[ 71.529849][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:14550' (ED25519) to the list of known hosts. [ 139.310098][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 139.310613][ T43] audit: type=1400 audit(1788651026.556:138): avc: denied { execute } for pid=5755 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 139.312951][ T43] audit: type=1400 audit(1788651026.556:139): avc: denied { execute_no_trans } for pid=5755 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/09/05 23:30:27 parsed 1 programs 2026/09/05 23:30:27 serving rpc on tcp://35735 [ 140.342561][ T43] audit: type=1400 audit(1788651027.586:140): avc: denied { node_bind } for pid=5755 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 140.345065][ T43] audit: type=1400 audit(1788651027.586:141): avc: denied { node_bind } for pid=5755 comm="syz-execprog" saddr=::ffff:127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 142.837906][ T43] audit: type=1400 audit(1788651030.086:142): avc: denied { mounton } for pid=5765 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 142.847339][ T43] audit: type=1400 audit(1788651030.096:143): avc: denied { mount } for pid=5765 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.851091][ T5765] cgroup: Unknown subsys name 'net' [ 142.852675][ T43] audit: type=1400 audit(1788651030.096:144): avc: denied { unmount } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.028304][ T5765] cgroup: Unknown subsys name 'cpuset' [ 143.033329][ T5765] cgroup: Unknown subsys name 'rlimit' [ 143.201977][ T43] audit: type=1400 audit(1788651030.446:145): avc: denied { setattr } for pid=5765 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.202520][ T43] audit: type=1400 audit(1788651030.446:146): avc: denied { create } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.202562][ T43] audit: type=1400 audit(1788651030.446:147): avc: denied { write } for pid=5765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.262392][ T5768] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 144.151135][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 146.343076][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 146.343173][ T43] audit: type=1400 audit(1788651033.586:159): avc: denied { execmem } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.352424][ T43] audit: type=1400 audit(1788651033.596:160): avc: denied { read } for pid=5772 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.352914][ T43] audit: type=1400 audit(1788651033.596:161): avc: denied { open } for pid=5772 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 146.354657][ T43] audit: type=1400 audit(1788651033.606:162): avc: denied { mounton } for pid=5772 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 146.428179][ T43] audit: type=1400 audit(1788651033.676:163): avc: denied { mount } for pid=5772 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.429919][ T43] audit: type=1400 audit(1788651033.676:164): avc: denied { mounton } for pid=5772 comm="syz-executor" path="/syzkaller.5iMhyZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.431314][ T43] audit: type=1400 audit(1788651033.676:165): avc: denied { mount } for pid=5772 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 146.434100][ T43] audit: type=1400 audit(1788651033.686:166): avc: denied { mounton } for pid=5772 comm="syz-executor" path="/syzkaller.5iMhyZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 146.435223][ T43] audit: type=1400 audit(1788651033.686:167): avc: denied { mounton } for pid=5772 comm="syz-executor" path="/syzkaller.5iMhyZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 146.439818][ T43] audit: type=1400 audit(1788651033.686:168): avc: denied { unmount } for pid=5772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 146.485522][ T5772] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 147.483315][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.483667][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.483759][ T5790] bridge_slave_0: entered allmulticast mode [ 147.485060][ T5790] bridge_slave_0: entered promiscuous mode [ 147.488774][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.488867][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.488965][ T5790] bridge_slave_1: entered allmulticast mode [ 147.490317][ T5790] bridge_slave_1: entered promiscuous mode [ 147.511163][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.513645][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.531147][ T5790] team0: Port device team_slave_0 added [ 147.532766][ T5790] team0: Port device team_slave_1 added [ 147.547342][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.547417][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.548968][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.551826][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.551837][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.551850][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.585405][ T5790] hsr_slave_0: entered promiscuous mode [ 147.586435][ T5790] hsr_slave_1: entered promiscuous mode [ 147.778781][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.786034][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.787606][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.794918][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.796351][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.801535][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.802076][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.806594][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.832451][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.832606][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.832910][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.832955][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.891999][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.909415][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.912666][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.926840][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.933241][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.933808][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.939371][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.939514][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.189054][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.218539][ T5790] veth0_vlan: entered promiscuous mode [ 148.223255][ T5790] veth1_vlan: entered promiscuous mode [ 148.243258][ T5790] veth0_macvtap: entered promiscuous mode [ 148.248534][ T5790] veth1_macvtap: entered promiscuous mode [ 148.257170][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.263051][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.298893][ T5582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.298991][ T5582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.299045][ T5582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.299082][ T5582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.377557][ T5582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.470035][ T5582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.544486][ T5582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.602853][ T5582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.885932][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.889752][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.890934][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.891625][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.891885][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.794876][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.794940][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.825420][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.825463][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/05 23:30:37 executed programs: 0 [ 150.300200][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.303303][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.304550][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.305674][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.306246][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.709524][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.712489][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.712565][ T5890] bridge_slave_0: entered allmulticast mode [ 150.714183][ T5890] bridge_slave_0: entered promiscuous mode [ 150.716344][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.716422][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.716520][ T5890] bridge_slave_1: entered allmulticast mode [ 150.717898][ T5890] bridge_slave_1: entered promiscuous mode [ 150.751563][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.754479][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.778271][ T5890] team0: Port device team_slave_0 added [ 150.780724][ T5890] team0: Port device team_slave_1 added [ 150.801950][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.802025][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.802401][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.804995][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.805007][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.805027][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.835824][ T5890] hsr_slave_0: entered promiscuous mode [ 150.836888][ T5890] hsr_slave_1: entered promiscuous mode [ 150.837506][ T5890] debugfs: 'hsr0' already exists in 'hsr' [ 150.837614][ T5890] Cannot create hsr debugfs directory [ 151.036394][ T5582] bridge_slave_1: left allmulticast mode [ 151.036465][ T5582] bridge_slave_1: left promiscuous mode [ 151.038287][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.047305][ T5582] bridge_slave_0: left allmulticast mode [ 151.047360][ T5582] bridge_slave_0: left promiscuous mode [ 151.047634][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.180673][ T5582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.190670][ T5582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.197322][ T5582] bond0 (unregistering): Released all slaves [ 151.217655][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.264424][ T5582] hsr_slave_0: left promiscuous mode [ 151.266918][ T5582] hsr_slave_1: left promiscuous mode [ 151.267722][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.267739][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.270311][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.270327][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.280537][ T5582] veth1_macvtap: left promiscuous mode [ 151.280611][ T5582] veth0_macvtap: left promiscuous mode [ 151.280679][ T5582] veth1_vlan: left promiscuous mode [ 151.280729][ T5582] veth0_vlan: left promiscuous mode [ 151.484066][ T5582] team0 (unregistering): Port device team_slave_1 removed [ 151.494487][ T5582] team0 (unregistering): Port device team_slave_0 removed [ 151.695134][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 151.698058][ T43] audit: type=1400 audit(1788651038.946:195): avc: denied { write } for pid=5915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.776992][ T43] audit: type=1400 audit(1788651039.026:196): avc: denied { write } for pid=5918 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.871483][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.878900][ T5890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.882961][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.889935][ T5890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.890824][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.897368][ T5890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.899895][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.903717][ T5890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.951933][ T43] audit: type=1400 audit(1788651039.196:197): avc: denied { write } for pid=5921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.980804][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.991731][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.026756][ T43] audit: type=1400 audit(1788651039.276:198): avc: denied { write } for pid=5930 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.107835][ T43] audit: type=1400 audit(1788651039.356:199): avc: denied { write } for pid=5932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.157753][ T43] audit: type=1400 audit(1788651039.406:200): avc: denied { write } for pid=5935 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.324524][ T66] Bluetooth: hci0: command tx timeout [ 152.358920][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.359062][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.371490][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.371623][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.736784][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.822822][ T5890] veth0_vlan: entered promiscuous mode [ 152.830486][ T5890] veth1_vlan: entered promiscuous mode [ 152.859851][ T5890] veth0_macvtap: entered promiscuous mode [ 152.862451][ T5890] veth1_macvtap: entered promiscuous mode [ 152.870892][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.881133][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.916332][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.951706][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.954425][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.987879][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.987966][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.003764][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.003833][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.003900][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.038206][ T43] audit: type=1400 audit(1788651040.286:201): avc: denied { create } for pid=5948 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.041177][ T43] audit: type=1400 audit(1788651040.286:202): avc: denied { ioctl } for pid=5948 comm="syz.0.17" path="socket:[6812]" dev="sockfs" ino=6812 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.041225][ T43] audit: type=1400 audit(1788651040.286:203): avc: denied { bind } for pid=5948 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.041258][ T43] audit: type=1400 audit(1788651040.286:204): avc: denied { connect } for pid=5948 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.404261][ T66] Bluetooth: hci0: command tx timeout 2026/09/05 23:30:43 executed programs: 3 [ 156.483565][ T66] Bluetooth: hci0: command tx timeout [ 158.564609][ T66] Bluetooth: hci0: command tx timeout 2026/09/05 23:30:49 executed programs: 5 2026/09/05 23:30:55 executed programs: 7 2026/09/05 23:31:01 executed programs: 9 2026/09/05 23:31:07 executed programs: 11 2026/09/05 23:31:13 executed programs: 13 2026/09/05 23:31:19 executed programs: 15 [ 194.405399][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405503][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 2026/09/05 23:31:25 executed programs: 17 2026/09/05 23:31:31 executed programs: 19 2026/09/05 23:31:37 executed programs: 21 2026/09/05 23:31:43 executed programs: 23 2026/09/05 23:31:49 executed programs: 25 2026/09/05 23:31:55 executed programs: 27 2026/09/05 23:32:01 executed programs: 29 2026/09/05 23:32:07 executed programs: 31 2026/09/05 23:32:13 executed programs: 33 2026/09/05 23:32:19 executed programs: 35 [ 255.844426][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.844498][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 2026/09/05 23:32:25 executed programs: 37 [ 258.884260][ C2] [ 258.885179][ C2] ================================ [ 258.886729][ C2] WARNING: inconsistent lock state [ 258.888405][ C2] syzkaller #0 Not tainted [ 258.889769][ C2] -------------------------------- [ 258.891660][ C2] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 258.894378][ C2] swapper/2/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 258.896654][ C2] ffff88802b94a260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x168/0x280 [ 258.899422][ C2] {SOFTIRQ-ON-W} state was registered at: [ 258.901123][ C2] lock_acquire+0x1d1/0x380 [ 258.902604][ C2] lock_sock_nested+0x41/0xf0 [ 258.904103][ C2] x25_bind+0x221/0x5c0 [ 258.905417][ C2] __sys_bind+0x1a9/0x260 [ 258.906780][ C2] __x64_sys_bind+0x72/0xb0 [ 258.908194][ C2] do_syscall_64+0x123/0x790 [ 258.909643][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.911440][ C2] irq event stamp: 504038 [ 258.912832][ C2] hardirqs last enabled at (504038): [] __local_bh_enable_ip+0xa5/0x120 [ 258.915803][ C2] hardirqs last disabled at (504037): [] __local_bh_enable_ip+0xce/0x120 [ 258.918817][ C2] softirqs last enabled at (503632): [] __irq_exit_rcu+0x194/0x210 [ 258.921759][ C2] softirqs last disabled at (503657): [] __irq_exit_rcu+0x194/0x210 [ 258.924811][ C2] [ 258.924811][ C2] other info that might help us debug this: [ 258.927958][ C2] Possible unsafe locking scenario: [ 258.927958][ C2] [ 258.930158][ C2] CPU0 [ 258.931155][ C2] ---- [ 258.932237][ C2] lock(sk_lock-AF_X25); [ 258.933528][ C2] [ 258.934659][ C2] lock(sk_lock-AF_X25); [ 258.936024][ C2] [ 258.936024][ C2] *** DEADLOCK *** [ 258.936024][ C2] [ 258.938412][ C2] locks held by swapper/2/0: 1, last CPU#2: [ 258.940160][ C2] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x25/0x1a0 [ 258.943121][ C2] [ 258.943121][ C2] stack backtrace: [ 258.945028][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 258.947736][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.950740][ C2] Call Trace: [ 258.951764][ C2] [ 258.952675][ C2] dump_stack_lvl+0x100/0x190 [ 258.954107][ C2] print_usage_bug.part.0+0x258/0x340 [ 258.955739][ C2] mark_lock+0x956/0x1020 [ 258.957108][ C2] ? do_raw_spin_lock+0x128/0x260 [ 258.958599][ C2] ? find_held_lock+0x2b/0x80 [ 258.960042][ C2] ? debug_object_assert_init+0x1c4/0x310 [ 258.961827][ C2] ? rcu_is_watching+0x13/0xc0 [ 258.963330][ C2] __lock_acquire+0x6f6/0x1ec0 [ 258.964817][ C2] ? __pfx_debug_object_assert_init+0x10/0x10 [ 258.966707][ C2] ? sk_skb_reason_drop+0x114/0x1b0 [ 258.968267][ C2] lock_acquire+0x1d1/0x380 [ 258.969669][ C2] ? x25_kill_by_neigh+0x168/0x280 [ 258.971198][ C2] ? find_held_lock+0x2b/0x80 [ 258.972678][ C2] ? x25_kill_by_neigh+0x15e/0x280 [ 258.974196][ C2] lock_sock_nested+0x41/0xf0 [ 258.975598][ C2] ? x25_kill_by_neigh+0x168/0x280 [ 258.977133][ C2] x25_kill_by_neigh+0x168/0x280 [ 258.978646][ C2] x25_lapb_receive_frame+0x4b1/0x1000 [ 258.980417][ C2] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 258.982285][ C2] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 258.984096][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 258.986108][ C2] ? netif_receive_skb_core+0x25/0x1a0 [ 258.987811][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 258.989649][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 258.991242][ C2] netif_receive_skb_core+0x5a/0x1a0 [ 258.992853][ C2] lapbeth_napi_poll+0x42/0xc0 [ 258.994343][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 258.995940][ C2] net_rx_action+0xa40/0xf20 [ 258.997344][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 258.998873][ C2] ? sched_balance_domains+0x2d0/0xb80 [ 259.000520][ C2] ? run_timer_base+0x121/0x190 [ 259.002026][ C2] ? rcu_is_watching+0x13/0xc0 [ 259.003474][ C2] handle_softirqs+0x1e6/0x9d0 [ 259.004909][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 259.006504][ C2] ? _raw_spin_unlock+0x28/0x50 [ 259.007976][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 259.009660][ C2] __irq_exit_rcu+0x194/0x210 [ 259.011078][ C2] irq_exit_rcu+0x9/0x30 [ 259.012391][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 259.014027][ C2] [ 259.014931][ C2] [ 259.015828][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.017633][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 259.019308][ C2] Code: a8 9b 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 c6 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 259.025106][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 259.026940][ C2] RAX: 000000000007af67 RBX: ffff88801f2d2580 RCX: ffffffff8bcff115 [ 259.029408][ C2] RDX: 0000000000000001 RSI: ffffffff8e3eb977 RDI: ffffffff8c620f80 [ 259.031757][ C2] RBP: ffffed1003e5a4b0 R08: 0000000000000001 R09: ffffed100d4c67bd [ 259.034441][ C2] R10: ffff88806a633deb R11: 0000000000000001 R12: 0000000000000000 [ 259.037027][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 259.039748][ C2] ? ct_kernel_exit+0x125/0x180 [ 259.041427][ C2] default_idle+0x9/0x10 [ 259.043005][ C2] default_idle_call+0x6c/0xb0 [ 259.044784][ C2] do_idle+0x3ae/0x5b0 [ 259.046125][ C2] ? __pfx_do_idle+0x10/0x10 [ 259.047526][ C2] ? rcu_is_watching+0x13/0xc0 [ 259.049327][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.051124][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.052781][ C2] cpu_startup_entry+0x4f/0x60 [ 259.054291][ C2] start_secondary+0x21d/0x2d0 [ 259.055792][ C2] ? __pfx_start_secondary+0x10/0x10 [ 259.057508][ C2] common_startup_64+0x13e/0x158 [ 259.059105][ C2] [ 259.060278][ C2] BUG: sleeping function called from invalid context at net/core/sock.c:3832 [ 259.060319][ C2] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/2 [ 259.060350][ C2] preempt_count: 101, expected: 0 [ 259.060356][ C2] RCU nest depth: 1, expected: 0 [ 259.060366][ C2] INFO: lockdep is turned off. [ 259.060368][ C2] Preemption disabled at: [ 259.060371][ C2] [] kmem_cache_alloc_node_noprof+0xda/0x6e0 [ 259.060413][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 259.060426][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.060432][ C2] Call Trace: [ 259.060436][ C2] [ 259.060440][ C2] dump_stack_lvl+0x100/0x190 [ 259.060456][ C2] __might_resched.cold+0x1dc/0x222 [ 259.060470][ C2] ? __pfx___might_resched+0x10/0x10 [ 259.060480][ C2] ? find_held_lock+0x2b/0x80 [ 259.060493][ C2] ? x25_kill_by_neigh+0x15e/0x280 [ 259.060506][ C2] lock_sock_nested+0x52/0xf0 [ 259.060520][ C2] ? x25_kill_by_neigh+0x168/0x280 [ 259.060531][ C2] x25_kill_by_neigh+0x168/0x280 [ 259.060542][ C2] x25_lapb_receive_frame+0x4b1/0x1000 [ 259.060554][ C2] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 259.060565][ C2] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 259.060580][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 259.060594][ C2] ? netif_receive_skb_core+0x25/0x1a0 [ 259.060609][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.060621][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.060640][ C2] netif_receive_skb_core+0x5a/0x1a0 [ 259.060664][ C2] lapbeth_napi_poll+0x42/0xc0 [ 259.060689][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 259.060711][ C2] net_rx_action+0xa40/0xf20 [ 259.060727][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 259.060742][ C2] ? sched_balance_domains+0x2d0/0xb80 [ 259.060767][ C2] ? run_timer_base+0x121/0x190 [ 259.060786][ C2] ? rcu_is_watching+0x13/0xc0 [ 259.060810][ C2] handle_softirqs+0x1e6/0x9d0 [ 259.060829][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 259.060847][ C2] ? _raw_spin_unlock+0x28/0x50 [ 259.060864][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 259.060889][ C2] __irq_exit_rcu+0x194/0x210 [ 259.060901][ C2] irq_exit_rcu+0x9/0x30 [ 259.060911][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 259.060923][ C2] [ 259.060927][ C2] [ 259.060930][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.060942][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 259.060954][ C2] Code: a8 9b 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 c6 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 259.060964][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 259.060973][ C2] RAX: 000000000007af67 RBX: ffff88801f2d2580 RCX: ffffffff8bcff115 [ 259.060980][ C2] RDX: 0000000000000001 RSI: ffffffff8e3eb977 RDI: ffffffff8c620f80 [ 259.060986][ C2] RBP: ffffed1003e5a4b0 R08: 0000000000000001 R09: ffffed100d4c67bd [ 259.060992][ C2] R10: ffff88806a633deb R11: 0000000000000001 R12: 0000000000000000 [ 259.060998][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 259.061006][ C2] ? ct_kernel_exit+0x125/0x180 [ 259.061018][ C2] default_idle+0x9/0x10 [ 259.061030][ C2] default_idle_call+0x6c/0xb0 [ 259.061043][ C2] do_idle+0x3ae/0x5b0 [ 259.061054][ C2] ? __pfx_do_idle+0x10/0x10 [ 259.061065][ C2] ? rcu_is_watching+0x13/0xc0 [ 259.061077][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.061088][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.061099][ C2] cpu_startup_entry+0x4f/0x60 [ 259.061111][ C2] start_secondary+0x21d/0x2d0 [ 259.061121][ C2] ? __pfx_start_secondary+0x10/0x10 [ 259.061132][ C2] common_startup_64+0x13e/0x158 [ 259.061148][ C2] [ 265.528391][ T5582] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.555998][ T5582] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.625646][ T5582] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.677096][ T5582] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.751349][ T5582] bridge_slave_1: left allmulticast mode [ 265.751391][ T5582] bridge_slave_1: left promiscuous mode [ 265.751476][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.755327][ T5582] bridge_slave_0: left allmulticast mode [ 265.755341][ T5582] bridge_slave_0: left promiscuous mode [ 265.755416][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.789847][ T5582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.799349][ T5582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.803254][ T5582] bond0 (unregistering): Released all slaves [ 265.837837][ T43] audit: type=1400 audit(1788651153.086:205): avc: denied { write } for pid=6008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.863618][ T43] audit: type=1400 audit(1788651153.116:206): avc: denied { write } for pid=6011 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.880486][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 265.918685][ T43] audit: type=1400 audit(1788651153.166:207): avc: denied { write } for pid=6014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.952575][ T43] audit: type=1400 audit(1788651153.196:208): avc: denied { write } for pid=6017 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.972792][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.007972][ T5582] hsr_slave_0: left promiscuous mode [ 266.010651][ T43] audit: type=1400 audit(1788651153.256:209): avc: denied { write } for pid=6020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.010806][ T5582] hsr_slave_1: left promiscuous mode [ 266.011051][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.011062][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.021833][ T5582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.021848][ T5582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.027179][ T5582] veth1_macvtap: left promiscuous mode [ 266.027195][ T5582] veth0_macvtap: left promiscuous mode [ 266.027226][ T5582] veth1_vlan: left promiscuous mode [ 266.027246][ T5582] veth0_vlan: left promiscuous mode [ 266.038518][ T43] audit: type=1400 audit(1788651153.286:210): avc: denied { write } for pid=6023 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.076093][ T5582] team0 (unregistering): Port device team_slave_1 removed [ 266.078782][ T5582] team0 (unregistering): Port device team_slave_0 removed [ 266.100918][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 266.157027][ T43] audit: type=1400 audit(1788651153.406:211): avc: denied { write } for pid=6027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.182517][ T43] audit: type=1400 audit(1788651153.426:212): avc: denied { write } for pid=6030 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.204322][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5