team0: Port device team_slave_0 added [ 118.222918][ T5859] team0: Port device team_slave_1 added [ 118.245990][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.254302][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.282067][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.308900][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.315933][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.344108][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.401153][ T5859] hsr_slave_0: entered promiscuous mode [ 118.407832][ T5859] hsr_slave_1: entered promiscuous mode [ 118.588043][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.603004][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.627928][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.637679][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.665786][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.673142][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.681406][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.688677][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.761611][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.785665][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.794970][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.813019][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.832136][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.839282][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.860261][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.867486][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.060902][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.104706][ T5859] veth0_vlan: entered promiscuous mode [ 119.116065][ T5859] veth1_vlan: entered promiscuous mode [ 119.144289][ T5859] veth0_macvtap: entered promiscuous mode [ 119.154880][ T5859] veth1_macvtap: entered promiscuous mode [ 119.172946][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.187968][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.200027][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.211050][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.219782][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.228679][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.361913][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.324781][ T5898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.333905][ T5898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.342932][ T5898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.355781][ T5898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.363717][ T5898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.371658][ T5898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.588733][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.601913][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.634933][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.643304][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/05 22:24:00 executed programs: 0 [ 121.162827][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.171546][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.179978][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.189411][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.197405][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.204995][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.340198][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 121.396571][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.404125][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.412002][ T5912] bridge_slave_0: entered allmulticast mode [ 121.418704][ T5912] bridge_slave_0: entered promiscuous mode [ 121.426792][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.434305][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.441894][ T5912] bridge_slave_1: entered allmulticast mode [ 121.448665][ T5912] bridge_slave_1: entered promiscuous mode [ 121.478887][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.492050][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.521840][ T5912] team0: Port device team_slave_0 added [ 121.529894][ T5912] team0: Port device team_slave_1 added [ 121.556040][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.563586][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.589597][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.604791][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.611857][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.638242][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.675745][ T5912] hsr_slave_0: entered promiscuous mode [ 121.682508][ T5912] hsr_slave_1: entered promiscuous mode [ 121.689071][ T5912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.697118][ T5912] Cannot create hsr debugfs directory [ 122.196281][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.239640][ T5898] Bluetooth: hci0: command tx timeout [ 124.442303][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.525396][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.310822][ T5898] Bluetooth: hci0: command tx timeout [ 125.438522][ T11] hsr_slave_0: left promiscuous mode [ 125.444704][ T11] hsr_slave_1: left promiscuous mode [ 125.450953][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.458402][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.466757][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.474485][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.482918][ T11] bridge_slave_1: left allmulticast mode [ 125.488563][ T11] bridge_slave_1: left promiscuous mode [ 125.495527][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.506521][ T11] bridge_slave_0: left allmulticast mode [ 125.512277][ T11] bridge_slave_0: left promiscuous mode [ 125.517962][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.538096][ T11] veth1_macvtap: left promiscuous mode [ 125.543906][ T11] veth0_macvtap: left promiscuous mode [ 125.550037][ T11] veth1_vlan: left promiscuous mode [ 125.556360][ T11] veth0_vlan: left promiscuous mode [ 125.901885][ T11] team0 (unregistering): Port device team_slave_1 removed [ 125.932131][ T11] team0 (unregistering): Port device team_slave_0 removed [ 125.962388][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.996427][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.298671][ T11] bond0 (unregistering): Released all slaves [ 126.392133][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.403686][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.413200][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.424425][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.534126][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.552642][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.566382][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.573617][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.592034][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.599141][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.803656][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.898076][ T5912] veth0_vlan: entered promiscuous mode [ 126.914972][ T5912] veth1_vlan: entered promiscuous mode [ 126.960025][ T5912] veth0_macvtap: entered promiscuous mode [ 126.975424][ T5912] veth1_macvtap: entered promiscuous mode [ 126.991504][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.006121][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.016861][ T5912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.025865][ T5912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.034696][ T5912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.043672][ T5912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.100210][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.108506][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.136866][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.144901][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.214939][ T5960] syz.0.17[5960]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 127.228421][ T5960] loop0: detected capacity change from 0 to 16 [ 127.247989][ T5960] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.266211][ T5960] syz.0.17: attempt to access beyond end of device [ 127.266211][ T5960] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 127.287743][ T5960] syz.0.17: attempt to access beyond end of device [ 127.287743][ T5960] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 127.303244][ T5960] syz.0.17: attempt to access beyond end of device [ 127.303244][ T5960] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 127.331271][ T5912] BUG: Bad page state in process syz-executor pfn:2be60 [ 127.338580][ T5912] page:ffffea0000af9800 refcount:0 mapcount:0 mapping:ffff88806cd987c8 index:0x2 pfn:0x2be60 [ 127.349205][ T5912] aops:z_erofs_cache_aops ino:0 [ 127.354436][ T5912] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 127.362269][ T5912] page_type: 0xffffffff() [ 127.366617][ T5912] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88806cd987c8 [ 127.375364][ T5912] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 127.384661][ T5912] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 127.392441][ T5912] page_owner tracks the page as allocated [ 127.398339][ T5912] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5960, tgid 5960 (syz.0.17), ts 127266045716, free_ts 127223461227 [ 127.420341][ T5912] post_alloc_hook+0x1cd/0x210 [ 127.425141][ T5912] get_page_from_freelist+0x195c/0x19f0 [ 127.430360][ T5898] Bluetooth: hci0: command tx timeout [ 127.431884][ T5912] __alloc_pages+0x1e3/0x460 [ 127.440707][ T5912] z_erofs_do_read_page+0x20c0/0x3680 [ 127.446100][ T5912] z_erofs_pcluster_readmore+0x2cf/0x450 [ 127.452056][ T5912] z_erofs_read_folio+0x208/0x540 [ 127.457202][ T5912] filemap_read_folio+0x167/0x760 [ 127.462406][ T5912] do_read_cache_folio+0x470/0x7e0 [ 127.467535][ T5912] erofs_bread+0x16f/0x630 [ 127.472230][ T5912] erofs_namei+0x28c/0xf00 [ 127.476669][ T5912] erofs_lookup+0x135/0x310 [ 127.481853][ T5912] lookup_one_qstr_excl+0x112/0x250 [ 127.487310][ T5912] filename_create+0x222/0x460 [ 127.492214][ T5912] do_symlinkat+0xbd/0x3f0 [ 127.496651][ T5912] __x64_sys_symlinkat+0x99/0xb0 [ 127.501668][ T5912] do_syscall_64+0x55/0xb0 [ 127.506105][ T5912] page last free stack trace: [ 127.510874][ T5912] free_unref_page_prepare+0x7ce/0x8e0 [ 127.516357][ T5912] free_unref_page+0x32/0x2e0 [ 127.521120][ T5912] __unfreeze_partials+0x1cf/0x210 [ 127.526256][ T5912] put_cpu_partial+0x17c/0x250 [ 127.531156][ T5912] __slab_free+0x31d/0x410 [ 127.535598][ T5912] qlist_free_all+0x75/0xe0 [ 127.540117][ T5912] kasan_quarantine_reduce+0x143/0x160 [ 127.545654][ T5912] __kasan_slab_alloc+0x22/0x80 [ 127.550816][ T5912] slab_post_alloc_hook+0x6e/0x4d0 [ 127.555949][ T5912] kmem_cache_alloc_node+0x150/0x330 [ 127.561306][ T5912] __alloc_skb+0x108/0x2c0 [ 127.565740][ T5912] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 127.571790][ T5912] addrconf_ifdown+0x1544/0x1880 [ 127.576749][ T5912] addrconf_notify+0x6c6/0x1010 [ 127.581658][ T5912] notifier_call_chain+0x197/0x390 [ 127.587436][ T5912] unregister_netdevice_many_notify+0xf36/0x1810 [ 127.594078][ T5912] Modules linked in: [ 127.598020][ T5912] CPU: 1 PID: 5912 Comm: syz-executor Not tainted syzkaller #0 [ 127.605600][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.615670][ T5912] Call Trace: [ 127.618948][ T5912] [ 127.621881][ T5912] dump_stack_lvl+0x16c/0x230 [ 127.626565][ T5912] ? show_regs_print_info+0x20/0x20 [ 127.631757][ T5912] ? swiotlb_print_info+0x70/0x70 [ 127.636781][ T5912] bad_page+0x14b/0x170 [ 127.640930][ T5912] free_unref_page_prepare+0x887/0x8e0 [ 127.646417][ T5912] free_unref_page+0x32/0x2e0 [ 127.651115][ T5912] ? __folio_put+0xef/0x210 [ 127.655650][ T5912] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 127.662081][ T5912] erofs_shrink_workstation+0x118/0x290 [ 127.667635][ T5912] ? erofs_shrinker_unregister+0x170/0x170 [ 127.673436][ T5912] ? io_schedule+0xd0/0xd0 [ 127.677937][ T5912] ? kobject_put+0x43c/0x470 [ 127.682553][ T5912] erofs_shrinker_unregister+0x5d/0x170 [ 127.688121][ T5912] erofs_put_super+0x4e/0x150 [ 127.692832][ T5912] ? erofs_free_inode+0xb0/0xb0 [ 127.697718][ T5912] generic_shutdown_super+0x134/0x2b0 [ 127.703119][ T5912] kill_block_super+0x44/0x90 [ 127.707876][ T5912] erofs_kill_sb+0x4c/0x140 [ 127.712415][ T5912] deactivate_locked_super+0x97/0x100 [ 127.717809][ T5912] cleanup_mnt+0x429/0x4c0 [ 127.722227][ T5912] task_work_run+0x1ce/0x250 [ 127.726813][ T5912] ? task_work_cancel+0x240/0x240 [ 127.731835][ T5912] ? exit_to_user_mode_loop+0x3b/0x110 [ 127.737290][ T5912] exit_to_user_mode_loop+0xe6/0x110 [ 127.742569][ T5912] exit_to_user_mode_prepare+0xf6/0x180 [ 127.748119][ T5912] syscall_exit_to_user_mode+0x1a/0x50 [ 127.753603][ T5912] do_syscall_64+0x61/0xb0 [ 127.758019][ T5912] ? clear_bhb_loop+0x40/0x90 [ 127.762707][ T5912] ? clear_bhb_loop+0x40/0x90 [ 127.767409][ T5912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.773306][ T5912] RIP: 0033:0x7f723cf909f7 [ 127.777724][ T5912] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 127.797347][ T5912] RSP: 002b:00007ffcbdc81738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 127.805796][ T5912] RAX: 0000000000000000 RBX: 00007f723d011d7d RCX: 00007f723cf909f7 [ 127.813786][ T5912] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbdc817f0 [ 127.821747][ T5912] RBP: 00007ffcbdc817f0 R08: 0000000000000000 R09: 0000000000000000 [ 127.829731][ T5912] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcbdc82880 [ 127.837699][ T5912] R13: 00007f723d011d7d R14: 000000000001f11e R15: 00007ffcbdc828c0 [ 127.845675][ T5912] [ 127.850183][ T5912] Disabling lock debugging due to kernel taint