Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. 2026/01/11 15:19:58 parsed 1 programs [ 117.771233][ T6144] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.926308][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.942986][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.951274][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.964555][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.977749][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.480687][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 121.556844][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.564272][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.571466][ T6180] bridge_slave_0: entered allmulticast mode [ 121.578816][ T6180] bridge_slave_0: entered promiscuous mode [ 121.589891][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.597179][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.604626][ T6180] bridge_slave_1: entered allmulticast mode [ 121.611491][ T6180] bridge_slave_1: entered promiscuous mode [ 121.642915][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.655529][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.688604][ T6180] team0: Port device team_slave_0 added [ 121.696633][ T6180] team0: Port device team_slave_1 added [ 121.719649][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.727015][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.755085][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.767494][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.775186][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.801480][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.839653][ T6180] hsr_slave_0: entered promiscuous mode [ 121.846068][ T6180] hsr_slave_1: entered promiscuous mode [ 122.288221][ T6180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.299882][ T6180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.310892][ T6180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.323835][ T6180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.431335][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.459041][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.474292][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.481450][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.503042][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.510213][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.767843][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.824057][ T6180] veth0_vlan: entered promiscuous mode [ 122.836304][ T6180] veth1_vlan: entered promiscuous mode [ 122.871015][ T6180] veth0_macvtap: entered promiscuous mode [ 122.883721][ T6180] veth1_macvtap: entered promiscuous mode [ 122.903330][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.920477][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.936477][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.954352][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.975561][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.015379][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.144714][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.229654][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.289277][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.365219][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.871102][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.887515][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.924734][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.933707][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.723687][ T12] bridge_slave_1: left allmulticast mode [ 125.734555][ T12] bridge_slave_1: left promiscuous mode [ 125.740650][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.762842][ T12] bridge_slave_0: left allmulticast mode [ 125.768538][ T12] bridge_slave_0: left promiscuous mode [ 125.793148][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/11 15:20:11 executed programs: 0 [ 125.988150][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.003288][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.011311][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.022398][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.033814][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.193992][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.207160][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.218886][ T12] bond0 (unregistering): Released all slaves [ 126.330888][ T12] hsr_slave_0: left promiscuous mode [ 126.337444][ T12] hsr_slave_1: left promiscuous mode [ 126.343971][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.351472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.360399][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.369025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.388596][ T12] veth1_macvtap: left promiscuous mode [ 126.394276][ T12] veth0_macvtap: left promiscuous mode [ 126.400581][ T12] veth1_vlan: left promiscuous mode [ 126.406979][ T12] veth0_vlan: left promiscuous mode [ 126.844260][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.886314][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.315680][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 127.534814][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.543203][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.550775][ T6343] bridge_slave_0: entered allmulticast mode [ 127.558984][ T6343] bridge_slave_0: entered promiscuous mode [ 127.575739][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.584229][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.591433][ T6343] bridge_slave_1: entered allmulticast mode [ 127.599723][ T6343] bridge_slave_1: entered promiscuous mode [ 127.646094][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.660568][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.068630][ T6343] team0: Port device team_slave_0 added [ 128.087177][ T6343] team0: Port device team_slave_1 added [ 128.101874][ T5151] Bluetooth: hci0: command tx timeout [ 128.180084][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.195656][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.232886][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.246526][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.254333][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.280977][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.420947][ T6343] hsr_slave_0: entered promiscuous mode [ 128.429630][ T6343] hsr_slave_1: entered promiscuous mode [ 129.064446][ T6343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.076688][ T6343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.088003][ T6343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.099870][ T6343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.191402][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.216634][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.229381][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.236584][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.254270][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.261470][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.500599][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.571371][ T6343] veth0_vlan: entered promiscuous mode [ 129.585960][ T6343] veth1_vlan: entered promiscuous mode [ 129.625466][ T6343] veth0_macvtap: entered promiscuous mode [ 129.637859][ T6343] veth1_macvtap: entered promiscuous mode [ 129.661551][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.678664][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.696554][ T1325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.721357][ T1325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.732818][ T1325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.748464][ T1325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.799876][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.808810][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.831281][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.839714][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.181969][ T5151] Bluetooth: hci0: command tx timeout [ 130.903458][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 130.911329][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 130.932950][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 130.940773][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 2026/01/11 15:20:16 executed programs: 28 [ 130.949790][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 130.957364][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 130.981136][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 130.989721][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 130.998388][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 131.005874][ T5874] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 131.882342][ T5874] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 132.262587][ T5151] Bluetooth: hci0: command tx timeout [ 132.905795][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912338][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.342712][ T5151] Bluetooth: hci0: command tx timeout 2026/01/11 15:20:21 executed programs: 261 2026/01/11 15:20:26 executed programs: 513 [ 142.727269][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.736388][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.750946][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.765712][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.774406][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.920025][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 142.977191][ T1325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.018354][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.025769][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.033284][ T7656] bridge_slave_0: entered allmulticast mode [ 143.040276][ T7656] bridge_slave_0: entered promiscuous mode [ 143.050473][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.057799][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.065570][ T7656] bridge_slave_1: entered allmulticast mode [ 143.073223][ T7656] bridge_slave_1: entered promiscuous mode [ 143.086863][ T1325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.119413][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.132774][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.164583][ T1325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.246132][ T1325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.265976][ T7656] team0: Port device team_slave_0 added [ 143.274742][ T7656] team0: Port device team_slave_1 added [ 143.323144][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.330117][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.356663][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.371370][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.378498][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.404847][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.475093][ T7656] hsr_slave_0: entered promiscuous mode [ 143.481426][ T7656] hsr_slave_1: entered promiscuous mode [ 143.487912][ T7656] debugfs: 'hsr0' already exists in 'hsr' [ 143.493889][ T7656] Cannot create hsr debugfs directory [ 143.567542][ T1325] bridge_slave_1: left allmulticast mode [ 143.573293][ T1325] bridge_slave_1: left promiscuous mode [ 143.579018][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.589084][ T1325] bridge_slave_0: left allmulticast mode [ 143.595184][ T1325] bridge_slave_0: left promiscuous mode [ 143.600945][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.868567][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.879018][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.888981][ T1325] bond0 (unregistering): Released all slaves [ 144.132373][ T1325] hsr_slave_0: left promiscuous mode [ 144.138658][ T1325] hsr_slave_1: left promiscuous mode [ 144.145225][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.158270][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.166554][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.174504][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.194220][ T1325] veth1_macvtap: left promiscuous mode [ 144.199900][ T1325] veth0_macvtap: left promiscuous mode [ 144.206034][ T1325] veth1_vlan: left promiscuous mode [ 144.211363][ T1325] veth0_vlan: left promiscuous mode [ 144.590389][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 144.618346][ T1325] team0 (unregistering): Port device team_slave_0 removed [ 144.822573][ T5151] Bluetooth: hci1: command tx timeout [ 145.094911][ T7656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.106665][ T7656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.118000][ T7656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.139121][ T7656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.284339][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.307703][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.323583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.330686][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.350388][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.357877][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.601382][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.654194][ T7656] veth0_vlan: entered promiscuous mode [ 145.668067][ T7656] veth1_vlan: entered promiscuous mode [ 145.713401][ T7656] veth0_macvtap: entered promiscuous mode [ 145.727446][ T7656] veth1_macvtap: entered promiscuous mode [ 145.752176][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.768465][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.787123][ T3460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.804073][ T3460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.821167][ T3460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.854083][ T3460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.888058][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.900150][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.921172][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.929434][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/11 15:20:31 executed programs: 603 [ 146.691147][ T5891] hid_parser_main: 65150 callbacks suppressed [ 146.691167][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.710143][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.717748][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.726986][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.734776][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.743464][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.751446][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 146.759128][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 146.766882][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.774694][ T5891] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 146.902311][ T5151] Bluetooth: hci1: command tx timeout [ 147.501732][ T5891] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 148.982043][ T5151] Bluetooth: hci1: command tx timeout 2026/01/11 15:20:36 executed programs: 847 [ 151.061967][ T5151] Bluetooth: hci1: command tx timeout 2026/01/11 15:20:41 executed programs: 1102 [ 158.114993][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.123727][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.138202][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.157039][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.164714][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.290123][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 158.355299][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.362587][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.369789][ T8922] bridge_slave_0: entered allmulticast mode [ 158.378101][ T8922] bridge_slave_0: entered promiscuous mode [ 158.398116][ T3460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.413667][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.420869][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.428384][ T8922] bridge_slave_1: entered allmulticast mode [ 158.435720][ T8922] bridge_slave_1: entered promiscuous mode [ 158.465837][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.484627][ T3460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.500625][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.529736][ T8922] team0: Port device team_slave_0 added [ 158.537280][ T8922] team0: Port device team_slave_1 added [ 158.561485][ T3460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.586994][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.594183][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.620373][ T8922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.633692][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.640752][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.667163][ T8922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.693997][ T3460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.728902][ T8922] hsr_slave_0: entered promiscuous mode [ 158.735182][ T8922] hsr_slave_1: entered promiscuous mode [ 158.880784][ T3460] bridge_slave_1: left allmulticast mode [ 158.887342][ T3460] bridge_slave_1: left promiscuous mode [ 158.893582][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.903417][ T3460] bridge_slave_0: left allmulticast mode [ 158.909145][ T3460] bridge_slave_0: left promiscuous mode [ 158.915263][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.162433][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.173421][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.183426][ T3460] bond0 (unregistering): Released all slaves [ 159.478184][ T3460] hsr_slave_0: left promiscuous mode [ 159.485050][ T3460] hsr_slave_1: left promiscuous mode [ 159.491236][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.499903][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.508128][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.520165][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.539438][ T3460] veth1_macvtap: left promiscuous mode [ 159.545400][ T3460] veth0_macvtap: left promiscuous mode [ 159.551191][ T3460] veth1_vlan: left promiscuous mode [ 159.557831][ T3460] veth0_vlan: left promiscuous mode [ 159.890626][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 159.918796][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 160.239064][ T8922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.261874][ T53] Bluetooth: hci0: command tx timeout [ 160.267566][ T8922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.285380][ T8922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.307424][ T8922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.426049][ T8922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.460263][ T8922] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.475649][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.482855][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.499007][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.506457][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.728979][ T8922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.770644][ T8922] veth0_vlan: entered promiscuous mode [ 160.781083][ T8922] veth1_vlan: entered promiscuous mode [ 160.806256][ T8922] veth0_macvtap: entered promiscuous mode [ 160.814993][ T8922] veth1_macvtap: entered promiscuous mode [ 160.831155][ T8922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.845791][ T8922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.859156][ T1325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.869070][ T1325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.878819][ T1325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.888874][ T1325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.945668][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.958216][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.980466][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.988916][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/11 15:20:46 executed programs: 1205 [ 161.723090][ T39] hid_parser_main: 65150 callbacks suppressed [ 161.723111][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.738315][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.746267][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.754237][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.761664][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.771890][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.779439][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x3 [ 161.792002][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x1 [ 161.799577][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 161.807044][ T39] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 162.341936][ T53] Bluetooth: hci0: command tx timeout [ 162.554311][ T39] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 164.422354][ T53] Bluetooth: hci0: command tx timeout 2026/01/11 15:20:51 executed programs: 1443 [ 166.502176][ T53] Bluetooth: hci0: command tx timeout 2026/01/11 15:20:56 executed programs: 1695 [ 173.277608][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.285832][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.298175][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.313919][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.322905][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.448061][T10176] chnl_net:caif_netlink_parms(): no params data found [ 173.483702][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.542624][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.549891][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.557649][T10176] bridge_slave_0: entered allmulticast mode [ 173.565219][T10176] bridge_slave_0: entered promiscuous mode [ 173.581051][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.594478][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.601605][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.608859][T10176] bridge_slave_1: entered allmulticast mode [ 173.615805][T10176] bridge_slave_1: entered promiscuous mode [ 173.643940][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.661550][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.678772][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.708578][T10176] team0: Port device team_slave_0 added [ 173.718733][T10176] team0: Port device team_slave_1 added [ 173.745184][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.769061][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.776430][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.802784][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.814916][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.821920][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.848288][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.897119][T10176] hsr_slave_0: entered promiscuous mode [ 173.903469][T10176] hsr_slave_1: entered promiscuous mode [ 173.909606][T10176] debugfs: 'hsr0' already exists in 'hsr' [ 173.915408][T10176] Cannot create hsr debugfs directory [ 174.022894][ T60] bridge_slave_1: left allmulticast mode [ 174.029012][ T60] bridge_slave_1: left promiscuous mode [ 174.035371][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.044481][ T60] bridge_slave_0: left allmulticast mode [ 174.050126][ T60] bridge_slave_0: left promiscuous mode [ 174.056474][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.272585][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.283182][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.293038][ T60] bond0 (unregistering): Released all slaves [ 174.629572][ T60] hsr_slave_0: left promiscuous mode [ 174.637965][ T60] hsr_slave_1: left promiscuous mode [ 174.645278][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.659141][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.667904][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.676066][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.697735][ T60] veth1_macvtap: left promiscuous mode [ 174.703693][ T60] veth0_macvtap: left promiscuous mode [ 174.709372][ T60] veth1_vlan: left promiscuous mode [ 174.715525][ T60] veth0_vlan: left promiscuous mode [ 175.044478][ T60] team0 (unregistering): Port device team_slave_1 removed [ 175.071294][ T60] team0 (unregistering): Port device team_slave_0 removed [ 175.381967][ T53] Bluetooth: hci0: command tx timeout [ 175.409499][T10176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.421527][T10176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.436215][T10176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.449946][T10176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.586788][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.619479][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.641794][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.648958][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.665918][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.673306][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.904887][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.955444][T10176] veth0_vlan: entered promiscuous mode [ 175.965973][T10176] veth1_vlan: entered promiscuous mode [ 175.989919][T10176] veth0_macvtap: entered promiscuous mode [ 175.999850][T10176] veth1_macvtap: entered promiscuous mode [ 176.016872][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.030862][T10176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.043952][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.053018][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.066557][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.075778][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/11 15:21:01 executed programs: 1802 [ 176.123444][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.131652][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.157304][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.165820][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.898281][ T5903] hid_parser_main: 65150 callbacks suppressed [ 176.898301][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.915249][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.923168][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.930677][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.941323][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.949157][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.958905][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x3 [ 176.966765][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x1 [ 176.977239][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 176.987712][ T5903] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 177.461972][ T53] Bluetooth: hci0: command tx timeout [ 177.754457][ T5903] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 179.541944][ T53] Bluetooth: hci0: command tx timeout 2026/01/11 15:21:06 executed programs: 2041 [ 181.622605][ T53] Bluetooth: hci0: command tx timeout 2026/01/11 15:21:11 executed programs: 2293 [ 188.356579][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.367770][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.386151][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.400575][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.409638][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.536401][T11430] chnl_net:caif_netlink_parms(): no params data found [ 188.594859][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.635369][T11430] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.643091][T11430] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.650304][T11430] bridge_slave_0: entered allmulticast mode [ 188.657387][T11430] bridge_slave_0: entered promiscuous mode [ 188.666521][T11430] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.674108][T11430] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.681626][T11430] bridge_slave_1: entered allmulticast mode [ 188.688698][T11430] bridge_slave_1: entered promiscuous mode [ 188.713682][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.737885][T11430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.749816][T11430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.778572][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.804522][T11430] team0: Port device team_slave_0 added [ 188.813263][T11430] team0: Port device team_slave_1 added [ 188.852465][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.867238][T11430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.874799][T11430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.901488][T11430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.913406][T11430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.920358][T11430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.946313][T11430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.994471][T11430] hsr_slave_0: entered promiscuous mode [ 189.000652][T11430] hsr_slave_1: entered promiscuous mode [ 189.092741][ T60] bridge_slave_1: left allmulticast mode [ 189.098412][ T60] bridge_slave_1: left promiscuous mode [ 189.106048][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.115495][ T60] bridge_slave_0: left allmulticast mode [ 189.121156][ T60] bridge_slave_0: left promiscuous mode [ 189.127233][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.357707][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.369171][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.379061][ T60] bond0 (unregistering): Released all slaves [ 189.617576][ T60] hsr_slave_0: left promiscuous mode [ 189.624361][ T60] hsr_slave_1: left promiscuous mode [ 189.630550][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.643916][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.652984][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.660685][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.680266][ T60] veth1_macvtap: left promiscuous mode [ 189.686067][ T60] veth0_macvtap: left promiscuous mode [ 189.691799][ T60] veth1_vlan: left promiscuous mode [ 189.697557][ T60] veth0_vlan: left promiscuous mode [ 190.073056][ T60] team0 (unregistering): Port device team_slave_1 removed [ 190.098506][ T60] team0 (unregistering): Port device team_slave_0 removed [ 190.512505][ T5151] Bluetooth: hci1: command tx timeout [ 190.524248][T11430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.538158][T11430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.550445][T11430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.564267][T11430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.682001][T11430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.705565][T11430] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.718959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.726166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.745899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.753092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.939283][T11430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.976821][T11430] veth0_vlan: entered promiscuous mode [ 190.987335][T11430] veth1_vlan: entered promiscuous mode [ 191.009902][T11430] veth0_macvtap: entered promiscuous mode [ 191.019473][T11430] veth1_macvtap: entered promiscuous mode [ 191.035206][T11430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.048387][T11430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.061406][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.070805][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.081145][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.090808][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.140761][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.154164][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.175809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.184503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/11 15:21:16 executed programs: 2403 [ 191.891887][ T5898] hid_parser_main: 65150 callbacks suppressed [ 191.891909][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.905603][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.913240][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.920746][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.928871][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.936698][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.949904][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x3 [ 191.957861][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x1 [ 191.966526][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 191.974594][ T5898] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 192.582921][ T5151] Bluetooth: hci1: command tx timeout [ 192.728779][ T5898] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 194.345212][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351537][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.662382][ T5151] Bluetooth: hci1: command tx timeout 2026/01/11 15:21:21 executed programs: 2646 [ 196.751873][ T5151] Bluetooth: hci1: command tx timeout 2026/01/11 15:21:26 executed programs: 2901 [ 203.365051][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.373977][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.384180][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.393272][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.405706][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.416778][T11481] ================================================================== [ 203.424899][T11481] BUG: KASAN: use-after-free in __mutex_lock+0x801/0x1350 [ 203.432058][T11481] Read of size 8 at addr ffff8880267e80a8 by task khidpd_16c05505/11481 [ 203.440564][T11481] [ 203.442901][T11481] CPU: 0 UID: 0 PID: 11481 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) [ 203.442915][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.442927][T11481] Call Trace: [ 203.442934][T11481] [ 203.442940][T11481] dump_stack_lvl+0xe8/0x150 [ 203.442959][T11481] print_report+0xca/0x240 [ 203.442970][T11481] ? __mutex_lock+0x801/0x1350 [ 203.442982][T11481] kasan_report+0x118/0x150 [ 203.442995][T11481] ? __mutex_lock+0x801/0x1350 [ 203.443007][T11481] __mutex_lock+0x801/0x1350 [ 203.443019][T11481] ? __mutex_lock+0x5bb/0x1350 [ 203.443035][T11481] ? l2cap_unregister_user+0x6a/0x1b0 [ 203.443048][T11481] ? __pfx___mutex_lock+0x10/0x10 [ 203.443060][T11481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 203.443076][T11481] ? lockdep_hardirqs_on+0x7b/0x110 [ 203.443086][T11481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 203.443101][T11481] l2cap_unregister_user+0x6a/0x1b0 [ 203.443114][T11481] hidp_session_thread+0x3a1/0x420 [ 203.443128][T11481] ? __pfx_hidp_session_thread+0x10/0x10 [ 203.443140][T11481] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 203.443154][T11481] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 203.443167][T11481] ? __kthread_parkme+0x7b/0x200 [ 203.443178][T11481] ? __kthread_parkme+0x1a1/0x200 [ 203.443190][T11481] kthread+0x711/0x8a0 [ 203.443202][T11481] ? __pfx_hidp_session_thread+0x10/0x10 [ 203.443215][T11481] ? __pfx_kthread+0x10/0x10 [ 203.443227][T11481] ? _raw_spin_unlock_irq+0x23/0x50 [ 203.443242][T11481] ? __pfx_kthread+0x10/0x10 [ 203.443254][T11481] ret_from_fork+0x510/0xa50 [ 203.443263][T11481] ? __pfx_ret_from_fork+0x10/0x10 [ 203.443272][T11481] ? __switch_to+0xc9e/0x1480 [ 203.443286][T11481] ? __pfx_kthread+0x10/0x10 [ 203.443298][T11481] ret_from_fork_asm+0x1a/0x30 [ 203.443315][T11481] [ 203.443319][T11481] [ 203.620861][T11481] The buggy address belongs to the physical page: [ 203.627280][T11481] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880267e8000 pfn:0x267e8 [ 203.638232][T11481] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 203.645689][T11481] raw: 00fff00000000000 ffffea0000bd4308 ffff8880b8740c00 0000000000000000 [ 203.654266][T11481] raw: ffff8880267e8000 0000000000000000 00000000ffffffff 0000000000000000 [ 203.662855][T11481] page dumped because: kasan: bad access detected [ 203.669386][T11481] page_owner tracks the page as freed [ 203.674837][T11481] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 11430, tgid 11430 (syz-executor), ts 188342958687, free_ts 203407501224 [ 203.693063][T11481] post_alloc_hook+0x234/0x290 [ 203.697909][T11481] get_page_from_freelist+0x24e0/0x2580 [ 203.703464][T11481] __alloc_frozen_pages_noprof+0x181/0x370 [ 203.709880][T11481] alloc_pages_mpol+0x232/0x4a0 [ 203.714727][T11481] ___kmalloc_large_node+0x4e/0x150 [ 203.720138][T11481] __kmalloc_large_node_noprof+0x18/0x90 [ 203.725849][T11481] __kmalloc_noprof+0x4c9/0x800 [ 203.730827][T11481] hci_alloc_dev_priv+0x28/0x2060 [ 203.735839][T11481] vhci_create_device+0x120/0x650 [ 203.740851][T11481] vhci_write+0x3ce/0x4a0 [ 203.745164][T11481] vfs_write+0x5c9/0xb30 [ 203.749384][T11481] ksys_write+0x145/0x250 [ 203.753688][T11481] do_syscall_64+0xec/0xf80 [ 203.758180][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.764066][T11481] page last free pid 11430 tgid 11430 stack trace: [ 203.770562][T11481] __free_frozen_pages+0xbc8/0xd30 [ 203.775858][T11481] bt_host_release+0x82/0x90 [ 203.780558][T11481] device_release+0x9e/0x1d0 [ 203.785153][T11481] kobject_put+0x228/0x570 [ 203.789568][T11481] vhci_release+0x15a/0x1a0 [ 203.794067][T11481] __fput+0x44c/0xa70 [ 203.798034][T11481] task_work_run+0x1d4/0x260 [ 203.802608][T11481] do_exit+0x694/0x22f0 [ 203.806746][T11481] do_group_exit+0x21c/0x2d0 [ 203.811368][T11481] get_signal+0x1285/0x1340 [ 203.815956][T11481] arch_do_signal_or_restart+0x9a/0x7a0 [ 203.821578][T11481] exit_to_user_mode_loop+0x87/0x4e0 [ 203.826867][T11481] do_syscall_64+0x2c1/0xf80 [ 203.831461][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.837540][T11481] [ 203.839896][T11481] Memory state around the buggy address: [ 203.845513][T11481] ffff8880267e7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 203.853567][T11481] ffff8880267e8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 203.861627][T11481] >ffff8880267e8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 203.869672][T11481] ^ [ 203.875142][T11481] ffff8880267e8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 203.883218][T11481] ffff8880267e8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 203.891304][T11481] ================================================================== [ 203.900001][T11481] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.907339][T11481] CPU: 0 UID: 0 PID: 11481 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) [ 203.917243][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.927310][T11481] Call Trace: [ 203.930609][T11481] [ 203.933535][T11481] vpanic+0x1e0/0x670 [ 203.937605][T11481] panic+0xb9/0xc0 [ 203.941322][T11481] ? __pfx_panic+0x10/0x10 [ 203.945737][T11481] ? __mutex_lock+0x801/0x1350 [ 203.950677][T11481] ? __mutex_lock+0x801/0x1350 [ 203.955457][T11481] check_panic_on_warn+0x89/0xb0 [ 203.960407][T11481] ? __mutex_lock+0x801/0x1350 [ 203.965184][T11481] end_report+0x6f/0x140 [ 203.969533][T11481] kasan_report+0x129/0x150 [ 203.974059][T11481] ? __mutex_lock+0x801/0x1350 [ 203.978829][T11481] __mutex_lock+0x801/0x1350 [ 203.983431][T11481] ? __mutex_lock+0x5bb/0x1350 [ 203.988240][T11481] ? l2cap_unregister_user+0x6a/0x1b0 [ 203.993625][T11481] ? __pfx___mutex_lock+0x10/0x10 [ 203.998668][T11481] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.004605][T11481] ? lockdep_hardirqs_on+0x7b/0x110 [ 204.009817][T11481] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.015629][T11481] l2cap_unregister_user+0x6a/0x1b0 [ 204.020828][T11481] hidp_session_thread+0x3a1/0x420 [ 204.025939][T11481] ? __pfx_hidp_session_thread+0x10/0x10 [ 204.031567][T11481] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 204.037867][T11481] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 204.044141][T11481] ? __kthread_parkme+0x7b/0x200 [ 204.049093][T11481] ? __kthread_parkme+0x1a1/0x200 [ 204.054320][T11481] kthread+0x711/0x8a0 [ 204.058393][T11481] ? __pfx_hidp_session_thread+0x10/0x10 [ 204.064110][T11481] ? __pfx_kthread+0x10/0x10 [ 204.068785][T11481] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.074057][T11481] ? __pfx_kthread+0x10/0x10 [ 204.078779][T11481] ret_from_fork+0x510/0xa50 [ 204.083470][T11481] ? __pfx_ret_from_fork+0x10/0x10 [ 204.088574][T11481] ? __switch_to+0xc9e/0x1480 [ 204.093353][T11481] ? __pfx_kthread+0x10/0x10 [ 204.097969][T11481] ret_from_fork_asm+0x1a/0x30 [ 204.102774][T11481] [ 204.106320][T11481] Kernel Offset: disabled [ 204.110660][T11481] Rebooting in 86400 seconds..