Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. 2026/02/24 06:20:45 parsed 1 programs [ 341.754356][ T5867] cgroup: Unknown subsys name 'net' [ 341.867238][ T5867] cgroup: Unknown subsys name 'cpuset' [ 341.877065][ T5867] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 343.518323][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 346.369724][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 346.715531][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.725808][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.733916][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.742238][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.753975][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.726061][ T5905] chnl_net:caif_netlink_parms(): no params data found [ 347.808827][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.817707][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.825282][ T5905] bridge_slave_0: entered allmulticast mode [ 347.832537][ T5905] bridge_slave_0: entered promiscuous mode [ 347.842182][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.849697][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.857169][ T5905] bridge_slave_1: entered allmulticast mode [ 347.864827][ T5905] bridge_slave_1: entered promiscuous mode [ 347.900948][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.914928][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.943953][ T5905] team0: Port device team_slave_0 added [ 347.951501][ T5905] team0: Port device team_slave_1 added [ 347.975852][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.983083][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.010161][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.023065][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.030674][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.057570][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.098879][ T5905] hsr_slave_0: entered promiscuous mode [ 348.106197][ T5905] hsr_slave_1: entered promiscuous mode [ 348.248507][ T5905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.260924][ T5905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.271341][ T5905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.282939][ T5905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.317876][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.325410][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.333646][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.340892][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.394549][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.416310][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.427613][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.441614][ T5905] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.457394][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.464916][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.480550][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.488680][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.665387][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.708225][ T5905] veth0_vlan: entered promiscuous mode [ 348.719627][ T5905] veth1_vlan: entered promiscuous mode [ 348.747445][ T5905] veth0_macvtap: entered promiscuous mode [ 348.758852][ T5905] veth1_macvtap: entered promiscuous mode [ 348.776528][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.790970][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.811122][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.821813][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.836551][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.847334][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.967827][ T5918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.059390][ T5918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.145840][ T5918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.208882][ T5918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.278476][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.290940][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.320008][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.328612][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:20:57 executed programs: 0 [ 351.415939][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.427032][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.436902][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.446224][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.455203][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.608092][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 351.733415][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.742100][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.750169][ T5974] bridge_slave_0: entered allmulticast mode [ 351.757892][ T5974] bridge_slave_0: entered promiscuous mode [ 351.780407][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.790000][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.798283][ T5974] bridge_slave_1: entered allmulticast mode [ 351.806249][ T5974] bridge_slave_1: entered promiscuous mode [ 351.850455][ T5918] bridge_slave_1: left allmulticast mode [ 351.858254][ T5918] bridge_slave_1: left promiscuous mode [ 351.865359][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.877601][ T5918] bridge_slave_0: left allmulticast mode [ 351.885464][ T5918] bridge_slave_0: left promiscuous mode [ 351.891708][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.052097][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.063967][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.074731][ T5918] bond0 (unregistering): Released all slaves [ 352.089449][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.104099][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.141307][ T5974] team0: Port device team_slave_0 added [ 352.152584][ T5974] team0: Port device team_slave_1 added [ 352.205009][ T5918] hsr_slave_0: left promiscuous mode [ 352.211595][ T5918] hsr_slave_1: left promiscuous mode [ 352.218815][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.226592][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.235913][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.244662][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.258041][ T5918] veth1_macvtap: left promiscuous mode [ 352.263787][ T5918] veth0_macvtap: left promiscuous mode [ 352.269747][ T5918] veth1_vlan: left promiscuous mode [ 352.275933][ T5918] veth0_vlan: left promiscuous mode [ 352.463725][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 352.477828][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 352.586230][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.594021][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.624212][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.641506][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.649518][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.678613][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.770874][ T5974] hsr_slave_0: entered promiscuous mode [ 352.782850][ T5974] hsr_slave_1: entered promiscuous mode [ 353.504566][ T51] Bluetooth: hci0: command tx timeout [ 354.010067][ T5974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.024285][ T5974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.037874][ T5974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.050343][ T5974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.288361][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.337493][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.357725][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.365495][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.408620][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.416003][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.738343][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.816478][ T5974] veth0_vlan: entered promiscuous mode [ 354.836372][ T5974] veth1_vlan: entered promiscuous mode [ 354.882068][ T5974] veth0_macvtap: entered promiscuous mode [ 354.896588][ T5974] veth1_macvtap: entered promiscuous mode [ 354.921270][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.938990][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.961599][ T6019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.986507][ T6019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.006128][ T6019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.015968][ T6019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.082974][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.103975][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.146627][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.154933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.587169][ T51] Bluetooth: hci0: command tx timeout [ 356.129997][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.140915][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.149868][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.157539][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.166724][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.175178][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.183117][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 356.192587][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 356.201103][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 356.209705][ T5919] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 2026/02/24 06:21:02 executed programs: 25 [ 356.930707][ T5919] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 357.674449][ T51] Bluetooth: hci0: command tx timeout [ 359.744323][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:21:07 executed programs: 261 2026/02/24 06:21:12 executed programs: 507 [ 368.449662][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.459125][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.472723][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.488348][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.508872][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.665552][ T7251] chnl_net:caif_netlink_parms(): no params data found [ 368.745668][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.753623][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.761162][ T7251] bridge_slave_0: entered allmulticast mode [ 368.770069][ T7251] bridge_slave_0: entered promiscuous mode [ 368.790034][ T6019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.806928][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.815085][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.822364][ T7251] bridge_slave_1: entered allmulticast mode [ 368.830306][ T7251] bridge_slave_1: entered promiscuous mode [ 368.856865][ T7251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.870499][ T7251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.889483][ T6019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.928329][ T7251] team0: Port device team_slave_0 added [ 368.936932][ T7251] team0: Port device team_slave_1 added [ 368.962595][ T6019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.988700][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.996222][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.023798][ T7251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.037474][ T7251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.045060][ T7251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.072721][ T7251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.101839][ T6019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.145298][ T7251] hsr_slave_0: entered promiscuous mode [ 369.152720][ T7251] hsr_slave_1: entered promiscuous mode [ 369.159649][ T7251] debugfs: 'hsr0' already exists in 'hsr' [ 369.165838][ T7251] Cannot create hsr debugfs directory [ 369.396588][ T6019] bridge_slave_1: left allmulticast mode [ 369.402386][ T6019] bridge_slave_1: left promiscuous mode [ 369.409095][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.422514][ T6019] bridge_slave_0: left allmulticast mode [ 369.434231][ T6019] bridge_slave_0: left promiscuous mode [ 369.441437][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.661882][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.688322][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.699216][ T6019] bond0 (unregistering): Released all slaves [ 370.070304][ T6019] hsr_slave_0: left promiscuous mode [ 370.080179][ T6019] hsr_slave_1: left promiscuous mode [ 370.087837][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.098608][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.108370][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.116440][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.131864][ T6019] veth1_macvtap: left promiscuous mode [ 370.138172][ T6019] veth0_macvtap: left promiscuous mode [ 370.144599][ T6019] veth1_vlan: left promiscuous mode [ 370.149933][ T6019] veth0_vlan: left promiscuous mode [ 370.470038][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 370.485917][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 370.544218][ T51] Bluetooth: hci1: command tx timeout [ 370.610078][ T7251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.620747][ T7251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.655256][ T7251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.669905][ T7251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.759094][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.785698][ T7251] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.800765][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.808679][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.822781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.830280][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.005443][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.051092][ T7251] veth0_vlan: entered promiscuous mode [ 371.063922][ T7251] veth1_vlan: entered promiscuous mode [ 371.091033][ T7251] veth0_macvtap: entered promiscuous mode [ 371.100691][ T7251] veth1_macvtap: entered promiscuous mode [ 371.119531][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.135932][ T7251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.149941][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.160326][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.170505][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.180616][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.244175][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.253373][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.282002][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.290602][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:21:17 executed programs: 608 [ 371.980634][ T796] hid_parser_main: 65150 callbacks suppressed [ 371.980659][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 371.995597][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.004055][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.012458][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.022261][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.029884][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.037991][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 372.045829][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 372.053946][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.061784][ T796] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 372.623753][ T51] Bluetooth: hci1: command tx timeout [ 372.780598][ T796] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 374.703344][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:21:22 executed programs: 831 [ 376.784566][ T51] Bluetooth: hci1: command tx timeout [ 378.708121][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.719088][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 2026/02/24 06:21:27 executed programs: 1080 [ 384.100961][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.111250][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.135031][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.148567][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.157527][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.299337][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 384.350473][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.409007][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.416984][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.424876][ T8509] bridge_slave_0: entered allmulticast mode [ 384.432301][ T8509] bridge_slave_0: entered promiscuous mode [ 384.450508][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.466475][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.474742][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.482069][ T8509] bridge_slave_1: entered allmulticast mode [ 384.489777][ T8509] bridge_slave_1: entered promiscuous mode [ 384.517452][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.536657][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.555088][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.586032][ T8509] team0: Port device team_slave_0 added [ 384.595334][ T8509] team0: Port device team_slave_1 added [ 384.611871][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.646683][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.654224][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.682575][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.695465][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.702716][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.730219][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.784546][ T8509] hsr_slave_0: entered promiscuous mode [ 384.791300][ T8509] hsr_slave_1: entered promiscuous mode [ 384.939612][ T1158] bridge_slave_1: left allmulticast mode [ 384.946275][ T1158] bridge_slave_1: left promiscuous mode [ 384.952258][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.962037][ T1158] bridge_slave_0: left allmulticast mode [ 384.969420][ T1158] bridge_slave_0: left promiscuous mode [ 384.975598][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.116700][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.127651][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.138344][ T1158] bond0 (unregistering): Released all slaves [ 385.443592][ T1158] hsr_slave_0: left promiscuous mode [ 385.449932][ T1158] hsr_slave_1: left promiscuous mode [ 385.457308][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.465307][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.484066][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.491775][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.509913][ T1158] veth1_macvtap: left promiscuous mode [ 385.515718][ T1158] veth0_macvtap: left promiscuous mode [ 385.521519][ T1158] veth1_vlan: left promiscuous mode [ 385.527416][ T1158] veth0_vlan: left promiscuous mode [ 385.804035][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 385.819162][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 386.143614][ T8509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.157407][ T8509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.170896][ T8509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.188435][ T8509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.223362][ T5144] Bluetooth: hci0: command tx timeout [ 386.331745][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.357273][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.371447][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.379822][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.406350][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.413859][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.662703][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.701860][ T8509] veth0_vlan: entered promiscuous mode [ 386.713416][ T8509] veth1_vlan: entered promiscuous mode [ 386.740306][ T8509] veth0_macvtap: entered promiscuous mode [ 386.750661][ T8509] veth1_macvtap: entered promiscuous mode [ 386.767643][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.782224][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.799639][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.809069][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.824597][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.834625][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.892236][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.901360][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.927528][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/02/24 06:21:33 executed programs: 1202 [ 386.936584][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.600498][ T7300] hid_parser_main: 65150 callbacks suppressed [ 387.600523][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.615165][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.622787][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.630872][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.638844][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.647642][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.655451][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x3 [ 387.663156][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x1 [ 387.672624][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 387.680542][ T7300] hid-generic 0005:16C0:5505.0003: unknown main item tag 0x0 [ 388.309195][ T5144] Bluetooth: hci0: command tx timeout [ 388.379712][ T7300] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 390.383571][ T5144] Bluetooth: hci0: command tx timeout 2026/02/24 06:21:38 executed programs: 1423 [ 392.466809][ T5144] Bluetooth: hci0: command tx timeout 2026/02/24 06:21:43 executed programs: 1665 [ 399.826577][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.846826][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.856727][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.865131][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.874223][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.044681][ T6019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.068161][ T9761] chnl_net:caif_netlink_parms(): no params data found [ 400.121864][ T6019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.168026][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.175760][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.183547][ T9761] bridge_slave_0: entered allmulticast mode [ 400.190832][ T9761] bridge_slave_0: entered promiscuous mode [ 400.207452][ T6019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.224002][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.231524][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.238874][ T9761] bridge_slave_1: entered allmulticast mode [ 400.246878][ T9761] bridge_slave_1: entered promiscuous mode [ 400.275321][ T6019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.301551][ T9761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.313908][ T9761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.347891][ T9761] team0: Port device team_slave_0 added [ 400.357800][ T9761] team0: Port device team_slave_1 added [ 400.389045][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.396492][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.423089][ T9761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.451710][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.459360][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.488498][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.554476][ T9761] hsr_slave_0: entered promiscuous mode [ 400.561151][ T9761] hsr_slave_1: entered promiscuous mode [ 400.568348][ T9761] debugfs: 'hsr0' already exists in 'hsr' [ 400.575024][ T9761] Cannot create hsr debugfs directory [ 400.635563][ T6019] bridge_slave_1: left allmulticast mode [ 400.641275][ T6019] bridge_slave_1: left promiscuous mode [ 400.647697][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.658396][ T6019] bridge_slave_0: left allmulticast mode [ 400.664389][ T6019] bridge_slave_0: left promiscuous mode [ 400.670314][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.829730][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.840664][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.851708][ T6019] bond0 (unregistering): Released all slaves [ 401.159272][ T6019] hsr_slave_0: left promiscuous mode [ 401.166682][ T6019] hsr_slave_1: left promiscuous mode [ 401.172928][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.182179][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.197538][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.205419][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.219651][ T6019] veth1_macvtap: left promiscuous mode [ 401.225551][ T6019] veth0_macvtap: left promiscuous mode [ 401.231175][ T6019] veth1_vlan: left promiscuous mode [ 401.237571][ T6019] veth0_vlan: left promiscuous mode [ 401.565481][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 401.580066][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 401.908360][ T51] Bluetooth: hci1: command tx timeout [ 401.978575][ T9761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.997511][ T9761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.027471][ T9761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.045233][ T9761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.194992][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.217962][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.237900][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.245644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.257450][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.264828][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.468549][ T9761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.511827][ T9761] veth0_vlan: entered promiscuous mode [ 402.523001][ T9761] veth1_vlan: entered promiscuous mode [ 402.553110][ T9761] veth0_macvtap: entered promiscuous mode [ 402.562333][ T9761] veth1_macvtap: entered promiscuous mode [ 402.580196][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.596528][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.609850][ T6019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.619928][ T6019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.631650][ T6019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.641232][ T6019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.697078][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.706157][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.730357][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.739674][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:21:48 executed programs: 1802 [ 403.402693][ T10] hid_parser_main: 65150 callbacks suppressed [ 403.402718][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.421253][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.430722][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.440181][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.448351][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.456431][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.465051][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x3 [ 403.472836][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x1 [ 403.481254][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.489042][ T10] hid-generic 0005:16C0:5505.0004: unknown main item tag 0x0 [ 403.984278][ T51] Bluetooth: hci1: command tx timeout [ 404.182816][ T10] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 406.063351][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:21:53 executed programs: 2023 [ 408.144104][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:21:58 executed programs: 2272 [ 415.421249][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.433759][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.448780][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.470473][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.479321][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.620745][T11014] chnl_net:caif_netlink_parms(): no params data found [ 415.680219][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.726840][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.734428][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.741844][T11014] bridge_slave_0: entered allmulticast mode [ 415.749436][T11014] bridge_slave_0: entered promiscuous mode [ 415.758342][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.765992][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.773392][T11014] bridge_slave_1: entered allmulticast mode [ 415.780684][T11014] bridge_slave_1: entered promiscuous mode [ 415.805327][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.836599][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.848270][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.875430][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.904843][T11014] team0: Port device team_slave_0 added [ 415.914111][T11014] team0: Port device team_slave_1 added [ 415.954288][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.971628][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.979449][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.006953][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.019656][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.027354][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.054806][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.103652][T11014] hsr_slave_0: entered promiscuous mode [ 416.110726][T11014] hsr_slave_1: entered promiscuous mode [ 416.224989][ T12] bridge_slave_1: left allmulticast mode [ 416.230947][ T12] bridge_slave_1: left promiscuous mode [ 416.238397][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.248170][ T12] bridge_slave_0: left allmulticast mode [ 416.254905][ T12] bridge_slave_0: left promiscuous mode [ 416.260867][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.411842][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.424433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.435274][ T12] bond0 (unregistering): Released all slaves [ 416.749152][ T12] hsr_slave_0: left promiscuous mode [ 416.755560][ T12] hsr_slave_1: left promiscuous mode [ 416.761579][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.774519][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.785732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.794019][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.816351][ T12] veth1_macvtap: left promiscuous mode [ 416.822293][ T12] veth0_macvtap: left promiscuous mode [ 416.832397][ T12] veth1_vlan: left promiscuous mode [ 416.837868][ T12] veth0_vlan: left promiscuous mode [ 417.119079][ T12] team0 (unregistering): Port device team_slave_1 removed [ 417.133651][ T12] team0 (unregistering): Port device team_slave_0 removed [ 417.503499][ T51] Bluetooth: hci0: command tx timeout [ 417.505705][T11014] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.521644][T11014] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.533976][T11014] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.547713][T11014] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.687796][T11014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.717972][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.739531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.747191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.764793][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.772159][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.052878][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.115216][T11014] veth0_vlan: entered promiscuous mode [ 418.130579][T11014] veth1_vlan: entered promiscuous mode [ 418.175200][T11014] veth0_macvtap: entered promiscuous mode [ 418.188544][T11014] veth1_macvtap: entered promiscuous mode [ 418.213088][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.229894][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.249600][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.261445][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.282495][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.302012][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.381427][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.393078][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:22:04 executed programs: 2402 [ 418.433689][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.444138][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.120567][ T29] hid_parser_main: 65150 callbacks suppressed [ 419.120592][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.137547][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.146172][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.154149][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.161864][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.171598][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.180085][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x3 [ 419.188670][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x1 [ 419.197057][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.205342][ T29] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0 [ 419.583700][ T51] Bluetooth: hci0: command tx timeout [ 419.922224][ T29] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 421.673394][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:22:09 executed programs: 2620 [ 423.743617][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:22:14 executed programs: 2866 [ 431.295107][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.304796][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.314100][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.323681][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.338404][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.473127][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.526296][T12281] chnl_net:caif_netlink_parms(): no params data found [ 431.549441][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.621469][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.629221][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.636684][T12281] bridge_slave_0: entered allmulticast mode [ 431.644484][T12281] bridge_slave_0: entered promiscuous mode [ 431.662875][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.680377][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.689091][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.696746][T12281] bridge_slave_1: entered allmulticast mode [ 431.704597][T12281] bridge_slave_1: entered promiscuous mode [ 431.721039][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.756410][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.770992][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.798938][T12281] team0: Port device team_slave_0 added [ 431.807920][T12281] team0: Port device team_slave_1 added [ 431.833141][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.841540][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.869723][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.884022][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.891472][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.920190][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.974492][T12281] hsr_slave_0: entered promiscuous mode [ 431.981480][T12281] hsr_slave_1: entered promiscuous mode [ 431.989244][T12281] debugfs: 'hsr0' already exists in 'hsr' [ 431.996485][T12281] Cannot create hsr debugfs directory [ 432.109008][ T12] bridge_slave_1: left allmulticast mode [ 432.115251][ T12] bridge_slave_1: left promiscuous mode [ 432.121138][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.131491][ T12] bridge_slave_0: left allmulticast mode [ 432.137760][ T12] bridge_slave_0: left promiscuous mode [ 432.144008][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.276065][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.287873][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.299641][ T12] bond0 (unregistering): Released all slaves [ 432.598457][ T12] hsr_slave_0: left promiscuous mode [ 432.605293][ T12] hsr_slave_1: left promiscuous mode [ 432.611798][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.619466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.630674][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.638495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.651646][ T12] veth1_macvtap: left promiscuous mode [ 432.657378][ T12] veth0_macvtap: left promiscuous mode [ 432.662983][ T12] veth1_vlan: left promiscuous mode [ 432.668990][ T12] veth0_vlan: left promiscuous mode [ 432.990221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.007275][ T12] team0 (unregistering): Port device team_slave_0 removed [ 433.405385][T12281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 433.419345][T12281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.432766][T12281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.440805][ T51] Bluetooth: hci1: command tx timeout [ 433.450984][T12281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.579488][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.602803][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.617746][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.625338][T11075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.654298][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.661808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.956898][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.028410][T12281] veth0_vlan: entered promiscuous mode [ 434.047021][T12281] veth1_vlan: entered promiscuous mode [ 434.089443][T12281] veth0_macvtap: entered promiscuous mode [ 434.102299][T12281] veth1_macvtap: entered promiscuous mode [ 434.129143][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.148025][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.167391][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.195930][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.220621][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.246520][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.288022][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/02/24 06:22:20 executed programs: 3002 [ 434.304310][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.331339][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.340995][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.024260][ T5924] hid_parser_main: 65150 callbacks suppressed [ 435.024285][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.040123][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.048977][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.058198][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.066317][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.074100][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.081909][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x3 [ 435.090475][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x1 [ 435.098504][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.108153][ T5924] hid-generic 0005:16C0:5505.0006: unknown main item tag 0x0 [ 435.513362][ T51] Bluetooth: hci1: command tx timeout [ 435.830997][ T5924] hid-generic 0005:16C0:5505.0006: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 437.593576][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:22:25 executed programs: 3222 [ 439.664481][ T51] Bluetooth: hci1: command tx timeout [ 440.147495][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.157963][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 2026/02/24 06:22:30 executed programs: 3471 [ 447.041435][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.051670][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.061412][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.070961][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.082729][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.239196][T13553] chnl_net:caif_netlink_parms(): no params data found [ 447.326483][T11075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.342738][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.351859][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.359122][T13553] bridge_slave_0: entered allmulticast mode [ 447.366585][T13553] bridge_slave_0: entered promiscuous mode [ 447.374876][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.382483][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.390037][T13553] bridge_slave_1: entered allmulticast mode [ 447.398086][T13553] bridge_slave_1: entered promiscuous mode [ 447.429495][T11075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.448592][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.460755][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.489953][T13553] team0: Port device team_slave_0 added [ 447.499420][T13553] team0: Port device team_slave_1 added [ 447.527241][T11075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.552888][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.560160][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.590527][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.612224][T11075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.627574][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.635092][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.662750][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.706330][T13553] hsr_slave_0: entered promiscuous mode [ 447.713083][T13553] hsr_slave_1: entered promiscuous mode [ 447.872447][T11075] bridge_slave_1: left allmulticast mode [ 447.878724][T11075] bridge_slave_1: left promiscuous mode [ 447.885062][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.895186][T11075] bridge_slave_0: left allmulticast mode [ 447.901271][T11075] bridge_slave_0: left promiscuous mode [ 447.907911][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.043654][T11075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.055315][T11075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.065380][T11075] bond0 (unregistering): Released all slaves [ 448.313008][T11075] hsr_slave_0: left promiscuous mode [ 448.323998][T11075] hsr_slave_1: left promiscuous mode [ 448.330348][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.353312][T11075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.362022][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.370990][T11075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.391390][T11075] veth1_macvtap: left promiscuous mode [ 448.397101][T11075] veth0_macvtap: left promiscuous mode [ 448.402696][T11075] veth1_vlan: left promiscuous mode [ 448.412100][T11075] veth0_vlan: left promiscuous mode [ 448.739191][T11075] team0 (unregistering): Port device team_slave_1 removed [ 448.763629][T11075] team0 (unregistering): Port device team_slave_0 removed [ 449.120246][T13553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.136002][T13553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.160908][T13553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.183321][ T51] Bluetooth: hci0: command tx timeout [ 449.189581][T13553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.300326][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.326672][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.344033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.351310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.368639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.375886][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.590615][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.629729][T13553] veth0_vlan: entered promiscuous mode [ 449.640941][T13553] veth1_vlan: entered promiscuous mode [ 449.670978][T13553] veth0_macvtap: entered promiscuous mode [ 449.682539][T13553] veth1_macvtap: entered promiscuous mode [ 449.702133][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.717636][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.730836][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.741008][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.751234][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.760794][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.817172][T11075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.829308][T11075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.852327][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/02/24 06:22:36 executed programs: 3602 [ 449.861125][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.532666][ T29] hid_parser_main: 65150 callbacks suppressed [ 450.532691][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.551886][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.559596][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.567691][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.575897][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.585521][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.593754][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x3 [ 450.601633][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x1 [ 450.612919][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 450.621971][ T29] hid-generic 0005:16C0:5505.0007: unknown main item tag 0x0 [ 451.264107][ T51] Bluetooth: hci0: command tx timeout [ 451.324655][ T29] hid-generic 0005:16C0:5505.0007: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 453.343917][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:22:41 executed programs: 3824 [ 455.423763][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:22:46 executed programs: 4070 [ 462.625563][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 462.639999][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 462.648628][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 462.657987][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 462.667600][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.828914][T14806] chnl_net:caif_netlink_parms(): no params data found [ 462.906798][T11075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.934106][T14806] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.941517][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.950003][T14806] bridge_slave_0: entered allmulticast mode [ 462.959707][T14806] bridge_slave_0: entered promiscuous mode [ 462.967537][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.974928][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.982184][T14806] bridge_slave_1: entered allmulticast mode [ 462.990014][T14806] bridge_slave_1: entered promiscuous mode [ 463.005980][T11075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.039315][T14806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.051484][T14806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.070280][T11075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.105541][T14806] team0: Port device team_slave_0 added [ 463.113979][T14806] team0: Port device team_slave_1 added [ 463.153008][T11075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.168063][T14806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.175594][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.205884][T14806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.218818][T14806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.225829][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.252582][T14806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.304282][T14806] hsr_slave_0: entered promiscuous mode [ 463.310821][T14806] hsr_slave_1: entered promiscuous mode [ 463.317463][T14806] debugfs: 'hsr0' already exists in 'hsr' [ 463.324071][T14806] Cannot create hsr debugfs directory [ 463.479831][T11075] bridge_slave_1: left allmulticast mode [ 463.485963][T11075] bridge_slave_1: left promiscuous mode [ 463.491679][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.501021][T11075] bridge_slave_0: left allmulticast mode [ 463.506914][T11075] bridge_slave_0: left promiscuous mode [ 463.512616][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.660528][T11075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.671433][T11075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.681654][T11075] bond0 (unregistering): Released all slaves [ 463.912442][T11075] hsr_slave_0: left promiscuous mode [ 463.925041][T11075] hsr_slave_1: left promiscuous mode [ 463.937153][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.945124][T11075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.955615][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.963490][T11075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.978396][T11075] veth1_macvtap: left promiscuous mode [ 463.984496][T11075] veth0_macvtap: left promiscuous mode [ 463.990370][T11075] veth1_vlan: left promiscuous mode [ 463.998360][T11075] veth0_vlan: left promiscuous mode [ 464.317620][T11075] team0 (unregistering): Port device team_slave_1 removed [ 464.340704][T11075] team0 (unregistering): Port device team_slave_0 removed [ 464.676044][T14806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.691420][T14806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.704189][ T51] Bluetooth: hci1: command tx timeout [ 464.714704][T14806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.727017][T14806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.847098][T14806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.878910][T14806] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.893092][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.900263][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.930567][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.938287][T11075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.200819][T14806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.239723][T14806] veth0_vlan: entered promiscuous mode [ 465.252196][T14806] veth1_vlan: entered promiscuous mode [ 465.283605][T14806] veth0_macvtap: entered promiscuous mode [ 465.293597][T14806] veth1_macvtap: entered promiscuous mode [ 465.310417][T14806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.325563][T14806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.340286][T11075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.350119][T11075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.361987][T11075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.372102][T11075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.426789][T11075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.441142][T11075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.464849][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/02/24 06:22:51 executed programs: 4202 [ 465.472896][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.147467][ T5919] hid_parser_main: 65150 callbacks suppressed [ 466.147491][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.166052][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.173922][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.181545][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.189652][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.197525][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.205297][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x3 [ 466.212756][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x1 [ 466.223098][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.233916][ T5919] hid-generic 0005:16C0:5505.0008: unknown main item tag 0x0 [ 466.783758][ T51] Bluetooth: hci1: command tx timeout [ 466.925309][ T5919] hid-generic 0005:16C0:5505.0008: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 468.873254][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:22:56 executed programs: 4426 [ 470.943357][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:23:01 executed programs: 4672 [ 478.180951][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.196006][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.210226][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.219281][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.229648][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.388534][T16058] chnl_net:caif_netlink_parms(): no params data found [ 478.429431][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.498382][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.522751][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.530460][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.538076][T16058] bridge_slave_0: entered allmulticast mode [ 478.546967][T16058] bridge_slave_0: entered promiscuous mode [ 478.556584][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.564483][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.572118][T16058] bridge_slave_1: entered allmulticast mode [ 478.579640][T16058] bridge_slave_1: entered promiscuous mode [ 478.595472][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.630419][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.642291][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.687372][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.703692][T16058] team0: Port device team_slave_0 added [ 478.711380][T16058] team0: Port device team_slave_1 added [ 478.735688][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.743105][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.769683][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.782481][T16058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.792686][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.819680][T16058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.873919][T16058] hsr_slave_0: entered promiscuous mode [ 478.880223][T16058] hsr_slave_1: entered promiscuous mode [ 479.013907][ T35] bridge_slave_1: left allmulticast mode [ 479.019805][ T35] bridge_slave_1: left promiscuous mode [ 479.025825][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.035741][ T35] bridge_slave_0: left allmulticast mode [ 479.041486][ T35] bridge_slave_0: left promiscuous mode [ 479.047703][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.201177][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.212294][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.225564][ T35] bond0 (unregistering): Released all slaves [ 479.498404][ T35] hsr_slave_0: left promiscuous mode [ 479.504811][ T35] hsr_slave_1: left promiscuous mode [ 479.510980][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.519431][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.529948][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.540571][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.556169][ T35] veth1_macvtap: left promiscuous mode [ 479.561735][ T35] veth0_macvtap: left promiscuous mode [ 479.568134][ T35] veth1_vlan: left promiscuous mode [ 479.573791][ T35] veth0_vlan: left promiscuous mode [ 479.900251][ T35] team0 (unregistering): Port device team_slave_1 removed [ 479.919618][ T35] team0 (unregistering): Port device team_slave_0 removed [ 480.288760][T16058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 480.302532][T16058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.314416][ T5144] Bluetooth: hci0: command tx timeout [ 480.332241][T16058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.344252][T16058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.488606][T16058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.518004][T16058] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.531556][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.538966][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.562848][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.570158][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.749848][T16058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.794594][T16058] veth0_vlan: entered promiscuous mode [ 480.805691][T16058] veth1_vlan: entered promiscuous mode [ 480.834138][T16058] veth0_macvtap: entered promiscuous mode [ 480.843449][T16058] veth1_macvtap: entered promiscuous mode [ 480.860781][T16058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.877405][T16058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.892231][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.901293][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.914774][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.924085][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.979391][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.988993][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.014707][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/02/24 06:23:07 executed programs: 4802 [ 481.022989][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.709672][ T29] hid_parser_main: 65150 callbacks suppressed [ 481.709696][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.724221][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.731788][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.742140][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.751824][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.764019][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.771653][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x3 [ 481.779975][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x1 [ 481.788925][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 481.797316][ T29] hid-generic 0005:16C0:5505.0009: unknown main item tag 0x0 [ 482.385838][ T5144] Bluetooth: hci0: command tx timeout [ 482.523824][ T29] hid-generic 0005:16C0:5505.0009: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 484.464566][ T5144] Bluetooth: hci0: command tx timeout 2026/02/24 06:23:12 executed programs: 5025 [ 486.544147][ T5144] Bluetooth: hci0: command tx timeout 2026/02/24 06:23:17 executed programs: 5274 [ 493.662582][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.671332][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.691242][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.699548][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.712449][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.848268][T17308] chnl_net:caif_netlink_parms(): no params data found [ 493.915569][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.955487][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.962985][T17308] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.971445][T17308] bridge_slave_0: entered allmulticast mode [ 493.979064][T17308] bridge_slave_0: entered promiscuous mode [ 493.997992][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.011595][T17308] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.019043][T17308] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.026358][T17308] bridge_slave_1: entered allmulticast mode [ 494.034316][T17308] bridge_slave_1: entered promiscuous mode [ 494.071688][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.089720][T17308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.101640][T17308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.129345][T17308] team0: Port device team_slave_0 added [ 494.137690][T17308] team0: Port device team_slave_1 added [ 494.161904][T17308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.169429][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.195915][T17308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.208423][T17308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.216970][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.244892][T17308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.273640][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.314827][T17308] hsr_slave_0: entered promiscuous mode [ 494.321762][T17308] hsr_slave_1: entered promiscuous mode [ 494.329959][T17308] debugfs: 'hsr0' already exists in 'hsr' [ 494.335934][T17308] Cannot create hsr debugfs directory [ 494.502615][ T35] bridge_slave_1: left allmulticast mode [ 494.509321][ T35] bridge_slave_1: left promiscuous mode [ 494.515370][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.527151][ T35] bridge_slave_0: left allmulticast mode [ 494.533204][ T35] bridge_slave_0: left promiscuous mode [ 494.539745][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.764215][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.777348][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.788545][ T35] bond0 (unregistering): Released all slaves [ 495.073828][ T35] hsr_slave_0: left promiscuous mode [ 495.083741][ T35] hsr_slave_1: left promiscuous mode [ 495.092711][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.100388][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.113787][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.121398][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.135394][ T35] veth1_macvtap: left promiscuous mode [ 495.140927][ T35] veth0_macvtap: left promiscuous mode [ 495.147014][ T35] veth1_vlan: left promiscuous mode [ 495.152325][ T35] veth0_vlan: left promiscuous mode [ 495.503598][ T35] team0 (unregistering): Port device team_slave_1 removed [ 495.525616][ T35] team0 (unregistering): Port device team_slave_0 removed [ 495.753575][ T51] Bluetooth: hci1: command tx timeout [ 495.971784][T17308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.985633][T17308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.996804][T17308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.009324][T17308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.123492][T17308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.151477][T17308] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.168051][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.175295][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.189199][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.196396][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.456983][T17308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.517785][T17308] veth0_vlan: entered promiscuous mode [ 496.535723][T17308] veth1_vlan: entered promiscuous mode [ 496.579717][T17308] veth0_macvtap: entered promiscuous mode [ 496.592985][T17308] veth1_macvtap: entered promiscuous mode [ 496.619435][T17308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.637519][T17308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.658834][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.677047][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.700826][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.727408][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.788113][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.812632][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:23:23 executed programs: 5402 [ 496.852080][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.862067][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.547957][ T5924] hid_parser_main: 65150 callbacks suppressed [ 497.547980][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.568167][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.576258][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.584783][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.592318][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.600134][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.608385][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x3 [ 497.616312][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x1 [ 497.625119][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.632712][ T5924] hid-generic 0005:16C0:5505.000A: unknown main item tag 0x0 [ 497.823420][ T51] Bluetooth: hci1: command tx timeout [ 498.304653][ T5924] hid-generic 0005:16C0:5505.000A: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 499.903275][ T51] Bluetooth: hci1: command tx timeout [ 501.587570][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.594227][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 2026/02/24 06:23:28 executed programs: 5620 [ 501.984652][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:23:33 executed programs: 5866 [ 509.725193][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.740095][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.750191][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.760576][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.768645][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 509.901466][T18594] chnl_net:caif_netlink_parms(): no params data found [ 509.958138][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.007371][T18594] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.016584][T18594] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.024125][T18594] bridge_slave_0: entered allmulticast mode [ 510.031105][T18594] bridge_slave_0: entered promiscuous mode [ 510.047710][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.062295][T18594] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.069914][T18594] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.077204][T18594] bridge_slave_1: entered allmulticast mode [ 510.084948][T18594] bridge_slave_1: entered promiscuous mode [ 510.111637][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.139257][T18594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.152191][T18594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.190331][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.206914][T18594] team0: Port device team_slave_0 added [ 510.214639][T18594] team0: Port device team_slave_1 added [ 510.239388][T18594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.249896][T18594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.276047][T18594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.289130][T18594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.296306][T18594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.322467][T18594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.386830][T18594] hsr_slave_0: entered promiscuous mode [ 510.395245][T18594] hsr_slave_1: entered promiscuous mode [ 510.462677][ T35] bridge_slave_1: left allmulticast mode [ 510.469250][ T35] bridge_slave_1: left promiscuous mode [ 510.475295][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.485478][ T35] bridge_slave_0: left allmulticast mode [ 510.491236][ T35] bridge_slave_0: left promiscuous mode [ 510.497647][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.661815][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.674059][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.684974][ T35] bond0 (unregistering): Released all slaves [ 511.003879][ T35] hsr_slave_0: left promiscuous mode [ 511.011266][ T35] hsr_slave_1: left promiscuous mode [ 511.017668][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.032367][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.042159][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.049974][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.064029][ T35] veth1_macvtap: left promiscuous mode [ 511.069664][ T35] veth0_macvtap: left promiscuous mode [ 511.077677][ T35] veth1_vlan: left promiscuous mode [ 511.083069][ T35] veth0_vlan: left promiscuous mode [ 511.387195][ T35] team0 (unregistering): Port device team_slave_1 removed [ 511.403019][ T35] team0 (unregistering): Port device team_slave_0 removed [ 511.776959][T18594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.794341][T18594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.810588][T18594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 511.830166][ T51] Bluetooth: hci0: command tx timeout [ 511.834737][T18594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 511.964759][T18594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.990040][T18594] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.006715][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.014072][T11075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.040377][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.047654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.318163][T18594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.388961][T18594] veth0_vlan: entered promiscuous mode [ 512.406097][T18594] veth1_vlan: entered promiscuous mode [ 512.449422][T18594] veth0_macvtap: entered promiscuous mode [ 512.464683][T18594] veth1_macvtap: entered promiscuous mode [ 512.491413][T18594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.510925][T18594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.529630][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.549833][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.571779][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.591662][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.652694][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.667386][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.711061][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.719966][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:23:38 executed programs: 6002 [ 513.381391][ T5924] hid_parser_main: 65150 callbacks suppressed [ 513.381417][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.399955][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.407742][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.415396][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.422835][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.431311][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.439589][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x3 [ 513.447355][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x1 [ 513.455889][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.470243][ T5924] hid-generic 0005:16C0:5505.000B: unknown main item tag 0x0 [ 513.903392][ T51] Bluetooth: hci0: command tx timeout [ 514.178119][ T5924] hid-generic 0005:16C0:5505.000B: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 515.987372][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:23:43 executed programs: 6217 [ 518.063526][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:23:48 executed programs: 6466 [ 525.537232][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.552992][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.563569][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.575839][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.587790][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.715047][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.765684][T19858] chnl_net:caif_netlink_parms(): no params data found [ 525.797842][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.875404][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.892283][T19858] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.900152][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.910867][T19858] bridge_slave_0: entered allmulticast mode [ 525.919334][T19858] bridge_slave_0: entered promiscuous mode [ 525.928651][T19858] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.936876][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.944538][T19858] bridge_slave_1: entered allmulticast mode [ 525.951775][T19858] bridge_slave_1: entered promiscuous mode [ 525.980252][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.006280][T19858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.019409][T19858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.047550][T19858] team0: Port device team_slave_0 added [ 526.056817][T19858] team0: Port device team_slave_1 added [ 526.088496][T19858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.096796][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.123188][T19858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.135910][T19858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.143722][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.170922][T19858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.247850][T19858] hsr_slave_0: entered promiscuous mode [ 526.254783][T19858] hsr_slave_1: entered promiscuous mode [ 526.260977][T19858] debugfs: 'hsr0' already exists in 'hsr' [ 526.267846][T19858] Cannot create hsr debugfs directory [ 526.314432][ T1148] bridge_slave_1: left allmulticast mode [ 526.320459][ T1148] bridge_slave_1: left promiscuous mode [ 526.326806][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.336237][ T1148] bridge_slave_0: left allmulticast mode [ 526.342315][ T1148] bridge_slave_0: left promiscuous mode [ 526.348803][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.500608][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.511669][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.522305][ T1148] bond0 (unregistering): Released all slaves [ 526.786442][ T1148] hsr_slave_0: left promiscuous mode [ 526.800619][ T1148] hsr_slave_1: left promiscuous mode [ 526.807386][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.815651][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.825293][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.833547][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.848162][ T1148] veth1_macvtap: left promiscuous mode [ 526.854162][ T1148] veth0_macvtap: left promiscuous mode [ 526.859766][ T1148] veth1_vlan: left promiscuous mode [ 526.865918][ T1148] veth0_vlan: left promiscuous mode [ 527.192760][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 527.217392][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 527.663629][ T51] Bluetooth: hci1: command tx timeout [ 527.687536][T19858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 527.706896][T19858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 527.716934][T19858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 527.748630][T19858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.882238][T19858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.908235][T19858] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.924610][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.932069][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.947713][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.955001][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.213805][T19858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.275297][T19858] veth0_vlan: entered promiscuous mode [ 528.290105][T19858] veth1_vlan: entered promiscuous mode [ 528.334483][T19858] veth0_macvtap: entered promiscuous mode [ 528.347286][T19858] veth1_macvtap: entered promiscuous mode [ 528.373728][T19858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.391495][T19858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.409865][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.438498][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.460067][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.491757][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.537263][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.558048][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.593295][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.601589][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:23:54 executed programs: 6602 [ 529.641919][ T5919] hid_parser_main: 65150 callbacks suppressed [ 529.641945][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.676704][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.689349][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.698323][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.706561][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.714469][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.738831][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x3 [ 529.746973][ T51] Bluetooth: hci1: command tx timeout [ 529.760461][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x1 [ 529.768734][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 529.778256][ T5919] hid-generic 0005:16C0:5505.000C: unknown main item tag 0x0 [ 530.591398][ T5919] hid-generic 0005:16C0:5505.000C: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 531.833285][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:23:59 executed programs: 6801 [ 533.904094][ T51] Bluetooth: hci1: command tx timeout 2026/02/24 06:24:04 executed programs: 7044 [ 541.866188][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.877358][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 541.898426][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.913716][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.928069][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.097011][T11075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.121443][T21151] chnl_net:caif_netlink_parms(): no params data found [ 542.197928][T11075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.214002][T21151] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.221431][T21151] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.231989][T21151] bridge_slave_0: entered allmulticast mode [ 542.240283][T21151] bridge_slave_0: entered promiscuous mode [ 542.247964][T21151] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.256199][T21151] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.263796][T21151] bridge_slave_1: entered allmulticast mode [ 542.271267][T21151] bridge_slave_1: entered promiscuous mode [ 542.287969][T11075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.321320][T21151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.333064][T21151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.373909][T11075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.390975][T21151] team0: Port device team_slave_0 added [ 542.400036][T21151] team0: Port device team_slave_1 added [ 542.425364][T21151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.432532][T21151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.459200][T21151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.472606][T21151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.480551][T21151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.507166][T21151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.572469][T21151] hsr_slave_0: entered promiscuous mode [ 542.580283][T21151] hsr_slave_1: entered promiscuous mode [ 542.706701][T11075] bridge_slave_1: left allmulticast mode [ 542.712658][T11075] bridge_slave_1: left promiscuous mode [ 542.718877][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.728926][T11075] bridge_slave_0: left allmulticast mode [ 542.735371][T11075] bridge_slave_0: left promiscuous mode [ 542.741229][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.900254][T11075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.911620][T11075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.922231][T11075] bond0 (unregistering): Released all slaves [ 543.206385][T11075] hsr_slave_0: left promiscuous mode [ 543.212559][T11075] hsr_slave_1: left promiscuous mode [ 543.227956][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.243282][T11075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.252142][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.261013][T11075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.281636][T11075] veth1_macvtap: left promiscuous mode [ 543.287821][T11075] veth0_macvtap: left promiscuous mode [ 543.293710][T11075] veth1_vlan: left promiscuous mode [ 543.299249][T11075] veth0_vlan: left promiscuous mode [ 543.597451][T11075] team0 (unregistering): Port device team_slave_1 removed [ 543.611403][T11075] team0 (unregistering): Port device team_slave_0 removed [ 543.942485][T21151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 543.963063][T21151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 543.975623][T21151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 543.993229][ T5144] Bluetooth: hci0: command tx timeout [ 544.018481][T21151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.155089][T21151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.183783][T21151] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.200422][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.207966][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.222882][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.230123][T11075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.435486][T21151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.482007][T21151] veth0_vlan: entered promiscuous mode [ 544.494828][T21151] veth1_vlan: entered promiscuous mode [ 544.524297][T21151] veth0_macvtap: entered promiscuous mode [ 544.534108][T21151] veth1_macvtap: entered promiscuous mode [ 544.552498][T21151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.566430][T21151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.581617][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.591098][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.605819][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.615261][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.670330][T11075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.685717][T11075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.710458][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/02/24 06:24:10 executed programs: 7202 [ 544.719182][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.390639][ T7300] hid_parser_main: 65150 callbacks suppressed [ 545.390664][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.405248][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.412964][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.421400][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.431787][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.440407][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.448995][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x3 [ 545.457084][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x1 [ 545.465966][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 545.473949][ T7300] hid-generic 0005:16C0:5505.000D: unknown main item tag 0x0 [ 546.063380][ T5144] Bluetooth: hci0: command tx timeout [ 546.156576][ T7300] hid-generic 0005:16C0:5505.000D: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 548.155340][ T5144] Bluetooth: hci0: command tx timeout 2026/02/24 06:24:15 executed programs: 7423 [ 550.225119][ T5144] Bluetooth: hci0: command tx timeout 2026/02/24 06:24:20 executed programs: 7672 [ 557.386953][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.414434][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.428044][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.441563][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.457369][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.571561][ T1148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.639716][ T1148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.659358][T22402] chnl_net:caif_netlink_parms(): no params data found [ 557.688345][ T1148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.740039][ T1148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.777552][T22402] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.784982][T22402] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.792248][T22402] bridge_slave_0: entered allmulticast mode [ 557.799829][T22402] bridge_slave_0: entered promiscuous mode [ 557.808947][T22402] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.816722][T22402] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.827932][T22402] bridge_slave_1: entered allmulticast mode [ 557.836578][T22402] bridge_slave_1: entered promiscuous mode [ 557.871385][T22402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.885023][T22402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.959136][T22402] team0: Port device team_slave_0 added [ 557.984818][T22402] team0: Port device team_slave_1 added [ 557.991985][ T1148] bridge_slave_1: left allmulticast mode [ 557.999593][ T1148] bridge_slave_1: left promiscuous mode [ 558.006169][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.015735][ T1148] bridge_slave_0: left allmulticast mode [ 558.021404][ T1148] bridge_slave_0: left promiscuous mode [ 558.027365][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.168115][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.178848][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.189276][ T1148] bond0 (unregistering): Released all slaves [ 558.222850][T22402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.230349][T22402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.256887][T22402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.270477][T22402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.278300][T22402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.305369][T22402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.409526][T22402] hsr_slave_0: entered promiscuous mode [ 558.425415][T22402] hsr_slave_1: entered promiscuous mode [ 558.432239][T22402] debugfs: 'hsr0' already exists in 'hsr' [ 558.438882][T22402] Cannot create hsr debugfs directory [ 558.559756][ T1148] hsr_slave_0: left promiscuous mode [ 558.566819][ T1148] hsr_slave_1: left promiscuous mode [ 558.573757][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.581276][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.592612][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.600480][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.618160][ T1148] veth1_macvtap: left promiscuous mode [ 558.624090][ T1148] veth0_macvtap: left promiscuous mode [ 558.629867][ T1148] veth1_vlan: left promiscuous mode [ 558.636574][ T1148] veth0_vlan: left promiscuous mode [ 558.918453][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 558.932536][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 559.503516][ T5144] Bluetooth: hci1: command tx timeout [ 559.581178][T22402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 559.597993][T22402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 559.627141][T22402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 559.638304][T22402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 559.743705][T22402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.769271][T22402] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.782271][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.789633][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.811187][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.818543][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.106967][T22402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.169286][T22402] veth0_vlan: entered promiscuous mode [ 560.185484][T22402] veth1_vlan: entered promiscuous mode [ 560.230677][T22402] veth0_macvtap: entered promiscuous mode [ 560.242086][T22402] veth1_macvtap: entered promiscuous mode [ 560.270080][T22402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.287386][T22402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.304917][ T5918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.323253][ T5918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.332208][ T5918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.355904][ T5918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.442765][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.459084][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.506145][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.514678][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:24:26 executed programs: 7802 [ 561.330106][T11042] hid_parser_main: 65150 callbacks suppressed [ 561.330128][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.349109][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.357371][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.365193][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.372723][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.380216][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.387934][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x3 [ 561.395509][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x1 [ 561.403283][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.410884][T11042] hid-generic 0005:16C0:5505.000E: unknown main item tag 0x0 [ 561.583626][ T5144] Bluetooth: hci1: command tx timeout [ 562.135143][T11042] hid-generic 0005:16C0:5505.000E: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 563.025559][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.032054][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.663312][ T5144] Bluetooth: hci1: command tx timeout 2026/02/24 06:24:31 executed programs: 8015 [ 565.743687][ T5144] Bluetooth: hci1: command tx timeout 2026/02/24 06:24:36 executed programs: 8264 [ 573.490539][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.506589][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.516676][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.524957][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.534555][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.644760][T11075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.704565][T23688] chnl_net:caif_netlink_parms(): no params data found [ 573.731907][T11075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.814017][T11075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.830161][T23688] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.837965][T23688] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.845713][T23688] bridge_slave_0: entered allmulticast mode [ 573.853036][T23688] bridge_slave_0: entered promiscuous mode [ 573.861160][T23688] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.868888][T23688] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.876661][T23688] bridge_slave_1: entered allmulticast mode [ 573.884269][T23688] bridge_slave_1: entered promiscuous mode [ 573.913275][T11075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.939383][T23688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.951377][T23688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.986906][T23688] team0: Port device team_slave_0 added [ 573.996004][T23688] team0: Port device team_slave_1 added [ 574.050215][T23688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.057642][T23688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.084922][T23688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.108781][T23688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.116528][T23688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.143019][T23688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.204584][T23688] hsr_slave_0: entered promiscuous mode [ 574.211210][T23688] hsr_slave_1: entered promiscuous mode [ 574.237952][T11075] bridge_slave_1: left allmulticast mode [ 574.243893][T11075] bridge_slave_1: left promiscuous mode [ 574.249593][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.259188][T11075] bridge_slave_0: left allmulticast mode [ 574.265158][T11075] bridge_slave_0: left promiscuous mode [ 574.270948][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.421361][T11075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.432190][T11075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.442330][T11075] bond0 (unregistering): Released all slaves [ 574.738308][T11075] hsr_slave_0: left promiscuous mode [ 574.745142][T11075] hsr_slave_1: left promiscuous mode [ 574.754456][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.762169][T11075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.777444][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.785780][T11075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.798714][T11075] veth1_macvtap: left promiscuous mode [ 574.804657][T11075] veth0_macvtap: left promiscuous mode [ 574.810352][T11075] veth1_vlan: left promiscuous mode [ 574.820324][T11075] veth0_vlan: left promiscuous mode [ 575.130902][T11075] team0 (unregistering): Port device team_slave_1 removed [ 575.148256][T11075] team0 (unregistering): Port device team_slave_0 removed [ 575.549695][T23688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 575.569639][T23688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.586341][ T51] Bluetooth: hci0: command tx timeout [ 575.601469][T23688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.615882][T23688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.746024][T23688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.775108][T23688] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.789972][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.797363][T11075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.829197][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.837239][T11075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.113757][T23688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.176583][T23688] veth0_vlan: entered promiscuous mode [ 576.190474][T23688] veth1_vlan: entered promiscuous mode [ 576.240712][T23688] veth0_macvtap: entered promiscuous mode [ 576.252862][T23688] veth1_macvtap: entered promiscuous mode [ 576.281016][T23688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.300230][T23688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.323076][ T5918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.342024][ T5918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.380787][ T5918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.391463][ T5918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.437497][ T5918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.452326][ T5918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/24 06:24:42 executed programs: 8402 [ 576.478862][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.488822][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.180070][ T10] hid_parser_main: 65150 callbacks suppressed [ 577.180093][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.199741][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.207397][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.214974][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.222409][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.230255][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.238022][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x3 [ 577.245482][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x1 [ 577.258369][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.274576][ T10] hid-generic 0005:16C0:5505.000F: unknown main item tag 0x0 [ 577.663471][ T51] Bluetooth: hci0: command tx timeout [ 577.972646][ T10] hid-generic 0005:16C0:5505.000F: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 579.744272][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:24:47 executed programs: 8623 [ 581.823363][ T51] Bluetooth: hci0: command tx timeout 2026/02/24 06:24:52 executed programs: 8875 [ 589.200052][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.215226][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.228637][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.235838][T23752] ================================================================== [ 589.235857][T23752] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 589.235895][T23752] Read of size 8 at addr ffff8880794500a8 by task khidpd_16c05505/23752 [ 589.235911][T23752] [ 589.235923][T23752] CPU: 0 UID: 0 PID: 23752 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) [ 589.235945][T23752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.235956][T23752] Call Trace: [ 589.235963][T23752] [ 589.235970][T23752] dump_stack_lvl+0xe8/0x150 [ 589.235994][T23752] print_report+0xba/0x230 [ 589.236013][T23752] ? __mutex_lock+0x812/0x1300 [ 589.236037][T23752] kasan_report+0x117/0x150 [ 589.236059][T23752] ? __mutex_lock+0x812/0x1300 [ 589.236085][T23752] __mutex_lock+0x812/0x1300 [ 589.236110][T23752] ? __mutex_lock+0x5ac/0x1300 [ 589.236134][T23752] ? l2cap_unregister_user+0x6a/0x1b0 [ 589.236160][T23752] ? __pfx___mutex_lock+0x10/0x10 [ 589.236186][T23752] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 589.236208][T23752] ? lockdep_hardirqs_on+0x7a/0x110 [ 589.236230][T23752] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 589.236252][T23752] l2cap_unregister_user+0x6a/0x1b0 [ 589.236277][T23752] hidp_session_thread+0x3cb/0x440 [ 589.236296][T23752] ? __pfx_hidp_session_thread+0x10/0x10 [ 589.236313][T23752] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 589.236333][T23752] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 589.236351][T23752] ? __kthread_parkme+0x7a/0x1f0 [ 589.236373][T23752] ? __kthread_parkme+0x19c/0x1f0 [ 589.236396][T23752] kthread+0x388/0x470 [ 589.236411][T23752] ? __pfx_hidp_session_thread+0x10/0x10 [ 589.236436][T23752] ? __pfx_kthread+0x10/0x10 [ 589.236451][T23752] ret_from_fork+0x51e/0xb90 [ 589.236473][T23752] ? __pfx_ret_from_fork+0x10/0x10 [ 589.236492][T23752] ? __switch_to+0xc7d/0x1450 [ 589.236510][T23752] ? __pfx_kthread+0x10/0x10 [ 589.236525][T23752] ret_from_fork_asm+0x1a/0x30 [ 589.236552][T23752] [ 589.236558][T23752] [ 589.254052][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.260338][T23752] The buggy address belongs to the physical page: [ 589.265354][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.272915][T23752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079453a80 pfn:0x79450 [ 589.464756][T23752] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 589.472062][T23752] raw: 00fff00000000000 ffffea0001ec6908 ffff8880b8640c40 0000000000000000 [ 589.481177][T23752] raw: ffff888079453a80 0000000000000000 00000000ffffffff 0000000000000000 [ 589.490207][T23752] page dumped because: kasan: bad access detected [ 589.497148][T23752] page_owner tracks the page as freed [ 589.502634][T23752] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 23688, tgid 23688 (syz-executor), ts 573462751735, free_ts 589230890294 [ 589.521141][T23752] post_alloc_hook+0x231/0x280 [ 589.526102][T23752] get_page_from_freelist+0x24dc/0x2580 [ 589.531848][T23752] __alloc_frozen_pages_noprof+0x18d/0x380 [ 589.537729][T23752] alloc_pages_mpol+0x232/0x4a0 [ 589.542761][T23752] ___kmalloc_large_node+0x4e/0x150 [ 589.548302][T23752] __kmalloc_large_node_noprof+0x18/0x90 [ 589.554113][T23752] __kmalloc_noprof+0x3e8/0x760 [ 589.559297][T23752] hci_alloc_dev_priv+0x28/0x2060 [ 589.564430][T23752] vhci_create_device+0x120/0x650 [ 589.569521][T23752] vhci_write+0x3ce/0x4a0 [ 589.573857][T23752] vfs_write+0x61d/0xb90 [ 589.578279][T23752] ksys_write+0x150/0x270 [ 589.582837][T23752] do_syscall_64+0x14d/0xf80 [ 589.587642][T23752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.593739][T23752] page last free pid 23688 tgid 23688 stack trace: [ 589.600425][T23752] __free_frozen_pages+0xc2b/0xdb0 [ 589.606074][T23752] bt_host_release+0x82/0x90 [ 589.611062][T23752] device_release+0x9e/0x1d0 [ 589.615657][T23752] kobject_put+0x228/0x560 [ 589.620164][T23752] vhci_release+0x15a/0x1a0 [ 589.624674][T23752] __fput+0x44f/0xa70 [ 589.628667][T23752] task_work_run+0x1d9/0x270 [ 589.633252][T23752] do_exit+0x69b/0x2320 [ 589.637533][T23752] do_group_exit+0x21b/0x2d0 [ 589.642206][T23752] get_signal+0x1284/0x1330 [ 589.646801][T23752] arch_do_signal_or_restart+0xbc/0x830 [ 589.652703][T23752] exit_to_user_mode_loop+0x86/0x480 [ 589.658181][T23752] do_syscall_64+0x32d/0xf80 [ 589.662873][T23752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.669029][T23752] [ 589.671346][T23752] Memory state around the buggy address: [ 589.676964][T23752] ffff88807944ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 589.685190][T23752] ffff888079450000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 589.693607][T23752] >ffff888079450080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 589.702214][T23752] ^ [ 589.707609][T23752] ffff888079450100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 589.715674][T23752] ffff888079450180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 589.723820][T23752] ================================================================== [ 589.732988][T23752] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 589.740297][T23752] CPU: 0 UID: 0 PID: 23752 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) [ 589.750273][T23752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 589.760515][T23752] Call Trace: [ 589.763816][T23752] [ 589.766764][T23752] vpanic+0x56c/0xa60 [ 589.770757][T23752] ? __pfx_vpanic+0x10/0x10 [ 589.775532][T23752] panic+0xc5/0xd0 [ 589.779261][T23752] ? __pfx_panic+0x10/0x10 [ 589.784032][T23752] ? __mutex_lock+0x812/0x1300 [ 589.788897][T23752] ? __mutex_lock+0x812/0x1300 [ 589.793860][T23752] check_panic_on_warn+0x89/0xb0 [ 589.798979][T23752] ? __mutex_lock+0x812/0x1300 [ 589.804009][T23752] end_report+0x73/0x180 [ 589.808517][T23752] ? __mutex_lock+0x812/0x1300 [ 589.813565][T23752] kasan_report+0x128/0x150 [ 589.818376][T23752] ? __mutex_lock+0x812/0x1300 [ 589.823354][T23752] __mutex_lock+0x812/0x1300 [ 589.828156][T23752] ? __mutex_lock+0x5ac/0x1300 [ 589.832953][T23752] ? l2cap_unregister_user+0x6a/0x1b0 [ 589.838339][T23752] ? __pfx___mutex_lock+0x10/0x10 [ 589.843376][T23752] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 589.849370][T23752] ? lockdep_hardirqs_on+0x7a/0x110 [ 589.854836][T23752] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 589.860920][T23752] l2cap_unregister_user+0x6a/0x1b0 [ 589.866303][T23752] hidp_session_thread+0x3cb/0x440 [ 589.871416][T23752] ? __pfx_hidp_session_thread+0x10/0x10 [ 589.877148][T23752] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 589.883834][T23752] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 589.890174][T23752] ? __kthread_parkme+0x7a/0x1f0 [ 589.895392][T23752] ? __kthread_parkme+0x19c/0x1f0 [ 589.900772][T23752] kthread+0x388/0x470 [ 589.904860][T23752] ? __pfx_hidp_session_thread+0x10/0x10 [ 589.910775][T23752] ? __pfx_kthread+0x10/0x10 [ 589.915567][T23752] ret_from_fork+0x51e/0xb90 [ 589.920166][T23752] ? __pfx_ret_from_fork+0x10/0x10 [ 589.925365][T23752] ? __switch_to+0xc7d/0x1450 [ 589.930140][T23752] ? __pfx_kthread+0x10/0x10 [ 589.934727][T23752] ret_from_fork_asm+0x1a/0x30 [ 589.939550][T23752] [ 589.943062][T23752] Kernel Offset: disabled [ 589.947598][T23752] Rebooting in 86400 seconds..