Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 92.209371][ T27] cfg80211: failed to load regulatory.db 2026/01/04 12:05:26 parsed 1 programs [ 95.553720][ T5779] cgroup: Unknown subsys name 'net' [ 95.695357][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.499496][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.303243][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.313466][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.322040][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.330951][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.339270][ T5811] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.347429][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.179267][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 102.298174][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.306027][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.313359][ T5841] bridge_slave_0: entered allmulticast mode [ 102.320561][ T5841] bridge_slave_0: entered promiscuous mode [ 102.331006][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.338253][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.345414][ T5841] bridge_slave_1: entered allmulticast mode [ 102.353718][ T5841] bridge_slave_1: entered promiscuous mode [ 102.386334][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.398446][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.451213][ T5841] team0: Port device team_slave_0 added [ 102.460610][ T5841] team0: Port device team_slave_1 added [ 102.504739][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.511802][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.537994][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.551079][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.558145][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.584148][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.631731][ T5841] hsr_slave_0: entered promiscuous mode [ 102.638389][ T5841] hsr_slave_1: entered promiscuous mode [ 102.827898][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.840254][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.869824][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.881965][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.933080][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.940399][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.948703][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.955874][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.050163][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.071272][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.082397][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.099686][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.126986][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.134165][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.149385][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.156514][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.408302][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.452104][ T5841] veth0_vlan: entered promiscuous mode [ 103.465165][ T5841] veth1_vlan: entered promiscuous mode [ 103.498232][ T5841] veth0_macvtap: entered promiscuous mode [ 103.509198][ T5841] veth1_macvtap: entered promiscuous mode [ 103.528243][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.544077][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.560051][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.571018][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.580007][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.589302][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.748162][ T2953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.479665][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.488777][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.532595][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.542997][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/04 12:05:38 executed programs: 0 [ 105.229635][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.239926][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.248919][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.257946][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.265891][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.274186][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.450216][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 105.528434][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.535643][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.543218][ T5881] bridge_slave_0: entered allmulticast mode [ 105.550429][ T5881] bridge_slave_0: entered promiscuous mode [ 105.559095][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.566254][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.574079][ T5881] bridge_slave_1: entered allmulticast mode [ 105.581974][ T5881] bridge_slave_1: entered promiscuous mode [ 105.618620][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.630639][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.669736][ T5881] team0: Port device team_slave_0 added [ 105.679842][ T5881] team0: Port device team_slave_1 added [ 105.710613][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.717707][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.744399][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.759940][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.767063][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.793124][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.837898][ T5881] hsr_slave_0: entered promiscuous mode [ 105.844510][ T5881] hsr_slave_1: entered promiscuous mode [ 105.851516][ T5881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.859595][ T5881] Cannot create hsr debugfs directory [ 106.212000][ T2953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.327610][ T5081] Bluetooth: hci0: command tx timeout [ 108.789258][ T2953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.844188][ T2953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.417131][ T5081] Bluetooth: hci0: command tx timeout [ 109.796266][ T2953] hsr_slave_0: left promiscuous mode [ 109.805638][ T2953] hsr_slave_1: left promiscuous mode [ 109.815287][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.824046][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.834950][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.843980][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.853263][ T2953] bridge_slave_1: left allmulticast mode [ 109.860272][ T2953] bridge_slave_1: left promiscuous mode [ 109.867021][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.883187][ T2953] bridge_slave_0: left allmulticast mode [ 109.889082][ T2953] bridge_slave_0: left promiscuous mode [ 109.894901][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.933662][ T2953] veth1_macvtap: left promiscuous mode [ 109.940949][ T2953] veth0_macvtap: left promiscuous mode [ 109.948291][ T2953] veth1_vlan: left promiscuous mode [ 109.953899][ T2953] veth0_vlan: left promiscuous mode [ 110.419242][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 110.459660][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 110.495446][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.544529][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.866953][ T2953] bond0 (unregistering): Released all slaves [ 110.958782][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.969751][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.980645][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.992788][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.113709][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.144466][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.166346][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.173668][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.186095][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.193320][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.455747][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.486751][ T5081] Bluetooth: hci0: command tx timeout [ 111.505046][ T5881] veth0_vlan: entered promiscuous mode [ 111.517120][ T5881] veth1_vlan: entered promiscuous mode [ 111.562089][ T5881] veth0_macvtap: entered promiscuous mode [ 111.574668][ T5881] veth1_macvtap: entered promiscuous mode [ 111.596060][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.627927][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.640398][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.650294][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.659517][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.668300][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.764167][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.772164][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.819117][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.827428][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.884995][ T5930] syz.0.17[5930]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 111.899944][ T5930] loop0: detected capacity change from 0 to 16 [ 111.919615][ T5930] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.931964][ T5930] syz.0.17: attempt to access beyond end of device [ 111.931964][ T5930] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 111.951268][ T5930] syz.0.17: attempt to access beyond end of device [ 111.951268][ T5930] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 111.991170][ T5930] syz.0.17: attempt to access beyond end of device [ 111.991170][ T5930] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 112.024939][ T5881] BUG: Bad page state in process syz-executor pfn:1e7f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.032525][ T5881] page:ffffea000079fe40 refcount:0 mapcount:0 mapping:ffff88805e9507c8 index:0x2 pfn:0x1e7f9 [ 112.042909][ T5881] aops:z_erofs_cache_aops ino:0 [ 112.048202][ T5881] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 112.056442][ T5881] page_type: 0xffffffff() [ 112.061076][ T5881] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805e9507c8 [ 112.070731][ T5881] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 112.079501][ T5881] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 112.086941][ T5881] page_owner tracks the page as allocated [ 112.092939][ T5881] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5930, tgid 5930 (syz.0.17), ts 111931340821, free_ts 111911807525 [ 112.114995][ T5881] post_alloc_hook+0x1cd/0x210 [ 112.119878][ T5881] get_page_from_freelist+0x195c/0x19f0 [ 112.125511][ T5881] __alloc_pages+0x1e3/0x460 [ 112.130377][ T5881] z_erofs_do_read_page+0x20c0/0x3680 [ 112.135813][ T5881] z_erofs_readahead+0x862/0xd50 [ 112.140909][ T5881] read_pages+0x177/0x840 [ 112.145318][ T5881] page_cache_ra_unbounded+0x692/0x770 [ 112.151181][ T5881] force_page_cache_ra+0x2c1/0x320 [ 112.156921][ T5881] generic_fadvise+0x44f/0x730 [ 112.161844][ T5881] __x64_sys_fadvise64+0x140/0x180 [ 112.167106][ T5881] do_syscall_64+0x55/0xb0 [ 112.171587][ T5881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.177837][ T5881] page last free stack trace: [ 112.182563][ T5881] free_unref_page_prepare+0x7ce/0x8e0 [ 112.188172][ T5881] free_unref_page+0x32/0x2e0 [ 112.192911][ T5881] __slab_free+0x35e/0x410 [ 112.197441][ T5881] qlist_free_all+0x75/0xe0 [ 112.202015][ T5881] kasan_quarantine_reduce+0x143/0x160 [ 112.207829][ T5881] __kasan_slab_alloc+0x22/0x80 [ 112.212726][ T5881] slab_post_alloc_hook+0x6e/0x4d0 [ 112.217924][ T5881] __kmem_cache_alloc_node+0x13e/0x260 [ 112.223435][ T5881] kmalloc_trace+0x2a/0xe0 [ 112.227941][ T5881] kernfs_fop_open+0x3f5/0xcc0 [ 112.232752][ T5881] do_dentry_open+0x8c6/0x1500 [ 112.237614][ T5881] path_openat+0x274b/0x3190 [ 112.242259][ T5881] do_filp_open+0x1c5/0x3d0 [ 112.246845][ T5881] do_sys_openat2+0x12c/0x1c0 [ 112.251578][ T5881] __x64_sys_openat+0x139/0x160 [ 112.256473][ T5881] do_syscall_64+0x55/0xb0 [ 112.261491][ T5881] Modules linked in: [ 112.265462][ T5881] CPU: 1 PID: 5881 Comm: syz-executor Not tainted syzkaller #0 [ 112.273040][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.283136][ T5881] Call Trace: [ 112.286441][ T5881] [ 112.289407][ T5881] dump_stack_lvl+0x16c/0x230 [ 112.294139][ T5881] ? show_regs_print_info+0x20/0x20 [ 112.299381][ T5881] ? swiotlb_print_info+0x70/0x70 [ 112.304449][ T5881] bad_page+0x14b/0x170 [ 112.308639][ T5881] free_unref_page_prepare+0x887/0x8e0 [ 112.314138][ T5881] free_unref_page+0x32/0x2e0 [ 112.318861][ T5881] ? __folio_put+0xef/0x210 [ 112.323396][ T5881] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 112.329847][ T5881] erofs_shrink_workstation+0x118/0x290 [ 112.335422][ T5881] ? erofs_shrinker_unregister+0x170/0x170 [ 112.341267][ T5881] ? io_schedule+0xd0/0xd0 [ 112.345724][ T5881] ? kobject_put+0x43c/0x470 [ 112.350345][ T5881] erofs_shrinker_unregister+0x5d/0x170 [ 112.355930][ T5881] erofs_put_super+0x4e/0x150 [ 112.360647][ T5881] ? erofs_free_inode+0xb0/0xb0 [ 112.365546][ T5881] generic_shutdown_super+0x134/0x2b0 [ 112.370965][ T5881] kill_block_super+0x44/0x90 [ 112.375681][ T5881] erofs_kill_sb+0x4c/0x140 [ 112.380227][ T5881] deactivate_locked_super+0x97/0x100 [ 112.385637][ T5881] cleanup_mnt+0x429/0x4c0 [ 112.390084][ T5881] task_work_run+0x1ce/0x250 [ 112.394711][ T5881] ? task_work_cancel+0x240/0x240 [ 112.399774][ T5881] ? exit_to_user_mode_loop+0x3b/0x110 [ 112.405283][ T5881] exit_to_user_mode_loop+0xe6/0x110 [ 112.410603][ T5881] exit_to_user_mode_prepare+0xf6/0x180 [ 112.416189][ T5881] syscall_exit_to_user_mode+0x1a/0x50 [ 112.421685][ T5881] do_syscall_64+0x61/0xb0 [ 112.426126][ T5881] ? clear_bhb_loop+0x40/0x90 [ 112.430832][ T5881] ? clear_bhb_loop+0x40/0x90 [ 112.435573][ T5881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.441537][ T5881] RIP: 0033:0x7fab0d990a77 [ 112.446004][ T5881] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 112.465645][ T5881] RSP: 002b:00007ffed2fe1f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.474099][ T5881] RAX: 0000000000000000 RBX: 00007fab0da13d7d RCX: 00007fab0d990a77 [ 112.482146][ T5881] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed2fe2050 [ 112.490153][ T5881] RBP: 00007ffed2fe2050 R08: 0000000000000000 R09: 0000000000000000 [ 112.498159][ T5881] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed2fe30e0 [ 112.506159][ T5881] R13: 00007fab0da13d7d R14: 000000000001b547 R15: 00007ffed2fe3120 [ 112.514177][ T5881] [ 112.517375][ T5881] Disabling lock debugging due to kernel taint