Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. 2025/11/02 03:48:19 parsed 1 programs [ 75.433192][ T5825] cgroup: Unknown subsys name 'net' [ 75.599609][ T5825] cgroup: Unknown subsys name 'cpuset' [ 75.607959][ T5825] cgroup: Unknown subsys name 'rlimit' [ 77.033865][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.082062][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.291763][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.307846][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.316228][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.324328][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.332154][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.154155][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 82.508270][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.515525][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.523254][ T5861] bridge_slave_0: entered allmulticast mode [ 82.530535][ T5861] bridge_slave_0: entered promiscuous mode [ 82.571802][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.579129][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.587240][ T5861] bridge_slave_1: entered allmulticast mode [ 82.594990][ T5861] bridge_slave_1: entered promiscuous mode [ 82.705163][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.738102][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.858576][ T5861] team0: Port device team_slave_0 added [ 82.884618][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.897381][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.911317][ T5861] team0: Port device team_slave_1 added [ 83.257117][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.264226][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.292497][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.307970][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.315055][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.341787][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.383543][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.409961][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.442697][ T5861] hsr_slave_0: entered promiscuous mode [ 83.450357][ T5861] hsr_slave_1: entered promiscuous mode [ 83.671524][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.683517][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.697097][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.707538][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.777414][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.798741][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.811419][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.818724][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.833361][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.840532][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.999989][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.043006][ T5861] veth0_vlan: entered promiscuous mode [ 84.054766][ T5861] veth1_vlan: entered promiscuous mode [ 84.083049][ T5861] veth0_macvtap: entered promiscuous mode [ 84.093718][ T5861] veth1_macvtap: entered promiscuous mode [ 84.112929][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.127823][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.142771][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.152785][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162879][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.172166][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/11/02 03:48:30 executed programs: 0 [ 84.350729][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.360148][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.368089][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.379987][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.393897][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.457398][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.480163][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.488630][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.498225][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.506524][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.514583][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.515075][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.529509][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.537104][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.547473][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.551818][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.554689][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.562591][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.572555][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.583011][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.593924][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.612169][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.722413][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.814480][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.934734][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 85.092607][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.100092][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.107517][ T5939] bridge_slave_0: entered allmulticast mode [ 85.114679][ T5939] bridge_slave_0: entered promiscuous mode [ 85.123309][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.130728][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.138250][ T5939] bridge_slave_1: entered allmulticast mode [ 85.145212][ T5939] bridge_slave_1: entered promiscuous mode [ 85.250850][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.279303][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.329004][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 85.386502][ T5939] team0: Port device team_slave_0 added [ 85.426294][ T5939] team0: Port device team_slave_1 added [ 85.520566][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.528231][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.554402][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.567754][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 85.579012][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 85.595583][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.602631][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.628854][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.759136][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.767076][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.774227][ T5941] bridge_slave_0: entered allmulticast mode [ 85.781691][ T5941] bridge_slave_0: entered promiscuous mode [ 85.808198][ T5939] hsr_slave_0: entered promiscuous mode [ 85.814832][ T5939] hsr_slave_1: entered promiscuous mode [ 85.821443][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 85.827490][ T5939] Cannot create hsr debugfs directory [ 85.853601][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.860907][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.868516][ T5941] bridge_slave_1: entered allmulticast mode [ 85.875532][ T5941] bridge_slave_1: entered promiscuous mode [ 85.951393][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.961294][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.968609][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.975797][ T5942] bridge_slave_0: entered allmulticast mode [ 85.982876][ T5942] bridge_slave_0: entered promiscuous mode [ 86.003029][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.010437][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.017948][ T5943] bridge_slave_0: entered allmulticast mode [ 86.025258][ T5943] bridge_slave_0: entered promiscuous mode [ 86.047180][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.056906][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.064058][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.071463][ T5942] bridge_slave_1: entered allmulticast mode [ 86.079582][ T5942] bridge_slave_1: entered promiscuous mode [ 86.110688][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.117992][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.125139][ T5943] bridge_slave_1: entered allmulticast mode [ 86.132728][ T5943] bridge_slave_1: entered promiscuous mode [ 86.171462][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.205086][ T5941] team0: Port device team_slave_0 added [ 86.213365][ T5941] team0: Port device team_slave_1 added [ 86.236122][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.294008][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.307654][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.322875][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.330505][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.357450][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.383569][ T5942] team0: Port device team_slave_0 added [ 86.407853][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.414817][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.440977][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.460205][ T5942] team0: Port device team_slave_1 added [ 86.496841][ T5146] Bluetooth: hci0: command tx timeout [ 86.539681][ T5943] team0: Port device team_slave_0 added [ 86.546170][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.553127][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.579470][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.592982][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.600132][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.626172][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.646860][ T5950] Bluetooth: hci3: command tx timeout [ 86.652896][ T52] Bluetooth: hci2: command tx timeout [ 86.659066][ T5146] Bluetooth: hci1: command tx timeout [ 86.662651][ T5943] team0: Port device team_slave_1 added [ 86.719048][ T5941] hsr_slave_0: entered promiscuous mode [ 86.727077][ T5941] hsr_slave_1: entered promiscuous mode [ 86.733162][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 86.740212][ T5941] Cannot create hsr debugfs directory [ 86.743952][ T797] cfg80211: failed to load regulatory.db [ 86.781578][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.788564][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.814833][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.828205][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.835157][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.861259][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.990129][ T5942] hsr_slave_0: entered promiscuous mode [ 86.996942][ T5942] hsr_slave_1: entered promiscuous mode [ 87.003026][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 87.009542][ T5942] Cannot create hsr debugfs directory [ 87.071176][ T36] bridge_slave_1: left allmulticast mode [ 87.077400][ T36] bridge_slave_1: left promiscuous mode [ 87.083994][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.107523][ T36] bridge_slave_0: left allmulticast mode [ 87.113199][ T36] bridge_slave_0: left promiscuous mode [ 87.119466][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.452566][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.465192][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.475690][ T36] bond0 (unregistering): Released all slaves [ 87.501506][ T5943] hsr_slave_0: entered promiscuous mode [ 87.509855][ T5943] hsr_slave_1: entered promiscuous mode [ 87.520191][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 87.525975][ T5943] Cannot create hsr debugfs directory [ 87.628487][ T36] hsr_slave_0: left promiscuous mode [ 87.634404][ T36] hsr_slave_1: left promiscuous mode [ 87.643377][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.650967][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.659000][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.667075][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.683735][ T36] veth1_macvtap: left promiscuous mode [ 87.689559][ T36] veth0_macvtap: left promiscuous mode [ 87.695132][ T36] veth1_vlan: left promiscuous mode [ 87.701342][ T36] veth0_vlan: left promiscuous mode [ 87.955624][ T36] team0 (unregistering): Port device team_slave_1 removed [ 87.984103][ T36] team0 (unregistering): Port device team_slave_0 removed [ 88.533619][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.558427][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.566583][ T52] Bluetooth: hci0: command tx timeout [ 88.610811][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.622339][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.687905][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.716136][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.726827][ T52] Bluetooth: hci2: command tx timeout [ 88.732300][ T52] Bluetooth: hci3: command tx timeout [ 88.738109][ T5950] Bluetooth: hci1: command tx timeout [ 88.890031][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.922923][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.077967][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.112313][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.135427][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.193631][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.279444][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.290739][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.302822][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.332850][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.397208][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.434911][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.480575][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.487847][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.517873][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.525032][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.582483][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.605585][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.653864][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.671510][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.690082][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.697213][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.719791][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.727000][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.738160][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.745308][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.777054][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.798077][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.805360][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.872313][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.912970][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.920239][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.938363][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.945547][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.121542][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.240954][ T5939] veth0_vlan: entered promiscuous mode [ 90.262627][ T5939] veth1_vlan: entered promiscuous mode [ 90.339042][ T5939] veth0_macvtap: entered promiscuous mode [ 90.380897][ T5939] veth1_macvtap: entered promiscuous mode [ 90.482923][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.511267][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.527225][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.541948][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.558155][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.622785][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.633328][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.652576][ T5146] Bluetooth: hci0: command tx timeout [ 90.675041][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.684592][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.758852][ T5943] veth0_vlan: entered promiscuous mode [ 90.806183][ T5146] Bluetooth: hci3: command tx timeout [ 90.811723][ T5146] Bluetooth: hci1: command tx timeout [ 90.817739][ T52] Bluetooth: hci2: command tx timeout [ 90.855431][ T5941] veth0_vlan: entered promiscuous mode [ 90.894196][ T5943] veth1_vlan: entered promiscuous mode [ 90.911673][ T5942] veth0_vlan: entered promiscuous mode [ 90.925139][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.932995][ T5942] veth1_vlan: entered promiscuous mode [ 90.943648][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.949065][ T5941] veth1_vlan: entered promiscuous mode [ 91.019466][ T5943] veth0_macvtap: entered promiscuous mode [ 91.028831][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.042028][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.045156][ T5943] veth1_macvtap: entered promiscuous mode [ 91.072218][ T5941] veth0_macvtap: entered promiscuous mode [ 91.094296][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.107469][ T5942] veth0_macvtap: entered promiscuous mode 2025/11/02 03:48:37 executed programs: 8 [ 91.117325][ T5941] veth1_macvtap: entered promiscuous mode [ 91.134728][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.154394][ T5942] veth1_macvtap: entered promiscuous mode [ 91.179307][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 91.185632][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.197573][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 91.197597][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.197611][ T5950] Workqueue: hci0 hci_rx_work [ 91.197640][ T5950] Call Trace: [ 91.197648][ T5950] [ 91.197656][ T5950] dump_stack_lvl+0x189/0x250 [ 91.197685][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.197707][ T5950] ? __pfx__printk+0x10/0x10 [ 91.197734][ T5950] ? kernfs_path_from_node+0x250/0x290 [ 91.197754][ T5950] ? kernfs_path_from_node+0x2f/0x290 [ 91.197776][ T5950] sysfs_create_dir_ns+0x259/0x280 [ 91.197799][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 91.197821][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 91.197850][ T5950] kobject_add_internal+0x59f/0xb70 [ 91.197889][ T5950] kobject_add+0x155/0x220 [ 91.197921][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 91.197949][ T5950] ? _raw_spin_unlock+0x28/0x50 [ 91.197975][ T5950] ? get_device_parent+0x366/0x3a0 [ 91.198007][ T5950] device_add+0x408/0xb80 [ 91.198039][ T5950] hci_conn_add_sysfs+0xd5/0x210 [ 91.198071][ T5950] le_conn_complete_evt+0xf26/0x14d0 [ 91.198107][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 91.198131][ T5950] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 91.198156][ T5950] ? __asan_memcpy+0x40/0x70 [ 91.198188][ T5950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.198212][ T5950] ? skb_pull_data+0xfb/0x200 [ 91.198236][ T5950] hci_le_conn_complete_evt+0x187/0x480 [ 91.198327][ T5950] hci_event_packet+0x78f/0x1260 [ 91.198368][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 91.198390][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 91.198419][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.198445][ T5950] ? hci_send_to_monitor+0xe2/0x590 [ 91.198471][ T5950] hci_rx_work+0x45d/0xfc0 [ 91.198498][ T5950] ? process_one_work+0x868/0x15d0 [ 91.198512][ T5950] process_one_work+0x94a/0x15d0 [ 91.198528][ T5950] ? __lock_acquire+0xab9/0xd20 [ 91.198575][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 91.198599][ T5950] ? assign_work+0x3a1/0x410 [ 91.198620][ T5950] worker_thread+0x9b0/0xee0 [ 91.198664][ T5950] kthread+0x711/0x8a0 [ 91.198691][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 91.198709][ T5950] ? __pfx_kthread+0x10/0x10 [ 91.198732][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.198753][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.198774][ T5950] ? __pfx_kthread+0x10/0x10 [ 91.198798][ T5950] ret_from_fork+0x4bc/0x870 [ 91.198828][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 91.198862][ T5950] ? __switch_to_asm+0x39/0x70 [ 91.198884][ T5950] ? __switch_to_asm+0x33/0x70 [ 91.198905][ T5950] ? __pfx_kthread+0x10/0x10 [ 91.198929][ T5950] ret_from_fork_asm+0x1a/0x30 [ 91.198969][ T5950] [ 91.198996][ T5950] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.254284][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.256037][ T5950] Bluetooth: hci0: failed to register connection device [ 91.521019][ T5950] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 91.527491][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.541297][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.551563][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.567294][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.576691][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.585792][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.602348][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611727][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.628469][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.658229][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.698368][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708397][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.736762][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.745588][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769743][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.779440][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.821029][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.830359][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.871063][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.895132][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.905190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.914290][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.972269][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.997818][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.030030][ T5146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 92.039982][ T5146] CPU: 0 UID: 0 PID: 5146 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 92.040006][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.040018][ T5146] Workqueue: hci2 hci_rx_work [ 92.040039][ T5146] Call Trace: [ 92.040046][ T5146] [ 92.040054][ T5146] dump_stack_lvl+0x189/0x250 [ 92.040083][ T5146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.040106][ T5146] ? __pfx__printk+0x10/0x10 [ 92.040134][ T5146] ? kernfs_path_from_node+0x250/0x290 [ 92.040153][ T5146] ? kernfs_path_from_node+0x2f/0x290 [ 92.040176][ T5146] sysfs_create_dir_ns+0x259/0x280 [ 92.040199][ T5146] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.040218][ T5146] ? do_raw_spin_unlock+0x122/0x240 [ 92.040246][ T5146] kobject_add_internal+0x59f/0xb70 [ 92.040280][ T5146] kobject_add+0x155/0x220 [ 92.040313][ T5146] ? __pfx_kobject_add+0x10/0x10 [ 92.040341][ T5146] ? _raw_spin_unlock+0x28/0x50 [ 92.040368][ T5146] ? get_device_parent+0x366/0x3a0 [ 92.040400][ T5146] device_add+0x408/0xb80 [ 92.040437][ T5146] hci_conn_add_sysfs+0xd5/0x210 [ 92.040468][ T5146] le_conn_complete_evt+0xf26/0x14d0 [ 92.040503][ T5146] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 92.040527][ T5146] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 92.040552][ T5146] ? __asan_memcpy+0x40/0x70 [ 92.040581][ T5146] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.040605][ T5146] ? skb_pull_data+0xfb/0x200 [ 92.040629][ T5146] hci_le_conn_complete_evt+0x187/0x480 [ 92.040659][ T5146] hci_event_packet+0x78f/0x1260 [ 92.040692][ T5146] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 92.040716][ T5146] ? __pfx_hci_event_packet+0x10/0x10 [ 92.040749][ T5146] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.040778][ T5146] ? hci_send_to_monitor+0xe2/0x590 [ 92.040805][ T5146] hci_rx_work+0x45d/0xfc0 [ 92.040836][ T5146] ? process_one_work+0x868/0x15d0 [ 92.040853][ T5146] process_one_work+0x94a/0x15d0 [ 92.040870][ T5146] ? __lock_acquire+0xab9/0xd20 [ 92.040919][ T5146] ? __pfx_process_one_work+0x10/0x10 [ 92.040947][ T5146] ? assign_work+0x3a1/0x410 [ 92.040970][ T5146] worker_thread+0x9b0/0xee0 [ 92.041016][ T5146] kthread+0x711/0x8a0 [ 92.041042][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 92.041061][ T5146] ? __pfx_kthread+0x10/0x10 [ 92.041086][ T5146] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.041108][ T5146] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.041130][ T5146] ? __pfx_kthread+0x10/0x10 [ 92.041154][ T5146] ret_from_fork+0x4bc/0x870 [ 92.041180][ T5146] ? __pfx_ret_from_fork+0x10/0x10 [ 92.041207][ T5146] ? __switch_to_asm+0x39/0x70 [ 92.041230][ T5146] ? __switch_to_asm+0x33/0x70 [ 92.041252][ T5146] ? __pfx_kthread+0x10/0x10 [ 92.041277][ T5146] ret_from_fork_asm+0x1a/0x30 [ 92.041318][ T5146] [ 92.041343][ T5146] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.131388][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.136901][ T5950] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 92.154131][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.157202][ T5146] Bluetooth: hci2: failed to register connection device [ 92.165397][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 92.165429][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.165442][ T5950] Workqueue: hci3 hci_rx_work [ 92.165463][ T5950] Call Trace: [ 92.165470][ T5950] [ 92.165478][ T5950] dump_stack_lvl+0x189/0x250 [ 92.165506][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.165529][ T5950] ? __pfx__printk+0x10/0x10 [ 92.165555][ T5950] ? kernfs_path_from_node+0x250/0x290 [ 92.165575][ T5950] ? kernfs_path_from_node+0x2f/0x290 [ 92.165599][ T5950] sysfs_create_dir_ns+0x259/0x280 [ 92.165620][ T5950] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.165642][ T5950] ? do_raw_spin_unlock+0x122/0x240 [ 92.165671][ T5950] kobject_add_internal+0x59f/0xb70 [ 92.165707][ T5950] kobject_add+0x155/0x220 [ 92.165739][ T5950] ? __pfx_kobject_add+0x10/0x10 [ 92.165767][ T5950] ? _raw_spin_unlock+0x28/0x50 [ 92.165792][ T5950] ? get_device_parent+0x366/0x3a0 [ 92.165827][ T5950] device_add+0x408/0xb80 [ 92.165858][ T5950] hci_conn_add_sysfs+0xd5/0x210 [ 92.165888][ T5950] le_conn_complete_evt+0xf26/0x14d0 [ 92.165924][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 92.165947][ T5950] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 92.165971][ T5950] ? __asan_memcpy+0x40/0x70 [ 92.166002][ T5950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.166026][ T5950] ? skb_pull_data+0xfb/0x200 [ 92.166049][ T5950] hci_le_conn_complete_evt+0x187/0x480 [ 92.166077][ T5950] hci_event_packet+0x78f/0x1260 [ 92.166109][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 92.166133][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 92.166164][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.166191][ T5950] ? hci_send_to_monitor+0xe2/0x590 [ 92.166217][ T5950] hci_rx_work+0x45d/0xfc0 [ 92.166247][ T5950] ? process_one_work+0x868/0x15d0 [ 92.166263][ T5950] process_one_work+0x94a/0x15d0 [ 92.166279][ T5950] ? __lock_acquire+0xab9/0xd20 [ 92.166327][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 92.166353][ T5950] ? assign_work+0x3a1/0x410 [ 92.166375][ T5950] worker_thread+0x9b0/0xee0 [ 92.166425][ T5950] kthread+0x711/0x8a0 [ 92.166452][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 92.166469][ T5950] ? __pfx_kthread+0x10/0x10 [ 92.166494][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.166515][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.166537][ T5950] ? __pfx_kthread+0x10/0x10 [ 92.166561][ T5950] ret_from_fork+0x4bc/0x870 [ 92.166592][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 92.166626][ T5950] ? __switch_to_asm+0x39/0x70 [ 92.166649][ T5950] ? __switch_to_asm+0x33/0x70 [ 92.166670][ T5950] ? __pfx_kthread+0x10/0x10 [ 92.166694][ T5950] ret_from_fork_asm+0x1a/0x30 [ 92.166735][ T5950] [ 92.175620][ T5950] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.645513][ T5950] Bluetooth: hci3: failed to register connection device [ 92.660197][ T5950] ================================================================== [ 92.668298][ T5950] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6d0/0x10c0 [ 92.676297][ T5950] Read of size 8 at addr ffff88807b718480 by task kworker/u9:4/5950 [ 92.684270][ T5950] [ 92.686591][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 92.686615][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.686628][ T5950] Workqueue: hci3 hci_rx_work [ 92.686649][ T5950] Call Trace: [ 92.686656][ T5950] [ 92.686663][ T5950] dump_stack_lvl+0x189/0x250 [ 92.686687][ T5950] ? __kasan_check_byte+0x12/0x40 [ 92.686706][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.686728][ T5950] ? lock_release+0x4b/0x3e0 [ 92.686758][ T5950] ? __virt_addr_valid+0x4a5/0x5c0 [ 92.686782][ T5950] print_report+0xca/0x240 [ 92.686805][ T5950] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 92.686824][ T5950] kasan_report+0x118/0x150 [ 92.686840][ T5950] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 92.686863][ T5950] l2cap_connect_cfm+0x6d0/0x10c0 [ 92.686886][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 92.686908][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 92.686928][ T5950] hci_connect_cfm+0x95/0x140 [ 92.686947][ T5950] le_conn_complete_evt+0xfa5/0x14d0 [ 92.686970][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 92.686989][ T5950] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 92.687011][ T5950] ? __asan_memcpy+0x40/0x70 [ 92.687033][ T5950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.687054][ T5950] ? skb_pull_data+0xfb/0x200 [ 92.687071][ T5950] hci_le_conn_complete_evt+0x187/0x480 [ 92.687091][ T5950] hci_event_packet+0x78f/0x1260 [ 92.687121][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 92.687139][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 92.687164][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.687185][ T5950] ? hci_send_to_monitor+0xe2/0x590 [ 92.687205][ T5950] hci_rx_work+0x45d/0xfc0 [ 92.687223][ T5950] ? process_one_work+0x868/0x15d0 [ 92.687237][ T5950] process_one_work+0x94a/0x15d0 [ 92.687252][ T5950] ? __lock_acquire+0xab9/0xd20 [ 92.687282][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 92.687299][ T5950] ? assign_work+0x3a1/0x410 [ 92.687314][ T5950] worker_thread+0x9b0/0xee0 [ 92.687339][ T5950] kthread+0x711/0x8a0 [ 92.687359][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 92.687375][ T5950] ? __pfx_kthread+0x10/0x10 [ 92.687394][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.687412][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.687431][ T5950] ? __pfx_kthread+0x10/0x10 [ 92.687449][ T5950] ret_from_fork+0x4bc/0x870 [ 92.687474][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 92.687499][ T5950] ? __switch_to_asm+0x39/0x70 [ 92.687519][ T5950] ? __switch_to_asm+0x33/0x70 [ 92.687539][ T5950] ? __pfx_kthread+0x10/0x10 [ 92.687557][ T5950] ret_from_fork_asm+0x1a/0x30 [ 92.687584][ T5950] [ 92.687590][ T5950] [ 92.941013][ T5950] Allocated by task 5950: [ 92.945324][ T5950] kasan_save_track+0x3e/0x80 [ 92.949999][ T5950] __kasan_kmalloc+0x93/0xb0 [ 92.954573][ T5950] __kmalloc_cache_noprof+0x3e2/0x700 [ 92.959937][ T5950] l2cap_chan_create+0x51/0x790 [ 92.964781][ T5950] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 92.970664][ T5950] l2cap_connect_cfm+0x367/0x10c0 [ 92.975675][ T5950] hci_connect_cfm+0x95/0x140 [ 92.980337][ T5950] le_conn_complete_evt+0xfa5/0x14d0 [ 92.985608][ T5950] hci_le_conn_complete_evt+0x187/0x480 [ 92.991139][ T5950] hci_event_packet+0x78f/0x1260 [ 92.996081][ T5950] hci_rx_work+0x45d/0xfc0 [ 93.000490][ T5950] process_one_work+0x94a/0x15d0 [ 93.005410][ T5950] worker_thread+0x9b0/0xee0 [ 93.009986][ T5950] kthread+0x711/0x8a0 [ 93.014043][ T5950] ret_from_fork+0x4bc/0x870 [ 93.018628][ T5950] ret_from_fork_asm+0x1a/0x30 [ 93.023385][ T5950] [ 93.025693][ T5950] Freed by task 6051: [ 93.029654][ T5950] kasan_save_track+0x3e/0x80 [ 93.034323][ T5950] kasan_save_free_info+0x46/0x50 [ 93.039343][ T5950] __kasan_slab_free+0x5c/0x80 [ 93.044089][ T5950] kfree+0x19a/0x6d0 [ 93.047972][ T5950] l2cap_sock_cleanup_listen+0xf0/0x450 [ 93.053508][ T5950] l2cap_sock_release+0x6a/0x230 [ 93.058434][ T5950] sock_close+0xc3/0x240 [ 93.062666][ T5950] __fput+0x44c/0xa70 [ 93.066632][ T5950] task_work_run+0x1d4/0x260 [ 93.071212][ T5950] exit_to_user_mode_loop+0xe9/0x130 [ 93.076493][ T5950] do_syscall_64+0x2bd/0xfa0 [ 93.081077][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.086951][ T5950] [ 93.089259][ T5950] The buggy address belongs to the object at ffff88807b718000 [ 93.089259][ T5950] which belongs to the cache kmalloc-2k of size 2048 [ 93.103297][ T5950] The buggy address is located 1152 bytes inside of [ 93.103297][ T5950] freed 2048-byte region [ffff88807b718000, ffff88807b718800) [ 93.117253][ T5950] [ 93.119563][ T5950] The buggy address belongs to the physical page: [ 93.125964][ T5950] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807b71e000 pfn:0x7b718 [ 93.136014][ T5950] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.144494][ T5950] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 93.152466][ T5950] page_type: f5(slab) [ 93.156431][ T5950] raw: 00fff00000000040 ffff88801b027000 0000000000000000 0000000000000001 [ 93.164998][ T5950] raw: ffff88807b71e000 0000000080080006 00000000f5000000 0000000000000000 [ 93.173566][ T5950] head: 00fff00000000040 ffff88801b027000 0000000000000000 0000000000000001 [ 93.182225][ T5950] head: ffff88807b71e000 0000000080080006 00000000f5000000 0000000000000000 [ 93.190879][ T5950] head: 00fff00000000003 ffffea0001edc601 00000000ffffffff 00000000ffffffff [ 93.199535][ T5950] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 93.208188][ T5950] page dumped because: kasan: bad access detected [ 93.214588][ T5950] page_owner tracks the page as allocated [ 93.220282][ T5950] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5902, tgid 5902 (syz-executor), ts 82328884573, free_ts 82293607792 [ 93.241630][ T5950] post_alloc_hook+0x240/0x2a0 [ 93.246391][ T5950] get_page_from_freelist+0x2365/0x2440 [ 93.251924][ T5950] __alloc_frozen_pages_noprof+0x181/0x370 [ 93.257717][ T5950] alloc_pages_mpol+0x232/0x4a0 [ 93.262553][ T5950] allocate_slab+0x96/0x350 [ 93.267042][ T5950] ___slab_alloc+0xe94/0x18a0 [ 93.271708][ T5950] __slab_alloc+0x65/0x100 [ 93.276108][ T5950] __kmalloc_node_track_caller_noprof+0x5d0/0x810 [ 93.282513][ T5950] kmalloc_reserve+0x136/0x290 [ 93.287264][ T5950] __alloc_skb+0x142/0x2d0 [ 93.291665][ T5950] rtmsg_ifinfo_build_skb+0x84/0x260 [ 93.296935][ T5950] rtmsg_ifinfo+0x8c/0x1a0 [ 93.301341][ T5950] register_netdevice+0x1712/0x1ae0 [ 93.306535][ T5950] __ip_tunnel_create+0x3e7/0x560 [ 93.311550][ T5950] ip_tunnel_init_net+0x2ba/0x800 [ 93.316563][ T5950] ops_init+0x35c/0x5c0 [ 93.320708][ T5950] page last free pid 5890 tgid 5890 stack trace: [ 93.327013][ T5950] __free_frozen_pages+0xbc8/0xd30 [ 93.332123][ T5950] __slab_free+0x2e7/0x390 [ 93.336529][ T5950] qlist_free_all+0x97/0x140 [ 93.341110][ T5950] kasan_quarantine_reduce+0x148/0x160 [ 93.346559][ T5950] __kasan_slab_alloc+0x22/0x80 [ 93.351394][ T5950] kmem_cache_alloc_noprof+0x37d/0x700 [ 93.356841][ T5950] getname_flags+0xb8/0x540 [ 93.361337][ T5950] user_path_at+0x24/0x60 [ 93.365648][ T5950] __se_sys_chroot+0x90/0x3b0 [ 93.370327][ T5950] do_syscall_64+0xfa/0xfa0 [ 93.374832][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.380718][ T5950] [ 93.383034][ T5950] Memory state around the buggy address: [ 93.388655][ T5950] ffff88807b718380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.396709][ T5950] ffff88807b718400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.404760][ T5950] >ffff88807b718480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.412806][ T5950] ^ [ 93.416868][ T5950] ffff88807b718500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.424913][ T5950] ffff88807b718580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.432952][ T5950] ================================================================== [ 93.466265][ T5950] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.473513][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 93.482980][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 93.493039][ T5950] Workqueue: hci3 hci_rx_work [ 93.497721][ T5950] Call Trace: [ 93.500987][ T5950] [ 93.503909][ T5950] dump_stack_lvl+0x99/0x250 [ 93.508493][ T5950] ? __asan_memcpy+0x40/0x70 [ 93.513089][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.518301][ T5950] ? __pfx__printk+0x10/0x10 [ 93.522908][ T5950] vpanic+0x237/0x6d0 [ 93.526892][ T5950] ? __pfx_vpanic+0x10/0x10 [ 93.531388][ T5950] ? preempt_schedule+0xae/0xc0 [ 93.536233][ T5950] ? __pfx_preempt_schedule+0x10/0x10 [ 93.541597][ T5950] panic+0xb9/0xc0 [ 93.545305][ T5950] ? __pfx_panic+0x10/0x10 [ 93.549707][ T5950] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 93.555590][ T5950] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 93.560776][ T5950] check_panic_on_warn+0x89/0xb0 [ 93.565706][ T5950] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 93.570892][ T5950] end_report+0x78/0x160 [ 93.575123][ T5950] kasan_report+0x129/0x150 [ 93.579622][ T5950] ? l2cap_connect_cfm+0x6d0/0x10c0 [ 93.584834][ T5950] l2cap_connect_cfm+0x6d0/0x10c0 [ 93.589865][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.595327][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.600783][ T5950] hci_connect_cfm+0x95/0x140 [ 93.605465][ T5950] le_conn_complete_evt+0xfa5/0x14d0 [ 93.610747][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.616475][ T5950] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 93.622101][ T5950] ? __asan_memcpy+0x40/0x70 [ 93.626686][ T5950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.632672][ T5950] ? skb_pull_data+0xfb/0x200 [ 93.637334][ T5950] hci_le_conn_complete_evt+0x187/0x480 [ 93.642871][ T5950] hci_event_packet+0x78f/0x1260 [ 93.647803][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.653076][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 93.658443][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.663634][ T5950] ? hci_send_to_monitor+0xe2/0x590 [ 93.668823][ T5950] hci_rx_work+0x45d/0xfc0 [ 93.673231][ T5950] ? process_one_work+0x868/0x15d0 [ 93.678328][ T5950] process_one_work+0x94a/0x15d0 [ 93.683284][ T5950] ? __lock_acquire+0xab9/0xd20 [ 93.688146][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 93.693509][ T5950] ? assign_work+0x3a1/0x410 [ 93.698088][ T5950] worker_thread+0x9b0/0xee0 [ 93.702673][ T5950] kthread+0x711/0x8a0 [ 93.706740][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 93.711841][ T5950] ? __pfx_kthread+0x10/0x10 [ 93.716423][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.721610][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.726805][ T5950] ? __pfx_kthread+0x10/0x10 [ 93.731391][ T5950] ret_from_fork+0x4bc/0x870 [ 93.735980][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 93.741114][ T5950] ? __switch_to_asm+0x39/0x70 [ 93.745872][ T5950] ? __switch_to_asm+0x33/0x70 [ 93.750715][ T5950] ? __pfx_kthread+0x10/0x10 [ 93.755299][ T5950] ret_from_fork_asm+0x1a/0x30 [ 93.760062][ T5950] [ 93.763328][ T5950] Kernel Offset: disabled [ 93.767638][ T5950] Rebooting in 86400 seconds..