[ 86.702880][ T57] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:42921' (ED25519) to the list of known hosts. 2025/03/06 16:39:45 ignoring optional flag "sandboxArg"="0" 2025/03/06 16:39:47 parsed 1 programs [ 377.813382][ T5345] cgroup: Unknown subsys name 'net' [ 377.882261][ T5345] cgroup: Unknown subsys name 'cpuset' [ 377.886505][ T5345] cgroup: Unknown subsys name 'rlimit' [ 379.289292][ T5345] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 383.288413][ T5373] modprobe (5373) used greatest stack depth: 19992 bytes left [ 383.418748][ T5360] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 383.656193][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.659029][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.867715][ T5360] syz-executor (5360) used greatest stack depth: 19448 bytes left [ 383.952605][ T5393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.956209][ T5393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.960075][ T5393] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.969626][ T5393] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.972651][ T5393] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 383.975561][ T5393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.600777][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 385.807453][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.828554][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.831647][ T5359] bridge_slave_0: entered allmulticast mode [ 385.841274][ T5359] bridge_slave_0: entered promiscuous mode [ 385.876689][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.880740][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.883589][ T5359] bridge_slave_1: entered allmulticast mode [ 385.895998][ T5359] bridge_slave_1: entered promiscuous mode [ 385.971810][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.976739][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.117308][ T5359] team0: Port device team_slave_0 added [ 386.149719][ T5359] team0: Port device team_slave_1 added [ 386.384994][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.387842][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.519345][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.578384][ T5389] syz-executor (5389) used greatest stack depth: 18680 bytes left [ 386.593583][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.596471][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.688431][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.275984][ T5359] hsr_slave_0: entered promiscuous mode [ 387.289026][ T5359] hsr_slave_1: entered promiscuous mode [ 388.013073][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.058325][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.172903][ T5412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.175746][ T5412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.234974][ T5359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.297962][ T5359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.323262][ T5359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.355276][ T5359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.642920][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.682797][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.714449][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.717457][ T5412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.744185][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.747053][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.034956][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.063888][ T5359] veth0_vlan: entered promiscuous mode [ 389.073092][ T5359] veth1_vlan: entered promiscuous mode [ 389.097266][ T5359] veth0_macvtap: entered promiscuous mode [ 389.103827][ T5359] veth1_macvtap: entered promiscuous mode [ 389.115094][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.124156][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.132603][ T5359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.136140][ T5359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.140552][ T5359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.145393][ T5359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/03/06 16:40:01 executed programs: 0 [ 389.398445][ T5359] syz-executor (5359) used greatest stack depth: 17624 bytes left [ 389.418056][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.422392][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.431863][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.434920][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.437567][ T4668] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 389.440805][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.502789][ T5393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.506532][ T5393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.510599][ T5393] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.527035][ T5393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.535309][ T5393] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 389.538685][ T5393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.568159][ T5482] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.576447][ T5482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.580694][ T5482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.584493][ T5482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.592320][ T5482] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 389.595187][ T5482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.604436][ T4668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.618984][ T5482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.623009][ T5482] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.626111][ T5482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.632170][ T5482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.635203][ T5482] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 389.643470][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.646102][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.654162][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.659130][ T5393] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.662744][ T5393] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 389.674110][ T5393] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.701325][ T5393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.709015][ T5393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.714840][ T5393] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.718800][ T5393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.728676][ T5393] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 389.739769][ T5393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.891217][ T5330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.750198][ T5330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.765136][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 391.074131][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.076914][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.106988][ T5474] bridge_slave_0: entered allmulticast mode [ 391.119507][ T5474] bridge_slave_0: entered promiscuous mode [ 391.157651][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.162168][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.164993][ T5474] bridge_slave_1: entered allmulticast mode [ 391.168031][ T5474] bridge_slave_1: entered promiscuous mode [ 391.284836][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.321094][ T5330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.356434][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.479977][ T5474] team0: Port device team_slave_0 added [ 391.492190][ T5393] Bluetooth: hci0: command tx timeout [ 391.513605][ T5474] team0: Port device team_slave_1 added [ 391.565745][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.569187][ T5393] Bluetooth: hci1: command tx timeout [ 391.578965][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.593384][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.622287][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 391.632976][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.635573][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.645946][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.652226][ T5393] Bluetooth: hci2: command tx timeout [ 391.731232][ T5393] Bluetooth: hci4: command tx timeout [ 391.733974][ T5393] Bluetooth: hci3: command tx timeout [ 391.767507][ T5478] chnl_net:caif_netlink_parms(): no params data found [ 391.781034][ T5470] chnl_net:caif_netlink_parms(): no params data found [ 391.793349][ T5474] hsr_slave_0: entered promiscuous mode [ 391.796354][ T5474] hsr_slave_1: entered promiscuous mode [ 391.800238][ T5474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.803289][ T5474] Cannot create hsr debugfs directory [ 391.808550][ T5485] Bluetooth: hci5: command tx timeout [ 391.961436][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 391.978162][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.982716][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.986663][ T5475] bridge_slave_0: entered allmulticast mode [ 391.993484][ T5475] bridge_slave_0: entered promiscuous mode [ 392.005565][ T5479] chnl_net:caif_netlink_parms(): no params data found [ 392.026582][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.033316][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.036201][ T5475] bridge_slave_1: entered allmulticast mode [ 392.041020][ T5475] bridge_slave_1: entered promiscuous mode [ 392.100702][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.103672][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.106551][ T5470] bridge_slave_0: entered allmulticast mode [ 392.115485][ T5470] bridge_slave_0: entered promiscuous mode [ 392.124565][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.127602][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.141698][ T5478] bridge_slave_0: entered allmulticast mode [ 392.144948][ T5478] bridge_slave_0: entered promiscuous mode [ 392.165346][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.170922][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.173944][ T5470] bridge_slave_1: entered allmulticast mode [ 392.177351][ T5470] bridge_slave_1: entered promiscuous mode [ 392.184993][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.193831][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.197523][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.203675][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.206447][ T5478] bridge_slave_1: entered allmulticast mode [ 392.212112][ T5478] bridge_slave_1: entered promiscuous mode [ 392.264753][ T5330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.331015][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.333909][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.336880][ T5484] bridge_slave_0: entered allmulticast mode [ 392.343119][ T5484] bridge_slave_0: entered promiscuous mode [ 392.352464][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.361856][ T5475] team0: Port device team_slave_0 added [ 392.366373][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.392512][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.395399][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.406242][ T5484] bridge_slave_1: entered allmulticast mode [ 392.411596][ T5484] bridge_slave_1: entered promiscuous mode [ 392.424086][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.431908][ T5475] team0: Port device team_slave_1 added [ 392.435711][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.494819][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.497713][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.504401][ T5479] bridge_slave_0: entered allmulticast mode [ 392.507599][ T5479] bridge_slave_0: entered promiscuous mode [ 392.513827][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.516787][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.522910][ T5479] bridge_slave_1: entered allmulticast mode [ 392.526813][ T5479] bridge_slave_1: entered promiscuous mode [ 392.545017][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.583072][ T5478] team0: Port device team_slave_0 added [ 392.603674][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.607643][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.613289][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.627070][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.637013][ T5470] team0: Port device team_slave_0 added [ 392.651091][ T5478] team0: Port device team_slave_1 added [ 392.678047][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.683540][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.696381][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.707332][ T5470] team0: Port device team_slave_1 added [ 392.726235][ T5479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.803658][ T5330] bridge_slave_1: left allmulticast mode [ 392.805829][ T5330] bridge_slave_1: left promiscuous mode [ 392.808938][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.817455][ T5330] bridge_slave_0: left allmulticast mode [ 392.824272][ T5330] bridge_slave_0: left promiscuous mode [ 392.826760][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.137536][ T5330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.145467][ T5330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.154843][ T5330] bond0 (unregistering): Released all slaves [ 393.165133][ T5479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.229856][ T5474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.247686][ T5474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.266376][ T5484] team0: Port device team_slave_0 added [ 393.286382][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.290227][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.306289][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.328670][ T5330] hsr_slave_0: left promiscuous mode [ 393.331194][ T5330] hsr_slave_1: left promiscuous mode [ 393.333738][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.336537][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.347333][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.350736][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.365731][ T5330] veth1_macvtap: left promiscuous mode [ 393.368623][ T5330] veth0_macvtap: left promiscuous mode [ 393.371014][ T5330] veth1_vlan: left promiscuous mode [ 393.373358][ T5330] veth0_vlan: left promiscuous mode [ 393.579167][ T5485] Bluetooth: hci0: command tx timeout [ 393.649165][ T5485] Bluetooth: hci1: command tx timeout [ 393.733591][ T5485] Bluetooth: hci2: command tx timeout [ 393.754848][ T5330] team0 (unregistering): Port device team_slave_1 removed [ 393.777667][ T5330] team0 (unregistering): Port device team_slave_0 removed [ 393.809981][ T5485] Bluetooth: hci3: command tx timeout [ 393.812330][ T5485] Bluetooth: hci4: command tx timeout [ 393.889018][ T5393] Bluetooth: hci5: command tx timeout [ 394.150529][ T5479] team0: Port device team_slave_0 added [ 394.153762][ T5474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.167015][ T5484] team0: Port device team_slave_1 added [ 394.194332][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.197294][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.219325][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.224645][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.227256][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.243816][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.252718][ T5479] team0: Port device team_slave_1 added [ 394.257696][ T5474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.318030][ T5475] hsr_slave_0: entered promiscuous mode [ 394.322897][ T5475] hsr_slave_1: entered promiscuous mode [ 394.326975][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.334994][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.345699][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.385333][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.399166][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.426578][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.477099][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.484456][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.540352][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.573284][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.575951][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.598158][ T5479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.619292][ T5478] hsr_slave_0: entered promiscuous mode [ 394.632629][ T5478] hsr_slave_1: entered promiscuous mode [ 394.635204][ T5478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.648388][ T5478] Cannot create hsr debugfs directory [ 394.692631][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.695452][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.725259][ T5479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.795683][ T5470] hsr_slave_0: entered promiscuous mode [ 394.809926][ T5470] hsr_slave_1: entered promiscuous mode [ 394.815592][ T5470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.829298][ T5470] Cannot create hsr debugfs directory [ 394.855153][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.907027][ T5484] hsr_slave_0: entered promiscuous mode [ 394.919423][ T5484] hsr_slave_1: entered promiscuous mode [ 394.922131][ T5484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.925231][ T5484] Cannot create hsr debugfs directory [ 394.967973][ T5474] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.013672][ T5479] hsr_slave_0: entered promiscuous mode [ 395.016562][ T5479] hsr_slave_1: entered promiscuous mode [ 395.033791][ T5479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.036882][ T5479] Cannot create hsr debugfs directory [ 395.241661][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.244442][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.253931][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.256959][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.648639][ T5393] Bluetooth: hci0: command tx timeout [ 395.728636][ T5393] Bluetooth: hci1: command tx timeout [ 395.814422][ T5393] Bluetooth: hci2: command tx timeout [ 395.894761][ T5393] Bluetooth: hci4: command tx timeout [ 395.896995][ T5393] Bluetooth: hci3: command tx timeout [ 395.936722][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.969085][ T5393] Bluetooth: hci5: command tx timeout [ 396.011154][ T5475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 396.094910][ T5475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.162350][ T5475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.180216][ T5475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.217881][ T5474] veth0_vlan: entered promiscuous mode [ 396.261887][ T5474] veth1_vlan: entered promiscuous mode [ 396.267038][ T5478] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.286945][ T5478] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.302123][ T5478] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.351539][ T5478] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.437025][ T5474] veth0_macvtap: entered promiscuous mode [ 396.459950][ T5470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.469344][ T5470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.501694][ T5474] veth1_macvtap: entered promiscuous mode [ 396.549463][ T5470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.564011][ T5470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.594525][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.650044][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.715784][ T5474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.725091][ T5474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.744109][ T5474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.747584][ T5474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.763649][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.866301][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.874176][ T5484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.883418][ T5484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.975671][ T5484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 396.981330][ T5484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.065915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.068834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.082416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.085150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.118043][ T5475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.124410][ T5475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.145428][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.276675][ T5478] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.327167][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.395082][ T5376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.431134][ T5376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.491607][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.494500][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.504582][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.507625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.605257][ T5470] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.635496][ T5478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.669372][ T5330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.699915][ T5330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.727725][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.730803][ T5376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.735504][ T5393] Bluetooth: hci0: command tx timeout [ 397.774244][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.777760][ T5376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.805571][ T5479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.810520][ T5393] Bluetooth: hci1: command tx timeout [ 397.889067][ T5393] Bluetooth: hci2: command tx timeout [ 397.939108][ T5479] netdevsim netdevsim3 netdevsim1: renamed from eth1 2025/03/06 16:40:09 executed programs: 12 [ 397.965699][ T5479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.970203][ T5393] Bluetooth: hci3: command tx timeout [ 397.972444][ T5393] Bluetooth: hci4: command tx timeout [ 398.036525][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.051305][ T5485] Bluetooth: hci5: command tx timeout [ 398.076723][ T5470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.104321][ T5479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.126648][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.146585][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.151613][ T5485] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 398.155154][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: kworker/u5:4 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 398.155165][ T5485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 398.155170][ T5485] Workqueue: hci1 hci_rx_work [ 398.155309][ T5485] Call Trace: [ 398.155314][ T5485] [ 398.155319][ T5485] dump_stack_lvl+0x241/0x360 [ 398.155336][ T5485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.155347][ T5485] ? __pfx__printk+0x10/0x10 [ 398.155360][ T5485] ? __kmalloc_cache_noprof+0x243/0x390 [ 398.155374][ T5485] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 398.155422][ T5485] sysfs_create_dir_ns+0x2ce/0x3a0 [ 398.155436][ T5485] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 398.155455][ T5485] kobject_add_internal+0x435/0x8d0 [ 398.155475][ T5485] kobject_add+0x152/0x220 [ 398.155488][ T5485] ? do_raw_spin_unlock+0x58/0x8b0 [ 398.155502][ T5485] ? device_add+0x3e7/0xbf0 [ 398.155517][ T5485] ? __pfx_kobject_add+0x10/0x10 [ 398.155532][ T5485] ? _raw_spin_unlock+0x28/0x50 [ 398.155546][ T5485] ? get_device_parent+0x165/0x410 [ 398.155561][ T5485] device_add+0x4e5/0xbf0 [ 398.155579][ T5485] hci_conn_add_sysfs+0xe8/0x200 [ 398.155596][ T5485] le_conn_complete_evt+0xd1a/0x1360 [ 398.155619][ T5485] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 398.155629][ T5485] ? __mutex_unlock_slowpath+0x227/0x800 [ 398.155646][ T5485] ? __skb_clone+0x5c/0x6c0 [ 398.155658][ T5485] ? skb_pull_data+0x112/0x230 [ 398.155673][ T5485] hci_le_conn_complete_evt+0x18c/0x420 [ 398.155690][ T5485] hci_event_packet+0xa54/0x1540 [ 398.155704][ T5485] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 398.155725][ T5485] ? __pfx_hci_event_packet+0x10/0x10 [ 398.155735][ T5485] ? do_raw_spin_unlock+0x58/0x8b0 [ 398.155748][ T5485] ? kcov_remote_start+0x97/0x7d0 [ 398.155760][ T5485] ? kcov_remote_start+0xd0/0x7d0 [ 398.155773][ T5485] ? insn_decode+0x490/0x4e0 [ 398.155787][ T5485] ? hci_send_to_monitor+0xdc/0x530 [ 398.155802][ T5485] hci_rx_work+0x3f3/0xdb0 [ 398.155819][ T5485] ? process_scheduled_works+0x9c6/0x18e0 [ 398.155832][ T5485] process_scheduled_works+0xabe/0x18e0 [ 398.155860][ T5485] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.155879][ T5485] ? assign_work+0x364/0x3d0 [ 398.155893][ T5485] worker_thread+0x870/0xd30 [ 398.155912][ T5485] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 398.155925][ T5485] ? __kthread_parkme+0x169/0x1d0 [ 398.155941][ T5485] ? __pfx_worker_thread+0x10/0x10 [ 398.155952][ T5485] kthread+0x7a9/0x920 [ 398.155965][ T5485] ? __pfx_kthread+0x10/0x10 [ 398.155981][ T5485] ? __pfx_worker_thread+0x10/0x10 [ 398.156012][ T5485] ? __pfx_kthread+0x10/0x10 [ 398.156027][ T5485] ? __pfx_kthread+0x10/0x10 [ 398.156042][ T5485] ? __pfx_kthread+0x10/0x10 [ 398.156055][ T5485] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.156066][ T5485] ? lockdep_hardirqs_on+0x99/0x150 [ 398.156077][ T5485] ? __pfx_kthread+0x10/0x10 [ 398.156093][ T5485] ret_from_fork+0x4b/0x80 [ 398.156106][ T5485] ? __pfx_kthread+0x10/0x10 [ 398.156120][ T5485] ret_from_fork_asm+0x1a/0x30 [ 398.156143][ T5485] [ 398.156696][ T5485] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 398.283821][ T5485] Bluetooth: hci1: failed to register connection device [ 398.375233][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.378061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.475424][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.481611][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.484717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.515386][ T5393] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 398.777822][ T5475] veth0_vlan: entered promiscuous mode [ 398.816534][ T5475] veth1_vlan: entered promiscuous mode [ 398.990019][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.027155][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.111377][ T5479] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.135354][ T5475] veth0_macvtap: entered promiscuous mode [ 399.166764][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.169484][ T5376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.240327][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.243261][ T5376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.305785][ T5475] veth1_macvtap: entered promiscuous mode [ 399.416150][ T5485] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 399.431310][ T5470] veth0_vlan: entered promiscuous mode [ 399.444325][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.451075][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.464351][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.504898][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.515916][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.522555][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.573767][ T5478] veth0_vlan: entered promiscuous mode [ 399.587909][ T5475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.604470][ T5475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.613717][ T5475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.623216][ T5475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.661872][ T5470] veth1_vlan: entered promiscuous mode [ 399.677351][ T5479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.697863][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.738712][ T5478] veth1_vlan: entered promiscuous mode [ 400.029529][ T5470] veth0_macvtap: entered promiscuous mode [ 400.061705][ T5478] veth0_macvtap: entered promiscuous mode [ 400.084102][ T5470] veth1_macvtap: entered promiscuous mode [ 400.137073][ T5491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.145392][ T5478] veth1_macvtap: entered promiscuous mode [ 400.194033][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.198961][ T5491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.267717][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.290359][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.294545][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.323274][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.330461][ T5393] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 400.336129][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.356762][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.365612][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.379210][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.390742][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.402886][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.415711][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.436601][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.445877][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.469997][ T5470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.484624][ T5470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.495166][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.542793][ T5470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.555513][ T5470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.574630][ T5470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.585795][ T5470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.606374][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.628047][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.636103][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.650949][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.661895][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.671888][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.676858][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.723313][ T5478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.727154][ T5478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.735127][ T5478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.741250][ T5478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.755271][ T5376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.782599][ T5376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.826654][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.867211][ T5484] veth0_vlan: entered promiscuous mode [ 401.010728][ T5484] veth1_vlan: entered promiscuous mode [ 401.100166][ T5393] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 401.104079][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: kworker/u5:2 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 401.104097][ T5393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 401.104104][ T5393] Workqueue: hci2 hci_rx_work [ 401.104231][ T5393] Call Trace: [ 401.104236][ T5393] [ 401.104242][ T5393] dump_stack_lvl+0x241/0x360 [ 401.104259][ T5393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.104270][ T5393] ? __pfx__printk+0x10/0x10 [ 401.104284][ T5393] ? __kmalloc_cache_noprof+0x243/0x390 [ 401.104297][ T5393] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 401.104337][ T5393] sysfs_create_dir_ns+0x2ce/0x3a0 [ 401.104350][ T5393] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 401.104367][ T5393] kobject_add_internal+0x435/0x8d0 [ 401.104387][ T5393] kobject_add+0x152/0x220 [ 401.104400][ T5393] ? do_raw_spin_unlock+0x58/0x8b0 [ 401.104413][ T5393] ? device_add+0x3e7/0xbf0 [ 401.104428][ T5393] ? __pfx_kobject_add+0x10/0x10 [ 401.104441][ T5393] ? _raw_spin_unlock+0x28/0x50 [ 401.104454][ T5393] ? get_device_parent+0x165/0x410 [ 401.104470][ T5393] device_add+0x4e5/0xbf0 [ 401.104487][ T5393] hci_conn_add_sysfs+0xe8/0x200 [ 401.104504][ T5393] le_conn_complete_evt+0xd1a/0x1360 [ 401.104523][ T5393] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 401.104535][ T5393] ? __mutex_unlock_slowpath+0x227/0x800 [ 401.104550][ T5393] ? __skb_clone+0x5c/0x6c0 [ 401.104561][ T5393] ? skb_pull_data+0x112/0x230 [ 401.104574][ T5393] hci_le_conn_complete_evt+0x18c/0x420 [ 401.104591][ T5393] hci_event_packet+0xa54/0x1540 [ 401.104603][ T5393] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 401.104618][ T5393] ? __pfx_hci_event_packet+0x10/0x10 [ 401.104627][ T5393] ? do_raw_spin_unlock+0x58/0x8b0 [ 401.104639][ T5393] ? kcov_remote_start+0x97/0x7d0 [ 401.104651][ T5393] ? kcov_remote_start+0xd0/0x7d0 [ 401.104663][ T5393] ? insn_decode+0x490/0x4e0 [ 401.104677][ T5393] ? hci_send_to_monitor+0xdc/0x530 [ 401.104691][ T5393] hci_rx_work+0x3f3/0xdb0 [ 401.104706][ T5393] ? process_scheduled_works+0x9c6/0x18e0 [ 401.104718][ T5393] process_scheduled_works+0xabe/0x18e0 [ 401.104746][ T5393] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.104763][ T5393] ? assign_work+0x364/0x3d0 [ 401.104778][ T5393] worker_thread+0x870/0xd30 [ 401.104795][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 401.104808][ T5393] ? __kthread_parkme+0x169/0x1d0 [ 401.104822][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 401.104834][ T5393] kthread+0x7a9/0x920 [ 401.104847][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.104861][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 401.104873][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.104885][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.104900][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.104912][ T5393] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.104922][ T5393] ? lockdep_hardirqs_on+0x99/0x150 [ 401.104933][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.104947][ T5393] ret_from_fork+0x4b/0x80 [ 401.104959][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.104972][ T5393] ret_from_fork_asm+0x1a/0x30 [ 401.104992][ T5393] [ 401.105008][ T5393] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 401.238340][ T5393] Bluetooth: hci2: failed to register connection device [ 401.259343][ T5491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.262717][ T5491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.348529][ T5330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.352777][ T5479] veth0_vlan: entered promiscuous mode [ 401.359427][ T5330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.370047][ T5484] veth0_macvtap: entered promiscuous mode [ 401.378613][ T5393] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 401.385011][ T5393] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 401.407595][ T5488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.421146][ T5479] veth1_vlan: entered promiscuous mode [ 401.424221][ T5488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.447956][ T5484] veth1_macvtap: entered promiscuous mode [ 401.482840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.503099][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.593490][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.612308][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.626104][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.641984][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.650931][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.661619][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.671720][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.676395][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.706066][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.745134][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.764913][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.776162][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.785327][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.792708][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.801543][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.805416][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.813865][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.825664][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.833317][ T5485] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 401.838074][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: kworker/u5:4 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 401.838091][ T5485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 401.838098][ T5485] Workqueue: hci3 hci_rx_work [ 401.838136][ T5485] Call Trace: [ 401.838149][ T5485] [ 401.838154][ T5485] dump_stack_lvl+0x241/0x360 [ 401.838170][ T5485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.838181][ T5485] ? __pfx__printk+0x10/0x10 [ 401.838215][ T5485] ? __kmalloc_cache_noprof+0x243/0x390 [ 401.838231][ T5485] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 401.838251][ T5485] sysfs_create_dir_ns+0x2ce/0x3a0 [ 401.838263][ T5485] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 401.838280][ T5485] kobject_add_internal+0x435/0x8d0 [ 401.838300][ T5485] kobject_add+0x152/0x220 [ 401.838314][ T5485] ? do_raw_spin_unlock+0x58/0x8b0 [ 401.838326][ T5485] ? device_add+0x3e7/0xbf0 [ 401.838341][ T5485] ? __pfx_kobject_add+0x10/0x10 [ 401.838355][ T5485] ? _raw_spin_unlock+0x28/0x50 [ 401.838368][ T5485] ? get_device_parent+0x165/0x410 [ 401.838384][ T5485] device_add+0x4e5/0xbf0 [ 401.838402][ T5485] hci_conn_add_sysfs+0xe8/0x200 [ 401.838441][ T5485] le_conn_complete_evt+0xd1a/0x1360 [ 401.838462][ T5485] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 401.838473][ T5485] ? __mutex_unlock_slowpath+0x227/0x800 [ 401.838489][ T5485] ? __skb_clone+0x5c/0x6c0 [ 401.838499][ T5485] ? skb_pull_data+0x112/0x230 [ 401.838514][ T5485] hci_le_conn_complete_evt+0x18c/0x420 [ 401.838531][ T5485] hci_event_packet+0xa54/0x1540 [ 401.838544][ T5485] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 401.838560][ T5485] ? __pfx_hci_event_packet+0x10/0x10 [ 401.838570][ T5485] ? do_raw_spin_unlock+0x58/0x8b0 [ 401.838583][ T5485] ? kcov_remote_start+0x97/0x7d0 [ 401.838596][ T5485] ? kcov_remote_start+0xd0/0x7d0 [ 401.838608][ T5485] ? insn_decode+0x490/0x4e0 [ 401.838624][ T5485] ? hci_send_to_monitor+0xdc/0x530 [ 401.838637][ T5485] hci_rx_work+0x3f3/0xdb0 [ 401.838654][ T5485] ? process_scheduled_works+0x9c6/0x18e0 [ 401.838667][ T5485] process_scheduled_works+0xabe/0x18e0 [ 401.838695][ T5485] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.838713][ T5485] ? assign_work+0x364/0x3d0 [ 401.838727][ T5485] worker_thread+0x870/0xd30 [ 401.838745][ T5485] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 401.838760][ T5485] ? __kthread_parkme+0x169/0x1d0 [ 401.838776][ T5485] ? __pfx_worker_thread+0x10/0x10 [ 401.838788][ T5485] kthread+0x7a9/0x920 [ 401.838801][ T5485] ? __pfx_kthread+0x10/0x10 [ 401.838815][ T5485] ? __pfx_worker_thread+0x10/0x10 [ 401.838827][ T5485] ? __pfx_kthread+0x10/0x10 [ 401.838840][ T5485] ? __pfx_kthread+0x10/0x10 [ 401.838856][ T5485] ? __pfx_kthread+0x10/0x10 [ 401.838868][ T5485] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.838879][ T5485] ? lockdep_hardirqs_on+0x99/0x150 [ 401.838891][ T5485] ? __pfx_kthread+0x10/0x10 [ 401.838906][ T5485] ret_from_fork+0x4b/0x80 [ 401.838919][ T5485] ? __pfx_kthread+0x10/0x10 [ 401.838933][ T5485] ret_from_fork_asm+0x1a/0x30 [ 401.838957][ T5485] [ 401.958883][ T5485] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 401.965340][ T5485] Bluetooth: hci3: failed to register connection device [ 401.980355][ T5393] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 401.984816][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: kworker/u5:2 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 401.984835][ T5393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 401.984844][ T5393] Workqueue: hci0 hci_rx_work [ 401.984863][ T5393] Call Trace: [ 401.984868][ T5393] [ 401.984874][ T5393] dump_stack_lvl+0x241/0x360 [ 401.984892][ T5393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.984903][ T5393] ? __pfx__printk+0x10/0x10 [ 401.984918][ T5393] ? __kmalloc_cache_noprof+0x243/0x390 [ 401.984933][ T5393] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 401.984949][ T5393] sysfs_create_dir_ns+0x2ce/0x3a0 [ 401.984964][ T5393] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 401.984984][ T5393] kobject_add_internal+0x435/0x8d0 [ 401.985007][ T5393] kobject_add+0x152/0x220 [ 401.985023][ T5393] ? do_raw_spin_unlock+0x58/0x8b0 [ 401.985037][ T5393] ? device_add+0x3e7/0xbf0 [ 401.985054][ T5393] ? __pfx_kobject_add+0x10/0x10 [ 401.985070][ T5393] ? _raw_spin_unlock+0x28/0x50 [ 401.985086][ T5393] ? get_device_parent+0x165/0x410 [ 401.985104][ T5393] device_add+0x4e5/0xbf0 [ 401.985124][ T5393] hci_conn_add_sysfs+0xe8/0x200 [ 401.985143][ T5393] le_conn_complete_evt+0xd1a/0x1360 [ 401.985166][ T5393] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 401.985184][ T5393] ? __mutex_unlock_slowpath+0x227/0x800 [ 401.985202][ T5393] ? __skb_clone+0x5c/0x6c0 [ 401.985215][ T5393] ? skb_pull_data+0x112/0x230 [ 401.985231][ T5393] hci_le_conn_complete_evt+0x18c/0x420 [ 401.985250][ T5393] hci_event_packet+0xa54/0x1540 [ 401.985284][ T5393] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 401.985303][ T5393] ? __pfx_hci_event_packet+0x10/0x10 [ 401.985314][ T5393] ? do_raw_spin_unlock+0x58/0x8b0 [ 401.985329][ T5393] ? kcov_remote_start+0x97/0x7d0 [ 401.985344][ T5393] ? kcov_remote_start+0xd0/0x7d0 [ 401.985358][ T5393] ? insn_decode+0x490/0x4e0 [ 401.985375][ T5393] ? hci_send_to_monitor+0xdc/0x530 [ 401.985391][ T5393] hci_rx_work+0x3f3/0xdb0 [ 401.985410][ T5393] ? process_scheduled_works+0x9c6/0x18e0 [ 401.985423][ T5393] process_scheduled_works+0xabe/0x18e0 [ 401.985456][ T5393] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.985477][ T5393] ? assign_work+0x364/0x3d0 [ 401.985494][ T5393] worker_thread+0x870/0xd30 [ 401.985514][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 401.985530][ T5393] ? __kthread_parkme+0x169/0x1d0 [ 401.985546][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 401.985560][ T5393] kthread+0x7a9/0x920 [ 401.985574][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.985592][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 401.985606][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.985620][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.985638][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.985652][ T5393] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.985664][ T5393] ? lockdep_hardirqs_on+0x99/0x150 [ 401.985677][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.985694][ T5393] ret_from_fork+0x4b/0x80 [ 401.985708][ T5393] ? __pfx_kthread+0x10/0x10 [ 401.985724][ T5393] ret_from_fork_asm+0x1a/0x30 [ 401.985748][ T5393] [ 401.985848][ T5393] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 402.122976][ T5393] Bluetooth: hci0: failed to register connection device [ 402.132061][ T5393] ================================================================== [ 402.135377][ T5393] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x68b/0x1090 [ 402.138454][ T5393] Read of size 8 at addr ffff888012a9d480 by task kworker/u5:2/5393 [ 402.142607][ T5393] [ 402.143572][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: kworker/u5:2 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 402.143586][ T5393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 402.143595][ T5393] Workqueue: hci0 hci_rx_work [ 402.143612][ T5393] Call Trace: [ 402.143618][ T5393] [ 402.143623][ T5393] dump_stack_lvl+0x241/0x360 [ 402.143637][ T5393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.143647][ T5393] ? __pfx__printk+0x10/0x10 [ 402.143656][ T5393] ? _printk+0xd5/0x120 [ 402.143664][ T5393] ? __virt_addr_valid+0x183/0x530 [ 402.143674][ T5393] ? __virt_addr_valid+0x183/0x530 [ 402.143684][ T5393] print_report+0x16e/0x5b0 [ 402.143696][ T5393] ? __virt_addr_valid+0x183/0x530 [ 402.143705][ T5393] ? __virt_addr_valid+0x183/0x530 [ 402.143713][ T5393] ? __virt_addr_valid+0x45f/0x530 [ 402.143721][ T5393] ? __phys_addr+0xba/0x170 [ 402.143729][ T5393] ? l2cap_connect_cfm+0x68b/0x1090 [ 402.143742][ T5393] kasan_report+0x143/0x180 [ 402.143754][ T5393] ? l2cap_connect_cfm+0x68b/0x1090 [ 402.143768][ T5393] l2cap_connect_cfm+0x68b/0x1090 [ 402.143782][ T5393] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 402.143795][ T5393] ? hci_cb_lookup+0x3a0/0x3c0 [ 402.143806][ T5393] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 402.143819][ T5393] hci_connect_cfm+0x162/0x240 [ 402.143831][ T5393] ? __pfx_hci_connect_cfm+0x10/0x10 [ 402.143843][ T5393] ? hci_conn_add_sysfs+0x122/0x200 [ 402.143858][ T5393] le_conn_complete_evt+0xda8/0x1360 [ 402.143873][ T5393] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 402.143885][ T5393] ? __mutex_unlock_slowpath+0x227/0x800 [ 402.143899][ T5393] ? __skb_clone+0x5c/0x6c0 [ 402.143910][ T5393] ? skb_pull_data+0x112/0x230 [ 402.143921][ T5393] hci_le_conn_complete_evt+0x18c/0x420 [ 402.143934][ T5393] hci_event_packet+0xa54/0x1540 [ 402.143944][ T5393] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 402.143957][ T5393] ? __pfx_hci_event_packet+0x10/0x10 [ 402.143966][ T5393] ? do_raw_spin_unlock+0x58/0x8b0 [ 402.143980][ T5393] ? kcov_remote_start+0x97/0x7d0 [ 402.143993][ T5393] ? kcov_remote_start+0xd0/0x7d0 [ 402.144005][ T5393] ? insn_decode+0x490/0x4e0 [ 402.144018][ T5393] ? hci_send_to_monitor+0xdc/0x530 [ 402.144031][ T5393] hci_rx_work+0x3f3/0xdb0 [ 402.144042][ T5393] ? process_scheduled_works+0x9c6/0x18e0 [ 402.144055][ T5393] process_scheduled_works+0xabe/0x18e0 [ 402.144071][ T5393] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.144084][ T5393] ? assign_work+0x364/0x3d0 [ 402.144096][ T5393] worker_thread+0x870/0xd30 [ 402.144111][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 402.144123][ T5393] ? __kthread_parkme+0x169/0x1d0 [ 402.144136][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 402.144154][ T5393] kthread+0x7a9/0x920 [ 402.144169][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.144182][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 402.144194][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.144207][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.144221][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.144233][ T5393] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.144244][ T5393] ? lockdep_hardirqs_on+0x99/0x150 [ 402.144256][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.144270][ T5393] ret_from_fork+0x4b/0x80 [ 402.144282][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.144296][ T5393] ret_from_fork_asm+0x1a/0x30 [ 402.144311][ T5393] [ 402.144314][ T5393] [ 402.270706][ T5393] Allocated by task 5393: [ 402.272483][ T5393] kasan_save_track+0x3f/0x80 [ 402.274401][ T5393] __kasan_kmalloc+0x98/0xb0 [ 402.276374][ T5393] __kmalloc_cache_noprof+0x243/0x390 [ 402.278655][ T5393] l2cap_chan_create+0x50/0x760 [ 402.280752][ T5393] l2cap_sock_new_connection_cb+0x181/0x2b0 [ 402.283238][ T5393] l2cap_connect_cfm+0x336/0x1090 [ 402.285343][ T5393] hci_connect_cfm+0x162/0x240 [ 402.287423][ T5393] le_conn_complete_evt+0xda8/0x1360 [ 402.289673][ T5393] hci_le_conn_complete_evt+0x18c/0x420 [ 402.292021][ T5393] hci_event_packet+0xa54/0x1540 [ 402.294077][ T5393] hci_rx_work+0x3f3/0xdb0 [ 402.295907][ T5393] process_scheduled_works+0xabe/0x18e0 [ 402.298248][ T5393] worker_thread+0x870/0xd30 [ 402.300243][ T5393] kthread+0x7a9/0x920 [ 402.301951][ T5393] ret_from_fork+0x4b/0x80 [ 402.303911][ T5393] ret_from_fork_asm+0x1a/0x30 [ 402.305805][ T5393] [ 402.306785][ T5393] Freed by task 5677: [ 402.308310][ T5393] kasan_save_track+0x3f/0x80 [ 402.310083][ T5393] kasan_save_free_info+0x40/0x50 [ 402.312222][ T5393] __kasan_slab_free+0x59/0x70 [ 402.314240][ T5393] kfree+0x196/0x430 [ 402.315916][ T5393] l2cap_sock_cleanup_listen+0xed/0x3c0 [ 402.318241][ T5393] l2cap_sock_release+0x5d/0x1d0 [ 402.320302][ T5393] sock_close+0xbc/0x240 [ 402.322041][ T5393] __fput+0x3e9/0x9f0 [ 402.323690][ T5393] task_work_run+0x24f/0x310 [ 402.325719][ T5393] syscall_exit_to_user_mode+0x13f/0x340 [ 402.328242][ T5393] do_syscall_64+0x100/0x230 [ 402.330179][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.332615][ T5393] [ 402.333627][ T5393] The buggy address belongs to the object at ffff888012a9d000 [ 402.333627][ T5393] which belongs to the cache kmalloc-2k of size 2048 [ 402.339507][ T5393] The buggy address is located 1152 bytes inside of [ 402.339507][ T5393] freed 2048-byte region [ffff888012a9d000, ffff888012a9d800) [ 402.344662][ T5393] [ 402.345605][ T5393] The buggy address belongs to the physical page: [ 402.348209][ T5393] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a98 [ 402.351798][ T5393] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 402.355276][ T5393] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 402.358343][ T5393] page_type: f5(slab) [ 402.359991][ T5393] raw: 00fff00000000040 ffff88801b042000 ffffea000071d600 dead000000000002 [ 402.363467][ T5393] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 402.367020][ T5393] head: 00fff00000000040 ffff88801b042000 ffffea000071d600 dead000000000002 [ 402.370528][ T5393] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 402.373960][ T5393] head: 00fff00000000003 ffffea00004aa601 ffffffffffffffff 0000000000000000 [ 402.377530][ T5393] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 402.381009][ T5393] page dumped because: kasan: bad access detected [ 402.383633][ T5393] page_owner tracks the page as allocated [ 402.385978][ T5393] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5484, tgid 5484 (syz-executor), ts 391681570419, free_ts 391676519320 [ 402.394298][ T5393] post_alloc_hook+0x1f4/0x240 [ 402.396357][ T5393] get_page_from_freelist+0x365c/0x37a0 [ 402.398665][ T5393] __alloc_frozen_pages_noprof+0x292/0x710 [ 402.401042][ T5393] alloc_pages_mpol+0x311/0x660 [ 402.403185][ T5393] allocate_slab+0x8f/0x3a0 [ 402.405100][ T5393] ___slab_alloc+0xc27/0x14a0 [ 402.407149][ T5393] __slab_alloc+0x58/0xa0 [ 402.409000][ T5393] __kmalloc_cache_noprof+0x27b/0x390 [ 402.411189][ T5393] rtnl_newlink+0x147/0x1d30 [ 402.413031][ T5393] rtnetlink_rcv_msg+0x791/0xcf0 [ 402.415034][ T5393] netlink_rcv_skb+0x206/0x480 [ 402.416954][ T5393] netlink_unicast+0x7f6/0x990 [ 402.418943][ T5393] netlink_sendmsg+0x8de/0xcb0 [ 402.420946][ T5393] __sock_sendmsg+0x221/0x270 [ 402.422960][ T5393] __sys_sendto+0x363/0x4c0 [ 402.424831][ T5393] __x64_sys_sendto+0xde/0x100 [ 402.426880][ T5393] page last free pid 5550 tgid 5550 stack trace: [ 402.429469][ T5393] free_frozen_pages+0xe0d/0x10e0 [ 402.431580][ T5393] __slab_free+0x2c2/0x380 [ 402.433446][ T5393] qlist_free_all+0x9a/0x140 [ 402.435388][ T5393] kasan_quarantine_reduce+0x14f/0x170 [ 402.437593][ T5393] __kasan_slab_alloc+0x23/0x80 [ 402.439539][ T5393] kmem_cache_alloc_noprof+0x1d9/0x380 [ 402.441780][ T5393] getname_flags+0xb7/0x540 [ 402.443642][ T5393] do_sys_openat2+0xd2/0x1d0 [ 402.445552][ T5393] __x64_sys_openat+0x247/0x2a0 [ 402.447582][ T5393] do_syscall_64+0xf3/0x230 [ 402.449380][ T5393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.451794][ T5393] [ 402.452810][ T5393] Memory state around the buggy address: [ 402.455162][ T5393] ffff888012a9d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.458484][ T5393] ffff888012a9d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.461772][ T5393] >ffff888012a9d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.465020][ T5393] ^ [ 402.466683][ T5393] ffff888012a9d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.469912][ T5393] ffff888012a9d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 402.473208][ T5393] ================================================================== [ 402.517197][ T5393] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 402.520113][ T5393] CPU: 0 UID: 0 PID: 5393 Comm: kworker/u5:2 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 402.524353][ T5393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 402.528608][ T5393] Workqueue: hci0 hci_rx_work [ 402.530498][ T5393] Call Trace: [ 402.531873][ T5393] [ 402.533091][ T5393] dump_stack_lvl+0x241/0x360 [ 402.535076][ T5393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.537264][ T5393] ? __pfx__printk+0x10/0x10 [ 402.539181][ T5393] ? preempt_schedule+0xe1/0xf0 [ 402.541111][ T5393] ? vscnprintf+0x5d/0x90 [ 402.542880][ T5393] panic+0x349/0x880 [ 402.544495][ T5393] ? check_panic_on_warn+0x21/0xb0 [ 402.546659][ T5393] ? __pfx_panic+0x10/0x10 [ 402.548554][ T5393] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 402.550961][ T5393] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 402.553465][ T5393] ? print_report+0x519/0x5b0 [ 402.555468][ T5393] check_panic_on_warn+0x86/0xb0 [ 402.557479][ T5393] ? l2cap_connect_cfm+0x68b/0x1090 [ 402.559621][ T5393] end_report+0x77/0x160 [ 402.561336][ T5393] kasan_report+0x154/0x180 [ 402.563194][ T5393] ? l2cap_connect_cfm+0x68b/0x1090 [ 402.565299][ T5393] l2cap_connect_cfm+0x68b/0x1090 [ 402.567329][ T5393] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 402.569576][ T5393] ? hci_cb_lookup+0x3a0/0x3c0 [ 402.571523][ T5393] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 402.573734][ T5393] hci_connect_cfm+0x162/0x240 [ 402.575768][ T5393] ? __pfx_hci_connect_cfm+0x10/0x10 [ 402.577813][ T5393] ? hci_conn_add_sysfs+0x122/0x200 [ 402.579775][ T5393] le_conn_complete_evt+0xda8/0x1360 [ 402.581690][ T5393] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 402.583781][ T5393] ? __mutex_unlock_slowpath+0x227/0x800 [ 402.585861][ T5393] ? __skb_clone+0x5c/0x6c0 [ 402.587571][ T5393] ? skb_pull_data+0x112/0x230 [ 402.589322][ T5393] hci_le_conn_complete_evt+0x18c/0x420 [ 402.591354][ T5393] hci_event_packet+0xa54/0x1540 [ 402.593220][ T5393] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 402.595231][ T5393] ? __pfx_hci_event_packet+0x10/0x10 [ 402.597455][ T5393] ? do_raw_spin_unlock+0x58/0x8b0 [ 402.599625][ T5393] ? kcov_remote_start+0x97/0x7d0 [ 402.601672][ T5393] ? kcov_remote_start+0xd0/0x7d0 [ 402.603659][ T5393] ? insn_decode+0x490/0x4e0 [ 402.605604][ T5393] ? hci_send_to_monitor+0xdc/0x530 [ 402.607678][ T5393] hci_rx_work+0x3f3/0xdb0 [ 402.609504][ T5393] ? process_scheduled_works+0x9c6/0x18e0 [ 402.611659][ T5393] process_scheduled_works+0xabe/0x18e0 [ 402.613876][ T5393] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.616328][ T5393] ? assign_work+0x364/0x3d0 [ 402.618202][ T5393] worker_thread+0x870/0xd30 [ 402.620004][ T5393] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 402.622330][ T5393] ? __kthread_parkme+0x169/0x1d0 [ 402.624412][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 402.626560][ T5393] kthread+0x7a9/0x920 [ 402.628271][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.630113][ T5393] ? __pfx_worker_thread+0x10/0x10 [ 402.632104][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.633874][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.635716][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.637548][ T5393] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.639597][ T5393] ? lockdep_hardirqs_on+0x99/0x150 [ 402.641562][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.643480][ T5393] ret_from_fork+0x4b/0x80 [ 402.645309][ T5393] ? __pfx_kthread+0x10/0x10 [ 402.647253][ T5393] ret_from_fork_asm+0x1a/0x30 [ 402.649121][ T5393] [ 402.650545][ T5393] Kernel Offset: disabled [ 402.652275][ T5393] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:40:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=ffffffff9a9960a0 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d1bed70 R8 =ffffffff8584000b R9 =1ffff11003dee046 R10=dffffc0000000000 R11=ffffffff8583ffc0 R12=dffffc0000000000 R13=0000000000000020 R14=0000000000000020 R15=00000000000003f8 RIP=ffffffff8584003e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f68c1c9ffe0 CR3=0000000054780000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db17c488 00007f84db17c480 00007f84db17c478 00007f84db17c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84dbcdd100 00007f84db17c440 00007f84db17c458 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f84db17c498 00007f84db17c490 00007f84db17c488 00007f84db17c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 000000000000018c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000