Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. 2025/11/13 23:57:51 parsed 1 programs [ 57.597356][ T4189] cgroup: Unknown subsys name 'net' [ 57.703749][ T4189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.231537][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.005999][ T4228] chnl_net:caif_netlink_parms(): no params data found [ 62.070265][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.077872][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.087441][ T4228] device bridge_slave_0 entered promiscuous mode [ 62.096814][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.103931][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.113365][ T4228] device bridge_slave_1 entered promiscuous mode [ 62.142549][ T4228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.155434][ T4228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.188430][ T4228] team0: Port device team_slave_0 added [ 62.196392][ T4228] team0: Port device team_slave_1 added [ 62.221089][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.228134][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.254343][ T4228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.267573][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.274531][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.305025][ T4228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.348684][ T4228] device hsr_slave_0 entered promiscuous mode [ 62.355484][ T4228] device hsr_slave_1 entered promiscuous mode [ 62.486421][ T4228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.498090][ T4228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.507781][ T4228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.517957][ T4228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.546051][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.553251][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.561126][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.568237][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.625671][ T4228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.643501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.659280][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.669560][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.688608][ T4228] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.700616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.711292][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.718500][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.731143][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.739757][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.746845][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.763683][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.779964][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.789490][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.799288][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.811214][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.823463][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.978238][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.985642][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.998579][ T4228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.014321][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.023258][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.040749][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.049302][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.057887][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.065514][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.076156][ T4228] device veth0_vlan entered promiscuous mode [ 63.086285][ T4228] device veth1_vlan entered promiscuous mode [ 63.102999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.111575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.119883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.128345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.138839][ T4228] device veth0_macvtap entered promiscuous mode [ 63.148222][ T4228] device veth1_macvtap entered promiscuous mode [ 63.161519][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.172227][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.179757][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.189094][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.197011][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.205338][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.214010][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.222944][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.247223][ T4228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.256051][ T4228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.264737][ T4228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.273844][ T4228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.121020][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.134464][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.152157][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.175315][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.184403][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.194435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/11/13 23:58:00 executed programs: 0 [ 64.848361][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 64.911523][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.918758][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.927090][ T4287] device bridge_slave_0 entered promiscuous mode [ 64.936417][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.943546][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.951900][ T4287] device bridge_slave_1 entered promiscuous mode [ 64.989618][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.001436][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.031995][ T4287] team0: Port device team_slave_0 added [ 65.040150][ T4287] team0: Port device team_slave_1 added [ 65.063681][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.070897][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.097800][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.112048][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.119137][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.145397][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.184719][ T4287] device hsr_slave_0 entered promiscuous mode [ 65.200645][ T4287] device hsr_slave_1 entered promiscuous mode [ 65.208227][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.216165][ T4287] Cannot create hsr debugfs directory [ 65.303508][ T4287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.786692][ T4302] Bluetooth: hci0: command 0x0409 tx timeout [ 68.822536][ T4287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.866146][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 68.874746][ T4287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.943004][ T4287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.050094][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.060200][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.070045][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.081947][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.140841][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.152952][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.160952][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.187009][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.197303][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.206247][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.214529][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.221601][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.229541][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.240222][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.250235][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.258707][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.265796][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.290387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.302375][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.313673][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.322796][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.331481][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.344535][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.355186][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.367876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.377234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.402252][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.410728][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.421203][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.523564][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.531464][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.544551][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.570019][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.580637][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.604244][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.612515][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.622217][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.630405][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.640335][ T4287] device veth0_vlan entered promiscuous mode [ 69.658042][ T4287] device veth1_vlan entered promiscuous mode [ 69.669573][ T1167] device hsr_slave_0 left promiscuous mode [ 69.676224][ T1167] device hsr_slave_1 left promiscuous mode [ 69.683624][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.692243][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.700776][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.708231][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.715824][ T1167] device bridge_slave_1 left promiscuous mode [ 69.722557][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.734245][ T1167] device bridge_slave_0 left promiscuous mode [ 69.740629][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.757344][ T1167] device veth1_macvtap left promiscuous mode [ 69.763470][ T1167] device veth0_macvtap left promiscuous mode [ 69.769687][ T1167] device veth1_vlan left promiscuous mode [ 69.775594][ T1167] device veth0_vlan left promiscuous mode [ 69.912060][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 69.928260][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 69.940966][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.954176][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.005550][ T1167] bond0 (unregistering): Released all slaves [ 70.072460][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.080672][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.089043][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.098116][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.108360][ T4287] device veth0_macvtap entered promiscuous mode [ 70.117602][ T4287] device veth1_macvtap entered promiscuous mode [ 70.137878][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.152210][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.160946][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.169718][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.177752][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.187149][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.195593][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.204497][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.215513][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.224611][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.233579][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.242529][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.304902][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.329340][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.331474][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.338711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.352723][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.367313][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.408512][ T4272] [ 70.410882][ T4272] ===================================== [ 70.416430][ T4272] WARNING: bad unlock balance detected! [ 70.421973][ T4272] syzkaller #0 Not tainted [ 70.426393][ T4272] ------------------------------------- [ 70.431949][ T4272] kworker/u5:2/4272 is trying to release lock (&chan->lock) at: [ 70.439600][ T4272] [] l2cap_recv_frame+0xd09/0x7a10 [ 70.446302][ T4272] but there are no more locks to release! [ 70.452029][ T4272] [ 70.452029][ T4272] other info that might help us debug this: [ 70.460098][ T4272] 2 locks held by kworker/u5:2/4272: [ 70.465386][ T4272] #0: ffff8880251cc138 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 70.475772][ T4272] #1: ffffc9000353fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 70.487194][ T4272] [ 70.487194][ T4272] stack backtrace: [ 70.493087][ T4272] CPU: 0 PID: 4272 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 70.500644][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.510708][ T4272] Workqueue: hci0 hci_rx_work [ 70.515411][ T4272] Call Trace: [ 70.518699][ T4272] [ 70.521643][ T4272] dump_stack_lvl+0x168/0x230 [ 70.526338][ T4272] ? show_regs_print_info+0x20/0x20 [ 70.531556][ T4272] ? l2cap_recv_frame+0xd09/0x7a10 [ 70.536684][ T4272] lock_release+0x52f/0x870 [ 70.541223][ T4272] ? l2cap_recv_frame+0xd09/0x7a10 [ 70.546349][ T4272] ? __lock_acquire+0x7c60/0x7c60 [ 70.551392][ T4272] ? lock_chain_count+0x20/0x20 [ 70.556263][ T4272] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 70.562266][ T4272] __mutex_unlock_slowpath+0xb3/0x6a0 [ 70.567672][ T4272] ? __local_bh_enable_ip+0x12a/0x1b0 [ 70.573065][ T4272] ? mutex_unlock+0x10/0x10 [ 70.577586][ T4272] ? l2cap_sock_recv_cb+0x18b/0x1e0 [ 70.582800][ T4272] ? l2cap_sock_recv_cb+0x18b/0x1e0 [ 70.588016][ T4272] l2cap_recv_frame+0xd09/0x7a10 [ 70.592976][ T4272] ? l2cap_recv_frag+0x290/0x290 [ 70.597928][ T4272] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 70.603575][ T4272] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 70.609492][ T4272] ? mutex_unlock+0x10/0x10 [ 70.614011][ T4272] ? l2cap_recv_acldata+0x633/0x17c0 [ 70.619308][ T4272] hci_rx_work+0x4a4/0xa10 [ 70.623750][ T4272] process_one_work+0x863/0x1000 [ 70.628704][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 70.634354][ T4272] ? lockdep_hardirqs_off+0x70/0x100 [ 70.639652][ T4272] ? _raw_spin_lock_irq+0xab/0xe0 [ 70.644691][ T4272] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 70.650078][ T4272] ? wq_worker_running+0x97/0x170 [ 70.655139][ T4272] worker_thread+0xaa8/0x12a0 [