Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. 1970/01/01 00:01:25 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:26 parsed 1 programs [ 89.595430][ T6976] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 103.194767][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 103.234774][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.234890][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.235032][ T7036] bridge_slave_0: entered allmulticast mode [ 103.235846][ T7036] bridge_slave_0: entered promiscuous mode [ 103.237258][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.237341][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.237437][ T7036] bridge_slave_1: entered allmulticast mode [ 103.238324][ T7036] bridge_slave_1: entered promiscuous mode [ 103.259955][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.290835][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.306295][ T7036] team0: Port device team_slave_0 added [ 103.308552][ T7036] team0: Port device team_slave_1 added [ 103.325601][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.325662][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.325694][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.326771][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.326797][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.326826][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.359513][ T7036] hsr_slave_0: entered promiscuous mode [ 103.360076][ T7036] hsr_slave_1: entered promiscuous mode [ 104.225331][ T7036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.232712][ T7036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.236513][ T7036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.242934][ T7036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.293915][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.301869][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.306576][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.307039][ T4429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.315503][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.315580][ T4429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.432507][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.453392][ T7036] veth0_vlan: entered promiscuous mode [ 104.458432][ T7036] veth1_vlan: entered promiscuous mode [ 104.472048][ T7036] veth0_macvtap: entered promiscuous mode [ 104.475838][ T7036] veth1_macvtap: entered promiscuous mode [ 104.484833][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.492967][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.497830][ T7036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.501766][ T7036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.504398][ T7036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.507102][ T7036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.830512][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.910353][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.009496][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.115164][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.522535][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.525402][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.529313][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.533402][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.535976][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.562828][ T4429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.562892][ T4429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.581952][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.582014][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:47 executed programs: 0 [ 107.146428][ T6087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.149932][ T6087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.152641][ T6087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.155345][ T6087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.156519][ T6087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.260096][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 107.319105][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.319220][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.319367][ T7319] bridge_slave_0: entered allmulticast mode [ 107.320214][ T7319] bridge_slave_0: entered promiscuous mode [ 107.321757][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.321812][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.321931][ T7319] bridge_slave_1: entered allmulticast mode [ 107.322782][ T7319] bridge_slave_1: entered promiscuous mode [ 107.351068][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.352883][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.373707][ T7319] team0: Port device team_slave_0 added [ 107.377146][ T7319] team0: Port device team_slave_1 added [ 107.395479][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.397861][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.406495][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.411372][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.411401][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.411450][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.450457][ T7319] hsr_slave_0: entered promiscuous mode [ 107.453304][ T7319] hsr_slave_1: entered promiscuous mode [ 107.455711][ T7319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.458509][ T7319] Cannot create hsr debugfs directory [ 107.747240][ T41] bridge_slave_1: left allmulticast mode [ 107.749585][ T41] bridge_slave_1: left promiscuous mode [ 107.752018][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.766040][ T41] bridge_slave_0: left allmulticast mode [ 107.766105][ T41] bridge_slave_0: left promiscuous mode [ 107.766242][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.199928][ T52] Bluetooth: hci0: command tx timeout [ 109.380714][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.430727][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.489895][ T41] bond0 (unregistering): Released all slaves [ 109.575337][ T41] hsr_slave_0: left promiscuous mode [ 109.579643][ T41] hsr_slave_1: left promiscuous mode [ 109.580403][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.580448][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.584311][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.584359][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.596783][ T41] veth1_macvtap: left promiscuous mode [ 109.596893][ T41] veth0_macvtap: left promiscuous mode [ 109.596990][ T41] veth1_vlan: left promiscuous mode [ 109.597064][ T41] veth0_vlan: left promiscuous mode [ 111.288122][ T52] Bluetooth: hci0: command tx timeout [ 111.530430][ T41] team0 (unregistering): Port device team_slave_1 removed [ 111.719701][ T41] team0 (unregistering): Port device team_slave_0 removed [ 113.358163][ T52] Bluetooth: hci0: command tx timeout [ 114.266370][ T7319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.303735][ T7319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.311833][ T7319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.315791][ T7319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.753577][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.762425][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.768369][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.768452][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.776934][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.777014][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.011496][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.031690][ T7319] veth0_vlan: entered promiscuous mode [ 115.035889][ T7319] veth1_vlan: entered promiscuous mode [ 115.047373][ T7319] veth0_macvtap: entered promiscuous mode [ 115.051855][ T7319] veth1_macvtap: entered promiscuous mode [ 115.105949][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.107767][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.112685][ T7319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.112745][ T7319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.112777][ T7319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.112808][ T7319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.150362][ T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.150419][ T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.282633][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.283415][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:55 executed programs: 2 [ 115.361117][ T7478 ** replaying previous printk message ** [ 115.361117][ T7478] Injecting memory failure for pfn 0x12c32a at process virtual address 0x2052a000 [ 115.361431][ T7478] Memory failure: 0x12c32a: Sending SIGBUS to syz.0.16:7478 due to hardware memory corruption [ 115.361561][ T7478] Memory failure: 0x12c32a: recovery action for unsplit thp: Failed [ 115.361905][ T7478] page: refcount:3 mapcount:0 mapping:0000000000000000 index:0x20400 pfn:0x12c200 [ 115.362041][ T7478] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:1 [ 115.362065][ T7478] memcg:ffff0000c56a8000 [ 115.362084][ T7478] anon flags: 0x5ffc00000020849(locked|uptodate|owner_2|head|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 115.362116][ T7478] raw: 05ffc00000020849 dead000000000100 dead000000000122 ffff0000ea351221 [ 115.362139][ T7478] raw: 0000000000020400 0000000000000000 00000003ffffffff ffff0000c56a8000 [ 115.362162][ T7478] head: 05ffc00000020849 dead000000000100 dead000000000122 ffff0000ea351221 [ 115.362185][ T7478] head: 0000000000020400 0000000000000000 00000003ffffffff ffff0000c56a8000 [ 115.362207][ T7478] head: 05ffc00000000309 fffffdffc3b08001 0080000000000000 0000000100000000 [ 115.362230][ T7478] head: ffffffff00000000 000000000000000c 00000000ffffffff 0000000000000200 [ 115.362261][ T7478] page dumped because: VM_BUG_ON_FOLIO(!pvmw.pte) [ 115.362398][ T7478] ------------[ cut here ]------------ [ 115.362413][ T7478] kernel BUG at mm/rmap.c:1955! [ 115.362519][ T7478] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 115.401043][ T7478] Modules linked in: [ 115.402105][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.0.16 Not tainted 6.16.0-rc2-syzkaller-00009-g9aa9b43d689e #0 PREEMPT [ 115.405261][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.407996][ T7478] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 115.410215][ T7478] pc : try_to_unmap_one+0x2c50/0x2d3c [ 115.411710][ T7478] lr : try_to_unmap_one+0x2c50/0x2d3c [ 115.413194][ T7478] sp : ffff80009d5c62c0 [ 115.414428][ T7478] x29: ffff80009d5c6520 x28: 0000000000000038 x27: ffff0000c6f53f00 [ 115.416702][ T7478] x26: fffffdffc3b08018 x25: fffffdffc3b08030 x24: dfff800000000000 [ 115.419008][ T7478] x23: ffff0000da98c780 x22: ffff0000da98c7a0 x21: 0000000000000001 [ 115.421219][ T7478] x20: fffffdffc3b08000 x19: 05ffc00000020849 x18: 00000000ffffffff [ 115.423564][ T7478] x17: 0000000000000000 x16: ffff80008ae33808 x15: ffff700011ed61d4 [ 115.425884][ T7478] x14: 1ffff00011ed61d4 x13: 0000000000000004 x12: ffffffffffffffff [ 115.428126][ T7478] x11: ffff700011ed61d4 x10: 0000000000ff0100 x9 : 768d6bc9d0b3e900 [ 115.430390][ T7478] x8 : 768d6bc9d0b3e900 x7 : 0000000000000001 x6 : 0000000000000001 [ 115.432623][ T7478] x5 : ffff80009d5c59d8 x4 : ffff80008f727060 x3 : ffff80008054c348 [ 115.434919][ T7478] x2 : 0000000000000000 x1 : 0000000100000001 x0 : 000000000000002f [ 115.437097][ T7478] Call trace: [ 115.438032][ T7478] try_to_unmap_one+0x2c50/0x2d3c (P) ** replaying previous printk message ** [ 115.438065][ T52] Bluetooth: hci0: command tx timeout [ 115.442075][ T7478] rmap_walk_anon+0x47c/0x640 [ 115.443379][ T7478] rmap_walk+0x128/0x1e8 [ 115.444590][ T7478] try_to_unmap+0xc4/0x120 [ 115.445768][ T7478] unmap_poisoned_folio+0x278/0x4a4 [ 115.447241][ T7478] shrink_folio_list+0x628/0x43dc [ 115.448632][ T7478] reclaim_folio_list+0xe0/0x5d4 [ 115.449925][ T7478] reclaim_pages+0x420/0x544 [ 115.451205][ T7478] madvise_cold_or_pageout_pte_range+0x1d44/0x20fc [ 115.453170][ T7478] walk_pgd_range+0xb4c/0x16b8 [ 115.454343][ T7478] __walk_page_range+0x13c/0x654 [ 115.455740][ T7478] walk_page_range_mm+0x4fc/0x7dc [ 115.457185][ T7478] walk_page_range+0x80/0x98 [ 115.458518][ T7478] madvise_do_behavior+0x18d4/0x2860 [ 115.459931][ T7478] do_madvise+0x174/0x224 [ 115.461142][ T7478] __arm64_sys_madvise+0xa4/0xc0 [ 115.462514][ T7478] invoke_syscall+0x98/0x2b8 [ 115.463751][ T7478] el0_svc_common+0x130/0x23c [ 115.465080][ T7478] do_el0_svc+0x48/0x58 [ 115.466188][ T7478] el0_svc+0x58/0x17c [ 115.467310][ T7478] el0t_64_sync_handler+0x78/0x108 [ 115.468711][ T7478] el0t_64_sync+0x198/0x19c [ 115.469991][ T7478] Code: f9404be0 900527e1 91028021 97fde863 (d4210000) [ 115.472047][ T7478] ---[ end trace 0000000000000000 ]--- [ 115.875738][ T7478] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 115.877733][ T7478] SMP: stopping secondary CPUs [ 115.879080][ T7478] Kernel Offset: disabled [ 115.880252][ T7478] CPU features: 0x2000,000081c0,020004a1,04017203 [ 115.882212][ T7478] Memory Limit: none [ 116.282745][ T7478] Rebooting in 86400 seconds..