Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:34 parsed 1 programs syzkaller login: [ 35.253753][ T4050] cgroup: Unknown subsys name 'net' [ 35.548592][ T4050] cgroup: Unknown subsys name 'rlimit' [ 35.830690][ T4050] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.712778][ T364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.714182][ T364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.716395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.730158][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.731451][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.733082][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.244874][ T4100] chnl_net:caif_netlink_parms(): no params data found [ 40.267440][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.268672][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.270137][ T4100] device bridge_slave_0 entered promiscuous mode [ 40.272633][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.273883][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.275615][ T4100] device bridge_slave_1 entered promiscuous mode [ 40.284653][ T4100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.287845][ T4100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.295872][ T4100] team0: Port device team_slave_0 added [ 40.297950][ T4100] team0: Port device team_slave_1 added [ 40.305684][ T4100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.306861][ T4100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.310779][ T4100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.313340][ T4100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.314336][ T4100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.318407][ T4100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.376213][ T4100] device hsr_slave_0 entered promiscuous mode [ 40.425154][ T4100] device hsr_slave_1 entered promiscuous mode [ 40.507257][ T4100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.546516][ T4100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.576069][ T4100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.676797][ T4100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.747730][ T4100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.752836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.754500][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.759264][ T4100] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.761992][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.763625][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.767729][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.768969][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.771464][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.773849][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.776492][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.777938][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.779095][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.781844][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.785331][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.789070][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.790920][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.792599][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.797523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.799181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.801321][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.803011][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.807395][ T4100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.809421][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.813365][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.814881][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.854144][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.855491][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.859957][ T4100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.867206][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.868857][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.875596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.877344][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.878871][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.880426][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.882651][ T4100] device veth0_vlan entered promiscuous mode [ 40.887255][ T4100] device veth1_vlan entered promiscuous mode [ 40.894905][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.896398][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.897896][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.899414][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.902893][ T4100] device veth0_macvtap entered promiscuous mode [ 40.907286][ T4100] device veth1_macvtap entered promiscuous mode [ 40.913528][ T4100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.914737][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.916836][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.918215][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.919711][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.923146][ T4100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.924421][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.926161][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.930451][ T4100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.931827][ T4100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.933192][ T4100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.934492][ T4100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:41 executed programs: 0 [ 41.481259][ T9] ODEBUG: Out of memory. ODEBUG disabled [ 41.524046][ T4141] chnl_net:caif_netlink_parms(): no params data found [ 41.530533][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.549290][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.550465][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.551977][ T4141] device bridge_slave_0 entered promiscuous mode [ 41.553805][ T4141] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.554904][ T4141] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.557188][ T4141] device bridge_slave_1 entered promiscuous mode [ 41.564589][ T4141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.567107][ T4141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.574096][ T4141] team0: Port device team_slave_0 added [ 41.575828][ T4141] team0: Port device team_slave_1 added [ 41.582234][ T4141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.583362][ T4141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.590056][ T4141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.592512][ T4141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.593635][ T4141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.598052][ T4141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.665910][ T4141] device hsr_slave_0 entered promiscuous mode [ 41.685527][ T4141] device hsr_slave_1 entered promiscuous mode [ 41.745060][ T4141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.746396][ T4141] Cannot create hsr debugfs directory [ 43.365416][ T4138] Bluetooth: hci1: command 0x0409 tx timeout [ 44.078380][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.454994][ T4138] Bluetooth: hci1: command 0x041b tx timeout [ 46.648106][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.698544][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.534997][ T4138] Bluetooth: hci1: command 0x040f tx timeout [ 47.760804][ T4141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.806677][ T4141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.866101][ T4141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.906089][ T4141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.967975][ T4141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.971560][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.973031][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.975784][ T4141] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.978244][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.979770][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.981160][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.982263][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.983500][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.987019][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.988641][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.990009][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.991124][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.993461][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.998037][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.000597][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.002196][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.003809][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.007293][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.008889][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.011668][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.013262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.016810][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.018307][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.020706][ T4141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.055747][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.057034][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.060252][ T4141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.066069][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.067709][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.073794][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.076261][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.078202][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.079612][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.081333][ T4141] device veth0_vlan entered promiscuous mode [ 48.084405][ T4141] device veth1_vlan entered promiscuous mode [ 48.091378][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.092909][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.094740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.096740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.099112][ T4141] device veth0_macvtap entered promiscuous mode [ 48.101399][ T4141] device veth1_macvtap entered promiscuous mode [ 48.106839][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.108564][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.110429][ T4141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.111642][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.113095][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.114505][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.116646][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.119008][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.120666][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.122408][ T4141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.123598][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.125513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.127924][ T4141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.129283][ T4141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.130694][ T4141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.132075][ T4141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.148917][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.152999][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.154863][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.156921][ T364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.158103][ T364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.159713][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:48 executed programs: 2 [ 48.177324][ T4220] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 48.178556][ T4220] Modules linked in: [ 48.179189][ T4220] CPU: 1 PID: 4220 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0 [ 48.180429][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 48.181996][ T4220] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 48.183144][ T4220] pc : __htab_map_lookup_and_delete_batch+0x2d0/0x177c [ 48.184185][ T4220] lr : __htab_map_lookup_and_delete_batch+0x2a4/0x177c [ 48.185205][ T4220] sp : ffff80001fe47920 [ 48.185819][ T4220] x29: ffff80001fe47b20 x28: 0000000000000000 x27: 00000000200003a0 [ 48.187011][ T4220] x26: ffff0000d5e5b000 x25: ffff80001fe47c40 x24: ffff80001fe47ac0 [ 48.188182][ T4220] x23: 1ffff00003fc8f58 x22: 00000000200003a0 x21: 00000000fffffff2 [ 48.189338][ T4220] x20: 0000000000000000 x19: dfff800000000000 x18: 0000000000000000 [ 48.190470][ T4220] x17: 0000000000000000 x16: ffff80000859c014 x15: 0000000000000023 [ 48.191749][ T4220] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 48.192977][ T4220] x11: 0000000000000000 x10: 0000000000000000 x9 : 00000000200003a0 [ 48.194213][ T4220] x8 : 0000ffffffffffff x7 : ffff800008750ed4 x6 : 0000000000000000 [ 48.195394][ T4220] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 48.196619][ T4220] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 48.197787][ T4220] Call trace: [ 48.198354][ T4220] __htab_map_lookup_and_delete_batch+0x2d0/0x177c [ 48.199408][ T4220] htab_map_lookup_batch+0x40/0x54 [ 48.200248][ T4220] bpf_map_do_batch+0x260/0x530 [ 48.200990][ T4220] __sys_bpf+0x368/0x5f0 [ 48.201629][ T4220] __arm64_sys_bpf+0x80/0x98 [ 48.202309][ T4220] invoke_syscall+0x98/0x2b8 [ 48.203020][ T4220] el0_svc_common+0x138/0x258 [ 48.203721][ T4220] do_el0_svc+0x58/0x14c [ 48.204349][ T4220] el0_svc+0x78/0x1e0 [ 48.204940][ T4220] el0t_64_sync_handler+0xcc/0xe4 [ 48.205700][ T4220] el0t_64_sync+0x1a0/0x1a4 [ 48.206339][ T4220] Code: ea28037f 9a9f02c9 d503229f b8000935 (2a1503e1) [ 48.207383][ T4220] ---[ end trace 520d7d050a4b683f ]--- [ 48.399853][ T4220] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 48.401067][ T4220] SMP: stopping secondary CPUs [ 48.401862][ T4220] Kernel Offset: disabled [ 48.402587][ T4220] CPU features: 0x8,000003c1,7d33ffd9 [ 48.403497][ T4220] Memory Limit: none [ 48.589606][ T4220] Rebooting in 86400 seconds..