Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. 2025/05/07 01:03:35 ignoring optional flag "sandboxArg"="0" 2025/05/07 01:03:36 parsed 1 programs [ 90.193094][ T5833] cgroup: Unknown subsys name 'net' [ 90.351307][ T5833] cgroup: Unknown subsys name 'cpuset' [ 90.361342][ T5833] cgroup: Unknown subsys name 'rlimit' [ 92.027259][ T47] cfg80211: failed to load regulatory.db [ 92.351066][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.864803][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.416167][ T5847] syz-executor (5847) used greatest stack depth: 20072 bytes left [ 97.601355][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.610701][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.648039][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 98.106559][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.117098][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.209642][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.225783][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.233796][ T5861] bridge_slave_0: entered allmulticast mode [ 98.258391][ T5861] bridge_slave_0: entered promiscuous mode [ 98.357682][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.397434][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.405338][ T5861] bridge_slave_1: entered allmulticast mode [ 98.420637][ T5902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.427175][ T5861] bridge_slave_1: entered promiscuous mode [ 98.437493][ T5902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.446918][ T5902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.458213][ T5902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.466929][ T5902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.548796][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.583533][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.744652][ T5861] team0: Port device team_slave_0 added [ 98.775341][ T5861] team0: Port device team_slave_1 added [ 98.867454][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.874821][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.907269][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.926514][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.933540][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.962677][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.148258][ T5861] hsr_slave_0: entered promiscuous mode [ 99.156571][ T5861] hsr_slave_1: entered promiscuous mode [ 99.784098][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.803132][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.815073][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.828774][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.953808][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.977949][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.994348][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.003433][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.022820][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.031587][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.121826][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.168450][ T5861] veth0_vlan: entered promiscuous mode [ 100.183098][ T5861] veth1_vlan: entered promiscuous mode [ 100.217575][ T5861] veth0_macvtap: entered promiscuous mode [ 100.230337][ T5861] veth1_macvtap: entered promiscuous mode [ 100.252670][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.267359][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.281938][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.291585][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.300913][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.310521][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/05/07 01:03:50 executed programs: 0 [ 100.505664][ C1] ------------[ cut here ]------------ [ 100.512318][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 100.519359][ C1] WARNING: CPU: 1 PID: 5920 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 100.528451][ C1] Modules linked in: [ 100.532752][ C1] CPU: 1 UID: 0 PID: 5920 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 100.545779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 100.557015][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 100.562557][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f9 d8 96 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 e0 c7 69 8b 4c 89 fa e8 9f 40 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 40 e4 34 00 90 0f 0b 90 e9 dd fc ff [ 100.577550][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.585764][ C1] RSP: 0000:ffffc90000a08b08 EFLAGS: 00010046 [ 100.585807][ C1] RAX: 24f5dc5bf8047700 RBX: 0000000000000100 RCX: ffff8880265dbc00 [ 100.585831][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 100.585843][ C1] RBP: 1ffff110048cb438 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 100.585858][ C1] R10: dffffc0000000000 R11: ffffed10171247d3 R12: dffffc0000000000 [ 100.585872][ C1] R13: ffff888079fec948 R14: 0000000000000008 R15: ffff88802465a178 [ 100.585886][ C1] FS: 0000000000000000(0000) GS:ffff8881261cb000(0000) knlGS:0000000000000000 [ 100.585900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.585912][ C1] CR2: 00007f89b3950020 CR3: 000000007cd56000 CR4: 00000000003526f0 [ 100.585928][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.585938][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.585949][ C1] Call Trace: [ 100.585968][ C1] [ 100.585989][ C1] call_timer_fn+0x17b/0x5f0 [ 100.586021][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.586044][ C1] ? call_timer_fn+0xbe/0x5f0 [ 100.586071][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 100.586103][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 100.586123][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 100.586143][ C1] __run_timer_base+0x646/0x860 [ 100.586163][ C1] ? ktime_get+0x3e/0x1f0 [ 100.586190][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 100.586207][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 100.586238][ C1] run_timer_softirq+0xb7/0x180 [ 100.586258][ C1] handle_softirqs+0x283/0x870 [ 100.586287][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 100.586306][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 100.586335][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 100.586358][ C1] __irq_exit_rcu+0xca/0x1f0 [ 100.586373][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 100.586397][ C1] irq_exit_rcu+0x9/0x30 [ 100.586412][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 100.586431][ C1] [ 100.586437][ C1] [ 100.586444][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.586463][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 100.586487][ C1] Code: 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 50 75 92 65 8b 15 e8 7a b5 10 81 e2 00 01 ff 00 [ 100.586502][ C1] RSP: 0000:ffffc90003f8f928 EFLAGS: 00000246 [ 100.586518][ C1] RAX: ffffffff81f62632 RBX: dffffc0000000000 RCX: ffff8880265dbc00 [ 100.586532][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.586542][ C1] RBP: ffffc90003f8fbd0 R08: ffffea0001dde5f7 R09: 1ffffd40003bbcbe [ 100.586555][ C1] R10: dffffc0000000000 R11: fffff940003bbcbf R12: ffff888023ba6c00 [ 100.586568][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90003f8fb20 [ 100.586587][ C1] ? xas_next_entry+0x52/0x3d0 [ 100.586621][ C1] xas_next_entry+0x52/0x3d0 [ 100.597721][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.600998][ C1] ? page_table_check_set+0x4da/0x710 [ 100.614904][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.618293][ C1] ? page_table_check_set+0x16b/0x710 [ 100.618336][ C1] next_uptodate_folio+0x32/0x5d0 [ 100.618364][ C1] ? folio_unlock+0x101/0x160 [ 100.618397][ C1] filemap_map_pages+0x1022/0x1740 [ 100.618436][ C1] ? filemap_map_pages+0x14b/0x1740 [ 100.618466][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 100.618499][ C1] ? __handle_mm_fault+0x280a/0x5380 [ 100.966149][ C1] ? __handle_mm_fault+0x280a/0x5380 [ 100.971661][ C1] __handle_mm_fault+0x34d8/0x5380 [ 100.976991][ C1] ? __lock_acquire+0xaac/0xd20 [ 100.982173][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 100.989535][ C1] ? lock_vma_under_rcu+0xf8/0x710 [ 100.995399][ C1] ? lock_vma_under_rcu+0xf8/0x710 [ 101.001519][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 101.008368][ C1] handle_mm_fault+0x3f6/0x8c0 [ 101.013271][ C1] do_user_addr_fault+0xa81/0x1390 [ 101.018910][ C1] ? rcu_is_watching+0x15/0xb0 [ 101.024870][ C1] ? trace_irq_disable+0x37/0x110 [ 101.030053][ C1] exc_page_fault+0x68/0x110 [ 101.034947][ C1] asm_exc_page_fault+0x26/0x30 [ 101.039942][ C1] RIP: 0033:0x7f89b3950020 [ 101.044807][ C1] Code: 8d 05 84 16 01 00 f6 c5 04 75 c9 c3 66 0f 1f 44 00 00 48 8d 05 f1 1a 01 00 f7 c2 00 00 00 40 74 d2 c3 0f 1f 84 00 00 00 00 00 <8b> 15 62 d7 d9 00 48 8d 05 63 28 01 00 89 d1 81 e1 28 01 00 00 81 [ 101.065582][ C1] RSP: 002b:00007ffc3d7074e8 EFLAGS: 00010202 [ 101.071974][ C1] RAX: 00007f89b3950020 RBX: 00007f89b3b7d098 RCX: 00000000000016f9 [ 101.080008][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f89b3800000 [ 101.088118][ C1] RBP: 00007f89b38003a0 R08: 00007f89b38480f0 R09: 00007f89b3a3efd4 [ 101.096312][ C1] R10: 00007f89b38484b0 R11: 00007f89b38003a0 R12: 00007f89b3b84700 [ 101.104431][ C1] R13: 00007f89b38484b0 R14: 00007f89b3848198 R15: 00007f89b3800000 [ 101.112461][ C1] [ 101.115532][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.123045][ C1] CPU: 1 UID: 0 PID: 5920 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 101.135570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 101.145999][ C1] Call Trace: [ 101.149769][ C1] [ 101.152638][ C1] dump_stack_lvl+0x99/0x250 [ 101.158153][ C1] ? __asan_memcpy+0x40/0x70 [ 101.163157][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.168665][ C1] ? __pfx__printk+0x10/0x10 [ 101.173436][ C1] panic+0x2db/0x790 [ 101.177656][ C1] ? __pfx_panic+0x10/0x10 [ 101.182187][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 101.187649][ C1] __warn+0x31b/0x4b0 [ 101.191937][ C1] ? __queue_work+0xd62/0xfe0 [ 101.196725][ C1] ? __queue_work+0xd62/0xfe0 [ 101.201440][ C1] report_bug+0x2be/0x4f0 [ 101.205962][ C1] ? __queue_work+0xd62/0xfe0 [ 101.211850][ C1] ? __queue_work+0xd62/0xfe0 [ 101.217464][ C1] ? __queue_work+0xd64/0xfe0 [ 101.222379][ C1] handle_bug+0x84/0x160 [ 101.227007][ C1] exc_invalid_op+0x1a/0x50 [ 101.231932][ C1] asm_exc_invalid_op+0x1a/0x20 [ 101.236843][ C1] RIP: 0010:__queue_work+0xd62/0xfe0 [ 101.242214][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f9 d8 96 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 e0 c7 69 8b 4c 89 fa e8 9f 40 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 40 e4 34 00 90 0f 0b 90 e9 dd fc ff [ 101.262207][ C1] RSP: 0000:ffffc90000a08b08 EFLAGS: 00010046 [ 101.268598][ C1] RAX: 24f5dc5bf8047700 RBX: 0000000000000100 RCX: ffff8880265dbc00 [ 101.276711][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 101.285202][ C1] RBP: 1ffff110048cb438 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 101.293292][ C1] R10: dffffc0000000000 R11: ffffed10171247d3 R12: dffffc0000000000 [ 101.301458][ C1] R13: ffff888079fec948 R14: 0000000000000008 R15: ffff88802465a178 [ 101.309818][ C1] ? __queue_work+0xd61/0xfe0 [ 101.314646][ C1] call_timer_fn+0x17b/0x5f0 [ 101.319831][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 101.325803][ C1] ? call_timer_fn+0xbe/0x5f0 [ 101.330708][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 101.336310][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 101.342331][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 101.349062][ C1] __run_timer_base+0x646/0x860 [ 101.354402][ C1] ? ktime_get+0x3e/0x1f0 [ 101.359064][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 101.365288][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 101.372017][ C1] run_timer_softirq+0xb7/0x180 [ 101.376985][ C1] handle_softirqs+0x283/0x870 [ 101.381790][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 101.386636][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 101.391976][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 101.397399][ C1] __irq_exit_rcu+0xca/0x1f0 [ 101.402032][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 101.407266][ C1] irq_exit_rcu+0x9/0x30 [ 101.411536][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.417202][ C1] [ 101.420239][ C1] [ 101.423215][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.429236][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 101.436383][ C1] Code: 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 50 75 92 65 8b 15 e8 7a b5 10 81 e2 00 01 ff 00 [ 101.456169][ C1] RSP: 0000:ffffc90003f8f928 EFLAGS: 00000246 [ 101.463317][ C1] RAX: ffffffff81f62632 RBX: dffffc0000000000 RCX: ffff8880265dbc00 [ 101.471325][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.479324][ C1] RBP: ffffc90003f8fbd0 R08: ffffea0001dde5f7 R09: 1ffffd40003bbcbe [ 101.487405][ C1] R10: dffffc0000000000 R11: fffff940003bbcbf R12: ffff888023ba6c00 [ 101.495575][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90003f8fb20 [ 101.504626][ C1] ? xas_next_entry+0x52/0x3d0 [ 101.509527][ C1] xas_next_entry+0x52/0x3d0 [ 101.514149][ C1] ? page_table_check_set+0x4da/0x710 [ 101.519570][ C1] ? page_table_check_set+0x16b/0x710 [ 101.525167][ C1] next_uptodate_folio+0x32/0x5d0 [ 101.530416][ C1] ? folio_unlock+0x101/0x160 [ 101.535144][ C1] filemap_map_pages+0x1022/0x1740 [ 101.540322][ C1] ? filemap_map_pages+0x14b/0x1740 [ 101.545554][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 101.551316][ C1] ? __handle_mm_fault+0x280a/0x5380 [ 101.556925][ C1] ? __handle_mm_fault+0x280a/0x5380 [ 101.562291][ C1] __handle_mm_fault+0x34d8/0x5380 [ 101.567509][ C1] ? __lock_acquire+0xaac/0xd20 [ 101.572536][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 101.578353][ C1] ? lock_vma_under_rcu+0xf8/0x710 [ 101.584571][ C1] ? lock_vma_under_rcu+0xf8/0x710 [ 101.589916][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 101.596524][ C1] handle_mm_fault+0x3f6/0x8c0 [ 101.601425][ C1] do_user_addr_fault+0xa81/0x1390 [ 101.606596][ C1] ? rcu_is_watching+0x15/0xb0 [ 101.611495][ C1] ? trace_irq_disable+0x37/0x110 [ 101.616625][ C1] exc_page_fault+0x68/0x110 [ 101.621258][ C1] asm_exc_page_fault+0x26/0x30 [ 101.626129][ C1] RIP: 0033:0x7f89b3950020 [ 101.630630][ C1] Code: 8d 05 84 16 01 00 f6 c5 04 75 c9 c3 66 0f 1f 44 00 00 48 8d 05 f1 1a 01 00 f7 c2 00 00 00 40 74 d2 c3 0f 1f 84 00 00 00 00 00 <8b> 15 62 d7 d9 00 48 8d 05 63 28 01 00 89 d1 81 e1 28 01 00 00 81 [ 101.650881][ C1] RSP: 002b:00007ffc3d7074e8 EFLAGS: 00010202 [ 101.657157][ C1] RAX: 00007f89b3950020 RBX: 00007f89b3b7d098 RCX: 00000000000016f9 [ 101.665970][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f89b3800000 [ 101.674341][ C1] RBP: 00007f89b38003a0 R08: 00007f89b38480f0 R09: 00007f89b3a3efd4 [ 101.682860][ C1] R10: 00007f89b38484b0 R11: 00007f89b38003a0 R12: 00007f89b3b84700 [ 101.691552][ C1] R13: 00007f89b38484b0 R14: 00007f89b3848198 R15: 00007f89b3800000 [ 101.700790][ C1] [ 101.704316][ C1] Kernel Offset: disabled [ 101.708751][ C1] Rebooting in 86400 seconds..