Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. 2025/10/16 17:25:15 parsed 1 programs [ 89.367605][ T5790] cgroup: Unknown subsys name 'net' [ 89.532657][ T5790] cgroup: Unknown subsys name 'rlimit' [ 91.366991][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.346037][ T3059] cfg80211: failed to load regulatory.db [ 96.659304][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 96.755878][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.763059][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.771814][ T5856] bridge_slave_0: entered allmulticast mode [ 96.780097][ T5856] bridge_slave_0: entered promiscuous mode [ 96.800047][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.807446][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.814783][ T5856] bridge_slave_1: entered allmulticast mode [ 96.821910][ T5856] bridge_slave_1: entered promiscuous mode [ 96.862994][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.876125][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.922851][ T5856] team0: Port device team_slave_0 added [ 96.931552][ T5856] team0: Port device team_slave_1 added [ 96.960035][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.967370][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.994240][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.021707][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.028883][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.054884][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.101209][ T5856] hsr_slave_0: entered promiscuous mode [ 97.107912][ T5856] hsr_slave_1: entered promiscuous mode [ 97.302123][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.315360][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.326806][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.337115][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.378980][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.386891][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.395481][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.403087][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.475863][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.500282][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.510491][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.532621][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.549487][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.557051][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.569592][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.576814][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.777533][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.822390][ T5856] veth0_vlan: entered promiscuous mode [ 97.836616][ T5856] veth1_vlan: entered promiscuous mode [ 97.868343][ T5856] veth0_macvtap: entered promiscuous mode [ 97.878909][ T5856] veth1_macvtap: entered promiscuous mode [ 97.898163][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.913484][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.927794][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.938102][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947884][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957036][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.139241][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.301193][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.309762][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.318715][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.326962][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.335759][ T5883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.343523][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.629933][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.639012][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.676493][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.684728][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/16 17:25:27 executed programs: 0 [ 99.200394][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.210956][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.219206][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.229135][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.237525][ T5883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.245583][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.426304][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 99.506671][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.514217][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.521430][ T5898] bridge_slave_0: entered allmulticast mode [ 99.528975][ T5898] bridge_slave_0: entered promiscuous mode [ 99.538754][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.547384][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.555005][ T5898] bridge_slave_1: entered allmulticast mode [ 99.562347][ T5898] bridge_slave_1: entered promiscuous mode [ 99.600054][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.616400][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.656770][ T5898] team0: Port device team_slave_0 added [ 99.669912][ T5898] team0: Port device team_slave_1 added [ 99.708682][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.716089][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.743463][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.756706][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.765894][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.792669][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.845241][ T5898] hsr_slave_0: entered promiscuous mode [ 99.852024][ T5898] hsr_slave_1: entered promiscuous mode [ 99.858829][ T5898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.869199][ T5898] Cannot create hsr debugfs directory [ 100.796209][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.304392][ T5101] Bluetooth: hci0: command tx timeout [ 103.085457][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.161439][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.394893][ T5101] Bluetooth: hci0: command tx timeout [ 104.150096][ T5898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.165075][ T5898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.188769][ T42] hsr_slave_0: left promiscuous mode [ 104.198018][ T42] hsr_slave_1: left promiscuous mode [ 104.205103][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.212699][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.224764][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.232236][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.244547][ T42] bridge_slave_1: left allmulticast mode [ 104.250477][ T42] bridge_slave_1: left promiscuous mode [ 104.259824][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.273166][ T42] bridge_slave_0: left allmulticast mode [ 104.279867][ T42] bridge_slave_0: left promiscuous mode [ 104.286116][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.311032][ T42] veth1_macvtap: left promiscuous mode [ 104.317435][ T42] veth0_macvtap: left promiscuous mode [ 104.323123][ T42] veth1_vlan: left promiscuous mode [ 104.329060][ T42] veth0_vlan: left promiscuous mode [ 104.775612][ T42] team0 (unregistering): Port device team_slave_1 removed [ 104.814499][ T42] team0 (unregistering): Port device team_slave_0 removed [ 104.850587][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.886222][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.223817][ T42] bond0 (unregistering): Released all slaves [ 105.316972][ T5898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.333930][ T5898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.444595][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.463796][ T5101] Bluetooth: hci0: command tx timeout [ 105.472802][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.488985][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.496561][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.517401][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.524667][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.797320][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.858266][ T5898] veth0_vlan: entered promiscuous mode [ 105.871430][ T5898] veth1_vlan: entered promiscuous mode [ 105.904888][ T5898] veth0_macvtap: entered promiscuous mode [ 105.916288][ T5898] veth1_macvtap: entered promiscuous mode [ 105.936843][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.952889][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.967369][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.977296][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.986559][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.995363][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.097082][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.113537][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.154982][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.162926][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/16 17:25:34 executed programs: 2 [ 106.237672][ T5946] syz.0.17[5946]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 106.261480][ T5946] loop0: detected capacity change from 0 to 16 [ 106.292940][ T5946] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.308555][ T5946] syz.0.17: attempt to access beyond end of device [ 106.308555][ T5946] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 106.343448][ T5946] syz.0.17: attempt to access beyond end of device [ 106.343448][ T5946] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 106.358728][ T5946] syz.0.17: attempt to access beyond end of device [ 106.358728][ T5946] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 106.403163][ T5898] BUG: Bad page state in process syz-executor pfn:29bc2 [ 106.410876][ T5898] page:ffffea0000a6f080 refcount:0 mapcount:0 mapping:ffff88805e1287c8 index:0x2 pfn:0x29bc2 [ 106.422216][ T5898] aops:z_erofs_cache_aops ino:0 [ 106.427555][ T5898] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 106.435693][ T5898] page_type: 0xffffffff() [ 106.440088][ T5898] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805e1287c8 [ 106.448895][ T5898] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 106.457741][ T5898] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 106.465203][ T5898] page_owner tracks the page as allocated [ 106.471263][ T5898] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5946, tgid 5946 (syz.0.17), ts 106308313445, free_ts 106258155047 [ 106.493690][ T5898] post_alloc_hook+0x1cd/0x210 [ 106.498836][ T5898] get_page_from_freelist+0x195c/0x19f0 [ 106.504815][ T5898] __alloc_pages+0x1e3/0x460 [ 106.509483][ T5898] z_erofs_do_read_page+0x20c0/0x3680 [ 106.515153][ T5898] z_erofs_pcluster_readmore+0x2cf/0x450 [ 106.521325][ T5898] z_erofs_read_folio+0x208/0x540 [ 106.526795][ T5898] filemap_read_folio+0x167/0x760 [ 106.531903][ T5898] do_read_cache_folio+0x470/0x7e0 [ 106.537198][ T5898] erofs_bread+0x16f/0x630 [ 106.541815][ T5898] erofs_namei+0x28c/0xf00 [ 106.546368][ T5898] erofs_lookup+0x135/0x310 [ 106.550936][ T5898] path_openat+0x10b8/0x3190 [ 106.555718][ T5898] do_filp_open+0x1c5/0x3d0 [ 106.560333][ T5898] do_sys_openat2+0x12c/0x1c0 [ 106.565113][ T5898] __x64_sys_open+0x11f/0x140 [ 106.569990][ T5898] do_syscall_64+0x55/0xb0 [ 106.574575][ T5898] page last free stack trace: [ 106.579288][ T5898] free_unref_page_prepare+0x7ce/0x8e0 [ 106.585159][ T5898] free_unref_page+0x32/0x2e0 [ 106.589909][ T5898] __slab_free+0x35e/0x410 [ 106.594539][ T5898] qlist_free_all+0x75/0xe0 [ 106.599184][ T5898] kasan_quarantine_reduce+0x143/0x160 [ 106.605031][ T5898] __kasan_slab_alloc+0x22/0x80 [ 106.610025][ T5898] slab_post_alloc_hook+0x6e/0x4d0 [ 106.615292][ T5898] kmem_cache_alloc+0x11e/0x2e0 [ 106.621052][ T5898] ptlock_alloc+0x20/0x70 [ 106.625603][ T5898] pte_alloc_one+0xce/0x540 [ 106.630179][ T5898] __pte_alloc+0x22/0x2a0 [ 106.634741][ T5898] handle_mm_fault+0x3cc3/0x4920 [ 106.640015][ T5898] do_user_addr_fault+0x738/0x12e0 [ 106.645916][ T5898] exc_page_fault+0x67/0x110 [ 106.650841][ T5898] asm_exc_page_fault+0x26/0x30 [ 106.656101][ T5898] Modules linked in: [ 106.660132][ T5898] CPU: 0 PID: 5898 Comm: syz-executor Not tainted syzkaller #0 [ 106.667866][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.678176][ T5898] Call Trace: [ 106.681666][ T5898] [ 106.684664][ T5898] dump_stack_lvl+0x16c/0x230 [ 106.689376][ T5898] ? show_regs_print_info+0x20/0x20 [ 106.694622][ T5898] ? swiotlb_print_info+0x70/0x70 [ 106.699889][ T5898] bad_page+0x14b/0x170 [ 106.704060][ T5898] free_unref_page_prepare+0x887/0x8e0 [ 106.709672][ T5898] free_unref_page+0x32/0x2e0 [ 106.714415][ T5898] ? __folio_put+0xef/0x210 [ 106.719043][ T5898] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 106.725855][ T5898] erofs_shrink_workstation+0x118/0x290 [ 106.731592][ T5898] ? erofs_shrinker_unregister+0x170/0x170 [ 106.737854][ T5898] ? io_schedule+0xd0/0xd0 [ 106.742670][ T5898] ? kobject_put+0x43c/0x470 [ 106.747737][ T5898] erofs_shrinker_unregister+0x5d/0x170 [ 106.753446][ T5898] erofs_put_super+0x4e/0x150 [ 106.758652][ T5898] ? erofs_free_inode+0xb0/0xb0 [ 106.763645][ T5898] generic_shutdown_super+0x134/0x2b0 [ 106.769519][ T5898] kill_block_super+0x44/0x90 [ 106.774302][ T5898] erofs_kill_sb+0x4c/0x140 [ 106.779009][ T5898] deactivate_locked_super+0x97/0x100 [ 106.784409][ T5898] cleanup_mnt+0x429/0x4c0 [ 106.788975][ T5898] task_work_run+0x1ce/0x250 [ 106.793599][ T5898] ? task_work_cancel+0x240/0x240 [ 106.798663][ T5898] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.804325][ T5898] exit_to_user_mode_loop+0xe6/0x110 [ 106.809636][ T5898] exit_to_user_mode_prepare+0xf6/0x180 [ 106.815228][ T5898] syscall_exit_to_user_mode+0x1a/0x50 [ 106.820800][ T5898] do_syscall_64+0x61/0xb0 [ 106.825327][ T5898] ? clear_bhb_loop+0x40/0x90 [ 106.830025][ T5898] ? clear_bhb_loop+0x40/0x90 [ 106.834836][ T5898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.840770][ T5898] RIP: 0033:0x7fb9df5901f7 [ 106.845315][ T5898] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 106.865216][ T5898] RSP: 002b:00007fff6f5d49b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.873677][ T5898] RAX: 0000000000000000 RBX: 00007fb9df611d7d RCX: 00007fb9df5901f7 [ 106.881761][ T5898] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6f5d4a70 [ 106.889837][ T5898] RBP: 00007fff6f5d4a70 R08: 0000000000000000 R09: 0000000000000000 [ 106.897918][ T5898] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff6f5d5b00 [ 106.905917][ T5898] R13: 00007fb9df611d7d R14: 0000000000019f2a R15: 00007fff6f5d5b40 [ 106.914016][ T5898] [ 106.918426][ T5898] Disabling lock debugging due to kernel taint [ 107.553744][ T5101] Bluetooth: hci0: command tx timeout