Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. 1970/01/01 00:00:44 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:45 parsed 1 programs [ 47.639857][ T4044] cgroup: Unknown subsys name 'net' [ 47.903981][ T4044] cgroup: Unknown subsys name 'rlimit' [ 48.296148][ T4044] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.162885][ T1701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.165195][ T1701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.168371][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.188371][ T1701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.190714][ T1701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.193389][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.763112][ T4092] chnl_net:caif_netlink_parms(): no params data found [ 57.806151][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.808609][ T4092] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.811450][ T4092] device bridge_slave_0 entered promiscuous mode [ 57.816063][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.818602][ T4092] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.821358][ T4092] device bridge_slave_1 entered promiscuous mode [ 57.841242][ T4092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.845846][ T4092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.862228][ T4092] team0: Port device team_slave_0 added [ 57.866398][ T4092] team0: Port device team_slave_1 added [ 57.881933][ T4092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.883870][ T4092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.891722][ T4092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.896675][ T4092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.899031][ T4092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.906310][ T4092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.969586][ T4092] device hsr_slave_0 entered promiscuous mode [ 58.018724][ T4092] device hsr_slave_1 entered promiscuous mode [ 58.152162][ T4092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.179338][ T4092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.219075][ T4092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.270907][ T4092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.331338][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.333413][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.335987][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.338081][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.391053][ T4092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.399801][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.403690][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.409509][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.412626][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 58.423149][ T4092] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.430429][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.433285][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.435370][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.447737][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.451793][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.453635][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.465737][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.470511][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.473672][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.480939][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.486153][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.492145][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.579700][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.582043][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.590889][ T4092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.608493][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.624636][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.628109][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.630736][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.635637][ T4092] device veth0_vlan entered promiscuous mode [ 58.644170][ T4092] device veth1_vlan entered promiscuous mode [ 58.662708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.665899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.669408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.674277][ T4092] device veth0_macvtap entered promiscuous mode [ 58.680084][ T4092] device veth1_macvtap entered promiscuous mode [ 58.691651][ T4092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.693971][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.697732][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.704273][ T4092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.706651][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.714466][ T4092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.716964][ T4092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.719723][ T4092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.722114][ T4092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:59 executed programs: 0 [ 59.691914][ T4145] chnl_net:caif_netlink_parms(): no params data found [ 59.734054][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.736110][ T4145] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.739453][ T4145] device bridge_slave_0 entered promiscuous mode [ 59.743856][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.745780][ T4145] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.748886][ T4145] device bridge_slave_1 entered promiscuous mode [ 59.767239][ T4145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.772022][ T4145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.791877][ T4145] team0: Port device team_slave_0 added [ 59.795327][ T4145] team0: Port device team_slave_1 added [ 59.809386][ T4145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.811358][ T4145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.819634][ T4145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.826028][ T4145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.828343][ T4145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.835348][ T4145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.909369][ T4145] device hsr_slave_0 entered promiscuous mode [ 59.957488][ T4145] device hsr_slave_1 entered promiscuous mode [ 60.007340][ T4145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.009603][ T4145] Cannot create hsr debugfs directory [ 60.078912][ T4145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.647641][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 63.342644][ T4145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.727357][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 63.895806][ T4145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.971629][ T4145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.193616][ T4145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.229813][ T4145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.260469][ T4145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.309999][ T4145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.416615][ T4145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.425640][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.433424][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.439530][ T4145] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.445088][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.449472][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.453710][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.455779][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.470206][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.473065][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.475824][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.480104][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.482103][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.484559][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.488204][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.494687][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.499539][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.502600][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.508731][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.512962][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.519993][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.522835][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.530761][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.533508][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.537920][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.909846][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.912201][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.920372][ T4145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.932637][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.935542][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.955736][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.961878][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.966465][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.969999][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.975416][ T4145] device veth0_vlan entered promiscuous mode [ 64.987968][ T4145] device veth1_vlan entered promiscuous mode [ 65.001430][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.004161][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.006743][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.010589][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.016468][ T4145] device veth0_macvtap entered promiscuous mode [ 65.022365][ T4145] device veth1_macvtap entered promiscuous mode [ 65.032165][ T4145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.034998][ T4145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.040031][ T4145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.042177][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.044856][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.051434][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.055949][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.060796][ T4145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.063783][ T4145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.068180][ T4145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.070466][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.073387][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.079320][ T4145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.081729][ T4145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.084050][ T4145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.086285][ T4145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.130660][ T1701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.132967][ T1701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.135772][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.152710][ T424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.155107][ T424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.158276][ T1701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.203144][ T4138] [ 65.203832][ T4138] ===================================== [ 65.205414][ T4138] WARNING: bad unlock balance detected! [ 65.206961][ T4138] 5.15.188-syzkaller #0 Not tainted [ 65.208635][ T4138] ------------------------------------- [ 65.210152][ T4138] kworker/u5:2/4138 is trying to release lock (&chan->lock) at: [ 65.212501][ T4138] [] l2cap_recv_frame+0x944/0x6168 [ 65.214416][ T4138] but there are no more locks to release! [ 65.216039][ T4138] [ 65.216039][ T4138] other info that might help us debug this: [ 65.218371][ T4138] 2 locks held by kworker/u5:2/4138: [ 65.219824][ T4138] #0: ffff0000d2431938 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 65.222751][ T4138] #1: ffff80001f327c00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 65.225991][ T4138] [ 65.225991][ T4138] stack backtrace: [ 65.227656][ T4138] CPU: 1 PID: 4138 Comm: kworker/u5:2 Not tainted 5.15.188-syzkaller #0 [ 65.230022][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.232924][ T4138] Workqueue: hci0 hci_rx_work [ 65.234292][ T4138] Call trace: [ 65.235165][ T4138] dump_backtrace+0x0/0x43c [ 65.236433][ T4138] show_stack+0x2c/0x3c [ 65.237607][ T4138] __dump_stack+0x30/0x40 [ 65.238845][ T4138] dump_stack_lvl+0xf8/0x160 [ 65.240126][ T4138] dump_stack+0x1c/0x5c [ 65.241260][ T4138] print_unlock_imbalance_bug+0x11c/0x160 [ 65.242850][ T4138] lock_release+0x454/0x8e8 [ 65.244097][ T4138] __mutex_unlock_slowpath+0xc0/0x5d8 [ 65.245724][ T4138] mutex_unlock+0x90/0xec [ 65.246972][ T4138] l2cap_recv_frame+0x944/0x6168 [ 65.248304][ T4138] l2cap_recv_acldata+0x4dc/0x137c [ 65.249820][ T4138] hci_rx_work+0x3a0/0x880 [ 65.251073][ T4138] process_one_work+0x79c/0x1140 [ 65.252393][ T4138] worker_thread+0x8f4/0x101c [ 65.253742][ T4138] kthread+0x374/0x454 [ 65.254877][ T4138] ret_from_fork+0x10/0x20