Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. 1970/01/01 00:01:29 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:29 parsed 1 programs [ 92.733455][ T6810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 101.378338][ T5989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.381205][ T5989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.383045][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.385212][ T5989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.388797][ T5989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.393564][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.229834][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 102.277800][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.279826][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.281356][ T6900] bridge_slave_0: entered allmulticast mode [ 102.283340][ T6900] bridge_slave_0: entered promiscuous mode [ 102.287639][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.289865][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.291584][ T6900] bridge_slave_1: entered allmulticast mode [ 102.293520][ T6900] bridge_slave_1: entered promiscuous mode [ 102.305761][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.309763][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.391177][ T6900] team0: Port device team_slave_0 added [ 102.393728][ T6900] team0: Port device team_slave_1 added [ 102.402816][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.404344][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.410239][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.414837][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.416444][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.422757][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.475369][ T6900] hsr_slave_0: entered promiscuous mode [ 102.528310][ T6900] hsr_slave_1: entered promiscuous mode [ 103.530862][ T6900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.536631][ T6900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.540501][ T6900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.543625][ T6900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.575475][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.587303][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.592604][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.594121][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.596971][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.598536][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.687497][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.707740][ T6900] veth0_vlan: entered promiscuous mode [ 103.711810][ T6900] veth1_vlan: entered promiscuous mode [ 103.724298][ T6900] veth0_macvtap: entered promiscuous mode [ 103.727214][ T6900] veth1_macvtap: entered promiscuous mode [ 103.735423][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.742984][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.746703][ T6900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.749564][ T6900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.751391][ T6900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.753151][ T6900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.140123][ T3581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.177625][ T4367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.182482][ T4367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.231226][ T3581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.243791][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.245513][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.349672][ T3581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.410702][ T3581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:45 executed programs: 0 [ 105.043103][ T5989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.045517][ T5989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.047562][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.050244][ T5989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.052041][ T5989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.053673][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.139860][ T7096] chnl_net:caif_netlink_parms(): no params data found [ 105.195898][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.197470][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.199556][ T7096] bridge_slave_0: entered allmulticast mode [ 105.201351][ T7096] bridge_slave_0: entered promiscuous mode [ 105.204343][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.205922][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.207377][ T7096] bridge_slave_1: entered allmulticast mode [ 105.211536][ T7096] bridge_slave_1: entered promiscuous mode [ 105.229293][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.232483][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.247085][ T7096] team0: Port device team_slave_0 added [ 105.251541][ T7096] team0: Port device team_slave_1 added [ 105.260777][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.262384][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.267448][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.271444][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.272865][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.278297][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.320023][ T7096] hsr_slave_0: entered promiscuous mode [ 105.360986][ T7096] hsr_slave_1: entered promiscuous mode [ 105.398617][ T7096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.400191][ T7096] Cannot create hsr debugfs directory [ 107.149691][ T5989] Bluetooth: hci0: command tx timeout [ 107.218277][ T3581] bridge_slave_1: left allmulticast mode [ 107.219449][ T3581] bridge_slave_1: left promiscuous mode [ 107.220770][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.231388][ T3581] bridge_slave_0: left allmulticast mode [ 107.232575][ T3581] bridge_slave_0: left promiscuous mode [ 107.233839][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.880669][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.919979][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.959556][ T3581] bond0 (unregistering): Released all slaves [ 109.095992][ T3581] hsr_slave_0: left promiscuous mode [ 109.139000][ T3581] hsr_slave_1: left promiscuous mode [ 109.218399][ T5989] Bluetooth: hci0: command tx timeout [ 109.218463][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.221143][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.223505][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.225300][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.233450][ T3581] veth1_macvtap: left promiscuous mode [ 109.234668][ T3581] veth0_macvtap: left promiscuous mode [ 109.235976][ T3581] veth1_vlan: left promiscuous mode [ 109.237244][ T3581] veth0_vlan: left promiscuous mode [ 111.150180][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 111.298147][ T5989] Bluetooth: hci0: command tx timeout [ 111.310253][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 113.378167][ T5989] Bluetooth: hci0: command tx timeout [ 113.773461][ T7096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.784780][ T7096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.787896][ T7096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.794740][ T7096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.839166][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.845630][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.849766][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.851246][ T2104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.859379][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.860919][ T2104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.947168][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.966125][ T7096] veth0_vlan: entered promiscuous mode [ 113.971934][ T7096] veth1_vlan: entered promiscuous mode [ 113.982657][ T7096] veth0_macvtap: entered promiscuous mode [ 113.985488][ T7096] veth1_macvtap: entered promiscuous mode [ 113.996043][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.000986][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.004433][ T7096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.006249][ T7096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.008572][ T7096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.010462][ T7096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.082083][ T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.083723][ T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.097093][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.099726][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:54 executed programs: 2 [ 114.199940][ T7321] syz_tun: entered allmulticast mode [ 114.204371][ T7321] ------------[ cut here ]------------ [ 114.205637][ T7321] UBSAN: array-index-out-of-bounds in net/ipv4/ipmr_base.c:289:10 [ 114.207262][ T7321] index -283065088 is out of range for type 'const struct vif_device[32]' [ 114.209236][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: syz.0.16 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 114.211344][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.213409][ T7321] Call trace: [ 114.214109][ T7321] show_stack+0x2c/0x3c (C) [ 114.215061][ T7321] dump_stack_lvl+0xe4/0x150 [ 114.216016][ T7321] dump_stack+0x1c/0x28 [ 114.216878][ T7321] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 114.218175][ T7321] mr_table_dump+0x694/0x8b0 [ 114.219190][ T7321] mr_rtm_dumproute+0x254/0x454 [ 114.220350][ T7321] ipmr_rtm_dumproute+0x248/0x4b4 [ 114.221508][ T7321] rtnl_dump_all+0x2e4/0x4e8 [ 114.222489][ T7321] rtnl_dumpit+0x98/0x1d0 [ 114.223452][ T7321] netlink_dump+0x4f0/0xbc0 [ 114.224450][ T7321] netlink_recvmsg+0x56c/0xe64 [ 114.225607][ T7321] sock_read_iter+0x2d8/0x40c [ 114.226679][ T7321] vfs_read+0x740/0x970 [ 114.227583][ T7321] ksys_read+0x15c/0x26c [ 114.228570][ T7321] __arm64_sys_read+0x7c/0x90 [ 114.229576][ T7321] invoke_syscall+0x98/0x2b8 [ 114.230454][ T7321] el0_svc_common+0x130/0x23c [ 114.231443][ T7321] do_el0_svc+0x48/0x58 [ 114.232365][ T7321] el0_svc+0x54/0x168 [ 114.233181][ T7321] el0t_64_sync_handler+0x84/0x108 [ 114.234248][ T7321] el0t_64_sync+0x198/0x19c [ 114.235364][ T7321] ---[ end trace ]--- [ 114.236142][ T7321] Unable to handle kernel paging request at virtual address ffff5fff2d536613 [ 114.237850][ T7321] KASAN: maybe wild-memory-access in range [0xfffefff96a9b3098-0xfffefff96a9b309f] [ 114.239894][ T7321] Mem abort info: [ 114.240692][ T7321] ESR = 0x0000000096000004 [ 114.241577][ T7321] EC = 0x25: DABT (current EL), IL = 32 bits [ 114.242839][ T7321] SET = 0, FnV = 0 [ 114.243726][ T7321] EA = 0, S1PTW = 0 [ 114.244490][ T7321] FSC = 0x04: level 0 translation fault [ 114.245771][ T7321] Data abort info: [ 114.246532][ T7321] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 114.247850][ T7321] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 114.249222][ T7321] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 114.250438][ T7321] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001a569c000 [ 114.252194][ T7321] [ffff5fff2d536613] pgd=0000000000000000, p4d=0000000000000000 [ 114.254020][ T7321] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 114.255559][ T7321] Modules linked in: [ 114.256365][ T7321] CPU: 1 UID: 0 PID: 7321 Comm: syz.0.16 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 114.258399][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.260504][ T7321] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 114.262051][ T7321] pc : mr_table_dump+0x5a4/0x8b0 [ 114.263121][ T7321] lr : mr_table_dump+0x694/0x8b0 [ 114.264103][ T7321] sp : ffff8000a0587250 [ 114.264985][ T7321] x29: ffff8000a0587310 x28: fffefff96a9b3098 x27: ffffffffef20c500 [ 114.266702][ T7321] x26: ffffffffef20c500 x25: 0000000000000000 x24: fffefff96a9b3098 [ 114.268336][ T7321] x23: dfff800000000000 x22: 00000000ef20c500 x21: ffff0000b6c99548 [ 114.270011][ T7321] x20: dfff800000000000 x19: ffff0000c7a8d078 x18: 0000000000000008 [ 114.271635][ T7321] x17: 0000000000000000 x16: ffff80008b60ad1c x15: ffff7000125d7648 [ 114.273298][ T7321] x14: 1ffff000125d7648 x13: 0000000000000004 x12: ffffffffffffffff [ 114.274881][ T7321] x11: ffff7000125d7648 x10: 0000000000ff0100 x9 : 0000000000000000 [ 114.276686][ T7321] x8 : 1fffdfff2d536613 x7 : 0000000000000001 x6 : 0000000000000001 [ 114.278213][ T7321] x5 : ffff8000a0586938 x4 : ffff80008fa90460 x3 : ffff8000802f56a0 [ 114.279892][ T7321] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 00000000ffffffff [ 114.281530][ T7321] Call trace: [ 114.282149][ T7321] mr_table_dump+0x5a4/0x8b0 (P) [ 114.283225][ T7321] mr_rtm_dumproute+0x254/0x454 [ 114.284227][ T7321] ipmr_rtm_dumproute+0x248/0x4b4 [ 114.285275][ T7321] rtnl_dump_all+0x2e4/0x4e8 [ 114.286343][ T7321] rtnl_dumpit+0x98/0x1d0 [ 114.287156][ T7321] netlink_dump+0x4f0/0xbc0 [ 114.288149][ T7321] netlink_recvmsg+0x56c/0xe64 [ 114.289260][ T7321] sock_read_iter+0x2d8/0x40c [ 114.290239][ T7321] vfs_read+0x740/0x970 [ 114.291161][ T7321] ksys_read+0x15c/0x26c [ 114.292047][ T7321] __arm64_sys_read+0x7c/0x90 [ 114.293035][ T7321] invoke_syscall+0x98/0x2b8 [ 114.293931][ T7321] el0_svc_common+0x130/0x23c [ 114.294893][ T7321] do_el0_svc+0x48/0x58 [ 114.295739][ T7321] el0_svc+0x54/0x168 [ 114.296569][ T7321] el0t_64_sync_handler+0x84/0x108 [ 114.297617][ T7321] el0t_64_sync+0x198/0x19c [ 114.298557][ T7321] Code: 97756a54 d343ff08 d2d00017 f2fbfff7 (38746908) [ 114.300016][ T7321] ---[ end trace 0000000000000000 ]--- [ 114.764665][ T7321] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 114.766482][ T7321] SMP: stopping secondary CPUs [ 114.767504][ T7321] Kernel Offset: disabled [ 114.768405][ T7321] CPU features: 0x100,00002070,00800250,82017203 [ 114.769883][ T7321] Memory Limit: none [ 115.194885][ T7321] Rebooting in 86400 seconds..