Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. 2026/10/18 17:28:55 parsed 1 programs [ 120.687593][ T5959] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 124.349749][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.350960][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.358390][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.359912][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.360574][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.380259][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.380405][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.380527][ T6030] bridge_slave_0: entered allmulticast mode [ 126.382597][ T6030] bridge_slave_0: entered promiscuous mode [ 126.385611][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.385719][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.385876][ T6030] bridge_slave_1: entered allmulticast mode [ 126.387933][ T6030] bridge_slave_1: entered promiscuous mode [ 126.441593][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.445618][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.479620][ T6030] team0: Port device team_slave_0 added [ 126.482671][ T6030] team0: Port device team_slave_1 added [ 126.512813][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.512829][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.512856][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.514394][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.514410][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.514435][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.614774][ T6030] hsr_slave_0: entered promiscuous mode [ 126.615666][ T6030] hsr_slave_1: entered promiscuous mode [ 127.163698][ T6030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.167901][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.169043][ T6030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.181068][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.182039][ T6030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.189850][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.192256][ T6030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.207591][ T6030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.244529][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.244651][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.244928][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.245064][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.282978][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.284578][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.327056][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.346660][ T6030] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.354873][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.354984][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.365806][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.365912][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.916133][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.975799][ T6030] veth0_vlan: entered promiscuous mode [ 127.984360][ T6030] veth1_vlan: entered promiscuous mode [ 128.021176][ T6030] veth0_macvtap: entered promiscuous mode [ 128.027726][ T6030] veth1_macvtap: entered promiscuous mode [ 128.047076][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.061147][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.082972][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.083210][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.083252][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.083292][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.268707][ T149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.384986][ T149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.443711][ T149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.464586][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.464606][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.509943][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.509965][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.423509][ T149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/18 17:29:10 executed programs: 0 [ 129.652729][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.654254][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.654716][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.656607][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.657446][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.578467][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.578584][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.578715][ T6149] bridge_slave_0: entered allmulticast mode [ 130.580655][ T6149] bridge_slave_0: entered promiscuous mode [ 130.587223][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.587332][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.587484][ T6149] bridge_slave_1: entered allmulticast mode [ 130.591221][ T6149] bridge_slave_1: entered promiscuous mode [ 130.665162][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.669902][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.719356][ T6149] team0: Port device team_slave_0 added [ 130.731513][ T6149] team0: Port device team_slave_1 added [ 130.806702][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.806721][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.806752][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.810793][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.810809][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.810839][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.960342][ T149] bridge_slave_1: left allmulticast mode [ 130.960369][ T149] bridge_slave_1: left promiscuous mode [ 130.960574][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.966601][ T149] bridge_slave_0: left allmulticast mode [ 130.966623][ T149] bridge_slave_0: left promiscuous mode [ 130.966816][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.122831][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.125880][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.127481][ T149] bond0 (unregistering): Released all slaves [ 131.176744][ T6149] hsr_slave_0: entered promiscuous mode [ 131.177895][ T6149] hsr_slave_1: entered promiscuous mode [ 131.179392][ T6149] debugfs: 'hsr0' already exists in 'hsr' [ 131.179436][ T6149] Cannot create hsr debugfs directory [ 131.216040][ T149] hsr_slave_0: left promiscuous mode [ 131.216687][ T149] hsr_slave_1: left promiscuous mode [ 131.217446][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.217468][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.218128][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.218144][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.240166][ T149] veth1_macvtap: left promiscuous mode [ 131.240201][ T149] veth0_macvtap: left promiscuous mode [ 131.240307][ T149] veth1_vlan: left promiscuous mode [ 131.240395][ T149] veth0_vlan: left promiscuous mode [ 131.466410][ T149] team0 (unregistering): Port device team_slave_1 removed [ 131.479872][ T149] team0 (unregistering): Port device team_slave_0 removed [ 131.683060][ T4928] Bluetooth: hci0: command tx timeout [ 132.095323][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.095402][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.442274][ T6149] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.457011][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.491972][ T6149] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.497684][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.498832][ T6149] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.504023][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.505213][ T6149] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.515646][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.674229][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.699161][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.719461][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.719568][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.741383][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.741514][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.295558][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.349601][ T6149] veth0_vlan: entered promiscuous mode [ 133.358042][ T6149] veth1_vlan: entered promiscuous mode [ 133.393061][ T6149] veth0_macvtap: entered promiscuous mode [ 133.398169][ T6149] veth1_macvtap: entered promiscuous mode [ 133.415517][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.430794][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.473505][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.473874][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.474213][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.474293][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.559633][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.559657][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.601504][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.601523][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.667343][ T6254] loop0: detected capacity change from 0 to 8 [ 133.761963][ T4928] Bluetooth: hci0: command tx timeout [ 134.501468][ T30] audit: type=1800 audit(1792344555.130:2): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.16" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 135.841778][ T4928] Bluetooth: hci0: command tx timeout [ 137.922320][ T4928] Bluetooth: hci0: command tx timeout [ 149.629012][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.630635][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.631123][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.640145][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.648039][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.184621][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.184708][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.184802][ T6289] bridge_slave_0: entered allmulticast mode [ 150.186399][ T6289] bridge_slave_0: entered promiscuous mode [ 150.189375][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.189491][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.189612][ T6289] bridge_slave_1: entered allmulticast mode [ 150.191792][ T6289] bridge_slave_1: entered promiscuous mode [ 150.253261][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.256374][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.296062][ T6289] team0: Port device team_slave_0 added [ 150.298606][ T6289] team0: Port device team_slave_1 added [ 150.328060][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.328077][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.328103][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.330114][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.330129][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.330155][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.426299][ T6289] hsr_slave_0: entered promiscuous mode [ 150.427095][ T6289] hsr_slave_1: entered promiscuous mode [ 150.589204][ T6289] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.592782][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.593916][ T6289] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.602756][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.604089][ T6289] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.609610][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.610727][ T6289] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.616441][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.655258][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.655351][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.655566][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.655661][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.715428][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.728938][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.730595][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.731165][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.762611][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.762704][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.768752][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.768868][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.155004][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.190927][ T6289] veth0_vlan: entered promiscuous mode [ 151.201327][ T6289] veth1_vlan: entered promiscuous mode [ 151.228613][ T6289] veth0_macvtap: entered promiscuous mode [ 151.234244][ T6289] veth1_macvtap: entered promiscuous mode [ 151.250440][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.263536][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.330164][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.330184][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.331856][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.331901][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.331941][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/18 17:29:32 executed programs: 4 [ 151.331986][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.375443][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.375463][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.435954][ T6325] loop1: detected capacity change from 0 to 8 [ 151.681873][ T4928] Bluetooth: hci1: command tx timeout [ 152.267254][ T30] audit: type=1800 audit(1792344572.900:3): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 153.771723][ T4928] Bluetooth: hci1: command tx timeout [ 155.841741][ T4928] Bluetooth: hci1: command tx timeout [ 157.931736][ T4928] Bluetooth: hci1: command tx timeout [ 167.378663][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.379676][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.380516][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.381549][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.392740][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.957782][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.957870][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.958261][ T6327] bridge_slave_0: entered allmulticast mode [ 167.961329][ T6327] bridge_slave_0: entered promiscuous mode [ 167.964434][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.964597][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.965268][ T6327] bridge_slave_1: entered allmulticast mode [ 167.967277][ T6327] bridge_slave_1: entered promiscuous mode [ 168.018993][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.022583][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.058751][ T6327] team0: Port device team_slave_0 added [ 168.061078][ T6327] team0: Port device team_slave_1 added [ 168.094199][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.094218][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.094266][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.096344][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.096359][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.096389][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.197125][ T6327] hsr_slave_0: entered promiscuous mode [ 168.197932][ T6327] hsr_slave_1: entered promiscuous mode [ 168.198508][ T6327] debugfs: 'hsr0' already exists in 'hsr' [ 168.198529][ T6327] Cannot create hsr debugfs directory [ 168.367588][ T6327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.371018][ T6327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.372318][ T6327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.381382][ T6327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.384619][ T6327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.396276][ T6327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.397718][ T6327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.405613][ T6327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.432642][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.432759][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.432968][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.433067][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.493584][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.509747][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.510363][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.533556][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.539623][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.539716][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.558903][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.559007][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.940420][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.980323][ T6327] veth0_vlan: entered promiscuous mode [ 168.989450][ T6327] veth1_vlan: entered promiscuous mode [ 169.016713][ T6327] veth0_macvtap: entered promiscuous mode [ 169.020349][ T6327] veth1_macvtap: entered promiscuous mode [ 169.035350][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.042405][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.075358][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.082731][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.091828][ T1440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.091875][ T1440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.136237][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.136261][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.173539][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/10/18 17:29:49 executed programs: 6 [ 169.173561][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.235807][ T6363] loop2: detected capacity change from 0 to 8 [ 169.442293][ T4928] Bluetooth: hci2: command tx timeout [ 170.067055][ T30] audit: type=1800 audit(1792344590.700:4): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.20" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 171.521774][ T4928] Bluetooth: hci2: command tx timeout [ 173.601758][ T4928] Bluetooth: hci2: command tx timeout [ 175.681747][ T4928] Bluetooth: hci2: command tx timeout [ 185.183969][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.185520][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.186591][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.187763][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.188424][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.776350][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.776495][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.776612][ T6371] bridge_slave_0: entered allmulticast mode [ 185.778061][ T6371] bridge_slave_0: entered promiscuous mode [ 185.784166][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.784276][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.784402][ T6371] bridge_slave_1: entered allmulticast mode [ 185.787306][ T6371] bridge_slave_1: entered promiscuous mode [ 185.842494][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.845180][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.886276][ T6371] team0: Port device team_slave_0 added [ 185.888822][ T6371] team0: Port device team_slave_1 added [ 185.924466][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.924483][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.924514][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.926363][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.926378][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.926400][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.027835][ T6371] hsr_slave_0: entered promiscuous mode [ 186.028633][ T6371] hsr_slave_1: entered promiscuous mode [ 186.029198][ T6371] debugfs: 'hsr0' already exists in 'hsr' [ 186.029218][ T6371] Cannot create hsr debugfs directory [ 186.194965][ T6371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.198683][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.199910][ T6371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.203310][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.204557][ T6371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.211476][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.213761][ T6371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.219204][ T6371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.257336][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.257456][ T6371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.257753][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.257877][ T6371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.318612][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.336862][ T1440] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.337452][ T1440] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.359673][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.374030][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.374115][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.382447][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.382542][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.770284][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.815423][ T6371] veth0_vlan: entered promiscuous mode [ 186.821394][ T6371] veth1_vlan: entered promiscuous mode [ 186.853252][ T6371] veth0_macvtap: entered promiscuous mode [ 186.857119][ T6371] veth1_macvtap: entered promiscuous mode [ 186.870437][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.875593][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.901768][ T1440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.901816][ T1440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.901857][ T1440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.901897][ T1440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.973439][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.973459][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/18 17:30:07 executed programs: 8 [ 187.012983][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.013004][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.075067][ T6409] loop3: detected capacity change from 0 to 8 [ 187.201863][ T4928] Bluetooth: hci3: command tx timeout [ 187.905005][ T30] audit: type=1800 audit(1792344608.540:5): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.22" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 189.281765][ T4928] Bluetooth: hci3: command tx timeout [ 191.371925][ T4928] Bluetooth: hci3: command tx timeout [ 193.441840][ T4928] Bluetooth: hci3: command tx timeout [ 193.523869][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.523932][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.040409][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.041452][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.045301][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.055968][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.056802][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.615220][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.615345][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.615448][ T6411] bridge_slave_0: entered allmulticast mode [ 203.616996][ T6411] bridge_slave_0: entered promiscuous mode [ 203.619937][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.620116][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.620527][ T6411] bridge_slave_1: entered allmulticast mode [ 203.623349][ T6411] bridge_slave_1: entered promiscuous mode [ 203.675030][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.678044][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.719265][ T6411] team0: Port device team_slave_0 added [ 203.727622][ T6411] team0: Port device team_slave_1 added [ 203.756762][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.756780][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.756805][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.758364][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.758379][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.758406][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.879413][ T6411] hsr_slave_0: entered promiscuous mode [ 203.880508][ T6411] hsr_slave_1: entered promiscuous mode [ 203.881434][ T6411] debugfs: 'hsr0' already exists in 'hsr' [ 203.881454][ T6411] Cannot create hsr debugfs directory [ 204.128970][ T6411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.140140][ T6411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.141189][ T6411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.158887][ T6411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.159831][ T6411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.179291][ T6411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.180123][ T6411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.194150][ T6411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.217050][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.217140][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.217343][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.217436][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.277070][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.294512][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.295113][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.308437][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.317756][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.317860][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.326386][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.326500][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.716590][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.952915][ T6411] veth0_vlan: entered promiscuous mode [ 204.958931][ T6411] veth1_vlan: entered promiscuous mode [ 204.985820][ T6411] veth0_macvtap: entered promiscuous mode [ 204.989482][ T6411] veth1_macvtap: entered promiscuous mode [ 205.007731][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.021213][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.093776][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.093796][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.122301][ T52] Bluetooth: hci4: command tx timeout [ 205.130766][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.130786][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/18 17:30:25 executed programs: 10 [ 205.162164][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.162211][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.162252][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.162294][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.216618][ T6453] loop4: detected capacity change from 0 to 8 [ 206.044448][ T30] audit: type=1800 audit(1792344626.680:6): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 207.201854][ T52] Bluetooth: hci4: command tx timeout [ 209.292693][ T52] Bluetooth: hci4: command tx timeout [ 211.361747][ T52] Bluetooth: hci4: command tx timeout [ 221.212275][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.213953][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.214434][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.216862][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.217550][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.793950][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.794109][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.794459][ T6455] bridge_slave_0: entered allmulticast mode [ 221.795979][ T6455] bridge_slave_0: entered promiscuous mode [ 221.799023][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.799214][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.799342][ T6455] bridge_slave_1: entered allmulticast mode [ 221.801278][ T6455] bridge_slave_1: entered promiscuous mode [ 221.857885][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.860575][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.896747][ T6455] team0: Port device team_slave_0 added [ 221.899111][ T6455] team0: Port device team_slave_1 added [ 221.934724][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.934745][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.934769][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.936458][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.936474][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.936500][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.038326][ T6455] hsr_slave_0: entered promiscuous mode [ 222.039415][ T6455] hsr_slave_1: entered promiscuous mode [ 222.040018][ T6455] debugfs: 'hsr0' already exists in 'hsr' [ 222.040039][ T6455] Cannot create hsr debugfs directory [ 222.214405][ T6455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.218074][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.218894][ T6455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.226356][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.227486][ T6455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.233836][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.235043][ T6455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.238847][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.276342][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.276465][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.276740][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.276871][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.350465][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.363800][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.364498][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.374349][ T6455] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.388533][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.388637][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.396976][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.397088][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.808242][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.043755][ T6455] veth0_vlan: entered promiscuous mode [ 223.050338][ T6455] veth1_vlan: entered promiscuous mode [ 223.084965][ T6455] veth0_macvtap: entered promiscuous mode [ 223.088560][ T6455] veth1_macvtap: entered promiscuous mode [ 223.112897][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.120106][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.152016][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.152063][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.216420][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.216441][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.246034][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/18 17:30:43 executed programs: 12 [ 223.266235][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.266256][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.272681][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.296023][ T4928] Bluetooth: hci5: command tx timeout [ 223.339646][ T6497] loop5: detected capacity change from 0 to 8 [ 224.171430][ T30] audit: type=1800 audit(1792344644.800:7): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.26" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 225.361812][ T4928] Bluetooth: hci5: command tx timeout [ 227.444262][ T4928] Bluetooth: hci5: command tx timeout [ 229.521767][ T4928] Bluetooth: hci5: command tx timeout [ 239.366366][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.368438][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.368903][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.370058][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.370883][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.981136][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.981222][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.981799][ T6499] bridge_slave_0: entered allmulticast mode [ 239.984276][ T6499] bridge_slave_0: entered promiscuous mode [ 239.987373][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.987483][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.987615][ T6499] bridge_slave_1: entered allmulticast mode [ 239.989605][ T6499] bridge_slave_1: entered promiscuous mode [ 240.052864][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.055659][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.097303][ T6499] team0: Port device team_slave_0 added [ 240.099661][ T6499] team0: Port device team_slave_1 added [ 240.133348][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.133368][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.133391][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.134907][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.134923][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.134948][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.237584][ T6499] hsr_slave_0: entered promiscuous mode [ 240.238424][ T6499] hsr_slave_1: entered promiscuous mode [ 240.239022][ T6499] debugfs: 'hsr0' already exists in 'hsr' [ 240.239043][ T6499] Cannot create hsr debugfs directory [ 240.418666][ T6499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 240.421975][ T6499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.422942][ T6499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 240.432681][ T6499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.453460][ T6499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 240.456042][ T6499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.456940][ T6499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 240.460333][ T6499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.490250][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.490341][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.490547][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.490639][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.555174][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.573482][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.574018][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.582514][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.607105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.607184][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.608146][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.608240][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.035324][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.269135][ T6499] veth0_vlan: entered promiscuous mode [ 241.281327][ T6499] veth1_vlan: entered promiscuous mode [ 241.309911][ T6499] veth0_macvtap: entered promiscuous mode [ 241.314330][ T6499] veth1_macvtap: entered promiscuous mode [ 241.330330][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.340768][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.352743][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.352891][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.352933][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.394509][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.435770][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.435795][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.442899][ T52] Bluetooth: hci6: command tx timeout 2026/10/18 17:31:02 executed programs: 14 [ 241.479050][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.479073][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.547599][ T6545] loop6: detected capacity change from 0 to 8 [ 242.379467][ T30] audit: type=1800 audit(1792344663.010:8): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.28" name="file2" dev="loop6" ino=6 res=0 errno=0 [ 243.521874][ T52] Bluetooth: hci6: command tx timeout [ 245.602441][ T52] Bluetooth: hci6: command tx timeout [ 247.681782][ T52] Bluetooth: hci6: command tx timeout [ 251.924106][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 254.963193][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.963257][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.499120][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.501095][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.501970][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.503233][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.504115][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.083739][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.083913][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.084049][ T6550] bridge_slave_0: entered allmulticast mode [ 258.085992][ T6550] bridge_slave_0: entered promiscuous mode [ 258.088958][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.089138][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.089281][ T6550] bridge_slave_1: entered allmulticast mode [ 258.091212][ T6550] bridge_slave_1: entered promiscuous mode [ 258.142868][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.145820][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.189092][ T6550] team0: Port device team_slave_0 added [ 258.191954][ T6550] team0: Port device team_slave_1 added [ 258.224347][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.224364][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.224393][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.226638][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.226653][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.226681][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.329809][ T6550] hsr_slave_0: entered promiscuous mode [ 258.330869][ T6550] hsr_slave_1: entered promiscuous mode [ 258.331447][ T6550] debugfs: 'hsr0' already exists in 'hsr' [ 258.331468][ T6550] Cannot create hsr debugfs directory [ 258.507842][ T6550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.511459][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.512987][ T6550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.522781][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.534913][ T6550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 258.547662][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.549000][ T6550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.551560][ T6550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.588121][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.588211][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.588417][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.588509][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.657800][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.670608][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.671229][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.692673][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.698496][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.698598][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.715792][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.715893][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.119088][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.350494][ T6550] veth0_vlan: entered promiscuous mode [ 259.369861][ T6550] veth1_vlan: entered promiscuous mode [ 259.399783][ T6550] veth0_macvtap: entered promiscuous mode [ 259.405363][ T6550] veth1_macvtap: entered promiscuous mode [ 259.425444][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.440003][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.483300][ T149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.483352][ T149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.483392][ T149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.483432][ T149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.524255][ T52] Bluetooth: hci7: command tx timeout [ 259.539858][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.539880][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.578255][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.578279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/18 17:31:20 executed programs: 16 [ 259.650403][ T6593] loop7: detected capacity change from 0 to 8 [ 260.481346][ T30] audit: type=1800 audit(1792344681.110:9): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.30" name="file2" dev="loop7" ino=6 res=0 errno=0 [ 261.602066][ T52] Bluetooth: hci7: command tx timeout [ 263.682386][ T52] Bluetooth: hci7: command tx timeout [ 265.762106][ T52] Bluetooth: hci7: command tx timeout [ 272.401701][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 275.605471][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 275.606869][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 275.607363][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 275.608305][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 275.608990][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 276.215199][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.215356][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.215464][ T6596] bridge_slave_0: entered allmulticast mode [ 276.217006][ T6596] bridge_slave_0: entered promiscuous mode [ 276.220164][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.220272][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.220407][ T6596] bridge_slave_1: entered allmulticast mode [ 276.224060][ T6596] bridge_slave_1: entered promiscuous mode [ 276.282209][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.284910][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.328908][ T6596] team0: Port device team_slave_0 added [ 276.332357][ T6596] team0: Port device team_slave_1 added [ 276.364375][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.364393][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.364420][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.365936][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.365965][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.365987][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.467971][ T6596] hsr_slave_0: entered promiscuous mode [ 276.468781][ T6596] hsr_slave_1: entered promiscuous mode [ 276.469360][ T6596] debugfs: 'hsr0' already exists in 'hsr' [ 276.469380][ T6596] Cannot create hsr debugfs directory [ 276.645515][ T6596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 276.649531][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.650403][ T6596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 276.656574][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.657749][ T6596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 276.663401][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.664538][ T6596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 276.668810][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.709267][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.709425][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.709704][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.709830][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.775078][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.790491][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.791115][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.814296][ T6596] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.821915][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.822020][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.829936][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.830038][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.238808][ T6596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.476385][ T6596] veth0_vlan: entered promiscuous mode [ 277.485905][ T6596] veth1_vlan: entered promiscuous mode [ 277.511070][ T6596] veth0_macvtap: entered promiscuous mode [ 277.519509][ T6596] veth1_macvtap: entered promiscuous mode [ 277.537146][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.554228][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.611882][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.611929][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.611970][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.612010][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.654329][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.654350][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.681932][ T52] Bluetooth: hci8: command tx timeout [ 277.698712][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/10/18 17:31:38 executed programs: 18 [ 277.698733][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.767473][ T6639] loop8: detected capacity change from 0 to 8 [ 278.595008][ T30] audit: type=1800 audit(1792344699.230:10): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.32" name="file2" dev="loop8" ino=6 res=0 errno=0 [ 279.761811][ T52] Bluetooth: hci8: command tx timeout [ 281.853461][ T52] Bluetooth: hci8: command tx timeout [ 283.921756][ T52] Bluetooth: hci8: command tx timeout [ 286.323986][ T33] INFO: task syz-executor:6149 blocked in I/O wait for more than 143 second ** replaying previous printk message ** [ 286.323986][ T33] INFO: task syz-executor:6149 blocked in I/O wait for more than 143 seconds. [ 286.324017][ T33] Not tainted syzkaller #0 [ 286.324031][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.324050][ T33] task:syz-executor state:D stack:22536 pid:6149 tgid:6149 ppid:1 task_flags:0x400140 flags:0x00080002 [ 286.324119][ T33] Call Trace: [ 286.324128][ T33] [ 286.324144][ T33] __schedule+0x17db/0x58f0 [ 286.324211][ T33] ? __pfx___schedule+0x10/0x10 [ 286.324250][ T33] ? schedule+0x90/0x2b0 [ 286.324283][ T33] schedule+0x164/0x2b0 [ 286.324314][ T33] io_schedule+0x7f/0xd0 [ 286.324345][ T33] folio_wait_bit_common+0x836/0xbc0 [ 286.324383][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.324433][ T33] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 286.324469][ T33] ? filemap_get_entry+0x374/0x3f0 [ 286.324509][ T33] ? __pfx_wake_page_function+0x10/0x10 [ 286.324551][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.324591][ T33] ? __filemap_get_folio_mpol+0x84/0x1000 [ 286.324633][ T33] __filemap_get_folio_mpol+0x140/0x1000 [ 286.324673][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.324713][ T33] truncate_inode_pages_range+0x46d/0xd80 [ 286.324757][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.324786][ T33] ? stack_depot_save_flags+0x404/0x7f0 [ 286.324827][ T33] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 286.324926][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.324968][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.325026][ T33] evict+0x638/0xb50 [ 286.325062][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.325104][ T33] ? __pfx_evict+0x10/0x10 [ 286.325139][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.325174][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.325214][ T33] evict_inodes+0x84e/0x8d0 [ 286.325254][ T33] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 286.327159][ T33] ? __pfx_evict_inodes+0x10/0x10 [ 286.327212][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.327243][ T33] ? sync_filesystem+0x10e/0x240 [ 286.327277][ T33] generic_shutdown_super+0xaa/0x2d0 [ 286.327322][ T33] kill_block_super+0x44/0xa0 [ 286.327354][ T33] deactivate_locked_super+0xbe/0x110 [ 286.327397][ T33] cleanup_mnt+0x204/0x2a0 [ 286.327433][ T33] task_work_run+0x1d9/0x270 [ 286.327469][ T33] ? __pfx_task_work_run+0x10/0x10 [ 286.327510][ T33] exit_to_user_mode_loop+0x204/0x770 [ 286.327541][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.327571][ T33] ? rcu_is_watching+0x16/0xb0 [ 286.327611][ T33] do_syscall_64+0x328/0x520 [ 286.327643][ T33] ? trace_irq_disable+0x3b/0x140 [ 286.327673][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.327707][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.327734][ T33] RIP: 0033:0x7f0fe8b9a317 [ 286.327758][ T33] RSP: 002b:00007fffedfaab18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 286.327785][ T33] RAX: 0000000000000000 RBX: 00007f0fe8c2ae5b RCX: 00007f0fe8b9a317 [ 286.327803][ T33] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffedfaabd0 [ 286.327820][ T33] RBP: 00007fffedfaabd0 R08: 00007fffedfabbd0 R09: 00000000ffffffff [ 286.327839][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffedfabc60 [ 286.327856][ T33] R13: 00007f0fe8c2ae5b R14: 0000000000020d59 R15: 00007fffedfabca0 [ 286.327896][ T33] [ 286.327960][ T33] [ 286.327960][ T33] Showing all locks held in the system: [ 286.327973][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 286.327992][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.328069][ T33] locks held by kworker/u8:3/50: 3, last CPU#0: [ 286.328087][ T33] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.328162][ T33] #1: ffffc90000bb7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.328237][ T33] #2: ffff88807ece0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 286.328316][ T33] locks held by kworker/u8:4/59: 3, last CPU#1: [ 286.328335][ T33] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.328409][ T33] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 286.328484][ T33] #2: ffff88807bc30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 286.328567][ T33] locks held by kworker/u8:8/1440: 5, last CPU#0: [ 286.328586][ T33] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 286.331208][ T33] #1: ffff8880b8424408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 286.331278][ T33] #2: ffff88807f330800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 286.331354][ T33] #3: ffff8880b8426118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x4b2/0xed0 [ 286.331419][ T33] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 286.331504][ T33] locks held by getty/5363: 2, on CPU#1: [ 286.331522][ T33] #0: ffff888033c500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.331696][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 286.331779][ T33] locks held by syz-executor/6149: 1, on CPU#0: [ 286.331798][ T33] #0: ffff88807bb9a0e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.331882][ T33] locks held by syz-executor/6289: 1, on CPU#0: [ 286.331900][ T33] #0: ffff888021ac00e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.331985][ T33] locks held by syz-executor/6327: 1, on CPU#1: [ 286.333525][ T33] #0: ffff888036ae20e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.333613][ T33] locks held by syz-executor/6371: 1, on CPU#1: [ 286.333631][ T33] #0: ffff8880223260e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.333715][ T33] locks held by syz-executor/6411: 1, on CPU#1: [ 286.333733][ T33] #0: ffff88806a7380e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.333817][ T33] locks held by syz-executor/6455: 1, on CPU#1: [ 286.333834][ T33] #0: ffff88805c9c00e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.333919][ T33] locks held by syz-executor/6499: 1, on CPU#1: [ 286.333936][ T33] #0: ffff88807ca140e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.334020][ T33] locks held by syz-executor/6550: 1, on CPU#1: [ 286.334042][ T33] #0: ffff888057b8e0e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.334127][ T33] locks held by syz-executor/6596: 1, on CPU#1: [ 286.334145][ T33] #0: ffff88805af600e8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 286.334230][ T33] [ 286.334236][ T33] ============================================= [ 286.334236][ T33] [ 286.334247][ T33] NMI backtrace for cpu 1 [ 286.334262][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.334288][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.334302][ T33] Call Trace: [ 286.334312][ T33] [ 286.334322][ T33] dump_stack_lvl+0xe8/0x150 [ 286.334360][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 286.334400][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.334443][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 286.334487][ T33] sys_info+0x135/0x170 [ 286.334521][ T33] watchdog+0xfd7/0x1030 [ 286.334559][ T33] ? watchdog+0x1c7/0x1030 [ 286.334595][ T33] kthread+0x38b/0x480 [ 286.334622][ T33] ? __pfx_watchdog+0x10/0x10 [ 286.334648][ T33] ? __pfx_kthread+0x10/0x10 [ 286.334675][ T33] ret_from_fork+0x514/0xb70 [ 286.334704][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 286.334728][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.334757][ T33] ? __switch_to+0xc89/0x1420 [ 286.334796][ T33] ? __pfx_kthread+0x10/0x10 [ 286.334825][ T33] ret_from_fork_asm+0x1a/0x30 [ 286.334867][ T33] [ 286.334877][ T33] Sending NMI from CPU 1 to CPUs 0: [ 286.334904][ C0] NMI backtrace for cpu 0 [ 286.334917][ C0] CPU: 0 UID: 0 PID: 32 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 286.334941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.334954][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 286.334993][ C0] Code: e8 8e 65 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 42 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 45 95 9b fb cc 44 89 f9 80 e1 07 [ 286.335012][ C0] RSP: 0018:ffffc90000a878b8 EFLAGS: 00000002 [ 286.335031][ C0] RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 [ 286.335047][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 286.335061][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 286.335076][ C0] R10: dffffc0000000000 R11: ffffffff8574ab40 R12: dffffc0000000000 [ 286.335093][ C0] R13: 0000000000000000 R14: ffffffff9bd4bea0 R15: 0000000000000000 [ 286.335111][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 286.335130][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.335145][ C0] CR2: 000055d341ecfa38 CR3: 0000000072eee000 CR4: 0000000000350ef0 [ 286.335164][ C0] Call Trace: [ 286.335172][ C0] [ 286.335182][ C0] wait_for_lsr+0x184/0x2f0 [ 286.335219][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 286.335251][ C0] serial8250_console_write+0xa7e/0x1200 [ 286.335292][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 286.335326][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.335353][ C0] ? rcu_is_watching+0x16/0xb0 [ 286.335388][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.335424][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 286.335463][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 286.335495][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.335522][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 286.335565][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.335592][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 286.335618][ C0] nbcon_kthread_func+0x679/0x880 [ 286.335649][ C0] ? nbcon_kthread_func+0x163/0x880 [ 286.335675][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 286.335702][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.335733][ C0] ? __kthread_parkme+0x71/0x1f0 [ 286.335768][ C0] ? __kthread_parkme+0x199/0x1f0 [ 286.335807][ C0] kthread+0x38b/0x480 [ 286.335830][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 286.335855][ C0] ? __pfx_kthread+0x10/0x10 [ 286.335878][ C0] ret_from_fork+0x514/0xb70 [ 286.335902][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 286.335924][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.335951][ C0] ? __switch_to+0xc89/0x1420 [ 286.335985][ C0] ? __pfx_kthread+0x10/0x10 [ 286.336009][ C0] ret_from_fork_asm+0x1a/0x30 [ 286.336042][ C0] [ 286.339952][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 287.397390][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 287.406483][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 287.416519][ T33] Call Trace: [ 287.419803][ T33] [ 287.422736][ T33] vpanic+0x56d/0xa60 [ 287.426733][ T33] ? __pfx___schedule+0x10/0x10 [ 287.431568][ T33] ? __pfx_vpanic+0x10/0x10 [ 287.436090][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.441726][ T33] panic+0xc5/0xd0 [ 287.445460][ T33] ? __pfx_panic+0x10/0x10 [ 287.449871][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 287.455332][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 287.460691][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 287.466841][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 287.472990][ T33] watchdog+0x1030/0x1030 [ 287.477313][ T33] ? watchdog+0x1c7/0x1030 [ 287.481724][ T33] kthread+0x38b/0x480 [ 287.485777][ T33] ? __pfx_watchdog+0x10/0x10 [ 287.490434][ T33] ? __pfx_kthread+0x10/0x10 [ 287.495008][ T33] ret_from_fork+0x514/0xb70 [ 287.499581][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 287.504681][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.510316][ T33] ? __switch_to+0xc89/0x1420 [ 287.514989][ T33] ? __pfx_kthread+0x10/0x10 [ 287.519563][ T33] ret_from_fork_asm+0x1a/0x30 [ 287.524323][ T33] [ 287.527558][ T33] Kernel Offset: disabled [ 287.531866][ T33] Rebooting in 86400 seconds..