[ 81.424620][ T92] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.182' (ED25519) to the list of known hosts. 2025/07/28 03:42:59 parsed 1 programs [ 86.149086][ T30] audit: type=1400 audit(1753674179.504:91): avc: denied { getattr } for pid=6146 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.173691][ T30] audit: type=1400 audit(1753674179.504:92): avc: denied { read } for pid=6146 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.195548][ T30] audit: type=1400 audit(1753674179.504:93): avc: denied { open } for pid=6146 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2025/07/28 03:42:59 executed programs: 0 [ 86.364113][ T30] audit: type=1400 audit(1753674179.724:94): avc: denied { mounton } for pid=6156 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 86.365668][ T6156] cgroup: Unknown subsys name 'cpuset' [ 86.394623][ T30] audit: type=1400 audit(1753674179.754:95): avc: denied { create } for pid=6156 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.429636][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.429747][ T30] audit: type=1400 audit(1753674180.784:96): avc: denied { ioctl } for pid=6156 comm="syz-executor.0" path="socket:[6160]" dev="sockfs" ino=6160 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.437799][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.470347][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.478346][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.485935][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.502531][ T30] audit: type=1400 audit(1753674180.854:97): avc: denied { mounton } for pid=6156 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 87.594738][ T6156] chnl_net:caif_netlink_parms(): no params data found [ 87.649333][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.656643][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.664139][ T6156] bridge_slave_0: entered allmulticast mode [ 87.671007][ T6156] bridge_slave_0: entered promiscuous mode [ 87.679305][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.686527][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.693734][ T6156] bridge_slave_1: entered allmulticast mode [ 87.700504][ T6156] bridge_slave_1: entered promiscuous mode [ 87.724774][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.735898][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.764011][ T6156] team0: Port device team_slave_0 added [ 87.771682][ T6156] team0: Port device team_slave_1 added [ 87.794273][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.801247][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.827239][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.841372][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.849015][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.875073][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.907047][ T6156] hsr_slave_0: entered promiscuous mode [ 87.913202][ T6156] hsr_slave_1: entered promiscuous mode [ 87.997388][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.004534][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.012015][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.019162][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.061452][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.076426][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.085177][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.099693][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.114199][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.121314][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.133437][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.140555][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.195368][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.476709][ T6156] veth0_vlan: entered promiscuous mode [ 88.486903][ T6156] veth1_vlan: entered promiscuous mode [ 88.513614][ T6156] veth0_macvtap: entered promiscuous mode [ 88.522654][ T6156] veth1_macvtap: entered promiscuous mode [ 88.539878][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.555041][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.614972][ T30] audit: type=1400 audit(1753674181.974:98): avc: denied { create } for pid=6184 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.636169][ T30] audit: type=1400 audit(1753674181.974:99): avc: denied { bind } for pid=6184 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.664400][ T30] audit: type=1400 audit(1753674182.024:100): avc: denied { name_bind } for pid=6184 comm="syz-executor.0" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.503313][ T5152] Bluetooth: hci0: command tx timeout [ 91.592976][ T5152] Bluetooth: hci0: command tx timeout 2025/07/28 03:43:05 executed programs: 2 [ 93.663149][ T5152] Bluetooth: hci0: command tx timeout [ 95.742442][ T5152] Bluetooth: hci0: command tx timeout 2025/07/28 03:43:11 executed programs: 4 [ 211.502477][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 286.222608][ T31] INFO: task syz-executor.0:6199 blocked for more than 143 seconds. [ 286.230620][ T31] Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 [ 286.241636][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.250687][ T31] task:syz-executor.0 state:D stack:26280 pid:6199 tgid:6199 ppid:6156 task_flags:0x400040 flags:0x00004006 [ 286.262690][ T31] Call Trace: [ 286.265974][ T31] [ 286.268919][ T31] __schedule+0x116a/0x5dd0 [ 286.273519][ T31] ? __lock_acquire+0x622/0x1c90 [ 286.278466][ T31] ? __pfx___schedule+0x10/0x10 [ 286.283408][ T31] ? find_held_lock+0x2b/0x80 [ 286.288086][ T31] ? schedule+0x2d7/0x3a0 [ 286.292454][ T31] schedule+0xe7/0x3a0 [ 286.296529][ T31] schedule_timeout+0x257/0x290 [ 286.301362][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.306805][ T31] ? mark_held_locks+0x49/0x80 [ 286.311588][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.316825][ T31] __wait_for_common+0x2fc/0x4e0 [ 286.321771][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 286.327195][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 286.332705][ T31] ? find_held_lock+0x2b/0x80 [ 286.337722][ T31] ? __flush_work+0x938/0xcc0 [ 286.342446][ T31] ? __flush_work+0x4d0/0xcc0 [ 286.347119][ T31] __flush_work+0x7d7/0xcc0 [ 286.351875][ T31] ? detach_if_pending+0x1c1/0x280 [ 286.357022][ T31] ? __pfx___flush_work+0x10/0x10 [ 286.362047][ T31] ? __fput+0x68d/0xb70 [ 286.366259][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 286.371568][ T31] ? __pfx___might_resched+0x10/0x10 [ 286.376903][ T31] __cancel_work_sync+0x10c/0x130 [ 286.381942][ T31] tls_sk_proto_close+0x4b6/0xad0 [ 286.387031][ T31] ? __pfx_tls_sk_proto_close+0x10/0x10 [ 286.392629][ T31] ? ip_mc_drop_socket+0x1f/0x280 [ 286.397655][ T31] ? down_write+0x14d/0x200 [ 286.402142][ T31] inet_release+0xea/0x200 [ 286.406626][ T31] inet6_release+0x4f/0x70 [ 286.411046][ T31] __sock_release+0xb0/0x270 [ 286.415667][ T31] ? __pfx_sock_close+0x10/0x10 [ 286.420520][ T31] sock_close+0x1c/0x30 [ 286.424726][ T31] __fput+0x3ff/0xb70 [ 286.428718][ T31] fput_close_sync+0x118/0x260 [ 286.433515][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 286.438802][ T31] ? dnotify_flush+0x79/0x4c0 [ 286.443545][ T31] __x64_sys_close+0x8b/0x120 [ 286.448226][ T31] do_syscall_64+0xcd/0x4c0 [ 286.452758][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.458674][ T31] RIP: 0033:0x45420a [ 286.462627][ T31] RSP: 002b:00007ffef3029710 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 286.471044][ T31] RAX: ffffffffffffffda RBX: 0000000000018cbc RCX: 000000000045420a [ 286.479074][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 286.487088][ T31] RBP: 0000000000000005 R08: 0000001b2c720118 R09: 00007f5d9d361000 [ 286.495114][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 286.503151][ T31] R13: 0000000000018fdc R14: 000000000054d900 R15: 000000000054cf00 [ 286.511119][ T31] [ 286.514181][ T31] [ 286.514181][ T31] Showing all locks held in the system: [ 286.521890][ T31] 3 locks held by kworker/1:0/24: [ 286.526986][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 286.537496][ T31] #1: ffffc900001e7d10 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 286.550680][ T31] #2: ffff8880368104f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tx_work_handler+0x136/0x230 [ 286.560246][ T31] 1 lock held by khungtaskd/31: [ 286.565131][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 286.575047][ T31] 2 locks held by getty/5597: [ 286.579735][ T31] #0: ffff8880375ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.589552][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 286.599729][ T31] 1 lock held by syz-executor.0/6199: [ 286.605193][ T31] #0: ffff88807d7fa008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 286.615816][ T31] [ 286.618122][ T31] ============================================= [ 286.618122][ T31] [ 286.626634][ T31] NMI backtrace for cpu 1 [ 286.626654][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 286.626675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.626685][ T31] Call Trace: [ 286.626690][ T31] [ 286.626697][ T31] dump_stack_lvl+0x116/0x1f0 [ 286.626730][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 286.626753][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.626791][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 286.626819][ T31] watchdog+0xf70/0x12c0 [ 286.626846][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.626865][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.626896][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.626926][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.626945][ T31] kthread+0x3c2/0x780 [ 286.626965][ T31] ? __pfx_kthread+0x10/0x10 [ 286.626987][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.627012][ T31] ? __pfx_kthread+0x10/0x10 [ 286.627032][ T31] ret_from_fork+0x5d4/0x6f0 [ 286.627061][ T31] ? __pfx_kthread+0x10/0x10 [ 286.627081][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.627116][ T31] [ 286.627123][ T31] Sending NMI from CPU 1 to CPUs 0: [ 286.744192][ C0] NMI backtrace for cpu 0 [ 286.744207][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 286.744230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.744241][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 286.744274][ C0] Code: 5b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 79 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 286.744291][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 286.744305][ C0] RAX: 000000000013a4d1 RBX: 0000000000000000 RCX: ffffffff8b869c99 [ 286.744318][ C0] RDX: 0000000000000000 RSI: ffffffff8de3004a RDI: ffffffff8c157460 [ 286.744329][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 286.744341][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 286.744352][ C0] R13: ffffffff8e297780 R14: ffffffff90a94250 R15: 0000000000000000 [ 286.744364][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 286.744380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.744392][ C0] CR2: 0000558d4aab6660 CR3: 000000000e382000 CR4: 00000000003526f0 [ 286.744404][ C0] Call Trace: [ 286.744410][ C0] [ 286.744416][ C0] default_idle+0x13/0x20 [ 286.744435][ C0] default_idle_call+0x6d/0xb0 [ 286.744454][ C0] do_idle+0x391/0x510 [ 286.744478][ C0] ? __pfx_do_idle+0x10/0x10 [ 286.744501][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 286.744528][ C0] cpu_startup_entry+0x4f/0x60 [ 286.744551][ C0] rest_init+0x16b/0x2b0 [ 286.744571][ C0] ? acpi_subsystem_init+0x133/0x180 [ 286.744600][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 286.744620][ C0] start_kernel+0x3ee/0x4d0 [ 286.744637][ C0] x86_64_start_reservations+0x18/0x30 [ 286.744666][ C0] x86_64_start_kernel+0x130/0x190 [ 286.744683][ C0] common_startup_64+0x13e/0x148 [ 286.744707][ C0] [ 286.745279][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 286.745293][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 286.745318][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.745329][ T31] Call Trace: [ 286.745335][ T31] [ 286.745343][ T31] dump_stack_lvl+0x3d/0x1f0 [ 286.745375][ T31] panic+0x71c/0x800 [ 286.745404][ T31] ? __pfx_panic+0x10/0x10 [ 286.745431][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.745460][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.745486][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.745513][ T31] ? watchdog+0xdda/0x12c0 [ 286.745534][ T31] ? watchdog+0xdcd/0x12c0 [ 286.745558][ T31] watchdog+0xdeb/0x12c0 [ 286.745584][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.745604][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.745635][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.745663][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.745684][ T31] kthread+0x3c2/0x780 [ 286.745704][ T31] ? __pfx_kthread+0x10/0x10 [ 286.745724][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.745748][ T31] ? __pfx_kthread+0x10/0x10 [ 286.745769][ T31] ret_from_fork+0x5d4/0x6f0 [ 286.745801][ T31] ? __pfx_kthread+0x10/0x10 [ 286.745821][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.745853][ T31] [ 287.066376][ T31] Kernel Offset: disabled [ 287.070703][ T31] Rebooting in 86400 seconds..