[ 71.227238][ T42] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:15662' (ED25519) to the list of known hosts. [ 109.153752][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 109.153772][ T43] audit: type=1400 audit(1790794852.660:138): avc: denied { execute } for pid=5765 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 109.154300][ T43] audit: type=1400 audit(1790794852.660:139): avc: denied { execute_no_trans } for pid=5765 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/09/30 19:00:53 parsed 1 programs 2026/09/30 19:00:53 serving rpc on tcp://38591 [ 110.465073][ T43] audit: type=1400 audit(1790794853.970:140): avc: denied { node_bind } for pid=5765 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 113.024307][ T43] audit: type=1400 audit(1790794856.530:141): avc: denied { mounton } for pid=5775 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 113.035006][ T43] audit: type=1400 audit(1790794856.540:142): avc: denied { mount } for pid=5775 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.038018][ T5775] cgroup: Unknown subsys name 'net' [ 113.039184][ T43] audit: type=1400 audit(1790794856.550:143): avc: denied { unmount } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.158964][ T5775] cgroup: Unknown subsys name 'cpuset' [ 113.162177][ T5775] cgroup: Unknown subsys name 'rlimit' [ 113.329692][ T43] audit: type=1400 audit(1790794856.840:144): avc: denied { setattr } for pid=5775 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.332027][ T43] audit: type=1400 audit(1790794856.840:145): avc: denied { create } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.332067][ T43] audit: type=1400 audit(1790794856.840:146): avc: denied { write } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.332099][ T43] audit: type=1400 audit(1790794856.840:147): avc: denied { read } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.391894][ T5778] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 114.263384][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.550448][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 116.550461][ T43] audit: type=1400 audit(1790794860.060:158): avc: denied { execmem } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.604580][ T43] audit: type=1400 audit(1790794860.110:159): avc: denied { read } for pid=5782 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 116.607597][ T43] audit: type=1400 audit(1790794860.120:160): avc: denied { open } for pid=5782 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 116.607639][ T43] audit: type=1400 audit(1790794860.120:161): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 116.679214][ T43] audit: type=1400 audit(1790794860.190:162): avc: denied { mount } for pid=5782 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.680699][ T43] audit: type=1400 audit(1790794860.190:163): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzkaller.qdnQt0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.681629][ T43] audit: type=1400 audit(1790794860.190:164): avc: denied { mount } for pid=5782 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.683639][ T43] audit: type=1400 audit(1790794860.190:165): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzkaller.qdnQt0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 116.684294][ T43] audit: type=1400 audit(1790794860.190:166): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/syzkaller.qdnQt0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 116.687141][ T43] audit: type=1400 audit(1790794860.200:167): avc: denied { unmount } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.745723][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.632085][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.632877][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.633712][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.634339][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.634623][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.350448][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.350525][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.350619][ T5823] bridge_slave_0: entered allmulticast mode [ 118.352494][ T5823] bridge_slave_0: entered promiscuous mode [ 118.355221][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.355320][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.355423][ T5823] bridge_slave_1: entered allmulticast mode [ 118.356241][ T5823] bridge_slave_1: entered promiscuous mode [ 118.370102][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.371517][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.383084][ T5823] team0: Port device team_slave_0 added [ 118.384319][ T5823] team0: Port device team_slave_1 added [ 118.396580][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.396590][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.396602][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.398069][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.398077][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.398089][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.420663][ T5823] hsr_slave_0: entered promiscuous mode [ 118.421346][ T5823] hsr_slave_1: entered promiscuous mode [ 118.546617][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.553356][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.554124][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.557351][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.558274][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.561117][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.562407][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.567458][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.581743][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.581791][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.582198][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.582403][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.615716][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.623318][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.624212][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.641505][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.647752][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.647800][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.652590][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.652672][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.919955][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.955891][ T5823] veth0_vlan: entered promiscuous mode [ 118.962955][ T5823] veth1_vlan: entered promiscuous mode [ 118.988291][ T5823] veth0_macvtap: entered promiscuous mode [ 118.991654][ T5823] veth1_macvtap: entered promiscuous mode [ 119.008556][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.014295][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.056781][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.057092][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.057934][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.057972][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.118195][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.184368][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.257521][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.330277][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.464467][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.464489][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.499622][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.499637][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/30 19:01:03 executed programs: 0 [ 120.269367][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.270480][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.271905][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.273645][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.274167][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.601664][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.601740][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.602221][ T5895] bridge_slave_0: entered allmulticast mode [ 120.603626][ T5895] bridge_slave_0: entered promiscuous mode [ 120.606168][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.606224][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.606279][ T5895] bridge_slave_1: entered allmulticast mode [ 120.607292][ T5895] bridge_slave_1: entered promiscuous mode [ 120.628212][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.630137][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.648743][ T5895] team0: Port device team_slave_0 added [ 120.651034][ T5895] team0: Port device team_slave_1 added [ 120.673706][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.673723][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.673743][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.675578][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.675588][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.675601][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.697130][ T5895] hsr_slave_0: entered promiscuous mode [ 120.697574][ T5895] hsr_slave_1: entered promiscuous mode [ 120.697864][ T5895] debugfs: 'hsr0' already exists in 'hsr' [ 120.697927][ T5895] Cannot create hsr debugfs directory [ 122.345583][ T67] Bluetooth: hci0: command tx timeout [ 122.366723][ T12] bridge_slave_1: left allmulticast mode [ 122.366753][ T12] bridge_slave_1: left promiscuous mode [ 122.367312][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.370460][ T12] bridge_slave_0: left allmulticast mode [ 122.370478][ T12] bridge_slave_0: left promiscuous mode [ 122.370591][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.422626][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 122.422644][ T43] audit: type=1400 audit(1790794865.930:188): avc: denied { write } for pid=5913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.422743][ T43] audit: type=1400 audit(1790794865.930:189): avc: denied { create } for pid=5913 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.423146][ T43] audit: type=1400 audit(1790794865.930:190): avc: denied { write } for pid=5913 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=1947 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.423576][ T43] audit: type=1400 audit(1790794865.930:191): avc: denied { append } for pid=5913 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=1947 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.498537][ T43] audit: type=1400 audit(1790794865.990:192): avc: denied { write } for pid=5917 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.498581][ T43] audit: type=1400 audit(1790794866.010:193): avc: denied { unlink } for pid=5917 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1947 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 122.520424][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.522380][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.523227][ T12] bond0 (unregistering): Released all slaves [ 122.546418][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 122.604854][ T43] audit: type=1400 audit(1790794866.110:194): avc: denied { write } for pid=5920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.640040][ T12] hsr_slave_0: left promiscuous mode [ 122.640732][ T12] hsr_slave_1: left promiscuous mode [ 122.641234][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.641250][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.641790][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.641800][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.651657][ T12] veth1_macvtap: left promiscuous mode [ 122.651699][ T12] veth0_macvtap: left promiscuous mode [ 122.651776][ T12] veth1_vlan: left promiscuous mode [ 122.651837][ T12] veth0_vlan: left promiscuous mode [ 122.665072][ T43] audit: type=1400 audit(1790794866.170:195): avc: denied { write } for pid=5923 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.845020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 122.863015][ T12] team0 (unregistering): Port device team_slave_0 removed [ 122.958534][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 123.086760][ T43] audit: type=1400 audit(1790794866.600:196): avc: denied { write } for pid=5926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.147632][ T43] audit: type=1400 audit(1790794866.660:197): avc: denied { write } for pid=5929 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.167347][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.171355][ T5895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.172198][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.174477][ T5895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.176146][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.197314][ T5895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.197931][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.201470][ T5895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.248590][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.259443][ T5895] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.263680][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.263761][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.270833][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.270910][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.730812][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.763136][ T5895] veth0_vlan: entered promiscuous mode [ 123.766462][ T5895] veth1_vlan: entered promiscuous mode [ 123.779637][ T5895] veth0_macvtap: entered promiscuous mode [ 123.782125][ T5895] veth1_macvtap: entered promiscuous mode [ 123.790219][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.799788][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.857626][ T5614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857653][ T5614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857671][ T5614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857688][ T5614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.886079][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.886099][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.904168][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.904180][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.425240][ T67] Bluetooth: hci0: command tx timeout [ 126.505096][ T67] Bluetooth: hci0: command tx timeout 2026/09/30 19:01:10 executed programs: 3 [ 128.585349][ T67] Bluetooth: hci0: command tx timeout [ 130.746153][ C0] [ 130.747277][ C0] ================================ [ 130.749437][ C0] WARNING: inconsistent lock state [ 130.751558][ C0] syzkaller #0 Not tainted [ 130.753432][ C0] -------------------------------- [ 130.755545][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 130.758348][ C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 130.760951][ C0] ffff88802ba76260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x168/0x280 [ 130.764760][ C0] {SOFTIRQ-ON-W} state was registered at: [ 130.767111][ C0] lock_acquire+0x1d1/0x380 [ 130.769055][ C0] lock_sock_nested+0x41/0xf0 [ 130.771042][ C0] x25_bind+0x221/0x5c0 [ 130.772849][ C0] __sys_bind+0x1a9/0x260 [ 130.774734][ C0] __x64_sys_bind+0x72/0xb0 [ 130.776689][ C0] do_syscall_64+0x123/0x790 [ 130.778608][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.781092][ C0] irq event stamp: 356812 [ 130.782885][ C0] hardirqs last enabled at (356812): [] __local_bh_enable_ip+0xa5/0x120 [ 130.787026][ C0] hardirqs last disabled at (356811): [] __local_bh_enable_ip+0xce/0x120 [ 130.791104][ C0] softirqs last enabled at (356746): [] run_ksoftirqd+0x38/0x60 [ 130.794929][ C0] softirqs last disabled at (356753): [] run_ksoftirqd+0x38/0x60 [ 130.798706][ C0] [ 130.798706][ C0] other info that might help us debug this: [ 130.801992][ C0] Possible unsafe locking scenario: [ 130.801992][ C0] [ 130.805029][ C0] CPU0 [ 130.806458][ C0] ---- [ 130.807868][ C0] lock(sk_lock-AF_X25); [ 130.809684][ C0] [ 130.811170][ C0] lock(sk_lock-AF_X25); [ 130.813073][ C0] [ 130.813073][ C0] *** DEADLOCK *** [ 130.813073][ C0] [ 130.816356][ C0] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 130.818934][ C0] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x25/0x1a0 [ 130.823045][ C0] [ 130.823045][ C0] stack backtrace: [ 130.825476][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 130.829298][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.833640][ C0] Call Trace: [ 130.835062][ C0] [ 130.836375][ C0] dump_stack_lvl+0x100/0x190 [ 130.838371][ C0] print_usage_bug.part.0+0x258/0x340 [ 130.840654][ C0] mark_lock+0x956/0x1020 [ 130.842524][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 130.845308][ C0] __lock_acquire+0x7f1/0x1f40 [ 130.847360][ C0] lock_acquire+0x1d1/0x380 [ 130.849302][ C0] ? x25_kill_by_neigh+0x168/0x280 [ 130.851475][ C0] ? find_held_lock+0x2b/0x80 [ 130.853495][ C0] ? x25_kill_by_neigh+0x15e/0x280 [ 130.855659][ C0] lock_sock_nested+0x41/0xf0 [ 130.857688][ C0] ? x25_kill_by_neigh+0x168/0x280 [ 130.859857][ C0] x25_kill_by_neigh+0x168/0x280 [ 130.861953][ C0] x25_lapb_receive_frame+0x4b1/0x1000 [ 130.864236][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 130.866799][ C0] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 130.869275][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 130.871895][ C0] ? netif_receive_skb_core+0x25/0x1a0 [ 130.874213][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.876727][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.878929][ C0] netif_receive_skb_core+0x5a/0x1a0 [ 130.881199][ C0] lapbeth_napi_poll+0x42/0xc0 [ 130.883216][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 130.885516][ C0] net_rx_action+0xa40/0xf20 [ 130.887481][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 130.889628][ C0] ? finish_task_switch.isra.0+0x210/0x10d0 [ 130.892105][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.894311][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 130.896518][ C0] ? sched_clock+0x3a/0x60 [ 130.898400][ C0] ? sched_clock_cpu+0x6c/0x570 [ 130.900485][ C0] ? rcu_is_watching+0x13/0xc0 [ 130.902555][ C0] handle_softirqs+0x1e6/0x9d0 [ 130.904592][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 130.906834][ C0] ? run_ksoftirqd+0x5b/0x60 [ 130.908825][ C0] ? rcu_is_watching+0x13/0xc0 [ 130.910862][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 130.913037][ C0] run_ksoftirqd+0x38/0x60 [ 130.914942][ C0] smpboot_thread_fn+0x3d3/0xab0 [ 130.917075][ C0] ? kthread+0x13a/0x450 [ 130.918901][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 130.921240][ C0] kthread+0x373/0x450 [ 130.922981][ C0] ? __pfx_kthread+0x10/0x10 [ 130.924957][ C0] ret_from_fork+0x730/0xd60 [ 130.926952][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 130.929065][ C0] ? __switch_to+0x800/0x10f0 [ 130.931027][ C0] ? __pfx_kthread+0x10/0x10 [ 130.932934][ C0] ret_from_fork_asm+0x1a/0x30 [ 130.934889][ C0] [ 130.936269][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 130.936283][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 130.936318][ C0] preempt_count: 100, expected: 0 [ 130.936326][ C0] RCU nest depth: 1, expected: 0 [ 130.936334][ C0] INFO: lockdep is turned off. [ 130.936339][ C0] Preemption disabled at: [ 130.936343][ C0] [] handle_softirqs+0xf3/0x9d0 [ 130.936374][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 130.936396][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.936407][ C0] Call Trace: [ 130.936414][ C0] [ 130.936421][ C0] dump_stack_lvl+0x100/0x190 [ 130.936448][ C0] __might_resched.cold+0x1dc/0x222 [ 130.936479][ C0] ? __pfx___might_resched+0x10/0x10 [ 130.936498][ C0] ? find_held_lock+0x2b/0x80 [ 130.936525][ C0] ? x25_kill_by_neigh+0x15e/0x280 [ 130.936553][ C0] lock_sock_nested+0x52/0xf0 [ 130.936573][ C0] ? x25_kill_by_neigh+0x168/0x280 [ 130.936599][ C0] x25_kill_by_neigh+0x168/0x280 [ 130.936626][ C0] x25_lapb_receive_frame+0x4b1/0x1000 [ 130.936654][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 130.936680][ C0] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 130.936704][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 130.936724][ C0] ? netif_receive_skb_core+0x25/0x1a0 [ 130.936746][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.936778][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.936796][ C0] netif_receive_skb_core+0x5a/0x1a0 [ 130.936818][ C0] lapbeth_napi_poll+0x42/0xc0 [ 130.936840][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 130.936863][ C0] net_rx_action+0xa40/0xf20 [ 130.936888][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 130.936910][ C0] ? finish_task_switch.isra.0+0x210/0x10d0 [ 130.936932][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 130.936950][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 130.936967][ C0] ? sched_clock+0x3a/0x60 [ 130.936986][ C0] ? sched_clock_cpu+0x6c/0x570 [ 130.937008][ C0] ? rcu_is_watching+0x13/0xc0 [ 130.937034][ C0] handle_softirqs+0x1e6/0x9d0 [ 130.937055][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 130.937074][ C0] ? run_ksoftirqd+0x5b/0x60 [ 130.937090][ C0] ? rcu_is_watching+0x13/0xc0 [ 130.937113][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 130.937130][ C0] run_ksoftirqd+0x38/0x60 [ 130.937146][ C0] smpboot_thread_fn+0x3d3/0xab0 [ 130.937169][ C0] ? kthread+0x13a/0x450 [ 130.937193][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 130.937217][ C0] kthread+0x373/0x450 [ 130.937241][ C0] ? __pfx_kthread+0x10/0x10 [ 130.937265][ C0] ret_from_fork+0x730/0xd60 [ 130.937286][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 130.937308][ C0] ? __switch_to+0x800/0x10f0 [ 130.937332][ C0] ? __pfx_kthread+0x10/0x10 [ 130.937356][ C0] ret_from_fork_asm+0x1a/0x30 [ 130.937380][ C0] [ 132.665940][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666020][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 2026/09/30 19:01:17 executed programs: 6 2026/09/30 19:01:23 executed programs: 8