[syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit:    ea1013c15392 Merge tag 'bpf-fixes' of git://git.kernel.org..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=179abdc2580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=513255d80ab78f2b
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image (non-bootable): https://storage.googleapis.com/syzbot-assets/d900f083ada3/non_bootable_disk-ea1013c1.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/ea4d0b50128d/vmlinux-ea1013c1.xz
kernel image: https://storage.googleapis.com/syzbot-assets/f2e7f1524121/bzImage-ea1013c1.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com

loop0: detected capacity change from 0 to 32768
=======================================================
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
JBD2: Ignoring recovery information on journal
ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
(syz.0.0,5341,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -28
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:1383!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:ocfs2_block_group_set_bits+0x857/0x980 fs/ocfs2/suballoc.c:1383
Code: 07 fe c1 38 c1 0f 8c b8 fe ff ff 4c 89 e7 89 f3 e8 ce ae 76 fe 89 de e9 a7 fe ff ff e8 82 c7 0e fe 90 0f 0b e8 7a c7 0e fe 90 <0f> 0b f3 0f 1e fa 65 8b 1d b0 65 ec 0e bf 07 00 00 00 89 de e8 a0
RSP: 0018:ffffc9000ec973e0 EFLAGS: 00010246
RAX: ffffffff83b2fa76 RBX: 0000000000000001 RCX: 0000000000100000
RDX: ffffc90020802000 RSI: 00000000000fffff RDI: 0000000000100000
RBP: ffffc9000ec97500 R08: 0000000000000007 R09: 00000000000000f8
R10: 00000000fffffffc R11: 0000000000000002 R12: 1ffff1100253aa01
R13: 00000000000000f8 R14: ffff8880478e4fb8 R15: dffffc0000000000
FS:  00007f460e7df6c0(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f46027ff000 CR3: 0000000011427000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 ocfs2_move_extent fs/ocfs2/move_extents.c:693 [inline]
 __ocfs2_move_extents_range fs/ocfs2/move_extents.c:865 [inline]
 ocfs2_move_extents+0x2c39/0x3dd0 fs/ocfs2/move_extents.c:937
 ocfs2_ioctl_move_extents+0x568/0x740 fs/ocfs2/move_extents.c:1069
 ocfs2_ioctl+0x191/0x750 fs/ocfs2/ioctl.c:942
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f460d98f7c9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f460e7df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f460dbe5fa0 RCX: 00007f460d98f7c9
RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000004
RBP: 00007f460da13f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f460dbe6038 R14: 00007f460dbe5fa0 R15: 00007fff6d300b38
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ocfs2_block_group_set_bits+0x857/0x980 fs/ocfs2/suballoc.c:1383
Code: 07 fe c1 38 c1 0f 8c b8 fe ff ff 4c 89 e7 89 f3 e8 ce ae 76 fe 89 de e9 a7 fe ff ff e8 82 c7 0e fe 90 0f 0b e8 7a c7 0e fe 90 <0f> 0b f3 0f 1e fa 65 8b 1d b0 65 ec 0e bf 07 00 00 00 89 de e8 a0
RSP: 0018:ffffc9000ec973e0 EFLAGS: 00010246
RAX: ffffffff83b2fa76 RBX: 0000000000000001 RCX: 0000000000100000
RDX: ffffc90020802000 RSI: 00000000000fffff RDI: 0000000000100000
RBP: ffffc9000ec97500 R08: 0000000000000007 R09: 00000000000000f8
R10: 00000000fffffffc R11: 0000000000000002 R12: 1ffff1100253aa01
R13: 00000000000000f8 R14: ffff8880478e4fb8 R15: dffffc0000000000
FS:  00007f460e7df6c0(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f46027ff000 CR3: 0000000011427000 CR4: 0000000000352ef0


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title

If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)

If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report

If you want to undo deduplication, reply with:
#syz undup

Re: [syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

syzbot has found a reproducer for the following issue on:

HEAD commit:    8f0b4cce4481 Linux 6.19-rc1
git tree:       git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci
console output: https://syzkaller.appspot.com/x/log.txt?x=12eb8bb4580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=8a8594efdc14f07a
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=14838f1a580000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=16eb8bb4580000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/cd4f5f43efc8/disk-8f0b4cce.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/aafb35ac3a3c/vmlinux-8f0b4cce.xz
kernel image: https://storage.googleapis.com/syzbot-assets/d221fae4ab17/Image-8f0b4cce.gz.xz
mounted in repro: https://storage.googleapis.com/syzbot-assets/2c226c2e3d21/mount_0.gz
  fsck result: OK (log: https://syzkaller.appspot.com/x/fsck.log?x=10838f1a580000)

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com

=======================================================
JBD2: Ignoring recovery information on journal
ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
------------[ cut here ]------------
kernel BUG at fs/ocfs2/suballoc.c:1383!
Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6734 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ocfs2_block_group_set_bits+0x784/0x8ec fs/ocfs2/suballoc.c:1383
lr : ocfs2_block_group_set_bits+0x784/0x8ec fs/ocfs2/suballoc.c:1383
sp : ffff8000a3eb7260
x29: ffff8000a3eb7320 x28: ffff0000f60124f8 x27: ffff0000ca05c000
x26: ffff0000eaee1b00 x25: ffff0000c5c8c000 x24: 1ffff000147d6e58
x23: ffff0000c5c8c00c x22: dfff800000000000 x21: 0000000000000001
x20: 0000000000000002 x19: 0000000000000000 x18: 00000000ffffffff
x17: ffff800082225fb0 x16: ffff80008af67980 x15: 0000000000000001
x14: 0000000000000000 x13: 00000000fffffffc x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000c8f1d580 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000002 x4 : 0000000000000001 x3 : ffff0000c1707d98
x2 : ffff0000c5c8c000 x1 : 0000000000000001 x0 : 0000000000000002
Call trace:
 ocfs2_block_group_set_bits+0x784/0x8ec fs/ocfs2/suballoc.c:1383 (P)
 ocfs2_move_extent fs/ocfs2/move_extents.c:693 [inline]
 __ocfs2_move_extents_range fs/ocfs2/move_extents.c:865 [inline]
 ocfs2_move_extents+0x213c/0x2e78 fs/ocfs2/move_extents.c:937
 ocfs2_ioctl_move_extents+0x448/0x614 fs/ocfs2/move_extents.c:1069
 ocfs2_ioctl+0x1c4/0x738 fs/ocfs2/ioctl.c:942
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
Code: 17ffffa0 97944b2d d4210000 97944b2b (d4210000) 
---[ end trace 0000000000000000 ]---


---
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.

Re: [syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com
Tested-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com

Tested on:

commit:         dbf8fe85 Merge tag 'net-6.19-rc4' of git://git.kernel...
git tree:       https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
console output: https://syzkaller.appspot.com/x/log.txt?x=14db129a580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=8a8594efdc14f07a
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
patch:          https://syzkaller.appspot.com/x/patch.diff?x=1523429a580000

Note: testing is done by a robot and is best-effort only.

Re: [syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com
Tested-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com

Tested on:

commit:         cc3aa43b Add linux-next specific files for 20251219
git tree:       linux-next
console output: https://syzkaller.appspot.com/x/log.txt?x=14725792580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=3da5346c9fca3188
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
patch:          https://syzkaller.appspot.com/x/patch.diff?x=121407da580000

Note: testing is done by a robot and is best-effort only.

Re: [syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

Hello,

syzbot has tested the proposed patch and the reproducer did not trigger any issue:

Reported-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com
Tested-by: syzbot+7960178e777909060224@syzkaller.appspotmail.com

Tested on:

commit:         c8ebd433 Merge tag 'nfsd-6.19-2' of git://git.kernel.o..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=10b92784580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=8a8594efdc14f07a
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
patch:          https://syzkaller.appspot.com/x/patch.diff?x=1106f7b4580000

Note: testing is done by a robot and is best-effort only.

Re: [syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

SYZFAIL: failed to recv rpc

SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts.
1970/01/01 00:00:34 parsed 1 programs
[   35.368679][ T6574] cgroup: Unknown subsys name 'net'
[   35.518825][ T6574] cgroup: Unknown subsys name 'cpuset'
[   35.520855][ T6574] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   35.685173][ T6574] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   40.400277][ T6586] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.450081][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   40.451483][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   40.452760][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   40.454399][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   40.454879][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   41.019801][  T665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.021379][  T665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.031059][ T2279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.031085][ T2279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.583698][ T6649] chnl_net:caif_netlink_parms(): no params data found
[   41.609406][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.609720][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.609790][ T6649] bridge_slave_0: entered allmulticast mode
[   41.610269][ T6649] bridge_slave_0: entered promiscuous mode
[   41.611532][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.611581][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.611628][ T6649] bridge_slave_1: entered allmulticast mode
[   41.612126][ T6649] bridge_slave_1: entered promiscuous mode
[   41.769528][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.771249][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.780103][ T6649] team0: Port device team_slave_0 added
[   41.780818][ T6649] team0: Port device team_slave_1 added
[   41.790649][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.790680][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.790691][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.791516][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.791523][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   41.791533][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.807061][ T6649] hsr_slave_0: entered promiscuous mode
[   41.810815][ T6649] hsr_slave_1: entered promiscuous mode
[   41.898789][ T6649] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   41.903770][ T6649] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   41.909745][ T6649] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   41.912223][ T6649] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   41.932335][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.932389][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.932576][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.932600][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.950083][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.953039][ T6649] 8021q: adding VLAN 0 to HW filter on device team0
[   41.956166][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.962271][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.962317][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.020809][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.110437][ T6649] veth0_vlan: entered promiscuous mode
[   42.114122][ T6649] veth1_vlan: entered promiscuous mode
[   42.120282][ T6649] veth0_macvtap: entered promiscuous mode
[   42.121245][ T6649] veth1_macvtap: entered promiscuous mode
[   42.124225][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.125248][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.128701][ T2279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.134787][ T2279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.137773][ T2279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.139406][ T2279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.396071][ T3493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.448150][ T3493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.492358][ T3493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.523235][ T3493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
1970/01/01 00:00:42 executed programs: 0
[   42.620968][ T6162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   42.621402][ T6162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   42.621559][ T6162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   42.621826][ T6162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   42.622034][ T6162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   42.682551][ T6680] chnl_net:caif_netlink_parms(): no params data found
[   42.712641][ T6680] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.712724][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.712777][ T6680] bridge_slave_0: entered allmulticast mode
[   42.713184][ T6680] bridge_slave_0: entered promiscuous mode
[   42.714242][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.714283][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.714384][ T6680] bridge_slave_1: entered allmulticast mode
[   42.714776][ T6680] bridge_slave_1: entered promiscuous mode
[   42.726857][ T6680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.728599][ T6680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.735632][ T6680] team0: Port device team_slave_0 added
[   42.736314][ T6680] team0: Port device team_slave_1 added
[   42.744061][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.744082][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   42.744093][ T6680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.744597][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.744604][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   42.744616][ T6680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.763647][ T6680] hsr_slave_0: entered promiscuous mode
[   42.763978][ T6680] hsr_slave_1: entered promiscuous mode
[   42.764187][ T6680] debugfs: 'hsr0' already exists in 'hsr'
[   42.764243][ T6680] Cannot create hsr debugfs directory
[   44.657600][ T6162] Bluetooth: hci0: command tx timeout
[   45.526983][ T3493] bridge_slave_1: left allmulticast mode
[   45.527025][ T3493] bridge_slave_1: left promiscuous mode
[   45.527335][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.531267][ T3493] bridge_slave_0: left allmulticast mode
[   45.531293][ T3493] bridge_slave_0: left promiscuous mode
[   45.531707][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.690850][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.738535][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.758115][ T3493] bond0 (unregistering): Released all slaves
[   45.865531][ T3493] hsr_slave_0: left promiscuous mode
[   45.866557][ T3493] hsr_slave_1: left promiscuous mode
[   45.866799][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.866814][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.867166][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.867175][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.872105][ T3493] veth1_macvtap: left promiscuous mode
[   45.872150][ T3493] veth0_macvtap: left promiscuous mode
[   45.872196][ T3493] veth1_vlan: left promiscuous mode
[   45.872238][ T3493] veth0_vlan: left promiscuous mode
[   45.996095][ T3493] team0 (unregistering): Port device team_slave_1 removed
[   46.003774][ T3493] team0 (unregistering): Port device team_slave_0 removed
[   46.225760][ T6680] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.232604][ T6680] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.234707][ T6680] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.237167][ T6680] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.261677][ T6680] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.266957][ T6680] 8021q: adding VLAN 0 to HW filter on device team0
[   46.270074][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.270110][ T3254] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.275115][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.275153][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.284016][ T6680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.284050][ T6680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.358561][ T6680] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.368605][ T6680] veth0_vlan: entered promiscuous mode
[   46.395889][ T6680] veth1_vlan: entered promiscuous mode
[   46.404311][ T6680] veth0_macvtap: entered promiscuous mode
[   46.405230][ T6680] veth1_macvtap: entered promiscuous mode
[   46.409393][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.410386][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.414486][ T3254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.414529][ T3254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.414547][ T3254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.414559][ T3254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.444909][ T3161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.444938][ T3161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.455559][ T3254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.455589][ T3254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build1922670529=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at d6526ea3e
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115"  ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=arm64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115"  -o ./bin/linux_arm64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_arm64
aarch64-linux-gnu-g++ -o ./bin/linux_arm64/syz-executor executor/executor.cc \
	-O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_arm64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"d6526ea3e6ad9081c902859bbb80f9f840377cb4\"
/usr/lib/gcc-cross/aarch64-linux-gnu/12/../../../../aarch64-linux-gnu/bin/ld: /tmp/ccdEik0m.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0xd8): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null



Tested on:

commit:         aacb0a6d Merge tag 'pmdomain-v6.19-rc3' of git://git.k..
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=8a8594efdc14f07a
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
patch:          https://syzkaller.appspot.com/x/patch.diff?x=14b0aefc580000

Re: [syzbot] [ocfs2?] kernel BUG in ocfs2_move_extents

[syzbot]

Hello,

syzbot tried to test the proposed patch but the build/boot failed:

SYZFAIL: failed to recv rpc

SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts.
1970/01/01 00:00:33 parsed 1 programs
[   35.019899][ T6570] cgroup: Unknown subsys name 'net'
[   35.169865][ T6570] cgroup: Unknown subsys name 'cpuset'
[   35.171841][ T6570] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   35.327762][ T6570] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   38.541672][ T6576] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.821145][ T6594] chnl_net:caif_netlink_parms(): no params data found
[   38.844506][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.846159][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.847991][ T6594] bridge_slave_0: entered allmulticast mode
[   38.850088][ T6594] bridge_slave_0: entered promiscuous mode
[   38.851838][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.851911][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.851993][ T6594] bridge_slave_1: entered allmulticast mode
[   38.852444][ T6594] bridge_slave_1: entered promiscuous mode
[   38.863463][ T6594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.864431][ T6594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.871785][ T6594] team0: Port device team_slave_0 added
[   38.872531][ T6594] team0: Port device team_slave_1 added
[   38.880123][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.880146][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.880157][ T6594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.880878][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.880884][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.880896][ T6594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.900759][ T6594] hsr_slave_0: entered promiscuous mode
[   38.901496][ T6594] hsr_slave_1: entered promiscuous mode
[   39.019802][ T6594] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.022735][ T6594] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.026056][ T6594] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.030476][ T6594] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.040899][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.040944][ T6594] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.041136][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.041166][ T6594] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.060673][ T6594] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.065590][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.066991][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.072113][ T6594] 8021q: adding VLAN 0 to HW filter on device team0
[   39.075835][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.075879][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.079965][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.080006][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.130335][ T6594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.141348][ T6594] veth0_vlan: entered promiscuous mode
[   39.143085][ T6594] veth1_vlan: entered promiscuous mode
[   39.155611][ T6594] veth0_macvtap: entered promiscuous mode
[   39.156646][ T6594] veth1_macvtap: entered promiscuous mode
[   39.160570][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.162123][ T6594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.164910][ T1363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.166606][ T1363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.168083][ T1363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.170745][ T1363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.406189][ T1363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.444497][ T1363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.473743][ T1363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.524362][ T1363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.814108][ T6158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   39.815484][ T6158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   39.816766][ T6158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   39.818220][ T6158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   39.820151][ T6158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   39.937382][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.940080][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.950954][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.950985][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
1970/01/01 00:00:40 executed programs: 0
[   40.264655][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   40.266064][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   40.267409][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   40.268986][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   40.269215][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   40.322464][ T6675] chnl_net:caif_netlink_parms(): no params data found
[   40.344361][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.344447][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.344524][ T6675] bridge_slave_0: entered allmulticast mode
[   40.344957][ T6675] bridge_slave_0: entered promiscuous mode
[   40.345764][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.345802][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.345855][ T6675] bridge_slave_1: entered allmulticast mode
[   40.346260][ T6675] bridge_slave_1: entered promiscuous mode
[   40.360567][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.361585][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.369582][ T6675] team0: Port device team_slave_0 added
[   40.370426][ T6675] team0: Port device team_slave_1 added
[   40.377491][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.377520][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   40.377530][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.378071][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.378078][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   40.378092][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.396765][ T6675] hsr_slave_0: entered promiscuous mode
[   40.397130][ T6675] hsr_slave_1: entered promiscuous mode
[   40.397400][ T6675] debugfs: 'hsr0' already exists in 'hsr'
[   40.397446][ T6675] Cannot create hsr debugfs directory
[   42.338625][   T53] Bluetooth: hci0: command tx timeout
[   42.750251][ T1363] bridge_slave_1: left allmulticast mode
[   42.751718][ T1363] bridge_slave_1: left promiscuous mode
[   42.753029][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.756999][ T1363] bridge_slave_0: left allmulticast mode
[   42.757026][ T1363] bridge_slave_0: left promiscuous mode
[   42.757254][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.891188][ T1363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.930347][ T1363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.969401][ T1363] bond0 (unregistering): Released all slaves
[   43.047614][ T1363] hsr_slave_0: left promiscuous mode
[   43.048883][ T1363] hsr_slave_1: left promiscuous mode
[   43.049257][ T1363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   43.049272][ T1363] batman_adv: batadv0: Removing interface: batadv_slave_0
[   43.049958][ T1363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   43.049971][ T1363] batman_adv: batadv0: Removing interface: batadv_slave_1
[   43.058208][ T1363] veth1_macvtap: left promiscuous mode
[   43.058276][ T1363] veth0_macvtap: left promiscuous mode
[   43.061807][ T1363] veth1_vlan: left promiscuous mode
[   43.061928][ T1363] veth0_vlan: left promiscuous mode
[   43.188337][ T1363] team0 (unregistering): Port device team_slave_1 removed
[   43.196317][ T1363] team0 (unregistering): Port device team_slave_0 removed
[   43.592110][ T6675] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   43.597199][ T6675] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   43.604301][ T6675] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   43.610168][ T6675] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   43.802634][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.807211][ T6675] 8021q: adding VLAN 0 to HW filter on device team0
[   43.812470][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.812525][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.815590][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.815623][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.825587][ T6675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   43.827346][ T6675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.877183][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.956121][ T6675] veth0_vlan: entered promiscuous mode
[   43.960507][ T6675] veth1_vlan: entered promiscuous mode
[   43.967761][ T6675] veth0_macvtap: entered promiscuous mode
[   43.969411][ T6675] veth1_macvtap: entered promiscuous mode
[   43.972946][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.973874][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.977814][ T6000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.978209][ T6000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.978229][ T6000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.978242][ T6000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.017149][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.018782][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.025789][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.027411][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build4280937287=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at d6526ea3e
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115"  ./sys/syz-sysgen | grep -q false || go install -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115"  ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=arm64 go build -ldflags="-s -w -X github.com/google/syzkaller/prog.GitRevision=d6526ea3e6ad9081c902859bbb80f9f840377cb4 -X github.com/google/syzkaller/prog.gitRevisionDate=20251126-113115"  -o ./bin/linux_arm64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_arm64
aarch64-linux-gnu-g++ -o ./bin/linux_arm64/syz-executor executor/executor.cc \
	-O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include   -DGOOS_linux=1 -DGOARCH_arm64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"d6526ea3e6ad9081c902859bbb80f9f840377cb4\"
/usr/lib/gcc-cross/aarch64-linux-gnu/12/../../../../aarch64-linux-gnu/bin/ld: /tmp/ccdUkBWA.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0xd8): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
./tools/check-syzos.sh 2>/dev/null



Tested on:

commit:         aacb0a6d Merge tag 'pmdomain-v6.19-rc3' of git://git.k..
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=8a8594efdc14f07a
dashboard link: https://syzkaller.appspot.com/bug?extid=7960178e777909060224
compiler:       Debian clang version 20.1.8 (++20250708063551+0c9f909b7976-1~exp1~20250708183702.136), Debian LLD 20.1.8
userspace arch: arm64
patch:          https://syzkaller.appspot.com/x/patch.diff?x=10b44f92580000