Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. 2025/12/11 16:07:18 parsed 1 programs [ 260.377504][ T30] audit: type=1400 audit(1765469238.597:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 260.399527][ T30] audit: type=1400 audit(1765469238.597:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.416093][ T30] audit: type=1400 audit(1765469239.637:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 261.419369][ T290] cgroup: Unknown subsys name 'net' [ 261.442541][ T30] audit: type=1400 audit(1765469239.637:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.473486][ T30] audit: type=1400 audit(1765469239.677:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.473799][ T290] cgroup: Unknown subsys name 'devices' [ 261.590981][ T290] cgroup: Unknown subsys name 'hugetlb' [ 261.599189][ T290] cgroup: Unknown subsys name 'rlimit' [ 261.871989][ T30] audit: type=1400 audit(1765469240.097:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 261.900180][ T30] audit: type=1400 audit(1765469240.097:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.934262][ T30] audit: type=1400 audit(1765469240.097:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.942997][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 261.958346][ T30] audit: type=1400 audit(1765469240.097:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.991701][ T30] audit: type=1400 audit(1765469240.097:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 262.044512][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 262.536140][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 262.715562][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.727408][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.741938][ T303] device bridge_slave_0 entered promiscuous mode [ 262.751280][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.764426][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.776186][ T303] device bridge_slave_1 entered promiscuous mode [ 262.868420][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.880910][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.895261][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.907285][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.943345][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.953591][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.964665][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.974935][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.987075][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.996439][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.004118][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.013769][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.023130][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.031307][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.050475][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.061518][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.077835][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.093487][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.102042][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.111505][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.124238][ T303] device veth0_vlan entered promiscuous mode [ 263.138288][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.149743][ T303] device veth1_macvtap entered promiscuous mode [ 263.161814][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.177581][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.227983][ T303] syz-executor (303) used greatest stack depth: 21376 bytes left [ 263.799718][ T45] device bridge_slave_1 left promiscuous mode [ 263.807356][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.815857][ T45] device bridge_slave_0 left promiscuous mode [ 263.822912][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.832831][ T45] device veth1_macvtap left promiscuous mode [ 263.839059][ T45] device veth0_vlan left promiscuous mode 2025/12/11 16:07:22 executed programs: 0 [ 264.351330][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.359829][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.369240][ T362] device bridge_slave_0 entered promiscuous mode [ 264.378945][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.386404][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.394548][ T362] device bridge_slave_1 entered promiscuous mode [ 264.468879][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.476857][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.485602][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.493311][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.517451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.527151][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.541236][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.562888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.572803][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.581833][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.591059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.599810][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.607977][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.630683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.643209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.657589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.669810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.679524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.689999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.699747][ T362] device veth0_vlan entered promiscuous mode [ 264.717227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.726274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.738207][ T362] device veth1_macvtap entered promiscuous mode [ 264.748066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.756775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.765925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.784394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.793742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.827052][ T372] loop2: detected capacity change from 0 to 1024 [ 264.869448][ T372] ======================================================= [ 264.869448][ T372] WARNING: The mand mount option has been deprecated and [ 264.869448][ T372] and is ignored by this kernel. Remove the mand [ 264.869448][ T372] option from the mount to silence this warning. [ 264.869448][ T372] ======================================================= [ 264.955317][ T372] EXT4-fs (loop2): Ignoring removed oldalloc option [ 264.964735][ T372] EXT4-fs (loop2): Ignoring removed orlov option [ 264.991841][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 266.708634][ C1] sched: RT throttling activated [ 279.894371][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.902047][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.910030][ T377] device bridge_slave_0 entered promiscuous mode [ 279.917281][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.924748][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.932445][ T377] device bridge_slave_1 entered promiscuous mode [ 280.005848][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.015311][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.022691][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.031169][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.056732][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.064485][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.073052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.081099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.100474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.110078][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.117314][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.125595][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.135883][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.142996][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.150891][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.159759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.177088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.191169][ T377] device veth0_vlan entered promiscuous mode [ 280.198414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.207905][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.216325][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.232353][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.241666][ T377] device veth1_macvtap entered promiscuous mode 2025/12/11 16:07:38 executed programs: 3 [ 280.254932][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.271489][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.313517][ T388] loop3: detected capacity change from 0 to 1024 [ 280.371358][ T388] EXT4-fs (loop3): Ignoring removed oldalloc option [ 280.388921][ T388] EXT4-fs (loop3): Ignoring removed orlov option [ 280.401101][ T388] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 380.468571][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 380.476160][ C0] (detected by 0, t=10002 jiffies, g=2273, q=726) [ 380.483457][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4294975230-4294965228), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 380.499424][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g2273 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 380.511916][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 380.523365][ C0] rcu: RCU grace-period kthread stack dump: [ 380.529559][ C0] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 380.541173][ C0] Call Trace: [ 380.544969][ C0] [ 380.548211][ C0] __schedule+0xb6e/0x14c0 [ 380.553416][ C0] ? release_firmware_map_entry+0x190/0x190 [ 380.559832][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 380.566655][ C0] ? __mod_timer+0x7ae/0xb30 [ 380.572027][ C0] schedule+0x11e/0x1e0 [ 380.576342][ C0] schedule_timeout+0x12c/0x2e0 [ 380.581488][ C0] ? console_conditional_schedule+0x30/0x30 [ 380.587433][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 380.593481][ C0] ? update_process_times+0x200/0x200 [ 380.600313][ C0] ? prepare_to_swait_event+0x308/0x320 [ 380.607064][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 380.612143][ C0] ? debug_smp_processor_id+0x17/0x20 [ 380.618459][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 380.623889][ C0] ? rcu_gp_init+0xc00/0xc00 [ 380.628780][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 380.636236][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 380.641853][ C0] rcu_gp_kthread+0x98/0x330 [ 380.646608][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 380.654379][ C0] ? __kasan_check_read+0x11/0x20 [ 380.659885][ C0] ? __kthread_parkme+0xac/0x200 [ 380.665686][ C0] ? preempt_count_add+0x90/0x1b0 [ 380.671194][ C0] kthread+0x411/0x500 [ 380.675630][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 380.680805][ C0] ? kthread_blkcg+0xd0/0xd0 [ 380.685729][ C0] ret_from_fork+0x1f/0x30 [ 380.690291][ C0] [ 380.693588][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 380.701178][ C0] NMI backtrace for cpu 0 [ 380.706127][ C0] CPU: 0 PID: 388 Comm: syz.3.18 Not tainted syzkaller #0 [ 380.714259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.726227][ C0] Call Trace: [ 380.730027][ C0] [ 380.732889][ C0] __dump_stack+0x21/0x30 [ 380.738556][ C0] dump_stack_lvl+0xee/0x150 [ 380.743610][ C0] ? show_regs_print_info+0x20/0x20 [ 380.748869][ C0] dump_stack+0x15/0x20 [ 380.753212][ C0] nmi_cpu_backtrace+0x2b4/0x2c0 [ 380.759056][ C0] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 380.765571][ C0] ? load_image+0x3a0/0x3a0 [ 380.770138][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 380.776672][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 380.782973][ C0] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 380.789582][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 380.796039][ C0] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 380.802630][ C0] print_other_cpu_stall+0xded/0xfd0 [ 380.808454][ C0] ? print_cpu_stall+0x600/0x600 [ 380.813494][ C0] ? tick_nohz_handler+0x300/0x300 [ 380.818933][ C0] ? accumulate_nsecs_to_secs+0xb1/0x230 [ 380.825104][ C0] ? cgroup_rstat_updated+0xf5/0x370 [ 380.830509][ C0] rcu_sched_clock_irq+0x8a3/0x12b0 [ 380.836392][ C0] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 380.842856][ C0] ? hrtimer_run_queues+0x166/0x430 [ 380.849218][ C0] update_process_times+0x198/0x200 [ 380.857632][ C0] tick_sched_timer+0x17c/0x240 [ 380.863402][ C0] ? tick_setup_sched_timer+0x450/0x450 [ 380.871668][ C0] __hrtimer_run_queues+0x3b5/0x9e0 [ 380.881681][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 380.888026][ C0] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 380.899579][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 380.904938][ C0] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 380.914145][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 380.922388][ C0] [ 380.925737][ C0] [ 380.930211][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 380.937790][ C0] RIP: 0010:preempt_count_add+0xce/0x1b0 [ 380.944869][ C0] Code: 85 c0 74 0b 48 8b 45 00 48 8b 00 48 8b 58 08 65 4c 8b 35 65 5e bb 7e 49 81 c6 b0 0a 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 18 32 60 00 49 89 1e 5b 41 5e 41 5f 5d c3 89 fb [ 380.968875][ C0] RSP: 0018:ffffc900034f7178 EFLAGS: 00000246 [ 380.976434][ C0] RAX: 1ffff110225ad3ce RBX: ffffffff81d891a9 RCX: ffffffff870c6f00 [ 380.990157][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff81d891a9 [ 380.999231][ C0] RBP: ffffc900034f7190 R08: dffffc0000000000 R09: ffffed1021a02ef4 [ 381.008304][ C0] R10: ffffed1021a02ef4 R11: 1ffff11021a02ef3 R12: dffffc0000000000 [ 381.019227][ C0] R13: dffffc0000000000 R14: ffff888112d69e70 R15: dffffc0000000000 [ 381.028230][ C0] ? ext4_mark_iloc_dirty+0x2a9/0x3f50 [ 381.035821][ C0] ? ext4_mark_iloc_dirty+0x2a9/0x3f50 [ 381.042654][ C0] ? preempt_count_add+0xa4/0x1b0 [ 381.048584][ C0] _raw_spin_lock+0x6c/0xe0 [ 381.053639][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 381.059242][ C0] ext4_mark_iloc_dirty+0x2a9/0x3f50 [ 381.067128][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 381.074712][ C0] ? ext4_reserve_inode_write+0x281/0x320 [ 381.082843][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 381.088622][ C0] ? ext4_journal_check_start+0x172/0x240 [ 381.096955][ C0] ext4_dirty_inode+0xbd/0x100 [ 381.103280][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 381.109390][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 381.115540][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 381.122163][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 381.128760][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 381.134273][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 381.141372][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 381.148759][ C0] ? selinux_inode_free_security+0x210/0x210 [ 381.156669][ C0] ext4_initxattrs+0xa6/0x110 [ 381.163298][ C0] security_inode_init_security+0x254/0x370 [ 381.169365][ C0] ? posix_acl_create+0x118/0x440 [ 381.177882][ C0] ? ext4_init_security+0x40/0x40 [ 381.184738][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 381.191198][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 381.197261][ C0] ? __ext4_set_acl+0x600/0x600 [ 381.202690][ C0] ? prandom_u32+0x24d/0x290 [ 381.208718][ C0] ext4_init_security+0x34/0x40 [ 381.214343][ C0] __ext4_new_inode+0x2c41/0x3690 [ 381.220049][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 381.226374][ C0] ? dquot_initialize+0x20/0x20 [ 381.231789][ C0] ? selinux_determine_inode_label+0x290/0x3e0 [ 381.238681][ C0] ? may_create+0x377/0x460 [ 381.244373][ C0] ext4_mknod+0x235/0x4a0 [ 381.249052][ C0] ? ext4_rmdir+0x9f0/0x9f0 [ 381.254408][ C0] ? selinux_inode_mknod+0x7b/0xa0 [ 381.260271][ C0] ? security_inode_mknod+0xca/0x110 [ 381.265777][ C0] vfs_mknod+0x452/0x4e0 [ 381.270922][ C0] unix_bind+0x488/0x870 [ 381.275255][ C0] ? errseq_sample+0x44/0x70 [ 381.281186][ C0] ? unix_release+0xc0/0xc0 [ 381.285945][ C0] ? check_stack_object+0x106/0x140 [ 381.291350][ C0] ? security_socket_bind+0x82/0xa0 [ 381.297213][ C0] __sys_bind+0x2ff/0x400 [ 381.302805][ C0] ? __se_sys_futex+0x139/0x310 [ 381.308097][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 381.314228][ C0] ? debug_smp_processor_id+0x17/0x20 [ 381.320349][ C0] __x64_sys_bind+0x7a/0x90 [ 381.326586][ C0] x64_sys_call+0x6f0/0x9a0 [ 381.332014][ C0] do_syscall_64+0x4c/0xa0 [ 381.337241][ C0] ? clear_bhb_loop+0x50/0xa0 [ 381.342666][ C0] ? clear_bhb_loop+0x50/0xa0 [ 381.347783][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 381.355079][ C0] RIP: 0033:0x7f44286f7749 [ 381.361511][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.383394][ C0] RSP: 002b:00007ffd4e90d698 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 381.392005][ C0] RAX: ffffffffffffffda RBX: 00007f442894dfa0 RCX: 00007f44286f7749 [ 381.400170][ C0] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 381.409114][ C0] RBP: 00007f442877bf91 R08: 0000000000000000 R09: 0000000000000000 [ 381.417249][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.425614][ C0] R13: 00007f442894dfa0 R14: 00007f442894dfa0 R15: 0000000000000003 [ 381.434502][ C0] [ 436.728614][ T31] INFO: task kworker/u4:3:304 blocked for more than 127 seconds. [ 436.739116][ T31] Not tainted syzkaller #0 [ 436.744661][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.718585][ T31] task:kworker/u4:3 state:D stack:24000 pid: 304 ppid: 2 flags:0x00004000 [ 437.729772][ T31] Workqueue: events_unbound linkwatch_event [ 437.736094][ T31] Call Trace: [ 437.739675][ T31] [ 437.742654][ T31] __schedule+0xb6e/0x14c0 [ 437.747084][ T31] ? release_firmware_map_entry+0x190/0x190 [ 438.710390][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 438.717000][ T31] ? __kasan_check_write+0x14/0x20 [ 438.723084][ T31] ? kthread_data+0x50/0xc0 [ 438.728302][ T31] ? wq_worker_sleeping+0x60/0x200 [ 438.735973][ T31] schedule+0x11e/0x1e0 [ 438.741698][ T31] schedule_preempt_disabled+0x13/0x20 [ 439.728618][ T31] __mutex_lock+0x7b6/0x11b0 [ 439.735909][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 439.743934][ T31] ? __kasan_check_write+0x14/0x20 [ 440.739201][ T31] ? __switch_to+0x51d/0xe20 [ 440.745322][ T31] __mutex_lock_slowpath+0xe/0x10 [ 441.718920][ T31] mutex_lock+0x100/0x1a0 [ 441.724997][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 441.733817][ T31] ? __schedule+0xb76/0x14c0 [ 441.738934][ T31] rtnl_lock+0x15/0x20 [ 441.743345][ T31] linkwatch_event+0xe/0x60 [ 441.748227][ T31] process_one_work+0x6be/0xba0 [ 442.729348][ T31] worker_thread+0xa59/0x1200 [ 442.736420][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 442.743585][ T31] ? __kthread_parkme+0xac/0x200 [ 443.718859][ T31] kthread+0x411/0x500 [ 443.723446][ T31] ? worker_clr_flags+0x190/0x190 [ 443.730144][ T31] ? kthread_blkcg+0xd0/0xd0 [ 443.735674][ T31] ret_from_fork+0x1f/0x30 [ 443.740802][ T31] [ 443.744189][ T31] INFO: task syz-executor:395 blocked for more than 134 seconds. [ 444.719250][ T31] Not tainted syzkaller #0 [ 444.725838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.737564][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 445.718772][ T31] Call Trace: [ 445.722552][ T31] [ 445.726461][ T31] __schedule+0xb6e/0x14c0 [ 445.737306][ T31] ? release_firmware_map_entry+0x190/0x190 [ 445.744571][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 446.730448][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 446.737200][ T31] schedule+0x11e/0x1e0 [ 446.742219][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 451.738903][ T31] ? synchronize_rcu+0x110/0x110 [ 451.744491][ T31] ? __kasan_slab_free+0x11/0x20 [ 452.728717][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 452.735351][ T31] ? rcu_exp_handler+0x370/0x370 [ 452.740455][ T31] ? kfree+0xc4/0x270 [ 452.744660][ T31] ? kfree_const+0x39/0x40 [ 453.729193][ T31] ? __kasan_check_write+0x14/0x20 [ 453.735209][ T31] ? kobject_put+0x1a8/0x270 [ 453.740181][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 453.746601][ T31] ? kobject_put+0x214/0x270 [ 454.719246][ T31] ? io_schedule+0xe0/0xe0 [ 454.724510][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 454.731675][ T31] ? __kasan_check_read+0x11/0x20 [ 454.737447][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 454.743957][ T31] ? linkwatch_fire_event+0x307/0x380 [ 455.709005][ T31] veth_newlink+0x9bc/0xda0 [ 455.716914][ T31] ? veth_validate+0x200/0x200 [ 455.724279][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 455.731704][ T31] ? veth_validate+0x200/0x200 [ 455.738436][ T31] rtnl_newlink+0x112d/0x17b0 [ 455.743765][ T31] ? rtnl_setlink+0x400/0x400 [ 456.728818][ T31] ? memcpy+0x56/0x70 [ 456.734033][ T31] ? __kasan_check_write+0x14/0x20 [ 456.740035][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 456.747074][ T31] ? ns_capable+0x8c/0xf0 [ 457.719135][ T31] ? netlink_net_capable+0x125/0x160 [ 457.726365][ T31] ? rtnl_setlink+0x400/0x400 [ 457.736043][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 457.742431][ T31] ? rtnetlink_bind+0x80/0x80 [ 457.748287][ T31] ? memcpy+0x56/0x70 [ 458.709717][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 458.715157][ T31] ? arch_stack_walk+0xee/0x140 [ 458.720610][ T31] ? avc_denied+0x1b0/0x1b0 [ 458.725507][ T31] ? stack_trace_save+0x98/0xe0 [ 458.731267][ T31] ? avc_has_perm+0x158/0x240 [ 458.736080][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 458.741552][ T31] ? do_syscall_64+0x4c/0xa0 [ 458.746175][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 459.708768][ T31] netlink_rcv_skb+0x1e0/0x430 [ 459.713740][ T31] ? rtnetlink_bind+0x80/0x80 [ 459.718455][ T31] ? netlink_ack+0xb60/0xb60 [ 459.723333][ T31] ? __netlink_lookup+0x387/0x3b0 [ 459.728827][ T31] rtnetlink_rcv+0x1c/0x20 [ 459.734486][ T31] netlink_unicast+0x876/0xa40 [ 459.739615][ T31] netlink_sendmsg+0x86a/0xb70 [ 459.744723][ T31] ? netlink_getsockopt+0x530/0x530 [ 460.720304][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 460.726340][ T31] __sys_sendto+0x423/0x580 [ 460.732690][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 460.740764][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 462.718986][ T31] __x64_sys_sendto+0xe5/0x100 [ 462.724686][ T31] x64_sys_call+0x178/0x9a0 [ 462.730487][ T31] do_syscall_64+0x4c/0xa0 [ 462.736703][ T31] ? clear_bhb_loop+0x50/0xa0 [ 462.743369][ T31] ? clear_bhb_loop+0x50/0xa0 [ 463.738674][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.746761][ T31] RIP: 0033:0x7f18b4f3e583 [ 464.729634][ T31] RSP: 002b:00007fff933db428 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 464.740087][ T31] RAX: ffffffffffffffda RBX: 00007f18b5cc1620 RCX: 00007f18b4f3e583 [ 465.718674][ T31] RDX: 000000000000002c RSI: 00007f18b5cc1670 RDI: 0000000000000003 [ 465.727435][ T31] RBP: 0000000000000001 R08: 00007fff933db444 R09: 000000000000000c [ 465.735769][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 465.745652][ T31] R13: 0000000000000000 R14: 00007f18b5cc1670 R15: 0000000000000000 [ 466.708947][ T31] [ 466.712275][ T31] NMI backtrace for cpu 1 [ 466.716788][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 466.724452][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.736142][ T31] Call Trace: [ 466.739429][ T31] [ 466.742573][ T31] __dump_stack+0x21/0x30 [ 466.746954][ T31] dump_stack_lvl+0xee/0x150 [ 466.751585][ T31] ? show_regs_print_info+0x20/0x20 [ 466.756817][ T31] dump_stack+0x15/0x20 [ 466.761081][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 466.766138][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 466.771897][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 466.778101][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 466.783061][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 466.789162][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 466.795367][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 466.801427][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 466.807522][ T31] watchdog+0xd64/0xea0 [ 466.811970][ T31] ? hungtask_pm_notify+0x50/0x50 [ 466.817295][ T31] ? __kasan_check_read+0x11/0x20 [ 466.822446][ T31] ? __kthread_parkme+0xac/0x200 [ 466.827515][ T31] ? preempt_count_add+0x90/0x1b0 [ 466.832574][ T31] kthread+0x411/0x500 [ 466.837542][ T31] ? hungtask_pm_notify+0x50/0x50 [ 466.844257][ T31] ? kthread_blkcg+0xd0/0xd0 [ 466.849491][ T31] ret_from_fork+0x1f/0x30 [ 466.854128][ T31] [ 466.858508][ T31] Sending NMI from CPU 1 to CPUs 0: [ 466.865139][ C0] NMI backtrace for cpu 0 [ 466.865157][ C0] CPU: 0 PID: 388 Comm: syz.3.18 Not tainted syzkaller #0 [ 466.865177][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.865187][ C0] RIP: 0010:kasan_check_range+0xc/0x290 [ 466.865214][ C0] Code: c2 fc 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 a9 01 00 00 55 <48> 89 e5 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 [ 466.865228][ C0] RSP: 0018:ffffc900034f73d0 EFLAGS: 00000202 [ 466.865245][ C0] RAX: ffffffff81c6cb01 RBX: dffffc0000000000 RCX: ffffffff81c6cbd1 [ 466.865259][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888120303700 [ 466.865270][ C0] RBP: ffffc900034f73e0 R08: dffffc0000000000 R09: ffffed10240606e2 [ 466.865283][ C0] R10: ffffed10240606e2 R11: 1ffff110240606e1 R12: 0000000000000000 [ 466.865295][ C0] R13: ffff8881203036f0 R14: ffff888120303700 R15: 0000000048993a89 [ 466.865307][ C0] FS: 0000555585c04500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 466.865322][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.865334][ C0] CR2: 00007ffe4122c6e8 CR3: 000000012ea0b000 CR4: 00000000003506b0 [ 466.865350][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.865360][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.865371][ C0] Call Trace: [ 466.865376][ C0] [ 466.865383][ C0] ? __kasan_check_write+0x14/0x20 [ 466.865410][ C0] __entry_find+0x311/0x4f0 [ 466.865427][ C0] mb_cache_entry_find_first+0x1d/0x30 [ 466.865444][ C0] ext4_xattr_block_set+0xbce/0x2cb0 [ 466.865471][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 466.865489][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 466.865509][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 466.865530][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 466.865550][ C0] ? selinux_inode_free_security+0x210/0x210 [ 466.865571][ C0] ext4_initxattrs+0xa6/0x110 [ 466.865587][ C0] security_inode_init_security+0x254/0x370 [ 466.865606][ C0] ? posix_acl_create+0x118/0x440 [ 466.865622][ C0] ? ext4_init_security+0x40/0x40 [ 466.865637][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 466.865656][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 466.865675][ C0] ? __ext4_set_acl+0x600/0x600 [ 466.865690][ C0] ? prandom_u32+0x24d/0x290 [ 466.865706][ C0] ext4_init_security+0x34/0x40 [ 466.865722][ C0] __ext4_new_inode+0x2c41/0x3690 [ 466.865741][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 466.865757][ C0] ? dquot_initialize+0x20/0x20 [ 466.865774][ C0] ? selinux_determine_inode_label+0x290/0x3e0 [ 466.865792][ C0] ? may_create+0x377/0x460 [ 466.865807][ C0] ext4_mknod+0x235/0x4a0 [ 466.865825][ C0] ? ext4_rmdir+0x9f0/0x9f0 [ 466.865839][ C0] ? selinux_inode_mknod+0x7b/0xa0 [ 466.865857][ C0] ? security_inode_mknod+0xca/0x110 [ 466.865875][ C0] vfs_mknod+0x452/0x4e0 [ 466.865892][ C0] unix_bind+0x488/0x870 [ 466.865908][ C0] ? errseq_sample+0x44/0x70 [ 466.865923][ C0] ? unix_release+0xc0/0xc0 [ 466.865938][ C0] ? check_stack_object+0x106/0x140 [ 466.865956][ C0] ? security_socket_bind+0x82/0xa0 [ 466.865971][ C0] __sys_bind+0x2ff/0x400 [ 466.865992][ C0] ? __se_sys_futex+0x139/0x310 [ 466.866012][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 466.866033][ C0] ? debug_smp_processor_id+0x17/0x20 [ 466.866050][ C0] __x64_sys_bind+0x7a/0x90 [ 466.866091][ C0] x64_sys_call+0x6f0/0x9a0 [ 466.866108][ C0] do_syscall_64+0x4c/0xa0 [ 466.866126][ C0] ? clear_bhb_loop+0x50/0xa0 [ 466.866142][ C0] ? clear_bhb_loop+0x50/0xa0 [ 466.866158][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.866179][ C0] RIP: 0033:0x7f44286f7749 [ 466.866194][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.866207][ C0] RSP: 002b:00007ffd4e90d698 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 466.866224][ C0] RAX: ffffffffffffffda RBX: 00007f442894dfa0 RCX: 00007f44286f7749 [ 466.866236][ C0] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 466.866247][ C0] RBP: 00007f442877bf91 R08: 0000000000000000 R09: 0000000000000000 [ 466.866257][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.866267][ C0] R13: 00007f442894dfa0 R14: 00007f442894dfa0 R15: 0000000000000003 [ 466.866281][ C0] [ 488.738584][ T31] INFO: task kworker/u4:3:304 blocked for more than 179 seconds. [ 488.748200][ T31] Not tainted syzkaller #0 [ 489.740281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.739533][ T31] task:kworker/u4:3 state:D stack:24000 pid: 304 ppid: 2 flags:0x00004000 [ 499.740417][ T31] Workqueue: events_unbound linkwatch_event [ 501.720623][ T31] Call Trace: [ 501.724157][ T31] [ 501.727620][ T31] __schedule+0xb6e/0x14c0 [ 501.732844][ T31] ? release_firmware_map_entry+0x190/0x190 [ 501.738938][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 501.744599][ T31] ? __kasan_check_write+0x14/0x20 [ 502.718713][ T31] ? kthread_data+0x50/0xc0 [ 502.724370][ T31] ? wq_worker_sleeping+0x60/0x200 [ 502.731842][ T31] schedule+0x11e/0x1e0 [ 502.737982][ T31] schedule_preempt_disabled+0x13/0x20 [ 502.744595][ T31] __mutex_lock+0x7b6/0x11b0 [ 503.739040][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 504.708960][ T31] ? __kasan_check_write+0x14/0x20 [ 504.715041][ T31] ? __switch_to+0x51d/0xe20 [ 504.720011][ T31] __mutex_lock_slowpath+0xe/0x10 [ 504.725352][ T31] mutex_lock+0x100/0x1a0 [ 504.730242][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 504.737217][ T31] ? __schedule+0xb76/0x14c0 [ 504.742058][ T31] rtnl_lock+0x15/0x20 [ 504.746164][ T31] linkwatch_event+0xe/0x60 [ 505.708877][ T31] process_one_work+0x6be/0xba0 [ 505.716807][ T31] worker_thread+0xa59/0x1200 [ 505.722603][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 505.731913][ T31] ? __kthread_parkme+0xac/0x200 [ 505.738211][ T31] kthread+0x411/0x500 [ 505.743041][ T31] ? worker_clr_flags+0x190/0x190 [ 505.748216][ T31] ? kthread_blkcg+0xd0/0xd0 [ 506.738683][ T31] ret_from_fork+0x1f/0x30 [ 507.708778][ T31] [ 507.712036][ T31] INFO: task syz-executor:395 blocked for more than 198 seconds. [ 507.720240][ T31] Not tainted syzkaller #0 [ 507.725578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.735728][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 507.746414][ T31] Call Trace: [ 511.730791][ T31] [ 511.734152][ T31] __schedule+0xb6e/0x14c0 [ 511.740118][ T31] ? release_firmware_map_entry+0x190/0x190 [ 511.746622][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 512.708610][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 512.715235][ T31] schedule+0x11e/0x1e0 [ 512.719973][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 512.726570][ T31] ? synchronize_rcu+0x110/0x110 [ 512.731764][ T31] ? __kasan_slab_free+0x11/0x20 [ 512.736903][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 512.743051][ T31] ? rcu_exp_handler+0x370/0x370 [ 512.748209][ T31] ? kfree+0xc4/0x270 [ 513.719008][ T31] ? kfree_const+0x39/0x40 [ 513.725177][ T31] ? __kasan_check_write+0x14/0x20 [ 513.733756][ T31] ? kobject_put+0x1a8/0x270 [ 513.739149][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 513.746362][ T31] ? kobject_put+0x214/0x270 [ 516.708933][ T31] ? io_schedule+0xe0/0xe0 [ 516.715424][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 516.724283][ T31] ? __kasan_check_read+0x11/0x20 [ 516.731594][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 516.739213][ T31] ? linkwatch_fire_event+0x307/0x380 [ 516.747196][ T31] veth_newlink+0x9bc/0xda0 [ 517.718777][ T31] ? veth_validate+0x200/0x200 [ 517.724346][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 517.729780][ T31] ? veth_validate+0x200/0x200 [ 517.739339][ T31] rtnl_newlink+0x112d/0x17b0 [ 517.746252][ T31] ? rtnl_setlink+0x400/0x400 [ 518.709874][ T31] ? memcpy+0x56/0x70 [ 518.713988][ T31] ? __kasan_check_write+0x14/0x20 [ 518.720275][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 518.727530][ T31] ? ns_capable+0x8c/0xf0 [ 518.733451][ T31] ? netlink_net_capable+0x125/0x160 [ 518.739371][ T31] ? rtnl_setlink+0x400/0x400 [ 518.744865][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 519.708821][ T31] ? rtnetlink_bind+0x80/0x80 [ 519.713724][ T31] ? memcpy+0x56/0x70 [ 519.718064][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 519.723664][ T31] ? arch_stack_walk+0xee/0x140 [ 519.729241][ T31] ? avc_denied+0x1b0/0x1b0 [ 519.733926][ T31] ? stack_trace_save+0x98/0xe0 [ 519.739163][ T31] ? avc_has_perm+0x158/0x240 [ 519.744122][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 520.709328][ T31] ? do_syscall_64+0x4c/0xa0 [ 520.714237][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 520.719992][ T31] netlink_rcv_skb+0x1e0/0x430 [ 520.725027][ T31] ? rtnetlink_bind+0x80/0x80 [ 520.731913][ T31] ? netlink_ack+0xb60/0xb60 [ 520.736634][ T31] ? __netlink_lookup+0x387/0x3b0 [ 520.741853][ T31] rtnetlink_rcv+0x1c/0x20 [ 520.746568][ T31] netlink_unicast+0x876/0xa40 [ 521.738733][ T31] netlink_sendmsg+0x86a/0xb70 [ 521.745069][ T31] ? netlink_getsockopt+0x530/0x530 [ 522.728925][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 522.737276][ T31] __sys_sendto+0x423/0x580 [ 522.743598][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 523.738783][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 523.748060][ T31] __x64_sys_sendto+0xe5/0x100 [ 524.738929][ T31] x64_sys_call+0x178/0x9a0 [ 524.744560][ T31] do_syscall_64+0x4c/0xa0 [ 525.718611][ T31] ? clear_bhb_loop+0x50/0xa0 [ 525.724152][ T31] ? clear_bhb_loop+0x50/0xa0 [ 525.729901][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.737053][ T31] RIP: 0033:0x7f18b4f3e583 [ 525.742337][ T31] RSP: 002b:00007fff933db428 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 526.710425][ T31] RAX: ffffffffffffffda RBX: 00007f18b5cc1620 RCX: 00007f18b4f3e583 [ 526.719246][ T31] RDX: 000000000000002c RSI: 00007f18b5cc1670 RDI: 0000000000000003 [ 526.728159][ T31] RBP: 0000000000000001 R08: 00007fff933db444 R09: 000000000000000c [ 526.737190][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 526.746085][ T31] R13: 0000000000000000 R14: 00007f18b5cc1670 R15: 0000000000000000 [ 527.728686][ T31] [ 527.732578][ T31] INFO: task syz-executor:398 blocked for more than 155 seconds. [ 527.742225][ T31] Not tainted syzkaller #0 [ 527.748244][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 528.709385][ T31] task:syz-executor state:D stack:27296 pid: 398 ppid: 1 flags:0x00004004 [ 528.718811][ T31] Call Trace: [ 528.722314][ T31] [ 528.725479][ T31] __schedule+0xb6e/0x14c0 [ 528.730479][ T31] ? release_firmware_map_entry+0x190/0x190 [ 528.737460][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 528.743082][ T31] ? __kasan_check_write+0x14/0x20 [ 529.708587][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 529.714813][ T31] schedule+0x11e/0x1e0 [ 529.719442][ T31] schedule_preempt_disabled+0x13/0x20 [ 529.724934][ T31] __mutex_lock+0x7b6/0x11b0 [ 529.729667][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 529.736655][ T31] ? selinux_capable+0x29c/0x380 [ 529.741756][ T31] ? selinux_capset+0xf0/0xf0 [ 529.746529][ T31] ? cap_capable+0x1aa/0x230 [ 530.710426][ T31] __mutex_lock_slowpath+0xe/0x10 [ 530.715893][ T31] mutex_lock+0x100/0x1a0 [ 530.720859][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 530.728573][ T31] ? ns_capable+0x8c/0xf0 [ 530.733210][ T31] ? netlink_net_capable+0x125/0x160 [ 530.739554][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 530.745395][ T31] ? rtnetlink_bind+0x80/0x80 [ 531.708852][ T31] ? memcpy+0x56/0x70 [ 531.712910][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 531.718313][ T31] ? arch_stack_walk+0xee/0x140 [ 531.723284][ T31] ? avc_denied+0x1b0/0x1b0 [ 531.727852][ T31] ? stack_trace_save+0x98/0xe0 [ 531.732969][ T31] ? avc_has_perm+0x158/0x240 [ 531.737690][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 531.743892][ T31] ? do_syscall_64+0x4c/0xa0 [ 532.708927][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 532.714731][ T31] netlink_rcv_skb+0x1e0/0x430 [ 532.720024][ T31] ? rtnetlink_bind+0x80/0x80 [ 532.725648][ T31] ? netlink_ack+0xb60/0xb60 [ 532.730357][ T31] ? __netlink_lookup+0x387/0x3b0 [ 532.735425][ T31] rtnetlink_rcv+0x1c/0x20 [ 532.739898][ T31] netlink_unicast+0x876/0xa40 [ 532.744892][ T31] netlink_sendmsg+0x86a/0xb70 [ 533.698688][ T31] ? netlink_getsockopt+0x530/0x530 [ 533.703990][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 533.709664][ T31] __sys_sendto+0x423/0x580 [ 533.714236][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 533.720801][ T31] __x64_sys_sendto+0xe5/0x100 [ 533.725701][ T31] x64_sys_call+0x178/0x9a0 [ 533.730435][ T31] do_syscall_64+0x4c/0xa0 [ 533.735181][ T31] ? clear_bhb_loop+0x50/0xa0 [ 533.739952][ T31] ? clear_bhb_loop+0x50/0xa0 [ 533.744653][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.699537][ T31] RIP: 0033:0x7fcaa8147583 [ 534.704031][ T31] RSP: 002b:00007ffc13534368 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 534.712715][ T31] RAX: ffffffffffffffda RBX: 00007fcaa8eca620 RCX: 00007fcaa8147583 [ 534.721127][ T31] RDX: 0000000000000028 RSI: 00007fcaa8eca670 RDI: 0000000000000003 [ 534.729162][ T31] RBP: 0000000000000001 R08: 00007ffc13534384 R09: 000000000000000c [ 534.737161][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 534.745268][ T31] R13: 0000000000000000 R14: 00007fcaa8eca670 R15: 0000000000000000 [ 535.708514][ T31] [ 535.711702][ T31] NMI backtrace for cpu 0 [ 535.716656][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 535.724305][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.734365][ T31] Call Trace: [ 535.737643][ T31] [ 535.741542][ T31] __dump_stack+0x21/0x30 [ 535.745878][ T31] dump_stack_lvl+0xee/0x150 [ 535.750474][ T31] ? show_regs_print_info+0x20/0x20 [ 535.756413][ T31] dump_stack+0x15/0x20 [ 535.760579][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 535.765705][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 535.771672][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 535.778090][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 535.783055][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 535.789379][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 535.795470][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 535.801473][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 535.807379][ T31] watchdog+0xd64/0xea0 [ 535.811550][ T31] ? hungtask_pm_notify+0x50/0x50 [ 535.816611][ T31] ? __kasan_check_read+0x11/0x20 [ 535.821650][ T31] ? __kthread_parkme+0xac/0x200 [ 535.826591][ T31] ? preempt_count_add+0x90/0x1b0 [ 535.831621][ T31] kthread+0x411/0x500 [ 535.835696][ T31] ? hungtask_pm_notify+0x50/0x50 [ 535.840829][ T31] ? kthread_blkcg+0xd0/0xd0 [ 535.845421][ T31] ret_from_fork+0x1f/0x30 [ 535.849860][ T31] [ 535.853025][ T31] Sending NMI from CPU 0 to CPUs 1: [ 535.858244][ C1] NMI backtrace for cpu 1 [ 535.858256][ C1] CPU: 1 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 [ 535.858274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.858284][ C1] RIP: 0010:__rcu_read_lock+0xd/0x50 [ 535.858306][ C1] Code: bc 00 00 00 00 00 fc ff df 0f 85 c1 fb ff ff e8 f5 a8 a9 ff e9 b7 fb ff ff 0f 1f 40 00 55 48 89 e5 53 65 48 8b 1d 93 9f ab 7e <48> 81 c3 4c 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 535.858319][ C1] RSP: 0018:ffffc900034170f0 EFLAGS: 00000246 [ 535.858335][ C1] RAX: 1ffff11022260c07 RBX: ffff8881104b3b40 RCX: dffffc0000000000 [ 535.858348][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000020 [ 535.858358][ C1] RBP: ffffc900034170f8 R08: dffffc0000000000 R09: ffffc90003417220 [ 535.858370][ C1] R10: fffff52000682e49 R11: 1ffff92000682e44 R12: 1ffff1102222b479 [ 535.858382][ C1] R13: ffff888111306000 R14: 0000000000000010 R15: ffff88811115a3c8 [ 535.858394][ C1] FS: 000055557f14d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 535.858409][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.858421][ C1] CR2: 00007fe032963000 CR3: 000000012ec05000 CR4: 00000000003506a0 [ 535.858436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 535.858445][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 535.858460][ C1] Call Trace: [ 535.858465][ C1] [ 535.858472][ C1] ext4_get_group_desc+0x129/0x320 [ 535.858491][ C1] __ext4_get_inode_loc+0x1db/0xcd0 [ 535.858508][ C1] ? __kasan_check_read+0x11/0x20 [ 535.858526][ C1] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 535.858567][ C1] ? ext4_get_inode_loc+0x130/0x130 [ 535.858583][ C1] ? __kasan_check_write+0x14/0x20 [ 535.858600][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 535.858617][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 535.858640][ C1] ext4_reserve_inode_write+0x16c/0x320 [ 535.858658][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 535.858674][ C1] ? ext4_journal_check_start+0x172/0x240 [ 535.858693][ C1] ext4_dirty_inode+0xbd/0x100 [ 535.858708][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 535.858726][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 535.858745][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 535.858769][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 535.858786][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 535.858805][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 535.858825][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 535.858844][ C1] ? selinux_inode_free_security+0x210/0x210 [ 535.858865][ C1] ext4_initxattrs+0xa6/0x110 [ 535.858879][ C1] security_inode_init_security+0x254/0x370 [ 535.858899][ C1] ? posix_acl_create+0x118/0x440 [ 535.858914][ C1] ? ext4_init_security+0x40/0x40 [ 535.858929][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 535.858948][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 535.858965][ C1] ? __ext4_set_acl+0x600/0x600 [ 535.858980][ C1] ? prandom_u32+0x24d/0x290 [ 535.858995][ C1] ext4_init_security+0x34/0x40 [ 535.859010][ C1] __ext4_new_inode+0x2c41/0x3690 [ 535.859028][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 535.859044][ C1] ? dquot_initialize+0x20/0x20 [ 535.859061][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 535.859078][ C1] ? may_create+0x377/0x460 [ 535.859092][ C1] ext4_mknod+0x235/0x4a0 [ 535.859109][ C1] ? ext4_rmdir+0x9f0/0x9f0 [ 535.859123][ C1] ? selinux_inode_mknod+0x7b/0xa0 [ 535.859140][ C1] ? security_inode_mknod+0xca/0x110 [ 535.859157][ C1] vfs_mknod+0x452/0x4e0 [ 535.859174][ C1] unix_bind+0x488/0x870 [ 535.859189][ C1] ? errseq_sample+0x44/0x70 [ 535.859204][ C1] ? unix_release+0xc0/0xc0 [ 535.859218][ C1] ? check_stack_object+0x106/0x140 [ 535.859235][ C1] ? security_socket_bind+0x82/0xa0 [ 535.859250][ C1] __sys_bind+0x2ff/0x400 [ 535.859268][ C1] ? __se_sys_futex+0x139/0x310 [ 535.859286][ C1] ? __ia32_sys_socketpair+0xb0/0xb0 [ 535.859306][ C1] ? debug_smp_processor_id+0x17/0x20 [ 535.859322][ C1] __x64_sys_bind+0x7a/0x90 [ 535.859339][ C1] x64_sys_call+0x6f0/0x9a0 [ 535.859355][ C1] do_syscall_64+0x4c/0xa0 [ 535.859372][ C1] ? clear_bhb_loop+0x50/0xa0 [ 535.859385][ C1] ? clear_bhb_loop+0x50/0xa0 [ 535.859399][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.859418][ C1] RIP: 0033:0x7f3a47172749 [ 535.859440][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.859453][ C1] RSP: 002b:00007ffcc8377c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 535.859469][ C1] RAX: ffffffffffffffda RBX: 00007f3a473c8fa0 RCX: 00007f3a47172749 [ 535.859481][ C1] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 535.859491][ C1] RBP: 00007f3a471f6f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.859501][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.859510][ C1] R13: 00007f3a473c8fa0 R14: 00007f3a473c8fa0 R15: 0000000000000003 [ 535.859524][ C1] [ 558.718917][ T31] INFO: task kworker/1:0:26 blocked for more than 121 seconds. [ 558.727097][ T31] Not tainted syzkaller #0 [ 558.732204][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.741116][ T31] task:kworker/1:0 state:D stack:27456 pid: 26 ppid: 2 flags:0x00004000 [ 559.699143][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 559.706526][ T31] Call Trace: [ 559.709959][ T31] [ 559.713021][ T31] __schedule+0xb6e/0x14c0 [ 559.717589][ T31] ? release_firmware_map_entry+0x190/0x190 [ 559.723863][ T31] ? _raw_spin_unlock_irq+0x49/0x70 [ 559.729443][ T31] ? _raw_spin_unlock_irq+0x4e/0x70 [ 559.734949][ T31] ? wq_worker_sleeping+0x196/0x200 [ 559.740785][ T31] schedule+0x11e/0x1e0 [ 559.745189][ T31] schedule_preempt_disabled+0x13/0x20 [ 560.698966][ T31] __mutex_lock+0x7b6/0x11b0 [ 560.704082][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 560.710959][ T31] ? __kasan_check_write+0x14/0x20 [ 560.716711][ T31] ? __switch_to+0x51d/0xe20 [ 560.721789][ T31] __mutex_lock_slowpath+0xe/0x10 [ 560.726853][ T31] mutex_lock+0x100/0x1a0 [ 560.731490][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 560.738102][ T31] ? __schedule+0xb76/0x14c0 [ 560.742748][ T31] rtnl_lock+0x15/0x20 [ 560.747202][ T31] addrconf_verify_work+0xe/0x20 [ 561.698873][ T31] process_one_work+0x6be/0xba0 [ 561.704032][ T31] worker_thread+0xa59/0x1200 [ 561.708927][ T31] ? __kthread_parkme+0xac/0x200 [ 561.714581][ T31] kthread+0x411/0x500 [ 561.718861][ T31] ? worker_clr_flags+0x190/0x190 [ 561.724208][ T31] ? kthread_blkcg+0xd0/0xd0 [ 561.728979][ T31] ret_from_fork+0x1f/0x30 [ 561.733829][ T31] [ 561.736992][ T31] INFO: task kworker/u4:3:304 blocked for more than 252 seconds. [ 561.745674][ T31] Not tainted syzkaller #0 [ 562.739224][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.699177][ T31] task:kworker/u4:3 state:D stack:24000 pid: 304 ppid: 2 flags:0x00004000 [ 564.708520][ T31] Workqueue: events_unbound linkwatch_event [ 564.714446][ T31] Call Trace: [ 564.717733][ T31] [ 564.720772][ T31] __schedule+0xb6e/0x14c0 [ 564.725213][ T31] ? release_firmware_map_entry+0x190/0x190 [ 564.731157][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 564.736372][ T31] ? __kasan_check_write+0x14/0x20 [ 564.741531][ T31] ? kthread_data+0x50/0xc0 [ 564.746070][ T31] ? wq_worker_sleeping+0x60/0x200 [ 565.698525][ T31] schedule+0x11e/0x1e0 [ 565.702819][ T31] schedule_preempt_disabled+0x13/0x20 [ 565.708309][ T31] __mutex_lock+0x7b6/0x11b0 [ 565.712960][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 565.719763][ T31] ? __kasan_check_write+0x14/0x20 [ 565.725098][ T31] ? __switch_to+0x51d/0xe20 [ 565.729783][ T31] __mutex_lock_slowpath+0xe/0x10 [ 565.734876][ T31] mutex_lock+0x100/0x1a0 [ 565.739383][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 565.746277][ T31] ? __schedule+0xb76/0x14c0 [ 566.699067][ T31] rtnl_lock+0x15/0x20 [ 566.703301][ T31] linkwatch_event+0xe/0x60 [ 566.707972][ T31] process_one_work+0x6be/0xba0 [ 566.713204][ T31] worker_thread+0xa59/0x1200 [ 566.718196][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 566.724557][ T31] ? __kthread_parkme+0xac/0x200 [ 566.729980][ T31] kthread+0x411/0x500 [ 566.734376][ T31] ? worker_clr_flags+0x190/0x190 [ 566.739574][ T31] ? kthread_blkcg+0xd0/0xd0 [ 566.745334][ T31] ret_from_fork+0x1f/0x30 [ 567.698751][ T31] [ 567.702498][ T31] INFO: task syz-executor:395 blocked for more than 257 seconds. [ 567.711312][ T31] Not tainted syzkaller #0 [ 567.716447][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.725433][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 567.734772][ T31] Call Trace: [ 567.738074][ T31] [ 567.741075][ T31] __schedule+0xb6e/0x14c0 [ 567.745516][ T31] ? release_firmware_map_entry+0x190/0x190 [ 568.708917][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 568.715045][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 568.721157][ T31] schedule+0x11e/0x1e0 [ 568.725349][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 568.731030][ T31] ? synchronize_rcu+0x110/0x110 [ 568.736077][ T31] ? __kasan_slab_free+0x11/0x20 [ 568.741396][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 568.746980][ T31] ? rcu_exp_handler+0x370/0x370 [ 569.698741][ T31] ? kfree+0xc4/0x270 [ 569.702892][ T31] ? kfree_const+0x39/0x40 [ 569.707430][ T31] ? __kasan_check_write+0x14/0x20 [ 569.712658][ T31] ? kobject_put+0x1a8/0x270 [ 569.717686][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 569.724194][ T31] ? kobject_put+0x214/0x270 [ 569.728862][ T31] ? io_schedule+0xe0/0xe0 [ 569.733297][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 569.739439][ T31] ? __kasan_check_read+0x11/0x20 [ 569.744588][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 570.700243][ T31] ? linkwatch_fire_event+0x307/0x380 [ 570.705718][ T31] veth_newlink+0x9bc/0xda0 [ 570.710396][ T31] ? veth_validate+0x200/0x200 [ 570.715206][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 570.720600][ T31] ? veth_validate+0x200/0x200 [ 570.725386][ T31] rtnl_newlink+0x112d/0x17b0 [ 570.730147][ T31] ? rtnl_setlink+0x400/0x400 [ 570.735286][ T31] ? memcpy+0x56/0x70 [ 570.739318][ T31] ? __kasan_check_write+0x14/0x20 [ 570.744739][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 571.699089][ T31] ? ns_capable+0x8c/0xf0 [ 571.703577][ T31] ? netlink_net_capable+0x125/0x160 [ 571.709024][ T31] ? rtnl_setlink+0x400/0x400 [ 571.714119][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 571.719233][ T31] ? rtnetlink_bind+0x80/0x80 [ 571.724072][ T31] ? memcpy+0x56/0x70 [ 571.728065][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 571.733501][ T31] ? arch_stack_walk+0xee/0x140 [ 571.739016][ T31] ? avc_denied+0x1b0/0x1b0 [ 571.744046][ T31] ? stack_trace_save+0x98/0xe0 [ 572.700213][ T31] ? avc_has_perm+0x158/0x240 [ 572.704997][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 572.710496][ T31] ? do_syscall_64+0x4c/0xa0 [ 572.715205][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 572.720638][ T31] netlink_rcv_skb+0x1e0/0x430 [ 572.725527][ T31] ? rtnetlink_bind+0x80/0x80 [ 572.730476][ T31] ? netlink_ack+0xb60/0xb60 [ 572.735121][ T31] ? __netlink_lookup+0x387/0x3b0 [ 572.740448][ T31] rtnetlink_rcv+0x1c/0x20 [ 572.744962][ T31] netlink_unicast+0x876/0xa40 [ 573.698554][ T31] netlink_sendmsg+0x86a/0xb70 [ 573.704979][ T31] ? netlink_getsockopt+0x530/0x530 [ 573.710660][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 573.716169][ T31] __sys_sendto+0x423/0x580 [ 573.721567][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 573.727583][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 573.734624][ T31] __x64_sys_sendto+0xe5/0x100 [ 573.739960][ T31] x64_sys_call+0x178/0x9a0 [ 573.744566][ T31] do_syscall_64+0x4c/0xa0 [ 574.698905][ T31] ? clear_bhb_loop+0x50/0xa0 [ 574.703655][ T31] ? clear_bhb_loop+0x50/0xa0 [ 574.708356][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 574.714518][ T31] RIP: 0033:0x7f18b4f3e583 [ 574.719840][ T31] RSP: 002b:00007fff933db428 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 574.728719][ T31] RAX: ffffffffffffffda RBX: 00007f18b5cc1620 RCX: 00007f18b4f3e583 [ 574.736946][ T31] RDX: 000000000000002c RSI: 00007f18b5cc1670 RDI: 0000000000000003 [ 574.745094][ T31] RBP: 0000000000000001 R08: 00007fff933db444 R09: 000000000000000c [ 575.698595][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 575.706636][ T31] R13: 0000000000000000 R14: 00007f18b5cc1670 R15: 0000000000000000 [ 575.714861][ T31] [ 575.718047][ T31] INFO: task syz-executor:398 blocked for more than 203 seconds. [ 575.725855][ T31] Not tainted syzkaller #0 [ 575.730943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.740335][ T31] task:syz-executor state:D stack:27296 pid: 398 ppid: 1 flags:0x00004004 [ 576.700042][ T31] Call Trace: [ 576.703389][ T31] [ 576.706368][ T31] __schedule+0xb6e/0x14c0 [ 576.711156][ T31] ? release_firmware_map_entry+0x190/0x190 [ 576.717194][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 576.722519][ T31] ? __kasan_check_write+0x14/0x20 [ 576.727772][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 576.733594][ T31] schedule+0x11e/0x1e0 [ 576.737797][ T31] schedule_preempt_disabled+0x13/0x20 [ 576.743301][ T31] __mutex_lock+0x7b6/0x11b0 [ 576.748034][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 577.698876][ T31] ? selinux_capable+0x29c/0x380 [ 577.703884][ T31] ? selinux_capset+0xf0/0xf0 [ 577.708605][ T31] ? cap_capable+0x1aa/0x230 [ 577.713270][ T31] __mutex_lock_slowpath+0xe/0x10 [ 577.718432][ T31] mutex_lock+0x100/0x1a0 [ 577.723261][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 577.730228][ T31] ? ns_capable+0x8c/0xf0 [ 577.734882][ T31] ? netlink_net_capable+0x125/0x160 [ 577.740278][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 577.745242][ T31] ? rtnetlink_bind+0x80/0x80 [ 578.709100][ T31] ? memcpy+0x56/0x70 [ 578.713515][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 578.719027][ T31] ? arch_stack_walk+0xee/0x140 [ 578.723924][ T31] ? avc_denied+0x1b0/0x1b0 [ 578.728635][ T31] ? stack_trace_save+0x98/0xe0 [ 578.733535][ T31] ? avc_has_perm+0x158/0x240 [ 578.738250][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 578.743863][ T31] ? do_syscall_64+0x4c/0xa0 [ 579.698610][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 579.704267][ T31] netlink_rcv_skb+0x1e0/0x430 [ 579.711215][ T31] ? rtnetlink_bind+0x80/0x80 [ 579.716020][ T31] ? netlink_ack+0xb60/0xb60 [ 579.720767][ T31] ? __netlink_lookup+0x387/0x3b0 [ 579.726122][ T31] rtnetlink_rcv+0x1c/0x20 [ 579.730688][ T31] netlink_unicast+0x876/0xa40 [ 579.735917][ T31] netlink_sendmsg+0x86a/0xb70 [ 579.740776][ T31] ? netlink_getsockopt+0x530/0x530 [ 579.746100][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 580.699564][ T31] __sys_sendto+0x423/0x580 [ 580.705422][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 580.711477][ T31] __x64_sys_sendto+0xe5/0x100 [ 580.717434][ T31] x64_sys_call+0x178/0x9a0 [ 580.722410][ T31] do_syscall_64+0x4c/0xa0 [ 580.727682][ T31] ? clear_bhb_loop+0x50/0xa0 [ 580.732982][ T31] ? clear_bhb_loop+0x50/0xa0 [ 580.738073][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.744204][ T31] RIP: 0033:0x7fcaa8147583 [ 581.708547][ T31] RSP: 002b:00007ffc13534368 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 581.717452][ T31] RAX: ffffffffffffffda RBX: 00007fcaa8eca620 RCX: 00007fcaa8147583 [ 581.725727][ T31] RDX: 0000000000000028 RSI: 00007fcaa8eca670 RDI: 0000000000000003 [ 581.734528][ T31] RBP: 0000000000000001 R08: 00007ffc13534384 R09: 000000000000000c [ 581.745770][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 582.710396][ T31] R13: 0000000000000000 R14: 00007fcaa8eca670 R15: 0000000000000000 [ 582.719048][ T31] [ 582.723002][ T31] NMI backtrace for cpu 0 [ 582.727840][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 582.735324][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.750778][ T31] Call Trace: [ 582.756546][ T31] [ 582.761745][ T31] __dump_stack+0x21/0x30 [ 582.766117][ T31] dump_stack_lvl+0xee/0x150 [ 582.773050][ T31] ? show_regs_print_info+0x20/0x20 [ 582.779001][ T31] dump_stack+0x15/0x20 [ 582.783437][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 582.788686][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 582.795113][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 582.802161][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 582.807305][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 582.814197][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 582.820359][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 582.827150][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 582.833078][ T31] watchdog+0xd64/0xea0 [ 582.837241][ T31] ? hungtask_pm_notify+0x50/0x50 [ 582.842484][ T31] ? __kasan_check_read+0x11/0x20 [ 582.847838][ T31] ? __kthread_parkme+0xac/0x200 [ 582.852804][ T31] ? preempt_count_add+0x90/0x1b0 [ 582.857966][ T31] kthread+0x411/0x500 [ 582.862044][ T31] ? hungtask_pm_notify+0x50/0x50 [ 582.867416][ T31] ? kthread_blkcg+0xd0/0xd0 [ 582.872361][ T31] ret_from_fork+0x1f/0x30 [ 582.876807][ T31] [ 582.879961][ T31] Sending NMI from CPU 0 to CPUs 1: [ 582.885467][ C1] NMI backtrace for cpu 1 [ 582.885479][ C1] CPU: 1 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 [ 582.885496][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.885505][ C1] RIP: 0010:kasan_check_range+0x3e/0x290 [ 582.885529][ C1] Code: 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 ff ff 01 00 0f 82 44 02 00 00 49 bf 01 00 00 00 00 fc ff df <49> 89 fb 49 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 [ 582.885543][ C1] RSP: 0018:ffffc90003417168 EFLAGS: 00000246 [ 582.885558][ C1] RAX: 1ffff11022096801 RBX: ffff888111dc61d0 RCX: ffffffff84a91b51 [ 582.885571][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888111dc61d0 [ 582.885581][ C1] RBP: ffffc90003417180 R08: 000000000001ffff R09: ffffed1021a03c0d [ 582.885593][ C1] R10: ffffed1021a03c0d R11: 1ffff11021a03c0c R12: dffffc0000000000 [ 582.885606][ C1] R13: dffffc0000000000 R14: ffffc900034171c0 R15: dffffc0000000001 [ 582.885618][ C1] FS: 000055557f14d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 582.885633][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.885644][ C1] CR2: 00007ff484ac7000 CR3: 000000012ec05000 CR4: 00000000003506a0 [ 582.885659][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 582.885669][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 582.885684][ C1] Call Trace: [ 582.885688][ C1] [ 582.885695][ C1] __kasan_check_write+0x14/0x20 [ 582.885713][ C1] _raw_spin_lock+0x81/0xe0 [ 582.885730][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 582.885749][ C1] ext4_mark_iloc_dirty+0x2a9/0x3f50 [ 582.885767][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 582.885784][ C1] ? ext4_reserve_inode_write+0x281/0x320 [ 582.885802][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 582.885818][ C1] ? ext4_journal_check_start+0x172/0x240 [ 582.885837][ C1] ext4_dirty_inode+0xbd/0x100 [ 582.885853][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 582.885870][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 582.885889][ C1] ext4_xattr_block_set+0x1591/0x2cb0 [ 582.885912][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 582.885930][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 582.885948][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 582.885968][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 582.885987][ C1] ? selinux_inode_free_security+0x210/0x210 [ 582.886007][ C1] ext4_initxattrs+0xa6/0x110 [ 582.886022][ C1] security_inode_init_security+0x254/0x370 [ 582.886040][ C1] ? posix_acl_create+0x118/0x440 [ 582.886056][ C1] ? ext4_init_security+0x40/0x40 [ 582.886071][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 582.886089][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 582.886106][ C1] ? __ext4_set_acl+0x600/0x600 [ 582.886121][ C1] ? prandom_u32+0x24d/0x290 [ 582.886136][ C1] ext4_init_security+0x34/0x40 [ 582.886150][ C1] __ext4_new_inode+0x2c41/0x3690 [ 582.886168][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 582.886183][ C1] ? dquot_initialize+0x20/0x20 [ 582.886200][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 582.886217][ C1] ? may_create+0x377/0x460 [ 582.886231][ C1] ext4_mknod+0x235/0x4a0 [ 582.886247][ C1] ? ext4_rmdir+0x9f0/0x9f0 [ 582.886262][ C1] ? selinux_inode_mknod+0x7b/0xa0 [ 582.886278][ C1] ? security_inode_mknod+0xca/0x110 [ 582.886295][ C1] vfs_mknod+0x452/0x4e0 [ 582.886311][ C1] unix_bind+0x488/0x870 [ 582.886326][ C1] ? errseq_sample+0x44/0x70 [ 582.886341][ C1] ? unix_release+0xc0/0xc0 [ 582.886354][ C1] ? check_stack_object+0x106/0x140 [ 582.886372][ C1] ? security_socket_bind+0x82/0xa0 [ 582.886387][ C1] __sys_bind+0x2ff/0x400 [ 582.886405][ C1] ? __se_sys_futex+0x139/0x310 [ 582.886423][ C1] ? __ia32_sys_socketpair+0xb0/0xb0 [ 582.886444][ C1] ? debug_smp_processor_id+0x17/0x20 [ 582.886461][ C1] __x64_sys_bind+0x7a/0x90 [ 582.886477][ C1] x64_sys_call+0x6f0/0x9a0 [ 582.886495][ C1] do_syscall_64+0x4c/0xa0 [ 582.886512][ C1] ? clear_bhb_loop+0x50/0xa0 [ 582.886526][ C1] ? clear_bhb_loop+0x50/0xa0 [ 582.886540][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 582.886558][ C1] RIP: 0033:0x7f3a47172749 [ 582.886573][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.886585][ C1] RSP: 002b:00007ffcc8377c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 582.886601][ C1] RAX: ffffffffffffffda RBX: 00007f3a473c8fa0 RCX: 00007f3a47172749 [ 582.886613][ C1] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 582.886623][ C1] RBP: 00007f3a471f6f91 R08: 0000000000000000 R09: 0000000000000000 [ 582.886634][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.886643][ C1] R13: 00007f3a473c8fa0 R14: 00007f3a473c8fa0 R15: 0000000000000003 [ 582.886657][ C1]