[ 36.301450][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.343563][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.382023][ T142] bond0 (unregistering): Released all slaves [ 36.507845][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 36.646832][ T142] hsr_slave_0: left promiscuous mode [ 36.647949][ T142] hsr_slave_1: left promiscuous mode [ 36.648174][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.648185][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.649322][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.649331][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.656514][ T142] veth1_macvtap: left promiscuous mode [ 36.656555][ T142] veth0_macvtap: left promiscuous mode [ 36.656602][ T142] veth1_vlan: left promiscuous mode [ 36.656634][ T142] veth0_vlan: left promiscuous mode [ 36.736171][ T142] team0 (unregistering): Port device team_slave_1 removed [ 36.739943][ T142] team0 (unregistering): Port device team_slave_0 removed [ 36.790137][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 36.920956][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.035405][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. 1970/01/01 00:00:41 parsed 1 programs [ 43.030626][ T5017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 43.822966][ T4736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.824830][ T4736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.826730][ T4736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.828388][ T4736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.831112][ T4736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.477828][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.477919][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.478216][ T5066] bridge_slave_0: entered allmulticast mode [ 44.478679][ T5066] bridge_slave_0: entered promiscuous mode [ 44.479774][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.479825][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.479873][ T5066] bridge_slave_1: entered allmulticast mode [ 44.480299][ T5066] bridge_slave_1: entered promiscuous mode [ 44.499144][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.503087][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.512518][ T5066] team0: Port device team_slave_0 added [ 44.514452][ T5066] team0: Port device team_slave_1 added [ 44.522630][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.524005][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.529083][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.530113][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.530139][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.530152][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.549319][ T5066] hsr_slave_0: entered promiscuous mode [ 44.549622][ T5066] hsr_slave_1: entered promiscuous mode [ 44.877223][ T5066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.880468][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.882547][ T5066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.885078][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.886909][ T5066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.889941][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.891884][ T5066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.894171][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.906576][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.906633][ T5066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.906715][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.906751][ T5066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.920453][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.924965][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.926707][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.933149][ T5066] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.936745][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.936788][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.941800][ T3905] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.941851][ T3905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.950221][ T5066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.950275][ T5066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.054865][ T5066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.075387][ T5066] veth0_vlan: entered promiscuous mode [ 45.077034][ T5066] veth1_vlan: entered promiscuous mode [ 45.084639][ T5066] veth0_macvtap: entered promiscuous mode [ 45.085687][ T5066] veth1_macvtap: entered promiscuous mode [ 45.092743][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.096941][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.111486][ T3905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.111691][ T3905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.111723][ T3905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.111747][ T3905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.169619][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.240484][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.287292][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.293897][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.293932][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.303470][ T3826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.303507][ T3826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.326400][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:45 executed programs: 0 [ 45.447780][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.448567][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.448809][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.449752][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.449985][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.629761][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.629843][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.629913][ T5206] bridge_slave_0: entered allmulticast mode [ 45.630341][ T5206] bridge_slave_0: entered promiscuous mode [ 45.633040][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.633147][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.633280][ T5206] bridge_slave_1: entered allmulticast mode [ 45.634541][ T5206] bridge_slave_1: entered promiscuous mode [ 45.645692][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.646591][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.655412][ T5206] team0: Port device team_slave_0 added [ 45.656142][ T5206] team0: Port device team_slave_1 added [ 45.662920][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.662946][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.662966][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.663471][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.663478][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.663491][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.685868][ T5206] hsr_slave_0: entered promiscuous mode [ 45.687376][ T5206] hsr_slave_1: entered promiscuous mode [ 45.687591][ T5206] debugfs: 'hsr0' already exists in 'hsr' [ 45.687608][ T5206] Cannot create hsr debugfs directory [ 47.531284][ T50] Bluetooth: hci0: command tx timeout [ 48.537690][ T142] bridge_slave_1: left allmulticast mode [ 48.537730][ T142] bridge_slave_1: left promiscuous mode [ 48.537816][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.544363][ T142] bridge_slave_0: left allmulticast mode [ 48.544404][ T142] bridge_slave_0: left promiscuous mode [ 48.544489][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.599505][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.604635][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.607212][ T142] bond0 (unregistering): Released all slaves [ 48.642127][ T142] hsr_slave_0: left promiscuous mode [ 48.642499][ T142] hsr_slave_1: left promiscuous mode [ 48.643041][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.643066][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.643614][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.643634][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.647438][ T142] veth1_macvtap: left promiscuous mode [ 48.647466][ T142] veth0_macvtap: left promiscuous mode [ 48.647515][ T142] veth1_vlan: left promiscuous mode [ 48.647611][ T142] veth0_vlan: left promiscuous mode [ 48.754952][ T142] team0 (unregistering): Port device team_slave_1 removed [ 48.760058][ T142] team0 (unregistering): Port device team_slave_0 removed [ 48.808842][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 48.936219][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 49.140373][ T5206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.145938][ T5206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.146328][ T5206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.148286][ T5206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.149826][ T5206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.155329][ T5206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.155742][ T5206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.161999][ T5206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.254905][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.258417][ T5206] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.263728][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.263777][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.269466][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.269512][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.520086][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.531146][ T5206] veth0_vlan: entered promiscuous mode [ 49.534519][ T5206] veth1_vlan: entered promiscuous mode [ 49.540536][ T5206] veth0_macvtap: entered promiscuous mode [ 49.541965][ T5206] veth1_macvtap: entered promiscuous mode [ 49.545266][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.547490][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.562947][ T3905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.564789][ T3905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.577692][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.579515][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.590359][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.592324][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.601572][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.603346][ T3905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.611454][ T50] Bluetooth: hci0: command tx timeout [ 49.623860][ T5333] ------------[ cut here ]------------ [ 49.623875][ T5333] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0xd0/0x320, CPU#0: syz.0.15/5333 [ 49.626788][ T5333] Modules linked in: [ 49.627543][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT [ 49.629115][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.630961][ T5333] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 49.632462][ T5333] pc : __alloc_frozen_pages_noprof+0xd0/0x320 [ 49.633590][ T5333] lr : __alloc_frozen_pages_noprof+0xac/0x320 [ 49.634684][ T5333] sp : ffff800092fa75a0 [ 49.635436][ T5333] x29: ffff800092fa7670 x28: ffff7000125f4f18 x27: ffff0000cf300e00 [ 49.637135][ T5333] x26: 1ffff00011d0ed20 x25: dfff800000000000 x24: ffff800092fa75c0 [ 49.638801][ T5333] x23: ffff7000125f4eb8 x22: 0000000000000000 x21: 0000000000040dc0 [ 49.640436][ T5333] x20: 0000000000000000 x19: 000000000000000b x18: 00000000ffffffff [ 49.642107][ T5333] x17: ffff80008a7d6000 x16: 0000000000000002 x15: 0000000020000280 [ 49.643832][ T5333] x14: 0000000000000000 x13: 0000000000000005 x12: 0000000000000000 [ 49.645499][ T5333] x11: 0000000000000000 x10: ffff7000125f4ec1 x9 : 0000000000000001 [ 49.647215][ T5333] x8 : ffff80008a19c000 x7 : 0000000000000000 x6 : ffff0000f1fd0900 [ 49.648640][ T5333] x5 : ffff0000f1fd0900 x4 : 0000000000000000 x3 : 0000000000000020 [ 49.650136][ T5333] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff800092fa75e0 [ 49.651665][ T5333] Call trace: [ 49.652354][ T5333] __alloc_frozen_pages_noprof+0xd0/0x320 (P) [ 49.653588][ T5333] alloc_pages_mpol+0x1ec/0x3c0 [ 49.654567][ T5333] alloc_frozen_pages_noprof+0xc4/0x10c [ 49.655686][ T5333] ___kmalloc_large_node+0x70/0x154 [ 49.656709][ T5333] __kmalloc_large_node_noprof+0x2c/0x8c [ 49.657811][ T5333] __kmalloc_noprof+0x3e4/0x6b8 [ 49.658744][ T5333] drm_mode_create_lease_ioctl+0x39c/0x1498 [ 49.659910][ T5333] drm_ioctl_kernel+0x250/0x31c [ 49.660874][ T5333] drm_ioctl+0x694/0xac8 [ 49.661702][ T5333] __arm64_sys_ioctl+0x154/0x1cc [ 49.662677][ T5333] invoke_syscall+0x98/0x244 [ 49.663505][ T5333] el0_svc_common+0xec/0x23c [ 49.664338][ T5333] do_el0_svc+0x4c/0x5c [ 49.665042][ T5333] el0_svc+0x64/0x260 [ 49.665776][ T5333] el0t_64_sync_handler+0x44/0x104 [ 49.666725][ T5333] el0t_64_sync+0x198/0x19c [ 49.667541][ T5333] irq event stamp: 4096 [ 49.668295][ T5333] hardirqs last enabled at (4095): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 49.670174][ T5333] hardirqs last disabled at (4096): [] el1_brk64+0x20/0x54 [ 49.671817][ T5333] softirqs last enabled at (2396): [] handle_softirqs+0xc28/0xd98 [ 49.673574][ T5333] softirqs last disabled at (2385): [] __do_softirq+0x14/0x20 [ 49.675135][ T5333] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:00:50 executed programs: 34 [ 51.701364][ T50] Bluetooth: hci0: command tx timeout [ 53.772054][ T50] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:55 executed programs: 251