Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 2025/09/19 17:50:51 parsed 1 programs [ 125.941979][ T6205] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 130.821226][ T6247] chnl_net:caif_netlink_parms(): no params data found [ 130.886949][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.894772][ T6247] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.902278][ T6247] bridge_slave_0: entered allmulticast mode [ 130.909985][ T6247] bridge_slave_0: entered promiscuous mode [ 130.919260][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.927263][ T6247] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.934797][ T6247] bridge_slave_1: entered allmulticast mode [ 130.942628][ T6247] bridge_slave_1: entered promiscuous mode [ 130.970833][ T6247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.983234][ T6247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.013446][ T6247] team0: Port device team_slave_0 added [ 131.021170][ T6247] team0: Port device team_slave_1 added [ 131.047252][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.054416][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.081025][ T6247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.094845][ T6247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.102305][ T6247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.129564][ T6247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.170279][ T6247] hsr_slave_0: entered promiscuous mode [ 131.177197][ T6247] hsr_slave_1: entered promiscuous mode [ 131.633717][ T6247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.645804][ T6247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.656579][ T6247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.669677][ T6247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.708853][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.716324][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.724163][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.731460][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.812541][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.821711][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.840603][ T6247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.866652][ T6247] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.880889][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.888815][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.909748][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.917304][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.171300][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.235713][ T6247] veth0_vlan: entered promiscuous mode [ 132.249371][ T6247] veth1_vlan: entered promiscuous mode [ 132.295606][ T6247] veth0_macvtap: entered promiscuous mode [ 132.308496][ T6247] veth1_macvtap: entered promiscuous mode [ 132.334273][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.353362][ T6247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.372029][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.383214][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.402990][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.426875][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.565747][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.599049][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.609233][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.620375][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.631230][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.640079][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.671710][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.761092][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.853897][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.098698][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108329][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.537175][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.551249][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.598737][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.609904][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/19 17:51:04 executed programs: 0 [ 134.508538][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.518629][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.527625][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.536302][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.545439][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.790848][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 134.911598][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.919286][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.927165][ T6380] bridge_slave_0: entered allmulticast mode [ 134.935436][ T6380] bridge_slave_0: entered promiscuous mode [ 134.947753][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.955000][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.962783][ T6380] bridge_slave_1: entered allmulticast mode [ 134.970154][ T6380] bridge_slave_1: entered promiscuous mode [ 135.047976][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.078330][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.159994][ T36] bridge_slave_1: left allmulticast mode [ 135.167174][ T36] bridge_slave_1: left promiscuous mode [ 135.175543][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.186979][ T36] bridge_slave_0: left allmulticast mode [ 135.193410][ T36] bridge_slave_0: left promiscuous mode [ 135.199471][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.541284][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.555652][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.567461][ T36] bond0 (unregistering): Released all slaves [ 135.624096][ T6380] team0: Port device team_slave_0 added [ 135.665448][ T6380] team0: Port device team_slave_1 added [ 135.677341][ T36] hsr_slave_0: left promiscuous mode [ 135.684492][ T36] hsr_slave_1: left promiscuous mode [ 135.691062][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.698890][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.709245][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.717317][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.737047][ T36] veth1_macvtap: left promiscuous mode [ 135.743607][ T36] veth0_macvtap: left promiscuous mode [ 135.749489][ T36] veth1_vlan: left promiscuous mode [ 135.756681][ T36] veth0_vlan: left promiscuous mode [ 136.232716][ T36] team0 (unregistering): Port device team_slave_1 removed [ 136.275866][ T36] team0 (unregistering): Port device team_slave_0 removed [ 136.611869][ T5185] Bluetooth: hci0: command tx timeout [ 136.612984][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.627968][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.655732][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.676115][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.683349][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.710698][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.810738][ T6380] hsr_slave_0: entered promiscuous mode [ 136.817863][ T6380] hsr_slave_1: entered promiscuous mode [ 137.775059][ T6380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.787489][ T6380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.806291][ T6380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.823614][ T6380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.039866][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.066338][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.081207][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.088474][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.113724][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.120939][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.324904][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.368009][ T6380] veth0_vlan: entered promiscuous mode [ 138.379885][ T6380] veth1_vlan: entered promiscuous mode [ 138.408474][ T6380] veth0_macvtap: entered promiscuous mode [ 138.418597][ T6380] veth1_macvtap: entered promiscuous mode [ 138.435904][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.452332][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.468039][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.479223][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.488364][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.502633][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.551604][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.564237][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.587791][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.596544][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.693036][ T5185] Bluetooth: hci0: command tx timeout [ 139.446206][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.459765][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.469746][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.480069][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.488754][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 2025/09/19 17:51:09 executed programs: 35 [ 139.499724][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.510258][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.519178][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.527831][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 139.536173][ T89] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 140.342380][ T89] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 140.773001][ T5185] Bluetooth: hci0: command tx timeout [ 142.852810][ T5185] Bluetooth: hci0: command tx timeout 2025/09/19 17:51:14 executed programs: 278 2025/09/19 17:51:19 executed programs: 524 [ 151.106761][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.116667][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.138138][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.154332][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.167318][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.317434][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.340805][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 151.385665][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.441148][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.456853][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.464769][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.472534][ T7689] bridge_slave_0: entered allmulticast mode [ 151.479757][ T7689] bridge_slave_0: entered promiscuous mode [ 151.489116][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.496511][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.504009][ T7689] bridge_slave_1: entered allmulticast mode [ 151.511218][ T7689] bridge_slave_1: entered promiscuous mode [ 151.527933][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.563877][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.575697][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.613794][ T7689] team0: Port device team_slave_0 added [ 151.623409][ T7689] team0: Port device team_slave_1 added [ 151.671699][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.679719][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.706264][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.727823][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.737810][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.765677][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.813960][ T36] bridge_slave_1: left allmulticast mode [ 151.820259][ T36] bridge_slave_1: left promiscuous mode [ 151.826379][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.836394][ T36] bridge_slave_0: left allmulticast mode [ 151.842597][ T36] bridge_slave_0: left promiscuous mode [ 151.848595][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.110575][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.123337][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.133667][ T36] bond0 (unregistering): Released all slaves [ 152.184310][ T7689] hsr_slave_0: entered promiscuous mode [ 152.192496][ T7689] hsr_slave_1: entered promiscuous mode [ 152.199153][ T7689] debugfs: 'hsr0' already exists in 'hsr' [ 152.209297][ T7689] Cannot create hsr debugfs directory [ 152.437944][ T36] hsr_slave_0: left promiscuous mode [ 152.447557][ T36] hsr_slave_1: left promiscuous mode [ 152.455429][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.464081][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.472969][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.480828][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.500132][ T36] veth1_macvtap: left promiscuous mode [ 152.506481][ T36] veth0_macvtap: left promiscuous mode [ 152.513635][ T36] veth1_vlan: left promiscuous mode [ 152.519347][ T36] veth0_vlan: left promiscuous mode [ 152.918740][ T36] team0 (unregistering): Port device team_slave_1 removed [ 152.946441][ T36] team0 (unregistering): Port device team_slave_0 removed [ 153.254867][ T5185] Bluetooth: hci1: command tx timeout [ 153.629441][ T7689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.641035][ T7689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.653516][ T7689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.665637][ T7689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.782868][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.810024][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.826940][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.834507][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.854163][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.861881][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.116874][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.183569][ T7689] veth0_vlan: entered promiscuous mode [ 154.199010][ T7689] veth1_vlan: entered promiscuous mode [ 154.246514][ T7689] veth0_macvtap: entered promiscuous mode [ 154.260349][ T7689] veth1_macvtap: entered promiscuous mode [ 154.290065][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.309122][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.331911][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.358124][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.380968][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.393623][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.456410][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.474976][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/19 17:51:24 executed programs: 602 [ 154.516317][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.525923][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.334344][ T5185] Bluetooth: hci1: command tx timeout [ 155.423832][ T898] hid_parser_main: 65308 callbacks suppressed [ 155.423852][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.445088][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.455253][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.463907][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.472150][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.480703][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.489455][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.497529][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.507255][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 155.520023][ T898] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 156.332858][ T898] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 157.414103][ T5185] Bluetooth: hci1: command tx timeout [ 159.493719][ T5185] Bluetooth: hci1: command tx timeout 2025/09/19 17:51:29 executed programs: 839 2025/09/19 17:51:34 executed programs: 1085 [ 167.036468][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.045630][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.054606][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.066572][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.078543][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.218384][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 167.289681][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.298564][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.306724][ T8968] bridge_slave_0: entered allmulticast mode [ 167.316441][ T8968] bridge_slave_0: entered promiscuous mode [ 167.327021][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.336335][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.344747][ T8968] bridge_slave_1: entered allmulticast mode [ 167.352175][ T8968] bridge_slave_1: entered promiscuous mode [ 167.381975][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.411858][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.425637][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.455471][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.484706][ T8968] team0: Port device team_slave_0 added [ 167.494038][ T8968] team0: Port device team_slave_1 added [ 167.522957][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.548825][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.556646][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.586183][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.598888][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.607408][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.636145][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.660814][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.708655][ T8968] hsr_slave_0: entered promiscuous mode [ 167.716775][ T8968] hsr_slave_1: entered promiscuous mode [ 167.860089][ T36] bridge_slave_1: left allmulticast mode [ 167.866020][ T36] bridge_slave_1: left promiscuous mode [ 167.871996][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.883103][ T36] bridge_slave_0: left allmulticast mode [ 167.889124][ T36] bridge_slave_0: left promiscuous mode [ 167.895830][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.114838][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.126333][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.137224][ T36] bond0 (unregistering): Released all slaves [ 168.416082][ T36] hsr_slave_0: left promiscuous mode [ 168.425226][ T36] hsr_slave_1: left promiscuous mode [ 168.433311][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.441269][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.456731][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.465640][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.486758][ T36] veth1_macvtap: left promiscuous mode [ 168.492827][ T36] veth0_macvtap: left promiscuous mode [ 168.498818][ T36] veth1_vlan: left promiscuous mode [ 168.505296][ T36] veth0_vlan: left promiscuous mode [ 168.888028][ T36] team0 (unregistering): Port device team_slave_1 removed [ 168.919949][ T36] team0 (unregistering): Port device team_slave_0 removed [ 169.092698][ T52] Bluetooth: hci0: command tx timeout [ 169.413762][ T8968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.429109][ T8968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.440619][ T8968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.453199][ T8968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.586929][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.616074][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.631178][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.638701][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.655693][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.664076][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.857149][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.907657][ T8968] veth0_vlan: entered promiscuous mode [ 169.920695][ T8968] veth1_vlan: entered promiscuous mode [ 169.951933][ T8968] veth0_macvtap: entered promiscuous mode [ 169.962995][ T8968] veth1_macvtap: entered promiscuous mode [ 169.984292][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.001464][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.017529][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.028863][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.039475][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.049958][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/19 17:51:39 executed programs: 1202 [ 170.106368][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.116122][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.139701][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.148601][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.942818][ T898] hid_parser_main: 65308 callbacks suppressed [ 170.942839][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 170.957306][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 170.966704][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 170.976537][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 170.986347][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 170.994750][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 171.003554][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 171.011551][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 171.020317][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 171.028375][ T898] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 171.172562][ T52] Bluetooth: hci0: command tx timeout [ 171.871974][ T898] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 173.252256][ T52] Bluetooth: hci0: command tx timeout 2025/09/19 17:51:44 executed programs: 1443 [ 175.333379][ T52] Bluetooth: hci0: command tx timeout 2025/09/19 17:51:49 executed programs: 1689 [ 182.523256][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.536961][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.544958][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.554386][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.562307][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.700054][T10226] chnl_net:caif_netlink_parms(): no params data found [ 182.740009][ T1159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.799798][T10226] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.807578][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.815265][T10226] bridge_slave_0: entered allmulticast mode [ 182.823724][T10226] bridge_slave_0: entered promiscuous mode [ 182.838886][ T1159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.856265][T10226] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.864554][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.873620][T10226] bridge_slave_1: entered allmulticast mode [ 182.881019][T10226] bridge_slave_1: entered promiscuous mode [ 182.918189][ T1159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.936894][T10226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.949974][T10226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.981036][T10226] team0: Port device team_slave_0 added [ 182.990623][T10226] team0: Port device team_slave_1 added [ 183.006485][ T1159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.046862][T10226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.054200][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.082092][T10226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.095483][T10226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.102689][T10226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.129716][T10226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.179809][T10226] hsr_slave_0: entered promiscuous mode [ 183.186955][T10226] hsr_slave_1: entered promiscuous mode [ 183.194273][T10226] debugfs: 'hsr0' already exists in 'hsr' [ 183.200080][T10226] Cannot create hsr debugfs directory [ 183.315342][ T1159] bridge_slave_1: left allmulticast mode [ 183.321035][ T1159] bridge_slave_1: left promiscuous mode [ 183.327593][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.337704][ T1159] bridge_slave_0: left allmulticast mode [ 183.344134][ T1159] bridge_slave_0: left promiscuous mode [ 183.349955][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.585185][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.596820][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.607620][ T1159] bond0 (unregistering): Released all slaves [ 183.885365][ T1159] hsr_slave_0: left promiscuous mode [ 183.891640][ T1159] hsr_slave_1: left promiscuous mode [ 183.906762][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.920113][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.929468][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.937521][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.958832][ T1159] veth1_macvtap: left promiscuous mode [ 183.965796][ T1159] veth0_macvtap: left promiscuous mode [ 183.972555][ T1159] veth1_vlan: left promiscuous mode [ 183.978490][ T1159] veth0_vlan: left promiscuous mode [ 184.363764][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 184.394902][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 184.613204][ T5185] Bluetooth: hci1: command tx timeout [ 184.844440][T10226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.865699][T10226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.890361][T10226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.905339][T10226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.046736][T10226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.074328][T10226] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.090305][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.097696][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.115220][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.123003][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.303071][T10226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.344855][T10226] veth0_vlan: entered promiscuous mode [ 185.356582][T10226] veth1_vlan: entered promiscuous mode [ 185.386423][T10226] veth0_macvtap: entered promiscuous mode [ 185.396037][T10226] veth1_macvtap: entered promiscuous mode [ 185.417142][T10226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.432997][T10226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.447458][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.457951][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.468412][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.477940][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.536628][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.549603][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/19 17:51:55 executed programs: 1802 [ 185.577567][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.587241][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.314820][ T6485] hid_parser_main: 65308 callbacks suppressed [ 186.314840][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.328874][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.337870][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.345974][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.353453][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.361117][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.368742][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.379209][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.388167][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.396848][ T6485] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 186.692419][ T5185] Bluetooth: hci1: command tx timeout [ 187.186430][ T6485] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 188.772212][ T5185] Bluetooth: hci1: command tx timeout 2025/09/19 17:52:00 executed programs: 2045 [ 190.851845][ T5185] Bluetooth: hci1: command tx timeout [ 194.534901][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.541311][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/19 17:52:05 executed programs: 2294 [ 197.853299][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.867692][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.878206][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.886882][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.895501][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.039976][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.060422][T11478] chnl_net:caif_netlink_parms(): no params data found [ 198.118487][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.152576][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.160359][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.169209][T11478] bridge_slave_0: entered allmulticast mode [ 198.177831][T11478] bridge_slave_0: entered promiscuous mode [ 198.186176][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.193802][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.201325][T11478] bridge_slave_1: entered allmulticast mode [ 198.208668][T11478] bridge_slave_1: entered promiscuous mode [ 198.236545][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.264356][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.276216][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.306926][T11478] team0: Port device team_slave_0 added [ 198.315980][T11478] team0: Port device team_slave_1 added [ 198.344585][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.368175][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.376837][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.403640][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.416214][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.424352][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.453702][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.529619][T11478] hsr_slave_0: entered promiscuous mode [ 198.536403][T11478] hsr_slave_1: entered promiscuous mode [ 198.626372][ T50] bridge_slave_1: left allmulticast mode [ 198.633404][ T50] bridge_slave_1: left promiscuous mode [ 198.639308][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.648824][ T50] bridge_slave_0: left allmulticast mode [ 198.654697][ T50] bridge_slave_0: left promiscuous mode [ 198.660701][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.896095][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.907845][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.918899][ T50] bond0 (unregistering): Released all slaves [ 199.215690][ T50] hsr_slave_0: left promiscuous mode [ 199.223516][ T50] hsr_slave_1: left promiscuous mode [ 199.229947][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.238489][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.248415][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.256326][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.279354][ T50] veth1_macvtap: left promiscuous mode [ 199.285371][ T50] veth0_macvtap: left promiscuous mode [ 199.291452][ T50] veth1_vlan: left promiscuous mode [ 199.297528][ T50] veth0_vlan: left promiscuous mode [ 199.659260][ T50] team0 (unregistering): Port device team_slave_1 removed [ 199.689293][ T50] team0 (unregistering): Port device team_slave_0 removed [ 199.973077][ T5185] Bluetooth: hci0: command tx timeout [ 200.207655][T11478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.219582][T11478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.232048][T11478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.247404][T11478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.383530][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.409553][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.427139][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.434646][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.454709][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.462677][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.702062][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.770758][T11478] veth0_vlan: entered promiscuous mode [ 200.788552][T11478] veth1_vlan: entered promiscuous mode [ 200.837483][T11478] veth0_macvtap: entered promiscuous mode [ 200.850083][T11478] veth1_macvtap: entered promiscuous mode [ 200.881181][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.901077][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.918650][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.945210][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.957204][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.968047][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.023580][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.033388][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.060526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/09/19 17:52:10 executed programs: 2402 [ 201.069676][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.793724][ T10] hid_parser_main: 65308 callbacks suppressed [ 201.793744][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.808919][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.819621][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.827207][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.835658][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.843788][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.851544][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.860087][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.870120][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 201.878070][ T10] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 202.052101][ T5185] Bluetooth: hci0: command tx timeout [ 202.643540][ T10] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 204.132028][ T5185] Bluetooth: hci0: command tx timeout 2025/09/19 17:52:15 executed programs: 2647 [ 206.212677][ T5185] Bluetooth: hci0: command tx timeout 2025/09/19 17:52:20 executed programs: 2892 [ 213.350849][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.362412][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.372470][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.389295][T11541] ================================================================== [ 213.397652][T11541] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 213.405526][T11541] Read of size 8 at addr ffff8880292540a0 by task khidpd_16c05505/11541 [ 213.413949][T11541] [ 213.416395][T11541] CPU: 0 UID: 0 PID: 11541 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) [ 213.416418][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.416437][T11541] Call Trace: [ 213.416444][T11541] [ 213.416452][T11541] dump_stack_lvl+0x189/0x250 [ 213.416477][T11541] ? __kasan_check_byte+0x12/0x40 [ 213.416495][T11541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.416514][T11541] ? lock_release+0x4b/0x3e0 [ 213.416538][T11541] ? __virt_addr_valid+0x4a5/0x5c0 [ 213.416558][T11541] print_report+0xca/0x240 [ 213.416575][T11541] ? __mutex_lock+0x801/0x1350 [ 213.416593][T11541] kasan_report+0x118/0x150 [ 213.416611][T11541] ? __mutex_lock+0x801/0x1350 [ 213.416634][T11541] __mutex_lock+0x801/0x1350 [ 213.416654][T11541] ? __mutex_lock+0x5bb/0x1350 [ 213.416673][T11541] ? l2cap_unregister_user+0x6a/0x1b0 [ 213.416688][T11541] ? __pfx___mutex_lock+0x10/0x10 [ 213.416708][T11541] ? __pfx___timer_delete_sync+0x10/0x10 [ 213.416729][T11541] l2cap_unregister_user+0x6a/0x1b0 [ 213.416745][T11541] hidp_session_thread+0x3c9/0x410 [ 213.416763][T11541] ? __pfx_hidp_session_thread+0x10/0x10 [ 213.416779][T11541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 213.416797][T11541] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 213.416815][T11541] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 213.416833][T11541] ? __kthread_parkme+0x7b/0x200 [ 213.416847][T11541] ? __kthread_parkme+0x1a1/0x200 [ 213.416864][T11541] kthread+0x711/0x8a0 [ 213.416883][T11541] ? __pfx_hidp_session_thread+0x10/0x10 [ 213.416898][T11541] ? __pfx_kthread+0x10/0x10 [ 213.416913][T11541] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.416927][T11541] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.416943][T11541] ? __pfx_kthread+0x10/0x10 [ 213.416960][T11541] ret_from_fork+0x4bc/0x870 [ 213.416982][T11541] ? __pfx_ret_from_fork+0x10/0x10 [ 213.417005][T11541] ? __switch_to_asm+0x39/0x70 [ 213.417024][T11541] ? __switch_to_asm+0x33/0x70 [ 213.417044][T11541] ? __pfx_kthread+0x10/0x10 [ 213.417061][T11541] ret_from_fork_asm+0x1a/0x30 [ 213.417086][T11541] [ 213.417092][T11541] [ 213.419360][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.427241][T11541] Allocated by task 11478: [ 213.427252][T11541] kasan_save_track+0x3e/0x80 [ 213.427276][T11541] __kasan_kmalloc+0x93/0xb0 [ 213.427287][T11541] __kmalloc_noprof+0x411/0x7f0 [ 213.427304][T11541] hci_alloc_dev_priv+0x28/0x2060 [ 213.427317][T11541] vhci_create_device+0x120/0x650 [ 213.427332][T11541] vhci_write+0x3ce/0x4a0 [ 213.427345][T11541] vfs_write+0x5c9/0xb30 [ 213.427369][T11541] ksys_write+0x145/0x250 [ 213.427386][T11541] do_syscall_64+0xfa/0xfa0 [ 213.441266][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.444344][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.444364][T11541] [ 213.444369][T11541] Freed by task 11478: [ 213.444377][T11541] kasan_save_track+0x3e/0x80 [ 213.710169][T11541] __kasan_save_free_info+0x46/0x50 [ 213.715454][T11541] __kasan_slab_free+0x5c/0x80 [ 213.720569][T11541] kfree+0x19a/0x6d0 [ 213.724632][T11541] bt_host_release+0x82/0x90 [ 213.729301][T11541] device_release+0x9c/0x1c0 [ 213.734496][T11541] kobject_put+0x22b/0x480 [ 213.739352][T11541] vhci_release+0x15a/0x1a0 [ 213.744017][T11541] __fput+0x44c/0xa70 [ 213.748080][T11541] task_work_run+0x1d4/0x260 [ 213.752852][T11541] do_exit+0x6b5/0x2300 [ 213.757213][T11541] do_group_exit+0x21c/0x2d0 [ 213.762426][T11541] get_signal+0x1285/0x1340 [ 213.767213][T11541] arch_do_signal_or_restart+0xa0/0x790 [ 213.772783][T11541] exit_to_user_mode_loop+0x72/0x130 [ 213.778167][T11541] do_syscall_64+0x2bd/0xfa0 [ 213.782921][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.789152][T11541] [ 213.791463][T11541] Last potentially related work creation: [ 213.797444][T11541] kasan_save_stack+0x3e/0x60 [ 213.802134][T11541] kasan_record_aux_stack+0xbd/0xd0 [ 213.807416][T11541] insert_work+0x3d/0x330 [ 213.811826][T11541] __queue_work+0xbaf/0xfb0 [ 213.816335][T11541] queue_work_on+0x181/0x270 [ 213.821146][T11541] process_scheduled_works+0xae1/0x17b0 [ 213.826873][T11541] worker_thread+0x8a0/0xda0 [ 213.831623][T11541] kthread+0x711/0x8a0 [ 213.835868][T11541] ret_from_fork+0x4bc/0x870 [ 213.840631][T11541] ret_from_fork_asm+0x1a/0x30 [ 213.845397][T11541] [ 213.847807][T11541] Second to last potentially related work creation: [ 213.854540][T11541] kasan_save_stack+0x3e/0x60 [ 213.859396][T11541] kasan_record_aux_stack+0xbd/0xd0 [ 213.864939][T11541] insert_work+0x3d/0x330 [ 213.869456][T11541] __queue_work+0xcd2/0xfb0 [ 213.874008][T11541] call_timer_fn+0x17e/0x5f0 [ 213.878854][T11541] __run_timer_base+0x646/0x860 [ 213.883780][T11541] run_timer_softirq+0xb7/0x180 [ 213.888709][T11541] handle_softirqs+0x286/0x870 [ 213.894152][T11541] __irq_exit_rcu+0xca/0x1f0 [ 213.899091][T11541] irq_exit_rcu+0x9/0x30 [ 213.903504][T11541] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 213.909303][T11541] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.915791][T11541] [ 213.918192][T11541] The buggy address belongs to the object at ffff888029254000 [ 213.918192][T11541] which belongs to the cache kmalloc-8k of size 8192 [ 213.933041][T11541] The buggy address is located 160 bytes inside of [ 213.933041][T11541] freed 8192-byte region [ffff888029254000, ffff888029256000) [ 213.947678][T11541] [ 213.950080][T11541] The buggy address belongs to the physical page: [ 213.956665][T11541] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029250000 pfn:0x29250 [ 213.967271][T11541] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 213.975858][T11541] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 213.984452][T11541] page_type: f5(slab) [ 213.988511][T11541] raw: 00fff00000000240 ffff88801ac42280 ffffea0001f5c210 ffffea0001ebc810 [ 213.997446][T11541] raw: ffff888029250000 0000000000020001 00000000f5000000 0000000000000000 [ 214.006201][T11541] head: 00fff00000000240 ffff88801ac42280 ffffea0001f5c210 ffffea0001ebc810 [ 214.015182][T11541] head: ffff888029250000 0000000000020001 00000000f5000000 0000000000000000 [ 214.024389][T11541] head: 00fff00000000003 ffffea0000a49401 00000000ffffffff 00000000ffffffff [ 214.033230][T11541] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 214.041895][T11541] page dumped because: kasan: bad access detected [ 214.048573][T11541] page_owner tracks the page as allocated [ 214.054287][T11541] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 10226, tgid 10226 (syz-executor), ts 184903233830, free_ts 184870096182 [ 214.074698][T11541] post_alloc_hook+0x240/0x2a0 [ 214.079586][T11541] get_page_from_freelist+0x21e4/0x22c0 [ 214.085730][T11541] __alloc_frozen_pages_noprof+0x181/0x370 [ 214.091977][T11541] alloc_pages_mpol+0x232/0x4a0 [ 214.096864][T11541] allocate_slab+0x96/0x3a0 [ 214.101473][T11541] ___slab_alloc+0xe94/0x1920 [ 214.106484][T11541] __slab_alloc+0x65/0x100 [ 214.111320][T11541] __kvmalloc_node_noprof+0x6ba/0x910 [ 214.116762][T11541] pfifo_fast_init+0x372/0x6c0 [ 214.121592][T11541] qdisc_create_dflt+0x13b/0x4e0 [ 214.126799][T11541] dev_activate+0x378/0x1150 [ 214.131540][T11541] __dev_open+0x69c/0x880 [ 214.136029][T11541] __dev_change_flags+0x1ea/0x6d0 [ 214.141301][T11541] netif_change_flags+0x88/0x1a0 [ 214.146234][T11541] do_setlink+0xc55/0x41c0 [ 214.150690][T11541] rtnl_newlink+0x160b/0x1c70 [ 214.155619][T11541] page last free pid 1159 tgid 1159 stack trace: [ 214.161940][T11541] __free_frozen_pages+0xbc4/0xd30 [ 214.167159][T11541] free_large_kmalloc+0x13a/0x1f0 [ 214.172256][T11541] wg_destruct+0x1fd/0x2f0 [ 214.177035][T11541] netdev_run_todo+0xe53/0x1020 [ 214.181878][T11541] default_device_exit_batch+0x81e/0x890 [ 214.187771][T11541] ops_undo_list+0x525/0x990 [ 214.192539][T11541] cleanup_net+0x4d8/0x810 [ 214.197120][T11541] process_scheduled_works+0xae1/0x17b0 [ 214.202663][T11541] worker_thread+0x8a0/0xda0 [ 214.207287][T11541] kthread+0x711/0x8a0 [ 214.211433][T11541] ret_from_fork+0x4bc/0x870 [ 214.216099][T11541] ret_from_fork_asm+0x1a/0x30 [ 214.220863][T11541] [ 214.223204][T11541] Memory state around the buggy address: [ 214.228912][T11541] ffff888029253f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.237910][T11541] ffff888029254000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.246163][T11541] >ffff888029254080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.254562][T11541] ^ [ 214.259702][T11541] ffff888029254100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.267847][T11541] ffff888029254180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.276548][T11541] ================================================================== [ 214.285548][T11541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 214.293103][T11541] CPU: 0 UID: 0 PID: 11541 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) [ 214.303306][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.313617][T11541] Call Trace: [ 214.317065][T11541] [ 214.320159][T11541] dump_stack_lvl+0x99/0x250 [ 214.325026][T11541] ? __asan_memcpy+0x40/0x70 [ 214.329706][T11541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.335000][T11541] ? __pfx__printk+0x10/0x10 [ 214.339784][T11541] vpanic+0x237/0x6d0 [ 214.343809][T11541] ? __pfx_vpanic+0x10/0x10 [ 214.348400][T11541] panic+0xb9/0xc0 [ 214.352205][T11541] ? __pfx_panic+0x10/0x10 [ 214.356693][T11541] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 214.362783][T11541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.368755][T11541] ? __mutex_lock+0x801/0x1350 [ 214.373606][T11541] check_panic_on_warn+0x89/0xb0 [ 214.378649][T11541] ? __mutex_lock+0x801/0x1350 [ 214.383498][T11541] end_report+0x78/0x160 [ 214.387728][T11541] kasan_report+0x129/0x150 [ 214.392392][T11541] ? __mutex_lock+0x801/0x1350 [ 214.397147][T11541] __mutex_lock+0x801/0x1350 [ 214.401898][T11541] ? __mutex_lock+0x5bb/0x1350 [ 214.406673][T11541] ? l2cap_unregister_user+0x6a/0x1b0 [ 214.413448][T11541] ? __pfx___mutex_lock+0x10/0x10 [ 214.418763][T11541] ? __pfx___timer_delete_sync+0x10/0x10 [ 214.424920][T11541] l2cap_unregister_user+0x6a/0x1b0 [ 214.430401][T11541] hidp_session_thread+0x3c9/0x410 [ 214.435502][T11541] ? __pfx_hidp_session_thread+0x10/0x10 [ 214.441293][T11541] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.447332][T11541] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 214.454436][T11541] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 214.461040][T11541] ? __kthread_parkme+0x7b/0x200 [ 214.467379][T11541] ? __kthread_parkme+0x1a1/0x200 [ 214.473206][T11541] kthread+0x711/0x8a0 [ 214.477362][T11541] ? __pfx_hidp_session_thread+0x10/0x10 [ 214.483085][T11541] ? __pfx_kthread+0x10/0x10 [ 214.487721][T11541] ? _raw_spin_unlock_irq+0x23/0x50 [ 214.493843][T11541] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.499217][T11541] ? __pfx_kthread+0x10/0x10 [ 214.503801][T11541] ret_from_fork+0x4bc/0x870 [ 214.508836][T11541] ? __pfx_ret_from_fork+0x10/0x10 [ 214.513964][T11541] ? __switch_to_asm+0x39/0x70 [ 214.518722][T11541] ? __switch_to_asm+0x33/0x70 [ 214.523474][T11541] ? __pfx_kthread+0x10/0x10 [ 214.528148][T11541] ret_from_fork_asm+0x1a/0x30 [ 214.533168][T11541] [ 214.536488][T11541] Kernel Offset: disabled [ 214.540887][T11541] Rebooting in 86400 seconds..