[ 8.396610][ T4403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8.399779][ T4403] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 8.428446][ T39] gve 0000:00:00.0 enp0s0: Device link is up. OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://44857 syzkaller login: [ 31.313893][ T4726] cgroup: Unknown subsys name 'net' [ 31.424893][ T4726] cgroup: Unknown subsys name 'cpuset' [ 31.427088][ T4726] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.608483][ T4726] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.995031][ T4733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.455536][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.455568][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.469843][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.469875][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.152154][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.152482][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.152560][ T4780] bridge_slave_0: entered allmulticast mode [ 36.153032][ T4780] bridge_slave_0: entered promiscuous mode [ 36.154877][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.154900][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.154950][ T4780] bridge_slave_1: entered allmulticast mode [ 36.155350][ T4780] bridge_slave_1: entered promiscuous mode [ 36.164363][ T4780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.167750][ T4780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.176326][ T4780] team0: Port device team_slave_0 added [ 36.177039][ T4780] team0: Port device team_slave_1 added [ 36.184552][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.184579][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.184593][ T4780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.185345][ T4780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.185353][ T4780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.185366][ T4780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.195098][ T4780] hsr_slave_0: entered promiscuous mode [ 36.195436][ T4780] hsr_slave_1: entered promiscuous mode [ 36.254237][ T4780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.259207][ T4780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.261269][ T4780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.264017][ T4780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.264389][ T4780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.266371][ T4780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.266946][ T4780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.268550][ T4780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.294430][ T4780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.298643][ T4780] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.301472][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.301541][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.305761][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.305805][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.401904][ T4780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.415961][ T4780] veth0_vlan: entered promiscuous mode [ 36.419275][ T4780] veth1_vlan: entered promiscuous mode [ 36.426249][ T4780] veth0_macvtap: entered promiscuous mode [ 36.427700][ T4780] veth1_macvtap: entered promiscuous mode [ 36.432647][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.434747][ T4780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.452381][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.454146][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.455710][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.455736][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.527995][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.549932][ T4746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.550620][ T4746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.550806][ T4746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.551118][ T4746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.551394][ T4746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.605295][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.675503][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.750663][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.901313][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.903269][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.904642][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.904957][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.905175][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.039202][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.039284][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.039338][ T4831] bridge_slave_0: entered allmulticast mode [ 37.039775][ T4831] bridge_slave_0: entered promiscuous mode [ 37.040669][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.040721][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.040769][ T4831] bridge_slave_1: entered allmulticast mode [ 37.041347][ T4831] bridge_slave_1: entered promiscuous mode [ 37.048505][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.049410][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.056638][ T4831] team0: Port device team_slave_0 added [ 37.057389][ T4831] team0: Port device team_slave_1 added [ 37.064141][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.064150][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.064162][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.064654][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.064661][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.064672][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.074911][ T4831] hsr_slave_0: entered promiscuous mode [ 37.075204][ T4831] hsr_slave_1: entered promiscuous mode [ 37.075399][ T4831] debugfs: 'hsr0' already exists in 'hsr' [ 37.075452][ T4831] Cannot create hsr debugfs directory [ 38.972563][ T4746] Bluetooth: hci0: command tx timeout [ 39.404378][ T39] bridge_slave_1: left allmulticast mode [ 39.404424][ T39] bridge_slave_1: left promiscuous mode [ 39.404687][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.410758][ T39] bridge_slave_0: left allmulticast mode [ 39.410800][ T39] bridge_slave_0: left promiscuous mode [ 39.410885][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.466222][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.493575][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.532982][ T39] bond0 (unregistering): Released all slaves [ 39.587286][ T39] hsr_slave_0: left promiscuous mode [ 39.588776][ T39] hsr_slave_1: left promiscuous mode [ 39.589091][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.589116][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.593382][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.595245][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.600592][ T39] veth1_macvtap: left promiscuous mode [ 39.601728][ T39] veth0_macvtap: left promiscuous mode [ 39.603061][ T39] veth1_vlan: left promiscuous mode [ 39.604114][ T39] veth0_vlan: left promiscuous mode [ 39.698026][ T39] team0 (unregistering): Port device team_slave_1 removed [ 39.701734][ T39] team0 (unregistering): Port device team_slave_0 removed [ 39.751459][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.022269][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.026342][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.028321][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.030782][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.033741][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.036216][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.038310][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.040740][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.135677][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.142812][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.144790][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.144840][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.148395][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.148436][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.266711][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.279375][ T4831] veth0_vlan: entered promiscuous mode [ 40.283603][ T4831] veth1_vlan: entered promiscuous mode [ 40.290799][ T4831] veth0_macvtap: entered promiscuous mode [ 40.291814][ T4831] veth1_macvtap: entered promiscuous mode [ 40.299772][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.300736][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.325056][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.327797][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.334993][ T3408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.335021][ T3408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.352368][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.352410][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.352447][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.352467][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.062073][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor:4831] [ 64.062097][ C0] Modules linked in: [ 64.062105][ C0] irq event stamp: 38640849 [ 64.065226][ C0] hardirqs last enabled at (38640848): [] seqcount_lockdep_reader_access+0x7c/0xf8 [ 64.067213][ C0] hardirqs last disabled at (38640849): [] el1_interrupt+0x28/0x60 [ 64.068948][ C0] softirqs last enabled at (147672): [] do_sve_acc+0x32c/0x4b8 [ 64.070705][ C0] softirqs last disabled at (148217): [] __do_softirq+0x14/0x20 [ 64.072421][ C0] CPU: 0 UID: 0 PID: 4831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 64.072441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.072447][ C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 64.072455][ C0] pc : __hrtimer_run_queues+0x32c/0xbe0 [ 64.072463][ C0] lr : __hrtimer_run_queues+0x32c/0xbe0 [ 64.072469][ C0] sp : ffff80008eb67de0 [ 64.072472][ C0] x29: ffff80008eb67e40 x28: 1fffe00034bb7c3a x27: ffff0001a5dbe1c0 [ 64.072484][ C0] x26: ffff0000c6453a90 x25: ffff0000d1a50d38 x24: dfff800000000000 [ 64.072494][ C0] x23: 0000000000000001 x22: ffff800084ec6bd4 x21: 1fffe00018c8a752 [ 64.072504][ C0] x20: ffff0000c64545a8 x19: ffff0000c6453a80 x18: 0000000000000000 [ 64.072514][ C0] x17: ffff80011d2d8000 x16: ffff80008eb60000 x15: 0000000000000000 [ 64.072524][ C0] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 64.072533][ C0] x11: 0000000000000000 x10: 0000000000000102 x9 : 0000000000000101 [ 64.072543][ C0] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 64.072552][ C0] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008046a634 [ 64.072561][ C0] x2 : 0000000000000001 x1 : ffff0000c6453a80 x0 : 0000000000000000 [ 64.072570][ C0] Call trace: [ 64.072573][ C0] __hrtimer_run_queues+0x32c/0xbe0 (P) [ 64.072582][ C0] hrtimer_run_softirq+0x15c/0x21c [ 64.072590][ C0] handle_softirqs+0x2ec/0xd98 [ 64.072599][ C0] __do_softirq+0x14/0x20 [ 64.072606][ C0] ____do_softirq+0x14/0x20 [ 64.072614][ C0] call_on_irq_stack+0x30/0x48 [ 64.072621][ C0] do_softirq_own_stack+0x20/0x2c [ 64.072629][ C0] __irq_exit_rcu+0x1ac/0x428 [ 64.072636][ C0] irq_exit_rcu+0x14/0x84 [ 64.072644][ C0] el1_interrupt+0x40/0x60 [ 64.072652][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.072661][ C0] el1h_64_irq+0x6c/0x70 [ 64.072668][ C0] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 64.072677][ C0] debug_check_no_obj_freed+0x2c8/0x3a4 [ 64.072686][ C0] kmem_cache_free+0x120/0x6b8 [ 64.072695][ C0] file_free+0x128/0x1dc [ 64.072704][ C0] __fput+0x538/0x74c [ 64.072712][ C0] fput_close_sync+0x10c/0x278 [ 64.072720][ C0] __arm64_sys_close+0x80/0x110 [ 64.072730][ C0] invoke_syscall+0x98/0x244 [ 64.072740][ C0] el0_svc_common+0xec/0x23c [ 64.072750][ C0] do_el0_svc+0x4c/0x5c [ 64.072760][ C0] el0_svc+0x64/0x260 [ 64.072768][ C0] el0t_64_sync_handler+0x44/0x104 [ 64.072776][ C0] el0t_64_sync+0x198/0x19c [ 64.072785][ C0] Sending NMI from CPU 0 to CPUs 1: [ 64.072797][ C1] NMI backtrace for cpu 1 [ 64.072808][ C1] CPU: 1 UID: 0 PID: 4802 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT [ 64.072818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.072824][ C1] Workqueue: rcu_gp process_srcu [ 64.072842][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 64.072850][ C1] pc : _raw_spin_unlock_irqrestore+0x44/0x98 [ 64.072860][ C1] lr : _raw_spin_unlock_irqrestore+0x38/0x98 [ 64.072868][ C1] sp : ffff80008eb77dc0 [ 64.072871][ C1] x29: ffff80008eb77dc0 x28: 1fffe00034bbc63a x27: ffff0001a5de31c0 [ 64.072883][ C1] x26: ffff0001a5de31d0 x25: ffff0000d2a4a538 x24: dfff800000000000 [ 64.072893][ C1] x23: 0000000000000001 x22: ffff800084ec6bd4 x21: ffff0001a5de2d80 [ 64.072903][ C1] x20: ffff0001a5de2d80 x19: 0000000000000000 x18: 00000000ffffffff [ 64.072912][ C1] x17: ffff80008a7d6000 x16: 0000000000000002 x15: ffff80008a35fda0 [ 64.072922][ C1] x14: ffff80008a5d5e28 x13: 0000000000000001 x12: 0000000000000000 [ 64.072932][ C1] x11: ffff80008a5d5e28 x10: 0000000000000003 x9 : 0000000000000000 [ 64.072941][ C1] x8 : 00000000000000c0 x7 : 0000000000000000 x6 : 0000000000000000 [ 64.072950][ C1] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008015611c [ 64.072960][ C1] x2 : 0000000000000002 x1 : ffff0000d32c9d40 x0 : ffff80011d2fd000 [ 64.072970][ C1] Call trace: [ 64.072972][ C1] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 64.072982][ C1] __hrtimer_run_queues+0x22c/0xbe0 [ 64.072990][ C1] hrtimer_run_softirq+0x15c/0x21c [ 64.072997][ C1] handle_softirqs+0x2ec/0xd98 [ 64.073005][ C1] __do_softirq+0x14/0x20 [ 64.073013][ C1] ____do_softirq+0x14/0x20 [ 64.073020][ C1] call_on_irq_stack+0x30/0x48 [ 64.073028][ C1] do_softirq_own_stack+0x20/0x2c [ 64.073035][ C1] __irq_exit_rcu+0x1ac/0x428 [ 64.073043][ C1] irq_exit_rcu+0x14/0x84 [ 64.073050][ C1] el1_interrupt+0x40/0x60 [ 64.073059][ C1] el1h_64_irq_handler+0x18/0x24 [ 64.073067][ C1] el1h_64_irq+0x6c/0x70 [ 64.073074][ C1] queue_delayed_work_on+0xf4/0x140 (P) [ 64.073082][ C1] srcu_reschedule+0x240/0x338 [ 64.073092][ C1] process_srcu+0xd04/0x1eb8 [ 64.073102][ C1] process_scheduled_works+0x788/0x10b8 [ 64.073111][ C1] worker_thread+0x798/0xbd0 [ 64.073119][ C1] kthread+0x304/0x3d4 [ 64.073127][ C1] ret_from_fork+0x10/0x20 [ 68.062072][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [kworker/1:3:4802] [ 68.062099][ C1] Modules linked in: [ 68.062106][ C1] irq event stamp: 44430735 [ 68.147816][ C1] hardirqs last enabled at (44430734): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 68.149789][ C1] hardirqs last disabled at (44430735): [] el1_interrupt+0x28/0x60 [ 68.151502][ C1] softirqs last enabled at (6136): [] handle_softirqs+0xc28/0xd98 [ 68.153193][ C1] softirqs last disabled at (7461): [] __do_softirq+0x14/0x20