Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts.
2026/09/27 14:10:00 parsed 1 programs
2026/09/27 14:10:00 serving rpc on tcp://44721
[ 70.567674][ T30] kauditd_printk_skb: 1 callbacks suppressed
[ 70.567710][ T30] audit: type=1400 audit(1790518200.880:129): avc: denied { node_bind } for pid=5608 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 72.875529][ T30] audit: type=1400 audit(1790518203.190:130): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 72.876933][ T30] audit: type=1400 audit(1790518203.190:131): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 72.878944][ T5616] cgroup: Unknown subsys name 'net'
[ 72.880197][ T30] audit: type=1400 audit(1790518203.190:132): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 73.075511][ T5616] cgroup: Unknown subsys name 'cpuset'
[ 73.077989][ T5616] cgroup: Unknown subsys name 'rlimit'
[ 73.228665][ T30] audit: type=1400 audit(1790518203.540:133): avc: denied { setattr } for pid=5616 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 73.229153][ T30] audit: type=1400 audit(1790518203.540:134): avc: denied { create } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.229409][ T30] audit: type=1400 audit(1790518203.540:135): avc: denied { write } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.229742][ T30] audit: type=1400 audit(1790518203.540:136): avc: denied { read } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 73.277408][ T30] audit: type=1400 audit(1790518203.560:137): avc: denied { mounton } for pid=5616 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 73.277461][ T30] audit: type=1400 audit(1790518203.570:138): avc: denied { mount } for pid=5616 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 73.415184][ T5619] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 74.366813][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.396666][ T30] kauditd_printk_skb: 4 callbacks suppressed
[ 76.396686][ T30] audit: type=1400 audit(1790518206.710:143): avc: denied { execmem } for pid=5628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 76.405545][ T30] audit: type=1400 audit(1790518206.720:144): avc: denied { read } for pid=5629 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 76.406154][ T30] audit: type=1400 audit(1790518206.720:145): avc: denied { open } for pid=5629 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 76.407850][ T30] audit: type=1400 audit(1790518206.720:146): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 76.540343][ T30] audit: type=1400 audit(1790518206.850:147): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.twjuJS/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 76.540950][ T30] audit: type=1400 audit(1790518206.850:148): avc: denied { mount } for pid=5629 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 76.543079][ T30] audit: type=1400 audit(1790518206.860:149): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.twjuJS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 76.545025][ T30] audit: type=1400 audit(1790518206.860:150): avc: denied { mount } for pid=5629 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 76.548378][ T30] audit: type=1400 audit(1790518206.860:151): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.twjuJS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 76.550516][ T30] audit: type=1400 audit(1790518206.860:152): avc: denied { mounton } for pid=5629 comm="syz-executor" path="/root/syzkaller.twjuJS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 76.669644][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 77.444934][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.445461][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.445542][ T5641] bridge_slave_0: entered allmulticast mode
[ 77.446456][ T5641] bridge_slave_0: entered promiscuous mode
[ 77.449420][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.449507][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.449607][ T5641] bridge_slave_1: entered allmulticast mode
[ 77.451087][ T5641] bridge_slave_1: entered promiscuous mode
[ 77.510694][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.512632][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.535354][ T5641] team0: Port device team_slave_0 added
[ 77.536821][ T5641] team0: Port device team_slave_1 added
[ 77.555144][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.555160][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 77.555176][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.556719][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.556732][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 77.556754][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.592032][ T5641] hsr_slave_0: entered promiscuous mode
[ 77.593037][ T5641] hsr_slave_1: entered promiscuous mode
[ 77.749127][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.755431][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 77.756496][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.762286][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 77.783673][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.786162][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 77.786677][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.788983][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 77.822944][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.823052][ T5641] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.823455][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.823511][ T5641] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.875893][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.889464][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.890441][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.917436][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.931116][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.931213][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.948986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.949041][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.194561][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.228768][ T5641] veth0_vlan: entered promiscuous mode
[ 78.235085][ T5641] veth1_vlan: entered promiscuous mode
[ 78.257938][ T5641] veth0_macvtap: entered promiscuous mode
[ 78.260517][ T5641] veth1_macvtap: entered promiscuous mode
[ 78.275604][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.280628][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.313345][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.313391][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.313433][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.313467][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.453759][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.529021][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.607420][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.676874][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.184090][ T4924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.184648][ T4924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.185013][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.185923][ T4924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.186389][ T4924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.419377][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.419406][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.455893][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.455915][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/27 14:10:11 executed programs: 0
[ 80.809963][ T4924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.810475][ T4924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.810836][ T4924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.811556][ T4924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.812029][ T4924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.160420][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.160517][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.160582][ T5742] bridge_slave_0: entered allmulticast mode
[ 81.161758][ T5742] bridge_slave_0: entered promiscuous mode
[ 81.165145][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.165226][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.165329][ T5742] bridge_slave_1: entered allmulticast mode
[ 81.166782][ T5742] bridge_slave_1: entered promiscuous mode
[ 81.227289][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.229190][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.251907][ T5742] team0: Port device team_slave_0 added
[ 81.254416][ T5742] team0: Port device team_slave_1 added
[ 81.273256][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.273271][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.273292][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.274300][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.274313][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 81.274331][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.308696][ T5742] hsr_slave_0: entered promiscuous mode
[ 81.309618][ T5742] hsr_slave_1: entered promiscuous mode
[ 81.310228][ T5742] debugfs: 'hsr0' already exists in 'hsr'
[ 81.310330][ T5742] Cannot create hsr debugfs directory
[ 81.397069][ T9] cfg80211: failed to load regulatory.db
[ 81.591503][ T12] bridge_slave_1: left allmulticast mode
[ 81.591554][ T12] bridge_slave_1: left promiscuous mode
[ 81.591892][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.617115][ T12] bridge_slave_0: left allmulticast mode
[ 81.617140][ T12] bridge_slave_0: left promiscuous mode
[ 81.617314][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.879247][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 81.882151][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 81.907173][ T12] bond0 (unregistering): Released all slaves
[ 81.920021][ T30] kauditd_printk_skb: 20 callbacks suppressed
[ 81.920043][ T30] audit: type=1400 audit(1790518212.220:173): avc: denied { write } for pid=5760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.004536][ T12] hsr_slave_0: left promiscuous mode
[ 82.007099][ T12] hsr_slave_1: left promiscuous mode
[ 82.007919][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.007946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.010403][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.010420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.026126][ T12] veth1_macvtap: left promiscuous mode
[ 82.026175][ T12] veth0_macvtap: left promiscuous mode
[ 82.026264][ T12] veth1_vlan: left promiscuous mode
[ 82.026334][ T12] veth0_vlan: left promiscuous mode
[ 82.046215][ T30] audit: type=1400 audit(1790518212.350:174): avc: denied { write } for pid=5771 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.246009][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 82.251203][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 82.322009][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1
[ 82.631130][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.659952][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 82.710795][ T30] audit: type=1400 audit(1790518213.020:175): avc: denied { write } for pid=5774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.826637][ T30] audit: type=1400 audit(1790518213.140:176): avc: denied { write } for pid=5785 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 82.915198][ T52] Bluetooth: hci0: command tx timeout
[ 83.086786][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.089481][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 83.090226][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.103171][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 83.115630][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.134920][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 83.261581][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.294839][ T5742] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.299995][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.300077][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.319294][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.319385][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.660695][ T30] audit: type=1400 audit(1790518213.970:177): avc: denied { write } for pid=5794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 83.742332][ T30] audit: type=1400 audit(1790518214.050:178): avc: denied { write } for pid=5808 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.111189][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.157816][ T5742] veth0_vlan: entered promiscuous mode
[ 84.166528][ T5742] veth1_vlan: entered promiscuous mode
[ 84.198925][ T5742] veth0_macvtap: entered promiscuous mode
[ 84.200657][ T30] audit: type=1400 audit(1790518214.510:179): avc: denied { write } for pid=5813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.203516][ T5742] veth1_macvtap: entered promiscuous mode
[ 84.224196][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.245268][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.325579][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.325655][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.325670][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.325906][ T1155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.325947][ T1155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.383720][ T30] audit: type=1400 audit(1790518214.700:180): avc: denied { write } for pid=5829 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 84.419591][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.419613][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.424668][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.482197][ T30] audit: type=1400 audit(1790518214.790:181): avc: denied { create } for pid=5831 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 84.482259][ T30] audit: type=1400 audit(1790518214.790:182): avc: denied { write } for pid=5831 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 84.990763][ T52] Bluetooth: hci0: command tx timeout
[ 87.079200][ T52] Bluetooth: hci0: command tx timeout
[ 89.272400][ C0] sched: DL replenish lagged too much
[ 89.538767][ T52] Bluetooth: hci0: command tx timeout
2026/09/27 14:10:21 executed programs: 3
[ 129.043930][ T4924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 129.187441][ T4924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 130.987199][ T4924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 131.316288][ T4924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 132.581361][ T4924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 133.325773][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.445813][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 135.347152][ T4924] Bluetooth: hci1: command tx timeout
[ 138.015384][ T4924] Bluetooth: hci1: command tx timeout
[ 140.044224][ T4924] Bluetooth: hci1: command tx timeout
[ 142.134218][ T4924] Bluetooth: hci1: command tx timeout
[ 194.400275][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.414822][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 200.519716][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 200.560264][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 200.645458][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 202.200728][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 202.419728][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 205.092863][ T52] Bluetooth: hci0: command tx timeout
[ 207.340453][ T52] Bluetooth: hci0: command tx timeout
[ 209.488416][ T52] Bluetooth: hci0: command tx timeout
[ 211.561448][ T52] Bluetooth: hci0: command tx timeout
[ 255.601691][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.612695][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 257.446634][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[ 257.446665][ T31] Not tainted syzkaller #0
[ 257.446677][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 257.446685][ T31] task:kworker/0:0 state:D stack:24216 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000
[ 257.446760][ T31] Workqueue: events reg_todo
[ 257.446810][ T31] Call Trace:
[ 257.446817][ T31]
[ 257.446831][ T31] __schedule+0x1259/0x6920
[ 257.446868][ T31] ? lock_acquire+0x1d1/0x380
[ 257.446901][ T31] ? mark_held_locks+0x40/0x70
[ 257.446924][ T31] ? _raw_spin_unlock_irq+0x23/0x50
[ 257.446955][ T31] ? lockdep_hardirqs_on+0x7d/0x110
[ 257.446991][ T31] ? __pfx___schedule+0x10/0x10
[ 257.447020][ T31] ? find_held_lock+0x2b/0x80
[ 257.447053][ T31] ? schedule+0x225/0x2c0
[ 257.447088][ T31] schedule+0xdd/0x2c0
[ 257.447119][ T31] schedule_preempt_disabled+0x13/0x30
[ 257.447150][ T31] __mutex_lock+0xccb/0x1bd0
[ 257.447173][ T31] ? reg_process_self_managed_hints+0x95/0x180
[ 257.447209][ T31] ? __pfx___mutex_lock+0x10/0x10
[ 257.447234][ T31] ? reg_query_database+0x10f/0x510
[ 257.447266][ T31] ? do_raw_spin_lock+0x128/0x260
[ 257.447300][ T31] ? reg_process_self_managed_hints+0x95/0x180
[ 257.447328][ T31] ? rtnl_is_locked+0x15/0x20
[ 257.447351][ T31] reg_process_self_managed_hints+0x95/0x180
[ 257.447382][ T31] reg_todo+0x5cf/0x800
[ 257.447410][ T31] ? process_one_work+0x906/0x1b10
[ 257.447444][ T31] ? process_one_work+0x906/0x1b10
[ 257.447482][ T31] process_one_work+0xac7/0x1b10
[ 257.447529][ T31] ? __pfx_process_one_work+0x10/0x10
[ 257.447564][ T31] ? lock_acquire+0x1d1/0x380
[ 257.447596][ T31] ? __pfx_reg_todo+0x10/0x10
[ 257.447627][ T31] worker_thread+0x5ef/0xe50
[ 257.447671][ T31] ? kthread+0x13a/0x450
[ 257.447700][ T31] ? __pfx_worker_thread+0x10/0x10
[ 257.447732][ T31] kthread+0x373/0x450
[ 257.447762][ T31] ? __pfx_kthread+0x10/0x10
[ 257.447800][ T31] ret_from_fork+0x730/0xd60
[ 257.447827][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 257.447855][ T31] ? __switch_to+0x800/0x10f0
[ 257.447886][ T31] ? __pfx_kthread+0x10/0x10
[ 257.447917][ T31] ret_from_fork_asm+0x1a/0x30
[ 257.447957][ T31]
[ 257.447985][ T31] INFO: task kworker/u8:4:59 blocked for more than 143 seconds.
[ 257.448000][ T31] Not tainted syzkaller #0
[ 257.448011][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 257.448019][ T31] task:kworker/u8:4 state:D stack:24664 pid:59 tgid:59 ppid:2 task_flags:0x4208060 flags:0x00080000
[ 257.448089][ T31] Workqueue: ipv6_addrconf addrconf_dad_work
[ 257.448120][ T31] Call Trace:
[ 257.448127][ T31]
[ 257.448139][ T31] __schedule+0x1259/0x6920
[ 257.448169][ T31] ? __lock_acquire+0x5c0/0x1f40
[ 257.448199][ T31] ? do_raw_spin_lock+0x128/0x260
[ 257.448232][ T31] ? kthread_data+0x53/0xc0
[ 257.448261][ T31] ? __pfx___schedule+0x10/0x10
[ 257.448288][ T31] ? find_held_lock+0x2b/0x80
[ 257.448320][ T31] ? schedule+0x225/0x2c0
[ 257.448355][ T31] schedule+0xdd/0x2c0
[ 257.448385][ T31] schedule_preempt_disabled+0x13/0x30
[ 257.448417][ T31] __mutex_lock+0xccb/0x1bd0
[ 257.448439][ T31] ? addrconf_dad_work+0x11f/0x1360
[ 257.448474][ T31] ? __pfx___mutex_lock+0x10/0x10
[ 257.448495][ T31] ? look_up_lock_class+0x55/0x120
[ 257.448528][ T31] ? register_lock_class+0x3f/0x7b0
[ 257.448561][ T31] ? __lock_acquire+0x5c0/0x1f40
[ 257.448591][ T31] ? addrconf_dad_work+0x11f/0x1360
[ 257.448616][ T31] ? rtnl_lock+0x9/0x20
[ 257.448636][ T31] addrconf_dad_work+0x11f/0x1360
[ 257.448669][ T31] ? __pfx_addrconf_dad_work+0x10/0x10
[ 257.448696][ T31] ? process_one_work+0xa2c/0x1b10
[ 257.448731][ T31] ? process_one_work+0x906/0x1b10
[ 257.448764][ T31] ? process_one_work+0x906/0x1b10
[ 257.448808][ T31] process_one_work+0xac7/0x1b10
[ 257.448854][ T31] ? __pfx_process_one_work+0x10/0x10
[ 257.448889][ T31] ? lock_acquire+0x1d1/0x380
[ 257.448918][ T31] ? __pfx_addrconf_dad_work+0x10/0x10
[ 257.448950][ T31] worker_thread+0x5ef/0xe50
[ 257.448992][ T31] ? __pfx_worker_thread+0x10/0x10
[ 257.449026][ T31] ? kthread+0x13a/0x450
[ 257.449055][ T31] ? __pfx_worker_thread+0x10/0x10
[ 257.449086][ T31] kthread+0x373/0x450
[ 257.449116][ T31] ? __pfx_kthread+0x10/0x10
[ 257.449148][ T31] ret_from_fork+0x730/0xd60
[ 257.449174][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 257.449201][ T31] ? __switch_to+0x800/0x10f0
[ 257.449232][ T31] ? __pfx_kthread+0x10/0x10
[ 257.449264][ T31] ret_from_fork_asm+0x1a/0x30
[ 257.449303][ T31]
[ 257.449405][ T31] INFO: task kworker/0:4:5657 blocked for more than 143 seconds.
[ 257.449420][ T31] Not tainted syzkaller #0
[ 257.449431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 257.449438][ T31] task:kworker/0:4 state:D stack:25720 pid:5657 tgid:5657 ppid:2 task_flags:0x4208060 flags:0x00080000
[ 257.449508][ T31] Workqueue: events_power_efficient crda_timeout_work
[ 257.449538][ T31] Call Trace:
[ 257.449545][ T31]
[ 257.449556][ T31] __schedule+0x1259/0x6920
[ 257.449587][ T31] ? lock_acquire+0x1d1/0x380
[ 257.449618][ T31] ? mark_held_locks+0x40/0x70
[ 257.449641][ T31] ? _raw_spin_unlock_irq+0x23/0x50
[ 257.449672][ T31] ? lockdep_hardirqs_on+0x7d/0x110
[ 257.449708][ T31] ? __pfx___schedule+0x10/0x10
[ 257.449737][ T31] ? find_held_lock+0x2b/0x80
[ 257.449768][ T31] ? schedule+0x225/0x2c0
[ 257.449809][ T31] schedule+0xdd/0x2c0
[ 257.449840][ T31] schedule_preempt_disabled+0x13/0x30
[ 257.449871][ T31] __mutex_lock+0xccb/0x1bd0
[ 257.449893][ T31] ? crda_timeout_work+0x16/0x70
[ 257.449924][ T31] ? __lock_acquire+0x5c0/0x1f40
[ 257.449949][ T31] ? __pfx___mutex_lock+0x10/0x10
[ 257.449972][ T31] ? reacquire_held_locks+0xdd/0x1f0
[ 257.450003][ T31] ? process_one_work+0xa2c/0x1b10
[ 257.450038][ T31] ? process_one_work+0x906/0x1b10
[ 257.450077][ T31] ? crda_timeout_work+0x16/0x70
[ 257.450104][ T31] crda_timeout_work+0x16/0x70
[ 257.450133][ T31] process_one_work+0xac7/0x1b10
[ 257.450180][ T31] ? __pfx_process_one_work+0x10/0x10
[ 257.450215][ T31] ? lock_acquire+0x1d1/0x380
[ 257.450247][ T31] ? __pfx_crda_timeout_work+0x10/0x10
[ 257.450281][ T31] worker_thread+0x5ef/0xe50
[ 257.450321][ T31] ? __pfx_worker_thread+0x10/0x10
[ 257.450356][ T31] ? kthread+0x13a/0x450
[ 257.450384][ T31] ? __pfx_worker_thread+0x10/0x10
[ 257.450417][ T31] kthread+0x373/0x450
[ 257.450446][ T31] ? __pfx_kthread+0x10/0x10
[ 257.450478][ T31] ret_from_fork+0x730/0xd60
[ 257.450505][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 257.450532][ T31] ? __switch_to+0x800/0x10f0
[ 257.450563][ T31] ? __pfx_kthread+0x10/0x10
[ 257.450595][ T31] ret_from_fork_asm+0x1a/0x30
[ 257.450634][ T31]
[ 257.450658][ T31]
[ 257.450658][ T31] Showing all locks held in the system:
[ 257.450672][ T31] locks held by kworker/0:0/9: 4, on CPU#0:
[ 257.450687][ T31] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.450751][ T31] #1: ffffc900000e7d08 (reg_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.450815][ T31] #2: ffffffff90cd4bc0 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x800
[ 257.450870][ T31] #3: ffff88805c7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x95/0x180
[ 257.450931][ T31] locks held by khungtaskd/31: 1, last CPU#1:
[ 257.450946][ T31] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 257.451009][ T31] locks held by kworker/u8:2/42: 3, last CPU#0:
[ 257.451024][ T31] #0: ffff88803441f940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.451087][ T31] #1: ffffc90000b27d08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.451150][ T31] #2: ffffffff8edec3c0 (rcu_callback){....}-{0:0}, at: rcu_core+0x58f/0x1260
[ 257.451206][ T31] locks held by kworker/1:1/48: 2, last CPU#1:
[ 257.451221][ T31] #0: ffff888058cb4540 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.451282][ T31] #1: ffffc90000b87d08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.451346][ T31] locks held by kworker/u8:4/59: 3, on CPU#0:
[ 257.451361][ T31] #0: ffff88802ea76140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.451423][ T31] #1: ffffc9000201fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.451486][ T31] #2: ffffffff90cd4bc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360
[ 257.451546][ T31] locks held by kworker/1:2/983: 3, last CPU#1:
[ 257.451561][ T31] #0: ffff888058cb4940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.451628][ T31] #1: ffffc90004ff7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.451712][ T31] #2: ffff88807e205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860
[ 257.451785][ T31] locks held by kworker/u8:9/1155: 3, last CPU#1:
[ 257.451801][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.451864][ T31] #1: ffffc90005617d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.451927][ T31] #2: ffff88805a510800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[ 257.451982][ T31] locks held by kworker/0:2/1629: 4, last CPU#0:
[ 257.451998][ T31] #0: ffff88805cf86d40 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.452065][ T31] #1: ffffc900062b7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.452150][ T31] #2: ffff88807e181440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860
[ 257.452212][ T31] #3: ffff8880331ac888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860
[ 257.452276][ T31] locks held by kworker/0:3/2261: 3, last CPU#0:
[ 257.467607][ T31] #0: ffff888058cb4940 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.467690][ T31] #1: ffffc90007067d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.467774][ T31] #2: ffff88807e205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860
[ 257.467857][ T31] locks held by kworker/u8:12/3711: 3, last CPU#1:
[ 257.467873][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.467933][ T31] #1: ffffc9000f467d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.467995][ T31] #2: ffff88805c7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550
[ 257.468049][ T31] locks held by kworker/u8:14/3733: 3, last CPU#1:
[ 257.468065][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.468130][ T31] #1: ffffc9000f047d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.468193][ T31] #2: ffff88802be54258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[ 257.468261][ T31] locks held by dhcpcd/5269: 1, last CPU#1:
[ 257.468276][ T31] #0: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0
[ 257.468332][ T31] locks held by getty/5361: 2, on CPU#1:
[ 257.468347][ T31] #0: ffff88803431c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 257.468399][ T31] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 257.468461][ T31] locks held by syz-executor/5616: 1, last CPU#1:
[ 257.468476][ T31] #0: ffffffff8effd718 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0
[ 257.468530][ T31] locks held by kworker/0:4/5657: 3, on CPU#0:
[ 257.468546][ T31] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.468608][ T31] #1: ffffc900045c7d08 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.468670][ T31] #2: ffffffff90cd4bc0 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x70
[ 257.468727][ T31] locks held by syz-executor/5742: 1, on CPU#1:
[ 257.468743][ T31] #0: ffffffff90cd4bc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 257.468802][ T31] locks held by kworker/0:5/5828: 3, last CPU#0:
[ 257.468817][ T31] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.468878][ T31] #1: ffffc90004167d08 ((debug_obj_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.468939][ T31] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[ 257.468999][ T31] locks held by kworker/1:5/5850: 3, on CPU#1:
[ 257.469014][ T31] #0: ffff88805cf86d40 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 257.469081][ T31] #1: ffffc90002f2fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 257.469164][ T31] #2: ffff8880331ac888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40
[ 257.469227][ T31] locks held by syz-executor/5858: 1, on CPU#0:
[ 257.469242][ T31] #0: ffffffff90cd4bc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0
[ 257.469299][ T31]
[ 257.469305][ T31] =============================================
[ 257.469305][ T31]
[ 257.469336][ T31] NMI backtrace for cpu 1
[ 257.469364][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 257.469389][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 257.469402][ T31] Call Trace:
[ 257.469409][ T31]
[ 257.469418][ T31] dump_stack_lvl+0x100/0x190
[ 257.469451][ T31] nmi_cpu_backtrace.cold+0x12d/0x151
[ 257.469485][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 257.469511][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[ 257.469542][ T31] sys_info+0x141/0x190
[ 257.469567][ T31] watchdog+0xcb1/0x1030
[ 257.469599][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 257.469631][ T31] ? __pfx_watchdog+0x10/0x10
[ 257.469657][ T31] ? __kthread_parkme+0x18f/0x230
[ 257.469686][ T31] ? kthread+0x13a/0x450
[ 257.469714][ T31] ? __pfx_watchdog+0x10/0x10
[ 257.469737][ T31] kthread+0x373/0x450
[ 257.469766][ T31] ? __pfx_kthread+0x10/0x10
[ 257.469808][ T31] ret_from_fork+0x730/0xd60
[ 257.469834][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 257.469860][ T31] ? __switch_to+0x800/0x10f0
[ 257.469891][ T31] ? __pfx_kthread+0x10/0x10
[ 257.469922][ T31] ret_from_fork_asm+0x1a/0x30
[ 257.469959][ T31]
[ 257.469971][ T31] Sending NMI from CPU 1 to CPUs 0:
[ 257.470015][ C0] NMI backtrace for cpu 0
[ 257.470027][ C0] CPU: 0 UID: 0 PID: 42 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full)
[ 257.470051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 257.470065][ C0] Workqueue: bat_events batadv_tt_purge
[ 257.470091][ C0] RIP: 0010:kasan_save_stack+0x25/0x50
[ 257.470117][ C0] Code: 90 90 90 90 90 0f 1f 40 d6 41 54 31 c0 b9 40 00 00 00 41 89 f4 55 89 fd 31 d2 be 40 00 00 00 53 48 81 ec 00 02 00 00 48 89 e7 48 ab 48 89 e7 e8 e0 92 76 ff 44 89 e1 89 ea 89 c6 48 89 e7 e8
[ 257.470135][ C0] RSP: 0018:ffffc900000071d0 EFLAGS: 00010282
[ 257.470154][ C0] RAX: 0000000000000000 RBX: ffff888025eac0f0 RCX: 0000000000000010
[ 257.470168][ C0] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc90000007350
[ 257.470181][ C0] RBP: 0000000000000820 R08: 00000000892ed249 R09: 0000000000000000
[ 257.470194][ C0] R10: ffff888025eac0f0 R11: 0000000000000000 R12: 0000000000000001
[ 257.470206][ C0] R13: 0000000000000820 R14: ffff888025eac000 R15: 00000000000000f0
[ 257.470220][ C0] FS: 0000000000000000(0000) GS:ffff888123b51000(0000) knlGS:0000000000000000
[ 257.470240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 257.470253][ C0] CR2: 00007f0b41f55000 CR3: 000000007c617000 CR4: 00000000003526f0
[ 257.470267][ C0] Call Trace:
[ 257.470273][ C0]
[ 257.470303][ C0] ? lock_acquire+0x1d1/0x380
[ 257.470325][ C0] ? kmem_cache_alloc_node_noprof+0x119/0x6e0
[ 257.470350][ C0] ? find_held_lock+0x2b/0x80
[ 257.470378][ C0] ? kmem_cache_alloc_node_noprof+0x1f1/0x6e0
[ 257.470401][ C0] ? kmem_cache_alloc_node_noprof+0x1f1/0x6e0
[ 257.470426][ C0] kasan_save_track+0x14/0x30
[ 257.470449][ C0] __kasan_slab_alloc+0x89/0x90
[ 257.470475][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0
[ 257.470500][ C0] ? __alloc_skb+0x140/0x710
[ 257.470528][ C0] __alloc_skb+0x140/0x710
[ 257.470551][ C0] ? __alloc_skb+0x5b7/0x710
[ 257.470575][ C0] ? __pfx___alloc_skb+0x10/0x10
[ 257.470600][ C0] ? kfree_skbmem+0x19a/0x210
[ 257.470619][ C0] ? mark_held_locks+0x40/0x70
[ 257.470642][ C0] synproxy_send_client_synack+0x19e/0x970
[ 257.470673][ C0] ? find_held_lock+0x2b/0x80
[ 257.470701][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10
[ 257.470729][ C0] ? net_generic+0xea/0x2a0
[ 257.470759][ C0] nft_synproxy_do_eval+0xa6a/0xd30
[ 257.470788][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 257.470820][ C0] ? __lock_acquire+0x5c0/0x1f40
[ 257.470843][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10
[ 257.470872][ C0] nft_do_chain+0x2e5/0x19d0
[ 257.470905][ C0] ? __pfx_nft_do_chain+0x10/0x10
[ 257.470934][ C0] ? mark_held_locks+0x40/0x70
[ 257.470955][ C0] ? __local_bh_enable_ip+0xa5/0x120
[ 257.470981][ C0] ? __local_bh_enable_ip+0xa5/0x120
[ 257.471003][ C0] ? lockdep_hardirqs_on+0x7d/0x110
[ 257.471044][ C0] nft_do_chain_inet+0xf3/0x400
[ 257.471071][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10
[ 257.471100][ C0] ? __pfx_ipt_do_table+0x10/0x10
[ 257.471121][ C0] ? nf_nat_ipv4_local_in+0x181/0x730
[ 257.471144][ C0] nf_hook_slow+0xbf/0x220
[ 257.471169][ C0] nf_hook.constprop.0+0x2a6/0x750
[ 257.471193][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 257.471220][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10
[ 257.471243][ C0] ? __pfx_ip_rcv_finish+0x10/0x10
[ 257.471270][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 257.471301][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30
[ 257.471328][ C0] ip_local_deliver+0x163/0x1f0
[ 257.471352][ C0] ? __pfx_ip_local_deliver+0x10/0x10
[ 257.471377][ C0] ip_rcv+0x33a/0x3c0
[ 257.471400][ C0] ? __pfx_ip_rcv+0x10/0x10
[ 257.471423][ C0] __netif_receive_skb_one_core+0x197/0x1e0
[ 257.471448][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10
[ 257.471473][ C0] ? lock_acquire+0x1d1/0x380
[ 257.471496][ C0] ? process_backlog+0x437/0x1600
[ 257.471520][ C0] ? process_backlog+0x437/0x1600
[ 257.471541][ C0] __netif_receive_skb+0x1f/0x120
[ 257.471565][ C0] process_backlog+0x487/0x1600
[ 257.471591][ C0] __napi_poll.constprop.0+0xaf/0x450
[ 257.471617][ C0] net_rx_action+0xa40/0xf20
[ 257.471644][ C0] ? __pfx_net_rx_action+0x10/0x10
[ 257.471667][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 257.471696][ C0] ? try_to_wake_up+0x158/0x1c90
[ 257.471722][ C0] ? kvm_sched_clock_read+0x11/0x20
[ 257.471751][ C0] ? sched_clock+0x3a/0x60
[ 257.471769][ C0] ? sched_clock_cpu+0x6c/0x570
[ 257.471794][ C0] ? mark_held_locks+0x40/0x70
[ 257.471817][ C0] handle_softirqs+0x1e6/0x9d0
[ 257.471839][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 257.471861][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 257.471882][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0
[ 257.471915][ C0] ? batadv_tt_local_purge+0x21c/0x3d0
[ 257.471941][ C0] do_softirq+0xaf/0xf0
[ 257.471961][ C0]
[ 257.471967][ C0]
[ 257.471974][ C0] __local_bh_enable_ip+0xff/0x120
[ 257.471996][ C0] batadv_tt_local_purge+0x21c/0x3d0
[ 257.472021][ C0] ? look_up_lock_class+0x55/0x120
[ 257.472055][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10
[ 257.472083][ C0] batadv_tt_purge+0x8b/0xbd0
[ 257.472110][ C0] ? reacquire_held_locks+0xdd/0x1f0
[ 257.472133][ C0] ? __pfx_batadv_tt_purge+0x10/0x10
[ 257.472158][ C0] ? lock_acquire+0x1d1/0x380
[ 257.472179][ C0] ? process_one_work+0xa2c/0x1b10
[ 257.472211][ C0] ? process_one_work+0x906/0x1b10
[ 257.472241][ C0] ? process_one_work+0x906/0x1b10
[ 257.472274][ C0] process_one_work+0xac7/0x1b10
[ 257.472311][ C0] ? __pfx_process_one_work+0x10/0x10
[ 257.472339][ C0] ? lock_acquire+0x1d1/0x380
[ 257.472364][ C0] ? __pfx_batadv_tt_purge+0x10/0x10
[ 257.472390][ C0] worker_thread+0x5ef/0xe50
[ 257.472425][ C0] ? __pfx_worker_thread+0x10/0x10
[ 257.472457][ C0] ? kthread+0x13a/0x450
[ 257.472482][ C0] ? __pfx_worker_thread+0x10/0x10
[ 257.472512][ C0] kthread+0x373/0x450
[ 257.472539][ C0] ? __pfx_kthread+0x10/0x10
[ 257.472569][ C0] ret_from_fork+0x730/0xd60
[ 257.472593][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 257.472618][ C0] ? __switch_to+0x800/0x10f0
[ 257.472647][ C0] ? __pfx_kthread+0x10/0x10
[ 257.472677][ C0] ret_from_fork_asm+0x1a/0x30
[ 257.472707][ C0]
[ 257.527702][ T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 259.664311][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 259.673426][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 259.683519][ T31] Call Trace:
[ 259.686809][ T31]
[ 259.689740][ T31] dump_stack_lvl+0x100/0x190
[ 259.694433][ T31] vpanic+0x553/0x970
[ 259.698418][ T31] ? __pfx_vpanic+0x10/0x10
[ 259.702932][ T31] panic+0xd1/0xe0
[ 259.706658][ T31] ? __pfx_panic+0x10/0x10
[ 259.711082][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[ 259.717248][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[ 259.723418][ T31] ? watchdog.cold+0x1ec/0x234
[ 259.728200][ T31] watchdog.cold+0x1fd/0x234
[ 259.732807][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 259.738632][ T31] ? __pfx_watchdog+0x10/0x10
[ 259.743321][ T31] ? __kthread_parkme+0x18f/0x230
[ 259.748356][ T31] ? kthread+0x13a/0x450
[ 259.752610][ T31] ? __pfx_watchdog+0x10/0x10
[ 259.757290][ T31] kthread+0x373/0x450
[ 259.761369][ T31] ? __pfx_kthread+0x10/0x10
[ 259.765970][ T31] ret_from_fork+0x730/0xd60
[ 259.770572][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 259.775693][ T31] ? __switch_to+0x800/0x10f0
[ 259.780386][ T31] ? __pfx_kthread+0x10/0x10
[ 259.784995][ T31] ret_from_fork_asm+0x1a/0x30
[ 259.789800][ T31]
[ 259.793051][ T31] Kernel Offset: disabled
[ 259.797369][ T31] Rebooting in 86400 seconds..