Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2026/04/09 09:51:22 parsed 1 programs [ 199.588428][ T5855] cgroup: Unknown subsys name 'net' [ 199.724694][ T5855] cgroup: Unknown subsys name 'cpuset' [ 199.736504][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 200.865939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.873536][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.720986][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.033965][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 205.242606][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.255116][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.290203][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.299438][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.311369][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.675711][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 207.790204][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.799919][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.809021][ T5904] bridge_slave_0: entered allmulticast mode [ 207.817962][ T5904] bridge_slave_0: entered promiscuous mode [ 207.830378][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.839089][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.847677][ T5904] bridge_slave_1: entered allmulticast mode [ 207.857140][ T5904] bridge_slave_1: entered promiscuous mode [ 207.894730][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.910427][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.955194][ T5904] team0: Port device team_slave_0 added [ 207.965341][ T5904] team0: Port device team_slave_1 added [ 208.005670][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.014828][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.047133][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.063442][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.072348][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.102454][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.173075][ T5904] hsr_slave_0: entered promiscuous mode [ 208.181174][ T5904] hsr_slave_1: entered promiscuous mode [ 208.484179][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.500801][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.514425][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.526642][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.571696][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.581197][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.590566][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.598921][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.621631][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.631724][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.699912][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.728601][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.744502][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.753239][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.775998][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.784041][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.027926][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.082929][ T5904] veth0_vlan: entered promiscuous mode [ 209.096399][ T5904] veth1_vlan: entered promiscuous mode [ 209.135811][ T5904] veth0_macvtap: entered promiscuous mode [ 209.148429][ T5904] veth1_macvtap: entered promiscuous mode [ 209.173177][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.189766][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.209373][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.223077][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.238425][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.248611][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.445564][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.554453][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.617639][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.703150][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.451232][ T492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.469585][ T492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.500947][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.509467][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:51:40 executed programs: 0 [ 211.842720][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.853242][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.862293][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.872544][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.881638][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.890125][ T49] bridge_slave_1: left allmulticast mode [ 211.896924][ T49] bridge_slave_1: left promiscuous mode [ 211.904106][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.924015][ T49] bridge_slave_0: left allmulticast mode [ 211.940088][ T49] bridge_slave_0: left promiscuous mode [ 211.946768][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.230556][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.243818][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.255489][ T49] bond0 (unregistering): Released all slaves [ 212.401165][ T49] hsr_slave_0: left promiscuous mode [ 212.408821][ T49] hsr_slave_1: left promiscuous mode [ 212.416001][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.428647][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.439527][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.448228][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.467624][ T49] veth1_macvtap: left promiscuous mode [ 212.475327][ T49] veth0_macvtap: left promiscuous mode [ 212.482520][ T49] veth1_vlan: left promiscuous mode [ 212.488601][ T49] veth0_vlan: left promiscuous mode [ 212.777132][ T49] team0 (unregistering): Port device team_slave_1 removed [ 212.804720][ T49] team0 (unregistering): Port device team_slave_0 removed [ 213.185085][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 213.397579][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.406778][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.416777][ T5964] bridge_slave_0: entered allmulticast mode [ 213.425674][ T5964] bridge_slave_0: entered promiscuous mode [ 213.437498][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.445969][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.454095][ T5964] bridge_slave_1: entered allmulticast mode [ 213.463664][ T5964] bridge_slave_1: entered promiscuous mode [ 213.509196][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.523556][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.570171][ T5964] team0: Port device team_slave_0 added [ 213.581083][ T5964] team0: Port device team_slave_1 added [ 213.981352][ T5870] Bluetooth: hci0: command tx timeout [ 213.994609][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.002463][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.032007][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.046565][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.054771][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.083658][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.155311][ T5964] hsr_slave_0: entered promiscuous mode [ 214.163508][ T5964] hsr_slave_1: entered promiscuous mode [ 215.071800][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.085467][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.122999][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.147944][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.295468][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.342445][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.358065][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.365715][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.394621][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.402447][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.737026][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.816872][ T5964] veth0_vlan: entered promiscuous mode [ 215.838619][ T5964] veth1_vlan: entered promiscuous mode [ 215.894382][ T5964] veth0_macvtap: entered promiscuous mode [ 215.906725][ T5964] veth1_macvtap: entered promiscuous mode [ 215.943341][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.964390][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.991681][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.008842][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.031262][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.041201][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.061038][ T5870] Bluetooth: hci0: command tx timeout [ 216.162059][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.178976][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.225795][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.237949][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.150253][ T5870] Bluetooth: hci0: command tx timeout [ 220.220535][ T5870] Bluetooth: hci0: command tx timeout [ 231.435328][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.444972][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.453271][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.472111][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.480644][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.789027][ T6067] chnl_net:caif_netlink_parms(): no params data found [ 232.017070][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.025486][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.051036][ T6067] bridge_slave_0: entered allmulticast mode [ 232.061754][ T6067] bridge_slave_0: entered promiscuous mode [ 232.078867][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.087962][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.097189][ T6067] bridge_slave_1: entered allmulticast mode [ 232.106724][ T6067] bridge_slave_1: entered promiscuous mode [ 232.159981][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.177598][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.265702][ T6067] team0: Port device team_slave_0 added [ 232.283757][ T6067] team0: Port device team_slave_1 added [ 232.355200][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.362463][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.392543][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.408689][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.418763][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.447739][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.518321][ T6067] hsr_slave_0: entered promiscuous mode [ 232.525909][ T6067] hsr_slave_1: entered promiscuous mode [ 232.533882][ T6067] debugfs: 'hsr0' already exists in 'hsr' [ 232.540925][ T6067] Cannot create hsr debugfs directory [ 232.822313][ T6067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.836048][ T6067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.855517][ T6067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.873099][ T6067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.044091][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.077185][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.097981][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.106862][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.132601][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.141892][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.500410][ T5144] Bluetooth: hci1: command tx timeout [ 233.708321][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.804056][ T6067] veth0_vlan: entered promiscuous mode [ 233.823739][ T6067] veth1_vlan: entered promiscuous mode [ 233.883482][ T6067] veth0_macvtap: entered promiscuous mode [ 233.902811][ T6067] veth1_macvtap: entered promiscuous mode [ 233.946867][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.974467][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.003635][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.025489][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.049383][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.073189][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.211791][ T492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.238657][ T492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.297582][ T492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.326126][ T492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:52:02 executed programs: 3 [ 235.580145][ T5144] Bluetooth: hci1: command tx timeout [ 237.660530][ T5144] Bluetooth: hci1: command tx timeout [ 239.740307][ T5144] Bluetooth: hci1: command tx timeout [ 243.226984][ T5807] kworker/1:4: page allocation failure: order:4, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.280130][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 243.280179][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.280206][ T5807] Workqueue: events acomp_stream_workfn [ 243.280263][ T5807] Call Trace: [ 243.280274][ T5807] [ 243.280290][ T5807] dump_stack_lvl+0x100/0x190 [ 243.280346][ T5807] warn_alloc.cold+0x95/0x1c1 [ 243.280402][ T5807] ? __pfx_warn_alloc+0x10/0x10 [ 243.280452][ T5807] ? find_held_lock+0x2b/0x80 [ 243.280484][ T5807] ? psi_memstall_leave+0x19c/0x2e0 [ 243.280535][ T5807] ? psi_memstall_leave+0x1e4/0x2e0 [ 243.280571][ T5807] ? lockdep_hardirqs_on+0x78/0x100 [ 243.280615][ T5807] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 243.280681][ T5807] ? ret_from_fork_asm+0x1a/0x30 [ 243.280726][ T5807] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.280784][ T5807] ? arch_stack_walk+0x94/0xf0 [ 243.280834][ T5807] ? stack_trace_save+0x8e/0xc0 [ 243.280867][ T5807] ? __pfx_stack_trace_save+0x10/0x10 [ 243.280907][ T5807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.280943][ T5807] ? policy_nodemask+0xed/0x4f0 [ 243.280983][ T5807] alloc_pages_mpol+0x1fb/0x550 [ 243.281022][ T5807] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.281070][ T5807] ___kmalloc_large_node+0x104/0x150 [ 243.281115][ T5807] __kmalloc_large_noprof+0x1c/0x70 [ 243.281159][ T5807] crypto842_alloc_ctx+0x19/0x40 [ 243.281201][ T5807] acomp_stream_workfn+0x18c/0x280 [ 243.281250][ T5807] process_one_work+0xa23/0x19a0 [ 243.281317][ T5807] ? __pfx_process_one_work+0x10/0x10 [ 243.281379][ T5807] ? __pfx_acomp_stream_workfn+0x10/0x10 [ 243.281458][ T5807] worker_thread+0x5ef/0xe50 [ 243.281517][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 243.281567][ T5807] ? kthread+0x13a/0x450 [ 243.281608][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 243.281654][ T5807] kthread+0x370/0x450 [ 243.281697][ T5807] ? __pfx_kthread+0x10/0x10 [ 243.281743][ T5807] ret_from_fork+0x754/0xd80 [ 243.281801][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 243.281855][ T5807] ? __switch_to+0x7b4/0x1120 [ 243.281892][ T5807] ? __pfx_kthread+0x10/0x10 [ 243.281939][ T5807] ret_from_fork_asm+0x1a/0x30 [ 243.281995][ T5807] [ 243.282013][ T5807] Mem-Info: [ 243.790143][ T5807] active_anon:26 inactive_anon:36717 isolated_anon:0 [ 243.790143][ T5807] active_file:447 inactive_file:269 isolated_file:0 [ 243.790143][ T5807] unevictable:768 dirty:0 writeback:0 [ 243.790143][ T5807] slab_reclaimable:10883 slab_unreclaimable:78313 [ 243.790143][ T5807] mapped:457 shmem:1358 pagetables:3021 [ 243.790143][ T5807] sec_pagetables:0 bounce:0 [ 243.790143][ T5807] kernel_misc_reclaimable:0 [ 243.790143][ T5807] free:17135 free_pcp:6166 free_cma:0 [ 243.900277][ T5807] Node 0 active_anon:104kB inactive_anon:146864kB active_file:1688kB inactive_file:1028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1828kB dirty:0kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9760kB pagetables:10612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.980267][ T5807] Node 1 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:384kB pagetables:1472kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 244.040094][ T5807] Node 0 DMA free:9956kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 244.110103][ T5807] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 244.116651][ T5807] Node 0 DMA32 free:41468kB boost:69632kB min:103688kB low:112200kB high:120712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104kB inactive_anon:146564kB active_file:1688kB inactive_file:1028kB unevictable:1536kB writepending:0kB zspages:108kB present:3129332kB managed:2537260kB mlocked:0kB bounce:0kB free_pcp:376kB local_pcp:0kB free_cma:0kB [ 244.210168][ T5807] lowmem_reserve[]: 0 0 1 1 1 [ 244.216462][ T5807] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.300297][ T5807] lowmem_reserve[]: 0 0 0 0 0 [ 244.305714][ T5807] Node 1 Normal free:16816kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:64kB inactive_file:84kB unevictable:1536kB writepending:0kB zspages:2220kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24376kB local_pcp:8060kB free_cma:0kB [ 244.381329][ T5807] lowmem_reserve[]: 0 0 0 0 0 [ 244.386726][ T5807] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 9976kB [ 244.430097][ T5807] Node 0 DMA32: 994*4kB (ME) 496*8kB (ME) 220*16kB (UME) 160*32kB (UME) 86*64kB (UME) 42*128kB (UM) 25*256kB (UM) 13*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 41544kB [ 244.470065][ T5807] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.500095][ T5807] Node 1 Normal: 0*4kB 0*8kB 5*16kB (UME) 6*32kB (UME) 3*64kB (UME) 5*128kB (UME) 1*256kB (E) 2*512kB (UM) 0*1024kB 1*2048kB (E) 3*4096kB (M) = 16720kB [ 244.540508][ T5807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.560094][ T5807] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 244.580122][ T5807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.600090][ T5807] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.609793][ T5807] 2071 total pagecache pages [ 244.630108][ T5807] 1 pages in swap cache [ 244.634531][ T5807] Free swap = 121692kB [ 244.639740][ T5807] Total swap = 124996kB [ 244.660084][ T5807] 2097051 pages RAM [ 244.664357][ T5807] 0 pages HighMem/MovableOnly [ 244.669878][ T5807] 430858 pages reserved [ 244.700115][ T5807] 0 pages cma reserved [ 244.902651][ T33] oom_reaper: reaped process 6051 (syz.0.17), now anon-rss:0kB, file-rss:72kB, shmem-rss:0kB [ 250.356845][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.366872][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.376442][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.386244][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.395189][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.147026][ T6089] chnl_net:caif_netlink_parms(): no params data found [ 251.486741][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.510220][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.518248][ T6089] bridge_slave_0: entered allmulticast mode [ 251.552352][ T6089] bridge_slave_0: entered promiscuous mode [ 251.583551][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.610326][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.618107][ T6089] bridge_slave_1: entered allmulticast mode [ 251.652764][ T6089] bridge_slave_1: entered promiscuous mode [ 251.738323][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.774966][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.875579][ T6089] team0: Port device team_slave_0 added [ 251.894098][ T6089] team0: Port device team_slave_1 added [ 251.986127][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.010115][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.070063][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.092752][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.110085][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.170064][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.320841][ T6089] hsr_slave_0: entered promiscuous mode [ 252.328553][ T6089] hsr_slave_1: entered promiscuous mode [ 252.351149][ T6089] debugfs: 'hsr0' already exists in 'hsr' [ 252.357540][ T6089] Cannot create hsr debugfs directory [ 252.460160][ T5144] Bluetooth: hci2: command tx timeout [ 252.912456][ T6089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.953388][ T6089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.973661][ T6089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.997210][ T6089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.281576][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.325799][ T6089] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.359867][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.367763][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.424636][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.432455][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.999075][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.129859][ T6089] veth0_vlan: entered promiscuous mode [ 254.180561][ T6089] veth1_vlan: entered promiscuous mode [ 254.266915][ T6089] veth0_macvtap: entered promiscuous mode [ 254.280431][ T6089] veth1_macvtap: entered promiscuous mode [ 254.314562][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.353026][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.402496][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.440121][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.497563][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.520141][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.540154][ T5144] Bluetooth: hci2: command tx timeout [ 254.713060][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.741687][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.824390][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.850909][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.620212][ T5144] Bluetooth: hci2: command tx timeout [ 258.701655][ T5144] Bluetooth: hci2: command tx timeout 2026/04/09 09:52:28 executed programs: 4 [ 262.307368][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.314842][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.603062][ T1294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.692057][ T1294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.790265][ T1294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.873977][ T1294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.092319][ T1294] bridge_slave_1: left allmulticast mode [ 269.098587][ T1294] bridge_slave_1: left promiscuous mode [ 269.107108][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.124261][ T1294] bridge_slave_0: left allmulticast mode [ 269.130993][ T1294] bridge_slave_0: left promiscuous mode [ 269.142556][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.412680][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.426646][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.438607][ T1294] bond0 (unregistering): Released all slaves [ 269.788136][ T1294] hsr_slave_0: left promiscuous mode [ 269.810498][ T1294] hsr_slave_1: left promiscuous mode [ 269.818126][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.840166][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.861073][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.869411][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.910929][ T1294] veth1_macvtap: left promiscuous mode [ 269.917481][ T1294] veth0_macvtap: left promiscuous mode [ 269.940634][ T1294] veth1_vlan: left promiscuous mode [ 269.946254][ T1294] veth0_vlan: left promiscuous mode [ 270.366794][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.377064][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.388215][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.399313][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.407476][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.578213][ T1294] team0 (unregistering): Port device team_slave_1 removed [ 270.601396][ T1294] team0 (unregistering): Port device team_slave_0 removed [ 271.318502][ T6127] chnl_net:caif_netlink_parms(): no params data found [ 271.505223][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.520254][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.535464][ T6127] bridge_slave_0: entered allmulticast mode [ 271.562466][ T6127] bridge_slave_0: entered promiscuous mode [ 271.572152][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.579710][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.588239][ T6127] bridge_slave_1: entered allmulticast mode [ 271.597458][ T6127] bridge_slave_1: entered promiscuous mode [ 271.650545][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.665118][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.717114][ T6127] team0: Port device team_slave_0 added [ 271.727807][ T6127] team0: Port device team_slave_1 added [ 271.769374][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.777916][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.808099][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.837631][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.850277][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.920078][ T6127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.047329][ T6127] hsr_slave_0: entered promiscuous mode [ 272.054946][ T6127] hsr_slave_1: entered promiscuous mode [ 272.383681][ T6127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.421418][ T6127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.445544][ T6127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.460233][ T5144] Bluetooth: hci0: command tx timeout [ 272.477649][ T6127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.716719][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.771805][ T6127] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.796286][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.803731][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.848848][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.856671][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.438751][ T6127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.572963][ T6127] veth0_vlan: entered promiscuous mode [ 273.603626][ T6127] veth1_vlan: entered promiscuous mode [ 273.710643][ T6127] veth0_macvtap: entered promiscuous mode [ 273.725687][ T6127] veth1_macvtap: entered promiscuous mode [ 273.792081][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.816526][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.856684][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.890943][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.919864][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.944523][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.118799][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.150750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.214653][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.240285][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:52:42 executed programs: 5 [ 274.540407][ T5144] Bluetooth: hci0: command tx timeout [ 276.620510][ T5144] Bluetooth: hci0: command tx timeout [ 278.700778][ T5144] Bluetooth: hci0: command tx timeout [ 289.462487][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.472080][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.482962][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.492267][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.501436][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.813270][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 290.046375][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.070235][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.077954][ T6264] bridge_slave_0: entered allmulticast mode [ 290.104883][ T6264] bridge_slave_0: entered promiscuous mode [ 290.123324][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.140286][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.148437][ T6264] bridge_slave_1: entered allmulticast mode [ 290.184032][ T6264] bridge_slave_1: entered promiscuous mode [ 290.249931][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.265158][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.352276][ T6264] team0: Port device team_slave_0 added [ 290.372202][ T6264] team0: Port device team_slave_1 added [ 290.451451][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.459191][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.493780][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.508610][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.516652][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.551540][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.630905][ T6264] hsr_slave_0: entered promiscuous mode [ 290.639028][ T6264] hsr_slave_1: entered promiscuous mode [ 290.647476][ T6264] debugfs: 'hsr0' already exists in 'hsr' [ 290.654491][ T6264] Cannot create hsr debugfs directory [ 291.061139][ T6264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.077302][ T6264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.111597][ T6264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.126684][ T6264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.398534][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.427656][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.443724][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.451639][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.497284][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.505878][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.582537][ T5870] Bluetooth: hci3: command tx timeout [ 291.936245][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.335968][ T6264] veth0_vlan: entered promiscuous mode [ 292.353975][ T6264] veth1_vlan: entered promiscuous mode [ 292.405142][ T6264] veth0_macvtap: entered promiscuous mode [ 292.421886][ T6264] veth1_macvtap: entered promiscuous mode [ 292.448201][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.468580][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.506303][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.524892][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.552311][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.576807][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.664576][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.682301][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.723140][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.731500][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:53:01 executed programs: 6 [ 293.660738][ T5870] Bluetooth: hci3: command tx timeout [ 295.740464][ T5870] Bluetooth: hci3: command tx timeout [ 297.820263][ T5870] Bluetooth: hci3: command tx timeout [ 300.265714][ T6087] warn_alloc: 1 callbacks suppressed [ 300.265754][ T6087] syz.1.18: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 300.286193][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 300.286233][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 300.286266][ T6087] Call Trace: [ 300.286276][ T6087] [ 300.286290][ T6087] dump_stack_lvl+0x100/0x190 [ 300.286347][ T6087] warn_alloc.cold+0x95/0x1c1 [ 300.286405][ T6087] ? __pfx_warn_alloc+0x10/0x10 [ 300.286456][ T6087] ? __mutex_unlock_slowpath+0x15c/0x790 [ 300.286505][ T6087] ? __alloc_frozen_pages_noprof+0xd68/0x2ba0 [ 300.286561][ T6087] ? __pfx_out_of_memory+0x10/0x10 [ 300.286624][ T6087] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 300.286703][ T6087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 300.286754][ T6087] ? lockdep_hardirqs_on+0x78/0x100 [ 300.286814][ T6087] ? policy_nodemask+0x60/0x4f0 [ 300.286858][ T6087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.286896][ T6087] ? policy_nodemask+0xed/0x4f0 [ 300.286936][ T6087] alloc_pages_mpol+0x1fb/0x550 [ 300.286976][ T6087] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 300.287025][ T6087] alloc_pages_noprof+0x136/0x390 [ 300.287065][ T6087] relay_open_buf.part.0+0x261/0xb70 [ 300.287131][ T6087] relay_open+0x7b9/0xa00 [ 300.287185][ T6087] blk_trace_setup_prepare+0x35c/0x6c0 [ 300.287237][ T6087] blk_trace_setup+0x217/0x440 [ 300.287289][ T6087] ? __pfx_blk_trace_setup+0x10/0x10 [ 300.287343][ T6087] ? __pfx_vsnprintf+0x10/0x10 [ 300.287419][ T6087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.287455][ T6087] ? do_vfs_ioctl+0x226/0x13e0 [ 300.287508][ T6087] blk_trace_ioctl+0x245/0x320 [ 300.287557][ T6087] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 300.287615][ T6087] ? hook_file_ioctl_common+0x146/0x410 [ 300.287663][ T6087] blkdev_ioctl+0x17c/0x6f0 [ 300.287713][ T6087] ? __pfx_blkdev_ioctl+0x10/0x10 [ 300.287762][ T6087] ? __pfx___x64_sys_futex+0x10/0x10 [ 300.287817][ T6087] ? __pfx_blkdev_ioctl+0x10/0x10 [ 300.287869][ T6087] __x64_sys_ioctl+0x18e/0x210 [ 300.287922][ T6087] do_syscall_64+0x106/0xf80 [ 300.287954][ T6087] ? clear_bhb_loop+0x40/0x90 [ 300.287995][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.288028][ T6087] RIP: 0033:0x7f50e2d9c819 [ 300.288064][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.288094][ T6087] RSP: 002b:00007ffe557b73a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.288129][ T6087] RAX: ffffffffffffffda RBX: 00007f50e3015fa0 RCX: 00007f50e2d9c819 [ 300.288150][ T6087] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 300.288169][ T6087] RBP: 00007f50e2e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 300.288188][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.288206][ T6087] R13: 00007f50e3015fac R14: 00007f50e3015fa0 R15: 00007f50e3015fa0 [ 300.288250][ T6087] [ 300.288266][ T6087] Mem-Info: [ 300.612727][ T6087] active_anon:930 inactive_anon:24855 isolated_anon:0 [ 300.612727][ T6087] active_file:5696 inactive_file:257 isolated_file:0 [ 300.612727][ T6087] unevictable:768 dirty:0 writeback:0 [ 300.612727][ T6087] slab_reclaimable:5724 slab_unreclaimable:93481 [ 300.612727][ T6087] mapped:2334 shmem:1339 pagetables:3165 [ 300.612727][ T6087] sec_pagetables:0 bounce:0 [ 300.612727][ T6087] kernel_misc_reclaimable:0 [ 300.612727][ T6087] free:13743 free_pcp:5726 free_cma:0 [ 300.662438][ T6087] Node 0 active_anon:3720kB inactive_anon:99376kB active_file:22636kB inactive_file:1028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:9336kB dirty:0kB writeback:0kB shmem:3820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10016kB pagetables:10828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 300.698536][ T6087] Node 1 active_anon:0kB inactive_anon:44kB active_file:148kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1216kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 300.734812][ T6087] Node 0 DMA free:9996kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 300.771373][ T6087] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 300.777362][ T6087] Node 0 DMA32 free:29268kB boost:76620kB min:110676kB low:119188kB high:127700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3720kB inactive_anon:99376kB active_file:22632kB inactive_file:1028kB unevictable:1536kB writepending:0kB zspages:1060kB present:3129332kB managed:2537260kB mlocked:0kB bounce:0kB free_pcp:8996kB local_pcp:8000kB free_cma:0kB [ 300.823725][ T6087] lowmem_reserve[]: 0 0 1 1 1 [ 300.828839][ T6087] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.861158][ T6087] lowmem_reserve[]: 0 0 0 0 0 [ 300.866230][ T6087] Node 1 Normal free:15708kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:148kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:16836kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13836kB local_pcp:8060kB free_cma:0kB [ 300.906822][ T6087] lowmem_reserve[]: 0 0 0 0 0 [ 300.912114][ T6087] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 9996kB [ 300.929428][ T6087] Node 0 DMA32: 1*4kB (E) 134*8kB (ME) 72*16kB (ME) 45*32kB (ME) 22*64kB (ME) 59*128kB (M) 31*256kB (M) 17*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 29268kB [ 300.947763][ T6087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 300.959879][ T6087] Node 1 Normal: 1*4kB (U) 3*8kB (E) 18*16kB (ME) 49*32kB (ME) 30*64kB (UME) 25*128kB (ME) 12*256kB (UM) 5*512kB (ME) 3*1024kB (ME) 0*2048kB 0*4096kB = 15708kB [ 300.977849][ T6087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.990021][ T6087] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 301.000288][ T6087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.012154][ T6087] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 301.022433][ T6087] 7371 total pagecache pages [ 301.030347][ T6087] 84 pages in swap cache [ 301.034952][ T6087] Free swap = 74304kB [ 301.039870][ T6087] Total swap = 124996kB [ 301.044519][ T6087] 2097051 pages RAM [ 301.049572][ T6087] 0 pages HighMem/MovableOnly [ 301.055552][ T6087] 430858 pages reserved [ 301.060054][ T6087] 0 pages cma reserved [ 301.673244][ T33] oom_reaper: reaped process 6087 (syz.1.18), now anon-rss:0kB, file-rss:72kB, shmem-rss:0kB [ 308.721499][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.731210][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.739784][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.751534][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.761120][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.559266][ T6293] chnl_net:caif_netlink_parms(): no params data found [ 309.816382][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.824197][ T6293] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.832096][ T6293] bridge_slave_0: entered allmulticast mode [ 309.840920][ T6293] bridge_slave_0: entered promiscuous mode [ 309.851664][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.860274][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.867689][ T6293] bridge_slave_1: entered allmulticast mode [ 309.876588][ T6293] bridge_slave_1: entered promiscuous mode [ 309.924558][ T6293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.938578][ T6293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.986239][ T6293] team0: Port device team_slave_0 added [ 309.998096][ T6293] team0: Port device team_slave_1 added [ 310.076415][ T6293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.100105][ T6293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.160091][ T6293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.182985][ T6293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.200707][ T6293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.270139][ T6293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.431515][ T6293] hsr_slave_0: entered promiscuous mode [ 310.439839][ T6293] hsr_slave_1: entered promiscuous mode [ 310.461392][ T6293] debugfs: 'hsr0' already exists in 'hsr' [ 310.467337][ T6293] Cannot create hsr debugfs directory [ 310.782603][ T5144] Bluetooth: hci4: command tx timeout [ 311.008331][ T6293] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 311.043454][ T6293] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.091140][ T6293] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.113793][ T6293] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.395818][ T6293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.453969][ T6293] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.480020][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.488069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.527213][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.535277][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.152431][ T6293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.861124][ T5144] Bluetooth: hci4: command tx timeout [ 312.934096][ T6293] veth0_vlan: entered promiscuous mode [ 312.980940][ T6293] veth1_vlan: entered promiscuous mode [ 313.065810][ T6293] veth0_macvtap: entered promiscuous mode [ 313.087508][ T6293] veth1_macvtap: entered promiscuous mode [ 313.144152][ T6293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.193735][ T6293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.235850][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.268805][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.302214][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.322968][ T1294] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.513505][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.545036][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.631640][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.655824][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:53:22 executed programs: 7 [ 314.940141][ T5144] Bluetooth: hci4: command tx timeout [ 317.021037][ T5144] Bluetooth: hci4: command tx timeout [ 323.745965][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.761039][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.773276][ T492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.875843][ T492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.948492][ T492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.042368][ T492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.246934][ T492] bridge_slave_1: left allmulticast mode [ 325.255802][ T492] bridge_slave_1: left promiscuous mode [ 325.262477][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.273951][ T492] bridge_slave_0: left allmulticast mode [ 325.279800][ T492] bridge_slave_0: left promiscuous mode [ 325.286811][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.553653][ T492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.567616][ T492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.579606][ T492] bond0 (unregistering): Released all slaves [ 326.010374][ T492] hsr_slave_0: left promiscuous mode [ 326.026990][ T492] hsr_slave_1: left promiscuous mode [ 326.040931][ T492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.059890][ T492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.094511][ T492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.110207][ T492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.135573][ T492] veth1_macvtap: left promiscuous mode [ 326.143760][ T492] veth0_macvtap: left promiscuous mode [ 326.149943][ T492] veth1_vlan: left promiscuous mode [ 326.163069][ T492] veth0_vlan: left promiscuous mode [ 326.795590][ T492] team0 (unregistering): Port device team_slave_1 removed [ 326.842612][ T492] team0 (unregistering): Port device team_slave_0 removed [ 328.921505][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.932528][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.947046][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.962217][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.984967][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.459453][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 329.814040][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.850467][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.858654][ T6361] bridge_slave_0: entered allmulticast mode [ 329.910520][ T6361] bridge_slave_0: entered promiscuous mode [ 329.934034][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.950269][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.968905][ T6361] bridge_slave_1: entered allmulticast mode [ 329.993305][ T6361] bridge_slave_1: entered promiscuous mode [ 330.096088][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.133983][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.248701][ T6361] team0: Port device team_slave_0 added [ 330.264400][ T6361] team0: Port device team_slave_1 added [ 330.354942][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.370091][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.430083][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.464481][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.475841][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.521003][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.664611][ T6361] hsr_slave_0: entered promiscuous mode [ 330.684922][ T6361] hsr_slave_1: entered promiscuous mode [ 330.701181][ T6361] debugfs: 'hsr0' already exists in 'hsr' [ 330.707359][ T6361] Cannot create hsr debugfs directory [ 331.020256][ T5870] Bluetooth: hci1: command tx timeout [ 331.168384][ T6361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.186703][ T6361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.204090][ T6361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.232143][ T6361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.376692][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.445082][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.465217][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.473624][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.505026][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.512420][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.885367][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.309068][ T6361] veth0_vlan: entered promiscuous mode [ 332.330690][ T6361] veth1_vlan: entered promiscuous mode [ 332.377406][ T6361] veth0_macvtap: entered promiscuous mode [ 332.395063][ T6361] veth1_macvtap: entered promiscuous mode [ 332.454184][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.472519][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.489189][ T3520] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.502804][ T3520] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.527068][ T1294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.536535][ T1294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.690771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.699894][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.796239][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.805759][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:53:41 executed programs: 8 [ 333.100254][ T5870] Bluetooth: hci1: command tx timeout [ 335.180104][ T5870] Bluetooth: hci1: command tx timeout [ 337.261282][ T5870] Bluetooth: hci1: command tx timeout [ 348.009207][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.020817][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.029301][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.038799][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.047696][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.351222][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 348.494501][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.503337][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.511478][ T6484] bridge_slave_0: entered allmulticast mode [ 348.520544][ T6484] bridge_slave_0: entered promiscuous mode [ 348.530866][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.539171][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.548091][ T6484] bridge_slave_1: entered allmulticast mode [ 348.558643][ T6484] bridge_slave_1: entered promiscuous mode [ 348.609498][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.624484][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.675354][ T6484] team0: Port device team_slave_0 added [ 348.685940][ T6484] team0: Port device team_slave_1 added [ 348.735638][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.743136][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.771439][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.785373][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.792979][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.821777][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.904212][ T6484] hsr_slave_0: entered promiscuous mode [ 348.914135][ T6484] hsr_slave_1: entered promiscuous mode [ 348.921758][ T6484] debugfs: 'hsr0' already exists in 'hsr' [ 348.928008][ T6484] Cannot create hsr debugfs directory [ 349.175796][ T6484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 349.193343][ T6484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 349.207986][ T6484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 349.223748][ T6484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 349.315232][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.323228][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.331309][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.338955][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.354311][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.372760][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.488349][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.527920][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.545635][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.553097][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.580567][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.587942][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.001857][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.140422][ T5870] Bluetooth: hci5: command tx timeout [ 350.456602][ T6484] veth0_vlan: entered promiscuous mode [ 350.479605][ T6484] veth1_vlan: entered promiscuous mode [ 350.543824][ T6484] veth0_macvtap: entered promiscuous mode [ 350.564197][ T6484] veth1_macvtap: entered promiscuous mode [ 350.594558][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.618061][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.652610][ T3520] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.674058][ T3520] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.697203][ T3520] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.729754][ T3520] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.826093][ T492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.850158][ T492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.899299][ T492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.908483][ T492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:53:59 executed programs: 9 [ 352.220729][ T5870] Bluetooth: hci5: command tx timeout [ 354.312688][ T5870] Bluetooth: hci5: command tx timeout [ 355.527421][ T6110] syz.2.19: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.541294][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 355.541334][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.541354][ T6110] Call Trace: [ 355.541364][ T6110] [ 355.541376][ T6110] dump_stack_lvl+0x100/0x190 [ 355.541433][ T6110] warn_alloc.cold+0x95/0x1c1 [ 355.541491][ T6110] ? __pfx_warn_alloc+0x10/0x10 [ 355.541541][ T6110] ? __mutex_unlock_slowpath+0x15c/0x790 [ 355.541588][ T6110] ? __alloc_frozen_pages_noprof+0xd68/0x2ba0 [ 355.541642][ T6110] ? __pfx_out_of_memory+0x10/0x10 [ 355.541705][ T6110] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 355.541780][ T6110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.541838][ T6110] ? irqentry_exit+0x180/0x670 [ 355.541871][ T6110] ? lockdep_hardirqs_on+0x78/0x100 [ 355.541926][ T6110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.541963][ T6110] ? policy_nodemask+0xed/0x4f0 [ 355.542003][ T6110] alloc_pages_mpol+0x1fb/0x550 [ 355.542041][ T6110] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 355.542097][ T6110] alloc_pages_noprof+0x136/0x390 [ 355.542136][ T6110] relay_open_buf.part.0+0x261/0xb70 [ 355.542199][ T6110] relay_open+0x7b9/0xa00 [ 355.542252][ T6110] blk_trace_setup_prepare+0x35c/0x6c0 [ 355.542303][ T6110] blk_trace_setup+0x217/0x440 [ 355.542356][ T6110] ? __pfx_blk_trace_setup+0x10/0x10 [ 355.542414][ T6110] ? __pfx_vsnprintf+0x10/0x10 [ 355.542491][ T6110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.542527][ T6110] ? do_vfs_ioctl+0x226/0x13e0 [ 355.542580][ T6110] blk_trace_ioctl+0x245/0x320 [ 355.542630][ T6110] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 355.542688][ T6110] ? hook_file_ioctl_common+0x146/0x410 [ 355.542736][ T6110] blkdev_ioctl+0x17c/0x6f0 [ 355.542784][ T6110] ? __pfx_blkdev_ioctl+0x10/0x10 [ 355.542833][ T6110] ? __pfx___x64_sys_futex+0x10/0x10 [ 355.542881][ T6110] ? __pfx_blkdev_ioctl+0x10/0x10 [ 355.542932][ T6110] __x64_sys_ioctl+0x18e/0x210 [ 355.542982][ T6110] do_syscall_64+0x106/0xf80 [ 355.543013][ T6110] ? clear_bhb_loop+0x40/0x90 [ 355.543052][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.543091][ T6110] RIP: 0033:0x7f498f39c819 [ 355.543113][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.543139][ T6110] RSP: 002b:00007fff9b29f838 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.543164][ T6110] RAX: ffffffffffffffda RBX: 00007f498f615fa0 RCX: 00007f498f39c819 [ 355.543182][ T6110] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 355.543198][ T6110] RBP: 00007f498f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 355.543214][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.543229][ T6110] R13: 00007f498f615fac R14: 00007f498f615fa0 R15: 00007f498f615fa0 [ 355.543264][ T6110] [ 355.543280][ T6110] Mem-Info: [ 355.887802][ T6110] active_anon:7358 inactive_anon:18074 isolated_anon:0 [ 355.887802][ T6110] active_file:8538 inactive_file:257 isolated_file:0 [ 355.887802][ T6110] unevictable:768 dirty:12 writeback:0 [ 355.887802][ T6110] slab_reclaimable:6010 slab_unreclaimable:98640 [ 355.887802][ T6110] mapped:3967 shmem:1296 pagetables:3305 [ 355.887802][ T6110] sec_pagetables:0 bounce:0 [ 355.887802][ T6110] kernel_misc_reclaimable:0 [ 355.887802][ T6110] free:11995 free_pcp:10035 free_cma:0 [ 355.971105][ T6110] Node 0 active_anon:27772kB inactive_anon:71140kB active_file:26352kB inactive_file:1028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12616kB dirty:36kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10656kB pagetables:11216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.052330][ T6110] Node 1 active_anon:2452kB inactive_anon:36kB active_file:7800kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:3252kB dirty:12kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1664kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 356.131384][ T6110] Node 0 DMA free:10084kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.212100][ T6110] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 356.222658][ T6110] Node 0 DMA32 free:23900kB boost:8192kB min:42248kB low:50760kB high:59272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28172kB inactive_anon:70340kB active_file:26348kB inactive_file:1028kB unevictable:1536kB writepending:36kB zspages:996kB present:3129332kB managed:2537260kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 356.269250][ T6110] lowmem_reserve[]: 0 0 1 1 1 [ 356.275403][ T6110] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.313962][ T6110] lowmem_reserve[]: 0 0 0 0 0 [ 356.320109][ T6110] Node 1 Normal free:50264kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:8192KB free_highatomic:408KB active_anon:2452kB inactive_anon:36kB active_file:7800kB inactive_file:0kB unevictable:1536kB writepending:12kB zspages:22736kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4076kB local_pcp:3096kB free_cma:0kB [ 356.361040][ T6110] lowmem_reserve[]: 0 0 0 0 0 [ 356.366932][ T6110] Node 0 DMA: 2*4kB (U) 0*8kB 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10088kB [ 356.401031][ T5870] Bluetooth: hci5: command tx timeout [ 356.424908][ T6110] Node 0 DMA32: 449*4kB (UME) 106*8kB (UME) 33*16kB (UME) 17*32kB (UME) 15*64kB (UME) 15*128kB (UM) 4*256kB (UM) 22*512kB (UM) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 24004kB [ 356.445038][ T6110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.459727][ T6110] Node 1 Normal: 1*4kB (M) 21*8kB (UMEH) 59*16kB (UME) 14*32kB (MEH) 47*64kB (UH) 34*128kB (UME) 13*256kB (UH) 6*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 6*4096kB (U) = 49116kB [ 356.481333][ T6110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.495853][ T6110] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 356.509838][ T6110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.527660][ T6110] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 356.543382][ T6110] 12278 total pagecache pages [ 356.548499][ T6110] 2192 pages in swap cache [ 356.554589][ T6110] Free swap = 59660kB [ 356.559373][ T6110] Total swap = 124996kB [ 356.564372][ T6110] 2097051 pages RAM [ 356.568588][ T6110] 0 pages HighMem/MovableOnly [ 356.574495][ T6110] 430858 pages reserved [ 356.579509][ T6110] 0 pages cma reserved [ 357.127377][ T33] oom_reaper: reaped process 6110 (syz.2.19), now anon-rss:0kB, file-rss:72kB, shmem-rss:0kB [ 366.182096][ T5144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.191597][ T5144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.201670][ T5144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.211041][ T5144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.222817][ T5144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.560062][ T6512] chnl_net:caif_netlink_parms(): no params data found [ 366.693121][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.701762][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.709715][ T6512] bridge_slave_0: entered allmulticast mode [ 366.720164][ T6512] bridge_slave_0: entered promiscuous mode [ 366.733397][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.741713][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.749660][ T6512] bridge_slave_1: entered allmulticast mode [ 366.758900][ T6512] bridge_slave_1: entered promiscuous mode [ 366.808661][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.824268][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.873751][ T6512] team0: Port device team_slave_0 added [ 366.885347][ T6512] team0: Port device team_slave_1 added [ 366.933561][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.941435][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.968192][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.982547][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.989708][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.023851][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.103812][ T6512] hsr_slave_0: entered promiscuous mode [ 367.111996][ T6512] hsr_slave_1: entered promiscuous mode [ 367.119172][ T6512] debugfs: 'hsr0' already exists in 'hsr' [ 367.129599][ T6512] Cannot create hsr debugfs directory [ 367.427511][ T6512] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.444834][ T6512] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.463774][ T6512] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.478015][ T6512] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.644935][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.685102][ T6512] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.703502][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.711055][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.744244][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.752367][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.089343][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.300611][ T5144] Bluetooth: hci6: command tx timeout [ 368.495745][ T6512] veth0_vlan: entered promiscuous mode [ 368.515359][ T6512] veth1_vlan: entered promiscuous mode [ 368.584441][ T6512] veth0_macvtap: entered promiscuous mode [ 368.597494][ T6512] veth1_macvtap: entered promiscuous mode [ 368.632343][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.652726][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.685011][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.716754][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.738748][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.751070][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.841352][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.849694][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.915976][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.926201][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:54:17 executed programs: 10 [ 370.380186][ T5144] Bluetooth: hci6: command tx timeout [ 372.462292][ T5144] Bluetooth: hci6: command tx timeout [ 374.540387][ T5144] Bluetooth: hci6: command tx timeout [ 377.020227][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 377.684097][ T492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.773340][ T492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.847835][ T492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.944442][ T492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.222731][ T492] bridge_slave_1: left allmulticast mode [ 378.228814][ T492] bridge_slave_1: left promiscuous mode [ 378.244585][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.257582][ T492] bridge_slave_0: left allmulticast mode [ 378.270676][ T492] bridge_slave_0: left promiscuous mode [ 378.277026][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.535573][ T492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.553807][ T492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.565902][ T492] bond0 (unregistering): Released all slaves [ 378.930163][ T492] hsr_slave_0: left promiscuous mode [ 378.936960][ T492] hsr_slave_1: left promiscuous mode [ 378.958781][ T492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.976779][ T492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.004381][ T492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.013867][ T492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.030652][ T492] veth1_macvtap: left promiscuous mode [ 379.036645][ T492] veth0_macvtap: left promiscuous mode [ 379.043279][ T492] veth1_vlan: left promiscuous mode [ 379.049299][ T492] veth0_vlan: left promiscuous mode [ 379.570716][ T492] team0 (unregistering): Port device team_slave_1 removed [ 379.632788][ T492] team0 (unregistering): Port device team_slave_0 removed [ 384.122899][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.140862][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.166483][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.182038][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.191812][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.533265][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 384.718852][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.728220][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.738363][ T6604] bridge_slave_0: entered allmulticast mode [ 384.751039][ T6604] bridge_slave_0: entered promiscuous mode [ 384.763380][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.771126][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.779269][ T6604] bridge_slave_1: entered allmulticast mode [ 384.790645][ T6604] bridge_slave_1: entered promiscuous mode [ 384.839036][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.854949][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.902462][ T6604] team0: Port device team_slave_0 added [ 384.913690][ T6604] team0: Port device team_slave_1 added [ 384.958890][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.966801][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.995684][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.011755][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.019254][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.047257][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.133158][ T6604] hsr_slave_0: entered promiscuous mode [ 385.142160][ T6604] hsr_slave_1: entered promiscuous mode [ 385.149878][ T6604] debugfs: 'hsr0' already exists in 'hsr' [ 385.159735][ T6604] Cannot create hsr debugfs directory [ 385.193429][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.201202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.456295][ T6604] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 385.472022][ T6604] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 385.484337][ T6604] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 385.498047][ T6604] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 385.693074][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.722637][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.745075][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.754053][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.788853][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.797238][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.139459][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.300707][ T5870] Bluetooth: hci2: command tx timeout [ 386.636218][ T6604] veth0_vlan: entered promiscuous mode [ 386.654987][ T6604] veth1_vlan: entered promiscuous mode [ 386.704430][ T6604] veth0_macvtap: entered promiscuous mode [ 386.721705][ T6604] veth1_macvtap: entered promiscuous mode [ 386.750782][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.769109][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.792365][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.811685][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.837988][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.859650][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.953924][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.981406][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.032651][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.041916][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:54:35 executed programs: 11 [ 388.381309][ T5870] Bluetooth: hci2: command tx timeout [ 390.470096][ T5870] Bluetooth: hci2: command tx timeout [ 392.540689][ T5870] Bluetooth: hci2: command tx timeout [ 397.500281][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 402.240238][ T5144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 402.249869][ T5144] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 402.262063][ T5144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 402.278588][ T5144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 402.286918][ T5144] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 402.571410][ T6695] chnl_net:caif_netlink_parms(): no params data found [ 402.732603][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.740535][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.748016][ T6695] bridge_slave_0: entered allmulticast mode [ 402.757813][ T6695] bridge_slave_0: entered promiscuous mode [ 402.768198][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.778393][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.786874][ T6695] bridge_slave_1: entered allmulticast mode [ 402.796444][ T6695] bridge_slave_1: entered promiscuous mode [ 402.842920][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.856820][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.912480][ T6695] team0: Port device team_slave_0 added [ 402.922374][ T6695] team0: Port device team_slave_1 added [ 402.963829][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.971370][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.003026][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.017402][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.025392][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.054106][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.125587][ T6695] hsr_slave_0: entered promiscuous mode [ 403.132903][ T6695] hsr_slave_1: entered promiscuous mode [ 403.139780][ T6695] debugfs: 'hsr0' already exists in 'hsr' [ 403.149804][ T6695] Cannot create hsr debugfs directory [ 404.015371][ T6695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.047595][ T6695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.074246][ T6695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.095637][ T6695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.373263][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.385372][ T5870] Bluetooth: hci7: command tx timeout [ 404.471260][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.514554][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.522195][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.555648][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.563881][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.034962][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.191421][ T6695] veth0_vlan: entered promiscuous mode [ 405.214113][ T6695] veth1_vlan: entered promiscuous mode [ 405.276941][ T6695] veth0_macvtap: entered promiscuous mode [ 405.301557][ T6695] veth1_macvtap: entered promiscuous mode [ 405.344693][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.384757][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.441992][ T3520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.470114][ T3520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.511228][ T3520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.531266][ T3520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.723583][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.750056][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.851356][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.859870][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:54:54 executed programs: 12 [ 406.460626][ T5870] Bluetooth: hci7: command tx timeout [ 408.541300][ T5870] Bluetooth: hci7: command tx timeout [ 410.620209][ T5870] Bluetooth: hci7: command tx timeout [ 412.860980][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 414.673960][ T6191] syz.3.20: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.689218][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 414.689256][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.689274][ T6191] Call Trace: [ 414.689283][ T6191] [ 414.689294][ T6191] dump_stack_lvl+0x100/0x190 [ 414.689348][ T6191] warn_alloc.cold+0x95/0x1c1 [ 414.689410][ T6191] ? __pfx_warn_alloc+0x10/0x10 [ 414.689458][ T6191] ? __mutex_unlock_slowpath+0x15c/0x790 [ 414.689498][ T6191] ? __alloc_frozen_pages_noprof+0xd68/0x2ba0 [ 414.689543][ T6191] ? __pfx_out_of_memory+0x10/0x10 [ 414.689597][ T6191] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 414.689661][ T6191] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 414.689705][ T6191] ? irqentry_exit+0x180/0x670 [ 414.689733][ T6191] ? lockdep_hardirqs_on+0x78/0x100 [ 414.689782][ T6191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.689813][ T6191] ? policy_nodemask+0xed/0x4f0 [ 414.689847][ T6191] alloc_pages_mpol+0x1fb/0x550 [ 414.689879][ T6191] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 414.689911][ T6191] ? alloc_pages_noprof+0x96/0x390 [ 414.689956][ T6191] alloc_pages_noprof+0x136/0x390 [ 414.690006][ T6191] relay_open_buf.part.0+0x261/0xb70 [ 414.690078][ T6191] relay_open+0x7b9/0xa00 [ 414.690133][ T6191] blk_trace_setup_prepare+0x35c/0x6c0 [ 414.690186][ T6191] blk_trace_setup+0x217/0x440 [ 414.690235][ T6191] ? __pfx_blk_trace_setup+0x10/0x10 [ 414.690297][ T6191] ? __pfx_vsnprintf+0x10/0x10 [ 414.690361][ T6191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.690392][ T6191] ? do_vfs_ioctl+0x226/0x13e0 [ 414.690437][ T6191] blk_trace_ioctl+0x245/0x320 [ 414.690481][ T6191] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 414.690530][ T6191] ? hook_file_ioctl_common+0x146/0x410 [ 414.690572][ T6191] blkdev_ioctl+0x17c/0x6f0 [ 414.690616][ T6191] ? __pfx_blkdev_ioctl+0x10/0x10 [ 414.690658][ T6191] ? __pfx___x64_sys_futex+0x10/0x10 [ 414.690701][ T6191] ? __pfx_blkdev_ioctl+0x10/0x10 [ 414.690745][ T6191] __x64_sys_ioctl+0x18e/0x210 [ 414.690789][ T6191] do_syscall_64+0x106/0xf80 [ 414.690816][ T6191] ? clear_bhb_loop+0x40/0x90 [ 414.690850][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.690878][ T6191] RIP: 0033:0x7f2a8e59c819 [ 414.690901][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.690927][ T6191] RSP: 002b:00007ffc6f7fd8d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.690953][ T6191] RAX: ffffffffffffffda RBX: 00007f2a8e815fa0 RCX: 00007f2a8e59c819 [ 414.690970][ T6191] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 414.690987][ T6191] RBP: 00007f2a8e632c91 R08: 0000000000000000 R09: 0000000000000000 [ 414.691002][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.691018][ T6191] R13: 00007f2a8e815fac R14: 00007f2a8e815fa0 R15: 00007f2a8e815fa0 [ 414.691060][ T6191] [ 415.022225][ T6191] Mem-Info: [ 415.025778][ T6191] active_anon:16042 inactive_anon:4022 isolated_anon:0 [ 415.025778][ T6191] active_file:7797 inactive_file:257 isolated_file:0 [ 415.025778][ T6191] unevictable:768 dirty:12 writeback:2 [ 415.025778][ T6191] slab_reclaimable:6465 slab_unreclaimable:105205 [ 415.025778][ T6191] mapped:4201 shmem:1044 pagetables:3469 [ 415.025778][ T6191] sec_pagetables:0 bounce:0 [ 415.025778][ T6191] kernel_misc_reclaimable:0 [ 415.025778][ T6191] free:15642 free_pcp:4332 free_cma:0 [ 415.080153][ T6191] Node 0 active_anon:62104kB inactive_anon:14156kB active_file:26936kB inactive_file:1028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12788kB dirty:36kB writeback:8kB shmem:2632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11712kB pagetables:11728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.120135][ T6191] Node 1 active_anon:2064kB inactive_anon:1932kB active_file:4252kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4016kB dirty:12kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:1696kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 415.155670][ T6191] Node 0 DMA free:10000kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.191856][ T6191] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 415.197844][ T6191] Node 0 DMA32 free:25176kB boost:38912kB min:72968kB low:81480kB high:89992kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62104kB inactive_anon:14156kB active_file:26932kB inactive_file:1028kB unevictable:1536kB writepending:44kB zspages:1476kB present:3129332kB managed:2537260kB mlocked:0kB bounce:0kB free_pcp:8324kB local_pcp:800kB free_cma:0kB [ 415.238862][ T6191] lowmem_reserve[]: 0 0 1 1 1 [ 415.244274][ T6191] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1052kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.289027][ T6191] lowmem_reserve[]: 0 0 0 0 0 [ 415.294694][ T6191] Node 1 Normal free:27192kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2064kB inactive_anon:1932kB active_file:4252kB inactive_file:0kB unevictable:1536kB writepending:12kB zspages:30392kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9700kB local_pcp:3656kB free_cma:0kB [ 415.329530][ T6191] lowmem_reserve[]: 0 0 0 0 0 [ 415.334902][ T6191] Node 0 DMA: 0*4kB 0*8kB 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10000kB [ 415.362440][ T6191] Node 0 DMA32: 1667*4kB (UM) 651*8kB (ME) 182*16kB (UME) 61*32kB (UME) 35*64kB (UME) 20*128kB (UM) 2*256kB (M) 19*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 31780kB [ 415.386260][ T6191] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 415.401707][ T6191] Node 1 Normal: 1*4kB (U) 4*8kB (UE) 5*16kB (UME) 2*32kB (E) 2*64kB (UE) 3*128kB (ME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 4*4096kB (UM) = 27060kB [ 415.425596][ T6191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.436880][ T6191] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 415.447190][ T6191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.458157][ T6191] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 415.482668][ T6191] 9914 total pagecache pages [ 415.487534][ T6191] 821 pages in swap cache [ 415.492064][ T6191] Free swap = 40056kB [ 415.496553][ T6191] Total swap = 124996kB [ 415.504041][ T6191] 2097051 pages RAM [ 415.508147][ T6191] 0 pages HighMem/MovableOnly [ 415.515502][ T6191] 430858 pages reserved [ 415.519906][ T6191] 0 pages cma reserved [ 416.151228][ T33] oom_reaper: reaped process 6191 (syz.3.20), now anon-rss:0kB, file-rss:72kB, shmem-rss:0kB [ 421.272511][ T5144] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 421.281908][ T5144] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 421.300561][ T5144] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 421.328498][ T5144] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 421.340895][ T5144] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 421.998121][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 422.318507][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.374870][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.391657][ T6795] bridge_slave_0: entered allmulticast mode [ 422.410823][ T6795] bridge_slave_0: entered promiscuous mode [ 422.437147][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.455271][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.485276][ T6795] bridge_slave_1: entered allmulticast mode [ 422.502597][ T6795] bridge_slave_1: entered promiscuous mode [ 422.615092][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.655923][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.771468][ T6795] team0: Port device team_slave_0 added [ 422.803310][ T6795] team0: Port device team_slave_1 added [ 422.928620][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.950047][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.040082][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.082562][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.089672][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.160126][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.314781][ T6795] hsr_slave_0: entered promiscuous mode [ 423.331614][ T6795] hsr_slave_1: entered promiscuous mode [ 423.338281][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 423.360029][ T6795] Cannot create hsr debugfs directory [ 423.420232][ T5144] Bluetooth: hci8: command tx timeout [ 424.645975][ T6795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.696101][ T6795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.734635][ T6795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.757264][ T6795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.055187][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.108853][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.168580][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.176666][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.227083][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.234919][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.503684][ T5144] Bluetooth: hci8: command tx timeout [ 426.054566][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.234024][ T6795] veth0_vlan: entered promiscuous mode [ 426.269006][ T6795] veth1_vlan: entered promiscuous mode [ 426.364538][ T6795] veth0_macvtap: entered promiscuous mode [ 426.405018][ T6795] veth1_macvtap: entered promiscuous mode [ 426.474166][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.516134][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.564500][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.583974][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.631922][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.660123][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.982696][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.010079][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.109155][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.131091][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/09 09:55:15 executed programs: 13 [ 427.580401][ T5144] Bluetooth: hci8: command tx timeout [ 427.904750][ T6867] syz.1.28 (6867) used greatest stack depth: 19760 bytes left [ 429.661352][ T5144] Bluetooth: hci8: command tx timeout 2026/04/09 09:55:21 executed programs: 22 [ 433.341889][ T5870] Bluetooth: hci4: command 0x0406 tx timeout 2026/04/09 09:55:26 executed programs: 31 2026/04/09 09:55:31 executed programs: 41 [ 445.341137][ T32] INFO: task syz.4.21:6291 blocked for more than 143 seconds. [ 445.348695][ T32] Not tainted syzkaller #0 [ 445.370766][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.390047][ T32] task:syz.4.21 state:D stack:27208 pid:6291 tgid:6291 ppid:6264 task_flags:0x480140 flags:0x00080002 [ 445.421122][ T32] Call Trace: [ 445.424498][ T32] [ 445.427580][ T32] __schedule+0xfee/0x6120 [ 445.450082][ T32] ? __lock_acquire+0x4a5/0x2630 [ 445.456048][ T32] ? __pfx___schedule+0x10/0x10 [ 445.471353][ T32] ? find_held_lock+0x2b/0x80 [ 445.476504][ T32] ? schedule+0x2bf/0x390 [ 445.490032][ T32] schedule+0xdd/0x390 [ 445.494561][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.520009][ T32] __mutex_lock+0xc9a/0x1b90 [ 445.524819][ T32] ? __lock_acquire+0x4a5/0x2630 [ 445.549978][ T32] ? do_syscall_64+0x106/0xf80 [ 445.554941][ T32] ? blk_trace_setup+0x1f2/0x440 [ 445.563649][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.569693][ T32] ? find_held_lock+0x2b/0x80 [ 445.580177][ T32] ? blk_trace_setup+0x1f2/0x440 [ 445.585650][ T32] blk_trace_setup+0x1f2/0x440 [ 445.600008][ T32] ? __pfx_blk_trace_setup+0x10/0x10 [ 445.612541][ T32] ? __pfx_vsnprintf+0x10/0x10 [ 445.618172][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.628983][ T32] ? do_vfs_ioctl+0x226/0x13e0 [ 445.634538][ T32] blk_trace_ioctl+0x245/0x320 [ 445.639707][ T32] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 445.648165][ T32] ? hook_file_ioctl_common+0x146/0x410 [ 445.655653][ T32] blkdev_ioctl+0x17c/0x6f0 [ 445.676855][ T32] ? __pfx_blkdev_ioctl+0x10/0x10 [ 445.690049][ T32] ? __pfx___x64_sys_futex+0x10/0x10 [ 445.695829][ T32] ? __pfx_blkdev_ioctl+0x10/0x10 [ 445.712371][ T32] __x64_sys_ioctl+0x18e/0x210 [ 445.719279][ T32] do_syscall_64+0x106/0xf80 [ 445.727859][ T32] ? clear_bhb_loop+0x40/0x90 [ 445.738261][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.746520][ T32] RIP: 0033:0x7f53fd99c819 [ 445.754031][ T32] RSP: 002b:00007ffc2ca88c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.764371][ T32] RAX: ffffffffffffffda RBX: 00007f53fdc15fa0 RCX: 00007f53fd99c819 [ 445.773640][ T32] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 445.800013][ T32] RBP: 00007f53fda32c91 R08: 0000000000000000 R09: 0000000000000000 [ 445.808671][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.840129][ T32] R13: 00007f53fdc15fac R14: 00007f53fdc15fa0 R15: 00007f53fdc15fa0 [ 445.849223][ T32] [ 445.860489][ T32] [ 445.860489][ T32] Showing all locks held in the system: [ 445.868751][ T32] 1 lock held by khungtaskd/32: [ 445.889976][ T32] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 445.910206][ T32] 5 locks held by kworker/u8:3/49: [ 445.926236][ T32] #0: ffff8880b853b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 445.947183][ T32] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 445.968107][ T32] #2: ffff8880b8526358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 445.989502][ T32] #3: ffff888155b78168 (&rdev->bss_lock){+.-.}-{3:3}, at: ieee80211_ibss_work+0x153/0x1050 [ 446.011108][ T32] #4: ffff8880b853b360 (&rq->__lock){-.-.}-{2:2}, at: finish_task_switch.isra.0+0x14a/0xb80 [ 446.040074][ T32] 4 locks held by kworker/u8:7/1294: [ 446.050203][ T32] 2 locks held by getty/5584: [ 446.055572][ T32] #0: ffff888038b3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 446.087971][ T32] #1: ffffc900033332f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 446.109987][ T32] 2 locks held by syz.3.20/6191: [ 446.115378][ T32] 1 lock held by syz.4.21/6291: [ 446.130006][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.160034][ T32] 1 lock held by syz.5.22/6322: [ 446.165524][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.200029][ T32] 1 lock held by syz.6.23/6416: [ 446.206082][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.240031][ T32] 1 lock held by syz.7.24/6510: [ 446.246152][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.269832][ T32] 1 lock held by syz.8.25/6537: [ 446.275417][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.296773][ T32] 1 lock held by syz.9.26/6632: [ 446.302998][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.314091][ T32] 1 lock held by syz.0.27/6746: [ 446.319290][ T32] #0: ffff88802753af00 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x1f2/0x440 [ 446.360206][ T32] 2 locks held by syz.1.63/7104: [ 446.365709][ T32] [ 446.368251][ T32] ============================================= [ 446.368251][ T32] [ 446.420377][ T32] NMI backtrace for cpu 0 [ 446.420408][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.420448][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.420468][ T32] Call Trace: [ 446.420480][ T32] [ 446.420492][ T32] dump_stack_lvl+0x100/0x190 [ 446.420554][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 446.420616][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.420789][ T32] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 446.420844][ T32] sys_info+0x141/0x190 [ 446.420904][ T32] watchdog+0xd25/0x1050 [ 446.420951][ T32] ? __pfx_watchdog+0x10/0x10 [ 446.420988][ T32] ? __kthread_parkme+0x18c/0x230 [ 446.421032][ T32] ? kthread+0x13a/0x450 [ 446.421075][ T32] ? __pfx_watchdog+0x10/0x10 [ 446.421107][ T32] kthread+0x370/0x450 [ 446.421152][ T32] ? __pfx_kthread+0x10/0x10 [ 446.421202][ T32] ret_from_fork+0x754/0xd80 [ 446.421255][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 446.421311][ T32] ? __switch_to+0x7b4/0x1120 [ 446.421352][ T32] ? __pfx_kthread+0x10/0x10 [ 446.421395][ T32] ret_from_fork_asm+0x1a/0x30 [ 446.421446][ T32] [ 446.421460][ T32] Sending NMI from CPU 0 to CPUs 1: [ 446.554814][ C1] NMI backtrace for cpu 1 [ 446.554837][ C1] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 446.554867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.554889][ C1] Workqueue: events_unbound toggle_allocation_gate [ 446.554922][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 446.554951][ C1] Code: 86 0d 5a 00 48 89 df 5b e9 1d 8b 5f 00 be 03 00 00 00 5b e9 e2 69 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 a5 bc 05 12 48 8b 34 24 65 48 8b 15 81 bc 05 [ 446.554975][ C1] RSP: 0018:ffffc900015f7910 EFLAGS: 00000083 [ 446.554994][ C1] RAX: 0000000000000000 RBX: ffff88813fe9a558 RCX: ffffffff81ac70bc [ 446.555010][ C1] RDX: 0000000000000cae RSI: 0000000000001000 RDI: ffff88801c750000 [ 446.555026][ C1] RBP: ffffffff82683cad R08: 0000000000000007 R09: 0000000000001000 [ 446.555041][ C1] R10: 0000000000000cae R11: 0000000000000000 R12: 0000000000000cae [ 446.555056][ C1] R13: 8000000002683063 R14: 0000000000000001 R15: 8000000000000063 [ 446.555073][ C1] FS: 0000000000000000(0000) GS:ffff888124440000(0000) knlGS:0000000000000000 [ 446.555096][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.555113][ C1] CR2: 00007ffa17b2ba40 CR3: 000000000e598000 CR4: 00000000003526f0 [ 446.555129][ C1] Call Trace: [ 446.555136][ C1] [ 446.555144][ C1] __text_poke+0x3ce/0xae0 [ 446.555171][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 446.555200][ C1] ? __pfx___text_poke+0x10/0x10 [ 446.555226][ C1] ? __kmalloc_node_noprof+0xfd/0x850 [ 446.555271][ C1] smp_text_poke_batch_finish+0x6b5/0xc60 [ 446.555305][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 446.555334][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 446.555379][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 446.555420][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 446.555455][ C1] jump_label_update+0x37a/0x550 [ 446.555488][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 446.555522][ C1] static_key_enable+0x1a/0x20 [ 446.555552][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 446.555578][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 446.555608][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.555652][ C1] process_one_work+0xa23/0x19a0 [ 446.555697][ C1] ? __pfx_process_one_work+0x10/0x10 [ 446.555741][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 446.555769][ C1] worker_thread+0x5ef/0xe50 [ 446.555811][ C1] ? __pfx_worker_thread+0x10/0x10 [ 446.555848][ C1] ? kthread+0x13a/0x450 [ 446.555881][ C1] ? __pfx_worker_thread+0x10/0x10 [ 446.555917][ C1] kthread+0x370/0x450 [ 446.555950][ C1] ? __pfx_kthread+0x10/0x10 [ 446.555986][ C1] ret_from_fork+0x754/0xd80 [ 446.556025][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 446.556065][ C1] ? __switch_to+0x7b4/0x1120 [ 446.556094][ C1] ? __pfx_kthread+0x10/0x10 [ 446.556129][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.556167][ C1] [ 446.653913][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.888159][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.914515][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 446.922127][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.931668][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.942047][ T32] Call Trace: [ 446.945555][ T32] [ 446.948763][ T32] dump_stack_lvl+0x100/0x190 [ 446.953972][ T32] vpanic+0x552/0x970 [ 446.958675][ T32] ? __pfx_vpanic+0x10/0x10 [ 446.963557][ T32] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 446.970190][ T32] panic+0xd1/0xe0 [ 446.974157][ T32] ? __pfx_panic+0x10/0x10 [ 446.978648][ T32] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 446.984969][ T32] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 446.991226][ T32] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 446.997809][ T32] ? watchdog.cold+0x198/0x1ca [ 447.002738][ T32] ? watchdog+0xd35/0x1050 [ 447.008012][ T32] watchdog.cold+0x1a9/0x1ca [ 447.013176][ T32] ? __pfx_watchdog+0x10/0x10 [ 447.018047][ T32] ? __kthread_parkme+0x18c/0x230 [ 447.023244][ T32] ? kthread+0x13a/0x450 [ 447.027917][ T32] ? __pfx_watchdog+0x10/0x10 [ 447.032826][ T32] kthread+0x370/0x450 [ 447.037420][ T32] ? __pfx_kthread+0x10/0x10 [ 447.042275][ T32] ret_from_fork+0x754/0xd80 [ 447.047710][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 447.053642][ T32] ? __switch_to+0x7b4/0x1120 [ 447.058921][ T32] ? __pfx_kthread+0x10/0x10 [ 447.064092][ T32] ret_from_fork_asm+0x1a/0x30 [ 447.069272][ T32] [ 447.073082][ T32] Kernel Offset: disabled [ 447.077502][ T32] Rebooting in 86400 seconds..