Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. 1970/01/01 00:01:03 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:04 parsed 1 programs [ 65.386564][ T4378] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 67.176653][ T4504] chnl_net:caif_netlink_parms(): no params data found [ 67.193495][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.195337][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.196802][ T4504] device bridge_slave_0 entered promiscuous mode [ 67.199839][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.200986][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.202433][ T4504] device bridge_slave_1 entered promiscuous mode [ 67.211120][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.213712][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.222498][ T4504] team0: Port device team_slave_0 added [ 67.224298][ T4504] team0: Port device team_slave_1 added [ 67.230535][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.231622][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.236517][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.239135][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.240225][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.244406][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.295592][ T4504] device hsr_slave_0 entered promiscuous mode [ 67.334706][ T4504] device hsr_slave_1 entered promiscuous mode [ 67.858860][ T4504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.896086][ T4504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.946835][ T4504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.985885][ T4504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.038517][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.039693][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.040796][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.042144][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.060413][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.064263][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.066399][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.067886][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.069632][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.073899][ T4504] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.078189][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.079505][ T1607] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.080532][ T1607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.083475][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.085766][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.086827][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.132562][ T4504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.134194][ T4504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.138873][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.140526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.142085][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.148226][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.151219][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.152751][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.227776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.229115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.232158][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.248619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.250255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.268607][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.270322][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.271968][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.273199][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.275002][ T4504] device veth0_vlan entered promiscuous mode [ 68.286663][ T4504] device veth1_vlan entered promiscuous mode [ 68.304703][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.306308][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.307790][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.309550][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.311232][ T4504] device veth0_macvtap entered promiscuous mode [ 68.313608][ T4504] device veth1_macvtap entered promiscuous mode [ 68.321129][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.322381][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.323931][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.326370][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.327951][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.339181][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.340379][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.341993][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.347253][ T4504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.348688][ T4504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.350137][ T4504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.351591][ T4504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.434290][ T410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.435702][ T410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.439052][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.457622][ T410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.458920][ T410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.460899][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.069617][ T410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:09 executed programs: 0 [ 69.413633][ T4768] chnl_net:caif_netlink_parms(): no params data found [ 69.431446][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.432651][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.434147][ T4768] device bridge_slave_0 entered promiscuous mode [ 69.437014][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.438203][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.439744][ T4768] device bridge_slave_1 entered promiscuous mode [ 69.449167][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.451684][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.461174][ T4768] team0: Port device team_slave_0 added [ 69.463124][ T4768] team0: Port device team_slave_1 added [ 69.474477][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.475898][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.479944][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.482395][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.483465][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.487656][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.525887][ T4768] device hsr_slave_0 entered promiscuous mode [ 69.565050][ T4768] device hsr_slave_1 entered promiscuous mode [ 69.604695][ T4768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.605999][ T4768] Cannot create hsr debugfs directory [ 69.616870][ T21] cfg80211: failed to load regulatory.db [ 69.618380][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.619438][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.384649][ T4176] Bluetooth: hci1: command 0x0409 tx timeout [ 71.737398][ T410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.454943][ T4178] Bluetooth: hci1: command 0x041b tx timeout [ 73.997919][ T410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.048521][ T410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.119045][ T4768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.155970][ T4768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.195734][ T4768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.246848][ T4768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.307448][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.311379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.312894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.328188][ T4768] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.336717][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.338265][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.339781][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.340971][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.342292][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.343745][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.346045][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.347235][ T529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.348549][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.350117][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.351725][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.353398][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.355331][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.357063][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.358728][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.360222][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.363742][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.365719][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.368554][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.370051][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.372587][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.411511][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.412772][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.416477][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.422233][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.423959][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.431748][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.433310][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.435188][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.436930][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.439154][ T4768] device veth0_vlan entered promiscuous mode [ 75.442591][ T4768] device veth1_vlan entered promiscuous mode [ 75.450979][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.452465][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.453890][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.455685][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.458241][ T4768] device veth0_macvtap entered promiscuous mode [ 75.460685][ T4768] device veth1_macvtap entered promiscuous mode [ 75.465926][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.467506][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.469476][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.470673][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.472224][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.473578][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.475290][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.477783][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.479409][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.481423][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.482644][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.484233][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.487421][ T4768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.488696][ T4768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.490072][ T4768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.491500][ T4768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.511582][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.512832][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.518901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.521591][ T529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.522858][ T529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.524263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.539551][ T4165] Bluetooth: hci1: command 0x040f tx timeout 1970/01/01 00:01:15 executed programs: 2 [ 75.552114][ T144] [ 75.552550][ T144] ===================================== [ 75.553336][ T144] WARNING: bad unlock balance detected! [ 75.554139][ T144] 5.15.189-syzkaller #0 Not tainted [ 75.554929][ T144] ------------------------------------- [ 75.555786][ T144] kworker/u5:0/144 is trying to release lock (&chan->lock) at: [ 75.556965][ T144] [] l2cap_recv_frame+0x944/0x6168 [ 75.557972][ T144] but there are no more locks to release! [ 75.558799][ T144] [ 75.558799][ T144] other info that might help us debug this: [ 75.560015][ T144] 2 locks held by kworker/u5:0/144: [ 75.560840][ T144] #0: ffff0000d6a88938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 75.562329][ T144] #1: ffff80001bdd7c00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 75.564097][ T144] [ 75.564097][ T144] stack backtrace: [ 75.564965][ T144] CPU: 0 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.189-syzkaller #0 [ 75.566113][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.567675][ T144] Workqueue: hci1 hci_rx_work [ 75.568406][ T144] Call trace: [ 75.568972][ T144] dump_backtrace+0x0/0x43c [ 75.569723][ T144] show_stack+0x2c/0x3c [ 75.570355][ T144] __dump_stack+0x30/0x40 [ 75.571003][ T144] dump_stack_lvl+0xf8/0x160 [ 75.571729][ T144] dump_stack+0x1c/0x5c [ 75.572326][ T144] print_unlock_imbalance_bug+0x11c/0x160 [ 75.573184][ T144] lock_release+0x454/0x8e8 [ 75.573881][ T144] __mutex_unlock_slowpath+0xc0/0x5d8 [ 75.574666][ T144] mutex_unlock+0x90/0xec [ 75.575390][ T144] l2cap_recv_frame+0x944/0x6168 [ 75.576222][ T144] l2cap_recv_acldata+0x4dc/0x137c [ 75.577032][ T144] hci_rx_work+0x3a0/0x880 [ 75.577745][ T144] process_one_work+0x79c/0x1140 [ 75.578556][ T144] worker_thread+0x8f4/0x101c [ 75.579237][ T144] kthread+0x374/0x454 [ 75.579831][ T144] ret_from_fork+0x10/0x20 [ 77.609487][ T410] device hsr_slave_0 left promiscuous mode [ 77.614741][ T4175] Bluetooth: hci1: command 0x0419 tx timeout [ 77.655122][ T410] device hsr_slave_1 left promiscuous mode [ 77.725069][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.726369][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.727980][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.729074][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.730471][ T410] device bridge_slave_1 left promiscuous mode [ 77.731529][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.775564][ T410] device bridge_slave_0 left promiscuous mode [ 77.776609][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.884721][ T410] device veth1_macvtap left promiscuous mode [ 77.885737][ T410] device veth0_macvtap left promiscuous mode [ 77.886706][ T410] device veth1_vlan left promiscuous mode [ 77.887644][ T410] device veth0_vlan left promiscuous mode [ 77.968553][ T410] team0 (unregistering): Port device team_slave_1 removed [ 77.980989][ T410] team0 (unregistering): Port device team_slave_0 removed [ 77.984695][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.028901][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.127801][ T410] bond0 (unregistering): Released all slaves 1970/01/01 00:01:20 executed programs: 301