Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. 2026/09/30 03:47:19 parsed 1 programs 2026/09/30 03:47:19 serving rpc on tcp://45139 [ 139.447569][ T30] audit: type=1400 audit(1790740039.724:129): avc: denied { node_bind } for pid=5627 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 141.601397][ T30] audit: type=1400 audit(1790740041.874:130): avc: denied { mounton } for pid=5635 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 141.603619][ T30] audit: type=1400 audit(1790740041.874:131): avc: denied { mount } for pid=5635 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.608777][ T5635] cgroup: Unknown subsys name 'net' [ 141.612319][ T30] audit: type=1400 audit(1790740041.884:132): avc: denied { unmount } for pid=5635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 141.758511][ T5635] cgroup: Unknown subsys name 'cpuset' [ 141.761418][ T5635] cgroup: Unknown subsys name 'rlimit' [ 141.874575][ T30] audit: type=1400 audit(1790740042.144:133): avc: denied { setattr } for pid=5635 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.876457][ T30] audit: type=1400 audit(1790740042.154:134): avc: denied { create } for pid=5635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.877998][ T30] audit: type=1400 audit(1790740042.154:135): avc: denied { write } for pid=5635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.878043][ T30] audit: type=1400 audit(1790740042.154:136): avc: denied { read } for pid=5635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.896540][ T30] audit: type=1400 audit(1790740042.174:137): avc: denied { mounton } for pid=5635 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 141.897229][ T30] audit: type=1400 audit(1790740042.174:138): avc: denied { mount } for pid=5635 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 142.023355][ T5637] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 143.082486][ T5635] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 144.961429][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 144.961450][ T30] audit: type=1400 audit(1790740045.234:143): avc: denied { execmem } for pid=5642 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.018070][ T30] audit: type=1400 audit(1790740045.294:144): avc: denied { read } for pid=5648 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.018116][ T30] audit: type=1400 audit(1790740045.294:145): avc: denied { open } for pid=5648 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.021113][ T30] audit: type=1400 audit(1790740045.294:146): avc: denied { mounton } for pid=5648 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 145.101062][ T30] audit: type=1400 audit(1790740045.354:147): avc: denied { create } for pid=5645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 145.133059][ T30] audit: type=1400 audit(1790740045.404:148): avc: denied { sys_admin } for pid=5645 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 145.202594][ T30] audit: type=1400 audit(1790740045.474:149): avc: denied { mounton } for pid=5648 comm="syz-executor" path="/root/syzkaller.2AE8GM/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 145.235868][ T30] audit: type=1400 audit(1790740045.514:150): avc: denied { mount } for pid=5648 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.239446][ T30] audit: type=1400 audit(1790740045.514:151): avc: denied { mounton } for pid=5648 comm="syz-executor" path="/root/syzkaller.2AE8GM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.242636][ T30] audit: type=1400 audit(1790740045.514:152): avc: denied { mount } for pid=5648 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.330870][ T5648] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 145.945060][ T5679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.946627][ T5679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.947384][ T5679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.948694][ T5679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.949591][ T5679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.560414][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.560436][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.811239][ T376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.811259][ T376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.043604][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.044043][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.044105][ T5698] bridge_slave_0: entered allmulticast mode [ 148.045226][ T5698] bridge_slave_0: entered promiscuous mode [ 148.049099][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.049206][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.049286][ T5698] bridge_slave_1: entered allmulticast mode [ 148.050435][ T5698] bridge_slave_1: entered promiscuous mode [ 148.071651][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.073816][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.093248][ T5698] team0: Port device team_slave_0 added [ 148.095739][ T5698] team0: Port device team_slave_1 added [ 148.127271][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.127282][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.127296][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.129254][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.129270][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.129290][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.162606][ T5698] hsr_slave_0: entered promiscuous mode [ 148.163529][ T5698] hsr_slave_1: entered promiscuous mode [ 148.306116][ T5698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.311252][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.312086][ T5698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.316850][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.317624][ T5698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.325296][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.335442][ T5698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.342051][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.383669][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.383819][ T5698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.384152][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.384204][ T5698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.457384][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.473191][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.475117][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.496406][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.505970][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.506052][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.517770][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.517843][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.777844][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.808349][ T5698] veth0_vlan: entered promiscuous mode [ 148.812593][ T5698] veth1_vlan: entered promiscuous mode [ 148.842151][ T5698] veth0_macvtap: entered promiscuous mode [ 148.844388][ T5698] veth1_macvtap: entered promiscuous mode [ 148.862143][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.868992][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/09/30 03:47:29 executed programs: 0 [ 148.915423][ T376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.915745][ T376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.915959][ T376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.915988][ T376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.054035][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.057729][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.059958][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.060915][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.062613][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.120070][ T5762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.133798][ T5762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.144965][ T5762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.148059][ T5762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.150522][ T5762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.237942][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.240513][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.244068][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.245840][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.247021][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.247636][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.248066][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.300481][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.310946][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.311662][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.359958][ T5679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.360912][ T5679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.361375][ T5679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.362358][ T5679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.364592][ T5679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.372277][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.756349][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.969044][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.728650][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.762132][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.762229][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.762304][ T5758] bridge_slave_0: entered allmulticast mode [ 150.763077][ T5758] bridge_slave_0: entered promiscuous mode [ 150.806768][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.806846][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.806977][ T5758] bridge_slave_1: entered allmulticast mode [ 150.808173][ T5758] bridge_slave_1: entered promiscuous mode [ 150.921528][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.961906][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.026237][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.026362][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.027478][ T5767] bridge_slave_0: entered allmulticast mode [ 151.028899][ T5767] bridge_slave_0: entered promiscuous mode [ 151.032127][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.032200][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.032297][ T5767] bridge_slave_1: entered allmulticast mode [ 151.034395][ T5767] bridge_slave_1: entered promiscuous mode [ 151.050530][ T5758] team0: Port device team_slave_0 added [ 151.053218][ T5758] team0: Port device team_slave_1 added [ 151.085093][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.085190][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.085373][ T5768] bridge_slave_0: entered allmulticast mode [ 151.094410][ T5768] bridge_slave_0: entered promiscuous mode [ 151.107404][ T5679] Bluetooth: hci0: command tx timeout [ 151.158537][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.158617][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.158716][ T5768] bridge_slave_1: entered allmulticast mode [ 151.160021][ T5768] bridge_slave_1: entered promiscuous mode [ 151.187986][ T5679] Bluetooth: hci1: command tx timeout [ 151.189751][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.192597][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.218233][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.218249][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.218267][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.252147][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.252165][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.252184][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.260538][ T5767] team0: Port device team_slave_0 added [ 151.326201][ T5767] team0: Port device team_slave_1 added [ 151.328077][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.349880][ T5772] Bluetooth: hci2: command tx timeout [ 151.354901][ T5679] Bluetooth: hci3: command tx timeout [ 151.369893][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.393511][ T5758] hsr_slave_0: entered promiscuous mode [ 151.394049][ T5758] hsr_slave_1: entered promiscuous mode [ 151.394382][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 151.394486][ T5758] Cannot create hsr debugfs directory [ 151.425498][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.425616][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.425906][ T5757] bridge_slave_0: entered allmulticast mode [ 151.427015][ T5757] bridge_slave_0: entered promiscuous mode [ 151.428469][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.428479][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.428496][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.429487][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.429573][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.429797][ T5757] bridge_slave_1: entered allmulticast mode [ 151.430803][ T5757] bridge_slave_1: entered promiscuous mode [ 151.434843][ T5679] Bluetooth: hci4: command tx timeout [ 151.445750][ T5768] team0: Port device team_slave_0 added [ 151.447704][ T5768] team0: Port device team_slave_1 added [ 151.457368][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.457598][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.457834][ T5773] bridge_slave_0: entered allmulticast mode [ 151.459022][ T5773] bridge_slave_0: entered promiscuous mode [ 151.461415][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.461426][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.461444][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.520640][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.520715][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.520814][ T5773] bridge_slave_1: entered allmulticast mode [ 151.524615][ T5773] bridge_slave_1: entered promiscuous mode [ 151.573409][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.582949][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.582974][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.582997][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.604623][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.626481][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.639893][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.639913][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.639933][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.642414][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.738352][ T5767] hsr_slave_0: entered promiscuous mode [ 151.739251][ T5767] hsr_slave_1: entered promiscuous mode [ 151.739750][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 151.739778][ T5767] Cannot create hsr debugfs directory [ 151.801095][ T5757] team0: Port device team_slave_0 added [ 151.821644][ T5773] team0: Port device team_slave_0 added [ 151.823919][ T5757] team0: Port device team_slave_1 added [ 151.844109][ T5773] team0: Port device team_slave_1 added [ 151.928048][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.928064][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.928080][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.946593][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.946607][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.946625][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.948124][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.948134][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.948151][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.953213][ T5768] hsr_slave_0: entered promiscuous mode [ 151.953912][ T5768] hsr_slave_1: entered promiscuous mode [ 151.954369][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 151.954383][ T5768] Cannot create hsr debugfs directory [ 152.026420][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.026442][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.026462][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.143280][ T49] bridge_slave_1: left allmulticast mode [ 152.143321][ T49] bridge_slave_1: left promiscuous mode [ 152.144444][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.159333][ T49] bridge_slave_0: left allmulticast mode [ 152.159350][ T49] bridge_slave_0: left promiscuous mode [ 152.159490][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.256094][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.258481][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.259281][ T49] bond0 (unregistering): Released all slaves [ 152.362459][ T49] hsr_slave_0: left promiscuous mode [ 152.362811][ T49] hsr_slave_1: left promiscuous mode [ 152.363212][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.363228][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.363687][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.363700][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.371664][ T49] veth1_macvtap: left promiscuous mode [ 152.371701][ T49] veth0_macvtap: left promiscuous mode [ 152.371774][ T49] veth1_vlan: left promiscuous mode [ 152.371831][ T49] veth0_vlan: left promiscuous mode [ 152.525590][ T49] team0 (unregistering): Port device team_slave_1 removed [ 152.531975][ T49] team0 (unregistering): Port device team_slave_0 removed [ 152.631285][ T5757] hsr_slave_0: entered promiscuous mode [ 152.631820][ T5757] hsr_slave_1: entered promiscuous mode [ 152.647683][ T5773] hsr_slave_0: entered promiscuous mode [ 152.658772][ T5773] hsr_slave_1: entered promiscuous mode [ 152.659350][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 152.659366][ T5773] Cannot create hsr debugfs directory [ 153.047326][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 153.047360][ T30] audit: type=1400 audit(1790740053.324:173): avc: denied { write } for pid=5851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.129344][ T30] audit: type=1400 audit(1790740053.404:174): avc: denied { write } for pid=5862 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.186424][ T5679] Bluetooth: hci0: command tx timeout [ 153.269562][ T5679] Bluetooth: hci1: command tx timeout [ 153.425055][ T5679] Bluetooth: hci3: command tx timeout [ 153.434823][ T5679] Bluetooth: hci2: command tx timeout [ 153.505297][ T5679] Bluetooth: hci4: command tx timeout [ 153.600159][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.611550][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.614364][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.622772][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.623427][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.644657][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.662007][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.670648][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.683901][ T30] audit: type=1400 audit(1790740053.954:175): avc: denied { write } for pid=5864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.784051][ T30] audit: type=1400 audit(1790740054.054:176): avc: denied { write } for pid=5876 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.891533][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.909762][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.910361][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.913045][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.921512][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.924642][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.927671][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.931176][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.006665][ T5773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.011892][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.036590][ T5773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.040349][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.040963][ T5773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.043367][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.073904][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.077045][ T5773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.083777][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.128512][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.145806][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.146544][ T5757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.149930][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.150420][ T5757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.151869][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.188372][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.188450][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.189796][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.189864][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.193119][ T5757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.200424][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.224440][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.224462][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.232663][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.232916][ T5757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.239552][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.314253][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.314357][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.399994][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.400089][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.440652][ T5758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.444524][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.450336][ T5758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.455067][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.483245][ T5758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.492885][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.494006][ T5758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.503794][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.673246][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.761585][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.801686][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.801797][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.829027][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.829127][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.851477][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.922446][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.934665][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.972412][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.992886][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.992997][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.042373][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.068173][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.068265][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.100502][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.100588][ T4651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.130041][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.130135][ T4651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.241101][ T5768] veth0_vlan: entered promiscuous mode [ 155.265519][ T5679] Bluetooth: hci0: command tx timeout [ 155.292473][ T5768] veth1_vlan: entered promiscuous mode [ 155.345034][ T5679] Bluetooth: hci1: command tx timeout [ 155.392127][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.459289][ T5768] veth0_macvtap: entered promiscuous mode [ 155.478441][ T5768] veth1_macvtap: entered promiscuous mode [ 155.505275][ T5679] Bluetooth: hci2: command tx timeout [ 155.505323][ T5679] Bluetooth: hci3: command tx timeout [ 155.577767][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.580554][ T5767] veth0_vlan: entered promiscuous mode [ 155.590095][ T5772] Bluetooth: hci4: command tx timeout [ 155.618839][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.649986][ T5767] veth1_vlan: entered promiscuous mode [ 155.681216][ T1119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.681806][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.795530][ T1119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812571][ T5767] veth0_macvtap: entered promiscuous mode [ 155.840574][ T5767] veth1_macvtap: entered promiscuous mode [ 155.882816][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.924659][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.924773][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.961682][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.975735][ T145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.997645][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.090450][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.114597][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.114624][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.166117][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.258271][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.258545][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.258561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/30 03:47:36 executed programs: 10 [ 156.355091][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.357107][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.357130][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.376620][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.418750][ T30] audit: type=1400 audit(1790740056.694:177): avc: denied { create } for pid=5967 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.418805][ T30] audit: type=1400 audit(1790740056.694:178): avc: denied { write } for pid=5967 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.503745][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.749860][ T5757] veth0_vlan: entered promiscuous mode [ 157.356252][ T5772] Bluetooth: hci0: command tx timeout [ 157.490164][ T5772] Bluetooth: hci1: command tx timeout [ 157.601259][ T5772] Bluetooth: hci3: command tx timeout [ 157.601293][ T5772] Bluetooth: hci2: command tx timeout [ 157.684796][ T5679] Bluetooth: hci4: command tx timeout [ 162.114745][ C0] sched: DL replenish lagged too much [ 195.028969][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.034973][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.410931][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.417877][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.143490][ T31] INFO: task kworker/u8:5:145 blocked for more than 143 seconds. [ 307.143524][ T31] Not tainted syzkaller #0 [ 307.143535][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.143543][ T31] task:kworker/u8:5 state:D stack:23560 pid:145 tgid:145 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 307.143603][ T31] Workqueue: events_unbound linkwatch_event [ 307.143635][ T31] Call Trace: [ 307.143641][ T31] [ 307.143653][ T31] __schedule+0x1259/0x6920 [ 307.143685][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 307.143713][ T31] ? do_raw_spin_lock+0x128/0x260 [ 307.143742][ T31] ? kthread_data+0x53/0xc0 [ 307.143769][ T31] ? __pfx___schedule+0x10/0x10 [ 307.143794][ T31] ? find_held_lock+0x2b/0x80 [ 307.143822][ T31] ? schedule+0x225/0x2c0 [ 307.143853][ T31] schedule+0xdd/0x2c0 [ 307.143880][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.143907][ T31] __mutex_lock+0xccb/0x1bd0 [ 307.143929][ T31] ? linkwatch_event+0x51/0xc0 [ 307.143954][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.143991][ T31] ? linkwatch_event+0x51/0xc0 [ 307.144009][ T31] ? rtnl_lock+0x9/0x20 [ 307.144040][ T31] linkwatch_event+0x51/0xc0 [ 307.144061][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 307.144083][ T31] ? rcu_is_watching+0x13/0xc0 [ 307.144109][ T31] process_one_work+0xac7/0x1b10 [ 307.144148][ T31] ? __pfx_process_one_work+0x10/0x10 [ 307.144177][ T31] ? lock_acquire+0x1d1/0x380 [ 307.144204][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 307.144227][ T31] worker_thread+0x5ef/0xe50 [ 307.144255][ T31] ? kthread+0x13a/0x450 [ 307.144279][ T31] ? __pfx_worker_thread+0x10/0x10 [ 307.144305][ T31] kthread+0x373/0x450 [ 307.144329][ T31] ? __pfx_kthread+0x10/0x10 [ 307.144356][ T31] ret_from_fork+0x730/0xd60 [ 307.144379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.144402][ T31] ? __switch_to+0x800/0x10f0 [ 307.144429][ T31] ? __pfx_kthread+0x10/0x10 [ 307.144456][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.144510][ T31] [ 307.156690][ T31] INFO: task syz-executor:5757 blocked for more than 143 seconds. [ 307.156723][ T31] Not tainted syzkaller #0 [ 307.156733][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.156741][ T31] task:syz-executor state:D stack:23192 pid:5757 tgid:5757 ppid:5754 task_flags:0x400140 flags:0x00080000 [ 307.156800][ T31] Call Trace: [ 307.156808][ T31] [ 307.156820][ T31] __schedule+0x1259/0x6920 [ 307.156856][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 307.156884][ T31] ? do_raw_spin_lock+0x128/0x260 [ 307.156913][ T31] ? lock_acquire+0x1d1/0x380 [ 307.156935][ T31] ? __pfx___schedule+0x10/0x10 [ 307.156961][ T31] ? find_held_lock+0x2b/0x80 [ 307.156989][ T31] ? schedule+0x225/0x2c0 [ 307.157025][ T31] schedule+0xdd/0x2c0 [ 307.157052][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.157078][ T31] __mutex_lock+0xccb/0x1bd0 [ 307.157098][ T31] ? inet_rtm_newaddr+0x31c/0x18c0 [ 307.157131][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.157151][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 307.157172][ T31] ? lock_acquire+0x1d1/0x380 [ 307.157208][ T31] ? inet_rtm_newaddr+0x31c/0x18c0 [ 307.157231][ T31] ? rtnl_lock+0x9/0x20 [ 307.157252][ T31] inet_rtm_newaddr+0x31c/0x18c0 [ 307.157284][ T31] ? preempt_schedule_common+0x3c/0xb0 [ 307.157311][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 307.157344][ T31] ? find_held_lock+0x2b/0x80 [ 307.157370][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.157397][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.157425][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 307.157451][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 307.157480][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.157518][ T31] netlink_rcv_skb+0x159/0x420 [ 307.157544][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.157573][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.157605][ T31] ? rcu_is_watching+0x13/0xc0 [ 307.157641][ T31] netlink_unicast+0x585/0x850 [ 307.157668][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 307.157691][ T31] ? __pfx_sock_has_perm+0x10/0x10 [ 307.157717][ T31] netlink_sendmsg+0x8b0/0xda0 [ 307.157745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.157771][ T31] ? selinux_socket_sendmsg+0x198/0x2f0 [ 307.157798][ T31] __sys_sendto+0x48b/0x4e0 [ 307.157822][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.157846][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 307.157887][ T31] ? xfd_validate_state+0x129/0x190 [ 307.157908][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 307.157943][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 307.157966][ T31] ? do_syscall_64+0xae/0x790 [ 307.157985][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.158003][ T31] do_syscall_64+0x123/0x790 [ 307.158030][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.158050][ T31] RIP: 0033:0x7fa1a415e98e [ 307.158067][ T31] RSP: 002b:00007ffd5c624e98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 307.158084][ T31] RAX: ffffffffffffffda RBX: 000055558ddab500 RCX: 00007fa1a415e98e [ 307.158095][ T31] RDX: 0000000000000028 RSI: 00007fa1a4f54670 RDI: 0000000000000003 [ 307.158106][ T31] RBP: 0000000000000001 R08: 00007ffd5c624f14 R09: 000000000000000c [ 307.158117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 307.158128][ T31] R13: 0000000000000000 R14: 00007fa1a4f54670 R15: 0000000000000000 [ 307.158153][ T31] [ 307.158162][ T31] INFO: task syz-executor:5758 blocked for more than 143 seconds. [ 307.158174][ T31] Not tainted syzkaller #0 [ 307.158183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.158190][ T31] task:syz-executor state:D stack:23256 pid:5758 tgid:5758 ppid:5755 task_flags:0x400140 flags:0x00080000 [ 307.158244][ T31] Call Trace: [ 307.158250][ T31] [ 307.158260][ T31] __schedule+0x1259/0x6920 [ 307.158286][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 307.158312][ T31] ? do_raw_spin_lock+0x128/0x260 [ 307.158340][ T31] ? lock_acquire+0x1d1/0x380 [ 307.158363][ T31] ? __pfx___schedule+0x10/0x10 [ 307.158388][ T31] ? find_held_lock+0x2b/0x80 [ 307.158415][ T31] ? schedule+0x225/0x2c0 [ 307.158446][ T31] schedule+0xdd/0x2c0 [ 307.158472][ T31] schedule_preempt_disabled+0x13/0x30 [ 307.158499][ T31] __mutex_lock+0xccb/0x1bd0 [ 307.158518][ T31] ? inet_rtm_newaddr+0x31c/0x18c0 [ 307.158542][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 307.158559][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 307.158577][ T31] ? lock_acquire+0x1d1/0x380 [ 307.158610][ T31] ? inet_rtm_newaddr+0x31c/0x18c0 [ 307.158634][ T31] ? rtnl_lock+0x9/0x20 [ 307.158653][ T31] inet_rtm_newaddr+0x31c/0x18c0 [ 307.158684][ T31] ? preempt_schedule_common+0x3c/0xb0 [ 307.158712][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 307.158746][ T31] ? find_held_lock+0x2b/0x80 [ 307.158772][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.158798][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 307.158825][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 307.158851][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 307.158881][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.158920][ T31] netlink_rcv_skb+0x159/0x420 [ 307.158943][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.158973][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.159005][ T31] ? rcu_is_watching+0x13/0xc0 [ 307.159054][ T31] netlink_unicast+0x585/0x850 [ 307.159081][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 307.159104][ T31] ? __pfx_sock_has_perm+0x10/0x10 [ 307.159129][ T31] netlink_sendmsg+0x8b0/0xda0 [ 307.159158][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.159183][ T31] ? selinux_socket_sendmsg+0x198/0x2f0 [ 307.159209][ T31] __sys_sendto+0x48b/0x4e0 [ 307.159232][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.159256][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 307.159298][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 307.159331][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 307.159354][ T31] ? do_syscall_64+0xae/0x790 [ 307.159372][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.159390][ T31] do_syscall_64+0x123/0x790 [ 307.159411][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.159429][ T31] RIP: 0033:0x7ff366d5e98e [ 307.159443][ T31] RSP: 002b:00007fff2f5fef28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 307.159460][ T31] RAX: ffffffffffffffda RBX: 000055555f979500 RCX: 00007ff366d5e98e [ 307.159472][ T31] RDX: 0000000000000028 RSI: 00007ff367b54670 RDI: 0000000000000003 [ 307.159483][ T31] RBP: 0000000000000001 R08: 00007fff2f5fefa4 R09: 000000000000000c [ 307.159494][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 307.159505][ T31] R13: 0000000000000000 R14: 00007ff367b54670 R15: 0000000000000000 [ 307.159528][ T31] [ 307.159580][ T31] [ 307.159580][ T31] Showing all locks held in the system: [ 307.159588][ T31] locks held by kthreadd/2: 1, last CPU#1: [ 307.159601][ T31] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 307.159652][ T31] locks held by kworker/0:0/9: 3, last CPU#0: [ 307.159664][ T31] #0: ffff8880578bd940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.159727][ T31] #1: ffffc900000e7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.159797][ T31] #2: ffff888027169440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 307.159853][ T31] locks held by kworker/0:1/10: 3, last CPU#0: [ 307.159865][ T31] #0: ffff888074b23540 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.159922][ T31] #1: ffffc900000f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.159989][ T31] #2: ffff888028425440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 307.160048][ T31] locks held by kworker/u8:0/12: 6, last CPU#1: [ 307.160061][ T31] #0: ffff888021aa8940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.160113][ T31] #1: ffffc90000117d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.160165][ T31] #2: ffff88802a7c00e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 307.160216][ T31] #3: ffff88802a7d6c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 307.160263][ T31] #4: ffff88802a7d4938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 307.160312][ T31] #5: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 307.160358][ T31] locks held by kworker/u8:1/13: 3, last CPU#0: [ 307.160370][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.160422][ T31] #1: ffffc90000127d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.160474][ T31] #2: ffff888057d40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 307.160526][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 307.160538][ T31] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 307.160594][ T31] locks held by kworker/u8:2/42: 3, on CPU#1: [ 307.160606][ T31] #0: ffff8880345a1940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.160657][ T31] #1: ffffc90000b27d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.160710][ T31] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 307.160760][ T31] locks held by kworker/u8:3/49: 3, last CPU#0: [ 307.160773][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.160824][ T31] #1: ffffc90000b97d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.160877][ T31] #2: ffff88802cfa0258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 307.160936][ T31] locks held by kworker/u8:4/69: 3, last CPU#0: [ 307.160948][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.160999][ T31] #1: ffffc9000207fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.161056][ T31] #2: ffff888057fe0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 307.161102][ T31] locks held by kworker/1:1/91: 5, last CPU#1: [ 307.161115][ T31] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.161165][ T31] #1: ffffc900020afd08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.161216][ T31] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880 [ 307.161260][ T31] #3: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 307.161305][ T31] #4: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 307.161358][ T31] locks held by kworker/u8:5/145: 3, on CPU#1: [ 307.161370][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.161421][ T31] #1: ffffc90002effd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.161472][ T31] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 307.161516][ T31] locks held by kworker/u8:6/147: 3, last CPU#1: [ 307.161528][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.161579][ T31] #1: ffffc9000208fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.161630][ T31] #2: ffff888057e60800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 307.161675][ T31] locks held by kworker/u8:7/376: 4, on CPU#1: [ 307.161688][ T31] #0: ffff88802cf2b140 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.161739][ T31] #1: ffffc90002f1fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.161792][ T31] #2: ffff88802a949440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 307.161845][ T31] #3: ffff88807f1b8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 307.161900][ T31] locks held by kworker/0:2/984: 3, last CPU#0: [ 307.161913][ T31] #0: ffff8880579f3940 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.161968][ T31] #1: ffffc90005077d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.162040][ T31] #2: ffff88802dccd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 307.162096][ T31] locks held by kworker/u8:8/1106: 3, last CPU#1: [ 307.162109][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.162159][ T31] #1: ffffc900053d7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.162212][ T31] #2: ffff8880222c8258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 307.162268][ T31] locks held by kworker/u8:9/1119: 3, last CPU#1: [ 307.162282][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.162338][ T31] #1: ffffc90005507d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.162395][ T31] #2: ffff888057ff0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 307.162443][ T31] locks held by kworker/1:2/1224: 3, last CPU#1: [ 307.162457][ T31] #0: ffff8880578bd940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.162516][ T31] #1: ffffc90005967d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.162590][ T31] #2: ffff888027169440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 307.162665][ T31] locks held by kworker/R-bat_e/3222: 2, last CPU#0: [ 307.162679][ T31] #0: ffff888034a3d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.162735][ T31] #1: ffffc9000e9a7c68 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.162794][ T31] locks held by kworker/u8:12/4651: 3, last CPU#0: [ 307.162808][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.162864][ T31] #1: ffffc9000df57d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.162921][ T31] #2: ffff88802ae6e258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 307.162982][ T31] locks held by kworker/u9:1/4919: 5, on CPU#1: [ 307.162995][ T31] #0: ffff88803913e140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.163058][ T31] #1: ffffc9000402fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.163115][ T31] #2: ffff8880591e8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 307.163165][ T31] #3: ffff8880591e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 307.163216][ T31] #4: ffffffff90f56fc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 307.163265][ T31] locks held by dhcpcd/5264: 2, last CPU#1: [ 307.163279][ T31] #0: ffffffff8f90af38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x22e/0x580 [ 307.163330][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 307.163384][ T31] locks held by dhcpcd/5265: 1, last CPU#0: [ 307.163398][ T31] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 307.163451][ T31] locks held by kworker/0:3/5336: 4, on CPU#0: [ 307.163464][ T31] #0: ffff8880578bf140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.163524][ T31] #1: ffffc9000365fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.163601][ T31] #2: ffff88802a949440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 307.163660][ T31] #3: ffff88807f1b8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 307.163717][ T31] locks held by crond/5340: 3, last CPU#1: [ 307.163731][ T31] #0: ffffffff8f90af38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 307.163779][ T31] #1: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 307.163828][ T31] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 307.163882][ T31] locks held by getty/5361: 2, on CPU#0: [ 307.163895][ T31] #0: ffff88802aaab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 307.163945][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 307.163992][ T31] locks held by syz-execprog/5634: 2, last CPU#1: [ 307.164005][ T31] #0: ffff88802e902448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 307.164068][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: count_memcg_events_mm.constprop.0+0x2f/0x2a0 [ 307.164120][ T31] locks held by kworker/u9:2/5679: 7, on CPU#1: [ 307.164134][ T31] #0: ffff888037506140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 307.164190][ T31] #1: ffffc90003eafd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 307.164246][ T31] #2: ffff8880591fcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 307.164293][ T31] #3: ffff8880591fc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 307.164341][ T31] #4: ffffffff90f56fc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 307.164385][ T31] #5: ffff88802d3822f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0xa1/0x6c0 [ 307.164441][ T31] #6: ffffffff8edf84a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 307.164506][ T31] locks held by syz-executor/5757: 1, on CPU#0: [ 307.164519][ T31] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 307.164572][ T31] locks held by syz-executor/5758: 1, on CPU#0: [ 307.164585][ T31] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 311.958647][ T31] locks held by kworker/u9:3/5762: 5, on CPU#1: [ 311.958676][ T31] #0: ffff88807dd36940 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.958749][ T31] #1: ffffc90003e2fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.958803][ T31] #2: ffff8880591e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 311.958851][ T31] #3: ffff8880591e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 311.958898][ T31] #4: ffffffff90f56fc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 311.958942][ T31] locks held by syz-executor/5768: 3, last CPU#1: [ 311.958955][ T31] #0: ffff88807e493440 (&mm->mmap_lock){++++}-{4:4}, at: task_numa_work+0x372/0x1980 [ 311.959007][ T31] #1: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 311.959054][ T31] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x7a/0x410 [ 311.959111][ T31] locks held by kworker/u9:4/5772: 5, on CPU#1: [ 311.959123][ T31] #0: ffff88807df40940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.959181][ T31] #1: ffffc90003bffd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.959232][ T31] #2: ffff88801c124ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 311.959275][ T31] #3: ffff88801c1240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 311.959317][ T31] #4: ffffffff90f56fc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x11d/0x3c0 [ 311.959357][ T31] locks held by syz-executor/5773: 1, on CPU#1: [ 311.959369][ T31] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 311.959429][ T31] locks held by kworker/1:5/5889: 2, last CPU#1: [ 311.959442][ T31] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.959494][ T31] #1: ffffc90003f0fd08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.959547][ T31] locks held by kworker/1:7/5891: 4, last CPU#1: [ 311.959561][ T31] #0: ffff8880578bf140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.959617][ T31] #1: ffffc9000250fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.959686][ T31] #2: ffff88802a949440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 311.959744][ T31] #3: ffff88807f1b8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 311.959800][ T31] locks held by kworker/0:5/5945: 4, last CPU#0: [ 311.959812][ T31] #0: ffff88807d372140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.959871][ T31] #1: ffffc900036afd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.959941][ T31] #2: ffff8880560e5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 311.959993][ T31] #3: ffff88807f1ba0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 311.960045][ T31] locks held by kworker/u8:13/5972: 3, last CPU#1: [ 311.960058][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.960110][ T31] #1: ffffc9000367fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.960169][ T31] #2: ffff88802cdcb258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 311.960228][ T31] locks held by kworker/u8:14/5973: 4, on CPU#0: [ 311.960240][ T31] #0: ffff88802cfe7940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.960292][ T31] #1: ffffc900037ffd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.960344][ T31] #2: ffff888023f45440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 311.960396][ T31] #3: ffff88802dccd270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 311.960449][ T31] locks held by kworker/u8:15/5974: 1, last CPU#1: [ 311.960461][ T31] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 311.960507][ T31] locks held by syz-executor/5975: 1, last CPU#1: [ 311.960520][ T31] #0: ffffffff8effd698 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 311.960565][ T31] locks held by kworker/u8:16/5976: 2, last CPU#1: [ 311.960577][ T31] #0: ffff88801c093940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 311.960628][ T31] #1: ffffc90002eafd08 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 311.960683][ T31] [ 311.960687][ T31] ============================================= [ 311.960687][ T31] [ 311.960697][ T31] NMI backtrace for cpu 1 [ 311.960712][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 311.960732][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 311.960742][ T31] Call Trace: [ 311.960749][ T31] [ 311.960759][ T31] dump_stack_lvl+0x100/0x190 [ 311.960790][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 311.960818][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 311.960842][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 311.960871][ T31] sys_info+0x141/0x190 [ 311.960894][ T31] watchdog+0xcb1/0x1030 [ 311.960924][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.960960][ T31] ? __pfx_watchdog+0x10/0x10 [ 311.960982][ T31] ? __kthread_parkme+0x18f/0x230 [ 311.961007][ T31] ? kthread+0x13a/0x450 [ 311.961031][ T31] ? __pfx_watchdog+0x10/0x10 [ 311.961051][ T31] kthread+0x373/0x450 [ 311.961075][ T31] ? __pfx_kthread+0x10/0x10 [ 311.961101][ T31] ret_from_fork+0x730/0xd60 [ 311.961123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 311.961151][ T31] ? __switch_to+0x800/0x10f0 [ 311.961179][ T31] ? __pfx_kthread+0x10/0x10 [ 311.961205][ T31] ret_from_fork_asm+0x1a/0x30 [ 311.961236][ T31] [ 311.967740][ T31] Sending NMI from CPU 1 to CPUs 0: [ 311.967777][ C0] NMI backtrace for cpu 0 [ 311.967795][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 311.967814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 311.967824][ C0] Workqueue: bat_events batadv_tt_purge [ 311.967851][ C0] RIP: 0010:__local_bh_disable_ip+0x18/0xd0 [ 311.967871][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 89 f3 65 f6 05 db e8 c2 12 0f 0f 85 9c 00 00 00 9c 5d 48 63 c3 65 48 01 05 c4 e8 c2 12 65 48 63 05 bc e8 c2 12 48 31 [ 311.967884][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00000246 [ 311.967897][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000101 [ 311.967906][ C0] RDX: ffff888034c6a580 RSI: 0000000000000200 RDI: ffffffff8a5f40b1 [ 311.967916][ C0] RBP: 0000000000000246 R08: 0000000000000005 R09: 0000000000000000 [ 311.967925][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000000f36 [ 311.967934][ C0] R13: ffff8881aba77740 R14: ffff888073f91b28 R15: 0000000000000000 [ 311.967944][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 311.967959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.967969][ C0] CR2: 00003fe1ce3d3fff CR3: 000000007eaa7000 CR4: 00000000003526f0 [ 311.967979][ C0] Call Trace: [ 311.967984][ C0] [ 311.967990][ C0] ipt_do_table+0x326/0x1b00 [ 311.968012][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 311.968032][ C0] ? __netif_receive_skb_core.constprop.0+0xd4d/0x3530 [ 311.968058][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 311.968073][ C0] ? lock_acquire+0x1d1/0x380 [ 311.968088][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 311.968109][ C0] nf_hook_slow+0xbf/0x220 [ 311.968132][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 311.968149][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 311.968167][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 311.968186][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 311.968204][ C0] ? ip_rcv_core+0x93c/0xe80