Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. 2026/03/05 09:16:02 parsed 1 programs [ 211.773544][ T28] audit: type=1400 audit(1772702162.104:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 211.795264][ T28] audit: type=1400 audit(1772702162.104:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 212.805449][ T28] audit: type=1400 audit(1772702163.134:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 212.808188][ T289] cgroup: Unknown subsys name 'net' [ 212.828084][ T28] audit: type=1400 audit(1772702163.134:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 212.855412][ T28] audit: type=1400 audit(1772702163.164:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 212.855852][ T289] cgroup: Unknown subsys name 'devices' [ 212.994155][ T289] cgroup: Unknown subsys name 'hugetlb' [ 212.999786][ T289] cgroup: Unknown subsys name 'rlimit' [ 213.120786][ T28] audit: type=1400 audit(1772702163.444:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.143978][ T28] audit: type=1400 audit(1772702163.444:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.164456][ T28] audit: type=1400 audit(1772702163.444:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.184798][ T28] audit: type=1400 audit(1772702163.444:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.205121][ T28] audit: type=1400 audit(1772702163.444:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 213.207593][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 213.295536][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 214.054138][ T300] request_module fs-gadgetfs succeeded, but still no fs? [ 214.472759][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.479961][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.502882][ T322] device bridge_slave_0 entered promiscuous mode [ 214.553611][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.560678][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.582139][ T322] device bridge_slave_1 entered promiscuous mode [ 214.734123][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.741194][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.748514][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.755566][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.780044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.788115][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.795881][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.823149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.831419][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.838481][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.845966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.854280][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.861318][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.868792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.876722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.889837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.900643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.908697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.916263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.925571][ T322] device veth0_vlan entered promiscuous mode 2026/03/05 09:16:05 executed programs: 0 [ 214.935406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.944840][ T322] device veth1_macvtap entered promiscuous mode [ 214.954239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.964116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.063851][ T322] syz-executor (322) used greatest stack depth: 21504 bytes left [ 215.125021][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.132968][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.142727][ T367] device bridge_slave_0 entered promiscuous mode [ 215.151878][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.159038][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.166465][ T367] device bridge_slave_1 entered promiscuous mode [ 215.303594][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.310647][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.318064][ T373] device bridge_slave_0 entered promiscuous mode [ 215.330449][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.337600][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.345338][ T375] device bridge_slave_0 entered promiscuous mode [ 215.355510][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.362679][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.370039][ T375] device bridge_slave_1 entered promiscuous mode [ 215.382378][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.389426][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.396841][ T373] device bridge_slave_1 entered promiscuous mode [ 215.465557][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.472847][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.480148][ T376] device bridge_slave_0 entered promiscuous mode [ 215.489861][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.496981][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.504513][ T376] device bridge_slave_1 entered promiscuous mode [ 215.523504][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.530571][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.538068][ T374] device bridge_slave_0 entered promiscuous mode [ 215.547743][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.554853][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.562588][ T374] device bridge_slave_1 entered promiscuous mode [ 215.584687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.592361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.639711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.648224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.656506][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.663585][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.671572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.723262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.731596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.740065][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.747141][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.761890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.814595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.861839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.888003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.924381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.933710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.941810][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.948855][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.956566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.964828][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.971967][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.979342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.987506][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.994550][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.001916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.010169][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.017222][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.024628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.032791][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.039807][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.047158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.055360][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.062404][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.069767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.077874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.085530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.093171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.120566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.129439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.138184][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.145245][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.152956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.161072][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.168142][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.175524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.183699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.191902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.199870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.207852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.215832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.242929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.251464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.261927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.269927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.278245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.286460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.294648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.302238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.309674][ T367] device veth0_vlan entered promiscuous mode [ 216.327504][ T375] device veth0_vlan entered promiscuous mode [ 216.337344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.345747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.354284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.362711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.370774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.379255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.387735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.396240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.404340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.412462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.420458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.428814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.437329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.444801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.452500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.459891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.468746][ T373] device veth0_vlan entered promiscuous mode [ 216.488203][ T374] device veth0_vlan entered promiscuous mode [ 216.496829][ T367] device veth1_macvtap entered promiscuous mode [ 216.505893][ T375] device veth1_macvtap entered promiscuous mode [ 216.516298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.524275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.532441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.540544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.548780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.556654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.564862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.573041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.580584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.588845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.597040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.604530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.618857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.627411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.636950][ T373] device veth1_macvtap entered promiscuous mode [ 216.654782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.662653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.670879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.679422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.688046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.696473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.705394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.713861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.722215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.737079][ T376] device veth0_vlan entered promiscuous mode [ 216.750036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.758391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.766725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.775360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.783530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.791686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.800077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.807736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.826272][ T374] device veth1_macvtap entered promiscuous mode [ 216.849212][ T376] device veth1_macvtap entered promiscuous mode [ 216.855942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.865497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.874112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.882754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.891060][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.899547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.907950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.916388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.924665][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.933014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.932001][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 316.938638][ C1] rcu: 1-....: (9999 ticks this GP) idle=d724/1/0x4000000000000000 softirq=3124/3124 fqs=4480 [ 316.948971][ C1] (t=10000 jiffies g=1597 q=682 ncpus=2) [ 316.954708][ C1] CPU: 1 PID: 427 Comm: syz.4.21 Not tainted syzkaller #0 [ 316.961818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.971868][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x90 [ 316.978644][ C1] Code: 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 48 89 e5 <48> 8b 45 08 65 48 8b 15 90 fc 90 7e 65 8b 0d 91 fc 90 7e 81 e1 00 [ 316.998250][ C1] RSP: 0018:ffffc90000e76e38 EFLAGS: 00000246 [ 317.004304][ C1] RAX: 0000000000000000 RBX: 00000000ffff0000 RCX: 0000000000000000 [ 317.012262][ C1] RDX: ffff888111a83cc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.020219][ C1] RBP: ffffc90000e76e38 R08: ffff888111a83cc0 R09: 0000000000000002 [ 317.028197][ C1] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000050 [ 317.036153][ C1] R13: dffffc0000000000 R14: ffff888132a33000 R15: ffff888113b9e000 [ 317.044124][ C1] FS: 00007fc76d1286c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 317.053057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.059625][ C1] CR2: 00007fcb2748aff8 CR3: 000000010d798000 CR4: 00000000003506a0 [ 317.067586][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.075583][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.083547][ C1] Call Trace: [ 317.086831][ C1] [ 317.089770][ C1] qdisc_lookup_rcu+0xbd/0x4e0 [ 317.094534][ C1] qdisc_tree_reduce_backlog+0x111/0x360 [ 317.100167][ C1] fq_change+0xc4c/0x1240 [ 317.104489][ C1] ? ref_tracker_alloc+0x349/0x4a0 [ 317.109592][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 317.115049][ C1] ? qdisc_alloc+0x588/0x780 [ 317.119630][ C1] ? qdisc_create+0x17d/0x1180 [ 317.124389][ C1] ? tc_modify_qdisc+0x900/0x19d0 [ 317.129394][ C1] ? __cfi_fq_change+0x10/0x10 [ 317.134161][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 317.139090][ C1] fq_init+0x3e3/0x5d0 [ 317.143147][ C1] ? __cfi_fq_init+0x10/0x10 [ 317.147725][ C1] qdisc_create+0x895/0x1180 [ 317.152302][ C1] ? qdisc_notify+0x360/0x360 [ 317.156963][ C1] ? qdisc_lookup+0x3a3/0x4e0 [ 317.161632][ C1] tc_modify_qdisc+0x900/0x19d0 [ 317.166472][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 317.171753][ C1] ? __mutex_lock_slowpath+0xe/0x10 [ 317.176957][ C1] ? mutex_lock+0x10a/0x1b0 [ 317.181447][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 317.186296][ C1] ? ns_capable+0x8c/0xf0 [ 317.190619][ C1] ? netlink_net_capable+0x125/0x160 [ 317.195893][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 317.201177][ C1] rtnetlink_rcv_msg+0xb3b/0xe00 [ 317.206109][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 317.211557][ C1] ? kernel_text_address+0xa0/0xd0 [ 317.216658][ C1] ? __kernel_text_address+0xd/0x30 [ 317.221853][ C1] ? avc_has_perm_noaudit+0x391/0x490 [ 317.227223][ C1] ? memcpy+0x56/0x70 [ 317.231222][ C1] ? avc_has_perm_noaudit+0x30b/0x490 [ 317.236676][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 317.242652][ C1] ? slab_post_alloc_hook+0x4f/0x2d0 [ 317.247932][ C1] ? avc_has_perm+0x163/0x250 [ 317.252602][ C1] ? __alloc_skb+0x236/0x4b0 [ 317.257184][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 317.262105][ C1] ? ____sys_sendmsg+0x5cc/0x990 [ 317.267035][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 317.272051][ C1] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 317.277431][ C1] netlink_rcv_skb+0x20f/0x460 [ 317.282184][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 317.287633][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 317.292907][ C1] ? __netlink_lookup+0x387/0x3b0 [ 317.297921][ C1] rtnetlink_rcv+0x1c/0x20 [ 317.302328][ C1] netlink_unicast+0x8ab/0xa30 [ 317.307086][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 317.311841][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 317.317117][ C1] ? __kasan_check_read+0x11/0x20 [ 317.322127][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 317.327591][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 317.332866][ C1] ____sys_sendmsg+0x5cc/0x990 [ 317.337624][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 317.342726][ C1] ? import_iovec+0x7c/0xb0 [ 317.347232][ C1] ___sys_sendmsg+0x2a2/0x360 [ 317.351900][ C1] ? __sys_sendmsg+0x290/0x290 [ 317.356683][ C1] ? __fdget+0x19c/0x220 [ 317.360910][ C1] __x64_sys_sendmsg+0x205/0x2d0 [ 317.365852][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 317.371304][ C1] ? __kasan_check_write+0x14/0x20 [ 317.376404][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 317.382029][ C1] ? switch_fpu_return+0xe/0x10 [ 317.386869][ C1] x64_sys_call+0x171/0x9a0 [ 317.391360][ C1] do_syscall_64+0x4c/0xa0 [ 317.395782][ C1] ? clear_bhb_loop+0x30/0x80 [ 317.400444][ C1] ? clear_bhb_loop+0x30/0x80 [ 317.405104][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.410994][ C1] RIP: 0033:0x7fc76c19c799 [ 317.415425][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.435017][ C1] RSP: 002b:00007fc76d128028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.443412][ C1] RAX: ffffffffffffffda RBX: 00007fc76c416090 RCX: 00007fc76c19c799 [ 317.451371][ C1] RDX: 0000000000000010 RSI: 0000200000001200 RDI: 0000000000000006 [ 317.459327][ C1] RBP: 00007fc76c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 317.467298][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.475342][ C1] R13: 00007fc76c416128 R14: 00007fc76c416090 R15: 00007fffc6c8b3d8 [ 317.483309][ C1] [ 355.822027][ T29] INFO: task kworker/u4:0:8 blocked for more than 122 seconds. [ 355.829630][ T29] Not tainted syzkaller #0 [ 355.834898][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.843717][ T29] task:kworker/u4:0 state:D stack:24128 pid:8 ppid:2 flags:0x00004000 [ 355.853038][ T29] Workqueue: events_unbound linkwatch_event [ 355.858954][ T29] Call Trace: [ 355.862395][ T29] [ 355.865347][ T29] __schedule+0xba6/0x1500 [ 355.869786][ T29] ? release_firmware_map_entry+0x190/0x190 [ 355.875871][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 355.881005][ T29] ? __kasan_check_write+0x14/0x20 [ 355.886284][ T29] ? kthread_data+0x50/0xc0 [ 355.890803][ T29] ? wq_worker_sleeping+0x64/0x280 [ 355.896304][ T29] schedule+0xbd/0x170 [ 355.900397][ T29] schedule_preempt_disabled+0x13/0x20 [ 355.906140][ T29] __mutex_lock+0x82f/0x1790 [ 355.910749][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 355.917652][ T29] ? __kasan_check_write+0x14/0x20 [ 355.922925][ T29] ? __switch_to+0x517/0xe60 [ 355.927538][ T29] ? __cfi___switch_to+0x10/0x10 [ 355.932634][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 355.937514][ T29] __mutex_lock_slowpath+0xe/0x10 [ 355.942711][ T29] mutex_lock+0x10a/0x1b0 [ 355.947059][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 355.952107][ T29] ? __schedule+0xbae/0x1500 [ 355.956823][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 355.962577][ T29] rtnl_lock+0x15/0x20 [ 355.966668][ T29] linkwatch_event+0xe/0x60 [ 355.971236][ T29] process_one_work+0x71f/0xc40 [ 355.976316][ T29] worker_thread+0xa29/0x11e0 [ 355.981074][ T29] kthread+0x281/0x320 [ 355.986377][ T29] ? __cfi_worker_thread+0x10/0x10 [ 355.991516][ T29] ? __cfi_kthread+0x10/0x10 [ 355.996248][ T29] ret_from_fork+0x1f/0x30 [ 356.000791][ T29] [ 356.003977][ T29] INFO: task kworker/u4:1:10 blocked for more than 123 seconds. [ 356.011616][ T29] Not tainted syzkaller #0 [ 356.016706][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.025508][ T29] task:kworker/u4:1 state:D stack:24864 pid:10 ppid:2 flags:0x00004000 [ 356.034820][ T29] Workqueue: netns cleanup_net [ 356.039601][ T29] Call Trace: [ 356.043137][ T29] [ 356.046088][ T29] __schedule+0xba6/0x1500 [ 356.050540][ T29] ? release_firmware_map_entry+0x190/0x190 [ 356.056677][ T29] ? kthread_data+0x50/0xc0 [ 356.061199][ T29] ? wq_worker_sleeping+0x64/0x280 [ 356.066490][ T29] schedule+0xbd/0x170 [ 356.070602][ T29] schedule_timeout+0xba/0x340 [ 356.075501][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 356.080887][ T29] ? rcu_barrier_handler+0x95/0xe0 [ 356.086185][ T29] ? generic_exec_single+0x24e/0x3b0 [ 356.091492][ T29] wait_for_common+0x365/0x640 [ 356.096414][ T29] ? wait_for_completion+0x20/0x20 [ 356.101551][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 356.107180][ T29] ? _find_next_bit+0x129/0x130 [ 356.112166][ T29] wait_for_completion+0x18/0x20 [ 356.117174][ T29] rcu_barrier+0x485/0x600 [ 356.121619][ T29] netdev_run_todo+0x114/0xc30 [ 356.126596][ T29] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 356.132858][ T29] ? __cfi_netdev_run_todo+0x10/0x10 [ 356.138176][ T29] ? unregister_netdevice_queue+0x1aa/0x370 [ 356.144353][ T29] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 356.150630][ T29] rtnl_unlock+0xe/0x10 [ 356.154964][ T29] xfrmi_exit_batch_net+0x272/0x2c0 [ 356.160199][ T29] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 356.166105][ T29] ? __cfi_xfrmi_exit_batch_net+0x10/0x10 [ 356.171852][ T29] cleanup_net+0x635/0xb10 [ 356.176403][ T29] ? __cfi_cleanup_net+0x10/0x10 [ 356.181357][ T29] process_one_work+0x71f/0xc40 [ 356.186355][ T29] worker_thread+0xa29/0x11e0 [ 356.191052][ T29] ? __kthread_parkme+0x142/0x180 [ 356.196209][ T29] kthread+0x281/0x320 [ 356.200291][ T29] ? __cfi_worker_thread+0x10/0x10 [ 356.205784][ T29] ? __cfi_kthread+0x10/0x10 [ 356.210404][ T29] ret_from_fork+0x1f/0x30 [ 356.214978][ T29] [ 356.218019][ T29] INFO: task kworker/0:1:19 blocked for more than 123 seconds. [ 356.225734][ T29] Not tainted syzkaller #0 [ 356.230678][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.239514][ T29] task:kworker/0:1 state:D stack:23904 pid:19 ppid:2 flags:0x00004000 [ 356.248873][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 356.254995][ T29] Call Trace: [ 356.258284][ T29] [ 356.261229][ T29] __schedule+0xba6/0x1500 [ 356.265857][ T29] ? release_firmware_map_entry+0x190/0x190 [ 356.271784][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 356.277135][ T29] ? __kasan_check_write+0x14/0x20 [ 356.282396][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 356.287658][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 356.293006][ T29] schedule+0xbd/0x170 [ 356.297113][ T29] schedule_preempt_disabled+0x13/0x20 [ 356.302770][ T29] __mutex_lock+0x82f/0x1790 [ 356.307380][ T29] ? __kasan_check_write+0x14/0x20 [ 356.312651][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 356.319436][ T29] ? mutex_unlock+0xe4/0x230 [ 356.324258][ T29] ? __cfi_mutex_unlock+0x10/0x10 [ 356.329299][ T29] ? add_timer+0x68/0x80 [ 356.333772][ T29] ? __queue_delayed_work+0x173/0x200 [ 356.339184][ T29] ? __rtnl_unlock+0xae/0xc0 [ 356.343934][ T29] ? netdev_run_todo+0xbc4/0xc30 [ 356.348900][ T29] __mutex_lock_slowpath+0xe/0x10 [ 356.354167][ T29] mutex_lock+0x10a/0x1b0 [ 356.358518][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 356.363566][ T29] ? addrconf_dad_completed+0xe80/0xe80 [ 356.369161][ T29] rtnl_lock+0x15/0x20 [ 356.373383][ T29] addrconf_dad_work+0xca/0x14d0 [ 356.378361][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 356.384023][ T29] ? __kasan_check_write+0x14/0x20 [ 356.389158][ T29] ? pwq_activate_inactive_work+0x301/0x410 [ 356.395248][ T29] process_one_work+0x71f/0xc40 [ 356.400121][ T29] worker_thread+0xa29/0x11e0 [ 356.404995][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 356.410485][ T29] kthread+0x281/0x320 [ 356.414689][ T29] ? __cfi_worker_thread+0x10/0x10 [ 356.419840][ T29] ? __cfi_kthread+0x10/0x10 [ 356.424729][ T29] ret_from_fork+0x1f/0x30 [ 356.429178][ T29] [ 356.432349][ T29] INFO: task kworker/1:1:39 blocked for more than 123 seconds. [ 356.439926][ T29] Not tainted syzkaller #0 [ 356.444996][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.453763][ T29] task:kworker/1:1 state:D stack:25600 pid:39 ppid:2 flags:0x00004000 [ 356.463139][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 356.469164][ T29] Call Trace: [ 356.472613][ T29] [ 356.475571][ T29] __schedule+0xba6/0x1500 [ 356.480013][ T29] ? release_firmware_map_entry+0x190/0x190 [ 356.486130][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 356.491350][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 356.496721][ T29] schedule+0xbd/0x170 [ 356.500816][ T29] schedule_preempt_disabled+0x13/0x20 [ 356.506545][ T29] __mutex_lock+0x82f/0x1790 [ 356.511180][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 356.518100][ T29] ? ip6_output+0x1fa/0x410 [ 356.522827][ T29] ? __cfi_ip6_output+0x10/0x10 [ 356.527717][ T29] ? __cfi_ip6_finish_output+0x10/0x10 [ 356.533339][ T29] ? mld_sendpack+0x9c1/0xe90 [ 356.538043][ T29] __mutex_lock_slowpath+0xe/0x10 [ 356.543297][ T29] mutex_lock+0x10a/0x1b0 [ 356.547651][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 356.552659][ T29] ? add_grec+0x11d0/0x11d0 [ 356.557202][ T29] rtnl_lock+0x15/0x20 [ 356.561295][ T29] addrconf_dad_work+0xca/0x14d0 [ 356.566478][ T29] ? __kasan_check_write+0x14/0x20 [ 356.571606][ T29] ? mutex_unlock+0x8f/0x230 [ 356.576368][ T29] ? __cfi_mutex_unlock+0x10/0x10 [ 356.581410][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 356.587030][ T29] ? __kasan_check_write+0x14/0x20 [ 356.592248][ T29] ? pwq_activate_inactive_work+0x301/0x410 [ 356.598169][ T29] process_one_work+0x71f/0xc40 [ 356.603226][ T29] worker_thread+0xa29/0x11e0 [ 356.607919][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 356.613523][ T29] kthread+0x281/0x320 [ 356.617615][ T29] ? __cfi_worker_thread+0x10/0x10 [ 356.622876][ T29] ? __cfi_kthread+0x10/0x10 [ 356.627484][ T29] ret_from_fork+0x1f/0x30 [ 356.631914][ T29] [ 356.635179][ T29] INFO: task syz-executor:373 blocked for more than 123 seconds. [ 356.643023][ T29] Not tainted syzkaller #0 [ 356.647965][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.656758][ T29] task:syz-executor state:D stack:22016 pid:373 ppid:1 flags:0x00004004 [ 356.666187][ T29] Call Trace: [ 356.669481][ T29] [ 356.672588][ T29] __schedule+0xba6/0x1500 [ 356.677040][ T29] ? release_firmware_map_entry+0x190/0x190 [ 356.683092][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 356.688219][ T29] ? __kasan_check_write+0x14/0x20 [ 356.693455][ T29] ? trace_contention_begin+0xa0/0xa0 [ 356.698850][ T29] schedule+0xbd/0x170 [ 356.703059][ T29] schedule_preempt_disabled+0x13/0x20 [ 356.708534][ T29] __mutex_lock+0x82f/0x1790 [ 356.713290][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 356.720081][ T29] ? selinux_capable+0x2b6/0x3b0 [ 356.725218][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 356.730540][ T29] ? is_bpf_text_address+0x177/0x190 [ 356.735974][ T29] ? cap_capable+0x1aa/0x230 [ 356.740590][ T29] __mutex_lock_slowpath+0xe/0x10 [ 356.745766][ T29] mutex_lock+0x10a/0x1b0 [ 356.750107][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 356.755125][ T29] ? ns_capable+0x8c/0xf0 [ 356.759472][ T29] ? netlink_net_capable+0x125/0x160 [ 356.764912][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 356.769906][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 356.775510][ T29] ? kernel_text_address+0xa0/0xd0 [ 356.780639][ T29] ? __kernel_text_address+0xd/0x30 [ 356.786012][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 356.791412][ T29] ? memcpy+0x56/0x70 [ 356.795547][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 356.800952][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 356.806832][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 356.812328][ T29] ? avc_has_perm+0x163/0x250 [ 356.817039][ T29] ? __alloc_skb+0x236/0x4b0 [ 356.821638][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 356.826807][ T29] ? __sys_sendto+0x4ac/0x660 [ 356.831508][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 356.836742][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 356.842259][ T29] netlink_rcv_skb+0x20f/0x460 [ 356.847057][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 356.852752][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 356.858079][ T29] ? __netlink_lookup+0x387/0x3b0 [ 356.863327][ T29] rtnetlink_rcv+0x1c/0x20 [ 356.867774][ T29] netlink_unicast+0x8ab/0xa30 [ 356.872699][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 356.877484][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 356.882979][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 356.888468][ T29] __sys_sendto+0x4ac/0x660 [ 356.893223][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 356.898305][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 356.904586][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 356.911117][ T29] ? fput+0x15b/0x1a0 [ 356.915273][ T29] __x64_sys_sendto+0xe5/0x100 [ 356.920057][ T29] x64_sys_call+0x83/0x9a0 [ 356.927557][ T29] do_syscall_64+0x4c/0xa0 [ 356.932100][ T29] ? clear_bhb_loop+0x30/0x80 [ 356.936800][ T29] ? clear_bhb_loop+0x30/0x80 [ 356.941509][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.947679][ T29] RIP: 0033:0x7f1102157917 [ 356.952204][ T29] RSP: 002b:00007ffc6af8ba20 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 356.960778][ T29] RAX: ffffffffffffffda RBX: 000055556ae2c500 RCX: 00007f1102157917 [ 356.968955][ T29] RDX: 0000000000000040 RSI: 00007f1102f44670 RDI: 0000000000000003 [ 356.977073][ T29] RBP: 0000000000000001 R08: 00007ffc6af8ba84 R09: 000000000000000c [ 356.985188][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 356.993288][ T29] R13: 0000000000000000 R14: 00007f1102f44670 R15: 0000000000000000 [ 357.001459][ T29] [ 357.004660][ T29] INFO: task syz-executor:374 blocked for more than 124 seconds. [ 357.013397][ T29] Not tainted syzkaller #0 [ 357.018366][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.028260][ T29] task:syz-executor state:D stack:22336 pid:374 ppid:1 flags:0x00004004 [ 357.037770][ T29] Call Trace: [ 357.041081][ T29] [ 357.044239][ T29] __schedule+0xba6/0x1500 [ 357.048690][ T29] ? __cfi_pick_next_task_fair+0x10/0x10 [ 357.054500][ T29] ? release_firmware_map_entry+0x190/0x190 [ 357.060419][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 357.065744][ T29] ? __kasan_check_write+0x14/0x20 [ 357.071059][ T29] ? trace_contention_begin+0xa0/0xa0 [ 357.076604][ T29] schedule+0xbd/0x170 [ 357.080694][ T29] schedule_preempt_disabled+0x13/0x20 [ 357.086339][ T29] __mutex_lock+0x82f/0x1790 [ 357.090943][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 357.097861][ T29] ? selinux_capable+0x2b6/0x3b0 [ 357.103113][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 357.108421][ T29] ? is_bpf_text_address+0x177/0x190 [ 357.113862][ T29] ? cap_capable+0x1aa/0x230 [ 357.118473][ T29] __mutex_lock_slowpath+0xe/0x10 [ 357.123662][ T29] mutex_lock+0x10a/0x1b0 [ 357.128013][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 357.133000][ T29] ? ns_capable+0x8c/0xf0 [ 357.137339][ T29] ? netlink_net_capable+0x125/0x160 [ 357.142773][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 357.147730][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 357.153420][ T29] ? kernel_text_address+0xa0/0xd0 [ 357.158569][ T29] ? __kernel_text_address+0xd/0x30 [ 357.164009][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 357.169411][ T29] ? memcpy+0x56/0x70 [ 357.173553][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 357.178958][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 357.184886][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 357.190227][ T29] ? avc_has_perm+0x163/0x250 [ 357.195063][ T29] ? __alloc_skb+0x236/0x4b0 [ 357.199666][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 357.204848][ T29] ? __sys_sendto+0x4ac/0x660 [ 357.209550][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 357.214724][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 357.220122][ T29] netlink_rcv_skb+0x20f/0x460 [ 357.225058][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 357.230541][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 357.236034][ T29] ? __netlink_lookup+0x387/0x3b0 [ 357.241113][ T29] rtnetlink_rcv+0x1c/0x20 [ 357.245720][ T29] netlink_unicast+0x8ab/0xa30 [ 357.250499][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 357.255422][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 357.260728][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 357.266443][ T29] __sys_sendto+0x4ac/0x660 [ 357.270967][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 357.276142][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 357.282358][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 357.287921][ T29] ? xfd_validate_state+0x70/0x150 [ 357.293317][ T29] ? __kasan_check_write+0x14/0x20 [ 357.298451][ T29] __x64_sys_sendto+0xe5/0x100 [ 357.303392][ T29] x64_sys_call+0x83/0x9a0 [ 357.307831][ T29] do_syscall_64+0x4c/0xa0 [ 357.312490][ T29] ? clear_bhb_loop+0x30/0x80 [ 357.317194][ T29] ? clear_bhb_loop+0x30/0x80 [ 357.321887][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.327986][ T29] RIP: 0033:0x7f0588357917 [ 357.332501][ T29] RSP: 002b:00007fffd2429700 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 357.340933][ T29] RAX: ffffffffffffffda RBX: 0000555574fc8500 RCX: 00007f0588357917 [ 357.349078][ T29] RDX: 0000000000000020 RSI: 00007f0589144670 RDI: 0000000000000003 [ 357.357152][ T29] RBP: 0000000000000001 R08: 00007fffd2429764 R09: 000000000000000c [ 357.365236][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 357.373312][ T29] R13: 0000000000000000 R14: 00007f0589144670 R15: 0000000000000000 [ 357.381306][ T29] [ 357.384499][ T29] INFO: task syz-executor:376 blocked for more than 124 seconds. [ 357.392325][ T29] Not tainted syzkaller #0 [ 357.397266][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.406092][ T29] task:syz-executor state:D stack:22272 pid:376 ppid:1 flags:0x00004004 [ 357.415428][ T29] Call Trace: [ 357.418730][ T29] [ 357.421680][ T29] __schedule+0xba6/0x1500 [ 357.426345][ T29] ? release_firmware_map_entry+0x190/0x190 [ 357.432353][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 357.437488][ T29] ? __kasan_check_write+0x14/0x20 [ 357.442752][ T29] ? trace_contention_begin+0xa0/0xa0 [ 357.448149][ T29] schedule+0xbd/0x170 [ 357.452404][ T29] schedule_preempt_disabled+0x13/0x20 [ 357.457890][ T29] __mutex_lock+0x82f/0x1790 [ 357.462737][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 357.469510][ T29] ? selinux_capable+0x2b6/0x3b0 [ 357.474611][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 357.479910][ T29] ? prep_compound_page+0x1cb/0x4a0 [ 357.485291][ T29] ? prep_new_page+0x3b/0x110 [ 357.490097][ T29] ? cap_capable+0x1aa/0x230 [ 357.494869][ T29] __mutex_lock_slowpath+0xe/0x10 [ 357.499910][ T29] mutex_lock+0x10a/0x1b0 [ 357.504435][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 357.509303][ T29] ? ns_capable+0x8c/0xf0 [ 357.513784][ T29] ? netlink_net_capable+0x125/0x160 [ 357.519113][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 357.524222][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 357.529710][ T29] ? kernel_text_address+0xa0/0xd0 [ 357.534971][ T29] ? __kernel_text_address+0xd/0x30 [ 357.540195][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 357.545725][ T29] ? memcpy+0x56/0x70 [ 357.549722][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 357.555246][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 357.560987][ T29] ? avc_has_perm+0x163/0x250 [ 357.565833][ T29] ? __alloc_skb+0x236/0x4b0 [ 357.570438][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 357.575534][ T29] ? __sys_sendto+0x4ac/0x660 [ 357.580233][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 357.585439][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 357.590837][ T29] netlink_rcv_skb+0x20f/0x460 [ 357.595767][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 357.601266][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 357.606719][ T29] ? __netlink_lookup+0x387/0x3b0 [ 357.611776][ T29] rtnetlink_rcv+0x1c/0x20 [ 357.616356][ T29] netlink_unicast+0x8ab/0xa30 [ 357.621140][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 357.626244][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 357.631564][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 357.637182][ T29] __sys_sendto+0x4ac/0x660 [ 357.641710][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 357.646935][ T29] ? blkcg_maybe_throttle_current+0x1e0/0xa20 [ 357.653109][ T29] ? __cfi_blkcg_maybe_throttle_current+0x10/0x10 [ 357.659542][ T29] ? fput+0x15b/0x1a0 [ 357.663662][ T29] __x64_sys_sendto+0xe5/0x100 [ 357.668452][ T29] x64_sys_call+0x83/0x9a0 [ 357.673014][ T29] do_syscall_64+0x4c/0xa0 [ 357.677448][ T29] ? clear_bhb_loop+0x30/0x80 [ 357.682271][ T29] ? clear_bhb_loop+0x30/0x80 [ 357.686963][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.693008][ T29] RIP: 0033:0x7f8e53d57917 [ 357.697430][ T29] RSP: 002b:00007fff343f0870 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 357.705994][ T29] RAX: ffffffffffffffda RBX: 0000555592d31500 RCX: 00007f8e53d57917 [ 357.714085][ T29] RDX: 0000000000000028 RSI: 00007f8e54b44670 RDI: 0000000000000003 [ 357.722168][ T29] RBP: 0000000000000001 R08: 00007fff343f08d4 R09: 000000000000000c [ 357.730153][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 357.738283][ T29] R13: 0000000000000000 R14: 00007f8e54b44670 R15: 0000000000000000 [ 357.746690][ T29] [ 357.749751][ T29] INFO: task syz.6.17:426 blocked for more than 124 seconds. [ 357.757245][ T29] Not tainted syzkaller #0 [ 357.762295][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.771050][ T29] task:syz.6.17 state:D stack:25520 pid:426 ppid:367 flags:0x00004004 [ 357.780539][ T29] Call Trace: [ 357.783943][ T29] [ 357.786887][ T29] __schedule+0xba6/0x1500 [ 357.791330][ T29] ? release_firmware_map_entry+0x190/0x190 [ 357.797427][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 357.802764][ T29] ? __kasan_check_write+0x14/0x20 [ 357.807890][ T29] ? trace_contention_begin+0xa0/0xa0 [ 357.813494][ T29] schedule+0xbd/0x170 [ 357.817590][ T29] schedule_preempt_disabled+0x13/0x20 [ 357.823203][ T29] __mutex_lock+0x82f/0x1790 [ 357.827815][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 357.834749][ T29] ? selinux_capable+0x2b6/0x3b0 [ 357.839706][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 357.845152][ T29] ? cap_capable+0x1aa/0x230 [ 357.849763][ T29] __mutex_lock_slowpath+0xe/0x10 [ 357.854918][ T29] mutex_lock+0x10a/0x1b0 [ 357.859262][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 357.864289][ T29] ? ns_capable+0x8c/0xf0 [ 357.868634][ T29] ? netlink_net_capable+0x125/0x160 [ 357.874104][ T29] rtnetlink_rcv_msg+0x9fc/0xe00 [ 357.879076][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 357.884706][ T29] ? kernel_text_address+0xa0/0xd0 [ 357.889841][ T29] ? __kernel_text_address+0xd/0x30 [ 357.895204][ T29] ? avc_has_perm_noaudit+0x391/0x490 [ 357.900597][ T29] ? memcpy+0x56/0x70 [ 357.904751][ T29] ? avc_has_perm_noaudit+0x30b/0x490 [ 357.910149][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 357.916046][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 357.921352][ T29] ? avc_has_perm+0x163/0x250 [ 357.926282][ T29] ? __alloc_skb+0x236/0x4b0 [ 357.930892][ T29] ? netlink_sendmsg+0x635/0xbd0 [ 357.935981][ T29] ? ____sys_sendmsg+0x5cc/0x990 [ 357.940934][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 357.946095][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 357.951494][ T29] netlink_rcv_skb+0x20f/0x460 [ 357.956500][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 357.962086][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 357.967416][ T29] ? __netlink_lookup+0x387/0x3b0 [ 357.972577][ T29] rtnetlink_rcv+0x1c/0x20 [ 357.977031][ T29] netlink_unicast+0x8ab/0xa30 [ 357.981806][ T29] netlink_sendmsg+0x8b9/0xbd0 [ 357.986796][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 357.992179][ T29] ? __switch_to_asm+0x3a/0x60 [ 357.996967][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 358.002684][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 358.008009][ T29] ____sys_sendmsg+0x5cc/0x990 [ 358.012947][ T29] ? __sys_sendmsg_sock+0x40/0x40 [ 358.018000][ T29] ? import_iovec+0x7c/0xb0 [ 358.022682][ T29] ___sys_sendmsg+0x2a2/0x360 [ 358.027391][ T29] ? __sys_sendmsg+0x290/0x290 [ 358.032326][ T29] ? __fdget+0x19c/0x220 [ 358.036585][ T29] __x64_sys_sendmsg+0x205/0x2d0 [ 358.041544][ T29] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 358.047250][ T29] ? __kasan_check_write+0x14/0x20 [ 358.052479][ T29] ? fpregs_restore_userregs+0x128/0x260 [ 358.058138][ T29] ? switch_fpu_return+0xe/0x10 [ 358.064278][ T29] x64_sys_call+0x171/0x9a0 [ 358.068803][ T29] do_syscall_64+0x4c/0xa0 [ 358.073376][ T29] ? clear_bhb_loop+0x30/0x80 [ 358.078065][ T29] ? clear_bhb_loop+0x30/0x80 [ 358.082990][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.088913][ T29] RIP: 0033:0x7fcb2659c799 [ 358.093475][ T29] RSP: 002b:00007fcb274ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.101905][ T29] RAX: ffffffffffffffda RBX: 00007fcb26815fa0 RCX: 00007fcb2659c799 [ 358.110048][ T29] RDX: 0000000000000010 RSI: 0000200000001200 RDI: 0000000000000006 [ 358.118179][ T29] RBP: 00007fcb26632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 358.126270][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.134392][ T29] R13: 00007fcb26816038 R14: 00007fcb26815fa0 R15: 00007ffed86516b8 [ 358.142577][ T29] [ 358.145610][ T29] INFO: task syz-executor:429 blocked for more than 125 seconds. [ 358.153572][ T29] Not tainted syzkaller #0 [ 358.158518][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.167360][ T29] task:syz-executor state:D stack:25248 pid:429 ppid:289 flags:0x00004004 [ 358.176691][ T29] Call Trace: [ 358.179990][ T29] [ 358.183081][ T29] __schedule+0xba6/0x1500 [ 358.187548][ T29] ? release_firmware_map_entry+0x190/0x190 [ 358.193664][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 358.199492][ T29] ? __mod_timer+0x858/0xc00 [ 358.204262][ T29] schedule+0xbd/0x170 [ 358.208368][ T29] io_schedule+0x84/0xe0 [ 358.212786][ T29] bit_wait_io+0x13/0xd0 [ 358.217054][ T29] __wait_on_bit+0xb9/0x2d0 [ 358.221599][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 358.226746][ T29] out_of_line_wait_on_bit+0x135/0x190 [ 358.232414][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 358.237390][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 358.243530][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 358.249025][ T29] do_get_write_access+0x536/0xd70 [ 358.254306][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 358.260316][ T29] __ext4_journal_get_write_access+0x235/0x6c0 [ 358.266649][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 358.273449][ T29] __ext4_new_inode+0x118b/0x36d0 [ 358.278503][ T29] ? __cfi___ext4_new_inode+0x10/0x10 [ 358.284044][ T29] ? dquot_initialize+0x20/0x20 [ 358.288913][ T29] ? may_create+0x612/0x810 [ 358.293549][ T29] ext4_mkdir+0x43f/0xce0 [ 358.297900][ T29] ? __cfi_ext4_mkdir+0x10/0x10 [ 358.302925][ T29] ? selinux_inode_mkdir+0x22/0x30 [ 358.308056][ T29] ? security_inode_mkdir+0xd2/0x120 [ 358.313508][ T29] vfs_mkdir+0x39c/0x580 [ 358.317775][ T29] do_mkdirat+0x171/0x4c0 [ 358.322305][ T29] __x64_sys_mkdir+0x6e/0x80 [ 358.326924][ T29] x64_sys_call+0x966/0x9a0 [ 358.331445][ T29] do_syscall_64+0x4c/0xa0 [ 358.336051][ T29] ? clear_bhb_loop+0x30/0x80 [ 358.340745][ T29] ? clear_bhb_loop+0x30/0x80 [ 358.345593][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.351513][ T29] RIP: 0033:0x7fd9bc5c9b67 [ 358.356066][ T29] RSP: 002b:00007fff8f3c8118 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 358.364615][ T29] RAX: ffffffffffffffda RBX: 00007fff8f3c8242 RCX: 00007fd9bc5c9b67 [ 358.372793][ T29] RDX: 000000000258bbad RSI: 00000000000001c0 RDI: 00007fff8f3c8230 [ 358.380783][ T29] RBP: 8421084210842109 R08: 0000000000000000 R09: 0000000000000000 [ 358.388989][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000258bbad [ 358.397161][ T29] R13: 00007fff8f3c8242 R14: 0000000000000004 R15: 00007fd9bc6585a0 [ 358.405290][ T29] [ 358.408342][ T29] INFO: task syz-executor:430 blocked for more than 125 seconds. [ 358.416182][ T29] Not tainted syzkaller #0 [ 358.421123][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.429921][ T29] task:syz-executor state:D stack:25248 pid:430 ppid:289 flags:0x00004000 [ 358.439367][ T29] Call Trace: [ 358.442778][ T29] [ 358.445723][ T29] __schedule+0xba6/0x1500 [ 358.450175][ T29] ? release_firmware_map_entry+0x190/0x190 [ 358.456247][ T29] ? __kasan_check_read+0x11/0x20 [ 358.461280][ T29] ? folio_mark_accessed+0x1c7/0x4d0 [ 358.466822][ T29] ? __cfi_folio_mark_accessed+0x10/0x10 [ 358.472578][ T29] schedule+0xbd/0x170 [ 358.476689][ T29] io_schedule+0x84/0xe0 [ 358.480956][ T29] bit_wait_io+0x13/0xd0 [ 358.485433][ T29] __wait_on_bit+0xb9/0x2d0 [ 358.489958][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 358.495065][ T29] out_of_line_wait_on_bit+0x135/0x190 [ 358.500550][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 358.505686][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 358.511693][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 358.517308][ T29] ? __getblk_gfp+0x3b/0x7d0 [ 358.521921][ T29] do_get_write_access+0x536/0xd70 [ 358.527246][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 358.533389][ T29] __ext4_journal_get_write_access+0x235/0x6c0 [ 358.539584][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 358.546601][ T29] ? slab_post_alloc_hook+0x6d/0x2d0 [ 358.551924][ T29] ? jbd2__journal_start+0x13d/0x6e0 [ 358.557438][ T29] ext4_reserve_inode_write+0x1f2/0x2e0 [ 358.563135][ T29] __ext4_mark_inode_dirty+0xb2/0x600 [ 358.568530][ T29] ext4_dirty_inode+0xbd/0x100 [ 358.573469][ T29] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 358.578868][ T29] __mark_inode_dirty+0x203/0x9d0 [ 358.584073][ T29] ? ext4_setattr+0x5bf/0x1a60 [ 358.588861][ T29] ext4_setattr+0xa65/0x1a60 [ 358.593650][ T29] ? current_time+0x196/0x2b0 [ 358.598362][ T29] ? __cfi_ext4_setattr+0x10/0x10 [ 358.603572][ T29] notify_change+0xcc3/0xf80 [ 358.608191][ T29] chmod_common+0x223/0x3c0 [ 358.612908][ T29] ? __cfi_chmod_common+0x10/0x10 [ 358.617975][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 358.623696][ T29] ? user_path_at_empty+0x161/0x1c0 [ 358.628912][ T29] do_fchmodat+0xd4/0x1a0 [ 358.633449][ T29] ? do_faccessat+0xa20/0xa20 [ 358.638162][ T29] ? fpregs_restore_userregs+0x128/0x260 [ 358.643996][ T29] __x64_sys_chmod+0x60/0x70 [ 358.648599][ T29] x64_sys_call+0x760/0x9a0 [ 358.653244][ T29] do_syscall_64+0x4c/0xa0 [ 358.657699][ T29] ? clear_bhb_loop+0x30/0x80 [ 358.662556][ T29] ? clear_bhb_loop+0x30/0x80 [ 358.667247][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.673314][ T29] RIP: 0033:0x7f8c3c19ac07 [ 358.677756][ T29] RSP: 002b:00007ffff32ecb18 EFLAGS: 00000202 ORIG_RAX: 000000000000005a [ 358.686358][ T29] RAX: ffffffffffffffda RBX: 00007ffff32ecb70 RCX: 00007f8c3c19ac07 [ 358.694428][ T29] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffff32ecb70 [ 358.702623][ T29] RBP: 00007ffff32ecb70 R08: 0000000000000000 R09: 0000000000000000 [ 358.710609][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffff32ecb78 [ 358.718725][ T29] R13: 0000000000000002 R14: 00007ffff32ecd58 R15: 0000000000000000 [ 358.726827][ T29] [ 358.729864][ T29] NMI backtrace for cpu 0 [ 358.734199][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 358.741400][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.751490][ T29] Call Trace: [ 358.754775][ T29] [ 358.757715][ T29] __dump_stack+0x21/0x24 [ 358.762081][ T29] dump_stack_lvl+0x110/0x170 [ 358.766810][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 358.771867][ T29] dump_stack+0x15/0x24 [ 358.776050][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 358.781024][ T29] ? rcu_read_unlock_special+0xb2/0x440 [ 358.786584][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 358.792090][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 358.798203][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.804201][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.810194][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 358.816205][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 358.822120][ T29] watchdog+0xd68/0xeb0 [ 358.826296][ T29] ? __cfi_watchdog+0x10/0x10 [ 358.830987][ T29] ? __kasan_check_read+0x11/0x20 [ 358.836023][ T29] ? __kthread_parkme+0x142/0x180 [ 358.841066][ T29] kthread+0x281/0x320 [ 358.845161][ T29] ? __cfi_watchdog+0x10/0x10 [ 358.849851][ T29] ? __cfi_kthread+0x10/0x10 [ 358.854459][ T29] ret_from_fork+0x1f/0x30 [ 358.858895][ T29] [ 358.861988][ T29] Sending NMI from CPU 0 to CPUs 1: [ 358.867217][ C1] NMI backtrace for cpu 1 [ 358.867227][ C1] CPU: 1 PID: 427 Comm: syz.4.21 Not tainted syzkaller #0 [ 358.867243][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.867252][ C1] RIP: 0010:qdisc_lookup_rcu+0x18/0x4e0 [ 358.867282][ C1] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 6b 69 ab 39 55 48 89 e5 41 57 41 56 41 55 41 54 53 50 89 f3 49 89 fe e8 98 5c 68 fd <31> ff 89 de e8 af 60 68 fd 85 db 0f 84 dc 00 00 00 49 bd 00 00 00 [ 358.867296][ C1] RSP: 0018:ffffc90000e76e48 EFLAGS: 00000293 [ 358.867310][ C1] RAX: ffffffff84091068 RBX: 00000000ffff0000 RCX: ffff888111a83cc0 [ 358.867323][ C1] RDX: 0000000000000000 RSI: 00000000ffff0000 RDI: ffff888113b9e000 [ 358.867334][ C1] RBP: ffffc90000e76e78 R08: ffff888111a83cc0 R09: 0000000000000002 [ 358.867362][ C1] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000fffffff1 [ 358.867372][ C1] R13: ffff88811845d0c8 R14: ffff888113b9e000 R15: ffff88811845d040 [ 358.867384][ C1] FS: 00007fc76d1286c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 358.867397][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.867408][ C1] CR2: 00007fcb2748aff8 CR3: 000000010d798000 CR4: 00000000003506a0 [ 358.867422][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.867430][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.867440][ C1] Call Trace: [ 358.867445][ C1] [ 358.867451][ C1] qdisc_tree_reduce_backlog+0x111/0x360 [ 358.867468][ C1] fq_change+0xc4c/0x1240 [ 358.867488][ C1] ? ref_tracker_alloc+0x349/0x4a0 [ 358.867505][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 358.867521][ C1] ? qdisc_alloc+0x588/0x780 [ 358.867539][ C1] ? qdisc_create+0x17d/0x1180 [ 358.867554][ C1] ? tc_modify_qdisc+0x900/0x19d0 [ 358.867568][ C1] ? __cfi_fq_change+0x10/0x10 [ 358.867588][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 358.867609][ C1] fq_init+0x3e3/0x5d0 [ 358.867628][ C1] ? __cfi_fq_init+0x10/0x10 [ 358.867648][ C1] qdisc_create+0x895/0x1180 [ 358.867663][ C1] ? qdisc_notify+0x360/0x360 [ 358.867679][ C1] ? qdisc_lookup+0x3a3/0x4e0 [ 358.867720][ C1] tc_modify_qdisc+0x900/0x19d0 [ 358.867739][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 358.867758][ C1] ? __mutex_lock_slowpath+0xe/0x10 [ 358.867772][ C1] ? mutex_lock+0x10a/0x1b0 [ 358.867786][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 358.867810][ C1] ? ns_capable+0x8c/0xf0 [ 358.867824][ C1] ? netlink_net_capable+0x125/0x160 [ 358.867857][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 358.867872][ C1] rtnetlink_rcv_msg+0xb3b/0xe00 [ 358.867898][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 358.867922][ C1] ? kernel_text_address+0xa0/0xd0 [ 358.867943][ C1] ? __kernel_text_address+0xd/0x30 [ 358.867963][ C1] ? avc_has_perm_noaudit+0x391/0x490 [ 358.867987][ C1] ? memcpy+0x56/0x70 [ 358.868002][ C1] ? avc_has_perm_noaudit+0x30b/0x490 [ 358.868027][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 358.868051][ C1] ? slab_post_alloc_hook+0x4f/0x2d0 [ 358.868075][ C1] ? avc_has_perm+0x163/0x250 [ 358.868098][ C1] ? __alloc_skb+0x236/0x4b0 [ 358.868116][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 358.868134][ C1] ? ____sys_sendmsg+0x5cc/0x990 [ 358.868157][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 358.868181][ C1] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 358.868208][ C1] netlink_rcv_skb+0x20f/0x460 [ 358.868226][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 358.868251][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 358.868270][ C1] ? __netlink_lookup+0x387/0x3b0 [ 358.868290][ C1] rtnetlink_rcv+0x1c/0x20 [ 358.868313][ C1] netlink_unicast+0x8ab/0xa30 [ 358.868331][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 358.868358][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 358.868377][ C1] ? __kasan_check_read+0x11/0x20 [ 358.868393][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 358.868410][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 358.868428][ C1] ____sys_sendmsg+0x5cc/0x990 [ 358.868464][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 358.868486][ C1] ? import_iovec+0x7c/0xb0 [ 358.868508][ C1] ___sys_sendmsg+0x2a2/0x360 [ 358.868529][ C1] ? __sys_sendmsg+0x290/0x290 [ 358.868557][ C1] ? __fdget+0x19c/0x220 [ 358.868572][ C1] __x64_sys_sendmsg+0x205/0x2d0 [ 358.868593][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 358.868617][ C1] ? __kasan_check_write+0x14/0x20 [ 358.868631][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 358.868649][ C1] ? switch_fpu_return+0xe/0x10 [ 358.868667][ C1] x64_sys_call+0x171/0x9a0 [ 358.868684][ C1] do_syscall_64+0x4c/0xa0 [ 358.868704][ C1] ? clear_bhb_loop+0x30/0x80 [ 358.868720][ C1] ? clear_bhb_loop+0x30/0x80 [ 358.868753][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.868778][ C1] RIP: 0033:0x7fc76c19c799 [ 358.868791][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.868804][ C1] RSP: 002b:00007fc76d128028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.868819][ C1] RAX: ffffffffffffffda RBX: 00007fc76c416090 RCX: 00007fc76c19c799 [ 358.868831][ C1] RDX: 0000000000000010 RSI: 0000200000001200 RDI: 0000000000000006 [ 358.868841][ C1] RBP: 00007fc76c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 358.868851][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.868861][ C1] R13: 00007fc76c416128 R14: 00007fc76c416090 R15: 00007fffc6c8b3d8 [ 358.868886][ C1] [ 507.083314][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 287s! [syz.4.21:427] [ 507.091423][ C1] Modules linked in: [ 507.095320][ C1] CPU: 1 PID: 427 Comm: syz.4.21 Not tainted syzkaller #0 [ 507.102418][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.112479][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x10/0x90 [ 507.118817][ C1] Code: 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 48 89 e5 48 8b 45 08 65 48 8b 15 00 ff 90 7e <65> 8b 0d 01 ff 90 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 507.138413][ C1] RSP: 0018:ffffc90000e76e38 EFLAGS: 00000246 [ 507.144468][ C1] RAX: ffffffff84091355 RBX: 00000000ffff0000 RCX: 0000000000000000 [ 507.152430][ C1] RDX: ffff888111a83cc0 RSI: 00000000ffff0000 RDI: 00000000ffff0000 [ 507.160400][ C1] RBP: ffffc90000e76e38 R08: ffff888111a83cc0 R09: 0000000000000002 [ 507.168369][ C1] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888113b9e000 [ 507.176336][ C1] R13: dffffc0000000000 R14: ffff88811845d000 R15: 00000000ffff0000 [ 507.184303][ C1] FS: 00007fc76d1286c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 507.193229][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.199812][ C1] CR2: 00007fcb2748aff8 CR3: 000000010d798000 CR4: 00000000003506a0 [ 507.207802][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 507.215765][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 507.223723][ C1] Call Trace: [ 507.226994][ C1] [ 507.229915][ C1] qdisc_lookup_rcu+0x305/0x4e0 [ 507.234782][ C1] qdisc_tree_reduce_backlog+0x111/0x360 [ 507.240415][ C1] fq_change+0xc4c/0x1240 [ 507.244744][ C1] ? ref_tracker_alloc+0x349/0x4a0 [ 507.249863][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 507.255353][ C1] ? qdisc_alloc+0x588/0x780 [ 507.259941][ C1] ? qdisc_create+0x17d/0x1180 [ 507.264700][ C1] ? tc_modify_qdisc+0x900/0x19d0 [ 507.269715][ C1] ? __cfi_fq_change+0x10/0x10 [ 507.274490][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 507.279427][ C1] fq_init+0x3e3/0x5d0 [ 507.283494][ C1] ? __cfi_fq_init+0x10/0x10 [ 507.288084][ C1] qdisc_create+0x895/0x1180 [ 507.292667][ C1] ? qdisc_notify+0x360/0x360 [ 507.297355][ C1] ? qdisc_lookup+0x3a3/0x4e0 [ 507.302024][ C1] tc_modify_qdisc+0x900/0x19d0 [ 507.306864][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 507.312153][ C1] ? __mutex_lock_slowpath+0xe/0x10 [ 507.317343][ C1] ? mutex_lock+0x10a/0x1b0 [ 507.321828][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 507.326662][ C1] ? ns_capable+0x8c/0xf0 [ 507.330981][ C1] ? netlink_net_capable+0x125/0x160 [ 507.336256][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 507.341547][ C1] rtnetlink_rcv_msg+0xb3b/0xe00 [ 507.346482][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 507.351943][ C1] ? kernel_text_address+0xa0/0xd0 [ 507.357078][ C1] ? __kernel_text_address+0xd/0x30 [ 507.362272][ C1] ? avc_has_perm_noaudit+0x391/0x490 [ 507.367641][ C1] ? memcpy+0x56/0x70 [ 507.371616][ C1] ? avc_has_perm_noaudit+0x30b/0x490 [ 507.376986][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 507.382788][ C1] ? slab_post_alloc_hook+0x4f/0x2d0 [ 507.388066][ C1] ? avc_has_perm+0x163/0x250 [ 507.392736][ C1] ? __alloc_skb+0x236/0x4b0 [ 507.397312][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 507.402237][ C1] ? ____sys_sendmsg+0x5cc/0x990 [ 507.407169][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 507.412296][ C1] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 507.417670][ C1] netlink_rcv_skb+0x20f/0x460 [ 507.422430][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 507.427884][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 507.433179][ C1] ? __netlink_lookup+0x387/0x3b0 [ 507.438215][ C1] rtnetlink_rcv+0x1c/0x20 [ 507.442631][ C1] netlink_unicast+0x8ab/0xa30 [ 507.447383][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 507.452133][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 507.457410][ C1] ? __kasan_check_read+0x11/0x20 [ 507.462452][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 507.467901][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 507.473177][ C1] ____sys_sendmsg+0x5cc/0x990 [ 507.477962][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 507.482986][ C1] ? import_iovec+0x7c/0xb0 [ 507.487504][ C1] ___sys_sendmsg+0x2a2/0x360 [ 507.492184][ C1] ? __sys_sendmsg+0x290/0x290 [ 507.496951][ C1] ? __fdget+0x19c/0x220 [ 507.501180][ C1] __x64_sys_sendmsg+0x205/0x2d0 [ 507.506137][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 507.511595][ C1] ? __kasan_check_write+0x14/0x20 [ 507.516699][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 507.522332][ C1] ? switch_fpu_return+0xe/0x10 [ 507.527178][ C1] x64_sys_call+0x171/0x9a0 [ 507.531670][ C1] do_syscall_64+0x4c/0xa0 [ 507.536077][ C1] ? clear_bhb_loop+0x30/0x80 [ 507.540741][ C1] ? clear_bhb_loop+0x30/0x80 [ 507.545406][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.551293][ C1] RIP: 0033:0x7fc76c19c799 [ 507.555711][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.575330][ C1] RSP: 002b:00007fc76d128028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.583735][ C1] RAX: ffffffffffffffda RBX: 00007fc76c416090 RCX: 00007fc76c19c799 [ 507.591700][ C1] RDX: 0000000000000010 RSI: 0000200000001200 RDI: 0000000000000006 [ 507.599660][ C1] RBP: 00007fc76c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 507.607652][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.615631][ C1] R13: 00007fc76c416128 R14: 00007fc76c416090 R15: 00007fffc6c8b3d8 [ 507.623610][ C1] [ 507.626621][ C1] Sending NMI from CPU 1 to CPUs 0: [ 507.631826][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 [ 507.643007][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 507.643023][ T28] audit: type=1400 audit(1772702457.964:106): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 507.674242][ T28] audit: type=1400 audit(1772702457.964:107): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.695720][ T28] audit: type=1400 audit(1772702457.974:108): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.717118][ T28] audit: type=1400 audit(1772702457.974:109): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.737788][ T28] audit: type=1400 audit(1772702457.974:110): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.758371][ T28] audit: type=1400 audit(1772702457.974:111): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.781348][ T28] audit: type=1400 audit(1772702457.974:112): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1