Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. 2026/01/23 07:02:47 parsed 1 programs [ 181.512398][ T30] audit: type=1400 audit(1769151767.556:62): avc: denied { node_bind } for pid=5838 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 183.580862][ T30] audit: type=1400 audit(1769151769.626:63): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 183.604142][ T30] audit: type=1400 audit(1769151769.646:64): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 183.606479][ T5846] cgroup: Unknown subsys name 'net' [ 183.633139][ T30] audit: type=1400 audit(1769151769.676:65): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 183.783030][ T5846] cgroup: Unknown subsys name 'cpuset' [ 183.790937][ T5846] cgroup: Unknown subsys name 'rlimit' [ 183.943490][ T30] audit: type=1400 audit(1769151769.986:66): avc: denied { setattr } for pid=5846 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.976373][ T30] audit: type=1400 audit(1769151769.986:67): avc: denied { create } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.005249][ T30] audit: type=1400 audit(1769151769.986:68): avc: denied { write } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.033385][ T30] audit: type=1400 audit(1769151769.986:69): avc: denied { read } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.044464][ T5848] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 184.062450][ T30] audit: type=1400 audit(1769151769.996:70): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 184.087760][ T30] audit: type=1400 audit(1769151769.996:71): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 185.055609][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 186.637696][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 186.637711][ T30] audit: type=1400 audit(1769151772.676:76): avc: denied { execmem } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 186.706361][ T30] audit: type=1400 audit(1769151772.736:77): avc: denied { read } for pid=5859 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 186.769508][ T30] audit: type=1400 audit(1769151772.736:78): avc: denied { open } for pid=5860 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 186.793275][ T30] audit: type=1400 audit(1769151772.736:79): avc: denied { mounton } for pid=5860 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 186.926139][ T30] audit: type=1400 audit(1769151772.966:80): avc: denied { mounton } for pid=5859 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 186.949323][ T30] audit: type=1400 audit(1769151772.966:81): avc: denied { mount } for pid=5859 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.971768][ T30] audit: type=1400 audit(1769151772.966:82): avc: denied { mounton } for pid=5862 comm="syz-executor" path="/root/syzkaller.vWaSxL/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 186.996036][ T30] audit: type=1400 audit(1769151772.966:83): avc: denied { mount } for pid=5862 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.018212][ T30] audit: type=1400 audit(1769151772.966:84): avc: denied { mounton } for pid=5862 comm="syz-executor" path="/root/syzkaller.vWaSxL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.047927][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.064332][ T30] audit: type=1400 audit(1769151772.966:85): avc: denied { mount } for pid=5862 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 187.308534][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 187.489884][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.498522][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.505962][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.514509][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.521955][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.743098][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.751523][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.758594][ T5861] bridge_slave_0: entered allmulticast mode [ 187.765465][ T5861] bridge_slave_0: entered promiscuous mode [ 187.775985][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.783132][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.790277][ T5861] bridge_slave_1: entered allmulticast mode [ 187.796862][ T5861] bridge_slave_1: entered promiscuous mode [ 187.898788][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.936532][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.038312][ T5861] team0: Port device team_slave_0 added [ 188.107788][ T5861] team0: Port device team_slave_1 added [ 188.340642][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.347594][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.388573][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.442101][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.449035][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.475196][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.635212][ T5861] hsr_slave_0: entered promiscuous mode [ 188.650960][ T5861] hsr_slave_1: entered promiscuous mode [ 188.922876][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.951568][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.090090][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.116208][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.397571][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.421407][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.446660][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.474387][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.617617][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.632777][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.647250][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.654557][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.678724][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.685797][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.816434][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.847583][ T5861] veth0_vlan: entered promiscuous mode [ 189.858708][ T5861] veth1_vlan: entered promiscuous mode [ 189.877495][ T5861] veth0_macvtap: entered promiscuous mode [ 189.885717][ T5861] veth1_macvtap: entered promiscuous mode [ 189.897770][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.913348][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.925956][ T3592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.935456][ T3592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.945664][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.955339][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/23 07:02:56 executed programs: 0 [ 190.162121][ T5887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.170677][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.178369][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.188497][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.196126][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.205120][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.213882][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.222457][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.231004][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.239413][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.247049][ T5967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.247346][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.254531][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.274728][ T5965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.287100][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.295188][ T5967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.295774][ T5970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.304411][ T5967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.309493][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.317208][ T5967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.323777][ T5970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.338518][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.346649][ T5970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.348771][ T5967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.361415][ T5967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.967040][ T4578] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.983862][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 191.065275][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 191.078300][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 191.129449][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 191.139719][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 191.176686][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.183895][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.191200][ T5955] bridge_slave_0: entered allmulticast mode [ 191.197800][ T5955] bridge_slave_0: entered promiscuous mode [ 191.226960][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.234332][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.241595][ T5955] bridge_slave_1: entered allmulticast mode [ 191.248173][ T5955] bridge_slave_1: entered promiscuous mode [ 191.307812][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.315071][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.322469][ T5960] bridge_slave_0: entered allmulticast mode [ 191.329022][ T5960] bridge_slave_0: entered promiscuous mode [ 191.363130][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.370289][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.377354][ T5960] bridge_slave_1: entered allmulticast mode [ 191.384206][ T5960] bridge_slave_1: entered promiscuous mode [ 191.402896][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.444882][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.467104][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.474397][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.481603][ T5953] bridge_slave_0: entered allmulticast mode [ 191.488230][ T5953] bridge_slave_0: entered promiscuous mode [ 191.497473][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.509478][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.516713][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.524065][ T5966] bridge_slave_0: entered allmulticast mode [ 191.531093][ T5966] bridge_slave_0: entered promiscuous mode [ 191.551413][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.558539][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.566073][ T5953] bridge_slave_1: entered allmulticast mode [ 191.572870][ T5953] bridge_slave_1: entered promiscuous mode [ 191.583000][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.592250][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.599309][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.607229][ T5966] bridge_slave_1: entered allmulticast mode [ 191.614069][ T5966] bridge_slave_1: entered promiscuous mode [ 191.628678][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.636498][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.643733][ T5954] bridge_slave_0: entered allmulticast mode [ 191.650505][ T5954] bridge_slave_0: entered promiscuous mode [ 191.677352][ T5955] team0: Port device team_slave_0 added [ 191.684250][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.691579][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.698636][ T5954] bridge_slave_1: entered allmulticast mode [ 191.705375][ T5954] bridge_slave_1: entered promiscuous mode [ 191.731805][ T5955] team0: Port device team_slave_1 added [ 191.750526][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.763947][ T5960] team0: Port device team_slave_0 added [ 191.771310][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.782283][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.804896][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.823176][ T5960] team0: Port device team_slave_1 added [ 191.841498][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.848428][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.874661][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.887280][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.905037][ T5953] team0: Port device team_slave_0 added [ 191.924911][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.932018][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.957954][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.971179][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.988756][ T5953] team0: Port device team_slave_1 added [ 191.994837][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.002353][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.028502][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.040943][ T5966] team0: Port device team_slave_0 added [ 192.065383][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.072406][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.098779][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.111194][ T5966] team0: Port device team_slave_1 added [ 192.122555][ T4578] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.143966][ T5954] team0: Port device team_slave_0 added [ 192.176431][ T5954] team0: Port device team_slave_1 added [ 192.182482][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.189390][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.216116][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.238014][ T5955] hsr_slave_0: entered promiscuous mode [ 192.244211][ T5955] hsr_slave_1: entered promiscuous mode [ 192.250286][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 192.256050][ T5955] Cannot create hsr debugfs directory [ 192.268244][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.275410][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.301402][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.313760][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.321082][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.346965][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.368798][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.376122][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.402763][ T5970] Bluetooth: hci4: command tx timeout [ 192.402770][ T5957] Bluetooth: hci2: command tx timeout [ 192.403016][ T52] Bluetooth: hci0: command tx timeout [ 192.410594][ T5970] Bluetooth: hci3: command tx timeout [ 192.413911][ T5957] Bluetooth: hci1: command tx timeout [ 192.419576][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.454743][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.461736][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.487749][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.499893][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.507204][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.533482][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.552197][ T5960] hsr_slave_0: entered promiscuous mode [ 192.558196][ T5960] hsr_slave_1: entered promiscuous mode [ 192.564289][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 192.570150][ T5960] Cannot create hsr debugfs directory [ 192.629814][ T4578] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.673447][ T5953] hsr_slave_0: entered promiscuous mode [ 192.679517][ T5953] hsr_slave_1: entered promiscuous mode [ 192.685548][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 192.692048][ T5953] Cannot create hsr debugfs directory [ 192.725067][ T5954] hsr_slave_0: entered promiscuous mode [ 192.731231][ T5954] hsr_slave_1: entered promiscuous mode [ 192.737045][ T5954] debugfs: 'hsr0' already exists in 'hsr' [ 192.742782][ T5954] Cannot create hsr debugfs directory [ 192.758997][ T5966] hsr_slave_0: entered promiscuous mode [ 192.765139][ T5966] hsr_slave_1: entered promiscuous mode [ 192.771379][ T5966] debugfs: 'hsr0' already exists in 'hsr' [ 192.777092][ T5966] Cannot create hsr debugfs directory [ 192.904039][ T4578] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.101356][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.114606][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.124395][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.134557][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.185286][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.201747][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.211837][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.218908][ T2213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.231922][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.238957][ T3929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.404216][ T4578] bridge_slave_1: left allmulticast mode [ 193.412545][ T4578] bridge_slave_1: left promiscuous mode [ 193.418819][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.432742][ T4578] bridge_slave_0: left allmulticast mode [ 193.438386][ T4578] bridge_slave_0: left promiscuous mode [ 193.445541][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.762300][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.768683][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.786304][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.797726][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.808074][ T4578] bond0 (unregistering): Released all slaves [ 193.841955][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.924853][ T5955] veth0_vlan: entered promiscuous mode [ 193.947309][ T4578] hsr_slave_0: left promiscuous mode [ 193.957795][ T4578] hsr_slave_1: left promiscuous mode [ 193.964718][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.974706][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.984336][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.991954][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.011287][ T4578] veth1_macvtap: left promiscuous mode [ 194.016910][ T4578] veth0_macvtap: left promiscuous mode [ 194.022811][ T4578] veth1_vlan: left promiscuous mode [ 194.028678][ T4578] veth0_vlan: left promiscuous mode [ 194.340107][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 194.358607][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 194.481787][ T52] Bluetooth: hci4: command tx timeout [ 194.482613][ T5957] Bluetooth: hci3: command tx timeout [ 194.490010][ T52] Bluetooth: hci1: command tx timeout [ 194.493287][ T5970] Bluetooth: hci0: command tx timeout [ 194.497882][ T5887] Bluetooth: hci2: command tx timeout [ 194.541102][ T5955] veth1_vlan: entered promiscuous mode [ 194.566688][ T5955] veth0_macvtap: entered promiscuous mode [ 194.582581][ T5955] veth1_macvtap: entered promiscuous mode [ 194.597977][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.608270][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.633874][ T3488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.643507][ T3488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.654311][ T3488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.686669][ T3488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.745866][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.761951][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.811260][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.829981][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.930496][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.944138][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 194.944152][ T30] audit: type=1400 audit(1769151780.976:107): avc: denied { bind } for pid=6047 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2026/01/23 07:03:01 executed programs: 11 [ 194.989094][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.002272][ T30] audit: type=1400 audit(1769151780.976:108): avc: denied { listen } for pid=6047 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.025469][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.048644][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.261701][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.284771][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.332416][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.353540][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.523622][ T5960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.564931][ T5960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.629611][ T5960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.682614][ T5960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.745110][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.826809][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.872535][ T5966] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.915544][ T5966] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.934700][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.941850][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.968365][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.975502][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.003092][ T5966] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.057868][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.071790][ T5966] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.206801][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.258427][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.265622][ T3929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.286307][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.293442][ T3929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.399177][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.476095][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.506058][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.523080][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.561406][ T5887] Bluetooth: hci3: command tx timeout [ 196.561439][ T5967] Bluetooth: hci4: command tx timeout [ 196.566829][ T52] Bluetooth: hci0: command tx timeout [ 196.572630][ T5957] Bluetooth: hci2: command tx timeout [ 196.572721][ T5970] Bluetooth: hci1: command tx timeout [ 196.625967][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.633101][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.666359][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.673504][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.686146][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.717914][ T2213] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.725058][ T2213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.754601][ T5953] veth0_vlan: entered promiscuous mode [ 196.784761][ T2213] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.791903][ T2213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.886003][ T5953] veth1_vlan: entered promiscuous mode [ 196.919652][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.033414][ T5953] veth0_macvtap: entered promiscuous mode [ 197.066508][ T5953] veth1_macvtap: entered promiscuous mode [ 197.132359][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.178275][ T5954] veth0_vlan: entered promiscuous mode [ 197.205910][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.279546][ T3592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.311968][ T3592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.331861][ T3592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.361928][ T3592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.388799][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.432021][ T5954] veth1_vlan: entered promiscuous mode [ 197.465963][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.511046][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.519052][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.554797][ T5954] veth0_macvtap: entered promiscuous mode [ 197.602879][ T5954] veth1_macvtap: entered promiscuous mode [ 197.611401][ T5960] veth0_vlan: entered promiscuous mode [ 197.627562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.647726][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.661780][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.672591][ T5960] veth1_vlan: entered promiscuous mode [ 197.688412][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.717097][ T3592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.741870][ T3592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.768502][ T3592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.803678][ T3592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.936304][ T5960] veth0_macvtap: entered promiscuous mode [ 198.008362][ T5960] veth1_macvtap: entered promiscuous mode [ 198.086987][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.102321][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.119039][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.186712][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.293352][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.328808][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.338332][ T3592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.379611][ T3592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.419359][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.480612][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.498613][ T5966] veth0_vlan: entered promiscuous mode [ 198.557679][ T5966] veth1_vlan: entered promiscuous mode [ 198.642999][ T5970] Bluetooth: hci1: command tx timeout [ 198.643016][ T52] Bluetooth: hci4: command tx timeout [ 198.643055][ T5967] Bluetooth: hci2: command tx timeout [ 198.650053][ T52] Bluetooth: hci0: command tx timeout [ 198.654572][ T5957] Bluetooth: hci3: command tx timeout [ 198.788026][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.804710][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.895954][ T5966] veth0_macvtap: entered promiscuous mode [ 198.932287][ T5966] veth1_macvtap: entered promiscuous mode [ 198.974338][ T3929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.979031][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.022875][ T3929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.024872][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.066590][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.100032][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.129433][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.165460][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.437898][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.479037][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.595854][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.625274][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/23 07:03:06 executed programs: 167 2026/01/23 07:03:11 executed programs: 571 2026/01/23 07:03:16 executed programs: 993 2026/01/23 07:03:21 executed programs: 1415 2026/01/23 07:03:26 executed programs: 1834 2026/01/23 07:03:31 executed programs: 2248 2026/01/23 07:03:36 executed programs: 2671 [ 230.585159][ T5967] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.599280][ T5967] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.609249][ T5967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.618020][ T5967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.633433][ T5967] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.947739][ T2213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.102533][ T2213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.362841][ T2213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.541715][ T2213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.626116][T11501] chnl_net:caif_netlink_parms(): no params data found [ 231.963796][T11501] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.971208][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.978359][T11501] bridge_slave_0: entered allmulticast mode [ 231.991217][T11501] bridge_slave_0: entered promiscuous mode [ 231.999767][T11501] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.007524][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.015624][T11501] bridge_slave_1: entered allmulticast mode [ 232.032380][T11501] bridge_slave_1: entered promiscuous mode [ 232.050079][ T2213] bridge_slave_1: left allmulticast mode [ 232.055727][ T2213] bridge_slave_1: left promiscuous mode [ 232.065988][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.078220][ T2213] bridge_slave_0: left allmulticast mode [ 232.097823][ T2213] bridge_slave_0: left promiscuous mode [ 232.114953][ T2213] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.721899][ T5957] Bluetooth: hci5: command tx timeout [ 232.798734][ T2213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.834555][ T2213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.851281][ T2213] bond0 (unregistering): Released all slaves [ 232.936147][T11501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.045188][T11501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.163703][T11501] team0: Port device team_slave_0 added [ 233.187512][T11501] team0: Port device team_slave_1 added [ 233.306100][T11501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.335102][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.401487][T11501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.442155][T11501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.460011][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.542305][T11501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.626384][ T2213] hsr_slave_0: left promiscuous mode [ 233.643319][ T2213] hsr_slave_1: left promiscuous mode [ 233.649147][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.669979][ T2213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.680862][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.703418][ T2213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.749136][ T2213] veth1_macvtap: left promiscuous mode [ 233.778151][ T2213] veth0_macvtap: left promiscuous mode [ 233.800906][ T2213] veth1_vlan: left promiscuous mode [ 233.806224][ T2213] veth0_vlan: left promiscuous mode [ 234.805029][ T5957] Bluetooth: hci5: command tx timeout [ 234.924352][ T2213] team0 (unregistering): Port device team_slave_1 removed [ 235.092326][ T2213] team0 (unregistering): Port device team_slave_0 removed 2026/01/23 07:03:41 executed programs: 3004 [ 236.098598][T11501] hsr_slave_0: entered promiscuous mode [ 236.130740][T11501] hsr_slave_1: entered promiscuous mode [ 236.881537][ T5957] Bluetooth: hci5: command tx timeout [ 236.937665][T11501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.993113][T11501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.064987][T11501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.089802][T11501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.331825][T11501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.369585][T11501] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.398251][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.405398][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.463112][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.470421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.555529][T11501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.963756][T11501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.065870][T11501] veth0_vlan: entered promiscuous mode [ 238.103160][T11501] veth1_vlan: entered promiscuous mode [ 238.169364][T11501] veth0_macvtap: entered promiscuous mode [ 238.190492][T11501] veth1_macvtap: entered promiscuous mode [ 238.236362][T11501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.265889][T11501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.299007][ T3592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.354827][ T3592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.380884][ T3592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.395544][ T2213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.518578][ T2213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.550367][ T2213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.638201][T10290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.666224][T10290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.845416][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.853765][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.873002][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.885859][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.893637][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.960125][ T5957] Bluetooth: hci5: command tx timeout [ 239.145483][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.345650][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.488895][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.651141][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.900693][T12596] chnl_net:caif_netlink_parms(): no params data found [ 240.076942][ T1149] bridge_slave_1: left allmulticast mode [ 240.108532][ T1149] bridge_slave_1: left promiscuous mode [ 240.140154][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.168600][ T1149] bridge_slave_0: left allmulticast mode [ 240.177823][ T1149] bridge_slave_0: left promiscuous mode [ 240.190366][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/23 07:03:46 executed programs: 3329 [ 240.950470][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.961758][ T5957] Bluetooth: hci2: command tx timeout [ 241.006608][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.048220][ T1149] bond0 (unregistering): Released all slaves [ 241.168157][T12596] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.220157][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.227341][T12596] bridge_slave_0: entered allmulticast mode [ 241.291286][T12596] bridge_slave_0: entered promiscuous mode [ 241.431728][T12596] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.449378][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.464952][T12596] bridge_slave_1: entered allmulticast mode [ 241.477667][T12596] bridge_slave_1: entered promiscuous mode [ 241.624607][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.655617][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.912241][T12596] team0: Port device team_slave_0 added [ 241.941108][T12596] team0: Port device team_slave_1 added [ 242.005226][ T1149] hsr_slave_0: left promiscuous mode [ 242.025404][ T1149] hsr_slave_1: left promiscuous mode [ 242.049463][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.073966][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.110362][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.117751][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.205588][ T1149] veth1_macvtap: left promiscuous mode [ 242.250033][ T1149] veth0_macvtap: left promiscuous mode [ 242.255656][ T1149] veth1_vlan: left promiscuous mode [ 242.281979][ T1149] veth0_vlan: left promiscuous mode [ 242.961485][ T5799] ================================================================== [ 242.969567][ T5799] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x191/0x1a0 [ 242.977633][ T5799] Read of size 8 at addr ffff888035c37188 by task kworker/1:3/5799 [ 242.985515][ T5799] [ 242.987831][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 242.987851][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 242.987862][ T5799] Workqueue: events l2cap_info_timeout [ 242.987885][ T5799] Call Trace: [ 242.987890][ T5799] [ 242.987897][ T5799] dump_stack_lvl+0x100/0x190 [ 242.987920][ T5799] print_report+0x156/0x4c9 [ 242.987943][ T5799] ? __virt_addr_valid+0x81/0x620 [ 242.987960][ T5799] ? __phys_addr+0xe8/0x180 [ 242.987976][ T5799] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 242.987994][ T5799] kasan_report+0xdf/0x1a0 [ 242.988017][ T5799] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 242.988040][ T5799] l2cap_sock_ready_cb+0x191/0x1a0 [ 242.988060][ T5799] l2cap_conn_start+0x123/0xb20 [ 242.988079][ T5799] ? __pfx_l2cap_conn_start+0x10/0x10 [ 242.988097][ T5799] ? __pfx___mutex_lock+0x10/0x10 [ 242.988116][ T5799] ? debug_object_deactivate+0x2e4/0x3b0 [ 242.988139][ T5799] ? process_one_work+0x80b/0x1840 [ 242.988159][ T5799] l2cap_info_timeout+0x81/0xa0 [ 242.988183][ T5799] process_one_work+0x9c2/0x1840 [ 242.988206][ T5799] ? __pfx_process_one_work+0x10/0x10 [ 242.988228][ T5799] ? assign_work+0x19c/0x250 [ 242.988246][ T5799] worker_thread+0x5da/0xe40 [ 242.988268][ T5799] ? __pfx_worker_thread+0x10/0x10 [ 242.988287][ T5799] ? kthread+0x17d/0x730 [ 242.988303][ T5799] ? __pfx_worker_thread+0x10/0x10 [ 242.988321][ T5799] kthread+0x3b3/0x730 [ 242.988339][ T5799] ? __pfx_kthread+0x10/0x10 [ 242.988355][ T5799] ? ret_from_fork+0x79/0xaf0 [ 242.988374][ T5799] ? ret_from_fork+0x79/0xaf0 [ 242.988392][ T5799] ? rcu_is_watching+0x12/0xc0 [ 242.988414][ T5799] ? __pfx_kthread+0x10/0x10 [ 242.988432][ T5799] ret_from_fork+0x754/0xaf0 [ 242.988452][ T5799] ? __pfx_ret_from_fork+0x10/0x10 [ 242.988472][ T5799] ? __switch_to+0x7b9/0x10c0 [ 242.988495][ T5799] ? __pfx_kthread+0x10/0x10 [ 242.988512][ T5799] ret_from_fork_asm+0x1a/0x30 [ 242.988532][ T5799] [ 242.988538][ T5799] [ 243.178198][ T5799] Allocated by task 12602: [ 243.182590][ T5799] kasan_save_stack+0x30/0x50 [ 243.187249][ T5799] kasan_save_track+0x14/0x30 [ 243.191904][ T5799] __kasan_kmalloc+0xaa/0xb0 [ 243.196473][ T5799] __kmalloc_noprof+0x347/0x9c0 [ 243.201296][ T5799] sk_prot_alloc+0x10b/0x2a0 [ 243.205870][ T5799] sk_alloc+0x36/0xe80 [ 243.209939][ T5799] bt_sock_alloc+0x3b/0x3a0 [ 243.214418][ T5799] l2cap_sock_alloc.constprop.0+0x33/0x1e0 [ 243.220202][ T5799] l2cap_sock_create+0x123/0x210 [ 243.225120][ T5799] bt_sock_create+0x185/0x350 [ 243.229771][ T5799] __sock_create+0x339/0x860 [ 243.234333][ T5799] __sys_socket+0x14d/0x260 [ 243.238810][ T5799] __x64_sys_socket+0x72/0xb0 [ 243.243463][ T5799] do_syscall_64+0xc9/0xf80 [ 243.247942][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.253809][ T5799] [ 243.256107][ T5799] Freed by task 12599: [ 243.260152][ T5799] kasan_save_stack+0x30/0x50 [ 243.264819][ T5799] kasan_save_track+0x14/0x30 [ 243.269471][ T5799] kasan_save_free_info+0x3b/0x70 [ 243.274469][ T5799] __kasan_slab_free+0x5f/0x80 [ 243.279231][ T5799] kfree+0x1c7/0x690 [ 243.283103][ T5799] __sk_destruct+0x8ab/0xbb0 [ 243.287672][ T5799] sk_destruct+0xc8/0xf0 [ 243.291890][ T5799] __sk_free+0xf4/0x3e0 [ 243.296458][ T5799] sk_free+0x61/0x90 [ 243.300337][ T5799] l2cap_sock_kill+0x176/0x310 [ 243.305081][ T5799] l2cap_sock_release+0x1cb/0x280 [ 243.310087][ T5799] __sock_release+0xb3/0x260 [ 243.314658][ T5799] sock_close+0x1c/0x30 [ 243.318791][ T5799] __fput+0x3ff/0xb40 [ 243.322750][ T5799] task_work_run+0x150/0x240 [ 243.327315][ T5799] exit_to_user_mode_loop+0x100/0x4b0 [ 243.332664][ T5799] do_syscall_64+0x4fe/0xf80 [ 243.337231][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.343097][ T5799] [ 243.345394][ T5799] The buggy address belongs to the object at ffff888035c37000 [ 243.345394][ T5799] which belongs to the cache kmalloc-2k of size 2048 [ 243.359418][ T5799] The buggy address is located 392 bytes inside of [ 243.359418][ T5799] freed 2048-byte region [ffff888035c37000, ffff888035c37800) [ 243.373274][ T5799] [ 243.375576][ T5799] The buggy address belongs to the physical page: [ 243.381956][ T5799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035c37000 pfn:0x35c30 [ 243.391990][ T5799] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 243.400462][ T5799] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 243.408951][ T5799] page_type: f5(slab) [ 243.412916][ T5799] raw: 00fff00000000240 ffff88813fe27000 ffffea000089a010 ffffea000098a010 [ 243.421475][ T5799] raw: ffff888035c37000 0000000000080007 00000000f5000000 0000000000000000 [ 243.430034][ T5799] head: 00fff00000000240 ffff88813fe27000 ffffea000089a010 ffffea000098a010 [ 243.438678][ T5799] head: ffff888035c37000 0000000000080007 00000000f5000000 0000000000000000 [ 243.447321][ T5799] head: 00fff00000000003 ffffea0000d70c01 00000000ffffffff 00000000ffffffff [ 243.455968][ T5799] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 243.464608][ T5799] page dumped because: kasan: bad access detected [ 243.470994][ T5799] page_owner tracks the page as allocated [ 243.476677][ T5799] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16556383820, free_ts 14423148272 [ 243.497228][ T5799] post_alloc_hook+0x1e1/0x250 [ 243.501976][ T5799] get_page_from_freelist+0xe3d/0x2e10 [ 243.507409][ T5799] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 243.513276][ T5799] alloc_pages_mpol+0x1fb/0x550 [ 243.518106][ T5799] new_slab+0x2c4/0x440 [ 243.522233][ T5799] ___slab_alloc+0xda3/0x1ca0 [ 243.526883][ T5799] __slab_alloc.isra.0+0x63/0x110 [ 243.531880][ T5799] __kmalloc_cache_noprof+0x531/0x810 [ 243.537224][ T5799] ext4_fill_super+0x19f/0xb3f0 [ 243.542049][ T5799] get_tree_bdev_flags+0x38c/0x620 [ 243.547137][ T5799] vfs_get_tree+0x92/0x320 [ 243.551531][ T5799] path_mount+0x7d0/0x23c0 [ 243.555926][ T5799] init_mount+0xbd/0x110 [ 243.560153][ T5799] do_mount_root+0x11a/0x2e0 [ 243.564727][ T5799] mount_root_generic+0x1d5/0x420 [ 243.569724][ T5799] mount_root+0x3ad/0x400 [ 243.574031][ T5799] page last free pid 10 tgid 10 stack trace: [ 243.579984][ T5799] __free_frozen_pages+0x822/0x1130 [ 243.585163][ T5799] vfree.part.0+0x12b/0x9d0 [ 243.589663][ T5799] delayed_vfree_work+0x8e/0xd0 [ 243.594509][ T5799] process_one_work+0x9c2/0x1840 [ 243.599436][ T5799] worker_thread+0x5da/0xe40 [ 243.604010][ T5799] kthread+0x3b3/0x730 [ 243.608056][ T5799] ret_from_fork+0x754/0xaf0 [ 243.612628][ T5799] ret_from_fork_asm+0x1a/0x30 [ 243.617371][ T5799] [ 243.619674][ T5799] Memory state around the buggy address: [ 243.625284][ T5799] ffff888035c37080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.633324][ T5799] ffff888035c37100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.641363][ T5799] >ffff888035c37180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.649400][ T5799] ^ [ 243.653708][ T5799] ffff888035c37200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.661748][ T5799] ffff888035c37280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.669784][ T5799] ================================================================== [ 243.692687][ T5799] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.699898][ T5799] CPU: 1 UID: 0 PID: 5799 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 243.709262][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 243.719302][ T5799] Workqueue: events l2cap_info_timeout [ 243.724747][ T5799] Call Trace: [ 243.728005][ T5799] [ 243.730925][ T5799] dump_stack_lvl+0x100/0x190 [ 243.735584][ T5799] vpanic+0x20d/0x630 [ 243.739539][ T5799] panic+0xd1/0xd1 [ 243.743238][ T5799] ? __pfx_panic+0x10/0x10 [ 243.747631][ T5799] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 243.752904][ T5799] ? preempt_schedule_common+0x42/0xc0 [ 243.758344][ T5799] ? check_panic_on_warn+0x1f/0x90 [ 243.763433][ T5799] check_panic_on_warn.cold+0x19/0x34 [ 243.768784][ T5799] end_report.part.0+0x3a/0x90 [ 243.773530][ T5799] kasan_report.cold+0xe/0x18 [ 243.778189][ T5799] ? l2cap_sock_ready_cb+0x191/0x1a0 [ 243.783455][ T5799] l2cap_sock_ready_cb+0x191/0x1a0 [ 243.788546][ T5799] l2cap_conn_start+0x123/0xb20 [ 243.793377][ T5799] ? __pfx_l2cap_conn_start+0x10/0x10 [ 243.798727][ T5799] ? __pfx___mutex_lock+0x10/0x10 [ 243.803728][ T5799] ? debug_object_deactivate+0x2e4/0x3b0 [ 243.809341][ T5799] ? process_one_work+0x80b/0x1840 [ 243.814432][ T5799] l2cap_info_timeout+0x81/0xa0 [ 243.819259][ T5799] process_one_work+0x9c2/0x1840 [ 243.824184][ T5799] ? __pfx_process_one_work+0x10/0x10 [ 243.829533][ T5799] ? assign_work+0x19c/0x250 [ 243.834102][ T5799] worker_thread+0x5da/0xe40 [ 243.838672][ T5799] ? __pfx_worker_thread+0x10/0x10 [ 243.843764][ T5799] ? kthread+0x17d/0x730 [ 243.847986][ T5799] ? __pfx_worker_thread+0x10/0x10 [ 243.853079][ T5799] kthread+0x3b3/0x730 [ 243.857125][ T5799] ? __pfx_kthread+0x10/0x10 [ 243.861690][ T5799] ? ret_from_fork+0x79/0xaf0 [ 243.866348][ T5799] ? ret_from_fork+0x79/0xaf0 [ 243.871003][ T5799] ? rcu_is_watching+0x12/0xc0 [ 243.875746][ T5799] ? __pfx_kthread+0x10/0x10 [ 243.880312][ T5799] ret_from_fork+0x754/0xaf0 [ 243.884880][ T5799] ? __pfx_ret_from_fork+0x10/0x10 [ 243.889970][ T5799] ? __switch_to+0x7b9/0x10c0 [ 243.894627][ T5799] ? __pfx_kthread+0x10/0x10 [ 243.899192][ T5799] ret_from_fork_asm+0x1a/0x30 [ 243.903937][ T5799] [ 243.907191][ T5799] Kernel Offset: disabled [ 243.911486][ T5799] Rebooting in 86400 seconds..