Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. 1970/01/01 00:00:54 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:54 ignoring optional flag "type"="gce" 1970/01/01 00:00:55 parsed 1 programs 1970/01/01 00:00:55 executed programs: 0 [ 55.329592][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.331752][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.334021][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.335510][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.335848][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.409586][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 55.445073][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.445159][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.445274][ T6661] bridge_slave_0: entered allmulticast mode [ 55.446164][ T6661] bridge_slave_0: entered promiscuous mode [ 55.448151][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.448215][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.448315][ T6661] bridge_slave_1: entered allmulticast mode [ 55.449083][ T6661] bridge_slave_1: entered promiscuous mode [ 55.467060][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.468375][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.482948][ T6661] team0: Port device team_slave_0 added [ 55.484340][ T6661] team0: Port device team_slave_1 added [ 55.496871][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.496927][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.496974][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.498020][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.498045][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.498069][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.523723][ T6661] hsr_slave_0: entered promiscuous mode [ 55.525828][ T6661] hsr_slave_1: entered promiscuous mode [ 56.044302][ T271] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 56.371016][ T6661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.379280][ T6661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.383017][ T6661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.386392][ T6661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.399412][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.399499][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.399588][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.399628][ T6661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.426938][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.429370][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.438435][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.448558][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.455605][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.455689][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.456424][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.456461][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.470106][ T6661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.470184][ T6661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.541322][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.561059][ T6661] veth0_vlan: entered promiscuous mode [ 56.566389][ T6661] veth1_vlan: entered promiscuous mode [ 56.580908][ T6661] veth0_macvtap: entered promiscuous mode [ 56.582709][ T6661] veth1_macvtap: entered promiscuous mode [ 56.591968][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.595752][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.601163][ T6661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.603838][ T6661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.606708][ T6661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.609387][ T6661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.642221][ T590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.642299][ T590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.660778][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.660841][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.956353][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.107257][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.107350][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 1024 [ 57.107376][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 57.109083][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.109117][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.109138][ T10] usb 1-1: Product: syz [ 57.109156][ T10] usb 1-1: Manufacturer: syz [ 57.109174][ T10] usb 1-1: SerialNumber: syz [ 57.375046][ T55] Bluetooth: hci0: command tx timeout [ 58.482298][ T10] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 58.482384][ T10] cdc_ncm 1-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 58.482405][ T10] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 58.688814][ T10] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 59.116467][ T6145] s ** replaying previous printk message ** [ 59.116467][ T6145] skbuff: skb_over_panic: text:ffff800086a206bc len:428 put:172 head:ffff0000d9d88d00 data:ffff0000d9d88d00 tail:0x1ac end:0x180 dev: [ 59.117102][ T6145] ------------[ cut here ]------------ [ 59.117116][ T6145] kernel BUG at net/core/skbuff.c:209! [ 59.117196][ T6145] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 59.127097][ T6145] Modules linked in: [ 59.128191][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: dhcpcd Not tainted 6.15.0-rc1-syzkaller-g2fe2b96c3818 #0 PREEMPT ** replaying previous printk message ** [ 59.130082][ T10] usb 1-1: USB disconnect, device number 2 [ 59.133757][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.136550][ T6145] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 59.138744][ T6145] pc : skb_over_panic+0x140/0x144 [ 59.140126][ T6145] lr : skb_over_panic+0x140/0x144 [ 59.141501][ T6145] sp : ffff8000a5ff6b00 [ 59.142647][ T6145] x29: ffff8000a5ff6b10 x28: 00000000304d434e x27: dfff800000000000 [ 59.144930][ T6145] x26: ffff0000ca136010 x25: 00000000000001ac x24: ffff0000d9d88d00 [ 59.147233][ T6145] x23: ffff0000d9d88d00 x22: 00000000000001ac x21: 0000000000000180 [ 59.149501][ T6145] x20: 00000000000000ac x19: ffff800086a206bc x18: 0000000000000008 [ 59.151709][ T6145] x17: 00000000fffffffa x16: ffff8000833376cc x15: 0000000000000001 [ 59.153948][ T6145] x14: 1ffff00014bfecbc x13: 0000000000000000 x12: 0000000000000000 [ 59.156077][ T6145] x11: 0000000000000605 x10: 0000000000ff0100 x9 : 025a18bfb7faf100 [ 59.158410][ T6145] x8 : 025a18bfb7faf100 x7 : 0000000000000001 x6 : 0000000000000001 [ 59.160593][ T6145] x5 : ffff8000a5ff62b8 x4 : ffff800090035280 x3 : ffff8000832c7c3c [ 59.162710][ T6145] x2 : 0000000000000001 x1 : 0000000000000604 x0 : 0000000000000089 [ 59.164869][ T6145] Call trace: [ 59.165726][ T6145] skb_over_panic+0x140/0x144 (P) [ 59.167060][ T6145] skb_put+0x128/0x1b8 [ 59.168177][ T6145] cdc_ncm_fill_tx_frame+0xdc4/0x30d8 [ 59.169613][ T6145] cdc_ncm_tx_fixup+0xac/0x110 [ 59.170930][ T6145] usbnet_start_xmit+0x108/0x1b20 [ 59.172350][ T6145] dev_hard_start_xmit+0x2c4/0x958 [ 59.173824][ T6145] sch_direct_xmit+0x250/0x588 [ 59.175194][ T6145] __dev_queue_xmit+0x14a8/0x35b8 [ 59.176627][ T6145] lapbeth_data_transmit+0x1fc/0x2a8 [ 59.178259][ T6145] lapb_data_transmit+0x8c/0xb0 [ 59.179688][ T6145] lapb_transmit_buffer+0x178/0x208 [ 59.181132][ T6145] lapb_send_control+0x220/0x320 [ 59.182521][ T6145] lapb_establish_data_link+0x94/0xec [ 59.184024][ T6145] lapb_device_event+0x34c/0x4e4 [ 59.185417][ T6145] notifier_call_chain+0x1c4/0x550 [ 59.186816][ T6145] raw_notifier_call_chain+0x3c/0x50 [ 59.188321][ T6145] __dev_notify_flags+0x2c4/0x550 [ 59.189715][ T6145] netif_change_flags+0xd0/0x15c [ 59.191102][ T6145] dev_change_flags+0x118/0x21c [ 59.192449][ T6145] devinet_ioctl+0xbdc/0x186c [ 59.193759][ T6145] inet_ioctl+0x294/0x528 [ 59.195033][ T6145] sock_do_ioctl+0x134/0x2d0 [ 59.196251][ T6145] sock_ioctl+0x4b0/0x858 [ 59.197490][ T6145] __arm64_sys_ioctl+0x14c/0x1c4 [ 59.198876][ T6145] invoke_syscall+0x98/0x2b8 [ 59.200127][ T6145] el0_svc_common+0x130/0x23c [ 59.201457][ T6145] do_el0_svc+0x48/0x58 [ 59.202648][ T6145] el0_svc+0x54/0x168 [ 59.203817][ T6145] el0t_64_sync_handler+0x84/0x108 [ 59.205274][ T6145] el0t_64_sync+0x198/0x19c [ 59.206547][ T6145] Code: aa1803e6 aa1903e7 a90023f5 9793d708 (d4210000) [ 59.208564][ T6145] ---[ end trace 0000000000000000 ]--- [ 59.530913][ T6145] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt [ 59.533205][ T6145] SMP: stopping secondary CPUs [ 59.534683][ T6145] Kernel Offset: disabled [ 59.535854][ T6145] CPU features: 0x0800,000040e0,01000250,82017203 [ 59.537749][ T6145] Memory Limit: none [ 59.853993][ T6145] Rebooting in 86400 seconds..