Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. 2026/05/28 17:35:22 parsed 1 programs [ 83.794378][ T5616] cgroup: Unknown subsys name 'net' [ 84.035764][ T5616] cgroup: Unknown subsys name 'cpuset' [ 84.090945][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.843981][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.822684][ T821] cfg80211: failed to load regulatory.db [ 88.814199][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.851222][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.856387][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.872222][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.876838][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.201603][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.201627][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.859277][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.859297][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.494177][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.494410][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.494615][ T5660] bridge_slave_0: entered allmulticast mode [ 94.522432][ T5660] bridge_slave_0: entered promiscuous mode [ 94.564924][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.564990][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.565119][ T5660] bridge_slave_1: entered allmulticast mode [ 94.566632][ T5660] bridge_slave_1: entered promiscuous mode [ 94.996724][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.065262][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.244963][ T5660] team0: Port device team_slave_0 added [ 95.249149][ T5660] team0: Port device team_slave_1 added [ 95.296763][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.296780][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.296802][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.303449][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.303464][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.303488][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.378265][ T5660] hsr_slave_0: entered promiscuous mode [ 95.379797][ T5660] hsr_slave_1: entered promiscuous mode [ 95.726158][ T5660] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.777529][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.780048][ T5660] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.805850][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.807153][ T5660] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.847378][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.848320][ T5660] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.895469][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.304610][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.356250][ T5660] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.379708][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.383086][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.403181][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.403300][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.864412][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.376209][ T5660] veth0_vlan: entered promiscuous mode [ 97.404992][ T5660] veth1_vlan: entered promiscuous mode [ 97.482929][ T5660] veth0_macvtap: entered promiscuous mode [ 97.486837][ T5660] veth1_macvtap: entered promiscuous mode [ 97.526690][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.567346][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.598564][ T3401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.628549][ T3401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.648304][ T3401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669102][ T3401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/28 17:35:38 executed programs: 0 [ 98.195347][ T4919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.226665][ T4919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.227771][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.239394][ T4919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.244843][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.387317][ T4919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.394186][ T4919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.419671][ T4919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.424760][ T4919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.425583][ T4919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.704230][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.739099][ T5760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.761728][ T5764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.767538][ T5764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.767822][ T5764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.767842][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.804498][ T5764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.805158][ T5764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.826757][ T5764] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.843242][ T5764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.844579][ T5764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.846892][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.879484][ T5764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.896523][ T5764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.899251][ T5764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.322115][ T4919] Bluetooth: hci0: command tx timeout [ 100.640361][ T4919] Bluetooth: hci1: command tx timeout [ 100.736983][ T1242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.882565][ T4919] Bluetooth: hci2: command tx timeout [ 100.961247][ T4919] Bluetooth: hci3: command tx timeout [ 100.966410][ T4919] Bluetooth: hci4: command tx timeout [ 101.142785][ T1242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.513017][ T1242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.893248][ T1242] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.962816][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.962992][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.963095][ T5750] bridge_slave_0: entered allmulticast mode [ 101.964450][ T5750] bridge_slave_0: entered promiscuous mode [ 101.968989][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.969052][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.969321][ T5747] bridge_slave_0: entered allmulticast mode [ 101.971898][ T5747] bridge_slave_0: entered promiscuous mode [ 102.028711][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.028826][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.028974][ T5750] bridge_slave_1: entered allmulticast mode [ 102.032888][ T5750] bridge_slave_1: entered promiscuous mode [ 102.040686][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.040802][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.041267][ T5747] bridge_slave_1: entered allmulticast mode [ 102.048861][ T5747] bridge_slave_1: entered promiscuous mode [ 102.194046][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.197417][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.239337][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.248240][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.266448][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.266552][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.266696][ T5756] bridge_slave_0: entered allmulticast mode [ 102.268341][ T5756] bridge_slave_0: entered promiscuous mode [ 102.344030][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.344141][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.344289][ T5756] bridge_slave_1: entered allmulticast mode [ 102.347563][ T5756] bridge_slave_1: entered promiscuous mode [ 102.349663][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.349774][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.349968][ T5757] bridge_slave_0: entered allmulticast mode [ 102.371330][ T5757] bridge_slave_0: entered promiscuous mode [ 102.401380][ T4919] Bluetooth: hci0: command tx timeout [ 102.416601][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.416711][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.416858][ T5755] bridge_slave_0: entered allmulticast mode [ 102.418582][ T5755] bridge_slave_0: entered promiscuous mode [ 102.458249][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.458345][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.458494][ T5757] bridge_slave_1: entered allmulticast mode [ 102.460951][ T5757] bridge_slave_1: entered promiscuous mode [ 102.465187][ T5750] team0: Port device team_slave_0 added [ 102.471524][ T5747] team0: Port device team_slave_0 added [ 102.490646][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.490756][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.490959][ T5755] bridge_slave_1: entered allmulticast mode [ 102.495237][ T5755] bridge_slave_1: entered promiscuous mode [ 102.536431][ T5750] team0: Port device team_slave_1 added [ 102.538028][ T5747] team0: Port device team_slave_1 added [ 102.557338][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.649013][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.654748][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.689331][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.713844][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.724574][ T4919] Bluetooth: hci1: command tx timeout [ 102.756538][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.756550][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.756565][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.759565][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.759581][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.759603][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.768373][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.817256][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.817288][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.817313][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.854663][ T5756] team0: Port device team_slave_0 added [ 102.944554][ T5756] team0: Port device team_slave_1 added [ 102.948155][ T5757] team0: Port device team_slave_0 added [ 102.960611][ T4919] Bluetooth: hci2: command tx timeout [ 102.967964][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.967976][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.967991][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.981178][ T5755] team0: Port device team_slave_0 added [ 103.029016][ T5757] team0: Port device team_slave_1 added [ 103.040984][ T4919] Bluetooth: hci4: command tx timeout [ 103.041012][ T4919] Bluetooth: hci3: command tx timeout [ 103.053001][ T5755] team0: Port device team_slave_1 added [ 103.673630][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.673641][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.673655][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.732640][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.732656][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.732679][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.733699][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.733710][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.733723][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.739446][ T5750] hsr_slave_0: entered promiscuous mode [ 103.745630][ T5750] hsr_slave_1: entered promiscuous mode [ 103.746585][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 103.746703][ T5750] Cannot create hsr debugfs directory [ 103.774917][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.774933][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.774958][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.796983][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.796998][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.797022][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.132822][ T1242] bridge_slave_1: left allmulticast mode [ 104.132901][ T1242] bridge_slave_1: left promiscuous mode [ 104.137591][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.283817][ T1242] bridge_slave_0: left allmulticast mode [ 104.283843][ T1242] bridge_slave_0: left promiscuous mode [ 104.283992][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.480356][ T4919] Bluetooth: hci0: command tx timeout [ 104.800388][ T4919] Bluetooth: hci1: command tx timeout [ 105.040538][ T4919] Bluetooth: hci2: command tx timeout [ 105.120393][ T4919] Bluetooth: hci4: command tx timeout [ 105.120423][ T4919] Bluetooth: hci3: command tx timeout [ 105.121062][ T1242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.180939][ T1242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.222450][ T1242] bond0 (unregistering): Released all slaves [ 105.456532][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.456549][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.456573][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.539227][ T5747] hsr_slave_0: entered promiscuous mode [ 105.539964][ T5747] hsr_slave_1: entered promiscuous mode [ 105.543941][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 105.543964][ T5747] Cannot create hsr debugfs directory [ 105.703986][ T5756] hsr_slave_0: entered promiscuous mode [ 105.704726][ T5756] hsr_slave_1: entered promiscuous mode [ 105.705256][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 105.705275][ T5756] Cannot create hsr debugfs directory [ 105.784993][ T5757] hsr_slave_0: entered promiscuous mode [ 105.785759][ T5757] hsr_slave_1: entered promiscuous mode [ 105.786315][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 105.786335][ T5757] Cannot create hsr debugfs directory [ 105.833163][ T5755] hsr_slave_0: entered promiscuous mode [ 105.833950][ T5755] hsr_slave_1: entered promiscuous mode [ 105.834479][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 105.834496][ T5755] Cannot create hsr debugfs directory [ 106.571358][ T5638] Bluetooth: hci0: command tx timeout [ 106.787728][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 106.880529][ T5638] Bluetooth: hci1: command tx timeout [ 107.120339][ T5638] Bluetooth: hci2: command tx timeout [ 107.140285][ T1242] hsr_slave_0: left promiscuous mode [ 107.160341][ T1242] hsr_slave_1: left promiscuous mode [ 107.161557][ T1242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.161625][ T1242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.200282][ T5638] Bluetooth: hci3: command tx timeout [ 107.200312][ T5638] Bluetooth: hci4: command tx timeout [ 107.202018][ T1242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.202043][ T1242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.274000][ T1242] veth1_macvtap: left promiscuous mode [ 107.274158][ T1242] veth0_macvtap: left promiscuous mode [ 107.275265][ T1242] veth1_vlan: left promiscuous mode [ 107.275497][ T1242] veth0_vlan: left promiscuous mode [ 108.033667][ T1242] team0 (unregistering): Port device team_slave_1 removed [ 108.070900][ T1242] team0 (unregistering): Port device team_slave_0 removed [ 108.336286][ T5750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.417916][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.421752][ T5750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.459423][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.577759][ T5750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.628482][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.693455][ T5750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.755364][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.894664][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.275243][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.615555][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.648084][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.653802][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.675627][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.675742][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.527808][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.591720][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.599086][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.692184][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.708623][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.745234][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.797807][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.852827][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.029483][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.157784][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.192967][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.208785][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.238885][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.257297][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.295738][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.317655][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.333173][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.449196][ T5755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.473291][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.480064][ T5755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.522594][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.529739][ T5755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.568985][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.599785][ T5755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.625936][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.697197][ T5750] veth0_vlan: entered promiscuous mode [ 111.744719][ T5757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.775442][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.799465][ T5757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.824293][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.825835][ T5750] veth1_vlan: entered promiscuous mode [ 111.828968][ T5757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.873820][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.877538][ T5757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.894257][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.972931][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.064723][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.077990][ T5750] veth0_macvtap: entered promiscuous mode [ 112.104026][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.107346][ T5750] veth1_macvtap: entered promiscuous mode [ 112.126589][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.126707][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.186442][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.186546][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.240016][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.256086][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.304279][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.304353][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.308970][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.349093][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.369064][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.369575][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.397087][ T1242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.419345][ T1242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.435432][ T1242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.453005][ T1242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.518752][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.647114][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.674759][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.674939][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.855984][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.856148][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.988646][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.009900][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.009920][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.057130][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.057294][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.114273][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.114376][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.153693][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.153713][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/28 17:35:54 executed programs: 10 [ 114.179793][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.497142][ T4919] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 114.497195][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.497218][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.497229][ T4919] Workqueue: hci1 hci_rx_work [ 114.497283][ T4919] Call Trace: [ 114.497291][ T4919] [ 114.497300][ T4919] dump_stack_lvl+0xe8/0x150 [ 114.497324][ T4919] sysfs_create_dir_ns+0x271/0x2a0 [ 114.497356][ T4919] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 114.497379][ T4919] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 114.497410][ T4919] ? rt_spin_unlock+0x160/0x200 [ 114.497433][ T4919] kobject_add_internal+0x631/0xd10 [ 114.497462][ T4919] kobject_add+0x163/0x240 [ 114.497485][ T4919] ? __pfx_kobject_add+0x10/0x10 [ 114.497511][ T4919] ? get_device_parent+0x370/0x3a0 [ 114.497534][ T4919] device_add+0x408/0xbb0 [ 114.497565][ T4919] hci_conn_add_sysfs+0xd5/0x210 [ 114.497592][ T4919] le_conn_complete_evt+0x10e6/0x16b0 [ 114.497622][ T4919] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 114.497643][ T4919] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.497668][ T4919] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.497695][ T4919] ? skb_pull_data+0xfb/0x200 [ 114.497719][ T4919] hci_le_conn_complete_evt+0x187/0x470 [ 114.497745][ T4919] hci_event_packet+0x659/0xef0 [ 114.497776][ T4919] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 114.497797][ T4919] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 114.497823][ T4919] ? __pfx_hci_event_packet+0x10/0x10 [ 114.497846][ T4919] ? rt_spin_unlock+0x14f/0x200 [ 114.497876][ T4919] ? hci_send_to_monitor+0xe2/0x590 [ 114.497900][ T4919] hci_rx_work+0x3ee/0x1040 [ 114.497932][ T4919] ? process_scheduled_works+0xa70/0x1860 [ 114.497954][ T4919] process_scheduled_works+0xb5d/0x1860 [ 114.498004][ T4919] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.498031][ T4919] ? assign_work+0x3d5/0x5e0 [ 114.498055][ T4919] worker_thread+0xa53/0xfc0 [ 114.498116][ T4919] kthread+0x388/0x470 [ 114.498140][ T4919] ? __pfx_worker_thread+0x10/0x10 [ 114.498158][ T4919] ? __pfx_kthread+0x10/0x10 [ 114.498182][ T4919] ret_from_fork+0x514/0xb70 [ 114.498206][ T4919] ? __pfx_ret_from_fork+0x10/0x10 [ 114.498226][ T4919] ? __switch_to+0xc79/0x1410 [ 114.498262][ T4919] ? __pfx_kthread+0x10/0x10 [ 114.498287][ T4919] ret_from_fork_asm+0x1a/0x30 [ 114.498325][ T4919] [ 114.498427][ T4919] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 114.498463][ T4919] Bluetooth: hci1: failed to register connection device [ 115.148022][ T5747] veth0_vlan: entered promiscuous mode [ 115.176901][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.268781][ T5747] veth1_vlan: entered promiscuous mode [ 115.418381][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.438217][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.569031][ T5755] veth0_vlan: entered promiscuous mode [ 115.606615][ T5747] veth0_macvtap: entered promiscuous mode [ 115.652622][ T4919] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 115.698028][ T5755] veth1_vlan: entered promiscuous mode [ 115.715089][ T5747] veth1_macvtap: entered promiscuous mode [ 115.821233][ T5756] veth0_vlan: entered promiscuous mode [ 115.862009][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.909305][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.924195][ T5756] veth1_vlan: entered promiscuous mode [ 115.958602][ T5755] veth0_macvtap: entered promiscuous mode [ 116.011063][ T3370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.015557][ T3370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.018666][ T3370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.060670][ T5755] veth1_macvtap: entered promiscuous mode [ 116.062368][ T3370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.283474][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.445471][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.456075][ T5756] veth0_macvtap: entered promiscuous mode [ 116.689257][ T5756] veth1_macvtap: entered promiscuous mode [ 116.713424][ T159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.718284][ T3370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.718304][ T3370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.745787][ T159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.749854][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.775658][ T159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.854079][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.900494][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.900514][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.186353][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.330590][ T5757] veth0_vlan: entered promiscuous mode [ 117.347427][ T1025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.347770][ T1025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.348134][ T1025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.352503][ T1025] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.625598][ T5757] veth1_vlan: entered promiscuous mode [ 117.704457][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.704478][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.194158][ T4919] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 118.205941][ T5638] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 118.205964][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.205986][ T5638] Hardware [ 118.205986][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.205996][ T5638] Workqueue: hci0 hci_rx_work [ 118.206025][ T5638] Call Trace: [ 118.206033][ T5638] [ 118.206040][ T5638] dump_stack_lvl+0xe8/0x150 [ 118.206063][ T5638] sysfs_create_dir_ns+0x271/0x2a0 [ 118.206090][ T5638] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 118.206112][ T5638] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.206141][ T5638] ? rt_spin_unlock+0x160/0x200 [ 118.206163][ T5638] kobject_add_internal+0x631/0xd10 [ 118.206187][ T5638] kobject_add+0x163/0x240 [ 118.206214][ T5638] ? __pfx_kobject_add+0x10/0x10 [ 118.206237][ T5638] ? get_device_parent+0x370/0x3a0 [ 118.206258][ T5638] device_add+0x408/0xbb0 [ 118.206293][ T5638] hci_conn_add_sysfs+0xd5/0x210 [ 118.206318][ T5638] le_conn_complete_evt+0x10e6/0x16b0 [ 118.206345][ T5638] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 118.206364][ T5638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.206387][ T5638] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.206411][ T5638] ? skb_pull_data+0xfb/0x200 [ 118.206433][ T5638] hci_le_conn_complete_evt+0x187/0x470 [ 118.206458][ T5638] hci_event_packet+0x659/0xef0 [ 118.206483][ T5638] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 118.206500][ T5638] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 118.206522][ T5638] ? __pfx_hci_event_packet+0x10/0x10 [ 118.206542][ T5638] ? rt_spin_unlock+0x14f/0x200 [ 118.206569][ T5638] ? hci_send_to_monitor+0xe2/0x590 [ 118.206592][ T5638] hci_rx_work+0x3ee/0x1040 [ 118.206623][ T5638] ? process_scheduled_works+0xa70/0x1860 [ 118.206645][ T5638] process_scheduled_works+0xb5d/0x1860 [ 118.206694][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.206720][ T5638] ? assign_work+0x3d5/0x5e0 [ 118.206744][ T5638] worker_thread+0xa53/0xfc0 [ 118.206789][ T5638] kthread+0x388/0x470 [ 118.206813][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 118.206830][ T5638] ? __pfx_kthread+0x10/0x10 [ 118.206854][ T5638] ret_from_fork+0x514/0xb70 [ 118.206878][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 118.206898][ T5638] ? __switch_to+0xc79/0x1410 [ 118.206927][ T5638] ? __pfx_kthread+0x10/0x10 [ 118.206951][ T5638] ret_from_fork_asm+0x1a/0x30 [ 118.206990][ T5638] [ 118.207079][ T5638] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 118.207115][ T5638] Bluetooth: hci0: failed to register connection device [ 118.346533][ T5755] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 118.372717][ T5638] ================================================================== [ 118.372741][ T5638] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 118.372768][ T5638] Read of size 8 at addr ffff888033a3a500 by task kworker/u9:2/5638 [ 118.372783][ T5638] [ 118.372795][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.372816][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.372829][ T5638] Workqueue: hci0 hci_rx_work [ 118.372853][ T5638] Call Trace: [ 118.372861][ T5638] [ 118.372868][ T5638] dump_stack_lvl+0xe8/0x150 [ 118.372889][ T5638] print_address_description+0x55/0x1e0 [ 118.372910][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.372929][ T5638] print_report+0x58/0x70 [ 118.372946][ T5638] kasan_report+0x117/0x150 [ 118.372969][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.372991][ T5638] l2cap_connect_cfm+0x902/0x1560 [ 118.373015][ T5638] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 118.373034][ T5638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.373059][ T5638] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.373082][ T5638] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 118.373106][ T5638] ? mutex_lock_nested+0x152/0x1d0 [ 118.373125][ T5638] ? hci_connect_cfm+0x2c/0x140 [ 118.373142][ T5638] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 118.373162][ T5638] hci_connect_cfm+0x95/0x140 [ 118.373179][ T5638] le_conn_complete_evt+0x1134/0x16b0 [ 118.373202][ T5638] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 118.373220][ T5638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.373243][ T5638] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.373266][ T5638] ? skb_pull_data+0xfb/0x200 [ 118.373284][ T5638] hci_le_conn_complete_evt+0x187/0x470 [ 118.373302][ T5638] hci_event_packet+0x659/0xef0 [ 118.373325][ T5638] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 118.373342][ T5638] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 118.373364][ T5638] ? __pfx_hci_event_packet+0x10/0x10 [ 118.373384][ T5638] ? rt_spin_unlock+0x14f/0x200 [ 118.373403][ T5638] ? hci_send_to_monitor+0xe2/0x590 [ 118.373421][ T5638] hci_rx_work+0x3ee/0x1040 [ 118.373443][ T5638] ? process_scheduled_works+0xa70/0x1860 [ 118.373460][ T5638] process_scheduled_works+0xb5d/0x1860 [ 118.373486][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.373505][ T5638] ? assign_work+0x3d5/0x5e0 [ 118.373524][ T5638] worker_thread+0xa53/0xfc0 [ 118.373552][ T5638] kthread+0x388/0x470 [ 118.373573][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 118.373591][ T5638] ? __pfx_kthread+0x10/0x10 [ 118.373612][ T5638] ret_from_fork+0x514/0xb70 [ 118.373632][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 118.373648][ T5638] ? __switch_to+0xc79/0x1410 [ 118.373671][ T5638] ? __pfx_kthread+0x10/0x10 [ 118.373690][ T5638] ret_from_fork_asm+0x1a/0x30 [ 118.373717][ T5638] [ 118.373733][ T5638] [ 118.373738][ T5638] Allocated by task 5638: [ 118.373747][ T5638] kasan_save_track+0x3e/0x80 [ 118.373763][ T5638] __kasan_kmalloc+0x93/0xb0 [ 118.373779][ T5638] __kmalloc_cache_noprof+0x3a6/0x690 [ 118.373798][ T5638] l2cap_chan_create+0x51/0x7a0 [ 118.373817][ T5638] l2cap_sock_new_connection_cb+0x191/0x2f0 [ 118.373837][ T5638] l2cap_connect_cfm+0x368/0x1560 [ 118.373853][ T5638] hci_connect_cfm+0x95/0x140 [ 118.373866][ T5638] le_conn_complete_evt+0x1134/0x16b0 [ 118.373881][ T5638] hci_le_conn_complete_evt+0x187/0x470 [ 118.373895][ T5638] hci_event_packet+0x659/0xef0 [ 118.373913][ T5638] hci_rx_work+0x3ee/0x1040 [ 118.373932][ T5638] process_scheduled_works+0xb5d/0x1860 [ 118.373948][ T5638] worker_thread+0xa53/0xfc0 [ 118.373964][ T5638] kthread+0x388/0x470 [ 118.373982][ T5638] ret_from_fork+0x514/0xb70 [ 118.373996][ T5638] ret_from_fork_asm+0x1a/0x30 [ 118.374015][ T5638] [ 118.374019][ T5638] Freed by task 6010: [ 118.374026][ T5638] kasan_save_track+0x3e/0x80 [ 118.374042][ T5638] kasan_save_free_info+0x46/0x50 [ 118.374063][ T5638] __kasan_slab_free+0x5c/0x80 [ 118.374079][ T5638] kfree+0x1c5/0x6c0 [ 118.374093][ T5638] l2cap_sock_destruct+0x97/0x2c0 [ 118.374111][ T5638] __sk_destruct+0x8d/0x9d0 [ 118.374133][ T5638] l2cap_sock_cleanup_listen+0x1d9/0x580 [ 118.374151][ T5638] l2cap_sock_release+0x6e/0x270 [ 118.374168][ T5638] sock_close+0xc3/0x240 [ 118.374183][ T5638] __fput+0x461/0xa70 [ 118.374197][ T5638] task_work_run+0x1d9/0x270 [ 118.374217][ T5638] exit_to_user_mode_loop+0x193/0x680 [ 118.374236][ T5638] do_syscall_64+0x353/0x580 [ 118.374256][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.374272][ T5638] [ 118.374276][ T5638] The buggy address belongs to the object at ffff888033a3a000 [ 118.374276][ T5638] which belongs to the cache kmalloc-2k of size 2048 [ 118.374291][ T5638] The buggy address is located 1280 bytes inside of [ 118.374291][ T5638] freed 2048-byte region [ffff888033a3a000, ffff888033a3a800) [ 118.374310][ T5638] [ 118.374314][ T5638] The buggy address belongs to the physical page: [ 118.374335][ T5638] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33a38 [ 118.374352][ T5638] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.374366][ T5638] flags: 0x80000000000040(head|node=0|zone=1) [ 118.374388][ T5638] page_type: f5(slab) [ 118.374404][ T5638] raw: 0080000000000040 ffff88813fe0a000 dead000000000100 dead000000000122 [ 118.374418][ T5638] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 118.374433][ T5638] head: 0080000000000040 ffff88813fe0a000 dead000000000100 dead000000000122 [ 118.374448][ T5638] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 118.374463][ T5638] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 118.374477][ T5638] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 118.374486][ T5638] page dumped because: kasan: bad access detected [ 118.374498][ T5638] page_owner tracks the page as allocated [ 118.374504][ T5638] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5680, tgid 5680 (syz-executor), ts 92868647322, free_ts 92157076272 [ 118.374535][ T5638] post_alloc_hook+0x22d/0x280 [ 118.374552][ T5638] get_page_from_freelist+0x28b2/0x2930 [ 118.374572][ T5638] __alloc_frozen_pages_noprof+0x18d/0x380 [ 118.374591][ T5638] allocate_slab+0x77/0x660 [ 118.374612][ T5638] refill_objects+0x33c/0x3d0 [ 118.374631][ T5638] __pcs_replace_empty_main+0x373/0x720 [ 118.374653][ T5638] __kmalloc_cache_noprof+0x44e/0x690 [ 118.374670][ T5638] rxrpc_alloc_connection+0x7b/0x600 [ 118.374684][ T5638] rxrpc_prealloc_service_connection+0x26/0x2f0 [ 118.374701][ T5638] rxrpc_service_prealloc_one+0x2f5/0xe20 [ 118.374727][ T5638] afs_charge_preallocation+0x394/0x4e0 [ 118.374750][ T5638] afs_open_socket+0x33c/0x3f0 [ 118.374770][ T5638] afs_net_init+0x6ce/0x8f0 [ 118.374789][ T5638] ops_init+0x35c/0x5c0 [ 118.374806][ T5638] setup_net+0x118/0x340 [ 118.374823][ T5638] copy_net_ns+0x50e/0x730 [ 118.374840][ T5638] page last free pid 1242 tgid 1242 stack trace: [ 118.374850][ T5638] __free_frozen_pages+0xfe5/0x10d0 [ 118.374866][ T5638] __slab_free+0x252/0x2a0 [ 118.374881][ T5638] qlist_free_all+0x99/0x100 [ 118.374894][ T5638] kasan_quarantine_reduce+0x148/0x160 [ 118.374907][ T5638] __kasan_slab_alloc+0x22/0x80 [ 118.374919][ T5638] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 118.374931][ T5638] __alloc_skb+0x1d0/0x7d0 [ 118.374944][ T5638] inet6_ifmcaddr_notify+0xfa/0x1e0 [ 118.374960][ T5638] __ipv6_dev_mc_dec+0x2dc/0x330 [ 118.374973][ T5638] ipv6_mc_destroy_dev+0x375/0x5c0 [ 118.374989][ T5638] addrconf_ifdown+0x15b7/0x1aa0 [ 118.375005][ T5638] addrconf_notify+0x1bc/0x1050 [ 118.375016][ T5638] notifier_call_chain+0x1ad/0x3d0 [ 118.375030][ T5638] unregister_netdevice_many_notify+0x17a5/0x22b0 [ 118.375043][ T5638] ops_undo_list+0x3d3/0x940 [ 118.375057][ T5638] cleanup_net+0x56e/0x800 [ 118.375071][ T5638] [ 118.375074][ T5638] Memory state around the buggy address: [ 118.375081][ T5638] ffff888033a3a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.375090][ T5638] ffff888033a3a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.375098][ T5638] >ffff888033a3a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.375104][ T5638] ^ [ 118.375110][ T5638] ffff888033a3a580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.375118][ T5638] ffff888033a3a600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.375125][ T5638] ================================================================== [ 118.376644][ T5638] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.376661][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.376678][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.376688][ T5638] Workqueue: hci0 hci_rx_work [ 118.376712][ T5638] Call Trace: [ 118.376725][ T5638] [ 118.376732][ T5638] vpanic+0x56c/0xa60 [ 118.376752][ T5638] ? rcu_is_watching+0x15/0xb0 [ 118.376773][ T5638] ? __pfx_vpanic+0x10/0x10 [ 118.376790][ T5638] panic+0xc5/0xd0 [ 118.376805][ T5638] ? __pfx_panic+0x10/0x10 [ 118.376824][ T5638] ? preempt_schedule_thunk+0x16/0x30 [ 118.376843][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.376857][ T5638] ? preempt_schedule_thunk+0x16/0x30 [ 118.376875][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.376888][ T5638] check_panic_on_warn+0x89/0xb0 [ 118.376906][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.376919][ T5638] end_report+0x73/0x170 [ 118.376935][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.376949][ T5638] kasan_report+0x128/0x150 [ 118.376965][ T5638] ? l2cap_connect_cfm+0x902/0x1560 [ 118.376990][ T5638] l2cap_connect_cfm+0x902/0x1560 [ 118.377009][ T5638] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 118.377025][ T5638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.377045][ T5638] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.377063][ T5638] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 118.377081][ T5638] ? mutex_lock_nested+0x152/0x1d0 [ 118.377095][ T5638] ? hci_connect_cfm+0x2c/0x140 [ 118.377108][ T5638] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 118.377123][ T5638] hci_connect_cfm+0x95/0x140 [ 118.377136][ T5638] le_conn_complete_evt+0x1134/0x16b0 [ 118.377156][ T5638] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 118.377170][ T5638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.377188][ T5638] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.377207][ T5638] ? skb_pull_data+0xfb/0x200 [ 118.377222][ T5638] hci_le_conn_complete_evt+0x187/0x470 [ 118.377239][ T5638] hci_event_packet+0x659/0xef0 [ 118.377258][ T5638] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 118.377272][ T5638] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 118.377291][ T5638] ? __pfx_hci_event_packet+0x10/0x10 [ 118.377307][ T5638] ? rt_spin_unlock+0x14f/0x200 [ 118.377325][ T5638] ? hci_send_to_monitor+0xe2/0x590 [ 118.377343][ T5638] hci_rx_work+0x3ee/0x1040 [ 118.377364][ T5638] ? process_scheduled_works+0xa70/0x1860 [ 118.377382][ T5638] process_scheduled_works+0xb5d/0x1860 [ 118.377410][ T5638] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.377429][ T5638] ? assign_work+0x3d5/0x5e0 [ 118.377445][ T5638] worker_thread+0xa53/0xfc0 [ 118.377471][ T5638] kthread+0x388/0x470 [ 118.377487][ T5638] ? __pfx_worker_thread+0x10/0x10 [ 118.377499][ T5638] ? __pfx_kthread+0x10/0x10 [ 118.377515][ T5638] ret_from_fork+0x514/0xb70 [ 118.377531][ T5638] ? __pfx_ret_from_fork+0x10/0x10 [ 118.377545][ T5638] ? __switch_to+0xc79/0x1410 [ 118.377565][ T5638] ? __pfx_kthread+0x10/0x10 [ 118.377582][ T5638] ret_from_fork_asm+0x1a/0x30 [ 118.377605][ T5638] [ 118.378223][ T5638] Kernel Offset: disabled