Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. 2025/12/12 19:52:16 parsed 1 programs [ 272.407678][ T30] audit: type=1400 audit(1765569136.046:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 272.411126][ T30] audit: type=1400 audit(1765569136.046:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 273.016954][ T30] audit: type=1400 audit(1765569136.656:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 273.018340][ T291] cgroup: Unknown subsys name 'net' [ 273.039624][ T30] audit: type=1400 audit(1765569136.656:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 273.066907][ T30] audit: type=1400 audit(1765569136.686:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 273.067096][ T291] cgroup: Unknown subsys name 'devices' [ 273.301292][ T291] cgroup: Unknown subsys name 'hugetlb' [ 273.306885][ T291] cgroup: Unknown subsys name 'rlimit' [ 273.569199][ T30] audit: type=1400 audit(1765569137.206:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.592390][ T30] audit: type=1400 audit(1765569137.216:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.612799][ T30] audit: type=1400 audit(1765569137.216:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.618424][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 273.641615][ T30] audit: type=1400 audit(1765569137.216:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 273.661840][ T30] audit: type=1400 audit(1765569137.216:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 273.712267][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 274.164898][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 274.391391][ T313] syz-executor (313) used greatest stack depth: 21920 bytes left [ 274.713157][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.720246][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.727605][ T343] device bridge_slave_0 entered promiscuous mode [ 274.734859][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.741999][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.749302][ T343] device bridge_slave_1 entered promiscuous mode [ 274.798946][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.806001][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.813305][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.820329][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.840524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.848189][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.855685][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.864592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.872787][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.879805][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.888306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.896666][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.903727][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.915201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.924309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.944114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.954964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.967368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.974898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.983235][ T343] device veth0_vlan entered promiscuous mode [ 274.998410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.007211][ T343] device veth1_macvtap entered promiscuous mode [ 275.019228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.028932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.066566][ T343] syz-executor (343) used greatest stack depth: 21312 bytes left 2025/12/12 19:52:18 executed programs: 0 [ 275.291006][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.298051][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.305449][ T362] device bridge_slave_0 entered promiscuous mode [ 275.317393][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.324469][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.331908][ T362] device bridge_slave_1 entered promiscuous mode [ 275.389457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.396835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.413663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.422399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.432080][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.439110][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.447009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.455552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.463946][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.470987][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.478309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.486400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.494385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.509771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.521771][ T362] device veth0_vlan entered promiscuous mode [ 275.527953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.536025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.543574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.554440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.564248][ T362] device veth1_macvtap entered promiscuous mode [ 275.573080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.582587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.607399][ T373] loop2: detected capacity change from 0 to 1024 [ 275.620059][ T373] ======================================================= [ 275.620059][ T373] WARNING: The mand mount option has been deprecated and [ 275.620059][ T373] and is ignored by this kernel. Remove the mand [ 275.620059][ T373] option from the mount to silence this warning. [ 275.620059][ T373] ======================================================= [ 275.676107][ T373] EXT4-fs (loop2): Ignoring removed oldalloc option [ 275.682887][ T373] EXT4-fs (loop2): Ignoring removed orlov option [ 275.701434][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 276.180251][ T266] device bridge_slave_1 left promiscuous mode [ 276.186454][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.194251][ T266] device bridge_slave_0 left promiscuous mode [ 276.201154][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.209192][ T266] device veth1_macvtap left promiscuous mode [ 276.215539][ T266] device veth0_vlan left promiscuous mode [ 277.009401][ C0] sched: RT throttling activated [ 290.663998][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.671353][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.678759][ T379] device bridge_slave_0 entered promiscuous mode [ 290.685891][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.693051][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.700785][ T379] device bridge_slave_1 entered promiscuous mode [ 290.757628][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.764696][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.771967][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.778977][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.800551][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.807910][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.815699][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.823641][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.841094][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.849249][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.856281][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.864053][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.873080][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.880130][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.887657][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.895689][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.911044][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.923128][ T379] device veth0_vlan entered promiscuous mode [ 290.930322][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.938454][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.946115][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2025/12/12 19:52:34 executed programs: 3 [ 290.959007][ T379] device veth1_macvtap entered promiscuous mode [ 290.966116][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.978540][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.999356][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.015842][ T389] loop3: detected capacity change from 0 to 1024 [ 291.049571][ T389] EXT4-fs (loop3): Ignoring removed oldalloc option [ 291.056186][ T389] EXT4-fs (loop3): Ignoring removed orlov option [ 291.070972][ T389] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 391.109405][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 391.116402][ C0] (detected by 0, t=10002 jiffies, g=1637, q=742) [ 391.123334][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294976331-4294966328), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 391.136714][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1637 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 391.147829][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 391.157794][ C0] rcu: RCU grace-period kthread stack dump: [ 391.163671][ C0] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 391.174459][ C0] Call Trace: [ 391.177733][ C0] [ 391.180660][ C0] __schedule+0xb6e/0x14c0 [ 391.185091][ C0] ? release_firmware_map_entry+0x190/0x190 [ 391.190980][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 391.196783][ C0] ? __mod_timer+0x7ae/0xb30 [ 391.201372][ C0] schedule+0x11e/0x1e0 [ 391.205520][ C0] schedule_timeout+0x12c/0x2e0 [ 391.210365][ C0] ? console_conditional_schedule+0x30/0x30 [ 391.216252][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 391.221705][ C0] ? update_process_times+0x200/0x200 [ 391.227078][ C0] ? prepare_to_swait_event+0x308/0x320 [ 391.232623][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 391.237381][ C0] ? debug_smp_processor_id+0x17/0x20 [ 391.242747][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 391.247851][ C0] ? rcu_gp_init+0xc00/0xc00 [ 391.252433][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 391.257629][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 391.262218][ C0] rcu_gp_kthread+0x98/0x330 [ 391.266805][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 391.271477][ C0] ? __kasan_check_read+0x11/0x20 [ 391.276496][ C0] ? __kthread_parkme+0xac/0x200 [ 391.281431][ C0] ? preempt_count_add+0x90/0x1b0 [ 391.286451][ C0] kthread+0x411/0x500 [ 391.290513][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 391.295183][ C0] ? kthread_blkcg+0xd0/0xd0 [ 391.299765][ C0] ret_from_fork+0x1f/0x30 [ 391.304177][ C0] [ 391.307189][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 391.313505][ C0] Sending NMI from CPU 0 to CPUs 1: [ 391.318704][ C1] NMI backtrace for cpu 1 [ 391.318719][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 391.318733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.318744][ C1] RIP: 0010:mark_page_accessed+0xcf/0x8d0 [ 391.318762][ C1] Code: ff 4c 8d 74 24 40 4c 89 7c 24 08 0f 1f 44 00 00 0f 1f 44 00 00 e8 21 06 d7 ff 4d 8d 77 08 4c 89 f0 48 c1 e8 03 48 89 44 24 10 <42> 80 3c 28 00 74 08 4c 89 f7 e8 d2 87 15 00 4d 8b 3e 44 89 fe 83 [ 391.318774][ C1] RSP: 0018:ffffc90000ab6ee0 EFLAGS: 00000a02 [ 391.318787][ C1] RAX: 1ffffd4000976529 RBX: ffffea00047f3308 RCX: ffff888110df2780 [ 391.318798][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.318807][ C1] RBP: ffffc90000ab6f90 R08: dffffc0000000000 R09: ffffed1021a1ae76 [ 391.318818][ C1] R10: ffffed1021a1ae76 R11: 1ffff11021a1ae75 R12: ffff88810d0d7358 [ 391.318828][ C1] R13: dffffc0000000000 R14: ffffea0004bb2948 R15: ffffea0004bb2940 [ 391.318839][ C1] FS: 000055555c6f9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 391.318852][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.318862][ C1] CR2: 00007fe4f372b000 CR3: 000000011fcb1000 CR4: 00000000003506a0 [ 391.318875][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.318884][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.318892][ C1] Call Trace: [ 391.318897][ C1] [ 391.318902][ C1] ? __activate_page+0xd40/0xd40 [ 391.318917][ C1] __find_get_block+0xafd/0xee0 [ 391.318934][ C1] ? write_boundary_block+0x140/0x140 [ 391.318950][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 391.318969][ C1] __getblk_gfp+0x30/0x7d0 [ 391.318983][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 391.319001][ C1] ? ext4_get_group_desc+0x2ad/0x320 [ 391.319016][ C1] __ext4_get_inode_loc+0x461/0xcd0 [ 391.319053][ C1] ? ext4_get_inode_loc+0x130/0x130 [ 391.319067][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 391.319082][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 391.319097][ C1] ext4_reserve_inode_write+0x16c/0x320 [ 391.319113][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 391.319126][ C1] ? ext4_journal_check_start+0x172/0x240 [ 391.319142][ C1] ext4_dirty_inode+0xbd/0x100 [ 391.319156][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 391.319171][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 391.319187][ C1] ext4_xattr_block_set+0x1591/0x2cb0 [ 391.319206][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 391.319221][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 391.319237][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 391.319255][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 391.319271][ C1] ? selinux_inode_free_security+0x210/0x210 [ 391.319287][ C1] ext4_initxattrs+0xa6/0x110 [ 391.319305][ C1] security_inode_init_security+0x254/0x370 [ 391.319320][ C1] ? posix_acl_create+0x118/0x440 [ 391.319333][ C1] ? ext4_init_security+0x40/0x40 [ 391.319346][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 391.319362][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 391.319377][ C1] ? __ext4_set_acl+0x600/0x600 [ 391.319392][ C1] ? prandom_u32+0x24d/0x290 [ 391.319406][ C1] ext4_init_security+0x34/0x40 [ 391.319418][ C1] __ext4_new_inode+0x2c41/0x3690 [ 391.319433][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 391.319446][ C1] ? dquot_initialize+0x20/0x20 [ 391.319461][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 391.319475][ C1] ? may_create+0x377/0x460 [ 391.319488][ C1] ext4_mknod+0x235/0x4a0 [ 391.319502][ C1] ? ext4_rmdir+0x9f0/0x9f0 [ 391.319514][ C1] ? selinux_inode_mknod+0x7b/0xa0 [ 391.319528][ C1] ? security_inode_mknod+0xca/0x110 [ 391.319543][ C1] vfs_mknod+0x452/0x4e0 [ 391.319557][ C1] unix_bind+0x488/0x870 [ 391.319571][ C1] ? errseq_sample+0x44/0x70 [ 391.319583][ C1] ? unix_release+0xc0/0xc0 [ 391.319595][ C1] ? check_stack_object+0x106/0x140 [ 391.319611][ C1] ? security_socket_bind+0x82/0xa0 [ 391.319624][ C1] __sys_bind+0x2ff/0x400 [ 391.319639][ C1] ? __se_sys_futex+0x139/0x310 [ 391.319654][ C1] ? __ia32_sys_socketpair+0xb0/0xb0 [ 391.319672][ C1] ? debug_smp_processor_id+0x17/0x20 [ 391.319685][ C1] __x64_sys_bind+0x7a/0x90 [ 391.319699][ C1] x64_sys_call+0x6f0/0x9a0 [ 391.319712][ C1] do_syscall_64+0x4c/0xa0 [ 391.319727][ C1] ? clear_bhb_loop+0x50/0xa0 [ 391.319738][ C1] ? clear_bhb_loop+0x50/0xa0 [ 391.319750][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 391.319766][ C1] RIP: 0033:0x7f8c37f4c749 [ 391.319779][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.319790][ C1] RSP: 002b:00007fffbf391288 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 391.319804][ C1] RAX: ffffffffffffffda RBX: 00007f8c381a2fa0 RCX: 00007f8c37f4c749 [ 391.319814][ C1] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 391.319823][ C1] RBP: 00007f8c37fd0f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.319832][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.319840][ C1] R13: 00007f8c381a2fa0 R14: 00007f8c381a2fa0 R15: 0000000000000003 [ 391.319852][ C1] [ 440.999461][ T31] INFO: task kworker/u4:4:394 blocked for more than 126 seconds. [ 441.007217][ T31] Not tainted syzkaller #0 [ 441.012431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.021218][ T31] task:kworker/u4:4 state:D stack:23904 pid: 394 ppid: 2 flags:0x00004000 [ 441.030469][ T31] Workqueue: events_unbound linkwatch_event [ 441.036356][ T31] Call Trace: [ 441.039653][ T31] [ 441.042572][ T31] __schedule+0xb6e/0x14c0 [ 441.046968][ T31] ? release_firmware_map_entry+0x190/0x190 [ 441.999555][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 442.004841][ T31] ? __kasan_check_write+0x14/0x20 [ 442.009995][ T31] ? kthread_data+0x50/0xc0 [ 442.014536][ T31] ? wq_worker_sleeping+0x60/0x200 [ 442.019742][ T31] schedule+0x11e/0x1e0 [ 442.023900][ T31] schedule_preempt_disabled+0x13/0x20 [ 442.029338][ T31] __mutex_lock+0x7b6/0x11b0 [ 442.033944][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 442.040719][ T31] ? __kasan_check_write+0x14/0x20 [ 442.045818][ T31] ? __switch_to+0x51d/0xe20 [ 442.999800][ T31] __mutex_lock_slowpath+0xe/0x10 [ 443.004872][ T31] mutex_lock+0x100/0x1a0 [ 443.009203][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 443.016231][ T31] ? __schedule+0xb76/0x14c0 [ 443.020833][ T31] rtnl_lock+0x15/0x20 [ 443.024898][ T31] linkwatch_event+0xe/0x60 [ 443.029415][ T31] process_one_work+0x6be/0xba0 [ 443.034260][ T31] worker_thread+0xa59/0x1200 [ 443.038916][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 443.044380][ T31] ? __kthread_parkme+0xac/0x200 [ 443.049306][ T31] kthread+0x411/0x500 [ 443.999455][ T31] ? worker_clr_flags+0x190/0x190 [ 444.004533][ T31] ? kthread_blkcg+0xd0/0xd0 [ 444.009131][ T31] ret_from_fork+0x1f/0x30 [ 444.013638][ T31] [ 444.016666][ T31] INFO: task syz-executor:396 blocked for more than 129 seconds. [ 444.024395][ T31] Not tainted syzkaller #0 [ 444.029319][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.037998][ T31] task:syz-executor state:D stack:22432 pid: 396 ppid: 1 flags:0x00004004 [ 444.047245][ T31] Call Trace: [ 444.999979][ T31] [ 445.002954][ T31] __schedule+0xb6e/0x14c0 [ 445.007371][ T31] ? release_firmware_map_entry+0x190/0x190 [ 445.013359][ T31] ? wake_up_process+0x10/0x20 [ 445.018126][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 445.023950][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 445.029427][ T31] schedule+0x11e/0x1e0 [ 445.033570][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 445.039176][ T31] ? synchronize_rcu+0x110/0x110 [ 445.044108][ T31] ? __kasan_slab_free+0x11/0x20 [ 445.049039][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 445.999792][ T31] ? rcu_exp_handler+0x370/0x370 [ 446.004770][ T31] ? kfree+0xc4/0x270 [ 446.008746][ T31] ? kfree_const+0x39/0x40 [ 446.013208][ T31] ? __kasan_check_write+0x14/0x20 [ 446.018350][ T31] ? kobject_put+0x1a8/0x270 [ 446.022972][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 446.029039][ T31] ? kobject_put+0x214/0x270 [ 446.033629][ T31] ? io_schedule+0xe0/0xe0 [ 446.038032][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 446.044114][ T31] ? __kasan_check_read+0x11/0x20 [ 446.049126][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 447.000198][ T31] ? linkwatch_fire_event+0x307/0x380 [ 447.005611][ T31] veth_newlink+0x9bc/0xda0 [ 447.010173][ T31] ? veth_validate+0x200/0x200 [ 447.014934][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 447.019962][ T31] ? veth_validate+0x200/0x200 [ 447.024718][ T31] rtnl_newlink+0x112d/0x17b0 [ 447.029379][ T31] ? rtnl_setlink+0x400/0x400 [ 447.034069][ T31] ? memcpy+0x56/0x70 [ 447.038034][ T31] ? __kasan_check_write+0x14/0x20 [ 447.043154][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 447.999606][ T31] ? ns_capable+0x8c/0xf0 [ 448.003979][ T31] ? netlink_net_capable+0x125/0x160 [ 448.009257][ T31] ? rtnl_setlink+0x400/0x400 [ 448.013994][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 448.018940][ T31] ? rtnetlink_bind+0x80/0x80 [ 448.023633][ T31] ? memcpy+0x56/0x70 [ 448.027610][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 448.032986][ T31] ? arch_stack_walk+0xee/0x140 [ 448.037826][ T31] ? avc_denied+0x1b0/0x1b0 [ 448.042327][ T31] ? stack_trace_save+0x98/0xe0 [ 448.047167][ T31] ? avc_has_perm+0x158/0x240 [ 449.000023][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 449.005499][ T31] ? do_syscall_64+0x4c/0xa0 [ 449.010118][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 449.015524][ T31] netlink_rcv_skb+0x1e0/0x430 [ 449.020352][ T31] ? rtnetlink_bind+0x80/0x80 [ 449.025038][ T31] ? netlink_ack+0xb60/0xb60 [ 449.029646][ T31] ? __netlink_lookup+0x387/0x3b0 [ 449.034659][ T31] rtnetlink_rcv+0x1c/0x20 [ 449.039054][ T31] netlink_unicast+0x876/0xa40 [ 449.043819][ T31] netlink_sendmsg+0x86a/0xb70 [ 449.048570][ T31] ? netlink_getsockopt+0x530/0x530 [ 450.009717][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 450.015238][ T31] __sys_sendto+0x423/0x580 [ 450.019795][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 450.025165][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 450.030907][ T31] __x64_sys_sendto+0xe5/0x100 [ 450.035664][ T31] x64_sys_call+0x178/0x9a0 [ 450.040169][ T31] do_syscall_64+0x4c/0xa0 [ 450.044575][ T31] ? clear_bhb_loop+0x50/0xa0 [ 450.049225][ T31] ? clear_bhb_loop+0x50/0xa0 [ 450.999619][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 451.005585][ T31] RIP: 0033:0x7f26ae6e0583 [ 451.010045][ T31] RSP: 002b:00007ffc2357aad8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 451.018708][ T31] RAX: ffffffffffffffda RBX: 00007f26af463620 RCX: 00007f26ae6e0583 [ 451.026694][ T31] RDX: 000000000000002c RSI: 00007f26af463670 RDI: 0000000000000003 [ 451.034682][ T31] RBP: 0000000000000001 R08: 00007ffc2357aaf4 R09: 000000000000000c [ 451.042679][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 451.999556][ T31] R13: 0000000000000000 R14: 00007f26af463670 R15: 0000000000000000 [ 452.007585][ T31] [ 452.010640][ T31] NMI backtrace for cpu 0 [ 452.014972][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 452.022141][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.032170][ T31] Call Trace: [ 452.035427][ T31] [ 452.038335][ T31] __dump_stack+0x21/0x30 [ 452.042640][ T31] dump_stack_lvl+0xee/0x150 [ 452.047205][ T31] ? show_regs_print_info+0x20/0x20 [ 452.052380][ T31] dump_stack+0x15/0x20 [ 452.056532][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 452.061460][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 452.066996][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 452.073147][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 452.078078][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 452.084139][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 452.090197][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 452.096169][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 452.102053][ T31] watchdog+0xd64/0xea0 [ 452.106200][ T31] ? hungtask_pm_notify+0x50/0x50 [ 452.111212][ T31] ? __kasan_check_read+0x11/0x20 [ 452.116225][ T31] ? __kthread_parkme+0xac/0x200 [ 452.121150][ T31] ? preempt_count_add+0x90/0x1b0 [ 452.126164][ T31] kthread+0x411/0x500 [ 452.130220][ T31] ? hungtask_pm_notify+0x50/0x50 [ 452.135236][ T31] ? kthread_blkcg+0xd0/0xd0 [ 452.139816][ T31] ret_from_fork+0x1f/0x30 [ 452.144221][ T31] [ 452.147330][ T31] Sending NMI from CPU 0 to CPUs 1: [ 452.152540][ C1] NMI backtrace for cpu 1 [ 452.152548][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 452.152563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.152571][ C1] RIP: 0010:ext4_xattr_block_set+0xed5/0x2cb0 [ 452.152593][ C1] Code: e8 03 42 0f b6 04 28 84 c0 4d 89 ec 0f 85 34 02 00 00 45 8b 36 48 8b 44 24 20 4c 8d 68 04 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 32 02 00 00 45 8b 6d 00 44 89 f7 44 89 ee e8 e4 97 80 [ 452.152606][ C1] RSP: 0018:ffffc90000ab7460 EFLAGS: 00000a07 [ 452.152620][ C1] RAX: 0000000000000000 RBX: 000000000000001a RCX: ffff888110df2780 [ 452.152630][ C1] RDX: 0000000000000000 RSI: 000000000000001a RDI: 000000000000001a [ 452.152639][ C1] RBP: ffffc90000ab75f0 R08: dffffc0000000000 R09: ffffed1021a1ab66 [ 452.152649][ C1] R10: ffffed1021a1ab66 R11: 1ffff11021a1ab65 R12: dffffc0000000000 [ 452.152660][ C1] R13: ffff88812eca6424 R14: 0000000000000000 R15: 0000000000000007 [ 452.152669][ C1] FS: 000055555c6f9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 452.152688][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.152698][ C1] CR2: 00007fcf3608d000 CR3: 000000011fcb1000 CR4: 00000000003506a0 [ 452.152711][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 452.152719][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 452.152728][ C1] Call Trace: [ 452.152732][ C1] [ 452.152740][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 452.152756][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 452.152772][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 452.152790][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 452.152807][ C1] ? selinux_inode_free_security+0x210/0x210 [ 452.152824][ C1] ext4_initxattrs+0xa6/0x110 [ 452.152837][ C1] security_inode_init_security+0x254/0x370 [ 452.152852][ C1] ? posix_acl_create+0x118/0x440 [ 452.152866][ C1] ? ext4_init_security+0x40/0x40 [ 452.152879][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 452.152895][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 452.152910][ C1] ? __ext4_set_acl+0x600/0x600 [ 452.152922][ C1] ? prandom_u32+0x24d/0x290 [ 452.152936][ C1] ext4_init_security+0x34/0x40 [ 452.152948][ C1] __ext4_new_inode+0x2c41/0x3690 [ 452.152964][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 452.152977][ C1] ? dquot_initialize+0x20/0x20 [ 452.152991][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 452.153006][ C1] ? may_create+0x377/0x460 [ 452.153018][ C1] ext4_mknod+0x235/0x4a0 [ 452.153033][ C1] ? ext4_rmdir+0x9f0/0x9f0 [ 452.153045][ C1] ? selinux_inode_mknod+0x7b/0xa0 [ 452.153059][ C1] ? security_inode_mknod+0xca/0x110 [ 452.153074][ C1] vfs_mknod+0x452/0x4e0 [ 452.153089][ C1] unix_bind+0x488/0x870 [ 452.153102][ C1] ? errseq_sample+0x44/0x70 [ 452.153115][ C1] ? unix_release+0xc0/0xc0 [ 452.153126][ C1] ? check_stack_object+0x106/0x140 [ 452.153142][ C1] ? security_socket_bind+0x82/0xa0 [ 452.153155][ C1] __sys_bind+0x2ff/0x400 [ 452.153170][ C1] ? __se_sys_futex+0x139/0x310 [ 452.153186][ C1] ? __ia32_sys_socketpair+0xb0/0xb0 [ 452.153203][ C1] ? debug_smp_processor_id+0x17/0x20 [ 452.153217][ C1] __x64_sys_bind+0x7a/0x90 [ 452.153231][ C1] x64_sys_call+0x6f0/0x9a0 [ 452.153244][ C1] do_syscall_64+0x4c/0xa0 [ 452.153259][ C1] ? clear_bhb_loop+0x50/0xa0 [ 452.153271][ C1] ? clear_bhb_loop+0x50/0xa0 [ 452.153283][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 452.153299][ C1] RIP: 0033:0x7f8c37f4c749 [ 452.153312][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.153323][ C1] RSP: 002b:00007fffbf391288 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 452.153337][ C1] RAX: ffffffffffffffda RBX: 00007f8c381a2fa0 RCX: 00007f8c37f4c749 [ 452.153347][ C1] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 452.153356][ C1] RBP: 00007f8c37fd0f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.153365][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.153373][ C1] R13: 00007f8c381a2fa0 R14: 00007f8c381a2fa0 R15: 0000000000000003 [ 452.153384][ C1] [ 474.999478][ T31] INFO: task kworker/u4:4:394 blocked for more than 160 seconds. [ 475.007482][ T31] Not tainted syzkaller #0 [ 475.012454][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.021174][ T31] task:kworker/u4:4 state:D stack:23904 pid: 394 ppid: 2 flags:0x00004000 [ 475.030398][ T31] Workqueue: events_unbound linkwatch_event [ 475.036416][ T31] Call Trace: [ 475.039714][ T31] [ 475.042633][ T31] __schedule+0xb6e/0x14c0 [ 475.047024][ T31] ? release_firmware_map_entry+0x190/0x190 [ 475.999576][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 476.004848][ T31] ? __kasan_check_write+0x14/0x20 [ 476.010025][ T31] ? kthread_data+0x50/0xc0 [ 476.014519][ T31] ? wq_worker_sleeping+0x60/0x200 [ 476.019631][ T31] schedule+0x11e/0x1e0 [ 476.023775][ T31] schedule_preempt_disabled+0x13/0x20 [ 476.029205][ T31] __mutex_lock+0x7b6/0x11b0 [ 476.033794][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 476.040569][ T31] ? __kasan_check_write+0x14/0x20 [ 476.045667][ T31] ? __switch_to+0x51d/0xe20 [ 477.001092][ T31] __mutex_lock_slowpath+0xe/0x10 [ 477.006152][ T31] mutex_lock+0x100/0x1a0 [ 477.010709][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 477.017303][ T31] ? __schedule+0xb76/0x14c0 [ 477.021898][ T31] rtnl_lock+0x15/0x20 [ 477.025962][ T31] linkwatch_event+0xe/0x60 [ 477.030465][ T31] process_one_work+0x6be/0xba0 [ 477.035306][ T31] worker_thread+0xa59/0x1200 [ 477.039979][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 477.045431][ T31] ? __kthread_parkme+0xac/0x200 [ 477.999836][ T31] kthread+0x411/0x500 [ 478.003946][ T31] ? worker_clr_flags+0x190/0x190 [ 478.008963][ T31] ? kthread_blkcg+0xd0/0xd0 [ 478.013576][ T31] ret_from_fork+0x1f/0x30 [ 478.018014][ T31] [ 478.021034][ T31] INFO: task syz-executor:396 blocked for more than 163 seconds. [ 478.028730][ T31] Not tainted syzkaller #0 [ 478.033660][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.042325][ T31] task:syz-executor state:D stack:22432 pid: 396 ppid: 1 flags:0x00004004 [ 478.999940][ T31] Call Trace: [ 479.003287][ T31] [ 479.006222][ T31] __schedule+0xb6e/0x14c0 [ 479.010637][ T31] ? release_firmware_map_entry+0x190/0x190 [ 479.016521][ T31] ? wake_up_process+0x10/0x20 [ 479.021286][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 479.027080][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 479.032545][ T31] schedule+0x11e/0x1e0 [ 479.036688][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 479.042316][ T31] ? synchronize_rcu+0x110/0x110 [ 479.047241][ T31] ? __kasan_slab_free+0x11/0x20 [ 479.999526][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 480.005120][ T31] ? rcu_exp_handler+0x370/0x370 [ 480.010135][ T31] ? kfree+0xc4/0x270 [ 480.014152][ T31] ? kfree_const+0x39/0x40 [ 480.018546][ T31] ? __kasan_check_write+0x14/0x20 [ 480.023684][ T31] ? kobject_put+0x1a8/0x270 [ 480.028324][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 480.034440][ T31] ? kobject_put+0x214/0x270 [ 480.039023][ T31] ? io_schedule+0xe0/0xe0 [ 480.043492][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 481.000179][ T31] ? __kasan_check_read+0x11/0x20 [ 481.005271][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 481.011236][ T31] ? linkwatch_fire_event+0x307/0x380 [ 481.016618][ T31] veth_newlink+0x9bc/0xda0 [ 481.021127][ T31] ? veth_validate+0x200/0x200 [ 481.025883][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 481.030906][ T31] ? veth_validate+0x200/0x200 [ 481.035663][ T31] rtnl_newlink+0x112d/0x17b0 [ 481.040340][ T31] ? rtnl_setlink+0x400/0x400 [ 481.045007][ T31] ? memcpy+0x56/0x70 [ 481.048968][ T31] ? __kasan_check_write+0x14/0x20 [ 481.999563][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 482.006187][ T31] ? ns_capable+0x8c/0xf0 [ 482.010536][ T31] ? netlink_net_capable+0x125/0x160 [ 482.015806][ T31] ? rtnl_setlink+0x400/0x400 [ 482.020479][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 482.025406][ T31] ? rtnetlink_bind+0x80/0x80 [ 482.030080][ T31] ? memcpy+0x56/0x70 [ 482.034050][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 482.039418][ T31] ? arch_stack_walk+0xee/0x140 [ 482.044260][ T31] ? avc_denied+0x1b0/0x1b0 [ 482.048737][ T31] ? stack_trace_save+0x98/0xe0 [ 483.000887][ T31] ? avc_has_perm+0x158/0x240 [ 483.005609][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 483.011050][ T31] ? do_syscall_64+0x4c/0xa0 [ 483.015791][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 483.021190][ T31] netlink_rcv_skb+0x1e0/0x430 [ 483.025953][ T31] ? rtnetlink_bind+0x80/0x80 [ 483.030641][ T31] ? netlink_ack+0xb60/0xb60 [ 483.035223][ T31] ? __netlink_lookup+0x387/0x3b0 [ 483.040263][ T31] rtnetlink_rcv+0x1c/0x20 [ 483.044671][ T31] netlink_unicast+0x876/0xa40 [ 483.999460][ T31] netlink_sendmsg+0x86a/0xb70 [ 484.004276][ T31] ? netlink_getsockopt+0x530/0x530 [ 484.009504][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 484.014953][ T31] __sys_sendto+0x423/0x580 [ 484.019459][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 484.024821][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 484.030553][ T31] __x64_sys_sendto+0xe5/0x100 [ 484.035317][ T31] x64_sys_call+0x178/0x9a0 [ 484.039832][ T31] do_syscall_64+0x4c/0xa0 [ 484.044239][ T31] ? clear_bhb_loop+0x50/0xa0 [ 484.048887][ T31] ? clear_bhb_loop+0x50/0xa0 [ 485.009843][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.015864][ T31] RIP: 0033:0x7f26ae6e0583 [ 485.020305][ T31] RSP: 002b:00007ffc2357aad8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 485.028719][ T31] RAX: ffffffffffffffda RBX: 00007f26af463620 RCX: 00007f26ae6e0583 [ 485.036730][ T31] RDX: 000000000000002c RSI: 00007f26af463670 RDI: 0000000000000003 [ 485.044709][ T31] RBP: 0000000000000001 R08: 00007ffc2357aaf4 R09: 000000000000000c [ 485.999572][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 486.007566][ T31] R13: 0000000000000000 R14: 00007f26af463670 R15: 0000000000000000 [ 486.015584][ T31] [ 486.018635][ T31] NMI backtrace for cpu 1 [ 486.023019][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 486.030186][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.040214][ T31] Call Trace: [ 486.043464][ T31] [ 486.046369][ T31] __dump_stack+0x21/0x30 [ 486.050680][ T31] dump_stack_lvl+0xee/0x150 [ 486.055246][ T31] ? show_regs_print_info+0x20/0x20 [ 486.060423][ T31] dump_stack+0x15/0x20 [ 486.064560][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 486.069469][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 486.074989][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 486.081123][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 486.086029][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 486.092068][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 486.098106][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 486.104055][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 486.109916][ T31] watchdog+0xd64/0xea0 [ 486.114042][ T31] ? hungtask_pm_notify+0x50/0x50 [ 486.119035][ T31] ? __kasan_check_read+0x11/0x20 [ 486.124027][ T31] ? __kthread_parkme+0xac/0x200 [ 486.128932][ T31] ? preempt_count_add+0x90/0x1b0 [ 486.133926][ T31] kthread+0x411/0x500 [ 486.137965][ T31] ? hungtask_pm_notify+0x50/0x50 [ 486.142957][ T31] ? kthread_blkcg+0xd0/0xd0 [ 486.147513][ T31] ret_from_fork+0x1f/0x30 [ 486.151899][ T31] [ 486.154981][ T31] Sending NMI from CPU 1 to CPUs 0: [ 486.160198][ C0] NMI backtrace for cpu 0 [ 486.160207][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 486.160222][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.160236][ C0] RIP: 0010:__kasan_check_read+0xa/0x20 [ 486.160255][ C0] Code: c3 48 c7 c7 79 af e4 85 eb 0a 48 c7 c7 89 4b db 85 48 89 de e8 17 ce f8 02 45 31 ff eb d1 00 00 55 48 89 e5 89 f6 48 8b 4d 08 <31> d2 e8 bf ed ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 486.160267][ C0] RSP: 0018:ffffc90002087180 EFLAGS: 00000293 [ 486.160280][ C0] RAX: ffffffff81bd4f7d RBX: ffff888122ac39d8 RCX: ffffffff81bd4f8a [ 486.160291][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888122ac39d8 [ 486.160301][ C0] RBP: ffffc90002087180 R08: dffffc0000000000 R09: ffffed102455873c [ 486.160311][ C0] R10: ffffed102455873c R11: 1ffff1102455873b R12: dffffc0000000000 [ 486.160322][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff1102455873b [ 486.160332][ C0] FS: 0000555567f42500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 486.160345][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.160355][ C0] CR2: 000000c0067f5010 CR3: 000000011fbb5000 CR4: 00000000003506b0 [ 486.160367][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.160376][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.160384][ C0] Call Trace: [ 486.160388][ C0] [ 486.160393][ C0] mark_buffer_dirty+0x6a/0x330 [ 486.160411][ C0] __ext4_handle_dirty_metadata+0x2f8/0x800 [ 486.160428][ C0] ext4_mark_iloc_dirty+0x2b6a/0x3f50 [ 486.160443][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 486.160459][ C0] ? __sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 486.160477][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 486.160490][ C0] ? ext4_journal_check_start+0x172/0x240 [ 486.160506][ C0] ext4_dirty_inode+0xbd/0x100 [ 486.160520][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 486.160534][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 486.160549][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 486.160568][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 486.160583][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 486.160599][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 486.160617][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 486.160633][ C0] ? selinux_inode_free_security+0x210/0x210 [ 486.160649][ C0] ext4_initxattrs+0xa6/0x110 [ 486.160662][ C0] security_inode_init_security+0x254/0x370 [ 486.160677][ C0] ? posix_acl_create+0x118/0x440 [ 486.160691][ C0] ? ext4_init_security+0x40/0x40 [ 486.160704][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 486.160719][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 486.160734][ C0] ? __ext4_set_acl+0x600/0x600 [ 486.160747][ C0] ? prandom_u32+0x24d/0x290 [ 486.160760][ C0] ext4_init_security+0x34/0x40 [ 486.160773][ C0] __ext4_new_inode+0x2c41/0x3690 [ 486.160788][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 486.160801][ C0] ? dquot_initialize+0x20/0x20 [ 486.160815][ C0] ? selinux_determine_inode_label+0x290/0x3e0 [ 486.160830][ C0] ? may_create+0x377/0x460 [ 486.160842][ C0] ext4_mknod+0x235/0x4a0 [ 486.160857][ C0] ? ext4_rmdir+0x9f0/0x9f0 [ 486.160869][ C0] ? selinux_inode_mknod+0x7b/0xa0 [ 486.160883][ C0] ? security_inode_mknod+0xca/0x110 [ 486.160898][ C0] vfs_mknod+0x452/0x4e0 [ 486.160913][ C0] unix_bind+0x488/0x870 [ 486.160926][ C0] ? errseq_sample+0x44/0x70 [ 486.160939][ C0] ? unix_release+0xc0/0xc0 [ 486.160950][ C0] ? check_stack_object+0x106/0x140 [ 486.160965][ C0] ? security_socket_bind+0x82/0xa0 [ 486.160978][ C0] __sys_bind+0x2ff/0x400 [ 486.160992][ C0] ? __se_sys_futex+0x139/0x310 [ 486.161007][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 486.161024][ C0] ? debug_smp_processor_id+0x17/0x20 [ 486.161038][ C0] __x64_sys_bind+0x7a/0x90 [ 486.161052][ C0] x64_sys_call+0x6f0/0x9a0 [ 486.161065][ C0] do_syscall_64+0x4c/0xa0 [ 486.161080][ C0] ? clear_bhb_loop+0x50/0xa0 [ 486.161092][ C0] ? clear_bhb_loop+0x50/0xa0 [ 486.161104][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.161119][ C0] RIP: 0033:0x7f7473512749 [ 486.161132][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.161143][ C0] RSP: 002b:00007ffc21cef1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 486.161157][ C0] RAX: ffffffffffffffda RBX: 00007f7473768fa0 RCX: 00007f7473512749 [ 486.161167][ C0] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 486.161176][ C0] RBP: 00007f7473596f91 R08: 0000000000000000 R09: 0000000000000000 [ 486.161185][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.161193][ C0] R13: 00007f7473768fa0 R14: 00007f7473768fa0 R15: 0000000000000003 [ 486.161205][ C0] [ 508.999457][ T31] INFO: task kworker/u4:4:394 blocked for more than 194 seconds. [ 509.007208][ T31] Not tainted syzkaller #0 [ 509.012460][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 509.021146][ T31] task:kworker/u4:4 state:D stack:23904 pid: 394 ppid: 2 flags:0x00004000 [ 509.030361][ T31] Workqueue: events_unbound linkwatch_event [ 509.036243][ T31] Call Trace: [ 509.039519][ T31] [ 509.042435][ T31] __schedule+0xb6e/0x14c0 [ 509.046830][ T31] ? release_firmware_map_entry+0x190/0x190 [ 509.999655][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 510.004895][ T31] ? __kasan_check_write+0x14/0x20 [ 510.010014][ T31] ? kthread_data+0x50/0xc0 [ 510.014604][ T31] ? wq_worker_sleeping+0x60/0x200 [ 510.019722][ T31] schedule+0x11e/0x1e0 [ 510.023870][ T31] schedule_preempt_disabled+0x13/0x20 [ 510.029301][ T31] __mutex_lock+0x7b6/0x11b0 [ 510.033895][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 510.040666][ T31] ? __kasan_check_write+0x14/0x20 [ 510.045765][ T31] ? __switch_to+0x51d/0xe20 [ 511.009759][ T31] __mutex_lock_slowpath+0xe/0x10 [ 511.014843][ T31] mutex_lock+0x100/0x1a0 [ 511.019167][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 511.025782][ T31] ? __schedule+0xb76/0x14c0 [ 511.030397][ T31] rtnl_lock+0x15/0x20 [ 511.034454][ T31] linkwatch_event+0xe/0x60 [ 511.038926][ T31] process_one_work+0x6be/0xba0 [ 511.043783][ T31] worker_thread+0xa59/0x1200 [ 511.048471][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 511.999528][ T31] ? __kthread_parkme+0xac/0x200 [ 512.004510][ T31] kthread+0x411/0x500 [ 512.008572][ T31] ? worker_clr_flags+0x190/0x190 [ 512.013604][ T31] ? kthread_blkcg+0xd0/0xd0 [ 512.018187][ T31] ret_from_fork+0x1f/0x30 [ 512.022622][ T31] [ 512.025637][ T31] INFO: task syz-executor:396 blocked for more than 197 seconds. [ 512.033346][ T31] Not tainted syzkaller #0 [ 512.038259][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.046916][ T31] task:syz-executor state:D stack:22432 pid: 396 ppid: 1 flags:0x00004004 [ 513.000604][ T31] Call Trace: [ 513.003917][ T31] [ 513.006838][ T31] __schedule+0xb6e/0x14c0 [ 513.011315][ T31] ? release_firmware_map_entry+0x190/0x190 [ 513.017219][ T31] ? wake_up_process+0x10/0x20 [ 513.022007][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 513.027806][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 513.033263][ T31] schedule+0x11e/0x1e0 [ 513.037408][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 513.043035][ T31] ? synchronize_rcu+0x110/0x110 [ 513.047961][ T31] ? __kasan_slab_free+0x11/0x20 [ 513.999729][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 514.005312][ T31] ? rcu_exp_handler+0x370/0x370 [ 514.010293][ T31] ? kfree+0xc4/0x270 [ 514.014272][ T31] ? kfree_const+0x39/0x40 [ 514.018677][ T31] ? __kasan_check_write+0x14/0x20 [ 514.023785][ T31] ? kobject_put+0x1a8/0x270 [ 514.028360][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 514.034423][ T31] ? kobject_put+0x214/0x270 [ 514.039001][ T31] ? io_schedule+0xe0/0xe0 [ 514.043458][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 515.000000][ T31] ? __kasan_check_read+0x11/0x20 [ 515.005093][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 515.011021][ T31] ? linkwatch_fire_event+0x307/0x380 [ 515.016388][ T31] veth_newlink+0x9bc/0xda0 [ 515.020892][ T31] ? veth_validate+0x200/0x200 [ 515.025648][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 515.030675][ T31] ? veth_validate+0x200/0x200 [ 515.035428][ T31] rtnl_newlink+0x112d/0x17b0 [ 515.040100][ T31] ? rtnl_setlink+0x400/0x400 [ 515.044769][ T31] ? memcpy+0x56/0x70 [ 515.048728][ T31] ? __kasan_check_write+0x14/0x20 [ 515.999554][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 516.006174][ T31] ? ns_capable+0x8c/0xf0 [ 516.010561][ T31] ? netlink_net_capable+0x125/0x160 [ 516.015840][ T31] ? rtnl_setlink+0x400/0x400 [ 516.020529][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 516.025457][ T31] ? rtnetlink_bind+0x80/0x80 [ 516.030135][ T31] ? memcpy+0x56/0x70 [ 516.034106][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 516.039477][ T31] ? arch_stack_walk+0xee/0x140 [ 516.044317][ T31] ? avc_denied+0x1b0/0x1b0 [ 516.048813][ T31] ? stack_trace_save+0x98/0xe0 [ 517.009669][ T31] ? avc_has_perm+0x158/0x240 [ 517.014453][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 517.019844][ T31] ? do_syscall_64+0x4c/0xa0 [ 517.024456][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 517.029871][ T31] netlink_rcv_skb+0x1e0/0x430 [ 517.034646][ T31] ? rtnetlink_bind+0x80/0x80 [ 517.039311][ T31] ? netlink_ack+0xb60/0xb60 [ 517.043919][ T31] ? __netlink_lookup+0x387/0x3b0 [ 517.048943][ T31] rtnetlink_rcv+0x1c/0x20 [ 517.999900][ T31] netlink_unicast+0x876/0xa40 [ 518.004697][ T31] netlink_sendmsg+0x86a/0xb70 [ 518.017475][ T31] ? netlink_getsockopt+0x530/0x530 [ 518.022903][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 518.028371][ T31] __sys_sendto+0x423/0x580 [ 518.033062][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 518.038442][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 518.044161][ T31] __x64_sys_sendto+0xe5/0x100 [ 518.048916][ T31] x64_sys_call+0x178/0x9a0 [ 519.001119][ T31] do_syscall_64+0x4c/0xa0 [ 519.005585][ T31] ? clear_bhb_loop+0x50/0xa0 [ 519.010720][ T31] ? clear_bhb_loop+0x50/0xa0 [ 519.015404][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.021314][ T31] RIP: 0033:0x7f26ae6e0583 [ 519.025717][ T31] RSP: 002b:00007ffc2357aad8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 519.034121][ T31] RAX: ffffffffffffffda RBX: 00007f26af463620 RCX: 00007f26ae6e0583 [ 519.042102][ T31] RDX: 000000000000002c RSI: 00007f26af463670 RDI: 0000000000000003 [ 519.999935][ T31] RBP: 0000000000000001 R08: 00007ffc2357aaf4 R09: 000000000000000c [ 520.007937][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 520.015942][ T31] R13: 0000000000000000 R14: 00007f26af463670 R15: 0000000000000000 [ 520.023935][ T31] [ 520.026951][ T31] INFO: task syz-executor:398 blocked for more than 142 seconds. [ 520.034652][ T31] Not tainted syzkaller #0 [ 520.039581][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.048226][ T31] task:syz-executor state:D stack:28000 pid: 398 ppid: 1 flags:0x00004004 [ 521.001535][ T31] Call Trace: [ 521.004844][ T31] [ 521.007764][ T31] __schedule+0xb6e/0x14c0 [ 521.012228][ T31] ? release_firmware_map_entry+0x190/0x190 [ 521.018125][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 521.023245][ T31] ? __kasan_check_write+0x14/0x20 [ 521.028344][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 521.034056][ T31] schedule+0x11e/0x1e0 [ 521.038199][ T31] schedule_preempt_disabled+0x13/0x20 [ 521.043656][ T31] __mutex_lock+0x7b6/0x11b0 [ 521.048230][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 521.999709][ T31] ? selinux_capable+0x29c/0x380 [ 522.004802][ T31] ? selinux_capset+0xf0/0xf0 [ 522.009487][ T31] ? cap_capable+0x1aa/0x230 [ 522.014127][ T31] __mutex_lock_slowpath+0xe/0x10 [ 522.019153][ T31] mutex_lock+0x100/0x1a0 [ 522.023490][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 522.030087][ T31] ? ns_capable+0x8c/0xf0 [ 522.034401][ T31] ? netlink_net_capable+0x125/0x160 [ 522.039677][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 522.044605][ T31] ? rtnetlink_bind+0x80/0x80 [ 522.049253][ T31] ? memcpy+0x56/0x70 [ 522.999932][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 523.005340][ T31] ? arch_stack_walk+0xee/0x140 [ 523.010219][ T31] ? avc_denied+0x1b0/0x1b0 [ 523.014713][ T31] ? stack_trace_save+0x98/0xe0 [ 523.019569][ T31] ? avc_has_perm+0x158/0x240 [ 523.024237][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 523.029603][ T31] ? do_syscall_64+0x4c/0xa0 [ 523.034184][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 523.039554][ T31] netlink_rcv_skb+0x1e0/0x430 [ 523.044303][ T31] ? rtnetlink_bind+0x80/0x80 [ 523.048955][ T31] ? netlink_ack+0xb60/0xb60 [ 523.999509][ T31] ? __netlink_lookup+0x387/0x3b0 [ 524.004589][ T31] rtnetlink_rcv+0x1c/0x20 [ 524.009002][ T31] netlink_unicast+0x876/0xa40 [ 524.013805][ T31] netlink_sendmsg+0x86a/0xb70 [ 524.018573][ T31] ? netlink_getsockopt+0x530/0x530 [ 524.023781][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 524.029227][ T31] __sys_sendto+0x423/0x580 [ 524.033733][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 524.039095][ T31] __x64_sys_sendto+0xe5/0x100 [ 524.043855][ T31] x64_sys_call+0x178/0x9a0 [ 524.048343][ T31] do_syscall_64+0x4c/0xa0 [ 524.999936][ T31] ? clear_bhb_loop+0x50/0xa0 [ 525.004694][ T31] ? clear_bhb_loop+0x50/0xa0 [ 525.009379][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.015304][ T31] RIP: 0033:0x7fe4f29a7583 [ 525.019734][ T31] RSP: 002b:00007ffe857798c8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 525.028131][ T31] RAX: ffffffffffffffda RBX: 00007fe4f372a620 RCX: 00007fe4f29a7583 [ 525.036108][ T31] RDX: 0000000000000028 RSI: 00007fe4f372a670 RDI: 0000000000000003 [ 525.044082][ T31] RBP: 0000000000000001 R08: 00007ffe857798e4 R09: 000000000000000c [ 526.009566][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 526.017568][ T31] R13: 0000000000000000 R14: 00007fe4f372a670 R15: 0000000000000000 [ 526.025604][ T31] [ 526.028615][ T31] NMI backtrace for cpu 0 [ 526.032914][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 526.040076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.050104][ T31] Call Trace: [ 526.053374][ T31] [ 526.056296][ T31] __dump_stack+0x21/0x30 [ 526.060622][ T31] dump_stack_lvl+0xee/0x150 [ 526.065203][ T31] ? show_regs_print_info+0x20/0x20 [ 526.070393][ T31] dump_stack+0x15/0x20 [ 526.074548][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 526.079475][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 526.085012][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 526.091156][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 526.096081][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 526.102137][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 526.108198][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 526.114170][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 526.120051][ T31] watchdog+0xd64/0xea0 [ 526.124196][ T31] ? hungtask_pm_notify+0x50/0x50 [ 526.129209][ T31] ? __kasan_check_read+0x11/0x20 [ 526.134223][ T31] ? __kthread_parkme+0xac/0x200 [ 526.139152][ T31] ? preempt_count_add+0x90/0x1b0 [ 526.144165][ T31] kthread+0x411/0x500 [ 526.148221][ T31] ? hungtask_pm_notify+0x50/0x50 [ 526.153234][ T31] ? kthread_blkcg+0xd0/0xd0 [ 526.157814][ T31] ret_from_fork+0x1f/0x30 [ 526.162219][ T31] [ 526.165386][ T31] Sending NMI from CPU 0 to CPUs 1: [ 526.170659][ C1] NMI backtrace for cpu 1 [ 526.170668][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 526.170682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.170690][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 526.170711][ C1] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d ec 6e 80 05 48 89 de e8 94 c8 3d 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 90 ae 99 7e 65 8b 15 91 ae 99 [ 526.170722][ C1] RSP: 0018:ffffc90000ab7158 EFLAGS: 00000286 [ 526.170736][ C1] RAX: ffffffff8164f348 RBX: 0000000000000000 RCX: ffff888110df2780 [ 526.170747][ C1] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 526.170755][ C1] RBP: ffffc90000ab7220 R08: dffffc0000000000 R09: ffffed1025f00c76 [ 526.170766][ C1] R10: ffffed1025f00c76 R11: 1ffff11025f00c75 R12: 00000000fffffffe [ 526.170776][ C1] R13: ffffffff866f1720 R14: ffffffff866f1718 R15: 0000000000000001 [ 526.170786][ C1] FS: 000055555c6f9500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 526.170799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.170809][ C1] CR2: 00007f5332843000 CR3: 000000011fcb1000 CR4: 00000000003506a0 [ 526.170822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 526.170831][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 526.170839][ C1] Call Trace: [ 526.170843][ C1] [ 526.170847][ C1] ? from_kprojid+0x264/0x6a0 [ 526.170863][ C1] ? make_kprojid+0x670/0x670 [ 526.170878][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 526.170893][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 526.170909][ C1] ext4_mark_iloc_dirty+0x704/0x3f50 [ 526.170925][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 526.170940][ C1] ? ext4_reserve_inode_write+0x281/0x320 [ 526.170955][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 526.170969][ C1] ? ext4_journal_check_start+0x172/0x240 [ 526.170985][ C1] ext4_dirty_inode+0xbd/0x100 [ 526.170998][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 526.171013][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 526.171030][ C1] ext4_xattr_block_set+0x1591/0x2cb0 [ 526.171049][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 526.171065][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 526.171080][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 526.171098][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 526.171114][ C1] ? selinux_inode_free_security+0x210/0x210 [ 526.171131][ C1] ext4_initxattrs+0xa6/0x110 [ 526.171144][ C1] security_inode_init_security+0x254/0x370 [ 526.171160][ C1] ? posix_acl_create+0x118/0x440 [ 526.171174][ C1] ? ext4_init_security+0x40/0x40 [ 526.171186][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 526.171202][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 526.171218][ C1] ? __ext4_set_acl+0x600/0x600 [ 526.171230][ C1] ? prandom_u32+0x24d/0x290 [ 526.171243][ C1] ext4_init_security+0x34/0x40 [ 526.171256][ C1] __ext4_new_inode+0x2c41/0x3690 [ 526.171271][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 526.171285][ C1] ? dquot_initialize+0x20/0x20 [ 526.171299][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 526.171314][ C1] ? may_create+0x377/0x460 [ 526.171326][ C1] ext4_mknod+0x235/0x4a0 [ 526.171341][ C1] ? ext4_rmdir+0x9f0/0x9f0 [ 526.171353][ C1] ? selinux_inode_mknod+0x7b/0xa0 [ 526.171368][ C1] ? security_inode_mknod+0xca/0x110 [ 526.171382][ C1] vfs_mknod+0x452/0x4e0 [ 526.171397][ C1] unix_bind+0x488/0x870 [ 526.171410][ C1] ? errseq_sample+0x44/0x70 [ 526.171423][ C1] ? unix_release+0xc0/0xc0 [ 526.171434][ C1] ? check_stack_object+0x106/0x140 [ 526.171450][ C1] ? security_socket_bind+0x82/0xa0 [ 526.171462][ C1] __sys_bind+0x2ff/0x400 [ 526.171478][ C1] ? __se_sys_futex+0x139/0x310 [ 526.171493][ C1] ? __ia32_sys_socketpair+0xb0/0xb0 [ 526.171510][ C1] ? debug_smp_processor_id+0x17/0x20 [ 526.171525][ C1] __x64_sys_bind+0x7a/0x90 [ 526.171539][ C1] x64_sys_call+0x6f0/0x9a0 [ 526.171552][ C1] do_syscall_64+0x4c/0xa0 [ 526.171567][ C1] ? clear_bhb_loop+0x50/0xa0 [ 526.171579][ C1] ? clear_bhb_loop+0x50/0xa0 [ 526.171591][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.171614][ C1] RIP: 0033:0x7f8c37f4c749 [ 526.171627][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.171638][ C1] RSP: 002b:00007fffbf391288 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 526.171652][ C1] RAX: ffffffffffffffda RBX: 00007f8c381a2fa0 RCX: 00007f8c37f4c749 [ 526.171662][ C1] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 526.171671][ C1] RBP: 00007f8c37fd0f91 R08: 0000000000000000 R09: 0000000000000000 [ 526.171680][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.171689][ C1] R13: 00007f8c381a2fa0 R14: 00007f8c381a2fa0 R15: 0000000000000003 [ 526.171700][ C1] [ 548.999857][ T31] INFO: task kworker/u4:4:394 blocked for more than 234 seconds. [ 549.007752][ T31] Not tainted syzkaller #0 [ 549.012780][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.021631][ T31] task:kworker/u4:4 state:D stack:23904 pid: 394 ppid: 2 flags:0x00004000 [ 549.030863][ T31] Workqueue: events_unbound linkwatch_event [ 549.036739][ T31] Call Trace: [ 549.040021][ T31] [ 549.042939][ T31] __schedule+0xb6e/0x14c0 [ 549.047331][ T31] ? release_firmware_map_entry+0x190/0x190 [ 549.999738][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 550.005019][ T31] ? __kasan_check_write+0x14/0x20 [ 550.010190][ T31] ? kthread_data+0x50/0xc0 [ 550.014741][ T31] ? wq_worker_sleeping+0x60/0x200 [ 550.019854][ T31] schedule+0x11e/0x1e0 [ 550.024009][ T31] schedule_preempt_disabled+0x13/0x20 [ 550.029485][ T31] __mutex_lock+0x7b6/0x11b0 [ 550.034065][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 550.040833][ T31] ? __kasan_check_write+0x14/0x20 [ 550.045936][ T31] ? __switch_to+0x51d/0xe20 [ 551.000063][ T31] __mutex_lock_slowpath+0xe/0x10 [ 551.005153][ T31] mutex_lock+0x100/0x1a0 [ 551.009516][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 551.016110][ T31] ? __schedule+0xb76/0x14c0 [ 551.020712][ T31] rtnl_lock+0x15/0x20 [ 551.024772][ T31] linkwatch_event+0xe/0x60 [ 551.029250][ T31] process_one_work+0x6be/0xba0 [ 551.034214][ T31] worker_thread+0xa59/0x1200 [ 551.038916][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 551.044391][ T31] ? __kthread_parkme+0xac/0x200 [ 551.049319][ T31] kthread+0x411/0x500 [ 551.999929][ T31] ? worker_clr_flags+0x190/0x190 [ 552.004996][ T31] ? kthread_blkcg+0xd0/0xd0 [ 552.009793][ T31] ret_from_fork+0x1f/0x30 [ 552.014215][ T31] [ 552.017209][ T31] INFO: task syz-executor:396 blocked for more than 237 seconds. [ 552.024961][ T31] Not tainted syzkaller #0 [ 552.029908][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.038557][ T31] task:syz-executor state:D stack:22432 pid: 396 ppid: 1 flags:0x00004004 [ 552.047760][ T31] Call Trace: [ 552.999730][ T31] [ 553.002749][ T31] __schedule+0xb6e/0x14c0 [ 553.007246][ T31] ? release_firmware_map_entry+0x190/0x190 [ 553.013192][ T31] ? wake_up_process+0x10/0x20 [ 553.017955][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 553.023770][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 553.029221][ T31] schedule+0x11e/0x1e0 [ 553.033387][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 553.039010][ T31] ? synchronize_rcu+0x110/0x110 [ 553.043949][ T31] ? __kasan_slab_free+0x11/0x20 [ 553.048872][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 554.009622][ T31] ? rcu_exp_handler+0x370/0x370 [ 554.014609][ T31] ? kfree+0xc4/0x270 [ 554.018579][ T31] ? kfree_const+0x39/0x40 [ 554.022990][ T31] ? __kasan_check_write+0x14/0x20 [ 554.028091][ T31] ? kobject_put+0x1a8/0x270 [ 554.032682][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 554.038737][ T31] ? kobject_put+0x214/0x270 [ 554.043324][ T31] ? io_schedule+0xe0/0xe0 [ 554.047732][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 554.999969][ T31] ? __kasan_check_read+0x11/0x20 [ 555.005251][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 555.011183][ T31] ? linkwatch_fire_event+0x307/0x380 [ 555.016557][ T31] veth_newlink+0x9bc/0xda0 [ 555.021065][ T31] ? veth_validate+0x200/0x200 [ 555.025820][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 555.030837][ T31] ? veth_validate+0x200/0x200 [ 555.035588][ T31] rtnl_newlink+0x112d/0x17b0 [ 555.040261][ T31] ? rtnl_setlink+0x400/0x400 [ 555.045011][ T31] ? memcpy+0x56/0x70 [ 555.049030][ T31] ? __kasan_check_write+0x14/0x20 [ 556.009714][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 556.016350][ T31] ? ns_capable+0x8c/0xf0 [ 556.020882][ T31] ? netlink_net_capable+0x125/0x160 [ 556.026167][ T31] ? rtnl_setlink+0x400/0x400 [ 556.030872][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 556.035797][ T31] ? rtnetlink_bind+0x80/0x80 [ 556.040481][ T31] ? memcpy+0x56/0x70 [ 556.044451][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 557.000718][ T31] ? arch_stack_walk+0xee/0x140 [ 557.005591][ T31] ? avc_denied+0x1b0/0x1b0 [ 557.010249][ T31] ? stack_trace_save+0x98/0xe0 [ 557.015113][ T31] ? avc_has_perm+0x158/0x240 [ 557.019795][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 557.025156][ T31] ? do_syscall_64+0x4c/0xa0 [ 557.029742][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 557.035100][ T31] netlink_rcv_skb+0x1e0/0x430 [ 557.039861][ T31] ? rtnetlink_bind+0x80/0x80 [ 557.044529][ T31] ? netlink_ack+0xb60/0xb60 [ 557.049094][ T31] ? __netlink_lookup+0x387/0x3b0 [ 557.999465][ T31] rtnetlink_rcv+0x1c/0x20 [ 558.003927][ T31] netlink_unicast+0x876/0xa40 [ 558.008685][ T31] netlink_sendmsg+0x86a/0xb70 [ 558.013460][ T31] ? netlink_getsockopt+0x530/0x530 [ 558.018648][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 558.024129][ T31] __sys_sendto+0x423/0x580 [ 558.028621][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 558.033992][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 558.039723][ T31] __x64_sys_sendto+0xe5/0x100 [ 558.044470][ T31] x64_sys_call+0x178/0x9a0 [ 558.048943][ T31] do_syscall_64+0x4c/0xa0 [ 559.000593][ T31] ? clear_bhb_loop+0x50/0xa0 [ 559.005312][ T31] ? clear_bhb_loop+0x50/0xa0 [ 559.010026][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 559.015948][ T31] RIP: 0033:0x7f26ae6e0583 [ 559.020383][ T31] RSP: 002b:00007ffc2357aad8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 559.028785][ T31] RAX: ffffffffffffffda RBX: 00007f26af463620 RCX: 00007f26ae6e0583 [ 559.036770][ T31] RDX: 000000000000002c RSI: 00007f26af463670 RDI: 0000000000000003 [ 559.044753][ T31] RBP: 0000000000000001 R08: 00007ffc2357aaf4 R09: 000000000000000c [ 559.999496][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 560.007544][ T31] R13: 0000000000000000 R14: 00007f26af463670 R15: 0000000000000000 [ 560.015583][ T31] [ 560.018596][ T31] INFO: task syz-executor:398 blocked for more than 182 seconds. [ 560.026307][ T31] Not tainted syzkaller #0 [ 560.031238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.039902][ T31] task:syz-executor state:D stack:28000 pid: 398 ppid: 1 flags:0x00004004 [ 560.049100][ T31] Call Trace: [ 561.001394][ T31] [ 561.004448][ T31] __schedule+0xb6e/0x14c0 [ 561.008863][ T31] ? release_firmware_map_entry+0x190/0x190 [ 561.014865][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 561.020162][ T31] ? __kasan_check_write+0x14/0x20 [ 561.025268][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 561.030986][ T31] schedule+0x11e/0x1e0 [ 561.035136][ T31] schedule_preempt_disabled+0x13/0x20 [ 561.040593][ T31] __mutex_lock+0x7b6/0x11b0 [ 561.045173][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 561.999669][ T31] ? selinux_capable+0x29c/0x380 [ 562.004645][ T31] ? selinux_capset+0xf0/0xf0 [ 562.009313][ T31] ? cap_capable+0x1aa/0x230 [ 562.013957][ T31] __mutex_lock_slowpath+0xe/0x10 [ 562.018974][ T31] mutex_lock+0x100/0x1a0 [ 562.023316][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 562.029913][ T31] ? ns_capable+0x8c/0xf0 [ 562.034231][ T31] ? netlink_net_capable+0x125/0x160 [ 562.039524][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 562.044456][ T31] ? rtnetlink_bind+0x80/0x80 [ 562.049105][ T31] ? memcpy+0x56/0x70 [ 563.001120][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 563.006530][ T31] ? arch_stack_walk+0xee/0x140 [ 563.011462][ T31] ? avc_denied+0x1b0/0x1b0 [ 563.015994][ T31] ? stack_trace_save+0x98/0xe0 [ 563.020871][ T31] ? avc_has_perm+0x158/0x240 [ 563.025537][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 563.030905][ T31] ? do_syscall_64+0x4c/0xa0 [ 563.035486][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 563.040854][ T31] netlink_rcv_skb+0x1e0/0x430 [ 563.045612][ T31] ? rtnetlink_bind+0x80/0x80 [ 563.999508][ T31] ? netlink_ack+0xb60/0xb60 [ 564.004137][ T31] ? __netlink_lookup+0x387/0x3b0 [ 564.009151][ T31] rtnetlink_rcv+0x1c/0x20 [ 564.013571][ T31] netlink_unicast+0x876/0xa40 [ 564.018326][ T31] netlink_sendmsg+0x86a/0xb70 [ 564.023082][ T31] ? netlink_getsockopt+0x530/0x530 [ 564.028267][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 564.033763][ T31] __sys_sendto+0x423/0x580 [ 564.038259][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 564.043628][ T31] __x64_sys_sendto+0xe5/0x100 [ 564.048382][ T31] x64_sys_call+0x178/0x9a0 [ 564.999709][ T31] do_syscall_64+0x4c/0xa0 [ 565.004167][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.008832][ T31] ? clear_bhb_loop+0x50/0xa0 [ 565.013569][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.019511][ T31] RIP: 0033:0x7fe4f29a7583 [ 565.023910][ T31] RSP: 002b:00007ffe857798c8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 565.032312][ T31] RAX: ffffffffffffffda RBX: 00007fe4f372a620 RCX: 00007fe4f29a7583 [ 565.040291][ T31] RDX: 0000000000000028 RSI: 00007fe4f372a670 RDI: 0000000000000003 [ 565.048247][ T31] RBP: 0000000000000001 R08: 00007ffe857798e4 R09: 000000000000000c [ 566.009487][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 566.017489][ T31] R13: 0000000000000000 R14: 00007fe4f372a670 R15: 0000000000000000 [ 566.025502][ T31] [ 566.028514][ T31] NMI backtrace for cpu 1 [ 566.032817][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 566.039980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.050006][ T31] Call Trace: [ 566.053258][ T31] [ 566.056159][ T31] __dump_stack+0x21/0x30 [ 566.060470][ T31] dump_stack_lvl+0xee/0x150 [ 566.065029][ T31] ? show_regs_print_info+0x20/0x20 [ 566.070200][ T31] dump_stack+0x15/0x20 [ 566.074327][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 566.079236][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 566.084752][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 566.090877][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 566.095783][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 566.101824][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 566.107873][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 566.113829][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 566.119703][ T31] watchdog+0xd64/0xea0 [ 566.123837][ T31] ? hungtask_pm_notify+0x50/0x50 [ 566.128834][ T31] ? __kasan_check_read+0x11/0x20 [ 566.133835][ T31] ? __kthread_parkme+0xac/0x200 [ 566.138748][ T31] ? preempt_count_add+0x90/0x1b0 [ 566.143747][ T31] kthread+0x411/0x500 [ 566.147784][ T31] ? hungtask_pm_notify+0x50/0x50 [ 566.152778][ T31] ? kthread_blkcg+0xd0/0xd0 [ 566.157339][ T31] ret_from_fork+0x1f/0x30 [ 566.161733][ T31] [ 566.164870][ T31] Sending NMI from CPU 1 to CPUs 0: [ 566.170087][ C0] NMI backtrace for cpu 0 [ 566.170096][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 566.170110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.170118][ C0] RIP: 0010:__rcu_read_unlock+0x53/0xa0 [ 566.170139][ C0] Code: 42 0f b6 04 30 84 c0 75 2e ff 0b 75 1c 48 8d 9f 50 04 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 2f 83 3b 00 75 07 5b <41> 5e 41 5f 5d c3 e8 42 00 00 00 eb f2 89 d9 80 e1 07 80 c1 03 38 [ 566.170151][ C0] RSP: 0018:ffffc90002087210 EFLAGS: 00000246 [ 566.170164][ C0] RAX: 0000000000000000 RBX: ffff888122a26f58 RCX: ffff888110072780 [ 566.170175][ C0] RDX: 0000000000000000 RSI: 0000000000000013 RDI: ffff888110072780 [ 566.170184][ C0] RBP: ffffc90002087220 R08: dffffc0000000000 R09: ffffed1024544e39 [ 566.170195][ C0] R10: ffffed1024544e39 R11: 1ffff11024544e38 R12: ffffc90002087380 [ 566.170206][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888122a27088 [ 566.170217][ C0] FS: 0000555567f42500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 566.170230][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.170240][ C0] CR2: 000000c0067f5010 CR3: 000000011fbb5000 CR4: 00000000003506b0 [ 566.170253][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 566.170261][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 566.170270][ C0] Call Trace: [ 566.170274][ C0] [ 566.170279][ C0] ext4_mark_iloc_dirty+0x2b49/0x3f50 [ 566.170296][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 566.170314][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 566.170327][ C0] ? ext4_journal_check_start+0x172/0x240 [ 566.170344][ C0] ext4_dirty_inode+0xbd/0x100 [ 566.170357][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 566.170371][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 566.170388][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 566.170408][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 566.170423][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 566.170439][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 566.170456][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 566.170472][ C0] ? selinux_inode_free_security+0x210/0x210 [ 566.170489][ C0] ext4_initxattrs+0xa6/0x110 [ 566.170502][ C0] security_inode_init_security+0x254/0x370 [ 566.170518][ C0] ? posix_acl_create+0x118/0x440 [ 566.170532][ C0] ? ext4_init_security+0x40/0x40 [ 566.170545][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 566.170561][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 566.170576][ C0] ? __ext4_set_acl+0x600/0x600 [ 566.170588][ C0] ? prandom_u32+0x24d/0x290 [ 566.170601][ C0] ext4_init_security+0x34/0x40 [ 566.170614][ C0] __ext4_new_inode+0x2c41/0x3690 [ 566.170635][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 566.170648][ C0] ? dquot_initialize+0x20/0x20 [ 566.170662][ C0] ? selinux_determine_inode_label+0x290/0x3e0 [ 566.170677][ C0] ? may_create+0x377/0x460 [ 566.170689][ C0] ext4_mknod+0x235/0x4a0 [ 566.170703][ C0] ? ext4_rmdir+0x9f0/0x9f0 [ 566.170715][ C0] ? selinux_inode_mknod+0x7b/0xa0 [ 566.170730][ C0] ? security_inode_mknod+0xca/0x110 [ 566.170745][ C0] vfs_mknod+0x452/0x4e0 [ 566.170759][ C0] unix_bind+0x488/0x870 [ 566.170773][ C0] ? errseq_sample+0x44/0x70 [ 566.170786][ C0] ? unix_release+0xc0/0xc0 [ 566.170797][ C0] ? check_stack_object+0x106/0x140 [ 566.170814][ C0] ? security_socket_bind+0x82/0xa0 [ 566.170827][ C0] __sys_bind+0x2ff/0x400 [ 566.170842][ C0] ? __se_sys_futex+0x139/0x310 [ 566.170857][ C0] ? __ia32_sys_socketpair+0xb0/0xb0 [ 566.170875][ C0] ? debug_smp_processor_id+0x17/0x20 [ 566.170889][ C0] __x64_sys_bind+0x7a/0x90 [ 566.170903][ C0] x64_sys_call+0x6f0/0x9a0 [ 566.170917][ C0] do_syscall_64+0x4c/0xa0 [ 566.170931][ C0] ? clear_bhb_loop+0x50/0xa0 [ 566.170943][ C0] ? clear_bhb_loop+0x50/0xa0 [ 566.170955][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 566.170971][ C0] RIP: 0033:0x7f7473512749 [ 566.170984][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.170994][ C0] RSP: 002b:00007ffc21cef1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 566.171008][ C0] RAX: ffffffffffffffda RBX: 00007f7473768fa0 RCX: 00007f7473512749 [ 566.171018][ C0] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004 [ 566.171027][ C0] RBP: 00007f7473596f91 R08: 0000000000000000 R09: 0000000000000000 [ 566.171036][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.171044][ C0] R13: 00007f7473768fa0 R14: 00007f7473768fa0 R15: 0000000000000003 [ 566.171055][ C0]