Warning: Permanently added '[localhost]:49774' (ED25519) to the list of known hosts. 2025/05/31 15:11:27 ignoring optional flag "sandboxArg"="0" 2025/05/31 15:11:29 parsed 1 programs syzkaller login: [ 83.387572][ T5309] cgroup: Unknown subsys name 'net' [ 83.456938][ T5309] cgroup: Unknown subsys name 'cpuset' [ 83.462347][ T5309] cgroup: Unknown subsys name 'rlimit' [ 85.111324][ T5309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.842187][ T5335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.846945][ T5335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.850332][ T5335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.854195][ T5335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.857459][ T5335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.607688][ T5328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.750886][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.754312][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.095243][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.110698][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.573769][ T5332] syz-executor (5332) used greatest stack depth: 20216 bytes left [ 91.842361][ T793] cfg80211: failed to load regulatory.db [ 92.164004][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 92.552752][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.581796][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.596423][ T5355] bridge_slave_0: entered allmulticast mode [ 92.614257][ T5355] bridge_slave_0: entered promiscuous mode [ 92.633799][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.636642][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.639792][ T5355] bridge_slave_1: entered allmulticast mode [ 92.687721][ T5355] bridge_slave_1: entered promiscuous mode [ 92.788161][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.817411][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.017891][ T5355] team0: Port device team_slave_0 added [ 93.055000][ T5355] team0: Port device team_slave_1 added [ 93.121568][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.125004][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.150692][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.177564][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.187629][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.210989][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.290297][ T5355] hsr_slave_0: entered promiscuous mode [ 93.297642][ T5355] hsr_slave_1: entered promiscuous mode [ 93.589537][ T5355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.613907][ T5355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.624588][ T5355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.639201][ T5355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.708747][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.726370][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.737086][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.739937][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.754914][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.757345][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.784900][ T5355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.924615][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.958914][ T5355] veth0_vlan: entered promiscuous mode [ 93.967283][ T5355] veth1_vlan: entered promiscuous mode [ 93.994231][ T5355] veth0_macvtap: entered promiscuous mode [ 94.000374][ T5355] veth1_macvtap: entered promiscuous mode [ 94.016729][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.029479][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.038728][ T5355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.043360][ T5355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047361][ T5355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.054308][ T5355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/05/31 15:11:42 executed programs: 0 [ 94.392472][ T4667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.395977][ T4667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.399183][ T4667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.403704][ T4667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.443095][ T5422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.447145][ T5422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.451443][ T5424] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.456017][ T5424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.459438][ T5424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.463692][ T5424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.469495][ T5335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.474167][ T5424] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.483153][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.494808][ T5335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.499171][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.502911][ T5335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.506073][ T5335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.509628][ T5335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.522678][ T5335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.526431][ T5335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.651806][ T5335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.662832][ T5335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.668538][ T5335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.674861][ T5335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.678129][ T5335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.751281][ T5335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.757597][ T5335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.775078][ T5335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.789369][ T5335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.810723][ T5335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.936397][ T1083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.342837][ T1083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.525252][ T5417] chnl_net:caif_netlink_parms(): no params data found [ 96.622752][ T5335] Bluetooth: hci2: command tx timeout [ 96.625271][ T5335] Bluetooth: hci0: command tx timeout [ 96.627708][ T5335] Bluetooth: hci1: command tx timeout [ 96.630215][ T5335] Bluetooth: hci3: command tx timeout [ 96.701685][ T5335] Bluetooth: hci4: command tx timeout [ 96.891014][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.894249][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.897412][ T5417] bridge_slave_0: entered allmulticast mode [ 96.921599][ T5417] bridge_slave_0: entered promiscuous mode [ 96.942295][ T5335] Bluetooth: hci5: command tx timeout [ 96.970821][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.974084][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.977221][ T5417] bridge_slave_1: entered allmulticast mode [ 96.996633][ T5417] bridge_slave_1: entered promiscuous mode [ 97.107468][ T5417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.158074][ T5417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.275190][ T5417] team0: Port device team_slave_0 added [ 97.325099][ T5417] team0: Port device team_slave_1 added [ 97.409042][ T1083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.449659][ T5433] chnl_net:caif_netlink_parms(): no params data found [ 97.573512][ T1083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.583120][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.585984][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.598175][ T5417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.616334][ T5416] chnl_net:caif_netlink_parms(): no params data found [ 97.707614][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.713158][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.727725][ T5417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.755849][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 97.780441][ T5428] chnl_net:caif_netlink_parms(): no params data found [ 97.947375][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 98.135729][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.138765][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.145832][ T5433] bridge_slave_0: entered allmulticast mode [ 98.149549][ T5433] bridge_slave_0: entered promiscuous mode [ 98.167126][ T1083] bridge_slave_1: left allmulticast mode [ 98.170059][ T1083] bridge_slave_1: left promiscuous mode [ 98.174499][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.186152][ T1083] bridge_slave_0: left allmulticast mode [ 98.188632][ T1083] bridge_slave_0: left promiscuous mode [ 98.191644][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.647155][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.654467][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.659298][ T1083] bond0 (unregistering): Released all slaves [ 98.674515][ T5417] hsr_slave_0: entered promiscuous mode [ 98.677444][ T5417] hsr_slave_1: entered promiscuous mode [ 98.680498][ T5417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.687391][ T5417] Cannot create hsr debugfs directory [ 98.703707][ T5335] Bluetooth: hci3: command tx timeout [ 98.706183][ T5335] Bluetooth: hci1: command tx timeout [ 98.708537][ T5335] Bluetooth: hci0: command tx timeout [ 98.711296][ T4667] Bluetooth: hci2: command tx timeout [ 98.781838][ T5335] Bluetooth: hci4: command tx timeout [ 98.826272][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.829490][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.857245][ T5433] bridge_slave_1: entered allmulticast mode [ 98.880935][ T5433] bridge_slave_1: entered promiscuous mode [ 99.022192][ T5335] Bluetooth: hci5: command tx timeout [ 99.042676][ T5416] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.045810][ T5416] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.048911][ T5416] bridge_slave_0: entered allmulticast mode [ 99.063588][ T5416] bridge_slave_0: entered promiscuous mode [ 99.079005][ T1083] hsr_slave_0: left promiscuous mode [ 99.095347][ T1083] hsr_slave_1: left promiscuous mode [ 99.098275][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.108790][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.122090][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.124898][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.156552][ T1083] veth1_macvtap: left promiscuous mode [ 99.159308][ T1083] veth0_macvtap: left promiscuous mode [ 99.171560][ T1083] veth1_vlan: left promiscuous mode [ 99.174093][ T1083] veth0_vlan: left promiscuous mode [ 99.556656][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 99.580305][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 99.837155][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.840290][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.845727][ T5418] bridge_slave_0: entered allmulticast mode [ 99.849422][ T5418] bridge_slave_0: entered promiscuous mode [ 99.863809][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.866778][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.869944][ T5418] bridge_slave_1: entered allmulticast mode [ 99.882449][ T5418] bridge_slave_1: entered promiscuous mode [ 99.895572][ T5433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.923607][ T5416] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.926667][ T5416] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.929823][ T5416] bridge_slave_1: entered allmulticast mode [ 99.937561][ T5416] bridge_slave_1: entered promiscuous mode [ 99.997215][ T5433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.016487][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.019240][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.022928][ T5428] bridge_slave_0: entered allmulticast mode [ 100.026532][ T5428] bridge_slave_0: entered promiscuous mode [ 100.076588][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.101811][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.104954][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.108060][ T5428] bridge_slave_1: entered allmulticast mode [ 100.116489][ T5428] bridge_slave_1: entered promiscuous mode [ 100.137450][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.201439][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.204630][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.207778][ T5414] bridge_slave_0: entered allmulticast mode [ 100.214957][ T5414] bridge_slave_0: entered promiscuous mode [ 100.227449][ T5416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.243381][ T5418] team0: Port device team_slave_0 added [ 100.248720][ T5433] team0: Port device team_slave_0 added [ 100.266087][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.269025][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.275637][ T5414] bridge_slave_1: entered allmulticast mode [ 100.279459][ T5414] bridge_slave_1: entered promiscuous mode [ 100.297640][ T5416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.327787][ T5418] team0: Port device team_slave_1 added [ 100.335112][ T5433] team0: Port device team_slave_1 added [ 100.390326][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.406746][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.544556][ T5416] team0: Port device team_slave_0 added [ 100.572726][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.575624][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.612838][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.627917][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.637265][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.673589][ T5433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.706667][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.722521][ T5416] team0: Port device team_slave_1 added [ 100.753511][ T5428] team0: Port device team_slave_0 added [ 100.757448][ T5428] team0: Port device team_slave_1 added [ 100.787035][ T5335] Bluetooth: hci0: command tx timeout [ 100.789429][ T5335] Bluetooth: hci2: command tx timeout [ 100.793305][ T5424] Bluetooth: hci1: command tx timeout [ 100.795582][ T5424] Bluetooth: hci3: command tx timeout [ 100.806217][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.809164][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.830134][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.836713][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.839915][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.854047][ T5433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.863512][ T5335] Bluetooth: hci4: command tx timeout [ 100.879036][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.968410][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.977786][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.988976][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.004360][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.007499][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.023381][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.052683][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.055672][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.070256][ T5416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.102537][ T5335] Bluetooth: hci5: command tx timeout [ 101.135047][ T5418] hsr_slave_0: entered promiscuous mode [ 101.151137][ T5418] hsr_slave_1: entered promiscuous mode [ 101.193274][ T5416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.196075][ T5416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.224206][ T5416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.293280][ T5414] team0: Port device team_slave_0 added [ 101.329580][ T5428] hsr_slave_0: entered promiscuous mode [ 101.342659][ T5428] hsr_slave_1: entered promiscuous mode [ 101.345421][ T5428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.348416][ T5428] Cannot create hsr debugfs directory [ 101.381880][ T5433] hsr_slave_0: entered promiscuous mode [ 101.393975][ T5433] hsr_slave_1: entered promiscuous mode [ 101.397147][ T5433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.400514][ T5433] Cannot create hsr debugfs directory [ 101.485859][ T5414] team0: Port device team_slave_1 added [ 101.754314][ T5416] hsr_slave_0: entered promiscuous mode [ 101.757635][ T5416] hsr_slave_1: entered promiscuous mode [ 101.760163][ T5416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.766196][ T5416] Cannot create hsr debugfs directory [ 101.775365][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.778723][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.792369][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.834012][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.836865][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.849408][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.134295][ T5414] hsr_slave_0: entered promiscuous mode [ 102.136867][ T5414] hsr_slave_1: entered promiscuous mode [ 102.140412][ T5414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.147827][ T5414] Cannot create hsr debugfs directory [ 102.266049][ T5417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.343193][ T5417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.385894][ T5417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.402615][ T5417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.537280][ T5418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.566802][ T5418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.614766][ T5418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.632574][ T5418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.863749][ T5335] Bluetooth: hci2: command tx timeout [ 102.866091][ T5335] Bluetooth: hci3: command tx timeout [ 102.868428][ T5335] Bluetooth: hci1: command tx timeout [ 102.871355][ T4667] Bluetooth: hci0: command tx timeout [ 102.894259][ T5416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.939398][ T5417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.943784][ T5335] Bluetooth: hci4: command tx timeout [ 102.995674][ T5416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.006823][ T5416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.064202][ T5416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.079005][ T5417] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.127064][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.130202][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.173199][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.176261][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.183691][ T5335] Bluetooth: hci5: command tx timeout [ 103.227719][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.233041][ T5428] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.239064][ T5428] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.322061][ T5428] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.368566][ T5418] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.404500][ T5428] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.498832][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.502090][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.534904][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.538007][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.669539][ T5433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.811812][ T5433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.834086][ T5433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.927246][ T5433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.019226][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.235756][ T5414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.266575][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.285501][ T5416] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.344780][ T5414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.367570][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.370914][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.432564][ T5414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.465314][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.468373][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.520503][ T5428] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.546974][ T5417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.606061][ T5414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.657770][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.660548][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.710344][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.713585][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.779791][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.906330][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.919263][ T5417] veth0_vlan: entered promiscuous mode [ 104.965050][ T5417] veth1_vlan: entered promiscuous mode [ 105.036011][ T5433] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.127345][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.130773][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.175165][ T5417] veth0_macvtap: entered promiscuous mode [ 105.223553][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.276772][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.280392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.295677][ T5417] veth1_macvtap: entered promiscuous mode [ 105.406355][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.458958][ T5418] veth0_vlan: entered promiscuous mode [ 105.519728][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.536270][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.539351][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.562201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.565667][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.589963][ T5418] veth1_vlan: entered promiscuous mode [ 105.614894][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.620545][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.702688][ T5417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.706430][ T5417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.710150][ T5417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.774873][ T5417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.793229][ T5416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.930540][ T5418] veth0_macvtap: entered promiscuous mode [ 106.033442][ T5418] veth1_macvtap: entered promiscuous mode [ 106.089308][ T5414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.136287][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.159052][ T5433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.198085][ T5416] veth0_vlan: entered promiscuous mode [ 106.253028][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.349256][ T5418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.372447][ T5418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.376137][ T5418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.379829][ T5418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.449902][ T5416] veth1_vlan: entered promiscuous mode [ 106.556810][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.560078][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.750001][ T5428] veth0_vlan: entered promiscuous mode [ 106.779506][ T5416] veth0_macvtap: entered promiscuous mode [ 106.825859][ T5416] veth1_macvtap: entered promiscuous mode [ 106.847269][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.874775][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.889368][ T5428] veth1_vlan: entered promiscuous mode [ 106.906342][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.929748][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.998079][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.046916][ T5416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2025/05/31 15:11:55 executed programs: 12 [ 107.068606][ T5416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.095559][ T5416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.099225][ T5416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.155876][ T5428] veth0_macvtap: entered promiscuous mode [ 107.160565][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.164915][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.224124][ T5428] veth1_macvtap: entered promiscuous mode [ 107.280143][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.307692][ T5414] veth0_vlan: entered promiscuous mode [ 107.327922][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.337497][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.365935][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.386700][ T5428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.390362][ T5428] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.398109][ T5428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.409806][ T5428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.417136][ T5414] veth1_vlan: entered promiscuous mode [ 107.445055][ T5433] veth0_vlan: entered promiscuous mode [ 107.507301][ T5433] veth1_vlan: entered promiscuous mode [ 107.582611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.605484][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.685023][ T5433] veth0_macvtap: entered promiscuous mode [ 107.699506][ T5414] veth0_macvtap: entered promiscuous mode [ 107.718605][ T5433] veth1_macvtap: entered promiscuous mode [ 107.726493][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.744143][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.763877][ T5414] veth1_macvtap: entered promiscuous mode [ 107.807081][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.836344][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.839340][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.880468][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.915129][ T5433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.918780][ T5433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.935433][ T5433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.939083][ T5433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.954279][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.994221][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.023092][ T5414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.026824][ T5414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.037368][ T5414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.042174][ T5414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.050437][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.067728][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.286323][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.297011][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.371703][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.386210][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.429103][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.445779][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.497939][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.516194][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.386296][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.418713][ T5424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.424355][ T5424] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.433777][ T5424] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.437844][ T5424] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.442420][ T5424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.518752][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.636132][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.694965][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.955682][ T5335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.963460][ T5335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.967093][ T5335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.974017][ T5335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.978689][ T5335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.077119][ T1036] bridge_slave_1: left allmulticast mode [ 111.079651][ T1036] bridge_slave_1: left promiscuous mode [ 111.119139][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.239975][ T1036] bridge_slave_0: left allmulticast mode [ 111.265728][ T1036] bridge_slave_0: left promiscuous mode [ 111.268363][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.016869][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.022609][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.027021][ T1036] bond0 (unregistering): Released all slaves 2025/05/31 15:12:00 executed programs: 26 [ 112.364350][ T5424] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.368367][ T5424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.376335][ T5424] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.380269][ T5424] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.384940][ T5424] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.466924][ T5424] Bluetooth: hci2: command tx timeout [ 112.506519][ T5335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.510818][ T5335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.515112][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.519309][ T5335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.523072][ T5335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.530836][ T5335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.534696][ T5335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.538300][ T5335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.557185][ T4667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.561376][ T4667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.745850][ T5424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.750460][ T5424] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.756236][ T5424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.792212][ T5424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.821596][ T5424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.022055][ T5424] Bluetooth: hci3: command tx timeout [ 113.492491][ T1036] hsr_slave_0: left promiscuous mode [ 113.542194][ T1036] hsr_slave_1: left promiscuous mode [ 113.545128][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.548429][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.646988][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.650231][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.686705][ T1036] veth1_macvtap: left promiscuous mode [ 113.689114][ T1036] veth0_macvtap: left promiscuous mode [ 113.709635][ T1036] veth1_vlan: left promiscuous mode [ 113.724675][ T1036] veth0_vlan: left promiscuous mode [ 114.154729][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 114.175271][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 114.461566][ T5407] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN NOPTI [ 114.466743][ T5407] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 114.471198][ T5407] CPU: 0 UID: 0 PID: 5407 Comm: kworker/0:5 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 114.476113][ T5407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.481118][ T5407] Workqueue: events l2cap_info_timeout [ 114.483615][ T5407] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 114.486118][ T5407] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 114.493922][ T5407] RSP: 0018:ffffc900027f77a8 EFLAGS: 00010206 [ 114.496665][ T5407] RAX: dffffc0000000000 RBX: ffffffff8942cc78 RCX: 1fd219a4d5491b00 [ 114.499949][ T5407] RDX: 0000000000000000 RSI: ffffffff8942cc78 RDI: 000000000000004b [ 114.503259][ T5407] RBP: ffffffff8a6eed15 R08: 0000000000000001 R09: 0000000000000000 [ 114.506592][ T5407] R10: dffffc0000000000 R11: ffffffff8a6eecd0 R12: 0000000000000000 [ 114.509990][ T5407] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 114.513371][ T5407] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 114.517182][ T5407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.520025][ T5407] CR2: 000055dd9ffdd138 CR3: 000000000df36000 CR4: 0000000000352ef0 [ 114.523406][ T5407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.526762][ T5407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.530097][ T5407] Call Trace: [ 114.531630][ T5407] [ 114.532958][ T5407] __kasan_check_byte+0x12/0x40 [ 114.535068][ T5407] lock_acquire+0x8d/0x360 [ 114.537031][ T5407] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.539306][ T5407] ? __cancel_work+0x254/0x2e0 [ 114.541427][ T5407] lock_sock_nested+0x48/0x100 [ 114.543511][ T5407] ? l2cap_sock_ready_cb+0x45/0x140 [ 114.545744][ T5407] l2cap_sock_ready_cb+0x45/0x140 [ 114.547867][ T5407] l2cap_conn_start+0x76d/0xe50 [ 114.549957][ T5407] ? __pfx_l2cap_conn_start+0x10/0x10 [ 114.552312][ T5407] ? l2cap_info_timeout+0x60/0xa0 [ 114.554456][ T5407] ? __lock_acquire+0xab9/0xd20 [ 114.556610][ T5407] ? __pfx___mutex_lock+0x10/0x10 [ 114.558796][ T5407] ? process_scheduled_works+0x9ef/0x17b0 [ 114.561244][ T5407] l2cap_info_timeout+0x68/0xa0 [ 114.563356][ T5407] ? process_scheduled_works+0x9ef/0x17b0 [ 114.565750][ T5407] process_scheduled_works+0xade/0x17b0 [ 114.568088][ T5407] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.570637][ T5407] worker_thread+0x8a0/0xda0 [ 114.572670][ T5407] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.575293][ T5407] ? __kthread_parkme+0x7b/0x200 [ 114.577439][ T5407] kthread+0x711/0x8a0 [ 114.579255][ T5407] ? __pfx_worker_thread+0x10/0x10 [ 114.581423][ T5407] ? __pfx_kthread+0x10/0x10 [ 114.583354][ T5407] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.585499][ T5407] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.587513][ T5407] ? __pfx_kthread+0x10/0x10 [ 114.589375][ T5407] ret_from_fork+0x3fc/0x770 [ 114.591179][ T5407] ? __pfx_ret_from_fork+0x10/0x10 [ 114.593230][ T5407] ? __pfx_kthread+0x10/0x10 [ 114.594993][ T5407] ret_from_fork_asm+0x1a/0x30 [ 114.596874][ T5407] [ 114.598141][ T5407] Modules linked in: [ 114.600797][ T5407] ---[ end trace 0000000000000000 ]--- [ 114.603494][ T5424] Bluetooth: hci0: command tx timeout [ 114.605752][ T5424] Bluetooth: hci2: command tx timeout [ 114.634534][ T4667] Bluetooth: hci4: command tx timeout [ 114.636903][ T4667] Bluetooth: hci1: command tx timeout [ 114.774797][ T5407] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 114.777410][ T5407] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 114.885029][ T5424] Bluetooth: hci5: command tx timeout [ 114.888029][ T5407] RSP: 0018:ffffc900027f77a8 EFLAGS: 00010206 [ 114.900766][ T5407] RAX: dffffc0000000000 RBX: ffffffff8942cc78 RCX: 1fd219a4d5491b00 [ 114.904174][ T5407] RDX: 0000000000000000 RSI: ffffffff8942cc78 RDI: 000000000000004b [ 114.907548][ T5407] RBP: ffffffff8a6eed15 R08: 0000000000000001 R09: 0000000000000000 [ 114.972148][ T5407] R10: dffffc0000000000 R11: ffffffff8a6eecd0 R12: 0000000000000000 [ 114.975500][ T5407] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 114.978716][ T5407] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 115.020280][ T5407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.023661][ T793] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#2] SMP KASAN NOPTI [ 115.028922][ T793] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 115.032545][ T793] CPU: 0 UID: 0 PID: 793 Comm: kworker/0:2 Tainted: G D 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 115.038639][ T793] Tainted: [D]=DIE [ 115.040574][ T793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.045633][ T793] Workqueue: events l2cap_info_timeout [ 115.047932][ T793] RIP: 0010:do_raw_spin_lock+0x78/0x290 [ 115.050332][ T793] Code: ce 9e 81 48 8d 4c 24 20 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 18 4a 89 04 39 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 9f 01 00 00 41 8b 06 3d ad 4e ad de 0f [ 115.058414][ T793] RSP: 0018:ffffc90001b2f7a0 EFLAGS: 00010203 [ 115.060999][ T793] RAX: 0000000000000038 RBX: 00000000000001c0 RCX: 1ffff92000365ef8 [ 115.064381][ T793] RDX: 0000000000000000 RSI: ffffffff8be265a0 RDI: 00000000000001c0 [ 115.067708][ T793] RBP: ffffc90001b2f858 R08: 0000000000000001 R09: 0000000000000000 [ 115.070960][ T793] R10: dffffc0000000000 R11: ffffffff8a6eecd0 R12: dffffc0000000000 [ 115.074343][ T793] R13: dffffc0000000000 R14: 00000000000001c4 R15: dffffc0000000000 [ 115.077847][ T793] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 115.082131][ T793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.085694][ T793] CR2: 00007ffd7e1f6eac CR3: 0000000041b92000 CR4: 0000000000352ef0 [ 115.089345][ T793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.092739][ T793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.096208][ T793] Call Trace: [ 115.097665][ T793] [ 115.099033][ T793] ? lock_acquire+0x5f/0x360 [ 115.101095][ T793] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 115.103571][ T793] ? __cancel_work+0x254/0x2e0 [ 115.105874][ T793] ? lock_sock_nested+0x6a/0x100 [ 115.108385][ T793] lock_sock_nested+0x6a/0x100 [ 115.110734][ T793] l2cap_sock_ready_cb+0x45/0x140 [ 115.112959][ T793] l2cap_conn_start+0x76d/0xe50 [ 115.115149][ T793] ? __pfx_l2cap_conn_start+0x10/0x10 [ 115.117528][ T793] ? l2cap_info_timeout+0x60/0xa0 [ 115.119699][ T793] ? __pfx___mutex_lock+0x10/0x10 [ 115.121830][ T793] ? lock_acquire+0x5f/0x360 [ 115.123768][ T793] l2cap_info_timeout+0x68/0xa0 [ 115.125823][ T793] ? process_scheduled_works+0x9ef/0x17b0 [ 115.128211][ T793] process_scheduled_works+0xade/0x17b0 [ 115.130525][ T793] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.133012][ T793] worker_thread+0x8a0/0xda0 [ 115.135020][ T793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 115.137511][ T793] ? __kthread_parkme+0x7b/0x200 [ 115.139538][ T793] kthread+0x711/0x8a0 [ 115.141227][ T793] ? __pfx_worker_thread+0x10/0x10 [ 115.143371][ T793] ? __pfx_kthread+0x10/0x10 [ 115.145368][ T793] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.147505][ T793] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.149728][ T793] ? __pfx_kthread+0x10/0x10 [ 115.151735][ T793] ret_from_fork+0x3fc/0x770 [ 115.153747][ T793] ? __pfx_ret_from_fork+0x10/0x10 [ 115.155953][ T793] ? __pfx_kthread+0x10/0x10 [ 115.158106][ T793] ret_from_fork_asm+0x1a/0x30 [ 115.160276][ T793] [ 115.161605][ T793] Modules linked in: [ 115.163358][ T793] ---[ end trace 0000000000000000 ]--- [ 115.165727][ T793] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 115.168289][ T793] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 115.175876][ T793] RSP: 0018:ffffc900027f77a8 EFLAGS: 00010206 [ 115.178273][ T793] RAX: dffffc0000000000 RBX: ffffffff8942cc78 RCX: 1fd219a4d5491b00 [ 115.181342][ T793] RDX: 0000000000000000 RSI: ffffffff8942cc78 RDI: 000000000000004b [ 115.184780][ T793] RBP: ffffffff8a6eed15 R08: 0000000000000001 R09: 0000000000000000 [ 115.188086][ T793] R10: dffffc0000000000 R11: ffffffff8a6eecd0 R12: 0000000000000000 [ 115.191465][ T793] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 115.194782][ T793] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 115.198663][ T793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.201454][ T793] CR2: 00007ffd7e1f6eac CR3: 0000000041b92000 CR4: 0000000000352ef0 [ 115.204728][ T793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.208133][ T793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.211643][ T793] Kernel panic - not syncing: Fatal exception in interrupt [ 115.215175][ T793] Kernel Offset: disabled [ 115.217149][ T793] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:12:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900027f6fd0 R8 =ffff888033808237 R9 =1ffff11006701046 R10=dffffc0000000000 R11=ffffffff85459130 R12=dffffc0000000000 R13=ffffffff99ab093a R14=ffffffff99db5d20 R15=0000000000000000 RIP=ffffffff854591ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d265000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055dd9ffdd138 CR3=000000000df36000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40139e8d89c035bc ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 39d6921b39d6921b 39d6921b39d6921b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 05b30efbec3506f3 a9aef651262e2e23 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 163fc182f6d41506 bd46e40db185ce38 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c7a64c5cf6c803f b2a3ef9de46870bc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c15c62cab004ec66 ff704acce6869203 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 808e692b784b21df d724cee5eda8e1ee ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3eae811048333955 9387bd972ef344dd ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 697339e65c1a3df4 7da8ca7eee1ec7d3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 464ba2e8f3b06be1 be17d229bfd7067d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 709161d6709161d6 709161d6709161d6 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 878e4dea878e4dea 878e4dea878e4dea ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 732d2198732d2198 732d2198732d2198 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000