[ 78.461745][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 78.461761][ T30] audit: type=1400 audit(1753695416.237:96): avc: denied { search } for pid=6031 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.490105][ T30] audit: type=1400 audit(1753695416.237:97): avc: denied { search } for pid=6031 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.513101][ T30] audit: type=1400 audit(1753695416.237:98): avc: denied { search } for pid=6031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.536341][ T30] audit: type=1400 audit(1753695416.237:99): avc: denied { search } for pid=6031 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.559724][ T30] audit: type=1400 audit(1753695416.237:100): avc: denied { read open } for pid=6032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.586398][ T30] audit: type=1400 audit(1753695416.237:101): avc: denied { getattr } for pid=6032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.651201][ T30] audit: type=1400 audit(1753695416.427:102): avc: denied { add_name } for pid=6031 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.720831][ T30] audit: type=1400 audit(1753695416.497:103): avc: denied { remove_name } for pid=6042 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=1937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 81.303332][ T24] cfg80211: failed to load regulatory.db 2025/07/28 09:36:59 ignoring optional flag "sandboxArg"="0" 2025/07/28 09:36:59 ignoring optional flag "type"="gce" 2025/07/28 09:36:59 parsed 1 programs [ 81.831919][ T30] audit: type=1400 audit(1753695419.607:104): avc: denied { getattr } for pid=6149 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2025/07/28 09:36:59 executed programs: 0 [ 81.925371][ T30] audit: type=1400 audit(1753695419.697:105): avc: denied { create } for pid=6162 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.933295][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.954260][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.962433][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.970374][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.977869][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.088282][ T6162] chnl_net:caif_netlink_parms(): no params data found [ 82.142163][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.149225][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.156702][ T6162] bridge_slave_0: entered allmulticast mode [ 82.164028][ T6162] bridge_slave_0: entered promiscuous mode [ 82.171724][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.178800][ T6162] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.186452][ T6162] bridge_slave_1: entered allmulticast mode [ 82.193422][ T6162] bridge_slave_1: entered promiscuous mode [ 82.217105][ T6162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.228052][ T6162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.255697][ T6162] team0: Port device team_slave_0 added [ 82.262976][ T6162] team0: Port device team_slave_1 added [ 82.284788][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.292442][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.318981][ T6162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.331097][ T6162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.338031][ T6162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.364009][ T6162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.398859][ T6162] hsr_slave_0: entered promiscuous mode [ 82.405104][ T6162] hsr_slave_1: entered promiscuous mode [ 82.922499][ T6162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.935604][ T6162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.946044][ T6162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.958339][ T6162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.989611][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.996798][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.004267][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.011446][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.060959][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.069526][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.100611][ T6162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.121701][ T6162] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.134402][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.141555][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.171884][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.179022][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.395041][ T6162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.450957][ T6162] veth0_vlan: entered promiscuous mode [ 83.462313][ T6162] veth1_vlan: entered promiscuous mode [ 83.503803][ T6162] veth0_macvtap: entered promiscuous mode [ 83.518520][ T6162] veth1_macvtap: entered promiscuous mode [ 83.539423][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.558622][ T6162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.573100][ T6162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.583312][ T6162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.593761][ T6162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.602849][ T6162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.680428][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.688252][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.721765][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.733037][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.747295][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 83.747310][ T30] audit: type=1400 audit(1753695421.517:108): avc: denied { mounton } for pid=6162 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.835339][ T30] audit: type=1400 audit(1753695421.597:109): avc: denied { read write } for pid=6225 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.861902][ T30] audit: type=1400 audit(1753695421.597:110): avc: denied { open } for pid=6225 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.886320][ T30] audit: type=1400 audit(1753695421.597:111): avc: denied { mounton } for pid=6225 comm="syz-executor.0" path="/root/syzkaller-testdir2135139777/syzkaller.J09gnX/0/file0" dev="sda1" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.021101][ T51] Bluetooth: hci0: command tx timeout [ 86.100141][ T51] Bluetooth: hci0: command tx timeout [ 88.180608][ T51] Bluetooth: hci0: command tx timeout [ 90.260426][ T51] Bluetooth: hci0: command tx timeout [ 132.512019][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.518336][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.952013][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.958312][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.259793][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 244.500666][ T31] INFO: task syz-executor.0:6162 blocked for more than 143 seconds. [ 244.508687][ T31] Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 [ 244.515468][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.524465][ T31] task:syz-executor.0 state:D stack:23480 pid:6162 tgid:6162 ppid:1 task_flags:0x400140 flags:0x00004006 [ 244.536452][ T31] Call Trace: [ 244.539746][ T31] [ 244.542676][ T31] __schedule+0x116a/0x5dd0 [ 244.547182][ T31] ? __lock_acquire+0x622/0x1c90 [ 244.552141][ T31] ? __pfx___schedule+0x10/0x10 [ 244.556998][ T31] ? find_held_lock+0x2b/0x80 [ 244.561690][ T31] ? schedule+0x2d7/0x3a0 [ 244.566044][ T31] schedule+0xe7/0x3a0 [ 244.570157][ T31] schedule_preempt_disabled+0x13/0x30 [ 244.575620][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 244.581186][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 244.587272][ T31] ? __pfx___might_resched+0x10/0x10 [ 244.592631][ T31] ? try_to_unlazy+0x24e/0x660 [ 244.597410][ T31] down_read+0xef/0x480 [ 244.601582][ T31] ? __pfx_down_read+0x10/0x10 [ 244.606341][ T31] ? lookup_fast+0x156/0x610 [ 244.610970][ T31] ? __pfx_fuse_permission+0x10/0x10 [ 244.616277][ T31] walk_component+0x345/0x5b0 [ 244.620985][ T31] link_path_walk+0x627/0xe20 [ 244.625685][ T31] path_openat+0x1b0/0x2cb0 [ 244.630466][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.636538][ T31] ? __pfx_path_openat+0x10/0x10 [ 244.641494][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 244.646426][ T31] do_filp_open+0x20b/0x470 [ 244.650954][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 244.655995][ T31] ? alloc_fd+0x471/0x7d0 [ 244.660360][ T31] do_sys_openat2+0x11b/0x1d0 [ 244.665062][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.670305][ T31] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 244.676372][ T31] __x64_sys_openat+0x174/0x210 [ 244.681272][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.686650][ T31] do_syscall_64+0xcd/0x4c0 [ 244.691166][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.697052][ T31] RIP: 0033:0x7fe960e7c311 [ 244.701486][ T31] RSP: 002b:00007fffb0477d30 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 244.709915][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe960e7c311 [ 244.717862][ T31] RDX: 0000000000090800 RSI: 00007fe960ed7b46 RDI: 00000000ffffff9c [ 244.725861][ T31] RBP: 00007fffb0477dfc R08: 0000000000000000 R09: 00007fe961ace000 [ 244.734009][ T31] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 244.742216][ T31] R13: 0000000000014aaf R14: 0000000000014765 R15: 0000000000000009 [ 244.750462][ T31] [ 244.753510][ T31] INFO: task syz-executor.0:6226 blocked for more than 143 seconds. [ 244.761531][ T31] Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 [ 244.768290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.777248][ T31] task:syz-executor.0 state:D stack:25960 pid:6226 tgid:6225 ppid:6162 task_flags:0x400140 flags:0x00004006 [ 244.789238][ T31] Call Trace: [ 244.792566][ T31] [ 244.795490][ T31] __schedule+0x116a/0x5dd0 [ 244.800098][ T31] ? __lock_acquire+0x622/0x1c90 [ 244.805039][ T31] ? __pfx___schedule+0x10/0x10 [ 244.809927][ T31] ? find_held_lock+0x2b/0x80 [ 244.814603][ T31] ? schedule+0x2d7/0x3a0 [ 244.818919][ T31] schedule+0xe7/0x3a0 [ 244.823072][ T31] request_wait_answer+0x553/0x7d0 [ 244.828298][ T31] ? __pfx_request_wait_answer+0x10/0x10 [ 244.834165][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.840668][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 244.845876][ T31] ? _raw_spin_unlock+0x28/0x50 [ 244.850744][ T31] ? fuse_dev_queue_req+0x226/0x310 [ 244.855947][ T31] __fuse_simple_request+0x330/0xcb0 [ 244.861289][ T31] fuse_lookup_name+0x2ad/0x780 [ 244.866141][ T31] ? add_lock_to_list+0x9d/0x130 [ 244.871109][ T31] ? __pfx_fuse_lookup_name+0x10/0x10 [ 244.876486][ T31] ? fuse_lock_inode+0xd2/0x110 [ 244.881426][ T31] fuse_lookup+0x26a/0x560 [ 244.885851][ T31] ? __pfx_fuse_lookup+0x10/0x10 [ 244.890833][ T31] ? mark_lock+0x32d/0x610 [ 244.895257][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 244.900682][ T31] __lookup_slow+0x251/0x460 [ 244.905275][ T31] ? __pfx___lookup_slow+0x10/0x10 [ 244.910423][ T31] ? lookup_fast+0x156/0x610 [ 244.915021][ T31] ? __pfx_fuse_permission+0x10/0x10 [ 244.920381][ T31] walk_component+0x353/0x5b0 [ 244.925063][ T31] link_path_walk+0x627/0xe20 [ 244.929776][ T31] path_openat+0x1b0/0x2cb0 [ 244.934442][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.940586][ T31] ? __pfx_path_openat+0x10/0x10 [ 244.945549][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 244.950500][ T31] do_filp_open+0x20b/0x470 [ 244.955011][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 244.960144][ T31] ? alloc_fd+0x471/0x7d0 [ 244.964486][ T31] do_sys_openat2+0x11b/0x1d0 [ 244.969158][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.974378][ T31] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 244.980484][ T31] __x64_sys_openat+0x174/0x210 [ 244.985332][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.990721][ T31] do_syscall_64+0xcd/0x4c0 [ 244.995219][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.001137][ T31] RIP: 0033:0x7fe960e7c859 [ 245.005556][ T31] RSP: 002b:00007fe9601fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.013997][ T31] RAX: ffffffffffffffda RBX: 00007fe960f9bf80 RCX: 00007fe960e7c859 [ 245.021976][ T31] RDX: 0000000000000042 RSI: 0000000020002080 RDI: ffffffffffffff9c [ 245.029968][ T31] RBP: 00007fe960ed8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 245.038100][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.046098][ T31] R13: 000000000000000b R14: 00007fe960f9bf80 R15: 00007fffb0477a88 [ 245.054092][ T31] [ 245.057099][ T31] INFO: task syz-executor.0:6227 blocked for more than 143 seconds. [ 245.065120][ T31] Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 [ 245.071884][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.080548][ T31] task:syz-executor.0 state:D stack:28992 pid:6227 tgid:6225 ppid:6162 task_flags:0x400140 flags:0x00004006 [ 245.092495][ T31] Call Trace: [ 245.095750][ T31] [ 245.098657][ T31] __schedule+0x116a/0x5dd0 [ 245.103179][ T31] ? __lock_acquire+0x622/0x1c90 [ 245.108124][ T31] ? __pfx___schedule+0x10/0x10 [ 245.113008][ T31] ? find_held_lock+0x2b/0x80 [ 245.117686][ T31] ? schedule+0x2d7/0x3a0 [ 245.122056][ T31] schedule+0xe7/0x3a0 [ 245.126143][ T31] schedule_preempt_disabled+0x13/0x30 [ 245.131630][ T31] rwsem_down_write_slowpath+0x524/0x1310 [ 245.137373][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 245.143821][ T31] ? __pfx___might_resched+0x10/0x10 [ 245.149119][ T31] down_write_nested+0x1da/0x210 [ 245.154078][ T31] ? __pfx_down_write_nested+0x10/0x10 [ 245.159536][ T31] ? down_read+0x13d/0x480 [ 245.163974][ T31] fuse_reverse_inval_entry+0x59/0x580 [ 245.169443][ T31] fuse_dev_do_write+0x332e/0x3420 [ 245.174588][ T31] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 245.180075][ T31] ? preempt_schedule_common+0x44/0xc0 [ 245.185526][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 245.190925][ T31] ? try_to_wake_up+0xa2f/0x1680 [ 245.195877][ T31] ? __asan_memset+0x23/0x50 [ 245.200495][ T31] fuse_dev_write+0x155/0x1e0 [ 245.205178][ T31] ? __pfx_fuse_dev_write+0x10/0x10 [ 245.210415][ T31] ? bpf_lsm_file_permission+0x9/0x10 [ 245.215785][ T31] ? security_file_permission+0x71/0x210 [ 245.221510][ T31] ? rw_verify_area+0xcf/0x680 [ 245.226283][ T31] vfs_write+0x6c4/0x1150 [ 245.230642][ T31] ? __pfx_fuse_dev_write+0x10/0x10 [ 245.235847][ T31] ? __pfx_vfs_write+0x10/0x10 [ 245.240652][ T31] ? find_held_lock+0x2b/0x80 [ 245.245612][ T31] ksys_write+0x12a/0x250 [ 245.249997][ T31] ? __pfx_ksys_write+0x10/0x10 [ 245.254857][ T31] do_syscall_64+0xcd/0x4c0 [ 245.259337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.265247][ T31] RIP: 0033:0x7fe960e7c859 [ 245.269683][ T31] RSP: 002b:00007fe9601dd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.278088][ T31] RAX: ffffffffffffffda RBX: 00007fe960f9c050 RCX: 00007fe960e7c859 [ 245.286089][ T31] RDX: 000000000000002c RSI: 00000000200000c0 RDI: 0000000000000003 [ 245.294069][ T31] RBP: 00007fe960ed8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 245.302045][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.310035][ T31] R13: 000000000000006e R14: 00007fe960f9c050 R15: 00007fffb0477a88 [ 245.318004][ T31] [ 245.321046][ T31] [ 245.321046][ T31] Showing all locks held in the system: [ 245.328744][ T31] 1 lock held by khungtaskd/31: [ 245.333606][ T31] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 245.343740][ T31] 3 locks held by kworker/u8:11/2973: [ 245.349104][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 245.359040][ T31] #1: ffffc9000c84fd10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 245.371607][ T31] #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0x159/0x1030 [ 245.381375][ T31] 2 locks held by getty/5603: [ 245.386041][ T31] #0: ffff8880373e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 245.395848][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 245.405953][ T31] 1 lock held by syz-executor.0/6162: [ 245.411345][ T31] #0: ffff888071d38148 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 245.421718][ T31] 2 locks held by syz-executor.0/6226: [ 245.427162][ T31] #0: ffff888071d38148 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 245.437530][ T31] #1: ffff888071d38608 (&fi->mutex){+.+.}-{4:4}, at: fuse_lock_inode+0xd2/0x110 [ 245.446853][ T31] 2 locks held by syz-executor.0/6227: [ 245.452350][ T31] #0: ffff888023b29358 (&fc->killsb){.+.+}-{4:4}, at: fuse_dev_do_write+0x330e/0x3420 [ 245.462044][ T31] #1: ffff888071d38148 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: fuse_reverse_inval_entry+0x59/0x580 [ 245.473367][ T31] [ 245.475680][ T31] ============================================= [ 245.475680][ T31] [ 245.484109][ T31] NMI backtrace for cpu 1 [ 245.484128][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 245.484151][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.484162][ T31] Call Trace: [ 245.484168][ T31] [ 245.484174][ T31] dump_stack_lvl+0x116/0x1f0 [ 245.484207][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 245.484232][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 245.484261][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 245.484295][ T31] watchdog+0xf70/0x12c0 [ 245.484320][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.484340][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.484373][ T31] ? __kthread_parkme+0x19e/0x250 [ 245.484404][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.484425][ T31] kthread+0x3c2/0x780 [ 245.484446][ T31] ? __pfx_kthread+0x10/0x10 [ 245.484467][ T31] ? rcu_is_watching+0x12/0xc0 [ 245.484492][ T31] ? __pfx_kthread+0x10/0x10 [ 245.484511][ T31] ret_from_fork+0x5d4/0x6f0 [ 245.484538][ T31] ? __pfx_kthread+0x10/0x10 [ 245.484557][ T31] ret_from_fork_asm+0x1a/0x30 [ 245.484592][ T31] [ 245.484598][ T31] Sending NMI from CPU 1 to CPUs 0: [ 245.601404][ C0] NMI backtrace for cpu 0 [ 245.601418][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 245.601441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.601453][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 245.601485][ C0] Code: 5b 6d 02 e9 83 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 79 23 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 245.601502][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 245.601516][ C0] RAX: 00000000001554d3 RBX: 0000000000000000 RCX: ffffffff8b869c99 [ 245.601532][ C0] RDX: 0000000000000000 RSI: ffffffff8de3004a RDI: ffffffff8c157460 [ 245.601544][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 245.601555][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 245.601566][ C0] R13: ffffffff8e297780 R14: ffffffff90a94250 R15: 0000000000000000 [ 245.601578][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 245.601595][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.601607][ C0] CR2: 000055f266556660 CR3: 000000000e382000 CR4: 00000000003526f0 [ 245.601619][ C0] Call Trace: [ 245.601625][ C0] [ 245.601631][ C0] default_idle+0x13/0x20 [ 245.601650][ C0] default_idle_call+0x6d/0xb0 [ 245.601669][ C0] do_idle+0x391/0x510 [ 245.601693][ C0] ? __pfx_do_idle+0x10/0x10 [ 245.601716][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 245.601743][ C0] cpu_startup_entry+0x4f/0x60 [ 245.601766][ C0] rest_init+0x16b/0x2b0 [ 245.601785][ C0] ? acpi_subsystem_init+0x133/0x180 [ 245.601815][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 245.601834][ C0] start_kernel+0x3ee/0x4d0 [ 245.601852][ C0] x86_64_start_reservations+0x18/0x30 [ 245.601880][ C0] x86_64_start_kernel+0x130/0x190 [ 245.601897][ C0] common_startup_64+0x13e/0x148 [ 245.601921][ C0] [ 245.602422][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 245.799994][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-g038d61fd6422 #0 PREEMPT(full) [ 245.810911][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.820945][ T31] Call Trace: [ 245.824207][ T31] [ 245.827122][ T31] dump_stack_lvl+0x3d/0x1f0 [ 245.831712][ T31] panic+0x71c/0x800 [ 245.835600][ T31] ? __pfx_panic+0x10/0x10 [ 245.840007][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 245.845373][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 245.851340][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 245.856710][ T31] ? watchdog+0xdda/0x12c0 [ 245.861113][ T31] ? watchdog+0xdcd/0x12c0 [ 245.865522][ T31] watchdog+0xdeb/0x12c0 [ 245.869756][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.874418][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.879608][ T31] ? __kthread_parkme+0x19e/0x250 [ 245.884628][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.889289][ T31] kthread+0x3c2/0x780 [ 245.893345][ T31] ? __pfx_kthread+0x10/0x10 [ 245.897920][ T31] ? rcu_is_watching+0x12/0xc0 [ 245.902674][ T31] ? __pfx_kthread+0x10/0x10 [ 245.907250][ T31] ret_from_fork+0x5d4/0x6f0 [ 245.911831][ T31] ? __pfx_kthread+0x10/0x10 [ 245.916405][ T31] ret_from_fork_asm+0x1a/0x30 [ 245.921165][ T31] [ 245.924372][ T31] Kernel Offset: disabled [ 245.928678][ T31] Rebooting in 86400 seconds..