Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. 1970/01/01 00:01:33 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:34 parsed 1 programs [ 97.486277][ T6952] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 99.634663][ T6086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.635757][ T6086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.636169][ T6086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.637220][ T6086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.637660][ T6086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.096027][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 101.141656][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.143751][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.145838][ T7076] bridge_slave_0: entered allmulticast mode [ 101.148628][ T7076] bridge_slave_0: entered promiscuous mode [ 101.152625][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.152740][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.152839][ T7076] bridge_slave_1: entered allmulticast mode [ 101.153699][ T7076] bridge_slave_1: entered promiscuous mode [ 101.170895][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.172559][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.187062][ T7076] team0: Port device team_slave_0 added [ 101.190735][ T7076] team0: Port device team_slave_1 added [ 101.213990][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.214042][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.214073][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.215068][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.215092][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.215121][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.243536][ T7076] hsr_slave_0: entered promiscuous mode [ 101.244031][ T7076] hsr_slave_1: entered promiscuous mode [ 102.109834][ T7076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.113715][ T7076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.117474][ T7076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.121490][ T7076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.161944][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.170289][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.173236][ T2072] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.173314][ T2072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.186933][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.187005][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.302119][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.322987][ T7076] veth0_vlan: entered promiscuous mode [ 102.325992][ T7076] veth1_vlan: entered promiscuous mode [ 102.343544][ T7076] veth0_macvtap: entered promiscuous mode [ 102.347673][ T7076] veth1_macvtap: entered promiscuous mode [ 102.359134][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.365617][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.368132][ T7076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.368630][ T7076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.368663][ T7076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.368693][ T7076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.720556][ T2072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.798502][ T2072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.879934][ T2072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.891418][ T2058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.894308][ T2058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.911373][ T2058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.913986][ T2058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.958840][ T2072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:43 executed programs: 0 [ 103.394798][ T6086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.396068][ T6086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.396871][ T6086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.397516][ T6086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.397923][ T6086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.502977][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 103.551674][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.553866][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.556221][ T7222] bridge_slave_0: entered allmulticast mode [ 103.559542][ T7222] bridge_slave_0: entered promiscuous mode [ 103.562843][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.565023][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.567439][ T7222] bridge_slave_1: entered allmulticast mode [ 103.570364][ T7222] bridge_slave_1: entered promiscuous mode [ 103.588477][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.592693][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.617307][ T7222] team0: Port device team_slave_0 added [ 103.620351][ T7222] team0: Port device team_slave_1 added [ 103.647371][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.649527][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.658491][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.662825][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.664982][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.672814][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.695605][ T7222] hsr_slave_0: entered promiscuous mode [ 103.697923][ T7222] hsr_slave_1: entered promiscuous mode [ 103.700122][ T7222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.702543][ T7222] Cannot create hsr debugfs directory [ 105.456678][ T6086] Bluetooth: hci0: command tx timeout [ 105.481979][ T2072] bridge_slave_1: left allmulticast mode [ 105.482052][ T2072] bridge_slave_1: left promiscuous mode [ 105.482175][ T2072] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.486145][ T2072] bridge_slave_0: left allmulticast mode [ 105.486180][ T2072] bridge_slave_0: left promiscuous mode [ 105.486290][ T2072] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.190017][ T2072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.228919][ T2072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.278394][ T2072] bond0 (unregistering): Released all slaves [ 107.356061][ T2072] hsr_slave_0: left promiscuous mode [ 107.358097][ T2072] hsr_slave_1: left promiscuous mode [ 107.358559][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.358597][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.364434][ T2072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.366451][ T2072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.376385][ T2072] veth1_macvtap: left promiscuous mode [ 107.379750][ T2072] veth0_macvtap: left promiscuous mode [ 107.379900][ T2072] veth1_vlan: left promiscuous mode [ 107.380172][ T2072] veth0_vlan: left promiscuous mode [ 107.540885][ T6086] Bluetooth: hci0: command tx timeout [ 109.238533][ T2072] team0 (unregistering): Port device team_slave_1 removed [ 109.427578][ T2072] team0 (unregistering): Port device team_slave_0 removed [ 109.616495][ T6086] Bluetooth: hci0: command tx timeout [ 111.708370][ T6086] Bluetooth: hci0: command tx timeout [ 111.980732][ T7222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.984484][ T7222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.991735][ T7222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.996123][ T7222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.104132][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.119568][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.141488][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.141566][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.142394][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.142438][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.391118][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.409885][ T7222] veth0_vlan: entered promiscuous mode [ 112.412843][ T7222] veth1_vlan: entered promiscuous mode [ 112.425881][ T7222] veth0_macvtap: entered promiscuous mode [ 112.564058][ T7222] veth1_macvtap: entered promiscuous mode [ 112.571603][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.573403][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.574896][ T7222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.574938][ T7222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.574969][ T7222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.574999][ T7222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.677778][ T271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.677847][ T271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.690955][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.692870][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:52 executed programs: 2 [ 112.780023][ T7465] Injecting memory failure for pfn 0x130f2a at process virtual address 0x2052a000 [ 112.783306][ T7465] Memory failure: 0x130f2a: Sending SIGBUS to syz.0.16:7465 due to hardware memory corruption [ 112.788059][ T7465] Memory failure: 0x130f2a: recovery action for unsplit thp: Failed ** replaying previous printk message ** [ 112.788059][ T7465] Memory failure: 0x130f2a: recovery action for unsplit thp: Failed [ 112.789796][ T7465] page: refcount:3 mapcount:0 mapping:0000000000000000 index:0x20400 pfn:0x130e00 [ 112.789927][ T7465] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:1 [ 112.789951][ T7465] memcg:ffff0000cdba8000 [ 112.789969][ T7465] anon flags: 0x5ffc00000020849(locked|uptodate|owner_2|head|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 112.790001][ T7465] raw: 05ffc00000020849 dead000000000100 dead000000000122 ffff0000cd547221 [ 112.790024][ T7465] raw: 0000000000020400 0000000000000000 00000003ffffffff ffff0000cdba8000 [ 112.790047][ T7465] head: 05ffc00000020849 dead000000000100 dead000000000122 ffff0000cd547221 [ 112.790070][ T7465] head: 0000000000020400 0000000000000000 00000003ffffffff ffff0000cdba8000 [ 112.790093][ T7465] head: 05ffc00000000309 fffffdffc3c38001 0080000000000000 0000000100000000 [ 112.790115][ T7465] head: ffffffff00000000 000000000000000d 00000000ffffffff 0000000000000200 [ 112.790133][ T7465] page dumped because: VM_BUG_ON_FOLIO(!pvmw.pte) [ 112.790250][ T7465] ------------[ cut here ]------------ [ 112.790262][ T7465] kernel BUG at mm/rmap.c:1955! [ 112.790413][ T7465] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 112.823471][ T7465] Modules linked in: [ 112.824491][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.0.16 Not tainted 6.16.0-rc1-syzkaller-00004-g39dfc971e42d #0 PREEMPT [ 112.827727][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.830459][ T7465] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 112.832686][ T7465] pc : try_to_unmap_one+0x2c50/0x2d3c [ 112.834281][ T7465] lr : try_to_unmap_one+0x2c50/0x2d3c [ 112.835765][ T7465] sp : ffff80009d3962c0 [ 112.836927][ T7465] x29: ffff80009d396520 x28: 0000000000000038 x27: ffff0000ddbef500 [ 112.839201][ T7465] x26: fffffdffc3c38018 x25: fffffdffc3c38030 x24: dfff800000000000 [ 112.841450][ T7465] x23: ffff0000dba7d280 x22: ffff0000dba7d2a0 x21: 0000000000000001 [ 112.843699][ T7465] x20: fffffdffc3c38000 x19: 05ffc00000020849 x18: 00000000ffffffff [ 112.845901][ T7465] x17: 0000000000000000 x16: ffff80008ae31308 x15: ffff700011ed61d4 [ 112.848069][ T7465] x14: 1ffff00011ed61d4 x13: 0000000000000004 x12: ffffffffffffffff [ 112.850318][ T7465] x11: ffff700011ed61d4 x10: 0000000000ff0100 x9 : cdb591c5be3d4700 [ 112.852680][ T7465] x8 : cdb591c5be3d4700 x7 : 0000000000000001 x6 : 0000000000000001 [ 112.854921][ T7465] x5 : ffff80009d3959d8 x4 : ffff80008f727060 x3 : ffff80008054db48 [ 112.857120][ T7465] x2 : 0000000000000000 x1 : 0000000100000001 x0 : 000000000000002f [ 112.859301][ T7465] Call trace: [ 112.860231][ T7465] try_to_unmap_one+0x2c50/0x2d3c (P) [ 112.861741][ T7465] rmap_walk_anon+0x47c/0x640 [ 112.863040][ T7465] rmap_walk+0x128/0x1e8 [ 112.864181][ T7465] try_to_unmap+0xc4/0x120 [ 112.865437][ T7465] unmap_poisoned_folio+0x278/0x4a4 [ 112.866828][ T7465] shrink_folio_list+0x628/0x43dc [ 112.868184][ T7465] reclaim_folio_list+0xe0/0x5d4 [ 112.869609][ T7465] reclaim_pages+0x420/0x544 [ 112.870924][ T7465] madvise_cold_or_pageout_pte_range+0x1d38/0x20d4 [ 112.872789][ T7465] walk_pgd_range+0xb4c/0x16b8 [ 112.874129][ T7465] __walk_page_range+0x13c/0x654 [ 112.875502][ T7465] walk_page_range_mm+0x4fc/0x7dc [ 112.876870][ T7465] walk_page_range+0x80/0x98 [ 112.878118][ T7465] madvise_do_behavior+0x18d4/0x2860 [ 112.879547][ T7465] do_madvise+0x174/0x224 [ 112.880721][ T7465] __arm64_sys_madvise+0xa4/0xc0 [ 112.882094][ T7465] invoke_syscall+0x98/0x2b8 [ 112.883354][ T7465] el0_svc_common+0x130/0x23c [ 112.884655][ T7465] do_el0_svc+0x48/0x58 [ 112.885795][ T7465] el0_svc+0x58/0x17c [ 112.886900][ T7465] el0t_64_sync_handler+0x78/0x108 [ 112.888281][ T7465] el0t_64_sync+0x198/0x19c [ 112.889498][ T7465] Code: f9404be0 d00527c1 91028021 97fde863 (d4210000) [ 112.891424][ T7465] ---[ end trace 0000000000000000 ]--- [ 113.233154][ T7465] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 113.235195][ T7465] SMP: stopping secondary CPUs [ 113.236504][ T7465] Kernel Offset: disabled [ 113.237697][ T7465] CPU features: 0x2000,000081c0,020004a1,04017203 [ 113.239462][ T7465] Memory Limit: none [ 113.576422][ T7465] Rebooting in 86400 seconds..