Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. [ 41.967537][ T3612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.975069][ T3612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.982245][ T3612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.989788][ T3613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.997136][ T3613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.004221][ T3613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.012025][ T3609] Bluetooth: hci0: HCI_REQ-0x0c1a [ 42.062087][ T3609] chnl_net:caif_netlink_parms(): no params data found [ 42.091620][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.098753][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.106598][ T3609] device bridge_slave_0 entered promiscuous mode [ 42.114543][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.121638][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.129409][ T3609] device bridge_slave_1 entered promiscuous mode [ 42.145158][ T3609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.155734][ T3609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.172948][ T3609] team0: Port device team_slave_0 added [ 42.179808][ T3609] team0: Port device team_slave_1 added [ 42.193189][ T3609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.200444][ T3609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.226793][ T3609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.238267][ T3609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.245458][ T3609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.271555][ T3609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.294946][ T3609] device hsr_slave_0 entered promiscuous mode [ 42.301572][ T3609] device hsr_slave_1 entered promiscuous mode [ 42.357583][ T3609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.366133][ T3609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.374653][ T3609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.383261][ T3609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.398254][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.405349][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.412898][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.420100][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.449846][ T3609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.461041][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.469357][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.478000][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.486046][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 42.496781][ T3609] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.506631][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.515126][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.522207][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.542096][ T3609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.553961][ T3609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.566717][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.575835][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.583060][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.591089][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.599522][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.607887][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.616093][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.624280][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.631843][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.644610][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.652116][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.663112][ T3609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.677325][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.693323][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.702018][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.709901][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.718750][ T3609] device veth0_vlan entered promiscuous mode [ 42.727818][ T3609] device veth1_vlan entered promiscuous mode [ 42.741852][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.749780][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.758122][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.767933][ T3609] device veth0_macvtap entered promiscuous mode [ 42.776931][ T3609] device veth1_macvtap entered promiscuous mode [ 42.790785][ T3609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.798394][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.808130][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.818592][ T3609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.826758][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.837010][ T3609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 42.846522][ T3609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.855334][ T3609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.864043][ T3609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888610][ T3623] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 42.889759][ T49] Bluetooth: hci1: sending frame failed (-49) [ 42.900434][ T3623] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 42.900451][ T3623] CPU: 1 PID: 3623 Comm: syz-executor281 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0 [ 42.900468][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 42.900476][ T3623] RIP: 0010:hci_uart_tty_ioctl+0x2ec/0x430 [ 42.900505][ T3623] Code: 2d fa 49 81 c4 b8 00 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 8f dc 81 fa 49 8b 1c 24 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 d7 00 00 00 8b 1b e9 1a 01 00 00 e8 4c 44 [ 42.900518][ T3623] RSP: 0018:ffffc90003d8fe90 EFLAGS: 00010246 [ 42.900534][ T3623] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807d233b00 [ 42.900546][ T3623] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 42.900556][ T3623] RBP: 00000000800455c9 R08: ffffffff875b272a R09: ffffed100e184f84 [ 42.900568][ T3623] R10: ffffed100e184f84 R11: 1ffff1100e184f83 R12: ffff888070c27cb8 [ 42.900579][ T3623] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807cb52000 [ 42.900592][ T3623] FS: 00007f699e4a3700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 42.900607][ T3623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.900619][ T3623] CR2: 00007f699eda25a0 CR3: 00000000723ac000 CR4: 00000000003506e0 [ 42.900635][ T3623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.900645][ T3623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.900657][ T3623] Call Trace: [ 42.900663][ T3623] [ 42.900669][ T3623] ? hci_uart_tty_write+0x10/0x10 [ 42.900694][ T3623] tty_ioctl+0x885/0xbc0 [ 42.900712][ T3623] ? security_file_ioctl+0x9d/0xb0 [ 42.906848][ T3613] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 42.915164][ T3623] ? tty_get_icount+0xa0/0xa0 [ 42.915185][ T3623] __se_sys_ioctl+0xfb/0x170 [ 42.915207][ T3623] do_syscall_64+0x2b/0x70 [ 43.086247][ T3623] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.092136][ T3623] RIP: 0033:0x7f699ed1faa9 [ 43.096537][ T3623] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.116138][ T3623] RSP: 002b:00007f699e4a3208 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.124540][ T3623] RAX: ffffffffffffffda RBX: 00007f699eda24b8 RCX: 00007f699ed1faa9 [ 43.132518][ T3623] RDX: 0000000000000000 RSI: 00000000800455c9 RDI: 0000000000000003 [ 43.140494][ T3623] RBP: 00007f699eda24b0 R08: 00007f699e4a3700 R09: 0000000000000000 [ 43.148536][ T3623] R10: 00007f699e4a3700 R11: 0000000000000246 R12: 00007f699eda24bc [ 43.156642][ T3623] R13: 00007fff8208cdaf R14: 00007f699e4a3300 R15: 0000000000022000 [ 43.164703][ T3623] [ 43.167717][ T3623] Modules linked in: [ 43.173049][ T3623] ---[ end trace 0000000000000000 ]--- [ 43.179359][ T3623] RIP: 0010:hci_uart_tty_ioctl+0x2ec/0x430 [ 43.185702][ T3623] Code: 2d fa 49 81 c4 b8 00 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 8f dc 81 fa 49 8b 1c 24 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 d7 00 00 00 8b 1b e9 1a 01 00 00 e8 4c 44 [ 43.205858][ T3623] RSP: 0018:ffffc90003d8fe90 EFLAGS: 00010246 [ 43.211926][ T3623] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807d233b00 [ 43.220278][ T3623] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 43.228391][ T3623] RBP: 00000000800455c9 R08: ffffffff875b272a R09: ffffed100e184f84 [ 43.236441][ T3623] R10: ffffed100e184f84 R11: 1ffff1100e184f83 R12: ffff888070c27cb8 [ 43.244660][ T3623] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807cb52000 [ 43.252880][ T3623] FS: 00007f699e4a3700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 43.262651][ T3623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.269334][ T3623] CR2: 00007f699eda25a0 CR3: 00000000723ac000 CR4: 00000000003506e0 [ 43.278429][ T3623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.286503][ T3623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.294607][ T3623] Kernel panic - not syncing: Fatal exception [ 43.300730][ T3623] Kernel Offset: disabled [ 43.305045][ T3623] Rebooting in 86400 seconds..