Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. 2026/05/09 21:03:02 parsed 1 programs [ 66.896456][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 66.896471][ T30] audit: type=1400 audit(1778360582.458:129): avc: denied { node_bind } for pid=5611 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.965089][ T30] audit: type=1400 audit(1778360584.528:130): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.988642][ T30] audit: type=1400 audit(1778360584.548:131): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.991431][ T5619] cgroup: Unknown subsys name 'net' [ 69.017703][ T30] audit: type=1400 audit(1778360584.578:132): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.183658][ T5619] cgroup: Unknown subsys name 'cpuset' [ 69.191112][ T5619] cgroup: Unknown subsys name 'rlimit' [ 69.342042][ T30] audit: type=1400 audit(1778360584.908:133): avc: denied { setattr } for pid=5619 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.386743][ T30] audit: type=1400 audit(1778360584.908:134): avc: denied { create } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.408449][ T30] audit: type=1400 audit(1778360584.908:135): avc: denied { write } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.429308][ T30] audit: type=1400 audit(1778360584.908:136): avc: denied { read } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.450090][ T30] audit: type=1400 audit(1778360584.928:137): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.459758][ T5622] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 69.475334][ T30] audit: type=1400 audit(1778360584.928:138): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 70.406843][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.917900][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 71.917916][ T30] audit: type=1400 audit(1778360587.478:143): avc: denied { execmem } for pid=5630 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.943849][ T30] audit: type=1400 audit(1778360587.478:144): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 71.968069][ T30] audit: type=1400 audit(1778360587.478:145): avc: denied { mount } for pid=5630 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.991538][ T30] audit: type=1400 audit(1778360587.478:146): avc: denied { read } for pid=5630 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.012813][ T30] audit: type=1400 audit(1778360587.488:147): avc: denied { open } for pid=5630 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.036687][ T30] audit: type=1400 audit(1778360587.488:148): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.072452][ T30] audit: type=1400 audit(1778360587.528:149): avc: denied { mounton } for pid=5630 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.101131][ T30] audit: type=1400 audit(1778360587.528:150): avc: denied { mount } for pid=5630 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 72.125234][ T30] audit: type=1401 audit(1778360587.528:151): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 72.173003][ T30] audit: type=1400 audit(1778360587.738:152): avc: denied { mounton } for pid=5633 comm="syz-executor" path="/root/syzkaller.rJ6LYV/syz-tmp" dev="sda1" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.210881][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.872413][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.879988][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.887637][ T5650] bridge_slave_0: entered allmulticast mode [ 72.894758][ T5650] bridge_slave_0: entered promiscuous mode [ 72.903515][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.910622][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.917883][ T5650] bridge_slave_1: entered allmulticast mode [ 72.924560][ T5650] bridge_slave_1: entered promiscuous mode [ 72.944335][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.954863][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.975901][ T5650] team0: Port device team_slave_0 added [ 72.982984][ T5650] team0: Port device team_slave_1 added [ 72.999266][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.006245][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.032128][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.044003][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.050928][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.076810][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.106651][ T5650] hsr_slave_0: entered promiscuous mode [ 73.113056][ T5650] hsr_slave_1: entered promiscuous mode [ 73.204105][ T5650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.214763][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.222532][ T5650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.231864][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.239635][ T5650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.248182][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.255908][ T5650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.265359][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.289030][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.296284][ T5650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.304283][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.311364][ T5650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.350304][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.366921][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.375266][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.387505][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.399200][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.406290][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.417678][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.424806][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.644451][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.681040][ T5650] veth0_vlan: entered promiscuous mode [ 73.690749][ T5650] veth1_vlan: entered promiscuous mode [ 73.714729][ T5650] veth0_macvtap: entered promiscuous mode [ 73.724901][ T5650] veth1_macvtap: entered promiscuous mode [ 73.738853][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.752121][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.765382][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775092][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787742][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.796603][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.891124][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.954718][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.032108][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.093459][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.508325][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.520436][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.547471][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.555496][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.388244][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.397118][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.405057][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.415534][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.423102][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/05/09 21:03:11 executed programs: 0 [ 75.822481][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.830321][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.838410][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.848073][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.855771][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.131845][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.139046][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.146547][ T5744] bridge_slave_0: entered allmulticast mode [ 76.153333][ T5744] bridge_slave_0: entered promiscuous mode [ 76.160915][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.168145][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.175496][ T5744] bridge_slave_1: entered allmulticast mode [ 76.182257][ T5744] bridge_slave_1: entered promiscuous mode [ 76.203358][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.214321][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.235691][ T5744] team0: Port device team_slave_0 added [ 76.242759][ T5744] team0: Port device team_slave_1 added [ 76.260430][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.267509][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.293734][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.305640][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.312700][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.338620][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.368165][ T5744] hsr_slave_0: entered promiscuous mode [ 76.374235][ T5744] hsr_slave_1: entered promiscuous mode [ 76.380597][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 76.386450][ T5744] Cannot create hsr debugfs directory [ 76.516117][ T36] bridge_slave_1: left allmulticast mode [ 76.523625][ T36] bridge_slave_1: left promiscuous mode [ 76.530800][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.542962][ T36] bridge_slave_0: left allmulticast mode [ 76.548647][ T36] bridge_slave_0: left promiscuous mode [ 76.554991][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.751111][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.763932][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.774039][ T36] bond0 (unregistering): Released all slaves [ 76.820354][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.889343][ T36] hsr_slave_0: left promiscuous mode [ 76.898285][ T36] hsr_slave_1: left promiscuous mode [ 76.904437][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.912118][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.921720][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.929283][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.950603][ T36] veth1_macvtap: left promiscuous mode [ 76.956734][ T36] veth0_macvtap: left promiscuous mode [ 76.962786][ T36] veth1_vlan: left promiscuous mode [ 76.968086][ T36] veth0_vlan: left promiscuous mode [ 77.091569][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 77.091584][ T30] audit: type=1400 audit(1778360592.658:174): avc: denied { write } for pid=5776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.188633][ T30] audit: type=1400 audit(1778360592.748:175): avc: denied { write } for pid=5787 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.229816][ T36] team0 (unregistering): Port device team_slave_1 removed [ 77.245741][ T36] team0 (unregistering): Port device team_slave_0 removed [ 77.315083][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.543554][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.554714][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.568356][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.583235][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.594372][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.604265][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.608261][ T30] audit: type=1400 audit(1778360593.168:176): avc: denied { write } for pid=5790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.613508][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.653874][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.712481][ T30] audit: type=1400 audit(1778360593.278:177): avc: denied { write } for pid=5807 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.891732][ T4930] Bluetooth: hci0: command tx timeout [ 78.003204][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.022500][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.040446][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.047608][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.084190][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.091672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.285461][ T30] audit: type=1400 audit(1778360593.848:178): avc: denied { write } for pid=5809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.458983][ T30] audit: type=1400 audit(1778360594.018:179): avc: denied { write } for pid=5823 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.648167][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.684941][ T5744] veth0_vlan: entered promiscuous mode [ 78.694214][ T5744] veth1_vlan: entered promiscuous mode [ 78.715298][ T5744] veth0_macvtap: entered promiscuous mode [ 78.724366][ T5744] veth1_macvtap: entered promiscuous mode [ 78.736666][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.750144][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.763296][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.772129][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.784188][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793651][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.836571][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.844488][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.867567][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.876154][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.916496][ T30] audit: type=1400 audit(1778360594.478:180): avc: denied { unlink } for pid=5832 comm="syz.0.17" name="#1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.923969][ T5833] evm: overlay not supported [ 78.943278][ T30] audit: type=1400 audit(1778360594.478:181): avc: denied { mount } for pid=5832 comm="syz.0.17" name="/" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.968473][ T30] audit: type=1804 audit(1778360594.528:182): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.17" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 79.971909][ T4930] Bluetooth: hci0: command tx timeout [ 81.178555][ T24] cfg80211: failed to load regulatory.db [ 82.051631][ T4930] Bluetooth: hci0: command tx timeout [ 84.141234][ T4930] Bluetooth: hci0: command tx timeout [ 93.948085][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.957829][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.965923][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.974266][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.984985][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.499774][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.507052][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.514244][ T5838] bridge_slave_0: entered allmulticast mode [ 94.521547][ T5838] bridge_slave_0: entered promiscuous mode [ 94.529391][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.537056][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.544270][ T5838] bridge_slave_1: entered allmulticast mode [ 94.551863][ T5838] bridge_slave_1: entered promiscuous mode [ 94.583520][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.595130][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.625632][ T5838] team0: Port device team_slave_0 added [ 94.634249][ T5838] team0: Port device team_slave_1 added [ 94.661815][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.668800][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.699359][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.711593][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.718542][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.745094][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.789306][ T5838] hsr_slave_0: entered promiscuous mode [ 94.795672][ T5838] hsr_slave_1: entered promiscuous mode [ 94.970263][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.981410][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.989334][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.998623][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.007273][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.018476][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.027775][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.038145][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.062637][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.069768][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.077164][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.084286][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.145082][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.162240][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.170359][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.186221][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.199697][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.206845][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.236564][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.243704][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.268005][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.280197][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.601954][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.645825][ T5838] veth0_vlan: entered promiscuous mode [ 95.660324][ T5838] veth1_vlan: entered promiscuous mode [ 95.693750][ T5838] veth0_macvtap: entered promiscuous mode [ 95.704228][ T5838] veth1_macvtap: entered promiscuous mode [ 95.725757][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.744960][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.760413][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.779380][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.788988][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.810838][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.867625][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.881087][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/09 21:03:31 executed programs: 3 [ 95.916725][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.926049][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.023032][ T30] audit: type=1804 audit(1778360611.578:183): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.18" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 96.051425][ T4930] Bluetooth: hci1: command tx timeout [ 98.132210][ T4930] Bluetooth: hci1: command tx timeout [ 100.211834][ T4930] Bluetooth: hci1: command tx timeout [ 102.291221][ T4930] Bluetooth: hci1: command tx timeout [ 111.059161][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.067772][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.075799][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.083441][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.090870][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.989373][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.011326][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.032762][ T5886] bridge_slave_0: entered allmulticast mode [ 112.046065][ T5886] bridge_slave_0: entered promiscuous mode [ 112.063473][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.082061][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.091475][ T5886] bridge_slave_1: entered allmulticast mode [ 112.107630][ T5886] bridge_slave_1: entered promiscuous mode [ 112.169256][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.194079][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.256686][ T5886] team0: Port device team_slave_0 added [ 112.274869][ T5886] team0: Port device team_slave_1 added [ 112.325667][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.341234][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.401198][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.422781][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.441195][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.491211][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.537077][ T5886] hsr_slave_0: entered promiscuous mode [ 112.544246][ T5886] hsr_slave_1: entered promiscuous mode [ 112.550354][ T5886] debugfs: 'hsr0' already exists in 'hsr' [ 112.556971][ T5886] Cannot create hsr debugfs directory [ 112.818196][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.844748][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.862058][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.880897][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.902257][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.917931][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.941944][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.954498][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.110298][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.147466][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.170605][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.177750][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.185240][ T5734] Bluetooth: hci2: command tx timeout [ 113.225400][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.232529][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.757757][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.803823][ T5886] veth0_vlan: entered promiscuous mode [ 113.818660][ T5886] veth1_vlan: entered promiscuous mode [ 113.850053][ T5886] veth0_macvtap: entered promiscuous mode [ 113.859770][ T5886] veth1_macvtap: entered promiscuous mode [ 113.895648][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.923283][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.950902][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.980731][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.002168][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.025758][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.133226][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.161479][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.219978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.236119][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/09 21:03:49 executed programs: 4 [ 114.391507][ T30] audit: type=1804 audit(1778360629.948:184): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.19" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 115.251343][ T5734] Bluetooth: hci2: command tx timeout [ 117.341316][ T5734] Bluetooth: hci2: command tx timeout [ 119.411592][ T5734] Bluetooth: hci2: command tx timeout [ 127.261830][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.268905][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.467208][ T4930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.475768][ T4930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.483529][ T4930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.492098][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.500420][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.501386][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.508576][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.515768][ T5923] bridge_slave_0: entered allmulticast mode [ 130.523073][ T5923] bridge_slave_0: entered promiscuous mode [ 130.531861][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.539009][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.546250][ T5923] bridge_slave_1: entered allmulticast mode [ 130.553534][ T5923] bridge_slave_1: entered promiscuous mode [ 130.582851][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.594972][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.624839][ T5923] team0: Port device team_slave_0 added [ 130.632978][ T5923] team0: Port device team_slave_1 added [ 130.659152][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.666203][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.711194][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.732724][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.751199][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.801253][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.890854][ T5923] hsr_slave_0: entered promiscuous mode [ 130.911985][ T5923] hsr_slave_1: entered promiscuous mode [ 130.918082][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 130.931204][ T5923] Cannot create hsr debugfs directory [ 131.278561][ T5923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.304929][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.321945][ T5923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.344713][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.362145][ T5923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.382161][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.390036][ T5923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.414399][ T5923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.558782][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.572046][ T5734] Bluetooth: hci3: command tx timeout [ 131.593868][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.634508][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.641649][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.682597][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.689729][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.379794][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.462603][ T5923] veth0_vlan: entered promiscuous mode [ 132.488345][ T5923] veth1_vlan: entered promiscuous mode [ 132.542594][ T5923] veth0_macvtap: entered promiscuous mode [ 132.566603][ T5923] veth1_macvtap: entered promiscuous mode [ 132.596373][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.626347][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.653195][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.672496][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.698782][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.723739][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.873445][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.895195][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.949984][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.964442][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/09 21:04:08 executed programs: 5 [ 133.146718][ T30] audit: type=1804 audit(1778360648.708:185): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.20" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 133.652037][ T5734] Bluetooth: hci3: command tx timeout [ 135.731229][ T5734] Bluetooth: hci3: command tx timeout [ 137.811728][ T5734] Bluetooth: hci3: command tx timeout [ 148.262291][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.272564][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.281062][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.295248][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.302717][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.087084][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.094329][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.101809][ T5960] bridge_slave_0: entered allmulticast mode [ 149.108989][ T5960] bridge_slave_0: entered promiscuous mode [ 149.119252][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.126650][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.134201][ T5960] bridge_slave_1: entered allmulticast mode [ 149.141688][ T5960] bridge_slave_1: entered promiscuous mode [ 149.170442][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.182619][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.214933][ T5960] team0: Port device team_slave_0 added [ 149.223416][ T5960] team0: Port device team_slave_1 added [ 149.249177][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.271225][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.321251][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.343492][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.350445][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.431177][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.535011][ T5960] hsr_slave_0: entered promiscuous mode [ 149.553724][ T5960] hsr_slave_1: entered promiscuous mode [ 149.571263][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 149.577679][ T5960] Cannot create hsr debugfs directory [ 150.026211][ T5960] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.062012][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.084664][ T5960] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.116293][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.141972][ T5960] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.185138][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.203865][ T5960] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.223784][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.367221][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.374081][ T4930] Bluetooth: hci4: command tx timeout [ 150.412773][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.437154][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.444313][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.506356][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.513501][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.338806][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.824638][ T5960] veth0_vlan: entered promiscuous mode [ 151.857538][ T5960] veth1_vlan: entered promiscuous mode [ 151.935502][ T5960] veth0_macvtap: entered promiscuous mode [ 151.955459][ T5960] veth1_macvtap: entered promiscuous mode [ 151.996488][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.025268][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.067062][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.108689][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.152708][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.191997][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.351664][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.385644][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.455068][ T4930] Bluetooth: hci4: command tx timeout [ 152.480396][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.512933][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/09 21:04:28 executed programs: 6 [ 152.717137][ T30] audit: type=1804 audit(1778360668.278:186): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.21" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 154.531319][ T4930] Bluetooth: hci4: command tx timeout [ 156.612175][ T4930] Bluetooth: hci4: command tx timeout [ 167.777781][ T5734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.791056][ T5734] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.802891][ T5734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.814329][ T5734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.823411][ T5734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.361594][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.402539][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.441558][ T6007] bridge_slave_0: entered allmulticast mode [ 169.452169][ T6007] bridge_slave_0: entered promiscuous mode [ 169.473112][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.480235][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.522826][ T6007] bridge_slave_1: entered allmulticast mode [ 169.544121][ T6007] bridge_slave_1: entered promiscuous mode [ 169.636795][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.683839][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.774904][ T6007] team0: Port device team_slave_0 added [ 169.803982][ T6007] team0: Port device team_slave_1 added [ 169.888029][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.901972][ T5734] Bluetooth: hci5: command tx timeout [ 169.921421][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.032127][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.083520][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.104996][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.192641][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.332616][ T6007] hsr_slave_0: entered promiscuous mode [ 170.354968][ T6007] hsr_slave_1: entered promiscuous mode [ 170.374338][ T6007] debugfs: 'hsr0' already exists in 'hsr' [ 170.393218][ T6007] Cannot create hsr debugfs directory [ 170.944470][ T6007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.978976][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.002946][ T6007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.035069][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.066654][ T6007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.088875][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.116142][ T6007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.146580][ T6007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.364693][ T6007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.424435][ T6007] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.460596][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.467799][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.536707][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.543853][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.982203][ T5734] Bluetooth: hci5: command tx timeout [ 172.630389][ T6007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.289252][ T6007] veth0_vlan: entered promiscuous mode [ 173.327862][ T6007] veth1_vlan: entered promiscuous mode [ 173.412538][ T6007] veth0_macvtap: entered promiscuous mode [ 173.447100][ T6007] veth1_macvtap: entered promiscuous mode [ 173.503250][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.545018][ T6007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.586812][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.624090][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.664199][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.701313][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.879518][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.917521][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.012680][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.034397][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.051861][ T5734] Bluetooth: hci5: command tx timeout 2026/05/09 21:04:49 executed programs: 7 [ 174.188766][ T30] audit: type=1804 audit(1778360689.748:187): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.22" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 176.131460][ T5734] Bluetooth: hci5: command tx timeout [ 188.694967][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.701321][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.428742][ T4930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.437672][ T4930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.452762][ T4930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.467498][ T4930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.478252][ T4930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.035027][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.042260][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.049427][ T6054] bridge_slave_0: entered allmulticast mode [ 191.058118][ T6054] bridge_slave_0: entered promiscuous mode [ 191.066057][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.073384][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.080539][ T6054] bridge_slave_1: entered allmulticast mode [ 191.088969][ T6054] bridge_slave_1: entered promiscuous mode [ 191.120036][ T6054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.132308][ T6054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.163678][ T6054] team0: Port device team_slave_0 added [ 191.172211][ T6054] team0: Port device team_slave_1 added [ 191.203473][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.221926][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.282773][ T6054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.319820][ T6054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.342432][ T6054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.428000][ T6054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.571293][ T5734] Bluetooth: hci6: command tx timeout [ 191.590360][ T6054] hsr_slave_0: entered promiscuous mode [ 191.625010][ T6054] hsr_slave_1: entered promiscuous mode [ 191.666885][ T6054] debugfs: 'hsr0' already exists in 'hsr' [ 191.704046][ T6054] Cannot create hsr debugfs directory [ 192.444804][ T6054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.488242][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.513874][ T6054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.553988][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.602014][ T6054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.627095][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.675747][ T6054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.713863][ T6054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.957791][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.025622][ T6054] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.080266][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.087448][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.161765][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.168892][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.661405][ T5734] Bluetooth: hci6: command tx timeout [ 194.386885][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.129027][ T6054] veth0_vlan: entered promiscuous mode [ 195.170343][ T6054] veth1_vlan: entered promiscuous mode [ 195.275454][ T6054] veth0_macvtap: entered promiscuous mode [ 195.314328][ T6054] veth1_macvtap: entered promiscuous mode [ 195.383228][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.441309][ T6054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.507862][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.548626][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.590051][ T138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.619612][ T138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.731823][ T5734] Bluetooth: hci6: command tx timeout [ 195.776340][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.792905][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.827555][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.845858][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/09 21:05:11 executed programs: 8 [ 196.074620][ T30] audit: type=1804 audit(1778360711.638:188): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.23" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 197.811195][ T5734] Bluetooth: hci6: command tx timeout [ 201.011610][ T4930] Bluetooth: hci0: command 0x0406 tx timeout [ 211.347295][ T4930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.358686][ T4930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.366718][ T4930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.380696][ T4930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.392411][ T4930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.279413][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.286645][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.327186][ T6099] bridge_slave_0: entered allmulticast mode [ 213.386599][ T6099] bridge_slave_0: entered promiscuous mode [ 213.411344][ T5734] Bluetooth: hci7: command tx timeout [ 213.450121][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.514197][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.547274][ T6099] bridge_slave_1: entered allmulticast mode [ 213.586843][ T6099] bridge_slave_1: entered promiscuous mode [ 213.713850][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.770294][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.896515][ T6099] team0: Port device team_slave_0 added [ 213.940392][ T6099] team0: Port device team_slave_1 added [ 214.059110][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.089701][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.200016][ T6099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.252748][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.283169][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.391272][ T6099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.508189][ T6099] hsr_slave_0: entered promiscuous mode [ 214.532357][ T6099] hsr_slave_1: entered promiscuous mode [ 214.560970][ T6099] debugfs: 'hsr0' already exists in 'hsr' [ 214.586123][ T6099] Cannot create hsr debugfs directory [ 215.308658][ T6099] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 215.357460][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.398692][ T6099] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.443190][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.476448][ T6099] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.491516][ T4930] Bluetooth: hci7: command tx timeout [ 215.514055][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.537769][ T6099] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 215.550084][ T6099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.795984][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.866108][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.916229][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.923416][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.978876][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.986017][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.372499][ T4930] Bluetooth: hci1: command 0x0406 tx timeout [ 217.346133][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.571690][ T5734] Bluetooth: hci7: command tx timeout [ 218.191813][ T6099] veth0_vlan: entered promiscuous mode [ 218.243705][ T6099] veth1_vlan: entered promiscuous mode [ 218.359251][ T6099] veth0_macvtap: entered promiscuous mode [ 218.396397][ T6099] veth1_macvtap: entered promiscuous mode [ 218.473726][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.528578][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.594099][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.642759][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.694690][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.724814][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.967612][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.999439][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.125239][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.168656][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/09 21:05:34 executed programs: 9 [ 219.532545][ T30] audit: type=1804 audit(1778360735.098:189): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.24" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 219.651462][ T5734] Bluetooth: hci7: command tx timeout [ 232.851921][ T31] INFO: task syz.0.17:5832 blocked for more than 143 seconds. [ 232.890802][ T31] Not tainted syzkaller #0 [ 232.916264][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.961439][ T31] task:syz.0.17 state:D stack:27528 pid:5832 tgid:5832 ppid:5744 task_flags:0x400040 flags:0x00080002 [ 233.023149][ T31] Call Trace: [ 233.039537][ T31] [ 233.054098][ T31] __schedule+0x1295/0x67a0 [ 233.080078][ T31] ? __pfx___schedule+0x10/0x10 [ 233.104306][ T31] ? find_held_lock+0x2b/0x80 [ 233.128393][ T31] ? schedule+0x2bf/0x390 [ 233.150101][ T31] schedule+0xdd/0x390 [ 233.171267][ T31] schedule_preempt_disabled+0x13/0x30 [ 233.204256][ T31] __mutex_lock+0xced/0x1b10 [ 233.223492][ T31] ? ima_file_free+0x146/0x340 [ 233.247095][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 233.276979][ T31] ? locks_remove_file+0xd1/0x610 [ 233.304289][ T31] ? ima_file_free+0x146/0x340 [ 233.330922][ T31] ima_file_free+0x146/0x340 [ 233.354359][ T31] security_file_release+0x10e/0x120 [ 233.381276][ T31] __fput+0x359/0xb50 [ 233.404323][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.432743][ T31] task_work_run+0x150/0x240 [ 233.456575][ T31] ? __pfx_task_work_run+0x10/0x10 [ 233.483341][ T31] ? rcu_is_watching+0x12/0xc0 [ 233.513939][ T31] exit_to_user_mode_loop+0x107/0x4f0 [ 233.542923][ T31] ? rcu_is_watching+0x12/0xc0 [ 233.563656][ T31] do_syscall_64+0x706/0xf80 [ 233.588644][ T31] ? clear_bhb_loop+0x40/0x90 [ 233.614076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.647556][ T31] RIP: 0033:0x7f6c1e39cdd9 [ 233.666892][ T31] RSP: 002b:00007ffc054e3498 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 233.717301][ T31] RAX: 0000000000000000 RBX: 00007f6c1e617da0 RCX: 00007f6c1e39cdd9 [ 233.755349][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 233.801184][ T31] RBP: 00007f6c1e617da0 R08: 0000000000000006 R09: 0000000000000000 [ 233.840394][ T31] R10: 00007f6c1e617cb0 R11: 0000000000000246 R12: 000000000001375f [ 233.878795][ T31] R13: 00007f6c1e615fac R14: 000000000001348a R15: 00007ffc054e35a0 [ 233.927819][ T31] [ 233.944030][ T31] [ 233.944030][ T31] Showing all locks held in the system: [ 233.984387][ T31] 1 lock held by khungtaskd/31: [ 234.006412][ T31] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 234.060456][ T31] 2 locks held by getty/5367: [ 234.085300][ T31] #0: ffff8880383f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 234.130413][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 234.188114][ T31] 1 lock held by syz.0.17/5832: [ 234.214467][ T31] #0: ffff88807b597ed0 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.259204][ T31] 1 lock held by syz.0.17/5833: [ 234.281190][ T31] 1 lock held by syz.1.18/5873: [ 234.305538][ T31] #0: ffff888075c6e060 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.352701][ T31] 1 lock held by syz.1.18/5874: [ 234.375767][ T31] 1 lock held by syz.2.19/5920: [ 234.398505][ T31] #0: ffff88807b597dc8 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.460785][ T31] 1 lock held by syz.2.19/5921: [ 234.489327][ T31] 1 lock held by syz.3.20/5957: [ 234.519275][ T31] #0: ffff888076231ed0 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.558959][ T4930] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 234.567840][ T4930] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 234.576032][ T4930] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 234.583088][ T31] 1 lock held by syz.3.20/5958: [ 234.588228][ T31] 1 lock held by syz.4.21/6001: [ 234.597100][ T31] #0: ffff888076231dc8 (&ima_iint_mutex_key[depth] [ 234.597284][ T4930] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 234.611992][ T31] #2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.620050][ T4930] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 234.627110][ T31] 1 lock held by syz.4.21/6002: [ 234.632217][ T31] 1 lock held by syz.5.22/6051: [ 234.637258][ T31] #0: ffff888076231cc0 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.648282][ T31] 1 lock held by syz.5.22/6052: [ 234.653201][ T31] 1 lock held by syz.6.23/6095: [ 234.658103][ T31] #0: ffff888076231bb8 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.676312][ T31] 1 lock held by syz.6.23/6096: [ 234.691235][ T31] 1 lock held by syz.7.24/6141: [ 234.696129][ T31] #0: ffff88807b597cc0 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x146/0x340 [ 234.742533][ T31] 1 lock held by syz.7.24/6142: [ 234.792950][ T31] 2 locks held by modprobe/6154: [ 234.830756][ T31] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 234.895682][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 234.943290][ T31] [ 234.956292][ T31] ============================================= [ 234.956292][ T31] [ 235.024286][ T31] NMI backtrace for cpu 0 [ 235.024304][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 235.024323][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.024332][ T31] Call Trace: [ 235.024337][ T31] [ 235.024344][ T31] dump_stack_lvl+0x100/0x190 [ 235.024367][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 235.024389][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 235.024412][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 235.024439][ T31] sys_info+0x141/0x190 [ 235.024465][ T31] watchdog+0xcb1/0x1030 [ 235.024490][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 235.024511][ T31] ? __pfx_watchdog+0x10/0x10 [ 235.024531][ T31] ? __kthread_parkme+0x18c/0x230 [ 235.024550][ T31] ? kthread+0x13a/0x450 [ 235.024569][ T31] ? __pfx_watchdog+0x10/0x10 [ 235.024587][ T31] kthread+0x370/0x450 [ 235.024607][ T31] ? __pfx_kthread+0x10/0x10 [ 235.024628][ T31] ret_from_fork+0x72b/0xd50 [ 235.024652][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 235.024674][ T31] ? __switch_to+0x800/0x1100 [ 235.024700][ T31] ? __pfx_kthread+0x10/0x10 [ 235.024722][ T31] ret_from_fork_asm+0x1a/0x30 [ 235.024757][ T31] [ 235.024763][ T31] Sending NMI from CPU 0 to CPUs 1: [ 235.151456][ C1] NMI backtrace for cpu 1 [ 235.151471][ C1] CPU: 1 UID: 0 PID: 5921 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 235.151487][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.151495][ C1] RIP: 0010:sha256_transform_rorx+0x879/0x1110 [ 235.151515][ C1] Code: 43 7b f0 ea 19 03 5c 3c 68 c5 e5 73 d2 13 c4 43 7b f0 f2 0b 09 d6 45 89 df 41 31 c7 c4 63 7b f0 e1 0d 45 31 f5 c5 ed 73 d2 11 <45> 21 d7 c4 43 7b f0 f2 06 c5 ed ef d3 41 01 d9 44 21 c6 45 31 f5 [ 235.151527][ C1] RSP: 0018:ffffc90003286e40 EFLAGS: 00000286 [ 235.151539][ C1] RAX: 00000000bb2b1f54 RBX: 0000000088862601 RCX: 0000000029719769 [ 235.151547][ C1] RDX: 0000000059ce25f6 RSI: 0000000079ffb7ff RDI: 0000000000000000 [ 235.151555][ C1] RBP: ffffc90003287068 R08: 0000000078cc2a30 R09: 0000000076c01dab [ 235.151564][ C1] R10: 00000000a645c7f6 R11: 0000000016dd8603 R12: 00000000bb494b8c [ 235.151572][ C1] R13: 00000000dc3733eb R14: 00000000fed4c8b8 R15: 00000000adf69957 [ 235.151580][ C1] FS: 00007f1f69ffe6c0(0000) GS:ffff888124472000(0000) knlGS:0000000000000000 [ 235.151594][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.151603][ C1] CR2: 0000562d33f51168 CR3: 0000000075a0a000 CR4: 00000000003526f0 [ 235.151611][ C1] Call Trace: [ 235.151617][ C1] [ 235.151637][ C1] sha256_blocks_avx2+0x49/0x90 [ 235.151651][ C1] __sha256_update+0x188/0x1c0 [ 235.151677][ C1] crypto_sha256_update+0x23/0x30 [ 235.151691][ C1] crypto_shash_finup+0x34b/0x6b0 [ 235.151707][ C1] ima_calc_file_hash_tfm+0x299/0x350 [ 235.151726][ C1] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 235.151754][ C1] ? ima_alloc_tfm+0x21a/0x2e0 [ 235.151772][ C1] ima_calc_file_hash+0x1e3/0x380 [ 235.151791][ C1] ima_collect_measurement+0x94f/0xb30 [ 235.151811][ C1] ? __pfx_ima_collect_measurement+0x10/0x10 [ 235.151830][ C1] ? vfs_getxattr+0xc3/0x2a0 [ 235.151851][ C1] ? __pfx_ovl_xattr_get+0x10/0x10 [ 235.151866][ C1] ? xattr_resolve_name+0x27d/0x3f0 [ 235.151883][ C1] ? vfs_getxattr_alloc+0xec/0x350 [ 235.151901][ C1] ? ima_get_hash_algo+0x22d/0x400 [ 235.151916][ C1] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 235.151933][ C1] ? process_measurement+0xdfe/0x2350 [ 235.151949][ C1] process_measurement+0xdfe/0x2350 [ 235.151969][ C1] ? __pfx_process_measurement+0x10/0x10 [ 235.151997][ C1] ? __pfx_ovl_open+0x10/0x10 [ 235.152012][ C1] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 235.152031][ C1] ? inode_to_bdi+0x9e/0x160 [ 235.152046][ C1] ima_file_check+0xc3/0x110 [ 235.152062][ C1] ? __pfx_ima_file_check+0x10/0x10 [ 235.152081][ C1] security_file_post_open+0xc4/0x210 [ 235.152100][ C1] path_openat+0x1418/0x31a0 [ 235.152118][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.152132][ C1] ? __pfx_path_openat+0x10/0x10 [ 235.152151][ C1] do_file_open+0x20e/0x430 [ 235.152168][ C1] ? __pfx_do_file_open+0x10/0x10 [ 235.152193][ C1] ? _raw_spin_unlock+0x28/0x50 [ 235.152209][ C1] ? alloc_fd+0x476/0x790 [ 235.152227][ C1] do_sys_openat2+0x10d/0x1e0 [ 235.152246][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.152267][ C1] __x64_sys_open+0xfe/0x1d0 [ 235.152286][ C1] ? __pfx___x64_sys_open+0x10/0x10 [ 235.152305][ C1] ? rcu_is_watching+0x12/0xc0 [ 235.152326][ C1] do_syscall_64+0x10b/0xf80 [ 235.152343][ C1] ? clear_bhb_loop+0x40/0x90 [ 235.152358][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.152371][ C1] RIP: 0033:0x7f1f6a99cdd9 [ 235.152382][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.152393][ C1] RSP: 002b:00007f1f69ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 235.152405][ C1] RAX: ffffffffffffffda RBX: 00007f1f6ac15fa0 RCX: 00007f1f6a99cdd9 [ 235.152413][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 235.152421][ C1] RBP: 00007f1f6aa32d69 R08: 0000000000000000 R09: 0000000000000000 [ 235.152429][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.152436][ C1] R13: 00007f1f6ac16038 R14: 00007f1f6ac15fa0 R15: 00007ffd08230ef8 [ 235.152449][ C1] [ 236.712878][ T4930] Bluetooth: hci8: command tx timeout [ 236.862081][ T4930] Bluetooth: hci2: command 0x0406 tx timeout [ 237.021048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 237.027931][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 237.037039][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.047099][ T31] Call Trace: [ 237.050378][ T31] [ 237.053309][ T31] dump_stack_lvl+0x100/0x190 [ 237.057994][ T31] vpanic+0x552/0x970 [ 237.061979][ T31] ? __pfx_vpanic+0x10/0x10 [ 237.066480][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 237.072626][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 237.078775][ T31] panic+0xd1/0xe0 [ 237.082489][ T31] ? __pfx_panic+0x10/0x10 [ 237.086899][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 237.093041][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 237.099187][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 237.105331][ T31] ? watchdog.cold+0x1ec/0x234 [ 237.110088][ T31] ? watchdog+0xcc1/0x1030 [ 237.114511][ T31] watchdog.cold+0x1fd/0x234 [ 237.119096][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 237.124900][ T31] ? __pfx_watchdog+0x10/0x10 [ 237.129573][ T31] ? __kthread_parkme+0x18c/0x230 [ 237.134589][ T31] ? kthread+0x13a/0x450 [ 237.138825][ T31] ? __pfx_watchdog+0x10/0x10 [ 237.143491][ T31] kthread+0x370/0x450 [ 237.147552][ T31] ? __pfx_kthread+0x10/0x10 [ 237.152145][ T31] ret_from_fork+0x72b/0xd50 [ 237.156751][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 237.161861][ T31] ? __switch_to+0x800/0x1100 [ 237.166541][ T31] ? __pfx_kthread+0x10/0x10 [ 237.171131][ T31] ret_from_fork_asm+0x1a/0x30 [ 237.175902][ T31] [ 237.179495][ T31] Kernel Offset: disabled [ 237.183817][ T31] Rebooting in 86400 seconds..