Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. 2026/05/27 08:13:36 parsed 1 programs [ 83.636207][ T5614] cgroup: Unknown subsys name 'net' [ 83.897940][ T5614] cgroup: Unknown subsys name 'cpuset' [ 83.962289][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.672229][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.755395][ T31] cfg80211: failed to load regulatory.db [ 89.209903][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.209927][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.681587][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.681607][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.304784][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.317047][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.317891][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.319174][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.319896][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.006398][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.007703][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.008377][ T5656] bridge_slave_0: entered allmulticast mode [ 94.015221][ T5656] bridge_slave_0: entered promiscuous mode [ 94.029052][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.029163][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.029374][ T5656] bridge_slave_1: entered allmulticast mode [ 94.034439][ T5656] bridge_slave_1: entered promiscuous mode [ 94.221573][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.229005][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.389295][ T5656] team0: Port device team_slave_0 added [ 94.393768][ T4917] Bluetooth: hci0: command tx timeout [ 94.394624][ T5656] team0: Port device team_slave_1 added [ 94.429519][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.429530][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.429544][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.439801][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.439816][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.439839][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.512131][ T5656] hsr_slave_0: entered promiscuous mode [ 94.513525][ T5656] hsr_slave_1: entered promiscuous mode [ 94.744162][ T5656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.785708][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.788380][ T5656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.820519][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.828482][ T5656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.856561][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.998385][ T5656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.023607][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.484498][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.801433][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.823618][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.823723][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.892709][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.892814][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.340968][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.472453][ T4917] Bluetooth: hci0: command tx timeout [ 96.555066][ T5656] veth0_vlan: entered promiscuous mode [ 96.574941][ T5656] veth1_vlan: entered promiscuous mode [ 96.621428][ T5656] veth0_macvtap: entered promiscuous mode [ 96.631426][ T5656] veth1_macvtap: entered promiscuous mode [ 96.686165][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.707561][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.720453][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.745244][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.761483][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.761686][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/27 08:13:52 executed programs: 0 [ 97.348402][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.370354][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.375588][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.383649][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.384947][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.475946][ T4917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.497124][ T4917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.514220][ T4917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.558173][ T4917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.558998][ T4917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.653248][ T5697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.688880][ T5697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.696521][ T5697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.732736][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.762411][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.797069][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.816471][ T5697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.831558][ T5697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.837195][ T5759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.847027][ T5697] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.867223][ T5759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.868725][ T5759] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.870183][ T5759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.870755][ T5759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.908555][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.556101][ T4917] Bluetooth: hci0: command tx timeout [ 99.431916][ T4917] Bluetooth: hci1: command tx timeout [ 99.751839][ T4917] Bluetooth: hci2: command tx timeout [ 99.832923][ T4917] Bluetooth: hci3: command tx timeout [ 99.911949][ T4917] Bluetooth: hci5: command tx timeout [ 99.993013][ T4917] Bluetooth: hci4: command tx timeout [ 100.287232][ T4163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.645063][ T4163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.015165][ T4163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.062732][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.062840][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.062979][ T5744] bridge_slave_0: entered allmulticast mode [ 101.064987][ T5744] bridge_slave_0: entered promiscuous mode [ 101.138848][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.138931][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.139056][ T5744] bridge_slave_1: entered allmulticast mode [ 101.142154][ T5744] bridge_slave_1: entered promiscuous mode [ 101.336337][ T4163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.417496][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.462973][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.511830][ T4917] Bluetooth: hci1: command tx timeout [ 101.535692][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.535790][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.535889][ T5753] bridge_slave_0: entered allmulticast mode [ 101.537456][ T5753] bridge_slave_0: entered promiscuous mode [ 101.596886][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.597002][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.597105][ T5753] bridge_slave_1: entered allmulticast mode [ 101.598477][ T5753] bridge_slave_1: entered promiscuous mode [ 101.621603][ T5744] team0: Port device team_slave_0 added [ 101.671667][ T5744] team0: Port device team_slave_1 added [ 101.673334][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.673450][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.673616][ T5755] bridge_slave_0: entered allmulticast mode [ 101.676118][ T5755] bridge_slave_0: entered promiscuous mode [ 101.705539][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.705827][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.706037][ T5751] bridge_slave_0: entered allmulticast mode [ 101.707810][ T5751] bridge_slave_0: entered promiscuous mode [ 101.743694][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.743862][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.744016][ T5755] bridge_slave_1: entered allmulticast mode [ 101.745837][ T5755] bridge_slave_1: entered promiscuous mode [ 101.767129][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.767214][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.767318][ T5751] bridge_slave_1: entered allmulticast mode [ 101.800738][ T5751] bridge_slave_1: entered promiscuous mode [ 101.819954][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.831978][ T4917] Bluetooth: hci2: command tx timeout [ 101.897754][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.897844][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.897950][ T5754] bridge_slave_0: entered allmulticast mode [ 101.899331][ T5754] bridge_slave_0: entered promiscuous mode [ 101.911884][ T4917] Bluetooth: hci3: command tx timeout [ 101.938630][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.966477][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.966490][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.966508][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.994488][ T4917] Bluetooth: hci5: command tx timeout [ 101.999419][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.000541][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.003384][ T5754] bridge_slave_1: entered allmulticast mode [ 102.005899][ T5754] bridge_slave_1: entered promiscuous mode [ 102.027989][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.043197][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.043211][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.043235][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.072068][ T4917] Bluetooth: hci4: command tx timeout [ 102.120695][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.155822][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.174672][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.474680][ T5753] team0: Port device team_slave_0 added [ 102.524337][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.526208][ T5753] team0: Port device team_slave_1 added [ 102.565827][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.587368][ T5755] team0: Port device team_slave_0 added [ 102.607973][ T5751] team0: Port device team_slave_0 added [ 102.663545][ T5755] team0: Port device team_slave_1 added [ 102.679413][ T5751] team0: Port device team_slave_1 added [ 102.696649][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.696665][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.696687][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.752944][ T5744] hsr_slave_0: entered promiscuous mode [ 102.753743][ T5744] hsr_slave_1: entered promiscuous mode [ 102.754402][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 102.754479][ T5744] Cannot create hsr debugfs directory [ 102.769851][ T5754] team0: Port device team_slave_0 added [ 102.775015][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.775029][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.775053][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.082083][ T4163] bridge_slave_1: left allmulticast mode [ 103.082247][ T4163] bridge_slave_1: left promiscuous mode [ 103.087855][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.204329][ T4163] bridge_slave_0: left allmulticast mode [ 103.204363][ T4163] bridge_slave_0: left promiscuous mode [ 103.204596][ T4163] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.592085][ T4917] Bluetooth: hci1: command tx timeout [ 103.913114][ T4917] Bluetooth: hci2: command tx timeout [ 103.991894][ T4917] Bluetooth: hci3: command tx timeout [ 104.081863][ T4917] Bluetooth: hci5: command tx timeout [ 104.102467][ T4163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.151919][ T4917] Bluetooth: hci4: command tx timeout [ 104.182553][ T4163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.203632][ T4163] bond0 (unregistering): Released all slaves [ 104.442886][ T5754] team0: Port device team_slave_1 added [ 104.638106][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.638116][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.638130][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.639682][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.639691][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.639705][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.737841][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.737852][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.737866][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.754974][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.754988][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.755017][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.867330][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.867345][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.867359][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.932459][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.932469][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.932484][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.995600][ T5753] hsr_slave_0: entered promiscuous mode [ 104.996747][ T5753] hsr_slave_1: entered promiscuous mode [ 104.997529][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 104.997550][ T5753] Cannot create hsr debugfs directory [ 105.068365][ T5755] hsr_slave_0: entered promiscuous mode [ 105.069110][ T5755] hsr_slave_1: entered promiscuous mode [ 105.069635][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 105.069652][ T5755] Cannot create hsr debugfs directory [ 105.111027][ T5751] hsr_slave_0: entered promiscuous mode [ 105.113887][ T5751] hsr_slave_1: entered promiscuous mode [ 105.114765][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 105.114785][ T5751] Cannot create hsr debugfs directory [ 105.198819][ T5754] hsr_slave_0: entered promiscuous mode [ 105.199563][ T5754] hsr_slave_1: entered promiscuous mode [ 105.200086][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 105.200101][ T5754] Cannot create hsr debugfs directory [ 105.671841][ T4917] Bluetooth: hci1: command tx timeout [ 105.922773][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 105.992478][ T4917] Bluetooth: hci2: command tx timeout [ 106.071825][ T4917] Bluetooth: hci3: command tx timeout [ 106.152026][ T4917] Bluetooth: hci5: command tx timeout [ 106.231861][ T4917] Bluetooth: hci4: command tx timeout [ 106.362096][ T4163] hsr_slave_0: left promiscuous mode [ 106.382085][ T4163] hsr_slave_1: left promiscuous mode [ 106.382888][ T4163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.382942][ T4163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.423305][ T4163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.423331][ T4163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.486996][ T4163] veth1_macvtap: left promiscuous mode [ 106.487133][ T4163] veth0_macvtap: left promiscuous mode [ 106.487287][ T4163] veth1_vlan: left promiscuous mode [ 106.488276][ T4163] veth0_vlan: left promiscuous mode [ 107.192568][ T4163] team0 (unregistering): Port device team_slave_1 removed [ 107.232605][ T4163] team0 (unregistering): Port device team_slave_0 removed [ 107.515977][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.568875][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.578264][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.615956][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.717592][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.769491][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.779460][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.883584][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.239819][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.294031][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.334485][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.334567][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.669226][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.670168][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.556414][ T5753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.603745][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.633902][ T5753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.680707][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.690643][ T5753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.719580][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.756416][ T5753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.804817][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.825189][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.044162][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.091222][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.113232][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.144454][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.149777][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.196859][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.221648][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.264527][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.403956][ T5755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.437410][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.455724][ T5755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.490981][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.524413][ T5755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.544722][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.547563][ T5744] veth0_vlan: entered promiscuous mode [ 110.553456][ T5755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.586839][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.644371][ T5744] veth1_vlan: entered promiscuous mode [ 110.726598][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.764715][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.769478][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.816310][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.818954][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.847438][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.860981][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.884629][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.931038][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.997379][ T5744] veth0_macvtap: entered promiscuous mode [ 111.026013][ T5744] veth1_macvtap: entered promiscuous mode [ 111.030970][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.080293][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.080411][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.106152][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.123400][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.123515][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.138715][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.179310][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.231145][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.233746][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.249540][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.263986][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.292938][ T1029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.304694][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.304878][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.320329][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.382165][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.382281][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.615549][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.717935][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.736189][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.736355][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.785464][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.785483][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.840393][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.840523][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.957792][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.997760][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.997774][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.024090][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.024251][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.079793][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.079917][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state 2026/05/27 08:14:08 executed programs: 10 [ 112.726349][ T4917] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 112.726448][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.726498][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.726525][ T4917] Workqueue: hci1 hci_rx_work [ 112.726585][ T4917] Call Trace: [ 112.726595][ T4917] [ 112.726610][ T4917] dump_stack_lvl+0xe8/0x150 [ 112.726636][ T4917] sysfs_create_dir_ns+0x271/0x2a0 [ 112.726664][ T4917] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.726690][ T4917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.726720][ T4917] ? rt_spin_unlock+0x160/0x200 [ 112.726745][ T4917] kobject_add_internal+0x631/0xd10 [ 112.726775][ T4917] kobject_add+0x163/0x240 [ 112.726801][ T4917] ? __pfx_kobject_add+0x10/0x10 [ 112.726827][ T4917] ? device_add+0x39f/0xbb0 [ 112.726859][ T4917] device_add+0x408/0xbb0 [ 112.726889][ T4917] hci_conn_add_sysfs+0xd5/0x210 [ 112.726919][ T4917] le_conn_complete_evt+0x10e6/0x16b0 [ 112.726950][ T4917] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.726979][ T4917] ? skb_pull_data+0xfb/0x200 [ 112.727005][ T4917] hci_le_conn_complete_evt+0x187/0x470 [ 112.727033][ T4917] hci_event_packet+0x659/0xef0 [ 112.727065][ T4917] ? __pfx____migrate_enable+0x10/0x10 [ 112.727087][ T4917] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.727106][ T4917] ? __pfx_hci_event_packet+0x10/0x10 [ 112.727131][ T4917] ? preempt_schedule_common+0x82/0xd0 [ 112.727158][ T4917] ? preempt_schedule_thunk+0x16/0x30 [ 112.727188][ T4917] ? hci_send_to_monitor+0xe2/0x590 [ 112.727213][ T4917] hci_rx_work+0x3ee/0x1040 [ 112.727240][ T4917] ? preempt_schedule_thunk+0x16/0x30 [ 112.727272][ T4917] ? process_scheduled_works+0xa70/0x1860 [ 112.727294][ T4917] process_scheduled_works+0xb5d/0x1860 [ 112.727344][ T4917] ? __pfx_process_scheduled_works+0x10/0x10 [ 112.727370][ T4917] ? assign_work+0x3d5/0x5e0 [ 112.727395][ T4917] worker_thread+0xa53/0xfc0 [ 112.727442][ T4917] kthread+0x388/0x470 [ 112.727465][ T4917] ? __pfx_worker_thread+0x10/0x10 [ 112.727483][ T4917] ? __pfx_kthread+0x10/0x10 [ 112.727507][ T4917] ret_from_fork+0x514/0xb70 [ 112.727531][ T4917] ? __pfx_ret_from_fork+0x10/0x10 [ 112.727551][ T4917] ? __switch_to+0xc79/0x1410 [ 112.727580][ T4917] ? __pfx_kthread+0x10/0x10 [ 112.727604][ T4917] ret_from_fork_asm+0x1a/0x30 [ 112.727647][ T4917] [ 112.728143][ T4917] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.728417][ T4917] Bluetooth: hci1: failed to register connection device [ 113.706829][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.947619][ T59] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 114.699366][ T5753] veth0_vlan: entered promiscuous mode [ 114.753149][ T5753] veth1_vlan: entered promiscuous mode [ 114.858773][ T5753] veth0_macvtap: entered promiscuous mode [ 115.066922][ T5753] veth1_macvtap: entered promiscuous mode [ 115.721878][ T4917] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 115.973342][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.002811][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.025762][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.028979][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.035401][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.060143][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.145486][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.169737][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.524072][ T59] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 117.093508][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/05/27 08:14:13 executed programs: 14 [ 117.557594][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.557626][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.679871][ T4163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.679891][ T4163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.805619][ T5751] veth0_vlan: entered promiscuous mode [ 117.979501][ T59] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 118.448620][ T5754] veth0_vlan: entered promiscuous mode [ 118.458165][ T5751] veth1_vlan: entered promiscuous mode [ 118.496750][ T5755] veth0_vlan: entered promiscuous mode [ 118.513177][ T5754] veth1_vlan: entered promiscuous mode [ 118.551596][ T5755] veth1_vlan: entered promiscuous mode [ 118.631124][ T5751] veth0_macvtap: entered promiscuous mode [ 118.651086][ T5751] veth1_macvtap: entered promiscuous mode [ 118.690061][ T5754] veth0_macvtap: entered promiscuous mode [ 118.748896][ T5754] veth1_macvtap: entered promiscuous mode [ 118.762897][ T5755] veth0_macvtap: entered promiscuous mode [ 118.769168][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.829891][ T5755] veth1_macvtap: entered promiscuous mode [ 118.843997][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.891130][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.891210][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.914650][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.917466][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.947827][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.967145][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.980851][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.208261][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 119.208311][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.208334][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.208345][ T59] Workqueue: hci3 hci_rx_work [ 119.208377][ T59] Call Trace: [ 119.208386][ T59] [ 119.208395][ T59] dump_stack_lvl+0xe8/0x150 [ 119.208420][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 119.208445][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 119.208470][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 119.208500][ T59] ? rt_spin_unlock+0x160/0x200 [ 119.208526][ T59] kobject_add_internal+0x631/0xd10 [ 119.208556][ T59] kobject_add+0x163/0x240 [ 119.208575][ T59] ? kobject_put+0xab/0x560 [ 119.208598][ T59] ? __pfx_kobject_add+0x10/0x10 [ 119.208625][ T59] ? get_device_parent+0x370/0x3a0 [ 119.208657][ T59] device_add+0x408/0xbb0 [ 119.208687][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 119.208716][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 119.208755][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 119.208785][ T59] ? skb_pull_data+0xfb/0x200 [ 119.208810][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 119.208838][ T59] hci_event_packet+0x659/0xef0 [ 119.208871][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 119.208892][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 119.208911][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 119.208936][ T59] ? rt_spin_unlock+0x14f/0x200 [ 119.208967][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 119.208991][ T59] hci_rx_work+0x3ee/0x1040 [ 119.209019][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 119.209047][ T59] ? process_scheduled_works+0xa70/0x1860 [ 119.209069][ T59] process_scheduled_works+0xb5d/0x1860 [ 119.209119][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.209145][ T59] ? assign_work+0x3d5/0x5e0 [ 119.209170][ T59] worker_thread+0xa53/0xfc0 [ 119.209219][ T59] kthread+0x388/0x470 [ 119.209243][ T59] ? __pfx_worker_thread+0x10/0x10 [ 119.209260][ T59] ? __pfx_kthread+0x10/0x10 [ 119.209284][ T59] ret_from_fork+0x514/0xb70 [ 119.209308][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 119.209328][ T59] ? __switch_to+0xc79/0x1410 [ 119.209357][ T59] ? __pfx_kthread+0x10/0x10 [ 119.209381][ T59] ret_from_fork_asm+0x1a/0x30 [ 119.209419][ T59] [ 119.209775][ T59] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 119.210062][ T59] Bluetooth: hci3: failed to register connection device [ 119.294325][ T4917] Bluetooth: hci1: command 0x0406 tx timeout [ 119.782190][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.782712][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.783516][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.787333][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.788182][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.122962][ T5697] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 121.681974][ T5697] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 121.712051][ T4163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.714954][ T4163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.717006][ T4163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.896289][ T4163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.232833][ T59] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection 2026/05/27 08:14:18 executed programs: 20 [ 123.387528][ T59] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 124.167100][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.167120][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.928372][ T5697] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 125.187282][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.187301][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.288279][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.288299][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.413939][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.413958][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.569005][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.569025][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.726246][ T59] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 127.197396][ T5697] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection 2026/05/27 08:14:24 executed programs: 26 [ 128.343774][ T5697] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 128.343798][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(fu[ 128.343798][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.343821][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.343834][ T5697] Workqueue: hci2 hci_rx_work [ 128.343864][ T5697] Call Trace: [ 128.343872][ T5697] [ 128.343880][ T5697] dump_stack_lvl+0xe8/0x150 [ 128.343905][ T5697] sysfs_create_dir_ns+0x271/0x2a0 [ 128.343937][ T5697] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.343963][ T5697] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.343993][ T5697] ? rt_spin_unlock+0x160/0x200 [ 128.344024][ T5697] kobject_add_internal+0x631/0xd10 [ 128.344054][ T5697] kobject_add+0x163/0x240 [ 128.344074][ T5697] ? kobject_put+0xc1/0x560 [ 128.344096][ T5697] ? __pfx_kobject_add+0x10/0x10 [ 128.344123][ T5697] ? get_device_parent+0x370/0x3a0 [ 128.344153][ T5697] device_add+0x408/0xbb0 [ 128.344183][ T5697] hci_conn_add_sysfs+0xd5/0x210 [ 128.344212][ T5697] le_conn_complete_evt+0x10e6/0x16b0 [ 128.344244][ T5697] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.344272][ T5697] ? skb_pull_data+0xfb/0x200 [ 128.344298][ T5697] hci_le_conn_complete_evt+0x187/0x470 [ 128.344326][ T5697] hci_event_packet+0x659/0xef0 [ 128.344359][ T5697] ? __pfx____migrate_enable+0x10/0x10 [ 128.344380][ T5697] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.344399][ T5697] ? __pfx_hci_event_packet+0x10/0x10 [ 128.344424][ T5697] ? preempt_schedule_common+0x82/0xd0 [ 128.344451][ T5697] ? preempt_schedule_thunk+0x16/0x30 [ 128.344481][ T5697] ? hci_send_to_monitor+0xe2/0x590 [ 128.344506][ T5697] hci_rx_work+0x3ee/0x1040 [ 128.344533][ T5697] ? preempt_schedule_thunk+0x16/0x30 [ 128.344560][ T5697] ? process_scheduled_works+0xa70/0x1860 [ 128.344582][ T5697] process_scheduled_works+0xb5d/0x1860 [ 128.344631][ T5697] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.344657][ T5697] ? assign_work+0x3d5/0x5e0 [ 128.344682][ T5697] worker_thread+0xa53/0xfc0 [ 128.344729][ T5697] kthread+0x388/0x470 [ 128.344752][ T5697] ? __pfx_worker_thread+0x10/0x10 [ 128.344770][ T5697] ? __pfx_kthread+0x10/0x10 [ 128.344794][ T5697] ret_from_fork+0x514/0xb70 [ 128.344818][ T5697] ? __pfx_ret_from_fork+0x10/0x10 [ 128.344838][ T5697] ? __switch_to+0xc79/0x1410 [ 128.344866][ T5697] ? __pfx_kthread+0x10/0x10 [ 128.344890][ T5697] ret_from_fork_asm+0x1a/0x30 [ 128.344928][ T5697] [ 128.347207][ T5697] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.347251][ T5697] Bluetooth: hci2: failed to register connection device [ 128.350981][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 128.351012][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.351034][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.351046][ T59] Workqueue: hci5 hci_rx_work [ 128.351076][ T59] Call Trace: [ 128.351083][ T59] [ 128.351091][ T59] dump_stack_lvl+0xe8/0x150 [ 128.351115][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 128.351142][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.351167][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.351197][ T59] ? rt_spin_unlock+0x160/0x200 [ 128.351222][ T59] kobject_add_internal+0x631/0xd10 [ 128.351250][ T59] kobject_add+0x163/0x240 [ 128.351275][ T59] ? __pfx_kobject_add+0x10/0x10 [ 128.351301][ T59] ? get_device_parent+0x370/0x3a0 [ 128.351332][ T59] device_add+0x408/0xbb0 [ 128.351363][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 128.351391][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 128.351422][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.351450][ T59] ? skb_pull_data+0xfb/0x200 [ 128.351476][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 128.351504][ T59] hci_event_packet+0x659/0xef0 [ 128.351536][ T59] ? __pfx____migrate_enable+0x10/0x10 [ 128.351557][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.351576][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 128.351601][ T59] ? preempt_schedule_common+0x82/0xd0 [ 128.351628][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 128.351658][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 128.351687][ T59] hci_rx_work+0x3ee/0x1040 [ 128.351715][ T59] ? process_scheduled_works+0xa70/0x1860 [ 128.351736][ T59] process_scheduled_works+0xb5d/0x1860 [ 128.351787][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.351813][ T59] ? assign_work+0x3d5/0x5e0 [ 128.351837][ T59] worker_thread+0xa53/0xfc0 [ 128.351883][ T59] kthread+0x388/0x470 [ 128.351906][ T59] ? __pfx_worker_thread+0x10/0x10 [ 128.351923][ T59] ? __pfx_kthread+0x10/0x10 [ 128.351947][ T59] ret_from_fork+0x514/0xb70 [ 128.351970][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 128.351990][ T59] ? __switch_to+0xc79/0x1410 [ 128.352024][ T59] ? __pfx_kthread+0x10/0x10 [ 128.352048][ T59] ret_from_fork_asm+0x1a/0x30 [ 128.352085][ T59] [ 128.354306][ T59] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.354347][ T59] Bluetooth: hci5: failed to register connection device [ 128.409995][ T5697] ================================================================== [ 128.410012][ T5697] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.410044][ T5697] Read of size 8 at addr ffff8880112b2830 by task kworker/u9:2/5697 [ 128.410059][ T5697] [ 128.410069][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.410090][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.410102][ T5697] Workqueue: hci2 hci_rx_work [ 128.410129][ T5697] Call Trace: [ 128.410136][ T5697] [ 128.410144][ T5697] dump_stack_lvl+0xe8/0x150 [ 128.410166][ T5697] print_address_description+0x55/0x1e0 [ 128.410186][ T5697] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.410209][ T5697] print_report+0x58/0x70 [ 128.410227][ T5697] kasan_report+0x117/0x150 [ 128.410249][ T5697] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.410277][ T5697] l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.410304][ T5697] l2cap_connect_cfm+0x368/0x1560 [ 128.410327][ T5697] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 128.410346][ T5697] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.410373][ T5697] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.410389][ T5697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 128.410412][ T5697] ? mutex_lock_nested+0x152/0x1d0 [ 128.410431][ T5697] ? hci_connect_cfm+0x2c/0x140 [ 128.410448][ T5697] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 128.410470][ T5697] hci_connect_cfm+0x95/0x140 [ 128.410489][ T5697] le_conn_complete_evt+0x1134/0x16b0 [ 128.410516][ T5697] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.410540][ T5697] ? skb_pull_data+0xfb/0x200 [ 128.410562][ T5697] hci_le_conn_complete_evt+0x187/0x470 [ 128.410586][ T5697] hci_event_packet+0x659/0xef0 [ 128.410615][ T5697] ? __pfx____migrate_enable+0x10/0x10 [ 128.410635][ T5697] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.410653][ T5697] ? __pfx_hci_event_packet+0x10/0x10 [ 128.410677][ T5697] ? preempt_schedule_common+0x82/0xd0 [ 128.410701][ T5697] ? preempt_schedule_thunk+0x16/0x30 [ 128.410728][ T5697] ? hci_send_to_monitor+0xe2/0x590 [ 128.410752][ T5697] hci_rx_work+0x3ee/0x1040 [ 128.410777][ T5697] ? preempt_schedule_thunk+0x16/0x30 [ 128.410802][ T5697] ? process_scheduled_works+0xa70/0x1860 [ 128.410823][ T5697] process_scheduled_works+0xb5d/0x1860 [ 128.410858][ T5697] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.410878][ T5697] ? assign_work+0x3d5/0x5e0 [ 128.410898][ T5697] worker_thread+0xa53/0xfc0 [ 128.410931][ T5697] kthread+0x388/0x470 [ 128.410953][ T5697] ? __pfx_worker_thread+0x10/0x10 [ 128.410970][ T5697] ? __pfx_kthread+0x10/0x10 [ 128.410999][ T5697] ret_from_fork+0x514/0xb70 [ 128.411021][ T5697] ? __pfx_ret_from_fork+0x10/0x10 [ 128.411039][ T5697] ? __switch_to+0xc79/0x1410 [ 128.411065][ T5697] ? __pfx_kthread+0x10/0x10 [ 128.411087][ T5697] ret_from_fork_asm+0x1a/0x30 [ 128.411114][ T5697] [ 128.411120][ T5697] [ 128.411125][ T5697] Allocated by task 5697: [ 128.411133][ T5697] kasan_save_track+0x3e/0x80 [ 128.411149][ T5697] __kasan_kmalloc+0x93/0xb0 [ 128.411164][ T5697] __kmalloc_noprof+0x3e7/0x7b0 [ 128.411182][ T5697] sk_prot_alloc+0xe7/0x210 [ 128.411203][ T5697] sk_alloc+0x3a/0x390 [ 128.411223][ T5697] bt_sock_alloc+0x3b/0x340 [ 128.411236][ T5697] l2cap_sock_new_connection_cb+0xf1/0x2f0 [ 128.411257][ T5697] l2cap_connect_cfm+0x368/0x1560 [ 128.411276][ T5697] hci_connect_cfm+0x95/0x140 [ 128.411291][ T5697] le_conn_complete_evt+0x1134/0x16b0 [ 128.411309][ T5697] hci_le_conn_complete_evt+0x187/0x470 [ 128.411325][ T5697] hci_event_packet+0x659/0xef0 [ 128.411347][ T5697] hci_rx_work+0x3ee/0x1040 [ 128.411368][ T5697] process_scheduled_works+0xb5d/0x1860 [ 128.411383][ T5697] worker_thread+0xa53/0xfc0 [ 128.411398][ T5697] kthread+0x388/0x470 [ 128.411416][ T5697] ret_from_fork+0x514/0xb70 [ 128.411431][ T5697] ret_from_fork_asm+0x1a/0x30 [ 128.411450][ T5697] [ 128.411453][ T5697] Freed by task 6077: [ 128.411461][ T5697] kasan_save_track+0x3e/0x80 [ 128.411476][ T5697] kasan_save_free_info+0x46/0x50 [ 128.411498][ T5697] __kasan_slab_free+0x5c/0x80 [ 128.411514][ T5697] kfree+0x1c5/0x6c0 [ 128.411528][ T5697] __sk_destruct+0x74b/0x9d0 [ 128.411541][ T5697] l2cap_sock_cleanup_listen+0x1d9/0x580 [ 128.411562][ T5697] l2cap_sock_release+0x6e/0x270 [ 128.411581][ T5697] sock_close+0xc3/0x240 [ 128.411598][ T5697] __fput+0x461/0xa70 [ 128.411611][ T5697] task_work_run+0x1d9/0x270 [ 128.411631][ T5697] get_signal+0x11eb/0x1330 [ 128.411646][ T5697] arch_do_signal_or_restart+0xbc/0x840 [ 128.411668][ T5697] exit_to_user_mode_loop+0xa9/0x680 [ 128.411693][ T5697] do_syscall_64+0x353/0x580 [ 128.411705][ T5697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.411720][ T5697] [ 128.411725][ T5697] The buggy address belongs to the object at ffff8880112b2000 [ 128.411725][ T5697] which belongs to the cache kmalloc-4k of size 4096 [ 128.411740][ T5697] The buggy address is located 2096 bytes inside of [ 128.411740][ T5697] freed 4096-byte region [ffff8880112b2000, ffff8880112b3000) [ 128.411759][ T5697] [ 128.411763][ T5697] The buggy address belongs to the physical page: [ 128.411783][ T5697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112b0 [ 128.411800][ T5697] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 128.411815][ T5697] flags: 0x80000000000040(head|node=0|zone=1) [ 128.411836][ T5697] page_type: f5(slab) [ 128.411852][ T5697] raw: 0080000000000040 ffff88813fe0d140 dead000000000100 dead000000000122 [ 128.411867][ T5697] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 128.411883][ T5697] head: 0080000000000040 ffff88813fe0d140 dead000000000100 dead000000000122 [ 128.411897][ T5697] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 128.411912][ T5697] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 128.411926][ T5697] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 128.411934][ T5697] page dumped because: kasan: bad access detected [ 128.411947][ T5697] page_owner tracks the page as allocated [ 128.411953][ T5697] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 92, tgid 92 (kworker/u8:5), ts 128352916664, free_ts 127743180396 [ 128.411981][ T5697] post_alloc_hook+0x22d/0x280 [ 128.412002][ T5697] get_page_from_freelist+0x28b2/0x2930 [ 128.412016][ T5697] __alloc_frozen_pages_noprof+0x18d/0x380 [ 128.412030][ T5697] allocate_slab+0x77/0x660 [ 128.412045][ T5697] refill_objects+0x33c/0x3d0 [ 128.412060][ T5697] __pcs_replace_empty_main+0x373/0x720 [ 128.412076][ T5697] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 128.412089][ T5697] __alloc_skb+0x2c1/0x7d0 [ 128.412105][ T5697] nsim_dev_trap_report_work+0x29f/0xbd0 [ 128.412121][ T5697] process_scheduled_works+0xb5d/0x1860 [ 128.412133][ T5697] worker_thread+0xa53/0xfc0 [ 128.412146][ T5697] kthread+0x388/0x470 [ 128.412161][ T5697] ret_from_fork+0x514/0xb70 [ 128.412175][ T5697] ret_from_fork_asm+0x1a/0x30 [ 128.412190][ T5697] page last free pid 6070 tgid 6070 stack trace: [ 128.412197][ T5697] __free_frozen_pages+0xfe5/0x10d0 [ 128.412211][ T5697] __slab_free+0x252/0x2a0 [ 128.412223][ T5697] qlist_free_all+0x99/0x100 [ 128.412235][ T5697] kasan_quarantine_reduce+0x148/0x160 [ 128.412248][ T5697] __kasan_slab_alloc+0x22/0x80 [ 128.412261][ T5697] kmem_cache_alloc_noprof+0x33b/0x680 [ 128.412273][ T5697] vm_area_dup+0x2b/0x670 [ 128.412289][ T5697] __split_vma+0x1e4/0xa40 [ 128.412298][ T5697] vma_modify+0x90d/0x1f20 [ 128.412314][ T5697] vma_modify_flags+0x24b/0x330 [ 128.412329][ T5697] mprotect_fixup+0x62a/0xb60 [ 128.412345][ T5697] do_mprotect_pkey+0x8d5/0xd20 [ 128.412361][ T5697] __x64_sys_mprotect+0x80/0x90 [ 128.412377][ T5697] do_syscall_64+0x174/0x580 [ 128.412388][ T5697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.412400][ T5697] [ 128.412403][ T5697] Memory state around the buggy address: [ 128.412410][ T5697] ffff8880112b2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.412419][ T5697] ffff8880112b2780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.412428][ T5697] >ffff8880112b2800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.412434][ T5697] ^ [ 128.412440][ T5697] ffff8880112b2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.412448][ T5697] ffff8880112b2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.412454][ T5697] ================================================================== [ 128.412505][ T5697] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.412518][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.412534][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.412542][ T5697] Workqueue: hci2 hci_rx_work [ 128.412565][ T5697] Call Trace: [ 128.412571][ T5697] [ 128.412578][ T5697] vpanic+0x56c/0xa60 [ 128.412597][ T5697] ? __pfx_vpanic+0x10/0x10 [ 128.412613][ T5697] ? __pfx___schedule+0x10/0x10 [ 128.412638][ T5697] panic+0xc5/0xd0 [ 128.412654][ T5697] ? __pfx_panic+0x10/0x10 [ 128.412674][ T5697] ? preempt_schedule_common+0x82/0xd0 [ 128.412699][ T5697] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.412722][ T5697] check_panic_on_warn+0x89/0xb0 [ 128.412745][ T5697] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.412768][ T5697] end_report+0x73/0x170 [ 128.412788][ T5697] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.412810][ T5697] kasan_report+0x128/0x150 [ 128.412830][ T5697] ? l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.412857][ T5697] l2cap_sock_new_connection_cb+0x208/0x2f0 [ 128.412882][ T5697] l2cap_connect_cfm+0x368/0x1560 [ 128.412906][ T5697] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 128.412926][ T5697] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.412952][ T5697] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.412968][ T5697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 128.413001][ T5697] ? mutex_lock_nested+0x152/0x1d0 [ 128.413020][ T5697] ? hci_connect_cfm+0x2c/0x140 [ 128.413038][ T5697] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 128.413059][ T5697] hci_connect_cfm+0x95/0x140 [ 128.413079][ T5697] le_conn_complete_evt+0x1134/0x16b0 [ 128.413103][ T5697] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.413126][ T5697] ? skb_pull_data+0xfb/0x200 [ 128.413147][ T5697] hci_le_conn_complete_evt+0x187/0x470 [ 128.413169][ T5697] hci_event_packet+0x659/0xef0 [ 128.413196][ T5697] ? __pfx____migrate_enable+0x10/0x10 [ 128.413215][ T5697] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.413233][ T5697] ? __pfx_hci_event_packet+0x10/0x10 [ 128.413256][ T5697] ? preempt_schedule_common+0x82/0xd0 [ 128.413280][ T5697] ? preempt_schedule_thunk+0x16/0x30 [ 128.413306][ T5697] ? hci_send_to_monitor+0xe2/0x590 [ 128.413327][ T5697] hci_rx_work+0x3ee/0x1040 [ 128.413352][ T5697] ? preempt_schedule_thunk+0x16/0x30 [ 128.413377][ T5697] ? process_scheduled_works+0xa70/0x1860 [ 128.413395][ T5697] process_scheduled_works+0xb5d/0x1860 [ 128.413426][ T5697] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.413446][ T5697] ? assign_work+0x3d5/0x5e0 [ 128.413466][ T5697] worker_thread+0xa53/0xfc0 [ 128.413494][ T5697] kthread+0x388/0x470 [ 128.413515][ T5697] ? __pfx_worker_thread+0x10/0x10 [ 128.413532][ T5697] ? __pfx_kthread+0x10/0x10 [ 128.413554][ T5697] ret_from_fork+0x514/0xb70 [ 128.413573][ T5697] ? __pfx_ret_from_fork+0x10/0x10 [ 128.413591][ T5697] ? __switch_to+0xc79/0x1410 [ 128.413616][ T5697] ? __pfx_kthread+0x10/0x10 [ 128.413637][ T5697] ret_from_fork_asm+0x1a/0x30 [ 128.413663][ T5697] [ 128.414017][ T5697] Kernel Offset: disabled