syzkaller login: [ 91.903274][ T56] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:48855' (ED25519) to the list of known hosts. 2025/10/13 00:51:16 parsed 1 programs [ 372.930796][ T5360] cgroup: Unknown subsys name 'net' [ 372.996896][ T5360] cgroup: Unknown subsys name 'cpuset' [ 373.004663][ T5360] cgroup: Unknown subsys name 'rlimit' [ 374.982341][ T5360] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 378.689951][ T5370] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 379.157552][ T5386] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.161449][ T5386] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.166532][ T5386] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.170308][ T5386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.174364][ T5386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.078077][ T5432] chnl_net:caif_netlink_parms(): no params data found [ 383.146214][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.149977][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.153504][ T5432] bridge_slave_0: entered allmulticast mode [ 383.157407][ T5432] bridge_slave_0: entered promiscuous mode [ 383.164154][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.167498][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.170721][ T5432] bridge_slave_1: entered allmulticast mode [ 383.175153][ T5432] bridge_slave_1: entered promiscuous mode [ 383.199857][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.206456][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.231709][ T5432] team0: Port device team_slave_0 added [ 383.236756][ T5432] team0: Port device team_slave_1 added [ 383.261111][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.264833][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.276292][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.283508][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.286552][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.297761][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.335296][ T5432] hsr_slave_0: entered promiscuous mode [ 383.338862][ T5432] hsr_slave_1: entered promiscuous mode [ 383.486890][ T5432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.496571][ T5432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.504423][ T5432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.511300][ T5432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.540376][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.543917][ T5432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.548155][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.551474][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.619615][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.636528][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.640943][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.655176][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.665159][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.668192][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.678070][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.681119][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.737272][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.740106][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.880862][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.921209][ T5432] veth0_vlan: entered promiscuous mode [ 383.931404][ T5432] veth1_vlan: entered promiscuous mode [ 383.960666][ T5432] veth0_macvtap: entered promiscuous mode [ 383.969821][ T5432] veth1_macvtap: entered promiscuous mode [ 383.988010][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.999500][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.011159][ T1045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.022751][ T1045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.037225][ T1045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.054854][ T1045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.218789][ T1045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.270397][ T1045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.325080][ T1045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.401909][ T1045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.617236][ T5342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.620464][ T5342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.684717][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.688233][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/13 00:51:31 executed programs: 0 [ 385.681615][ T4670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.687874][ T4670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.691365][ T4670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.714238][ T4670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.718870][ T4670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.116088][ T5473] chnl_net:caif_netlink_parms(): no params data found [ 386.180111][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.183941][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.187312][ T5473] bridge_slave_0: entered allmulticast mode [ 386.190937][ T5473] bridge_slave_0: entered promiscuous mode [ 386.213348][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.216485][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.219609][ T5473] bridge_slave_1: entered allmulticast mode [ 386.237839][ T5473] bridge_slave_1: entered promiscuous mode [ 386.288018][ T5473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.305036][ T5473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.350517][ T5473] team0: Port device team_slave_0 added [ 386.366117][ T5473] team0: Port device team_slave_1 added [ 386.403290][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.406571][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.433253][ T5473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.443639][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.446785][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.473427][ T5473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.576189][ T5473] hsr_slave_0: entered promiscuous mode [ 386.579581][ T5473] hsr_slave_1: entered promiscuous mode [ 386.585604][ T5473] debugfs: 'hsr0' already exists in 'hsr' [ 386.588190][ T5473] Cannot create hsr debugfs directory [ 386.669768][ T1045] bridge_slave_1: left allmulticast mode [ 386.672648][ T1045] bridge_slave_1: left promiscuous mode [ 386.685479][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.699549][ T1045] bridge_slave_0: left allmulticast mode [ 386.702061][ T1045] bridge_slave_0: left promiscuous mode [ 386.713600][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.044328][ T1045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.050718][ T1045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.056704][ T1045] bond0 (unregistering): Released all slaves [ 387.143469][ T1045] hsr_slave_0: left promiscuous mode [ 387.146755][ T1045] hsr_slave_1: left promiscuous mode [ 387.154197][ T1045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.157544][ T1045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.174209][ T1045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.177523][ T1045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.202456][ T1045] veth1_macvtap: left promiscuous mode [ 387.214966][ T1045] veth0_macvtap: left promiscuous mode [ 387.217364][ T1045] veth1_vlan: left promiscuous mode [ 387.219630][ T1045] veth0_vlan: left promiscuous mode [ 387.686198][ T1045] team0 (unregistering): Port device team_slave_1 removed [ 387.705296][ T1045] team0 (unregistering): Port device team_slave_0 removed [ 387.734954][ T4670] Bluetooth: hci0: command tx timeout [ 388.855747][ T5473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.875906][ T5473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.899473][ T5473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.937397][ T5473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.122048][ T5473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.151759][ T5473] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.175983][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.179286][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.194003][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.196930][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.475510][ T5473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.511977][ T5473] veth0_vlan: entered promiscuous mode [ 389.520663][ T5473] veth1_vlan: entered promiscuous mode [ 389.548933][ T5473] veth0_macvtap: entered promiscuous mode [ 389.555411][ T5473] veth1_macvtap: entered promiscuous mode [ 389.570574][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.583919][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.595694][ T5342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.604757][ T5342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.608819][ T5342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.612555][ T5342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.674786][ T5449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.677886][ T5449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.724478][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.727846][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.819870][ T4670] Bluetooth: hci0: command tx timeout 2025/10/13 00:51:36 executed programs: 28 [ 391.893157][ T4670] Bluetooth: hci0: command tx timeout [ 393.973299][ T4670] Bluetooth: hci0: command tx timeout 2025/10/13 00:51:42 executed programs: 247 2025/10/13 00:51:47 executed programs: 487 [ 401.585075][ T6568] [ 401.586336][ T6568] ====================================================== [ 401.589539][ T6568] WARNING: possible circular locking dependency detected [ 401.592595][ T6568] syzkaller #0 Not tainted [ 401.595566][ T6568] ------------------------------------------------------ [ 401.598546][ T6568] syz.0.544/6568 is trying to acquire lock: [ 401.601125][ T6568] ffff888036c0d3c0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0 [ 401.606070][ T6568] [ 401.606070][ T6568] but task is already holding lock: [ 401.609292][ T6568] ffff888036c0bf98 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 401.613206][ T6568] [ 401.613206][ T6568] which lock already depends on the new lock. [ 401.613206][ T6568] [ 401.617572][ T6568] [ 401.617572][ T6568] the existing dependency chain (in reverse order) is: [ 401.621295][ T6568] [ 401.621295][ T6568] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 401.624301][ T6568] lock_acquire+0x120/0x360 [ 401.626324][ T6568] lock_sock_nested+0x48/0x100 [ 401.628471][ T6568] smc_listen_out+0x109/0x3e0 [ 401.630555][ T6568] process_scheduled_works+0xae1/0x17b0 [ 401.632878][ T6568] worker_thread+0x8a0/0xda0 [ 401.634948][ T6568] kthread+0x711/0x8a0 [ 401.636864][ T6568] ret_from_fork+0x4bc/0x870 [ 401.639113][ T6568] ret_from_fork_asm+0x1a/0x30 [ 401.641482][ T6568] [ 401.641482][ T6568] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 401.645739][ T6568] validate_chain+0xb9b/0x2140 [ 401.648121][ T6568] __lock_acquire+0xab9/0xd20 [ 401.650450][ T6568] lock_acquire+0x120/0x360 [ 401.652753][ T6568] __flush_work+0x6b8/0xbc0 [ 401.655014][ T6568] __cancel_work_sync+0xbe/0x110 [ 401.657347][ T6568] smc_clcsock_release+0x60/0xf0 [ 401.659694][ T6568] __smc_release+0x66b/0x7e0 [ 401.661898][ T6568] smc_close_non_accepted+0xd5/0x1f0 [ 401.664484][ T6568] smc_close_active+0xb68/0xf10 [ 401.666746][ T6568] __smc_release+0x8d/0x7e0 [ 401.668883][ T6568] smc_release+0x2ce/0x560 [ 401.670982][ T6568] sock_close+0xc3/0x240 [ 401.673031][ T6568] __fput+0x44c/0xa70 [ 401.675045][ T6568] task_work_run+0x1d4/0x260 [ 401.677261][ T6568] exit_to_user_mode_loop+0xe9/0x130 [ 401.679712][ T6568] do_syscall_64+0x2bd/0xfa0 [ 401.681838][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.684542][ T6568] [ 401.684542][ T6568] other info that might help us debug this: [ 401.684542][ T6568] [ 401.689008][ T6568] Possible unsafe locking scenario: [ 401.689008][ T6568] [ 401.692320][ T6568] CPU0 CPU1 [ 401.694723][ T6568] ---- ---- [ 401.697031][ T6568] lock(sk_lock-AF_SMC/1); [ 401.698986][ T6568] lock((work_completion)(&new_smc->smc_listen_work)); [ 401.703019][ T6568] lock(sk_lock-AF_SMC/1); [ 401.706142][ T6568] lock((work_completion)(&new_smc->smc_listen_work)); [ 401.709111][ T6568] [ 401.709111][ T6568] *** DEADLOCK *** [ 401.709111][ T6568] [ 401.712592][ T6568] 3 locks held by syz.0.544/6568: [ 401.714880][ T6568] #0: ffff88801f57b008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 401.719289][ T6568] #1: ffff888036c0bf98 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 401.723192][ T6568] #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0 [ 401.727201][ T6568] [ 401.727201][ T6568] stack backtrace: [ 401.729811][ T6568] CPU: 0 UID: 0 PID: 6568 Comm: syz.0.544 Not tainted syzkaller #0 PREEMPT(full) [ 401.729824][ T6568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 401.729831][ T6568] Call Trace: [ 401.729839][ T6568] [ 401.729844][ T6568] dump_stack_lvl+0x189/0x250 [ 401.729859][ T6568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.729869][ T6568] ? __pfx__printk+0x10/0x10 [ 401.729880][ T6568] ? print_lock_name+0xde/0x100 [ 401.729890][ T6568] print_circular_bug+0x2ee/0x310 [ 401.729905][ T6568] check_noncircular+0x134/0x160 [ 401.729921][ T6568] validate_chain+0xb9b/0x2140 [ 401.729934][ T6568] ? do_raw_spin_lock+0x121/0x290 [ 401.729945][ T6568] ? look_up_lock_class+0x74/0x170 [ 401.729959][ T6568] ? register_lock_class+0x51/0x320 [ 401.729973][ T6568] __lock_acquire+0xab9/0xd20 [ 401.729985][ T6568] ? __flush_work+0xd2/0xbc0 [ 401.729993][ T6568] lock_acquire+0x120/0x360 [ 401.730004][ T6568] ? __flush_work+0xd2/0xbc0 [ 401.730013][ T6568] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.730027][ T6568] ? __flush_work+0xd2/0xbc0 [ 401.730035][ T6568] __flush_work+0x6b8/0xbc0 [ 401.730044][ T6568] ? __flush_work+0xd2/0xbc0 [ 401.730052][ T6568] ? __flush_work+0xd2/0xbc0 [ 401.730061][ T6568] ? __pfx___flush_work+0x10/0x10 [ 401.730070][ T6568] ? __pfx_wq_barrier_func+0x10/0x10 [ 401.730093][ T6568] ? __pfx___cancel_work+0x10/0x10 [ 401.730101][ T6568] ? __local_bh_enable_ip+0x12d/0x1c0 [ 401.730116][ T6568] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.730128][ T6568] ? __local_bh_enable_ip+0x12d/0x1c0 [ 401.730141][ T6568] __cancel_work_sync+0xbe/0x110 [ 401.730151][ T6568] smc_clcsock_release+0x60/0xf0 [ 401.730164][ T6568] __smc_release+0x66b/0x7e0 [ 401.730178][ T6568] ? do_raw_spin_unlock+0x4d/0x240 [ 401.730189][ T6568] smc_close_non_accepted+0xd5/0x1f0 [ 401.730204][ T6568] smc_close_active+0xb68/0xf10 [ 401.730215][ T6568] ? __pfx_sock_def_readable+0x10/0x10 [ 401.730225][ T6568] __smc_release+0x8d/0x7e0 [ 401.730237][ T6568] ? do_raw_spin_unlock+0x4d/0x240 [ 401.730247][ T6568] smc_release+0x2ce/0x560 [ 401.730285][ T6568] sock_close+0xc3/0x240 [ 401.730295][ T6568] ? __pfx_sock_close+0x10/0x10 [ 401.730304][ T6568] __fput+0x44c/0xa70 [ 401.730323][ T6568] task_work_run+0x1d4/0x260 [ 401.730335][ T6568] ? __pfx_task_work_run+0x10/0x10 [ 401.730352][ T6568] ? exit_to_user_mode_loop+0x40/0x130 [ 401.730364][ T6568] exit_to_user_mode_loop+0xe9/0x130 [ 401.730376][ T6568] do_syscall_64+0x2bd/0xfa0 [ 401.730386][ T6568] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.730399][ T6568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.730407][ T6568] ? clear_bhb_loop+0x60/0xb0 [ 401.730418][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.730427][ T6568] RIP: 0033:0x7ff9de58eec9 [ 401.730437][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.730445][ T6568] RSP: 002b:00007ffe250d2148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 401.730457][ T6568] RAX: 0000000000000000 RBX: 0000000000061ffe RCX: 00007ff9de58eec9 [ 401.730465][ T6568] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 401.730470][ T6568] RBP: 00007ff9de7e7da0 R08: 0000000000000001 R09: 00000007250d243f [ 401.730477][ T6568] R10: 0000001b32020000 R11: 0000000000000246 R12: 00007ff9de7e5fac [ 401.730483][ T6568] R13: 00007ff9de7e5fa0 R14: ffffffffffffffff R15: 00007ffe250d2260 [ 401.730497][ T6568] [ 403.277162][ T5386] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.280498][ T5386] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.284064][ T5386] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.287521][ T5386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.290953][ T5386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.400386][ T5449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.410904][ T6716] chnl_net:caif_netlink_parms(): no params data found [ 403.421394][ T5449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.447529][ T5449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.466082][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.469421][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.472649][ T6716] bridge_slave_0: entered allmulticast mode [ 403.479200][ T6716] bridge_slave_0: entered promiscuous mode [ 403.486870][ T5449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.496503][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.499597][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.503808][ T6716] bridge_slave_1: entered allmulticast mode [ 403.507215][ T6716] bridge_slave_1: entered promiscuous mode [ 403.520580][ T6716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.554555][ T6716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.605342][ T6716] team0: Port device team_slave_0 added [ 403.608907][ T6716] team0: Port device team_slave_1 added [ 403.624064][ T5449] bridge_slave_1: left allmulticast mode [ 403.626563][ T5449] bridge_slave_1: left promiscuous mode [ 403.629238][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.636414][ T5449] bridge_slave_0: left allmulticast mode [ 403.639053][ T5449] bridge_slave_0: left promiscuous mode [ 403.641568][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.770031][ T5449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.774797][ T5449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.786031][ T5449] bond0 (unregistering): Released all slaves [ 403.825173][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.828568][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.848530][ T6716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.870426][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.875984][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.888494][ T6716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.948015][ T5449] hsr_slave_0: left promiscuous mode [ 403.953992][ T5449] hsr_slave_1: left promiscuous mode [ 403.956734][ T5449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.959863][ T5449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.974937][ T5449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.984171][ T5449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.994816][ T5449] veth1_macvtap: left promiscuous mode [ 403.997241][ T5449] veth0_macvtap: left promiscuous mode [ 403.999721][ T5449] veth1_vlan: left promiscuous mode [ 404.002092][ T5449] veth0_vlan: left promiscuous mode [ 404.195088][ T5449] team0 (unregistering): Port device team_slave_1 removed [ 404.208333][ T5449] team0 (unregistering): Port device team_slave_0 removed [ 404.277938][ T6716] hsr_slave_0: entered promiscuous mode [ 404.281031][ T6716] hsr_slave_1: entered promiscuous mode [ 404.628502][ T6716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.644428][ T6716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.663990][ T6716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.674444][ T6716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.765528][ T6716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.786280][ T6716] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.806346][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.809641][ T5449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.825846][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.829094][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.861778][ T6716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.047853][ T6716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.097387][ T6716] veth0_vlan: entered promiscuous mode [ 405.117153][ T6716] veth1_vlan: entered promiscuous mode [ 405.148932][ T6716] veth0_macvtap: entered promiscuous mode [ 405.165822][ T6716] veth1_macvtap: entered promiscuous mode [ 405.186586][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.199833][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.216819][ T1086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.220622][ T1086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.233725][ T1086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.255656][ T1086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.279140][ T6716] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 405.309124][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.312832][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.322716][ T6716] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 405.335954][ T5386] Bluetooth: hci0: command tx timeout [ 405.343434][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.346884][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/13 00:51:52 executed programs: 621 [ 407.413242][ T5386] Bluetooth: hci0: command tx timeout [ 409.493349][ T5386] Bluetooth: hci0: command tx timeout 2025/10/13 00:51:57 executed programs: 888 [ 411.573080][ T5386] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 00:51:48 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff33a4e60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99d27650 RSP=ffffc9000d3b6f70 R8 =ffff888033b88237 R9 =1ffff11006771046 R10=dffffc0000000000 R11=ffffffff851d9f40 R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99d273c0 R15=0000000000000000 RIP=ffffffff851d9fb7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555561586500 ffffffff 00c00000 GS =0000 ffff88808d301000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9de78b230 CR3=0000000055961000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de61305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de61313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de7b74a8 00007ff9de7b74a0 00007ff9de7b7498 00007ff9de7b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9df31d100 00007ff9de7b7460 00007ff9de7b7478 00007ff9de7b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9de7b74b8 00007ff9de7b74b0 00007ff9de7b74a8 00007ff9de7b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000