[ 86.850667][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. 2025/07/28 03:00:20 parsed 1 programs 2025/07/28 03:00:20 executed programs: 0 [ 92.757812][ T6165] cgroup: Unknown subsys name 'cpuset' [ 93.814933][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.823205][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.830971][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.838988][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.847787][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.959520][ T6165] chnl_net:caif_netlink_parms(): no params data found [ 94.024373][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.031627][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.038895][ T6165] bridge_slave_0: entered allmulticast mode [ 94.046142][ T6165] bridge_slave_0: entered promiscuous mode [ 94.053817][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.061182][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.068351][ T6165] bridge_slave_1: entered allmulticast mode [ 94.075512][ T6165] bridge_slave_1: entered promiscuous mode [ 94.106094][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.118028][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.151119][ T6165] team0: Port device team_slave_0 added [ 94.158829][ T6165] team0: Port device team_slave_1 added [ 94.185693][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.193184][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.219534][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.232618][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.240314][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.266848][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.304861][ T6165] hsr_slave_0: entered promiscuous mode [ 94.311688][ T6165] hsr_slave_1: entered promiscuous mode [ 94.413626][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.420775][ T6165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.428239][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.435446][ T6165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.484455][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.502657][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.511467][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.526942][ T6165] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.540815][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.547916][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.560969][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.568133][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.628833][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.951955][ T6165] veth0_vlan: entered promiscuous mode [ 94.962281][ T6165] veth1_vlan: entered promiscuous mode [ 94.989281][ T6165] veth0_macvtap: entered promiscuous mode [ 94.998489][ T6165] veth1_macvtap: entered promiscuous mode [ 95.017013][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.034478][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.890113][ T5165] Bluetooth: hci0: command tx timeout [ 97.969850][ T5165] Bluetooth: hci0: command tx timeout 2025/07/28 03:00:26 executed programs: 2 [ 100.050225][ T5165] Bluetooth: hci0: command tx timeout [ 102.129121][ T5165] Bluetooth: hci0: command tx timeout 2025/07/28 03:00:32 executed programs: 4 2025/07/28 03:00:38 executed programs: 6 2025/07/28 03:00:45 executed programs: 8 2025/07/28 03:00:51 executed programs: 10 2025/07/28 03:00:57 executed programs: 12 2025/07/28 03:01:03 executed programs: 14 2025/07/28 03:01:09 executed programs: 16 [ 216.929779][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 286.530985][ T31] INFO: task syz-executor.0:6250 blocked for more than 143 seconds. [ 286.539210][ T31] Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 [ 286.546017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.554909][ T31] task:syz-executor.0 state:D stack:25096 pid:6250 tgid:6250 ppid:6165 task_flags:0x400040 flags:0x00004006 [ 286.567074][ T31] Call Trace: [ 286.570412][ T31] [ 286.573375][ T31] __schedule+0x16fd/0x4cf0 [ 286.577983][ T31] ? schedule+0x165/0x360 [ 286.582416][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.587569][ T31] ? __pfx___schedule+0x10/0x10 [ 286.592551][ T31] ? schedule+0x91/0x360 [ 286.596841][ T31] schedule+0x165/0x360 [ 286.601126][ T31] schedule_timeout+0x9a/0x270 [ 286.605943][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.611440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.616725][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.622001][ T31] ? wait_for_completion+0x267/0x5d0 [ 286.627490][ T31] wait_for_completion+0x2bf/0x5d0 [ 286.632688][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 286.638379][ T31] ? __flush_work+0xd2/0xbc0 [ 286.643074][ T31] ? __flush_work+0xd2/0xbc0 [ 286.647706][ T31] __flush_work+0x9b9/0xbc0 [ 286.652378][ T31] ? __flush_work+0xd2/0xbc0 [ 286.657093][ T31] ? __pfx___flush_work+0x10/0x10 [ 286.662239][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 286.667782][ T31] ? __pfx___cancel_work+0x10/0x10 [ 286.672990][ T31] ? sock_close+0x9b/0x240 [ 286.677459][ T31] __cancel_work_sync+0xbe/0x110 [ 286.682472][ T31] tls_sk_proto_close+0xc7/0x8c0 [ 286.687532][ T31] ? ip_mc_drop_socket+0x25a/0x270 [ 286.692733][ T31] inet_release+0x141/0x190 [ 286.697281][ T31] sock_close+0xc3/0x240 [ 286.701573][ T31] ? __pfx_sock_close+0x10/0x10 [ 286.706441][ T31] __fput+0x449/0xa70 [ 286.710502][ T31] fput_close_sync+0x119/0x200 [ 286.715286][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 286.720630][ T31] __x64_sys_close+0x7f/0x110 [ 286.725316][ T31] do_syscall_64+0xfa/0x3b0 [ 286.729873][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.735269][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.741429][ T31] ? clear_bhb_loop+0x60/0xb0 [ 286.746194][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.752287][ T31] RIP: 0033:0x45420a [ 286.756396][ T31] RSP: 002b:00007ffef3a47360 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 286.765152][ T31] RAX: ffffffffffffffda RBX: 0000000000022942 RCX: 000000000045420a [ 286.773198][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 286.781215][ T31] RBP: 0000000000000005 R08: 0000001b2d020118 R09: 7fffffffffffffff [ 286.789257][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 286.797218][ T31] R13: 0000000000022c62 R14: 000000000054d900 R15: 000000000054cf00 [ 286.805252][ T31] [ 286.808313][ T31] [ 286.808313][ T31] Showing all locks held in the system: [ 286.816129][ T31] 1 lock held by khungtaskd/31: [ 286.821048][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 286.831056][ T31] 3 locks held by kworker/1:2/3595: [ 286.836341][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.847378][ T31] #1: ffffc9000cf17bc0 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.861205][ T31] #2: ffff8880333528f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tx_work_handler+0x10a/0x200 [ 286.870769][ T31] 2 locks held by getty/5604: [ 286.875466][ T31] #0: ffff888030a5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.885331][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 286.895515][ T31] 1 lock held by syz-executor.0/6250: [ 286.900964][ T31] #0: ffff88807cc25c08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 286.911226][ T31] [ 286.913539][ T31] ============================================= [ 286.913539][ T31] [ 286.922102][ T31] NMI backtrace for cpu 0 [ 286.922123][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 286.922139][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.922148][ T31] Call Trace: [ 286.922155][ T31] [ 286.922161][ T31] dump_stack_lvl+0x189/0x250 [ 286.922180][ T31] ? __wake_up_klogd+0xd9/0x110 [ 286.922203][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.922219][ T31] ? __pfx__printk+0x10/0x10 [ 286.922247][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 286.922270][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.922289][ T31] ? _printk+0xcf/0x120 [ 286.922313][ T31] ? __pfx__printk+0x10/0x10 [ 286.922335][ T31] ? debug_show_all_locks+0x2e/0x180 [ 286.922352][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.922370][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 286.922394][ T31] watchdog+0xfee/0x1030 [ 286.922411][ T31] ? watchdog+0x1de/0x1030 [ 286.922432][ T31] kthread+0x711/0x8a0 [ 286.922458][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.922471][ T31] ? __pfx_kthread+0x10/0x10 [ 286.922493][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.922509][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.922524][ T31] ? __pfx_kthread+0x10/0x10 [ 286.922546][ T31] ret_from_fork+0x3fc/0x770 [ 286.922566][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.922588][ T31] ? __switch_to_asm+0x39/0x70 [ 286.922604][ T31] ? __switch_to_asm+0x33/0x70 [ 286.922618][ T31] ? __pfx_kthread+0x10/0x10 [ 286.922634][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.922661][ T31] [ 286.922667][ T31] Sending NMI from CPU 0 to CPUs 1: [ 287.084832][ C1] NMI backtrace for cpu 1 [ 287.084848][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 287.084865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.084875][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 287.084897][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 8d 1a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 287.084909][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 287.084923][ C1] RAX: c87abe6c4fdf2900 RBX: ffffffff81976a28 RCX: c87abe6c4fdf2900 [ 287.084935][ C1] RDX: 0000000000000001 RSI: ffffffff8d996945 RDI: ffffffff8be28d80 [ 287.084945][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 287.084956][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1ddf0 [ 287.084966][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad4b40 [ 287.084976][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 287.084988][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.084998][ C1] CR2: 00005559caf4c168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 287.085012][ C1] Call Trace: [ 287.085019][ C1] [ 287.085025][ C1] default_idle+0x13/0x20 [ 287.085044][ C1] default_idle_call+0x74/0xb0 [ 287.085062][ C1] do_idle+0x1e8/0x510 [ 287.085083][ C1] ? __pfx_do_idle+0x10/0x10 [ 287.085107][ C1] cpu_startup_entry+0x44/0x60 [ 287.085124][ C1] start_secondary+0x101/0x110 [ 287.085137][ C1] common_startup_64+0x13e/0x147 [ 287.085163][ C1] [ 287.085915][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.085928][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 287.085948][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.085957][ T31] Call Trace: [ 287.085965][ T31] [ 287.085972][ T31] dump_stack_lvl+0x99/0x250 [ 287.085995][ T31] ? __asan_memcpy+0x40/0x70 [ 287.086022][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.086041][ T31] ? __pfx__printk+0x10/0x10 [ 287.086074][ T31] panic+0x2db/0x790 [ 287.086098][ T31] ? __pfx_panic+0x10/0x10 [ 287.086116][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 287.086139][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 287.086165][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 287.086195][ T31] watchdog+0x102d/0x1030 [ 287.086213][ T31] ? watchdog+0x1de/0x1030 [ 287.086235][ T31] kthread+0x711/0x8a0 [ 287.086261][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.086274][ T31] ? __pfx_kthread+0x10/0x10 [ 287.086298][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.086314][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.086330][ T31] ? __pfx_kthread+0x10/0x10 [ 287.086352][ T31] ret_from_fork+0x3fc/0x770 [ 287.086372][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.086395][ T31] ? __switch_to_asm+0x39/0x70 [ 287.086413][ T31] ? __switch_to_asm+0x33/0x70 [ 287.086432][ T31] ? __pfx_kthread+0x10/0x10 [ 287.086454][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.086489][ T31] [ 287.394643][ T31] Kernel Offset: disabled [ 287.398955][ T31] Rebooting in 86400 seconds..