Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. 2025/11/27 05:40:29 parsed 1 programs [ 271.872883][ T30] audit: type=1400 audit(1764222029.541:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 271.893721][ T30] audit: type=1400 audit(1764222029.541:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 272.827528][ T30] audit: type=1400 audit(1764222030.491:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 272.830305][ T290] cgroup: Unknown subsys name 'net' [ 272.850296][ T30] audit: type=1400 audit(1764222030.491:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.877622][ T30] audit: type=1400 audit(1764222030.521:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.877933][ T290] cgroup: Unknown subsys name 'devices' [ 273.022183][ T290] cgroup: Unknown subsys name 'hugetlb' [ 273.027939][ T290] cgroup: Unknown subsys name 'rlimit' [ 273.265275][ T30] audit: type=1400 audit(1764222030.931:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.288493][ T30] audit: type=1400 audit(1764222030.931:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.294991][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 273.309238][ T30] audit: type=1400 audit(1764222030.931:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.338000][ T30] audit: type=1400 audit(1764222030.931:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.358280][ T30] audit: type=1400 audit(1764222030.931:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 273.431220][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 273.914340][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 274.541739][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.548798][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.556353][ T337] device bridge_slave_0 entered promiscuous mode [ 274.563272][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.570338][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.577706][ T337] device bridge_slave_1 entered promiscuous mode [ 274.635310][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.642398][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.649702][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.656734][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.680176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.687870][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.695584][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.704881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.713590][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.720662][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.729406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.737866][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.744939][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.758339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.772976][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.792797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.808841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.817028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.824656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.832897][ T337] device veth0_vlan entered promiscuous mode [ 274.852674][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.861853][ T337] device veth1_macvtap entered promiscuous mode [ 274.871585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.891517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/27 05:40:32 executed programs: 0 [ 275.340647][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.347701][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.355252][ T362] device bridge_slave_0 entered promiscuous mode [ 275.362276][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.369311][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.376773][ T362] device bridge_slave_1 entered promiscuous mode [ 275.425830][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.432923][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.440264][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.447310][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.466029][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.473795][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.481635][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.495958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.504373][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.511452][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.520593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.528800][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.535882][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.553076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.562284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.575763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.591562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.599800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.607227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.619591][ T362] device veth0_vlan entered promiscuous mode [ 275.630623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.639969][ T362] device veth1_macvtap entered promiscuous mode [ 275.649275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.659630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.689294][ T372] loop2: detected capacity change from 0 to 1024 [ 275.720190][ T372] ======================================================= [ 275.720190][ T372] WARNING: The mand mount option has been deprecated and [ 275.720190][ T372] and is ignored by this kernel. Remove the mand [ 275.720190][ T372] option from the mount to silence this warning. [ 275.720190][ T372] ======================================================= [ 275.756146][ T372] EXT4-fs (loop2): Ignoring removed oldalloc option [ 275.762973][ T372] EXT4-fs (loop2): Ignoring removed orlov option [ 275.781709][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 276.030976][ T8] device bridge_slave_1 left promiscuous mode [ 276.037241][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.045125][ T8] device bridge_slave_0 left promiscuous mode [ 276.051763][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.060280][ T8] device veth1_macvtap left promiscuous mode [ 276.066378][ T8] device veth0_vlan left promiscuous mode [ 277.459667][ C0] sched: RT throttling activated [ 290.751750][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.758832][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.766599][ T378] device bridge_slave_0 entered promiscuous mode [ 290.773895][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.781076][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.788608][ T378] device bridge_slave_1 entered promiscuous mode [ 290.852210][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.859291][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.866630][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.873675][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.898006][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.905599][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.914030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.921785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.941732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.951055][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.958211][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.965955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.975909][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.982979][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.990778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.998928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.015879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.026779][ T378] device veth0_vlan entered promiscuous mode [ 291.033481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.048649][ T378] device veth1_macvtap entered promiscuous mode [ 291.056145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.065308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.073089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.089806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2025/11/27 05:40:48 executed programs: 3 [ 291.098441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.134976][ T389] loop3: detected capacity change from 0 to 1024 [ 291.193859][ T389] EXT4-fs (loop3): Ignoring removed oldalloc option [ 291.200517][ T389] EXT4-fs (loop3): Ignoring removed orlov option [ 291.228369][ T389] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 391.239631][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 391.246665][ C1] (detected by 1, t=10002 jiffies, g=1933, q=941) [ 391.253184][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10001 (4294976327-4294966326), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 391.266565][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g1933 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 391.277685][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 391.287753][ C1] rcu: RCU grace-period kthread stack dump: [ 391.293652][ C1] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 391.304463][ C1] Call Trace: [ 391.307756][ C1] [ 391.310702][ C1] __schedule+0xb6e/0x14c0 [ 391.315156][ C1] ? release_firmware_map_entry+0x190/0x190 [ 391.321060][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 391.326879][ C1] ? __mod_timer+0x7ae/0xb30 [ 391.331486][ C1] schedule+0x11e/0x1e0 [ 391.335656][ C1] schedule_timeout+0x12c/0x2e0 [ 391.340520][ C1] ? console_conditional_schedule+0x30/0x30 [ 391.346424][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 391.351899][ C1] ? update_process_times+0x200/0x200 [ 391.357282][ C1] ? prepare_to_swait_event+0x308/0x320 [ 391.362841][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 391.367618][ C1] ? rcu_cleanup_dead_rnp+0x180/0x180 [ 391.373005][ C1] ? debug_smp_processor_id+0x17/0x20 [ 391.378391][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 391.383511][ C1] ? rcu_gp_init+0xc00/0xc00 [ 391.388126][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 391.393344][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 391.398037][ C1] rcu_gp_kthread+0x98/0x330 [ 391.402644][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 391.407336][ C1] ? __kasan_check_read+0x11/0x20 [ 391.412373][ C1] ? __kthread_parkme+0xac/0x200 [ 391.417322][ C1] ? preempt_count_add+0x90/0x1b0 [ 391.422354][ C1] kthread+0x411/0x500 [ 391.426448][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 391.431137][ C1] ? kthread_blkcg+0xd0/0xd0 [ 391.435745][ C1] ret_from_fork+0x1f/0x30 [ 391.440182][ C1] [ 391.443218][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 391.449556][ C1] NMI backtrace for cpu 1 [ 391.453894][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 391.461025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.471203][ C1] Call Trace: [ 391.474508][ C1] [ 391.477440][ C1] __dump_stack+0x21/0x30 [ 391.481772][ C1] dump_stack_lvl+0xee/0x150 [ 391.486360][ C1] ? show_regs_print_info+0x20/0x20 [ 391.491562][ C1] dump_stack+0x15/0x20 [ 391.495718][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 391.500669][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 391.506825][ C1] ? load_image+0x3a0/0x3a0 [ 391.511334][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 391.517491][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 391.523656][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 391.529644][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 391.535561][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 391.541734][ C1] print_other_cpu_stall+0xded/0xfd0 [ 391.547019][ C1] ? print_cpu_stall+0x600/0x600 [ 391.551958][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 391.556641][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 391.561942][ C1] ? debug_smp_processor_id+0x17/0x20 [ 391.567313][ C1] rcu_sched_clock_irq+0x8a3/0x12b0 [ 391.572508][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 391.578659][ C1] ? hrtimer_run_queues+0x166/0x430 [ 391.583861][ C1] update_process_times+0x198/0x200 [ 391.589064][ C1] tick_sched_timer+0x17c/0x240 [ 391.593917][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 391.599481][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 391.604686][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 391.609802][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 391.615881][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 391.620847][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 391.626755][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 391.632418][ C1] [ 391.635452][ C1] [ 391.638377][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.644551][ C1] RIP: 0010:__kasan_check_read+0x12/0x20 [ 391.650273][ C1] Code: eb 0a 48 c7 c7 89 4b db 85 48 89 de e8 17 ce f8 02 45 31 ff eb d1 00 00 55 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 bf ed ff ff 5d 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 89 f6 48 8b [ 391.669907][ C1] RSP: 0018:ffffc90002d06c58 EFLAGS: 00000256 [ 391.675979][ C1] RAX: ffffffff8191ba01 RBX: dffffc0000000000 RCX: ffffffff8191ba40 [ 391.683947][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0004b48bc0 [ 391.692005][ C1] RBP: ffffc90002d06d10 R08: dffffc0000000000 R09: fffff94000969179 [ 391.699994][ C1] R10: fffff94000969179 R11: 1ffffd4000969178 R12: dffffc0000000000 [ 391.708056][ C1] R13: 1ffff920005a0d90 R14: ffffea0004b48bc8 R15: ffffea0004b48bc0 [ 391.716031][ C1] ? mark_page_accessed+0x201/0x8d0 [ 391.721233][ C1] ? mark_page_accessed+0x240/0x8d0 [ 391.726427][ C1] ? mark_page_accessed+0x240/0x8d0 [ 391.731619][ C1] ? __activate_page+0xd40/0xd40 [ 391.736553][ C1] __find_get_block+0xafd/0xee0 [ 391.741401][ C1] ? write_boundary_block+0x140/0x140 [ 391.746771][ C1] ? finish_task_switch+0x209/0x780 [ 391.751969][ C1] ? __switch_to_asm+0x3a/0x60 [ 391.756727][ C1] __getblk_gfp+0x30/0x7d0 [ 391.761144][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.767298][ C1] ? ext4_get_group_desc+0x2ad/0x320 [ 391.772595][ C1] __ext4_get_inode_loc+0x461/0xcd0 [ 391.777829][ C1] ? __kasan_check_read+0x11/0x20 [ 391.782877][ C1] ? ext4_get_inode_loc+0x130/0x130 [ 391.788102][ C1] ? __kasan_check_write+0x14/0x20 [ 391.793303][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 391.798002][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 391.803474][ C1] ? __sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 391.809648][ C1] ext4_reserve_inode_write+0x16c/0x320 [ 391.815202][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 391.820573][ C1] ? ext4_journal_check_start+0x172/0x240 [ 391.826306][ C1] ext4_dirty_inode+0xbd/0x100 [ 391.831068][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 391.836984][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 391.842009][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 391.847384][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 391.852841][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 391.858214][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 391.863595][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 391.869141][ C1] ? selinux_inode_free_security+0x210/0x210 [ 391.875118][ C1] ext4_initxattrs+0xa6/0x110 [ 391.879793][ C1] security_inode_init_security+0x254/0x370 [ 391.885685][ C1] ? posix_acl_create+0x118/0x440 [ 391.890797][ C1] ? ext4_init_security+0x40/0x40 [ 391.895822][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 391.902112][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 391.907342][ C1] ? __ext4_set_acl+0x600/0x600 [ 391.912199][ C1] ? prandom_u32+0x24d/0x290 [ 391.916795][ C1] ext4_init_security+0x34/0x40 [ 391.921666][ C1] __ext4_new_inode+0x2c41/0x3690 [ 391.926698][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 391.932428][ C1] ? dquot_initialize+0x20/0x20 [ 391.937282][ C1] ? ext4_lookup+0x427/0x840 [ 391.941890][ C1] ? ext4_add_entry+0xf40/0xf40 [ 391.946745][ C1] ? may_create+0x377/0x460 [ 391.951243][ C1] ext4_create+0x22a/0x460 [ 391.955665][ C1] ? ext4_lookup+0x840/0x840 [ 391.960398][ C1] ? selinux_inode_create+0x22/0x30 [ 391.965621][ C1] ? security_inode_create+0xbd/0x110 [ 391.971013][ C1] ? ext4_lookup+0x840/0x840 [ 391.975630][ C1] path_openat+0x11ae/0x2f10 [ 391.980233][ C1] ? do_filp_open+0x3e0/0x3e0 [ 391.984909][ C1] ? expand_files+0xde/0x8e0 [ 391.989543][ C1] do_filp_open+0x1b3/0x3e0 [ 391.994044][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 391.998645][ C1] do_sys_openat2+0x14c/0x7b0 [ 392.003324][ C1] ? __se_sys_futex+0x139/0x310 [ 392.008182][ C1] ? do_sys_open+0xe0/0xe0 [ 392.012601][ C1] ? __x64_sys_futex+0x100/0x100 [ 392.017568][ C1] __x64_sys_creat+0x8e/0xb0 [ 392.022159][ C1] x64_sys_call+0x94a/0x9a0 [ 392.026660][ C1] do_syscall_64+0x4c/0xa0 [ 392.031104][ C1] ? clear_bhb_loop+0x50/0xa0 [ 392.036302][ C1] ? clear_bhb_loop+0x50/0xa0 [ 392.040977][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 392.046960][ C1] RIP: 0033:0x7f6a596c0749 [ 392.051396][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.071018][ C1] RSP: 002b:00007ffef98980b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 392.079432][ C1] RAX: ffffffffffffffda RBX: 00007f6a59916fa0 RCX: 00007f6a596c0749 [ 392.087402][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 392.095379][ C1] RBP: 00007f6a59744f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.103369][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.111348][ C1] R13: 00007f6a59916fa0 R14: 00007f6a59916fa0 R15: 0000000000000002 [ 392.119327][ C1] [ 439.449661][ T31] INFO: task kworker/u4:3:309 blocked for more than 125 seconds. [ 439.457447][ T31] Not tainted syzkaller #0 [ 439.462766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.471612][ T31] task:kworker/u4:3 state:D stack:24864 pid: 309 ppid: 2 flags:0x00004000 [ 439.480880][ T31] Workqueue: events_unbound linkwatch_event [ 439.486840][ T31] Call Trace: [ 439.490264][ T31] [ 439.493222][ T31] __schedule+0xb6e/0x14c0 [ 439.497691][ T31] ? release_firmware_map_entry+0x190/0x190 [ 440.450796][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 440.456059][ T31] ? __kasan_check_write+0x14/0x20 [ 440.461419][ T31] ? kthread_data+0x50/0xc0 [ 440.465953][ T31] ? wq_worker_sleeping+0x60/0x200 [ 440.471109][ T31] schedule+0x11e/0x1e0 [ 440.475337][ T31] schedule_preempt_disabled+0x13/0x20 [ 440.480870][ T31] __mutex_lock+0x7b6/0x11b0 [ 440.485523][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 440.491228][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 440.498011][ T31] ? __kasan_check_write+0x14/0x20 [ 441.449910][ T31] ? __switch_to+0x51d/0xe20 [ 441.454590][ T31] __mutex_lock_slowpath+0xe/0x10 [ 441.459744][ T31] mutex_lock+0x100/0x1a0 [ 441.464225][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 441.470887][ T31] ? __schedule+0xb76/0x14c0 [ 441.475498][ T31] rtnl_lock+0x15/0x20 [ 441.479729][ T31] linkwatch_event+0xe/0x60 [ 441.484362][ T31] process_one_work+0x6be/0xba0 [ 441.489219][ T31] worker_thread+0xa59/0x1200 [ 441.493937][ T31] ? __kthread_parkme+0xac/0x200 [ 441.498904][ T31] kthread+0x411/0x500 [ 442.450064][ T31] ? worker_clr_flags+0x190/0x190 [ 442.455300][ T31] ? kthread_blkcg+0xd0/0xd0 [ 442.460363][ T31] ret_from_fork+0x1f/0x30 [ 442.465444][ T31] [ 442.468539][ T31] INFO: task syz-executor:395 blocked for more than 128 seconds. [ 442.476407][ T31] Not tainted syzkaller #0 [ 442.481481][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.490474][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 443.449794][ T31] Call Trace: [ 443.453143][ T31] [ 443.456122][ T31] __schedule+0xb6e/0x14c0 [ 443.460630][ T31] ? release_firmware_map_entry+0x190/0x190 [ 443.466570][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 443.472475][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 443.477965][ T31] schedule+0x11e/0x1e0 [ 443.482168][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 443.487827][ T31] ? synchronize_rcu+0x110/0x110 [ 443.493169][ T31] ? __kasan_slab_free+0x11/0x20 [ 443.498460][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 444.449939][ T31] ? rcu_exp_handler+0x370/0x370 [ 444.454955][ T31] ? kfree+0xc4/0x270 [ 444.458965][ T31] ? kfree_const+0x39/0x40 [ 444.463464][ T31] ? __kasan_check_write+0x14/0x20 [ 444.468893][ T31] ? kobject_put+0x1a8/0x270 [ 444.473615][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 444.479779][ T31] ? kobject_put+0x214/0x270 [ 444.484395][ T31] ? io_schedule+0xe0/0xe0 [ 444.488830][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 444.495067][ T31] ? __kasan_check_read+0x11/0x20 [ 445.449690][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 445.455651][ T31] ? linkwatch_fire_event+0x307/0x380 [ 445.461149][ T31] veth_newlink+0x9bc/0xda0 [ 445.465710][ T31] ? veth_validate+0x200/0x200 [ 445.470545][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 445.475704][ T31] ? veth_validate+0x200/0x200 [ 445.480603][ T31] rtnl_newlink+0x112d/0x17b0 [ 445.485312][ T31] ? rtnl_setlink+0x400/0x400 [ 445.490048][ T31] ? memcpy+0x56/0x70 [ 445.494065][ T31] ? __kasan_check_write+0x14/0x20 [ 445.499540][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 446.460344][ T31] ? ns_capable+0x8c/0xf0 [ 446.464922][ T31] ? netlink_net_capable+0x125/0x160 [ 446.470320][ T31] ? rtnl_setlink+0x400/0x400 [ 446.475020][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 446.480008][ T31] ? rtnetlink_bind+0x80/0x80 [ 446.484757][ T31] ? memcpy+0x56/0x70 [ 446.488757][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 446.494179][ T31] ? arch_stack_walk+0xee/0x140 [ 446.499266][ T31] ? avc_denied+0x1b0/0x1b0 [ 447.449782][ T31] ? stack_trace_save+0x98/0xe0 [ 447.454947][ T31] ? avc_has_perm+0x158/0x240 [ 447.460442][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 447.465839][ T31] ? do_syscall_64+0x4c/0xa0 [ 447.470474][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 447.475979][ T31] netlink_rcv_skb+0x1e0/0x430 [ 447.480790][ T31] ? rtnetlink_bind+0x80/0x80 [ 447.485484][ T31] ? netlink_ack+0xb60/0xb60 [ 447.490107][ T31] ? __netlink_lookup+0x387/0x3b0 [ 447.495239][ T31] rtnetlink_rcv+0x1c/0x20 [ 448.450044][ T31] netlink_unicast+0x876/0xa40 [ 448.455264][ T31] netlink_sendmsg+0x86a/0xb70 [ 448.460121][ T31] ? netlink_getsockopt+0x530/0x530 [ 448.465418][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 448.470946][ T31] __sys_sendto+0x423/0x580 [ 448.475480][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 448.481022][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 448.486786][ T31] __x64_sys_sendto+0xe5/0x100 [ 448.491618][ T31] x64_sys_call+0x178/0x9a0 [ 448.496147][ T31] do_syscall_64+0x4c/0xa0 [ 449.450072][ T31] ? clear_bhb_loop+0x50/0xa0 [ 449.454813][ T31] ? clear_bhb_loop+0x50/0xa0 [ 449.459529][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.465550][ T31] RIP: 0033:0x7f344c503583 [ 449.470011][ T31] RSP: 002b:00007fff32275ff8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 449.478440][ T31] RAX: ffffffffffffffda RBX: 00007f344d286620 RCX: 00007f344c503583 [ 449.486471][ T31] RDX: 000000000000002c RSI: 00007f344d286670 RDI: 0000000000000003 [ 449.494524][ T31] RBP: 0000000000000001 R08: 00007fff32276014 R09: 000000000000000c [ 450.449822][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 450.457872][ T31] R13: 0000000000000000 R14: 00007f344d286670 R15: 0000000000000000 [ 450.465982][ T31] [ 450.469108][ T31] NMI backtrace for cpu 0 [ 450.473464][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 450.480674][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.490725][ T31] Call Trace: [ 450.494023][ T31] [ 450.496947][ T31] __dump_stack+0x21/0x30 [ 450.501275][ T31] dump_stack_lvl+0xee/0x150 [ 450.505858][ T31] ? show_regs_print_info+0x20/0x20 [ 450.511131][ T31] dump_stack+0x15/0x20 [ 450.515315][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 450.520252][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 450.525792][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 450.532035][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 450.536968][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 450.543173][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 450.549239][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 450.555213][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 450.561234][ T31] watchdog+0xd64/0xea0 [ 450.565470][ T31] ? hungtask_pm_notify+0x50/0x50 [ 450.570489][ T31] ? __kasan_check_read+0x11/0x20 [ 450.575541][ T31] ? __kthread_parkme+0xac/0x200 [ 450.580472][ T31] ? preempt_count_add+0x90/0x1b0 [ 450.585493][ T31] kthread+0x411/0x500 [ 450.589651][ T31] ? hungtask_pm_notify+0x50/0x50 [ 450.594681][ T31] ? kthread_blkcg+0xd0/0xd0 [ 450.599277][ T31] ret_from_fork+0x1f/0x30 [ 450.603689][ T31] [ 450.606789][ T31] Sending NMI from CPU 0 to CPUs 1: [ 450.612034][ C1] NMI backtrace for cpu 1 [ 450.612044][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 450.612061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.612070][ C1] RIP: 0010:__ext4_journal_get_write_access+0x128/0x6c0 [ 450.612094][ C1] Code: 28 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 0b a3 d5 ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 ee a2 d5 ff 48 8b 1b 4d 8d b4 24 c8 03 00 00 4c [ 450.612108][ C1] RSP: 0018:ffffc90002d07100 EFLAGS: 00000246 [ 450.612123][ C1] RAX: 1ffff11021261187 RBX: ffff888109308c38 RCX: ffff8881125d8000 [ 450.612136][ C1] RDX: 0000000000000000 RSI: 0000000000000803 RDI: ffffffff85e27d53 [ 450.612147][ C1] RBP: ffffc90002d071d0 R08: ffff88810cd933f0 R09: 0000000000000001 [ 450.612158][ C1] R10: ffffed10219b2622 R11: 1ffff110219b2621 R12: ffff888112a0e000 [ 450.612171][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88810cd933f0 [ 450.612182][ C1] FS: 000055556ee9c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 450.612210][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.612220][ C1] CR2: 00007ffee2ec0958 CR3: 0000000128b85000 CR4: 00000000003506a0 [ 450.612234][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.612244][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.612253][ C1] Call Trace: [ 450.612258][ C1] [ 450.612265][ C1] ? __ext4_journal_ensure_credits+0x430/0x430 [ 450.612282][ C1] ? ext4_dirty_inode+0xd1/0x100 [ 450.612299][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 450.612315][ C1] ? __mark_inode_dirty+0x25c/0x9c0 [ 450.612334][ C1] ext4_xattr_block_set+0x140f/0x2cb0 [ 450.612357][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 450.612374][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 450.612392][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 450.612412][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 450.612431][ C1] ? selinux_inode_free_security+0x210/0x210 [ 450.612450][ C1] ext4_initxattrs+0xa6/0x110 [ 450.612465][ C1] security_inode_init_security+0x254/0x370 [ 450.612483][ C1] ? posix_acl_create+0x118/0x440 [ 450.612498][ C1] ? ext4_init_security+0x40/0x40 [ 450.612513][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 450.612531][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 450.612548][ C1] ? __ext4_set_acl+0x600/0x600 [ 450.612562][ C1] ? prandom_u32+0x24d/0x290 [ 450.612576][ C1] ext4_init_security+0x34/0x40 [ 450.612591][ C1] __ext4_new_inode+0x2c41/0x3690 [ 450.612608][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 450.612623][ C1] ? dquot_initialize+0x20/0x20 [ 450.612639][ C1] ? ext4_lookup+0x427/0x840 [ 450.612659][ C1] ? ext4_add_entry+0xf40/0xf40 [ 450.612673][ C1] ? may_create+0x377/0x460 [ 450.612687][ C1] ext4_create+0x22a/0x460 [ 450.612702][ C1] ? ext4_lookup+0x840/0x840 [ 450.612716][ C1] ? selinux_inode_create+0x22/0x30 [ 450.612732][ C1] ? security_inode_create+0xbd/0x110 [ 450.612748][ C1] ? ext4_lookup+0x840/0x840 [ 450.612762][ C1] path_openat+0x11ae/0x2f10 [ 450.612781][ C1] ? do_filp_open+0x3e0/0x3e0 [ 450.612797][ C1] ? expand_files+0xde/0x8e0 [ 450.612811][ C1] do_filp_open+0x1b3/0x3e0 [ 450.612826][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 450.612845][ C1] do_sys_openat2+0x14c/0x7b0 [ 450.612862][ C1] ? __se_sys_futex+0x139/0x310 [ 450.612879][ C1] ? do_sys_open+0xe0/0xe0 [ 450.612896][ C1] ? __x64_sys_futex+0x100/0x100 [ 450.612913][ C1] __x64_sys_creat+0x8e/0xb0 [ 450.612931][ C1] x64_sys_call+0x94a/0x9a0 [ 450.612946][ C1] do_syscall_64+0x4c/0xa0 [ 450.612963][ C1] ? clear_bhb_loop+0x50/0xa0 [ 450.612977][ C1] ? clear_bhb_loop+0x50/0xa0 [ 450.612991][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.613009][ C1] RIP: 0033:0x7f6a596c0749 [ 450.613023][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.613035][ C1] RSP: 002b:00007ffef98980b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 450.613050][ C1] RAX: ffffffffffffffda RBX: 00007f6a59916fa0 RCX: 00007f6a596c0749 [ 450.613061][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 450.613071][ C1] RBP: 00007f6a59744f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.613081][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.613090][ C1] R13: 00007f6a59916fa0 R14: 00007f6a59916fa0 R15: 0000000000000002 [ 450.613103][ C1] [ 473.449909][ T31] INFO: task kworker/u4:3:309 blocked for more than 159 seconds. [ 473.457834][ T31] Not tainted syzkaller #0 [ 473.462850][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.471592][ T31] task:kworker/u4:3 state:D stack:24864 pid: 309 ppid: 2 flags:0x00004000 [ 473.480834][ T31] Workqueue: events_unbound linkwatch_event [ 473.486762][ T31] Call Trace: [ 473.490076][ T31] [ 473.493021][ T31] __schedule+0xb6e/0x14c0 [ 473.497611][ T31] ? release_firmware_map_entry+0x190/0x190 [ 474.451126][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 474.456403][ T31] ? __kasan_check_write+0x14/0x20 [ 474.461600][ T31] ? kthread_data+0x50/0xc0 [ 474.466134][ T31] ? wq_worker_sleeping+0x60/0x200 [ 474.471326][ T31] schedule+0x11e/0x1e0 [ 474.475525][ T31] schedule_preempt_disabled+0x13/0x20 [ 474.481151][ T31] __mutex_lock+0x7b6/0x11b0 [ 474.485841][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 474.491512][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 474.498318][ T31] ? __kasan_check_write+0x14/0x20 [ 475.449742][ T31] ? __switch_to+0x51d/0xe20 [ 475.454398][ T31] __mutex_lock_slowpath+0xe/0x10 [ 475.459450][ T31] mutex_lock+0x100/0x1a0 [ 475.463830][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 475.470458][ T31] ? __schedule+0xb76/0x14c0 [ 475.475424][ T31] rtnl_lock+0x15/0x20 [ 475.479490][ T31] linkwatch_event+0xe/0x60 [ 475.484023][ T31] process_one_work+0x6be/0xba0 [ 475.488984][ T31] worker_thread+0xa59/0x1200 [ 475.493713][ T31] ? __kthread_parkme+0xac/0x200 [ 475.498667][ T31] kthread+0x411/0x500 [ 476.451225][ T31] ? worker_clr_flags+0x190/0x190 [ 476.456325][ T31] ? kthread_blkcg+0xd0/0xd0 [ 476.461357][ T31] ret_from_fork+0x1f/0x30 [ 476.465822][ T31] [ 476.468939][ T31] INFO: task syz-executor:395 blocked for more than 162 seconds. [ 476.476738][ T31] Not tainted syzkaller #0 [ 476.481720][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.490426][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 477.449652][ T31] Call Trace: [ 477.452997][ T31] [ 477.455971][ T31] __schedule+0xb6e/0x14c0 [ 477.460487][ T31] ? release_firmware_map_entry+0x190/0x190 [ 477.466458][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 477.472319][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 477.477808][ T31] schedule+0x11e/0x1e0 [ 477.482041][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 477.487702][ T31] ? synchronize_rcu+0x110/0x110 [ 477.492697][ T31] ? __kasan_slab_free+0x11/0x20 [ 477.497662][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 478.449868][ T31] ? rcu_exp_handler+0x370/0x370 [ 478.454892][ T31] ? kfree+0xc4/0x270 [ 478.458899][ T31] ? kfree_const+0x39/0x40 [ 478.463425][ T31] ? __kasan_check_write+0x14/0x20 [ 478.468577][ T31] ? kobject_put+0x1a8/0x270 [ 478.473206][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 478.479297][ T31] ? kobject_put+0x214/0x270 [ 478.483949][ T31] ? io_schedule+0xe0/0xe0 [ 478.488376][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 478.494529][ T31] ? __kasan_check_read+0x11/0x20 [ 478.499618][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 479.455681][ T31] ? linkwatch_fire_event+0x307/0x380 [ 479.461153][ T31] veth_newlink+0x9bc/0xda0 [ 479.465695][ T31] ? veth_validate+0x200/0x200 [ 479.470506][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 479.475553][ T31] ? veth_validate+0x200/0x200 [ 479.480409][ T31] rtnl_newlink+0x112d/0x17b0 [ 479.485131][ T31] ? rtnl_setlink+0x400/0x400 [ 479.489851][ T31] ? memcpy+0x56/0x70 [ 479.493868][ T31] ? __kasan_check_write+0x14/0x20 [ 479.498997][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 480.450235][ T31] ? ns_capable+0x8c/0xf0 [ 480.454615][ T31] ? netlink_net_capable+0x125/0x160 [ 480.460338][ T31] ? rtnl_setlink+0x400/0x400 [ 480.465065][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 480.470061][ T31] ? rtnetlink_bind+0x80/0x80 [ 480.474753][ T31] ? memcpy+0x56/0x70 [ 480.478730][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 480.484127][ T31] ? arch_stack_walk+0xee/0x140 [ 480.489003][ T31] ? avc_denied+0x1b0/0x1b0 [ 480.493539][ T31] ? stack_trace_save+0x98/0xe0 [ 480.498403][ T31] ? avc_has_perm+0x158/0x240 [ 481.449820][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 481.455251][ T31] ? do_syscall_64+0x4c/0xa0 [ 481.459924][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 481.465350][ T31] netlink_rcv_skb+0x1e0/0x430 [ 481.470176][ T31] ? rtnetlink_bind+0x80/0x80 [ 481.474959][ T31] ? netlink_ack+0xb60/0xb60 [ 481.479552][ T31] ? __netlink_lookup+0x387/0x3b0 [ 481.484719][ T31] rtnetlink_rcv+0x1c/0x20 [ 481.489133][ T31] netlink_unicast+0x876/0xa40 [ 481.493924][ T31] netlink_sendmsg+0x86a/0xb70 [ 481.498805][ T31] ? netlink_getsockopt+0x530/0x530 [ 482.450142][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 482.455950][ T31] __sys_sendto+0x423/0x580 [ 482.461182][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 482.466604][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 482.472407][ T31] __x64_sys_sendto+0xe5/0x100 [ 482.477198][ T31] x64_sys_call+0x178/0x9a0 [ 482.481745][ T31] do_syscall_64+0x4c/0xa0 [ 482.486179][ T31] ? clear_bhb_loop+0x50/0xa0 [ 482.490882][ T31] ? clear_bhb_loop+0x50/0xa0 [ 482.495578][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 483.450203][ T31] RIP: 0033:0x7f344c503583 [ 483.454674][ T31] RSP: 002b:00007fff32275ff8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 483.463140][ T31] RAX: ffffffffffffffda RBX: 00007f344d286620 RCX: 00007f344c503583 [ 483.471147][ T31] RDX: 000000000000002c RSI: 00007f344d286670 RDI: 0000000000000003 [ 483.479212][ T31] RBP: 0000000000000001 R08: 00007fff32276014 R09: 000000000000000c [ 483.487205][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 483.495239][ T31] R13: 0000000000000000 R14: 00007f344d286670 R15: 0000000000000000 [ 484.449804][ T31] [ 484.452890][ T31] NMI backtrace for cpu 0 [ 484.457221][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 484.464465][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.474621][ T31] Call Trace: [ 484.477911][ T31] [ 484.480841][ T31] __dump_stack+0x21/0x30 [ 484.485180][ T31] dump_stack_lvl+0xee/0x150 [ 484.489771][ T31] ? show_regs_print_info+0x20/0x20 [ 484.494978][ T31] dump_stack+0x15/0x20 [ 484.499133][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 484.504156][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 484.509706][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 484.515872][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 484.520812][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 484.526882][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 484.532950][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 484.538933][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 484.544826][ T31] watchdog+0xd64/0xea0 [ 484.548993][ T31] ? hungtask_pm_notify+0x50/0x50 [ 484.554019][ T31] ? __kasan_check_read+0x11/0x20 [ 484.559047][ T31] ? __kthread_parkme+0xac/0x200 [ 484.563992][ T31] ? preempt_count_add+0x90/0x1b0 [ 484.569045][ T31] kthread+0x411/0x500 [ 484.573116][ T31] ? hungtask_pm_notify+0x50/0x50 [ 484.578144][ T31] ? kthread_blkcg+0xd0/0xd0 [ 484.582764][ T31] ret_from_fork+0x1f/0x30 [ 484.587181][ T31] [ 484.590270][ T31] Sending NMI from CPU 0 to CPUs 1: [ 484.595595][ C1] NMI backtrace for cpu 1 [ 484.595605][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 484.595622][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.595631][ C1] RIP: 0010:bcmp+0x53/0x230 [ 484.595650][ C1] Code: 89 fe 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 6f 49 8d 46 07 48 89 c1 48 c1 e9 03 42 0f b6 0c 39 84 c9 0f 85 87 00 00 00 <4c> 8b 27 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a6 00 00 [ 484.595664][ C1] RSP: 0018:ffffc90002d07198 EFLAGS: 00000246 [ 484.595678][ C1] RAX: ffff888112cb2beb RBX: ffff88812d2307e4 RCX: 0000000000000000 [ 484.595691][ C1] RDX: 000000000000001a RSI: ffff88812d2307e4 RDI: ffff888112cb2be4 [ 484.595702][ C1] RBP: ffffc90002d071d0 R08: 0000000000000000 R09: ffffed10219b267f [ 484.595714][ C1] R10: ffffed10219b267f R11: 1ffff110219b267e R12: ffff888112cb2820 [ 484.595726][ C1] R13: dffffc0000000000 R14: ffff888112cb2be4 R15: dffffc0000000000 [ 484.595739][ C1] FS: 000055556ee9c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 484.595754][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.595765][ C1] CR2: 00007ffee2ec0958 CR3: 0000000128b85000 CR4: 00000000003506a0 [ 484.595780][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.595789][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.595799][ C1] Call Trace: [ 484.595804][ C1] [ 484.595810][ C1] ext4_xattr_block_set+0xf9b/0x2cb0 [ 484.595834][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 484.595852][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 484.595871][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 484.595891][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 484.595910][ C1] ? selinux_inode_free_security+0x210/0x210 [ 484.595931][ C1] ext4_initxattrs+0xa6/0x110 [ 484.595946][ C1] security_inode_init_security+0x254/0x370 [ 484.595964][ C1] ? posix_acl_create+0x118/0x440 [ 484.595980][ C1] ? ext4_init_security+0x40/0x40 [ 484.595995][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 484.596014][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 484.596032][ C1] ? __ext4_set_acl+0x600/0x600 [ 484.596046][ C1] ? prandom_u32+0x24d/0x290 [ 484.596061][ C1] ext4_init_security+0x34/0x40 [ 484.596076][ C1] __ext4_new_inode+0x2c41/0x3690 [ 484.596094][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 484.596110][ C1] ? dquot_initialize+0x20/0x20 [ 484.596126][ C1] ? ext4_lookup+0x427/0x840 [ 484.596142][ C1] ? ext4_add_entry+0xf40/0xf40 [ 484.596156][ C1] ? may_create+0x377/0x460 [ 484.596170][ C1] ext4_create+0x22a/0x460 [ 484.596187][ C1] ? ext4_lookup+0x840/0x840 [ 484.596201][ C1] ? selinux_inode_create+0x22/0x30 [ 484.596217][ C1] ? security_inode_create+0xbd/0x110 [ 484.596234][ C1] ? ext4_lookup+0x840/0x840 [ 484.596248][ C1] path_openat+0x11ae/0x2f10 [ 484.596270][ C1] ? do_filp_open+0x3e0/0x3e0 [ 484.596287][ C1] ? expand_files+0xde/0x8e0 [ 484.596301][ C1] do_filp_open+0x1b3/0x3e0 [ 484.596317][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 484.596338][ C1] do_sys_openat2+0x14c/0x7b0 [ 484.596364][ C1] ? __se_sys_futex+0x139/0x310 [ 484.596381][ C1] ? do_sys_open+0xe0/0xe0 [ 484.596397][ C1] ? __x64_sys_futex+0x100/0x100 [ 484.596416][ C1] __x64_sys_creat+0x8e/0xb0 [ 484.596434][ C1] x64_sys_call+0x94a/0x9a0 [ 484.596449][ C1] do_syscall_64+0x4c/0xa0 [ 484.596467][ C1] ? clear_bhb_loop+0x50/0xa0 [ 484.596481][ C1] ? clear_bhb_loop+0x50/0xa0 [ 484.596495][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.596514][ C1] RIP: 0033:0x7f6a596c0749 [ 484.596527][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.596540][ C1] RSP: 002b:00007ffef98980b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 484.596555][ C1] RAX: ffffffffffffffda RBX: 00007f6a59916fa0 RCX: 00007f6a596c0749 [ 484.596567][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 484.596577][ C1] RBP: 00007f6a59744f91 R08: 0000000000000000 R09: 0000000000000000 [ 484.596587][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.596597][ C1] R13: 00007f6a59916fa0 R14: 00007f6a59916fa0 R15: 0000000000000002 [ 484.596612][ C1] [ 507.449917][ T31] INFO: task kworker/u4:3:309 blocked for more than 193 seconds. [ 507.457693][ T31] Not tainted syzkaller #0 [ 507.462716][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.471424][ T31] task:kworker/u4:3 state:D stack:24864 pid: 309 ppid: 2 flags:0x00004000 [ 507.480786][ T31] Workqueue: events_unbound linkwatch_event [ 507.486706][ T31] Call Trace: [ 507.490021][ T31] [ 507.492974][ T31] __schedule+0xb6e/0x14c0 [ 507.497401][ T31] ? release_firmware_map_entry+0x190/0x190 [ 508.451154][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 508.456423][ T31] ? __kasan_check_write+0x14/0x20 [ 508.461705][ T31] ? kthread_data+0x50/0xc0 [ 508.466230][ T31] ? wq_worker_sleeping+0x60/0x200 [ 508.471374][ T31] schedule+0x11e/0x1e0 [ 508.475544][ T31] schedule_preempt_disabled+0x13/0x20 [ 508.481021][ T31] __mutex_lock+0x7b6/0x11b0 [ 508.485627][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 508.491348][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 508.498135][ T31] ? __kasan_check_write+0x14/0x20 [ 509.449974][ T31] ? __switch_to+0x51d/0xe20 [ 509.454637][ T31] __mutex_lock_slowpath+0xe/0x10 [ 509.459703][ T31] mutex_lock+0x100/0x1a0 [ 509.464111][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 509.470823][ T31] ? __schedule+0xb76/0x14c0 [ 509.475440][ T31] rtnl_lock+0x15/0x20 [ 509.479509][ T31] linkwatch_event+0xe/0x60 [ 509.484049][ T31] process_one_work+0x6be/0xba0 [ 509.488914][ T31] worker_thread+0xa59/0x1200 [ 509.493708][ T31] ? __kthread_parkme+0xac/0x200 [ 509.498662][ T31] kthread+0x411/0x500 [ 510.449781][ T31] ? worker_clr_flags+0x190/0x190 [ 510.454946][ T31] ? kthread_blkcg+0xd0/0xd0 [ 510.459669][ T31] ret_from_fork+0x1f/0x30 [ 510.464137][ T31] [ 510.467176][ T31] INFO: task syz-executor:395 blocked for more than 196 seconds. [ 510.474970][ T31] Not tainted syzkaller #0 [ 510.480008][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.488692][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 510.498373][ T31] Call Trace: [ 511.459625][ T31] [ 511.462613][ T31] __schedule+0xb6e/0x14c0 [ 511.467057][ T31] ? release_firmware_map_entry+0x190/0x190 [ 511.472987][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 511.478924][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 511.484437][ T31] schedule+0x11e/0x1e0 [ 511.488629][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 511.494309][ T31] ? synchronize_rcu+0x110/0x110 [ 511.499260][ T31] ? __kasan_slab_free+0x11/0x20 [ 512.450324][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 512.455970][ T31] ? rcu_exp_handler+0x370/0x370 [ 512.461010][ T31] ? kfree+0xc4/0x270 [ 512.465082][ T31] ? kfree_const+0x39/0x40 [ 512.469538][ T31] ? __kasan_check_write+0x14/0x20 [ 512.474705][ T31] ? kobject_put+0x1a8/0x270 [ 512.479293][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 512.485393][ T31] ? kobject_put+0x214/0x270 [ 512.490058][ T31] ? io_schedule+0xe0/0xe0 [ 512.494485][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 513.450173][ T31] ? __kasan_check_read+0x11/0x20 [ 513.455411][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 513.461377][ T31] ? linkwatch_fire_event+0x307/0x380 [ 513.466782][ T31] veth_newlink+0x9bc/0xda0 [ 513.471335][ T31] ? veth_validate+0x200/0x200 [ 513.476123][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 513.481186][ T31] ? veth_validate+0x200/0x200 [ 513.485966][ T31] rtnl_newlink+0x112d/0x17b0 [ 513.490859][ T31] ? rtnl_setlink+0x400/0x400 [ 513.495658][ T31] ? memcpy+0x56/0x70 [ 514.450052][ T31] ? __kasan_check_write+0x14/0x20 [ 514.455275][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 514.461990][ T31] ? ns_capable+0x8c/0xf0 [ 514.466408][ T31] ? netlink_net_capable+0x125/0x160 [ 514.471755][ T31] ? rtnl_setlink+0x400/0x400 [ 514.476536][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 514.481651][ T31] ? rtnetlink_bind+0x80/0x80 [ 514.486341][ T31] ? memcpy+0x56/0x70 [ 514.490373][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 514.495772][ T31] ? arch_stack_walk+0xee/0x140 [ 515.449736][ T31] ? avc_denied+0x1b0/0x1b0 [ 515.454350][ T31] ? stack_trace_save+0x98/0xe0 [ 515.459229][ T31] ? avc_has_perm+0x158/0x240 [ 515.464059][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 515.469446][ T31] ? do_syscall_64+0x4c/0xa0 [ 515.474076][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 515.479464][ T31] netlink_rcv_skb+0x1e0/0x430 [ 515.484269][ T31] ? rtnetlink_bind+0x80/0x80 [ 515.488979][ T31] ? netlink_ack+0xb60/0xb60 [ 515.493599][ T31] ? __netlink_lookup+0x387/0x3b0 [ 515.498638][ T31] rtnetlink_rcv+0x1c/0x20 [ 516.460273][ T31] netlink_unicast+0x876/0xa40 [ 516.465264][ T31] netlink_sendmsg+0x86a/0xb70 [ 516.470255][ T31] ? netlink_getsockopt+0x530/0x530 [ 516.475513][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 516.481493][ T31] __sys_sendto+0x423/0x580 [ 516.486127][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 516.491858][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 516.497627][ T31] __x64_sys_sendto+0xe5/0x100 [ 517.449697][ T31] x64_sys_call+0x178/0x9a0 [ 517.455065][ T31] do_syscall_64+0x4c/0xa0 [ 517.459534][ T31] ? clear_bhb_loop+0x50/0xa0 [ 517.472247][ T31] ? clear_bhb_loop+0x50/0xa0 [ 517.476954][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 517.482881][ T31] RIP: 0033:0x7f344c503583 [ 517.487333][ T31] RSP: 002b:00007fff32275ff8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 517.495797][ T31] RAX: ffffffffffffffda RBX: 00007f344d286620 RCX: 00007f344c503583 [ 518.461395][ T31] RDX: 000000000000002c RSI: 00007f344d286670 RDI: 0000000000000003 [ 518.469540][ T31] RBP: 0000000000000001 R08: 00007fff32276014 R09: 000000000000000c [ 518.477586][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 518.485621][ T31] R13: 0000000000000000 R14: 00007f344d286670 R15: 0000000000000000 [ 518.493665][ T31] [ 518.496706][ T31] INFO: task syz-executor:397 blocked for more than 142 seconds. [ 519.449755][ T31] Not tainted syzkaller #0 [ 519.454826][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.463544][ T31] task:syz-executor state:D stack:28000 pid: 397 ppid: 1 flags:0x00004004 [ 519.472810][ T31] Call Trace: [ 519.476131][ T31] [ 519.479074][ T31] __schedule+0xb6e/0x14c0 [ 519.483519][ T31] ? release_firmware_map_entry+0x190/0x190 [ 519.489438][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 519.494838][ T31] ? __kasan_check_write+0x14/0x20 [ 520.449892][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 520.455685][ T31] schedule+0x11e/0x1e0 [ 520.460430][ T31] schedule_preempt_disabled+0x13/0x20 [ 520.465935][ T31] __mutex_lock+0x7b6/0x11b0 [ 520.470614][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 520.477397][ T31] ? selinux_capable+0x29c/0x380 [ 520.482400][ T31] ? selinux_capset+0xf0/0xf0 [ 520.487106][ T31] ? cap_capable+0x1aa/0x230 [ 520.491838][ T31] __mutex_lock_slowpath+0xe/0x10 [ 520.496974][ T31] mutex_lock+0x100/0x1a0 [ 521.450033][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 521.456685][ T31] ? ns_capable+0x8c/0xf0 [ 521.461090][ T31] ? netlink_net_capable+0x125/0x160 [ 521.466465][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 521.471476][ T31] ? rtnetlink_bind+0x80/0x80 [ 521.476258][ T31] ? memcpy+0x56/0x70 [ 521.480284][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 521.485670][ T31] ? arch_stack_walk+0xee/0x140 [ 521.490577][ T31] ? avc_denied+0x1b0/0x1b0 [ 521.495091][ T31] ? stack_trace_save+0x98/0xe0 [ 522.449856][ T31] ? avc_has_perm+0x158/0x240 [ 522.454669][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 522.460215][ T31] ? do_syscall_64+0x4c/0xa0 [ 522.464848][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 522.470292][ T31] netlink_rcv_skb+0x1e0/0x430 [ 522.475092][ T31] ? rtnetlink_bind+0x80/0x80 [ 522.479825][ T31] ? netlink_ack+0xb60/0xb60 [ 522.484452][ T31] ? __netlink_lookup+0x387/0x3b0 [ 522.489497][ T31] rtnetlink_rcv+0x1c/0x20 [ 522.493953][ T31] netlink_unicast+0x876/0xa40 [ 522.498732][ T31] netlink_sendmsg+0x86a/0xb70 [ 523.449807][ T31] ? netlink_getsockopt+0x530/0x530 [ 523.455080][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 523.460712][ T31] __sys_sendto+0x423/0x580 [ 523.465238][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 523.470732][ T31] __x64_sys_sendto+0xe5/0x100 [ 523.475536][ T31] x64_sys_call+0x178/0x9a0 [ 523.480120][ T31] do_syscall_64+0x4c/0xa0 [ 523.484548][ T31] ? clear_bhb_loop+0x50/0xa0 [ 523.489216][ T31] ? clear_bhb_loop+0x50/0xa0 [ 523.493928][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.450541][ T31] RIP: 0033:0x7f8172a1c583 [ 524.455047][ T31] RSP: 002b:00007ffc62ace0d8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 524.463618][ T31] RAX: ffffffffffffffda RBX: 00007f817379f620 RCX: 00007f8172a1c583 [ 524.471663][ T31] RDX: 0000000000000028 RSI: 00007f817379f670 RDI: 0000000000000003 [ 524.479705][ T31] RBP: 0000000000000001 R08: 00007ffc62ace0f4 R09: 000000000000000c [ 524.487747][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 524.495776][ T31] R13: 0000000000000000 R14: 00007f817379f670 R15: 0000000000000000 [ 525.459617][ T31] [ 525.462863][ T31] NMI backtrace for cpu 0 [ 525.467200][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 525.474383][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.484456][ T31] Call Trace: [ 525.487727][ T31] [ 525.490654][ T31] __dump_stack+0x21/0x30 [ 525.494983][ T31] dump_stack_lvl+0xee/0x150 [ 525.499572][ T31] ? show_regs_print_info+0x20/0x20 [ 525.504791][ T31] dump_stack+0x15/0x20 [ 525.508956][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 525.513902][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 525.519451][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 525.525608][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 525.530549][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 525.536621][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 525.542692][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 525.548673][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 525.554570][ T31] watchdog+0xd64/0xea0 [ 525.558734][ T31] ? hungtask_pm_notify+0x50/0x50 [ 525.563759][ T31] ? __kasan_check_read+0x11/0x20 [ 525.568783][ T31] ? __kthread_parkme+0xac/0x200 [ 525.573722][ T31] ? preempt_count_add+0x90/0x1b0 [ 525.578757][ T31] kthread+0x411/0x500 [ 525.582824][ T31] ? hungtask_pm_notify+0x50/0x50 [ 525.587849][ T31] ? kthread_blkcg+0xd0/0xd0 [ 525.592444][ T31] ret_from_fork+0x1f/0x30 [ 525.596881][ T31] [ 525.599994][ T31] Sending NMI from CPU 0 to CPUs 1: [ 525.605388][ C1] NMI backtrace for cpu 1 [ 525.605398][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 525.605415][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.605424][ C1] RIP: 0010:mark_page_accessed+0x136/0x8d0 [ 525.605446][ C1] Code: 89 15 00 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 8b 87 15 00 4d 8b 27 41 83 e4 02 31 ff 4c 89 e6 e8 ea 09 d7 ff <4c> 89 eb 48 8b 44 24 10 42 80 3c 28 00 74 08 4c 89 f7 e8 63 87 15 [ 525.605459][ C1] RSP: 0018:ffffc90002d06c60 EFLAGS: 00000293 [ 525.605474][ C1] RAX: ffffffff8191b936 RBX: ffffea0004b47e08 RCX: ffff8881125d8000 [ 525.605487][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 525.605497][ C1] RBP: ffffc90002d06d10 R08: dffffc0000000000 R09: fffff94000969179 [ 525.605509][ C1] R10: fffff94000969179 R11: 1ffffd4000969178 R12: 0000000000000002 [ 525.605520][ C1] R13: dffffc0000000000 R14: ffffea0004b48bc8 R15: ffffea0004b48bc0 [ 525.605533][ C1] FS: 000055556ee9c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 525.605547][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.605559][ C1] CR2: 00007fe4bc463000 CR3: 0000000128b85000 CR4: 00000000003506a0 [ 525.605573][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 525.605583][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 525.605593][ C1] Call Trace: [ 525.605597][ C1] [ 525.605603][ C1] ? __activate_page+0xd40/0xd40 [ 525.605618][ C1] ? __kasan_check_read+0x11/0x20 [ 525.605636][ C1] ? cpupri_find+0xfc/0x280 [ 525.605653][ C1] __find_get_block+0xafd/0xee0 [ 525.605673][ C1] ? write_boundary_block+0x140/0x140 [ 525.605691][ C1] ? find_lock_lowest_rq+0x97/0x460 [ 525.605711][ C1] __getblk_gfp+0x30/0x7d0 [ 525.605728][ C1] ? ext4_get_group_desc+0x2ad/0x320 [ 525.605746][ C1] __ext4_get_inode_loc+0x461/0xcd0 [ 525.605762][ C1] ? __kasan_check_read+0x11/0x20 [ 525.605780][ C1] ? ext4_get_inode_loc+0x130/0x130 [ 525.605797][ C1] ? __kasan_check_write+0x14/0x20 [ 525.605813][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 525.605830][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 525.605848][ C1] ext4_reserve_inode_write+0x16c/0x320 [ 525.605866][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 525.605888][ C1] ? ext4_journal_check_start+0x172/0x240 [ 525.605906][ C1] ext4_dirty_inode+0xbd/0x100 [ 525.605922][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 525.605939][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 525.605957][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 525.605979][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 525.605997][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 525.606015][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 525.606035][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 525.606054][ C1] ? selinux_inode_free_security+0x210/0x210 [ 525.606075][ C1] ext4_initxattrs+0xa6/0x110 [ 525.606089][ C1] security_inode_init_security+0x254/0x370 [ 525.606108][ C1] ? posix_acl_create+0x118/0x440 [ 525.606123][ C1] ? ext4_init_security+0x40/0x40 [ 525.606138][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 525.606157][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 525.606174][ C1] ? __ext4_set_acl+0x600/0x600 [ 525.606188][ C1] ? prandom_u32+0x24d/0x290 [ 525.606204][ C1] ext4_init_security+0x34/0x40 [ 525.606218][ C1] __ext4_new_inode+0x2c41/0x3690 [ 525.606236][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 525.606252][ C1] ? dquot_initialize+0x20/0x20 [ 525.606268][ C1] ? ext4_lookup+0x427/0x840 [ 525.606284][ C1] ? ext4_add_entry+0xf40/0xf40 [ 525.606297][ C1] ? may_create+0x377/0x460 [ 525.606312][ C1] ext4_create+0x22a/0x460 [ 525.606328][ C1] ? ext4_lookup+0x840/0x840 [ 525.606342][ C1] ? selinux_inode_create+0x22/0x30 [ 525.606358][ C1] ? security_inode_create+0xbd/0x110 [ 525.606375][ C1] ? ext4_lookup+0x840/0x840 [ 525.606389][ C1] path_openat+0x11ae/0x2f10 [ 525.606410][ C1] ? do_filp_open+0x3e0/0x3e0 [ 525.606425][ C1] ? expand_files+0xde/0x8e0 [ 525.606440][ C1] do_filp_open+0x1b3/0x3e0 [ 525.606455][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 525.606475][ C1] do_sys_openat2+0x14c/0x7b0 [ 525.606494][ C1] ? __se_sys_futex+0x139/0x310 [ 525.606511][ C1] ? do_sys_open+0xe0/0xe0 [ 525.606527][ C1] ? __x64_sys_futex+0x100/0x100 [ 525.606546][ C1] __x64_sys_creat+0x8e/0xb0 [ 525.606564][ C1] x64_sys_call+0x94a/0x9a0 [ 525.606579][ C1] do_syscall_64+0x4c/0xa0 [ 525.606595][ C1] ? clear_bhb_loop+0x50/0xa0 [ 525.606609][ C1] ? clear_bhb_loop+0x50/0xa0 [ 525.606624][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.606642][ C1] RIP: 0033:0x7f6a596c0749 [ 525.606656][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.606668][ C1] RSP: 002b:00007ffef98980b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 525.606684][ C1] RAX: ffffffffffffffda RBX: 00007f6a59916fa0 RCX: 00007f6a596c0749 [ 525.606696][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 525.606706][ C1] RBP: 00007f6a59744f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.606716][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.606726][ C1] R13: 00007f6a59916fa0 R14: 00007f6a59916fa0 R15: 0000000000000002 [ 525.606739][ C1] [ 548.451600][ T31] INFO: task kworker/u4:3:309 blocked for more than 234 seconds. [ 548.459479][ T31] Not tainted syzkaller #0 [ 548.464489][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.473292][ T31] task:kworker/u4:3 state:D stack:24864 pid: 309 ppid: 2 flags:0x00004000 [ 548.482536][ T31] Workqueue: events_unbound linkwatch_event [ 548.488454][ T31] Call Trace: [ 548.491798][ T31] [ 548.494770][ T31] __schedule+0xb6e/0x14c0 [ 548.499182][ T31] ? release_firmware_map_entry+0x190/0x190 [ 549.459958][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 549.465216][ T31] ? __kasan_check_write+0x14/0x20 [ 549.470505][ T31] ? kthread_data+0x50/0xc0 [ 549.475031][ T31] ? wq_worker_sleeping+0x60/0x200 [ 549.480194][ T31] schedule+0x11e/0x1e0 [ 549.484383][ T31] schedule_preempt_disabled+0x13/0x20 [ 549.490023][ T31] __mutex_lock+0x7b6/0x11b0 [ 549.494814][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 550.449869][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 550.456759][ T31] ? __kasan_check_write+0x14/0x20 [ 550.461980][ T31] ? __switch_to+0x51d/0xe20 [ 550.466745][ T31] __mutex_lock_slowpath+0xe/0x10 [ 550.471844][ T31] mutex_lock+0x100/0x1a0 [ 550.476197][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 550.482828][ T31] ? __schedule+0xb76/0x14c0 [ 550.487473][ T31] rtnl_lock+0x15/0x20 [ 550.491583][ T31] linkwatch_event+0xe/0x60 [ 550.496104][ T31] process_one_work+0x6be/0xba0 [ 551.449730][ T31] worker_thread+0xa59/0x1200 [ 551.454488][ T31] ? __kthread_parkme+0xac/0x200 [ 551.459440][ T31] kthread+0x411/0x500 [ 551.463609][ T31] ? worker_clr_flags+0x190/0x190 [ 551.468663][ T31] ? kthread_blkcg+0xd0/0xd0 [ 551.473339][ T31] ret_from_fork+0x1f/0x30 [ 551.477777][ T31] [ 551.480863][ T31] INFO: task syz-executor:395 blocked for more than 237 seconds. [ 551.488629][ T31] Not tainted syzkaller #0 [ 551.493594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.449993][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 552.459621][ T31] Call Trace: [ 552.462985][ T31] [ 552.465938][ T31] __schedule+0xb6e/0x14c0 [ 552.470402][ T31] ? release_firmware_map_entry+0x190/0x190 [ 552.476401][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 552.482249][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 552.487725][ T31] schedule+0x11e/0x1e0 [ 552.491915][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 552.497571][ T31] ? synchronize_rcu+0x110/0x110 [ 553.449689][ T31] ? __kasan_slab_free+0x11/0x20 [ 553.454691][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 553.460280][ T31] ? rcu_exp_handler+0x370/0x370 [ 553.465234][ T31] ? kfree+0xc4/0x270 [ 553.469235][ T31] ? kfree_const+0x39/0x40 [ 553.473697][ T31] ? __kasan_check_write+0x14/0x20 [ 553.478839][ T31] ? kobject_put+0x1a8/0x270 [ 553.483489][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 553.489602][ T31] ? kobject_put+0x214/0x270 [ 553.494213][ T31] ? io_schedule+0xe0/0xe0 [ 553.498621][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 554.449997][ T31] ? __kasan_check_read+0x11/0x20 [ 554.455179][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 554.461154][ T31] ? linkwatch_fire_event+0x307/0x380 [ 554.466674][ T31] veth_newlink+0x9bc/0xda0 [ 554.471287][ T31] ? veth_validate+0x200/0x200 [ 554.476073][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 554.481130][ T31] ? veth_validate+0x200/0x200 [ 554.485906][ T31] rtnl_newlink+0x112d/0x17b0 [ 554.490704][ T31] ? rtnl_setlink+0x400/0x400 [ 554.495407][ T31] ? memcpy+0x56/0x70 [ 554.499392][ T31] ? __kasan_check_write+0x14/0x20 [ 555.460039][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 555.466812][ T31] ? ns_capable+0x8c/0xf0 [ 555.471195][ T31] ? netlink_net_capable+0x125/0x160 [ 555.476495][ T31] ? rtnl_setlink+0x400/0x400 [ 555.481209][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 555.486166][ T31] ? rtnetlink_bind+0x80/0x80 [ 555.491000][ T31] ? memcpy+0x56/0x70 [ 555.495024][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 556.449939][ T31] ? arch_stack_walk+0xee/0x140 [ 556.454917][ T31] ? avc_denied+0x1b0/0x1b0 [ 556.459455][ T31] ? stack_trace_save+0x98/0xe0 [ 556.464341][ T31] ? avc_has_perm+0x158/0x240 [ 556.469032][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 556.474431][ T31] ? do_syscall_64+0x4c/0xa0 [ 556.479042][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 556.484607][ T31] netlink_rcv_skb+0x1e0/0x430 [ 556.489418][ T31] ? rtnetlink_bind+0x80/0x80 [ 556.494267][ T31] ? netlink_ack+0xb60/0xb60 [ 556.498887][ T31] ? __netlink_lookup+0x387/0x3b0 [ 557.461538][ T31] rtnetlink_rcv+0x1c/0x20 [ 557.466016][ T31] netlink_unicast+0x876/0xa40 [ 557.471039][ T31] netlink_sendmsg+0x86a/0xb70 [ 557.475924][ T31] ? netlink_getsockopt+0x530/0x530 [ 557.481457][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 557.486936][ T31] __sys_sendto+0x423/0x580 [ 557.491481][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 557.496867][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 558.449937][ T31] __x64_sys_sendto+0xe5/0x100 [ 558.454764][ T31] x64_sys_call+0x178/0x9a0 [ 558.459393][ T31] do_syscall_64+0x4c/0xa0 [ 558.463859][ T31] ? clear_bhb_loop+0x50/0xa0 [ 558.468553][ T31] ? clear_bhb_loop+0x50/0xa0 [ 558.473274][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 558.479187][ T31] RIP: 0033:0x7f344c503583 [ 558.483638][ T31] RSP: 002b:00007fff32275ff8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 558.492194][ T31] RAX: ffffffffffffffda RBX: 00007f344d286620 RCX: 00007f344c503583 [ 559.450247][ T31] RDX: 000000000000002c RSI: 00007f344d286670 RDI: 0000000000000003 [ 559.458272][ T31] RBP: 0000000000000001 R08: 00007fff32276014 R09: 000000000000000c [ 559.466410][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 559.474458][ T31] R13: 0000000000000000 R14: 00007f344d286670 R15: 0000000000000000 [ 559.482500][ T31] [ 559.485552][ T31] INFO: task syz-executor:397 blocked for more than 183 seconds. [ 559.493301][ T31] Not tainted syzkaller #0 [ 559.498241][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.460619][ T31] task:syz-executor state:D stack:28000 pid: 397 ppid: 1 flags:0x00004004 [ 560.469920][ T31] Call Trace: [ 560.473216][ T31] [ 560.476151][ T31] __schedule+0xb6e/0x14c0 [ 560.480628][ T31] ? release_firmware_map_entry+0x190/0x190 [ 560.486541][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 560.491692][ T31] ? __kasan_check_write+0x14/0x20 [ 560.496830][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 561.450145][ T31] schedule+0x11e/0x1e0 [ 561.454360][ T31] schedule_preempt_disabled+0x13/0x20 [ 561.459909][ T31] __mutex_lock+0x7b6/0x11b0 [ 561.464528][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 561.471391][ T31] ? selinux_capable+0x29c/0x380 [ 561.476378][ T31] ? selinux_capset+0xf0/0xf0 [ 561.481281][ T31] ? cap_capable+0x1aa/0x230 [ 561.485890][ T31] __mutex_lock_slowpath+0xe/0x10 [ 561.490972][ T31] mutex_lock+0x100/0x1a0 [ 561.495409][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 562.450224][ T31] ? ns_capable+0x8c/0xf0 [ 562.454663][ T31] ? netlink_net_capable+0x125/0x160 [ 562.460051][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 562.465032][ T31] ? rtnetlink_bind+0x80/0x80 [ 562.469743][ T31] ? memcpy+0x56/0x70 [ 562.473742][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 562.479113][ T31] ? arch_stack_walk+0xee/0x140 [ 562.483990][ T31] ? avc_denied+0x1b0/0x1b0 [ 562.488514][ T31] ? stack_trace_save+0x98/0xe0 [ 562.493404][ T31] ? avc_has_perm+0x158/0x240 [ 562.498185][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 563.449679][ T31] ? do_syscall_64+0x4c/0xa0 [ 563.454335][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 563.459770][ T31] netlink_rcv_skb+0x1e0/0x430 [ 563.464865][ T31] ? rtnetlink_bind+0x80/0x80 [ 563.469807][ T31] ? netlink_ack+0xb60/0xb60 [ 563.474496][ T31] ? __netlink_lookup+0x387/0x3b0 [ 563.479621][ T31] rtnetlink_rcv+0x1c/0x20 [ 563.484067][ T31] netlink_unicast+0x876/0xa40 [ 563.488847][ T31] netlink_sendmsg+0x86a/0xb70 [ 563.493671][ T31] ? netlink_getsockopt+0x530/0x530 [ 563.498893][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 564.459860][ T31] __sys_sendto+0x423/0x580 [ 564.464707][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 564.470157][ T31] __x64_sys_sendto+0xe5/0x100 [ 564.475028][ T31] x64_sys_call+0x178/0x9a0 [ 564.479774][ T31] do_syscall_64+0x4c/0xa0 [ 564.484208][ T31] ? clear_bhb_loop+0x50/0xa0 [ 564.488897][ T31] ? clear_bhb_loop+0x50/0xa0 [ 564.493610][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.449684][ T31] RIP: 0033:0x7f8172a1c583 [ 565.454160][ T31] RSP: 002b:00007ffc62ace0d8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 565.462623][ T31] RAX: ffffffffffffffda RBX: 00007f817379f620 RCX: 00007f8172a1c583 [ 565.470632][ T31] RDX: 0000000000000028 RSI: 00007f817379f670 RDI: 0000000000000003 [ 565.478622][ T31] RBP: 0000000000000001 R08: 00007ffc62ace0f4 R09: 000000000000000c [ 565.486680][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 565.494690][ T31] R13: 0000000000000000 R14: 00007f817379f670 R15: 0000000000000000 [ 566.450270][ T31] [ 566.453393][ T31] NMI backtrace for cpu 0 [ 566.457731][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 566.464924][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.474972][ T31] Call Trace: [ 566.478243][ T31] [ 566.481164][ T31] __dump_stack+0x21/0x30 [ 566.485505][ T31] dump_stack_lvl+0xee/0x150 [ 566.490121][ T31] ? show_regs_print_info+0x20/0x20 [ 566.495330][ T31] dump_stack+0x15/0x20 [ 566.499491][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 566.504427][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 566.509975][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 566.516134][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 566.521078][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 566.527160][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 566.533244][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 566.539236][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 566.545142][ T31] watchdog+0xd64/0xea0 [ 566.549300][ T31] ? hungtask_pm_notify+0x50/0x50 [ 566.554317][ T31] ? __kasan_check_read+0x11/0x20 [ 566.559343][ T31] ? __kthread_parkme+0xac/0x200 [ 566.564275][ T31] ? preempt_count_add+0x90/0x1b0 [ 566.569295][ T31] kthread+0x411/0x500 [ 566.573375][ T31] ? hungtask_pm_notify+0x50/0x50 [ 566.578393][ T31] ? kthread_blkcg+0xd0/0xd0 [ 566.583066][ T31] ret_from_fork+0x1f/0x30 [ 566.587482][ T31] [ 566.590585][ T31] Sending NMI from CPU 0 to CPUs 1: [ 566.595798][ C1] NMI backtrace for cpu 1 [ 566.595809][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 566.595826][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.595835][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 566.595863][ C1] Code: 89 fc ff 48 8b 75 08 48 c7 c7 80 48 63 85 e8 b7 89 fc ff e8 52 fa fc ff eb a7 e8 fb f8 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 48 89 e5 48 89 fe 48 c7 c7 00 48 63 85 e8 cd fe ff ff 5d c3 00 [ 566.595876][ C1] RSP: 0018:ffffc90002d06d18 EFLAGS: 00000082 [ 566.595891][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b794045b2d376a00 [ 566.595902][ C1] RDX: 0000000000000000 RSI: ffffffff854bda20 RDI: ffffffff854bda00 [ 566.595914][ C1] RBP: ffffc90002d06e20 R08: dffffc0000000000 R09: ffffc90002d06fa0 [ 566.595931][ C1] R10: fffff520005a0df9 R11: 1ffff920005a0df4 R12: ffff88810cd930a8 [ 566.595943][ C1] R13: ffff88810cd930a8 R14: 00000000000352d0 R15: 0000000000000400 [ 566.595955][ C1] FS: 000055556ee9c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 566.595969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.595981][ C1] CR2: 00007fe4bc463000 CR3: 0000000128b85000 CR4: 00000000003506a0 [ 566.595996][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 566.596005][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 566.596015][ C1] Call Trace: [ 566.596020][ C1] [ 566.596024][ C1] ? __find_get_block+0xa35/0xee0 [ 566.596045][ C1] ? write_boundary_block+0x140/0x140 [ 566.596069][ C1] ? __kasan_check_write+0x14/0x20 [ 566.596087][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 566.596105][ C1] __getblk_gfp+0x30/0x7d0 [ 566.596123][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 566.596141][ C1] ? ext4_get_group_desc+0x2ad/0x320 [ 566.596159][ C1] __ext4_get_inode_loc+0x461/0xcd0 [ 566.596176][ C1] ? __kasan_check_read+0x11/0x20 [ 566.596194][ C1] ? ext4_get_inode_loc+0x130/0x130 [ 566.596211][ C1] ? __kasan_check_write+0x14/0x20 [ 566.596227][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 566.596243][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 566.596261][ C1] ext4_reserve_inode_write+0x16c/0x320 [ 566.596279][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 566.596294][ C1] ? ext4_journal_check_start+0x172/0x240 [ 566.596313][ C1] ext4_dirty_inode+0xbd/0x100 [ 566.596329][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 566.596346][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 566.596366][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 566.596390][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 566.596407][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 566.596426][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 566.596446][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 566.596465][ C1] ? selinux_inode_free_security+0x210/0x210 [ 566.596485][ C1] ext4_initxattrs+0xa6/0x110 [ 566.596500][ C1] security_inode_init_security+0x254/0x370 [ 566.596519][ C1] ? posix_acl_create+0x118/0x440 [ 566.596535][ C1] ? ext4_init_security+0x40/0x40 [ 566.596550][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 566.596580][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 566.596597][ C1] ? __ext4_set_acl+0x600/0x600 [ 566.596611][ C1] ? prandom_u32+0x24d/0x290 [ 566.596626][ C1] ext4_init_security+0x34/0x40 [ 566.596640][ C1] __ext4_new_inode+0x2c41/0x3690 [ 566.596658][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 566.596673][ C1] ? dquot_initialize+0x20/0x20 [ 566.596689][ C1] ? ext4_lookup+0x427/0x840 [ 566.596704][ C1] ? ext4_add_entry+0xf40/0xf40 [ 566.596717][ C1] ? may_create+0x377/0x460 [ 566.596731][ C1] ext4_create+0x22a/0x460 [ 566.596747][ C1] ? ext4_lookup+0x840/0x840 [ 566.596761][ C1] ? selinux_inode_create+0x22/0x30 [ 566.596786][ C1] ? security_inode_create+0xbd/0x110 [ 566.596803][ C1] ? ext4_lookup+0x840/0x840 [ 566.596816][ C1] path_openat+0x11ae/0x2f10 [ 566.596837][ C1] ? do_filp_open+0x3e0/0x3e0 [ 566.596853][ C1] ? expand_files+0xde/0x8e0 [ 566.596872][ C1] do_filp_open+0x1b3/0x3e0 [ 566.596887][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 566.596907][ C1] do_sys_openat2+0x14c/0x7b0 [ 566.596925][ C1] ? __se_sys_futex+0x139/0x310 [ 566.596943][ C1] ? do_sys_open+0xe0/0xe0 [ 566.596960][ C1] ? __x64_sys_futex+0x100/0x100 [ 566.596978][ C1] __x64_sys_creat+0x8e/0xb0 [ 566.596995][ C1] x64_sys_call+0x94a/0x9a0 [ 566.597010][ C1] do_syscall_64+0x4c/0xa0 [ 566.597025][ C1] ? clear_bhb_loop+0x50/0xa0 [ 566.597039][ C1] ? clear_bhb_loop+0x50/0xa0 [ 566.597052][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 566.597069][ C1] RIP: 0033:0x7f6a596c0749 [ 566.597083][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.597095][ C1] RSP: 002b:00007ffef98980b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 566.597111][ C1] RAX: ffffffffffffffda RBX: 00007f6a59916fa0 RCX: 00007f6a596c0749 [ 566.597123][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 566.597133][ C1] RBP: 00007f6a59744f91 R08: 0000000000000000 R09: 0000000000000000 [ 566.597142][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.597151][ C1] R13: 00007f6a59916fa0 R14: 00007f6a59916fa0 R15: 0000000000000002 [ 566.597164][ C1]