Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. 2025/11/29 00:53:49 parsed 1 programs [ 281.111841][ T30] audit: type=1400 audit(1764377629.773:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 281.132567][ T30] audit: type=1400 audit(1764377629.773:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 281.832352][ T30] audit: type=1400 audit(1764377630.493:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 281.833585][ T291] cgroup: Unknown subsys name 'net' [ 281.855044][ T30] audit: type=1400 audit(1764377630.493:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 281.882324][ T30] audit: type=1400 audit(1764377630.513:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 281.882522][ T291] cgroup: Unknown subsys name 'devices' [ 282.023095][ T291] cgroup: Unknown subsys name 'hugetlb' [ 282.028700][ T291] cgroup: Unknown subsys name 'rlimit' [ 282.199832][ T30] audit: type=1400 audit(1764377630.853:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.223327][ T30] audit: type=1400 audit(1764377630.853:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.243934][ T30] audit: type=1400 audit(1764377630.853:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.264375][ T30] audit: type=1400 audit(1764377630.853:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 282.284780][ T30] audit: type=1400 audit(1764377630.863:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 282.314017][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 282.355096][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 282.871233][ T297] request_module fs-gadgetfs succeeded, but still no fs? [ 282.983564][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.990996][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.998589][ T306] device bridge_slave_0 entered promiscuous mode [ 283.006441][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.013526][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.020870][ T306] device bridge_slave_1 entered promiscuous mode [ 283.071852][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.078894][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.086244][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.093292][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.113247][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.120512][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.128423][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.135885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.145758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.153960][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.160991][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.169811][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.178133][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.185192][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.199286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.208357][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.224991][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.236759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.245201][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.252670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.260754][ T306] device veth0_vlan entered promiscuous mode [ 283.270512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.280740][ T306] device veth1_macvtap entered promiscuous mode [ 283.291893][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.301975][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.338801][ T306] syz-executor (306) used greatest stack depth: 22080 bytes left [ 283.862216][ T266] device bridge_slave_1 left promiscuous mode [ 283.868464][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.876936][ T266] device bridge_slave_0 left promiscuous mode [ 283.883448][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.892121][ T266] device veth1_macvtap left promiscuous mode [ 283.898135][ T266] device veth0_vlan left promiscuous mode 2025/11/29 00:53:52 executed programs: 0 [ 284.266523][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.273654][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.281122][ T363] device bridge_slave_0 entered promiscuous mode [ 284.287853][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.294934][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.302305][ T363] device bridge_slave_1 entered promiscuous mode [ 284.353237][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.360364][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.367664][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.374706][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.391908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.399635][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.407122][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.416515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.424852][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.431932][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.440447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.448788][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.455815][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.467418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.476606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.489849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.500697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.508751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.516289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.524904][ T363] device veth0_vlan entered promiscuous mode [ 284.534204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.543222][ T363] device veth1_macvtap entered promiscuous mode [ 284.551937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.561906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.587610][ T373] loop2: detected capacity change from 0 to 1024 [ 284.631799][ T373] ======================================================= [ 284.631799][ T373] WARNING: The mand mount option has been deprecated and [ 284.631799][ T373] and is ignored by this kernel. Remove the mand [ 284.631799][ T373] option from the mount to silence this warning. [ 284.631799][ T373] ======================================================= [ 284.683038][ T373] EXT4-fs (loop2): Ignoring removed oldalloc option [ 284.689681][ T373] EXT4-fs (loop2): Ignoring removed orlov option [ 284.702926][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 285.661036][ C0] sched: RT throttling activated [ 299.654169][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.661246][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.668528][ T378] device bridge_slave_0 entered promiscuous mode [ 299.675373][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.682414][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.689797][ T378] device bridge_slave_1 entered promiscuous mode [ 299.752478][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.759635][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.767072][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.774122][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.798077][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.805616][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.814070][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.821745][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.837985][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.846264][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.853324][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.860974][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.869691][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.876831][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.892121][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.900169][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.916808][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.927721][ T378] device veth0_vlan entered promiscuous mode [ 299.941456][ T378] device veth1_macvtap entered promiscuous mode 2025/11/29 00:54:08 executed programs: 3 [ 299.966598][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.979010][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.988005][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.997221][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.022404][ T389] loop3: detected capacity change from 0 to 1024 [ 300.030872][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.039819][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.052677][ T389] EXT4-fs (loop3): Ignoring removed oldalloc option [ 300.059402][ T389] EXT4-fs (loop3): Ignoring removed orlov option [ 300.095207][ T389] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 405.710978][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.717952][ C1] (detected by 1, t=10006 jiffies, g=1865, q=724) [ 405.724466][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10006 (4294977788-4294967782), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 405.738003][ C1] rcu: rcu_preempt kthread starved for 10006 jiffies! g1865 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 405.749155][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 405.759138][ C1] rcu: RCU grace-period kthread stack dump: [ 405.765029][ C1] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 405.775822][ C1] Call Trace: [ 405.779113][ C1] [ 405.782055][ C1] __schedule+0xb6e/0x14c0 [ 405.786496][ C1] ? release_firmware_map_entry+0x190/0x190 [ 405.792402][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 405.798217][ C1] ? __mod_timer+0x7ae/0xb30 [ 405.802962][ C1] schedule+0x11e/0x1e0 [ 405.807149][ C1] schedule_timeout+0x12c/0x2e0 [ 405.812020][ C1] ? console_conditional_schedule+0x30/0x30 [ 405.817938][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 405.823418][ C1] ? update_process_times+0x200/0x200 [ 405.828801][ C1] ? prepare_to_swait_event+0x308/0x320 [ 405.834358][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 405.839141][ C1] ? debug_smp_processor_id+0x17/0x20 [ 405.844518][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 405.849639][ C1] ? rcu_gp_init+0xc00/0xc00 [ 405.854235][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 405.859439][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 405.864040][ C1] rcu_gp_kthread+0x98/0x330 [ 405.868635][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 405.873318][ C1] ? __kasan_check_read+0x11/0x20 [ 405.878442][ C1] ? __kthread_parkme+0xac/0x200 [ 405.883413][ C1] ? preempt_count_add+0x90/0x1b0 [ 405.888444][ C1] kthread+0x411/0x500 [ 405.892525][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 405.897210][ C1] ? kthread_blkcg+0xd0/0xd0 [ 405.901809][ C1] ret_from_fork+0x1f/0x30 [ 405.906233][ C1] [ 405.909256][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 405.915580][ C1] NMI backtrace for cpu 1 [ 405.919905][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 405.927016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.937076][ C1] Call Trace: [ 405.940358][ C1] [ 405.943235][ C1] __dump_stack+0x21/0x30 [ 405.947578][ C1] dump_stack_lvl+0xee/0x150 [ 405.952178][ C1] ? show_regs_print_info+0x20/0x20 [ 405.957417][ C1] dump_stack+0x15/0x20 [ 405.961583][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 405.966527][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 405.972688][ C1] ? load_image+0x3a0/0x3a0 [ 405.977201][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 405.983274][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 405.989350][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 405.995342][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 406.001252][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 406.007437][ C1] print_other_cpu_stall+0xded/0xfd0 [ 406.012731][ C1] ? print_cpu_stall+0x600/0x600 [ 406.017677][ C1] ? tick_nohz_handler+0x300/0x300 [ 406.022798][ C1] ? accumulate_nsecs_to_secs+0xb1/0x230 [ 406.028438][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 406.033731][ C1] rcu_sched_clock_irq+0x8a3/0x12b0 [ 406.038940][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 406.045101][ C1] ? raise_softirq+0x71/0xe0 [ 406.049699][ C1] ? __raise_softirq_irqoff+0xd0/0xd0 [ 406.055081][ C1] ? hrtimer_run_queues+0x166/0x430 [ 406.060390][ C1] update_process_times+0x198/0x200 [ 406.065600][ C1] tick_sched_timer+0x17c/0x240 [ 406.070460][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 406.076014][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 406.081228][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 406.086348][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 406.092525][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 406.097474][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 406.103381][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 406.109037][ C1] [ 406.111978][ C1] [ 406.114912][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 406.120902][ C1] RIP: 0010:ext4_mark_iloc_dirty+0xe8e/0x3f50 [ 406.126980][ C1] Code: 17 e8 76 21 90 ff eb 05 e8 6f 21 90 ff 4c 8b a5 78 ff ff ff 48 8b 55 d0 48 8b 45 c8 48 8d 98 e4 fe ff ff 48 89 d8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 ee 23 00 00 44 8b 33 48 8d 5a 14 48 89 [ 406.149897][ C1] RSP: 0018:ffffc90000cc6fb0 EFLAGS: 00000a03 [ 406.155997][ C1] RAX: 1ffff1102443d810 RBX: ffff8881221ec084 RCX: ffff8881221ec1a0 [ 406.163982][ C1] RDX: ffff88812ef42600 RSI: 0000000000000080 RDI: 0000000000000017 [ 406.172048][ C1] RBP: ffffc90000cc70b8 R08: dffffc0000000000 R09: ffffed102443d814 [ 406.180030][ C1] R10: ffffed102443d814 R11: 1ffff1102443d813 R12: 1ffff1102443d839 [ 406.188010][ C1] R13: dffffc0000000000 R14: 00000000b86c74d4 R15: ffff8881221ec1c8 [ 406.195996][ C1] ? __kasan_check_write+0x14/0x20 [ 406.201125][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 406.205812][ C1] ? __kasan_check_read+0x11/0x20 [ 406.210848][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 406.216318][ C1] ? ext4_journal_check_start+0x172/0x240 [ 406.222050][ C1] ext4_dirty_inode+0xbd/0x100 [ 406.226820][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 406.232636][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 406.237672][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 406.243059][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 406.248523][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 406.253903][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 406.259282][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 406.264835][ C1] ? selinux_inode_free_security+0x210/0x210 [ 406.270826][ C1] ext4_initxattrs+0xa6/0x110 [ 406.275600][ C1] security_inode_init_security+0x254/0x370 [ 406.281508][ C1] ? posix_acl_create+0x118/0x440 [ 406.286541][ C1] ? ext4_init_security+0x40/0x40 [ 406.291573][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 406.297733][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 406.302852][ C1] ? __ext4_set_acl+0x600/0x600 [ 406.307705][ C1] ? prandom_u32+0x24d/0x290 [ 406.312302][ C1] ext4_init_security+0x34/0x40 [ 406.317156][ C1] __ext4_new_inode+0x2c41/0x3690 [ 406.322187][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 406.327909][ C1] ? dquot_initialize+0x20/0x20 [ 406.332767][ C1] ? ext4_lookup+0x427/0x840 [ 406.337369][ C1] ? ext4_add_entry+0xf40/0xf40 [ 406.342227][ C1] ? may_create+0x377/0x460 [ 406.346733][ C1] ext4_create+0x22a/0x460 [ 406.351155][ C1] ? ext4_lookup+0x840/0x840 [ 406.355749][ C1] ? selinux_inode_create+0x22/0x30 [ 406.360954][ C1] ? security_inode_create+0xbd/0x110 [ 406.366329][ C1] ? ext4_lookup+0x840/0x840 [ 406.370928][ C1] path_openat+0x11ae/0x2f10 [ 406.375530][ C1] ? do_filp_open+0x3e0/0x3e0 [ 406.380222][ C1] ? expand_files+0xde/0x8e0 [ 406.384849][ C1] do_filp_open+0x1b3/0x3e0 [ 406.389387][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 406.394001][ C1] do_sys_openat2+0x14c/0x7b0 [ 406.398694][ C1] ? __se_sys_futex+0x139/0x310 [ 406.403558][ C1] ? do_sys_open+0xe0/0xe0 [ 406.407994][ C1] ? __x64_sys_futex+0x100/0x100 [ 406.412939][ C1] __x64_sys_creat+0x8e/0xb0 [ 406.417542][ C1] x64_sys_call+0x94a/0x9a0 [ 406.422055][ C1] do_syscall_64+0x4c/0xa0 [ 406.426483][ C1] ? clear_bhb_loop+0x50/0xa0 [ 406.431165][ C1] ? clear_bhb_loop+0x50/0xa0 [ 406.435845][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.441749][ C1] RIP: 0033:0x7f366c7b0749 [ 406.446169][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.465779][ C1] RSP: 002b:00007ffee5af7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 406.474206][ C1] RAX: ffffffffffffffda RBX: 00007f366ca06fa0 RCX: 00007f366c7b0749 [ 406.482183][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 406.490246][ C1] RBP: 00007f366c834f91 R08: 0000000000000000 R09: 0000000000000000 [ 406.498224][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.506213][ C1] R13: 00007f366ca06fa0 R14: 00007f366ca06fa0 R15: 0000000000000002 [ 406.514475][ C1] [ 448.651009][ T31] INFO: task kworker/u4:3:266 blocked for more than 125 seconds. [ 448.658771][ T31] Not tainted syzkaller #0 [ 448.663824][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.672723][ T31] task:kworker/u4:3 state:D stack:21248 pid: 266 ppid: 2 flags:0x00004000 [ 448.681979][ T31] Workqueue: events_unbound linkwatch_event [ 448.687887][ T31] Call Trace: [ 448.691189][ T31] [ 448.694149][ T31] __schedule+0xb6e/0x14c0 [ 448.698572][ T31] ? release_firmware_map_entry+0x190/0x190 [ 449.652461][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 449.657890][ T31] ? __kasan_check_write+0x14/0x20 [ 449.663172][ T31] ? kthread_data+0x50/0xc0 [ 449.667792][ T31] ? wq_worker_sleeping+0x60/0x200 [ 449.673005][ T31] schedule+0x11e/0x1e0 [ 449.677204][ T31] schedule_preempt_disabled+0x13/0x20 [ 449.682695][ T31] __mutex_lock+0x7b6/0x11b0 [ 449.687298][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 449.692960][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 449.699738][ T31] ? __kasan_check_write+0x14/0x20 [ 450.651204][ T31] ? __switch_to+0x51d/0xe20 [ 450.655847][ T31] __mutex_lock_slowpath+0xe/0x10 [ 450.660879][ T31] mutex_lock+0x100/0x1a0 [ 450.665251][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 450.671929][ T31] ? __schedule+0xb76/0x14c0 [ 450.676551][ T31] rtnl_lock+0x15/0x20 [ 450.680644][ T31] linkwatch_event+0xe/0x60 [ 450.685236][ T31] process_one_work+0x6be/0xba0 [ 450.690115][ T31] worker_thread+0xa59/0x1200 [ 450.694852][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 450.700352][ T31] ? __kthread_parkme+0xac/0x200 [ 451.661290][ T31] kthread+0x411/0x500 [ 451.665563][ T31] ? worker_clr_flags+0x190/0x190 [ 451.670650][ T31] ? kthread_blkcg+0xd0/0xd0 [ 451.675334][ T31] ret_from_fork+0x1f/0x30 [ 451.679808][ T31] [ 451.682875][ T31] INFO: task syz-executor:394 blocked for more than 128 seconds. [ 451.690616][ T31] Not tainted syzkaller #0 [ 451.695577][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.651052][ T31] task:syz-executor state:D stack:22976 pid: 394 ppid: 1 flags:0x00004004 [ 452.660401][ T31] Call Trace: [ 452.663709][ T31] [ 452.666672][ T31] __schedule+0xb6e/0x14c0 [ 452.671131][ T31] ? release_firmware_map_entry+0x190/0x190 [ 452.677033][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 452.682855][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 452.688316][ T31] schedule+0x11e/0x1e0 [ 452.692487][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 452.698126][ T31] ? synchronize_rcu+0x110/0x110 [ 453.662173][ T31] ? __kasan_slab_free+0x11/0x20 [ 453.667228][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 453.672827][ T31] ? rcu_exp_handler+0x370/0x370 [ 453.677773][ T31] ? kfree+0xc4/0x270 [ 453.681774][ T31] ? kfree_const+0x39/0x40 [ 453.686229][ T31] ? __kasan_check_write+0x14/0x20 [ 453.691383][ T31] ? kobject_put+0x1a8/0x270 [ 453.695984][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 454.651076][ T31] ? kobject_put+0x214/0x270 [ 454.655722][ T31] ? io_schedule+0xe0/0xe0 [ 454.660150][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 454.666266][ T31] ? __kasan_check_read+0x11/0x20 [ 454.671345][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 454.677239][ T31] ? linkwatch_fire_event+0x307/0x380 [ 454.682621][ T31] veth_newlink+0x9bc/0xda0 [ 454.687151][ T31] ? veth_validate+0x200/0x200 [ 454.691936][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 454.697145][ T31] ? veth_validate+0x200/0x200 [ 455.651887][ T31] rtnl_newlink+0x112d/0x17b0 [ 455.656671][ T31] ? rtnl_setlink+0x400/0x400 [ 455.661425][ T31] ? new_slab+0xa1/0x4d0 [ 455.665687][ T31] ? ___slab_alloc+0x381/0x810 [ 455.670451][ T31] ? __slab_alloc+0x49/0x90 [ 455.675238][ T31] ? __kmalloc_track_caller+0x169/0x2c0 [ 455.680813][ T31] ? memcpy+0x56/0x70 [ 455.685012][ T31] ? __kasan_check_write+0x14/0x20 [ 455.690153][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 455.696795][ T31] ? ns_capable+0x8c/0xf0 [ 456.651132][ T31] ? netlink_net_capable+0x125/0x160 [ 456.656473][ T31] ? rtnl_setlink+0x400/0x400 [ 456.661188][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 456.666137][ T31] ? rtnetlink_bind+0x80/0x80 [ 456.670841][ T31] ? memcpy+0x56/0x70 [ 456.674866][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 456.680234][ T31] ? arch_stack_walk+0xee/0x140 [ 456.685121][ T31] ? avc_denied+0x1b0/0x1b0 [ 456.689627][ T31] ? stack_trace_save+0x98/0xe0 [ 456.694493][ T31] ? avc_has_perm+0x158/0x240 [ 456.699178][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 457.652617][ T31] ? do_syscall_64+0x4c/0xa0 [ 457.657254][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 457.662708][ T31] netlink_rcv_skb+0x1e0/0x430 [ 457.667494][ T31] ? rtnetlink_bind+0x80/0x80 [ 457.672234][ T31] ? netlink_ack+0xb60/0xb60 [ 457.676831][ T31] ? __netlink_lookup+0x387/0x3b0 [ 457.681869][ T31] rtnetlink_rcv+0x1c/0x20 [ 457.686378][ T31] netlink_unicast+0x876/0xa40 [ 457.691151][ T31] netlink_sendmsg+0x86a/0xb70 [ 457.695946][ T31] ? netlink_getsockopt+0x530/0x530 [ 458.651211][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 458.656772][ T31] __sys_sendto+0x423/0x580 [ 458.661370][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 458.666759][ T31] ? sched_clock_cpu+0x18/0x3c0 [ 458.671650][ T31] __x64_sys_sendto+0xe5/0x100 [ 458.676422][ T31] x64_sys_call+0x178/0x9a0 [ 458.680912][ T31] do_syscall_64+0x4c/0xa0 [ 458.685338][ T31] ? clear_bhb_loop+0x50/0xa0 [ 458.690016][ T31] ? clear_bhb_loop+0x50/0xa0 [ 458.694704][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.700637][ T31] RIP: 0033:0x7f0a88b3b583 [ 459.652583][ T31] RSP: 002b:00007fffd56447b8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 459.661277][ T31] RAX: ffffffffffffffda RBX: 00007f0a898be620 RCX: 00007f0a88b3b583 [ 459.669283][ T31] RDX: 000000000000002c RSI: 00007f0a898be670 RDI: 0000000000000003 [ 459.677268][ T31] RBP: 0000000000000001 R08: 00007fffd56447d4 R09: 000000000000000c [ 459.685310][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 459.693364][ T31] R13: 0000000000000000 R14: 00007f0a898be670 R15: 0000000000000000 [ 460.651020][ T31] [ 460.654101][ T31] NMI backtrace for cpu 1 [ 460.658540][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 460.665750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.675810][ T31] Call Trace: [ 460.679098][ T31] [ 460.682027][ T31] __dump_stack+0x21/0x30 [ 460.686362][ T31] dump_stack_lvl+0xee/0x150 [ 460.690962][ T31] ? show_regs_print_info+0x20/0x20 [ 460.696161][ T31] dump_stack+0x15/0x20 [ 460.700315][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 460.705249][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 460.711399][ T31] ? asm_sysvec_call_function_single+0x1b/0x20 [ 460.717551][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 460.723614][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 460.729678][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 460.735652][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 460.741541][ T31] watchdog+0xd64/0xea0 [ 460.745698][ T31] ? hungtask_pm_notify+0x50/0x50 [ 460.750717][ T31] ? __kasan_check_read+0x11/0x20 [ 460.755736][ T31] ? __kthread_parkme+0xac/0x200 [ 460.760665][ T31] ? preempt_count_add+0x90/0x1b0 [ 460.765682][ T31] kthread+0x411/0x500 [ 460.769745][ T31] ? hungtask_pm_notify+0x50/0x50 [ 460.774763][ T31] ? kthread_blkcg+0xd0/0xd0 [ 460.779351][ T31] ret_from_fork+0x1f/0x30 [ 460.783764][ T31] [ 460.786897][ T31] Sending NMI from CPU 1 to CPUs 0: [ 460.792140][ C0] NMI backtrace for cpu 0 [ 460.792150][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 460.792166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.792174][ C0] RIP: 0010:kasan_check_range+0x45/0x290 [ 460.792193][ C0] Code: 82 58 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 ff ff 01 00 0f 82 44 02 00 00 49 bf 01 00 00 00 00 fc ff df 49 89 fb 49 c1 eb 03 <49> b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb [ 460.792205][ C0] RSP: 0018:ffffc90000be6f78 EFLAGS: 00000a02 [ 460.792219][ C0] RAX: ffff8881223c6401 RBX: ffff8881223c6610 RCX: ffffffff81d8a7ed [ 460.792230][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881223c6610 [ 460.792240][ C0] RBP: ffffc90000be6f90 R08: 000000000001ffff R09: ffffed1024478c76 [ 460.792250][ C0] R10: ffffed1024478c76 R11: 1ffff11024478cc2 R12: 1ffff11024478c9b [ 460.792261][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000001 [ 460.792271][ C0] FS: 0000555566784500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 460.792284][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.792295][ C0] CR2: 00007fc079f48000 CR3: 000000011b485000 CR4: 00000000003506b0 [ 460.792311][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.792319][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.792329][ C0] Call Trace: [ 460.792333][ C0] [ 460.792338][ C0] __kasan_check_read+0x11/0x20 [ 460.792353][ C0] ext4_mark_iloc_dirty+0x18ed/0x3f50 [ 460.792370][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 460.792387][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 460.792401][ C0] ? ext4_journal_check_start+0x172/0x240 [ 460.792418][ C0] ext4_dirty_inode+0xbd/0x100 [ 460.792432][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 460.792447][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 460.792464][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 460.792483][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 460.792498][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 460.792514][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 460.792532][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 460.792548][ C0] ? selinux_inode_free_security+0x210/0x210 [ 460.792565][ C0] ext4_initxattrs+0xa6/0x110 [ 460.792579][ C0] security_inode_init_security+0x254/0x370 [ 460.792595][ C0] ? posix_acl_create+0x118/0x440 [ 460.792609][ C0] ? ext4_init_security+0x40/0x40 [ 460.792622][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 460.792638][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 460.792653][ C0] ? __ext4_set_acl+0x600/0x600 [ 460.792666][ C0] ? prandom_u32+0x24d/0x290 [ 460.792681][ C0] ext4_init_security+0x34/0x40 [ 460.792694][ C0] __ext4_new_inode+0x2c41/0x3690 [ 460.792710][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 460.792724][ C0] ? dquot_initialize+0x20/0x20 [ 460.792738][ C0] ? ext4_lookup+0x427/0x840 [ 460.792752][ C0] ? ext4_add_entry+0xf40/0xf40 [ 460.792765][ C0] ? may_create+0x377/0x460 [ 460.792778][ C0] ext4_create+0x22a/0x460 [ 460.792793][ C0] ? ext4_lookup+0x840/0x840 [ 460.792805][ C0] ? selinux_inode_create+0x22/0x30 [ 460.792820][ C0] ? security_inode_create+0xbd/0x110 [ 460.792835][ C0] ? ext4_lookup+0x840/0x840 [ 460.792855][ C0] path_openat+0x11ae/0x2f10 [ 460.792873][ C0] ? do_filp_open+0x3e0/0x3e0 [ 460.792887][ C0] ? expand_files+0xde/0x8e0 [ 460.792900][ C0] do_filp_open+0x1b3/0x3e0 [ 460.792914][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 460.792931][ C0] do_sys_openat2+0x14c/0x7b0 [ 460.792947][ C0] ? __se_sys_futex+0x139/0x310 [ 460.792963][ C0] ? do_sys_open+0xe0/0xe0 [ 460.792978][ C0] ? __x64_sys_futex+0x100/0x100 [ 460.792993][ C0] __x64_sys_creat+0x8e/0xb0 [ 460.793009][ C0] x64_sys_call+0x94a/0x9a0 [ 460.793023][ C0] do_syscall_64+0x4c/0xa0 [ 460.793037][ C0] ? clear_bhb_loop+0x50/0xa0 [ 460.793049][ C0] ? clear_bhb_loop+0x50/0xa0 [ 460.793061][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.793077][ C0] RIP: 0033:0x7f0028e01749 [ 460.793090][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.793101][ C0] RSP: 002b:00007ffc7ba3f1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 460.793116][ C0] RAX: ffffffffffffffda RBX: 00007f0029057fa0 RCX: 00007f0028e01749 [ 460.793126][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 460.793136][ C0] RBP: 00007f0028e85f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.793145][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.793153][ C0] R13: 00007f0029057fa0 R14: 00007f0029057fa0 R15: 0000000000000002 [ 460.793165][ C0] [ 483.650994][ T31] INFO: task kworker/u4:3:266 blocked for more than 160 seconds. [ 483.658754][ T31] Not tainted syzkaller #0 [ 483.663950][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.672760][ T31] task:kworker/u4:3 state:D stack:21248 pid: 266 ppid: 2 flags:0x00004000 [ 483.682016][ T31] Workqueue: events_unbound linkwatch_event [ 483.687944][ T31] Call Trace: [ 483.691302][ T31] [ 483.694249][ T31] __schedule+0xb6e/0x14c0 [ 483.698667][ T31] ? release_firmware_map_entry+0x190/0x190 [ 484.651561][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 484.656812][ T31] ? __kasan_check_write+0x14/0x20 [ 484.661963][ T31] ? kthread_data+0x50/0xc0 [ 484.666483][ T31] ? wq_worker_sleeping+0x60/0x200 [ 484.671623][ T31] schedule+0x11e/0x1e0 [ 484.675787][ T31] schedule_preempt_disabled+0x13/0x20 [ 484.681275][ T31] __mutex_lock+0x7b6/0x11b0 [ 484.685878][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 484.691626][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 484.698393][ T31] ? __kasan_check_write+0x14/0x20 [ 485.651429][ T31] ? __switch_to+0x51d/0xe20 [ 485.656085][ T31] __mutex_lock_slowpath+0xe/0x10 [ 485.661140][ T31] mutex_lock+0x100/0x1a0 [ 485.665669][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 485.672389][ T31] ? __schedule+0xb76/0x14c0 [ 485.676993][ T31] rtnl_lock+0x15/0x20 [ 485.681146][ T31] linkwatch_event+0xe/0x60 [ 485.685673][ T31] process_one_work+0x6be/0xba0 [ 485.690680][ T31] worker_thread+0xa59/0x1200 [ 485.695492][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 485.701005][ T31] ? __kthread_parkme+0xac/0x200 [ 486.656104][ T31] kthread+0x411/0x500 [ 486.660183][ T31] ? worker_clr_flags+0x190/0x190 [ 486.665245][ T31] ? kthread_blkcg+0xd0/0xd0 [ 486.669890][ T31] ret_from_fork+0x1f/0x30 [ 486.674400][ T31] [ 486.677439][ T31] INFO: task syz-executor:394 blocked for more than 163 seconds. [ 486.685247][ T31] Not tainted syzkaller #0 [ 486.690182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.698880][ T31] task:syz-executor state:D stack:22976 pid: 394 ppid: 1 flags:0x00004004 [ 487.661207][ T31] Call Trace: [ 487.664647][ T31] [ 487.667603][ T31] __schedule+0xb6e/0x14c0 [ 487.672247][ T31] ? release_firmware_map_entry+0x190/0x190 [ 487.678252][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 487.684261][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 487.689746][ T31] schedule+0x11e/0x1e0 [ 487.693941][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 487.699596][ T31] ? synchronize_rcu+0x110/0x110 [ 488.651217][ T31] ? __kasan_slab_free+0x11/0x20 [ 488.656204][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 488.661851][ T31] ? rcu_exp_handler+0x370/0x370 [ 488.666931][ T31] ? kfree+0xc4/0x270 [ 488.670924][ T31] ? kfree_const+0x39/0x40 [ 488.675382][ T31] ? __kasan_check_write+0x14/0x20 [ 488.680480][ T31] ? kobject_put+0x1a8/0x270 [ 488.685093][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 488.691188][ T31] ? kobject_put+0x214/0x270 [ 488.695777][ T31] ? io_schedule+0xe0/0xe0 [ 488.700194][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 489.652572][ T31] ? __kasan_check_read+0x11/0x20 [ 489.657665][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 489.663826][ T31] ? linkwatch_fire_event+0x307/0x380 [ 489.669219][ T31] veth_newlink+0x9bc/0xda0 [ 489.673785][ T31] ? veth_validate+0x200/0x200 [ 489.678568][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 489.683624][ T31] ? veth_validate+0x200/0x200 [ 489.688394][ T31] rtnl_newlink+0x112d/0x17b0 [ 489.693104][ T31] ? rtnl_setlink+0x400/0x400 [ 489.697810][ T31] ? new_slab+0xa1/0x4d0 [ 490.651472][ T31] ? ___slab_alloc+0x381/0x810 [ 490.656288][ T31] ? __slab_alloc+0x49/0x90 [ 490.660802][ T31] ? __kmalloc_track_caller+0x169/0x2c0 [ 490.666515][ T31] ? memcpy+0x56/0x70 [ 490.670529][ T31] ? __kasan_check_write+0x14/0x20 [ 490.675666][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 490.682319][ T31] ? ns_capable+0x8c/0xf0 [ 490.686658][ T31] ? netlink_net_capable+0x125/0x160 [ 490.691957][ T31] ? rtnl_setlink+0x400/0x400 [ 490.696642][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 491.651392][ T31] ? rtnetlink_bind+0x80/0x80 [ 491.656221][ T31] ? memcpy+0x56/0x70 [ 491.660345][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 491.665988][ T31] ? arch_stack_walk+0xee/0x140 [ 491.670857][ T31] ? avc_denied+0x1b0/0x1b0 [ 491.675392][ T31] ? stack_trace_save+0x98/0xe0 [ 491.680253][ T31] ? avc_has_perm+0x158/0x240 [ 491.684946][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 491.690408][ T31] ? do_syscall_64+0x4c/0xa0 [ 491.695014][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 491.700414][ T31] netlink_rcv_skb+0x1e0/0x430 [ 492.651165][ T31] ? rtnetlink_bind+0x80/0x80 [ 492.655985][ T31] ? netlink_ack+0xb60/0xb60 [ 492.660586][ T31] ? __netlink_lookup+0x387/0x3b0 [ 492.665697][ T31] rtnetlink_rcv+0x1c/0x20 [ 492.670137][ T31] netlink_unicast+0x876/0xa40 [ 492.674942][ T31] netlink_sendmsg+0x86a/0xb70 [ 492.679726][ T31] ? netlink_getsockopt+0x530/0x530 [ 492.684976][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 492.690443][ T31] __sys_sendto+0x423/0x580 [ 492.694966][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 492.700468][ T31] ? sched_clock_cpu+0x18/0x3c0 [ 493.651444][ T31] __x64_sys_sendto+0xe5/0x100 [ 493.656297][ T31] x64_sys_call+0x178/0x9a0 [ 493.660822][ T31] do_syscall_64+0x4c/0xa0 [ 493.665309][ T31] ? clear_bhb_loop+0x50/0xa0 [ 493.669998][ T31] ? clear_bhb_loop+0x50/0xa0 [ 493.674758][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.680673][ T31] RIP: 0033:0x7f0a88b3b583 [ 493.685134][ T31] RSP: 002b:00007fffd56447b8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 493.693582][ T31] RAX: ffffffffffffffda RBX: 00007f0a898be620 RCX: 00007f0a88b3b583 [ 494.651148][ T31] RDX: 000000000000002c RSI: 00007f0a898be670 RDI: 0000000000000003 [ 494.659165][ T31] RBP: 0000000000000001 R08: 00007fffd56447d4 R09: 000000000000000c [ 494.667168][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 494.675204][ T31] R13: 0000000000000000 R14: 00007f0a898be670 R15: 0000000000000000 [ 494.683356][ T31] [ 494.686406][ T31] NMI backtrace for cpu 1 [ 494.690724][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 494.698030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.708098][ T31] Call Trace: [ 494.711408][ T31] [ 494.714348][ T31] __dump_stack+0x21/0x30 [ 494.718698][ T31] dump_stack_lvl+0xee/0x150 [ 494.723305][ T31] ? show_regs_print_info+0x20/0x20 [ 494.728522][ T31] dump_stack+0x15/0x20 [ 494.732693][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 494.737645][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 494.743200][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 494.749365][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 494.754318][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 494.760428][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 494.766536][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 494.772535][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 494.778441][ T31] watchdog+0xd64/0xea0 [ 494.782614][ T31] ? hungtask_pm_notify+0x50/0x50 [ 494.787647][ T31] ? __kasan_check_read+0x11/0x20 [ 494.792680][ T31] ? __kthread_parkme+0xac/0x200 [ 494.797626][ T31] ? preempt_count_add+0x90/0x1b0 [ 494.802659][ T31] kthread+0x411/0x500 [ 494.806742][ T31] ? hungtask_pm_notify+0x50/0x50 [ 494.811830][ T31] ? kthread_blkcg+0xd0/0xd0 [ 494.816435][ T31] ret_from_fork+0x1f/0x30 [ 494.820861][ T31] [ 494.824003][ T31] Sending NMI from CPU 1 to CPUs 0: [ 494.829225][ C0] NMI backtrace for cpu 0 [ 494.829235][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 494.829251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.829259][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 494.829280][ C0] Code: 48 8b 3d ec 6e 80 05 48 89 de e8 94 c8 3d 00 5b 5d c3 00 55 48 89 e5 48 8b 45 08 65 48 8b 0d 90 ae 99 7e 65 8b 15 91 ae 99 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 5c 0b 00 00 [ 494.829292][ C0] RSP: 0018:ffffc90000be70f0 EFLAGS: 00000246 [ 494.829307][ C0] RAX: ffffffff81d19f26 RBX: ffff888109306b68 RCX: ffff88810d2f62c0 [ 494.829318][ C0] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.829328][ C0] RBP: ffffc90000be70f0 R08: ffff8881092f5d20 R09: 0000000000000001 [ 494.829337][ C0] R10: ffffed1021258ddb R11: 1ffff11021258dda R12: ffff888110ab1000 [ 494.829348][ C0] R13: 0000000000000000 R14: ffff888110a48000 R15: ffff888110a48750 [ 494.829358][ C0] FS: 0000555566784500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 494.829372][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.829383][ C0] CR2: 00007fc079f48000 CR3: 000000011b485000 CR4: 00000000003506b0 [ 494.829398][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.829407][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 494.829417][ C0] Call Trace: [ 494.829421][ C0] [ 494.829425][ C0] __ext4_journal_get_write_access+0x296/0x6c0 [ 494.829444][ C0] ? __ext4_journal_ensure_credits+0x430/0x430 [ 494.829459][ C0] ? ext4_dirty_inode+0xd1/0x100 [ 494.829473][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 494.829488][ C0] ? __mark_inode_dirty+0x25c/0x9c0 [ 494.829504][ C0] ext4_xattr_block_set+0x140f/0x2cb0 [ 494.829524][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 494.829539][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 494.829555][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 494.829573][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 494.829589][ C0] ? selinux_inode_free_security+0x210/0x210 [ 494.829606][ C0] ext4_initxattrs+0xa6/0x110 [ 494.829619][ C0] security_inode_init_security+0x254/0x370 [ 494.829635][ C0] ? posix_acl_create+0x118/0x440 [ 494.829657][ C0] ? ext4_init_security+0x40/0x40 [ 494.829670][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 494.829686][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 494.829701][ C0] ? __ext4_set_acl+0x600/0x600 [ 494.829714][ C0] ? prandom_u32+0x24d/0x290 [ 494.829727][ C0] ext4_init_security+0x34/0x40 [ 494.829740][ C0] __ext4_new_inode+0x2c41/0x3690 [ 494.829756][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 494.829770][ C0] ? dquot_initialize+0x20/0x20 [ 494.829784][ C0] ? ext4_lookup+0x427/0x840 [ 494.829798][ C0] ? ext4_add_entry+0xf40/0xf40 [ 494.829811][ C0] ? may_create+0x377/0x460 [ 494.829825][ C0] ext4_create+0x22a/0x460 [ 494.829839][ C0] ? ext4_lookup+0x840/0x840 [ 494.829852][ C0] ? selinux_inode_create+0x22/0x30 [ 494.829866][ C0] ? security_inode_create+0xbd/0x110 [ 494.829881][ C0] ? ext4_lookup+0x840/0x840 [ 494.829893][ C0] path_openat+0x11ae/0x2f10 [ 494.829911][ C0] ? do_filp_open+0x3e0/0x3e0 [ 494.829925][ C0] ? expand_files+0xde/0x8e0 [ 494.829938][ C0] do_filp_open+0x1b3/0x3e0 [ 494.829952][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 494.829969][ C0] do_sys_openat2+0x14c/0x7b0 [ 494.829986][ C0] ? __se_sys_futex+0x139/0x310 [ 494.830001][ C0] ? do_sys_open+0xe0/0xe0 [ 494.830016][ C0] ? __x64_sys_futex+0x100/0x100 [ 494.830032][ C0] __x64_sys_creat+0x8e/0xb0 [ 494.830047][ C0] x64_sys_call+0x94a/0x9a0 [ 494.830061][ C0] do_syscall_64+0x4c/0xa0 [ 494.830075][ C0] ? clear_bhb_loop+0x50/0xa0 [ 494.830088][ C0] ? clear_bhb_loop+0x50/0xa0 [ 494.830100][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 494.830116][ C0] RIP: 0033:0x7f0028e01749 [ 494.830128][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.830139][ C0] RSP: 002b:00007ffc7ba3f1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 494.830154][ C0] RAX: ffffffffffffffda RBX: 00007f0029057fa0 RCX: 00007f0028e01749 [ 494.830164][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 494.830173][ C0] RBP: 00007f0028e85f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.830183][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.830191][ C0] R13: 00007f0029057fa0 R14: 00007f0029057fa0 R15: 0000000000000002 [ 494.830203][ C0] [ 517.651317][ T31] INFO: task kworker/u4:3:266 blocked for more than 194 seconds. [ 517.659083][ T31] Not tainted syzkaller #0 [ 517.664338][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.673092][ T31] task:kworker/u4:3 state:D stack:21248 pid: 266 ppid: 2 flags:0x00004000 [ 517.682390][ T31] Workqueue: events_unbound linkwatch_event [ 517.688308][ T31] Call Trace: [ 517.691615][ T31] [ 517.694552][ T31] __schedule+0xb6e/0x14c0 [ 517.698987][ T31] ? release_firmware_map_entry+0x190/0x190 [ 518.651416][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 518.656669][ T31] ? __kasan_check_write+0x14/0x20 [ 518.661955][ T31] ? kthread_data+0x50/0xc0 [ 518.666513][ T31] ? wq_worker_sleeping+0x60/0x200 [ 518.671690][ T31] schedule+0x11e/0x1e0 [ 518.675858][ T31] schedule_preempt_disabled+0x13/0x20 [ 518.681337][ T31] __mutex_lock+0x7b6/0x11b0 [ 518.685929][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 518.691593][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 518.698370][ T31] ? __kasan_check_write+0x14/0x20 [ 519.651296][ T31] ? __switch_to+0x51d/0xe20 [ 519.656074][ T31] __mutex_lock_slowpath+0xe/0x10 [ 519.661255][ T31] mutex_lock+0x100/0x1a0 [ 519.665594][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 519.672200][ T31] ? __schedule+0xb76/0x14c0 [ 519.676797][ T31] rtnl_lock+0x15/0x20 [ 519.680850][ T31] linkwatch_event+0xe/0x60 [ 519.685381][ T31] process_one_work+0x6be/0xba0 [ 519.690247][ T31] worker_thread+0xa59/0x1200 [ 519.694935][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 519.700413][ T31] ? __kthread_parkme+0xac/0x200 [ 520.651373][ T31] kthread+0x411/0x500 [ 520.655495][ T31] ? worker_clr_flags+0x190/0x190 [ 520.660534][ T31] ? kthread_blkcg+0xd0/0xd0 [ 520.665182][ T31] ret_from_fork+0x1f/0x30 [ 520.669623][ T31] [ 520.672690][ T31] INFO: task syz-executor:394 blocked for more than 197 seconds. [ 520.680421][ T31] Not tainted syzkaller #0 [ 520.685378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.694101][ T31] task:syz-executor state:D stack:22976 pid: 394 ppid: 1 flags:0x00004004 [ 521.651571][ T31] Call Trace: [ 521.655073][ T31] [ 521.658021][ T31] __schedule+0xb6e/0x14c0 [ 521.662498][ T31] ? release_firmware_map_entry+0x190/0x190 [ 521.668519][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 521.674396][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 521.679860][ T31] schedule+0x11e/0x1e0 [ 521.684037][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 521.689772][ T31] ? synchronize_rcu+0x110/0x110 [ 521.694725][ T31] ? __kasan_slab_free+0x11/0x20 [ 521.699668][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 522.661095][ T31] ? rcu_exp_handler+0x370/0x370 [ 522.666201][ T31] ? kfree+0xc4/0x270 [ 522.670204][ T31] ? kfree_const+0x39/0x40 [ 522.674652][ T31] ? __kasan_check_write+0x14/0x20 [ 522.679777][ T31] ? kobject_put+0x1a8/0x270 [ 522.684425][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 522.690500][ T31] ? kobject_put+0x214/0x270 [ 522.695099][ T31] ? io_schedule+0xe0/0xe0 [ 522.699522][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 523.651213][ T31] ? __kasan_check_read+0x11/0x20 [ 523.656361][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 523.662362][ T31] ? linkwatch_fire_event+0x307/0x380 [ 523.667817][ T31] veth_newlink+0x9bc/0xda0 [ 523.672347][ T31] ? veth_validate+0x200/0x200 [ 523.677129][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 523.682170][ T31] ? veth_validate+0x200/0x200 [ 523.686950][ T31] rtnl_newlink+0x112d/0x17b0 [ 523.691752][ T31] ? rtnl_setlink+0x400/0x400 [ 523.696546][ T31] ? new_slab+0xa1/0x4d0 [ 523.700786][ T31] ? ___slab_alloc+0x381/0x810 [ 524.661094][ T31] ? __slab_alloc+0x49/0x90 [ 524.665704][ T31] ? __kmalloc_track_caller+0x169/0x2c0 [ 524.671327][ T31] ? memcpy+0x56/0x70 [ 524.675343][ T31] ? __kasan_check_write+0x14/0x20 [ 524.680441][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 524.687046][ T31] ? ns_capable+0x8c/0xf0 [ 524.691410][ T31] ? netlink_net_capable+0x125/0x160 [ 524.696710][ T31] ? rtnl_setlink+0x400/0x400 [ 525.652601][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 525.657597][ T31] ? rtnetlink_bind+0x80/0x80 [ 525.662695][ T31] ? memcpy+0x56/0x70 [ 525.666819][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 525.672423][ T31] ? arch_stack_walk+0xee/0x140 [ 525.677346][ T31] ? avc_denied+0x1b0/0x1b0 [ 525.682220][ T31] ? stack_trace_save+0x98/0xe0 [ 525.687097][ T31] ? avc_has_perm+0x158/0x240 [ 525.691995][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 525.697390][ T31] ? do_syscall_64+0x4c/0xa0 [ 526.656868][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 526.662756][ T31] netlink_rcv_skb+0x1e0/0x430 [ 526.667621][ T31] ? rtnetlink_bind+0x80/0x80 [ 526.672383][ T31] ? netlink_ack+0xb60/0xb60 [ 526.676988][ T31] ? __netlink_lookup+0x387/0x3b0 [ 526.682138][ T31] rtnetlink_rcv+0x1c/0x20 [ 526.686565][ T31] netlink_unicast+0x876/0xa40 [ 526.691460][ T31] netlink_sendmsg+0x86a/0xb70 [ 526.696250][ T31] ? netlink_getsockopt+0x530/0x530 [ 527.654997][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 527.662339][ T31] __sys_sendto+0x423/0x580 [ 527.666922][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 527.672360][ T31] ? sched_clock_cpu+0x18/0x3c0 [ 527.677223][ T31] __x64_sys_sendto+0xe5/0x100 [ 527.682037][ T31] x64_sys_call+0x178/0x9a0 [ 527.686567][ T31] do_syscall_64+0x4c/0xa0 [ 527.691154][ T31] ? clear_bhb_loop+0x50/0xa0 [ 527.695856][ T31] ? clear_bhb_loop+0x50/0xa0 [ 527.700544][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 528.650980][ T31] RIP: 0033:0x7f0a88b3b583 [ 528.655451][ T31] RSP: 002b:00007fffd56447b8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 528.663962][ T31] RAX: ffffffffffffffda RBX: 00007f0a898be620 RCX: 00007f0a88b3b583 [ 528.672237][ T31] RDX: 000000000000002c RSI: 00007f0a898be670 RDI: 0000000000000003 [ 528.680274][ T31] RBP: 0000000000000001 R08: 00007fffd56447d4 R09: 000000000000000c [ 528.688322][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 528.696357][ T31] R13: 0000000000000000 R14: 00007f0a898be670 R15: 0000000000000000 [ 529.651497][ T31] [ 529.654560][ T31] INFO: task syz-executor:397 blocked for more than 144 seconds. [ 529.662355][ T31] Not tainted syzkaller #0 [ 529.667312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.676013][ T31] task:syz-executor state:D stack:26528 pid: 397 ppid: 1 flags:0x00004004 [ 529.685257][ T31] Call Trace: [ 529.688540][ T31] [ 529.691539][ T31] __schedule+0xb6e/0x14c0 [ 529.695970][ T31] ? release_firmware_map_entry+0x190/0x190 [ 530.651083][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 530.656259][ T31] ? __kasan_check_write+0x14/0x20 [ 530.661415][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 530.667152][ T31] schedule+0x11e/0x1e0 [ 530.671365][ T31] schedule_preempt_disabled+0x13/0x20 [ 530.676835][ T31] __mutex_lock+0x7b6/0x11b0 [ 530.681449][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 530.688243][ T31] ? selinux_capable+0x29c/0x380 [ 530.693199][ T31] ? selinux_capset+0xf0/0xf0 [ 530.697880][ T31] ? cap_capable+0x1aa/0x230 [ 531.652924][ T31] __mutex_lock_slowpath+0xe/0x10 [ 531.658056][ T31] mutex_lock+0x100/0x1a0 [ 531.662666][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 531.669274][ T31] ? ns_capable+0x8c/0xf0 [ 531.673635][ T31] ? netlink_net_capable+0x125/0x160 [ 531.678927][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 531.683925][ T31] ? rtnetlink_bind+0x80/0x80 [ 531.688617][ T31] ? memcpy+0x56/0x70 [ 531.692612][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 531.697987][ T31] ? arch_stack_walk+0xee/0x140 [ 532.651089][ T31] ? avc_denied+0x1b0/0x1b0 [ 532.655647][ T31] ? stack_trace_save+0x98/0xe0 [ 532.660512][ T31] ? avc_has_perm+0x158/0x240 [ 532.665252][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 532.670634][ T31] ? do_syscall_64+0x4c/0xa0 [ 532.675235][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 532.680618][ T31] netlink_rcv_skb+0x1e0/0x430 [ 532.685438][ T31] ? rtnetlink_bind+0x80/0x80 [ 532.690124][ T31] ? netlink_ack+0xb60/0xb60 [ 532.694829][ T31] ? __netlink_lookup+0x387/0x3b0 [ 532.699857][ T31] rtnetlink_rcv+0x1c/0x20 [ 533.652950][ T31] netlink_unicast+0x876/0xa40 [ 533.657784][ T31] netlink_sendmsg+0x86a/0xb70 [ 533.662661][ T31] ? netlink_getsockopt+0x530/0x530 [ 533.667963][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 533.673448][ T31] __sys_sendto+0x423/0x580 [ 533.677969][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 533.683413][ T31] __x64_sys_sendto+0xe5/0x100 [ 533.688196][ T31] x64_sys_call+0x178/0x9a0 [ 533.692726][ T31] do_syscall_64+0x4c/0xa0 [ 533.697161][ T31] ? clear_bhb_loop+0x50/0xa0 [ 534.651060][ T31] ? clear_bhb_loop+0x50/0xa0 [ 534.655795][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.661725][ T31] RIP: 0033:0x7fe3e49ac583 [ 534.666148][ T31] RSP: 002b:00007ffcb6bf20e8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 534.674603][ T31] RAX: ffffffffffffffda RBX: 00007fe3e572f620 RCX: 00007fe3e49ac583 [ 534.682598][ T31] RDX: 0000000000000028 RSI: 00007fe3e572f670 RDI: 0000000000000003 [ 534.690583][ T31] RBP: 0000000000000001 R08: 00007ffcb6bf2104 R09: 000000000000000c [ 534.698629][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 535.652219][ T31] R13: 0000000000000000 R14: 00007fe3e572f670 R15: 0000000000000000 [ 535.660250][ T31] [ 535.663361][ T31] NMI backtrace for cpu 0 [ 535.667688][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 535.674881][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.684932][ T31] Call Trace: [ 535.688214][ T31] [ 535.691159][ T31] __dump_stack+0x21/0x30 [ 535.695509][ T31] dump_stack_lvl+0xee/0x150 [ 535.700102][ T31] ? show_regs_print_info+0x20/0x20 [ 535.705309][ T31] dump_stack+0x15/0x20 [ 535.709570][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 535.714510][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 535.720053][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 535.726299][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 535.731262][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 535.737339][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 535.743411][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 535.749399][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 535.755290][ T31] watchdog+0xd64/0xea0 [ 535.759447][ T31] ? hungtask_pm_notify+0x50/0x50 [ 535.764470][ T31] ? __kasan_check_read+0x11/0x20 [ 535.769493][ T31] ? __kthread_parkme+0xac/0x200 [ 535.774522][ T31] ? preempt_count_add+0x90/0x1b0 [ 535.779543][ T31] kthread+0x411/0x500 [ 535.783607][ T31] ? hungtask_pm_notify+0x50/0x50 [ 535.788629][ T31] ? kthread_blkcg+0xd0/0xd0 [ 535.793218][ T31] ret_from_fork+0x1f/0x30 [ 535.797716][ T31] [ 535.800835][ T31] Sending NMI from CPU 0 to CPUs 1: [ 535.806073][ C1] NMI backtrace for cpu 1 [ 535.806083][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 535.806098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.806106][ C1] RIP: 0010:__entry_find+0x94/0x4f0 [ 535.806124][ C1] Code: 00 45 69 e7 47 86 c8 61 bb 20 00 00 00 41 2b 1e bf 20 00 00 00 89 de e8 4a f9 a1 ff 83 fb 1f 0f 87 3e 04 00 00 e8 8c f5 a1 ff <49> be 00 00 00 00 00 fc ff df 89 d9 41 d3 ec 4b 8d 5c e5 00 bf 01 [ 535.806136][ C1] RSP: 0018:ffffc90000cc7170 EFLAGS: 00000293 [ 535.806151][ C1] RAX: ffffffff81c6c954 RBX: 0000000000000016 RCX: ffff888112d18000 [ 535.806162][ C1] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000000020 [ 535.806171][ C1] RBP: ffffc90000cc71b0 R08: dffffc0000000000 R09: ffffed1024456226 [ 535.806189][ C1] R10: ffffed1024456226 R11: 1ffff11024456225 R12: 00000000fb2af1ff [ 535.806199][ C1] R13: ffff8881125e4000 R14: ffff888112604d08 R15: 0000000048993a89 [ 535.806209][ C1] FS: 0000555556f2f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 535.806223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.806234][ C1] CR2: 000000c006a43010 CR3: 000000011e127000 CR4: 00000000003506a0 [ 535.806249][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 535.806257][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 535.806267][ C1] Call Trace: [ 535.806271][ C1] [ 535.806277][ C1] mb_cache_entry_find_first+0x1d/0x30 [ 535.806293][ C1] ext4_xattr_block_set+0xbce/0x2cb0 [ 535.806313][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 535.806328][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 535.806344][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 535.806362][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 535.806378][ C1] ? selinux_inode_free_security+0x210/0x210 [ 535.806395][ C1] ext4_initxattrs+0xa6/0x110 [ 535.806409][ C1] security_inode_init_security+0x254/0x370 [ 535.806425][ C1] ? posix_acl_create+0x118/0x440 [ 535.806438][ C1] ? ext4_init_security+0x40/0x40 [ 535.806451][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 535.806467][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 535.806482][ C1] ? __ext4_set_acl+0x600/0x600 [ 535.806495][ C1] ? prandom_u32+0x24d/0x290 [ 535.806509][ C1] ext4_init_security+0x34/0x40 [ 535.806523][ C1] __ext4_new_inode+0x2c41/0x3690 [ 535.806539][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 535.806552][ C1] ? dquot_initialize+0x20/0x20 [ 535.806567][ C1] ? ext4_lookup+0x427/0x840 [ 535.806581][ C1] ? ext4_add_entry+0xf40/0xf40 [ 535.806594][ C1] ? may_create+0x377/0x460 [ 535.806607][ C1] ext4_create+0x22a/0x460 [ 535.806622][ C1] ? ext4_lookup+0x840/0x840 [ 535.806635][ C1] ? selinux_inode_create+0x22/0x30 [ 535.806649][ C1] ? security_inode_create+0xbd/0x110 [ 535.806664][ C1] ? ext4_lookup+0x840/0x840 [ 535.806676][ C1] path_openat+0x11ae/0x2f10 [ 535.806695][ C1] ? do_filp_open+0x3e0/0x3e0 [ 535.806709][ C1] ? expand_files+0xde/0x8e0 [ 535.806722][ C1] do_filp_open+0x1b3/0x3e0 [ 535.806736][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 535.806754][ C1] do_sys_openat2+0x14c/0x7b0 [ 535.806770][ C1] ? __se_sys_futex+0x139/0x310 [ 535.806785][ C1] ? do_sys_open+0xe0/0xe0 [ 535.806800][ C1] ? __x64_sys_futex+0x100/0x100 [ 535.806816][ C1] __x64_sys_creat+0x8e/0xb0 [ 535.806831][ C1] x64_sys_call+0x94a/0x9a0 [ 535.806845][ C1] do_syscall_64+0x4c/0xa0 [ 535.806861][ C1] ? clear_bhb_loop+0x50/0xa0 [ 535.806873][ C1] ? clear_bhb_loop+0x50/0xa0 [ 535.806886][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.806902][ C1] RIP: 0033:0x7f366c7b0749 [ 535.806915][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.806926][ C1] RSP: 002b:00007ffee5af7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 535.806941][ C1] RAX: ffffffffffffffda RBX: 00007f366ca06fa0 RCX: 00007f366c7b0749 [ 535.806952][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 535.806961][ C1] RBP: 00007f366c834f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.806970][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.806979][ C1] R13: 00007f366ca06fa0 R14: 00007f366ca06fa0 R15: 0000000000000002 [ 535.806991][ C1] [ 558.651201][ T31] INFO: task kworker/u4:3:266 blocked for more than 235 seconds. [ 558.659023][ T31] Not tainted syzkaller #0 [ 558.664027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.672810][ T31] task:kworker/u4:3 state:D stack:21248 pid: 266 ppid: 2 flags:0x00004000 [ 558.682070][ T31] Workqueue: events_unbound linkwatch_event [ 558.687993][ T31] Call Trace: [ 558.691288][ T31] [ 558.694222][ T31] __schedule+0xb6e/0x14c0 [ 558.698644][ T31] ? release_firmware_map_entry+0x190/0x190 [ 559.651289][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 559.656549][ T31] ? __kasan_check_write+0x14/0x20 [ 559.661733][ T31] ? kthread_data+0x50/0xc0 [ 559.666287][ T31] ? wq_worker_sleeping+0x60/0x200 [ 559.671438][ T31] schedule+0x11e/0x1e0 [ 559.675615][ T31] schedule_preempt_disabled+0x13/0x20 [ 559.681106][ T31] __mutex_lock+0x7b6/0x11b0 [ 559.685707][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 559.691371][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 559.698141][ T31] ? __kasan_check_write+0x14/0x20 [ 560.651091][ T31] ? __switch_to+0x51d/0xe20 [ 560.655727][ T31] __mutex_lock_slowpath+0xe/0x10 [ 560.660764][ T31] mutex_lock+0x100/0x1a0 [ 560.665148][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 560.671858][ T31] ? __schedule+0xb76/0x14c0 [ 560.676454][ T31] rtnl_lock+0x15/0x20 [ 560.680508][ T31] linkwatch_event+0xe/0x60 [ 560.685095][ T31] process_one_work+0x6be/0xba0 [ 560.689970][ T31] worker_thread+0xa59/0x1200 [ 560.694696][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 560.700341][ T31] ? __kthread_parkme+0xac/0x200 [ 561.652371][ T31] kthread+0x411/0x500 [ 561.656500][ T31] ? worker_clr_flags+0x190/0x190 [ 561.661609][ T31] ? kthread_blkcg+0xd0/0xd0 [ 561.666215][ T31] ret_from_fork+0x1f/0x30 [ 561.670650][ T31] [ 561.673707][ T31] INFO: task syz-executor:394 blocked for more than 238 seconds. [ 561.681473][ T31] Not tainted syzkaller #0 [ 561.686422][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.695158][ T31] task:syz-executor state:D stack:22976 pid: 394 ppid: 1 flags:0x00004004 [ 562.661077][ T31] Call Trace: [ 562.664440][ T31] [ 562.667522][ T31] __schedule+0xb6e/0x14c0 [ 562.672030][ T31] ? release_firmware_map_entry+0x190/0x190 [ 562.677940][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 562.683778][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 562.689244][ T31] schedule+0x11e/0x1e0 [ 562.693414][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 562.699062][ T31] ? synchronize_rcu+0x110/0x110 [ 563.652144][ T31] ? __kasan_slab_free+0x11/0x20 [ 563.657124][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 563.662728][ T31] ? rcu_exp_handler+0x370/0x370 [ 563.667782][ T31] ? kfree+0xc4/0x270 [ 563.671908][ T31] ? kfree_const+0x39/0x40 [ 563.676401][ T31] ? __kasan_check_write+0x14/0x20 [ 563.681599][ T31] ? kobject_put+0x1a8/0x270 [ 563.686208][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 563.692423][ T31] ? kobject_put+0x214/0x270 [ 563.697037][ T31] ? io_schedule+0xe0/0xe0 [ 564.651083][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 564.657193][ T31] ? __kasan_check_read+0x11/0x20 [ 564.662262][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 564.668164][ T31] ? linkwatch_fire_event+0x307/0x380 [ 564.673559][ T31] veth_newlink+0x9bc/0xda0 [ 564.678222][ T31] ? veth_validate+0x200/0x200 [ 564.683018][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 564.688049][ T31] ? veth_validate+0x200/0x200 [ 564.692821][ T31] rtnl_newlink+0x112d/0x17b0 [ 564.697508][ T31] ? rtnl_setlink+0x400/0x400 [ 565.652319][ T31] ? new_slab+0xa1/0x4d0 [ 565.656617][ T31] ? ___slab_alloc+0x381/0x810 [ 565.661890][ T31] ? __slab_alloc+0x49/0x90 [ 565.666415][ T31] ? __kmalloc_track_caller+0x169/0x2c0 [ 565.672060][ T31] ? memcpy+0x56/0x70 [ 565.676084][ T31] ? __kasan_check_write+0x14/0x20 [ 565.681264][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 565.687955][ T31] ? ns_capable+0x8c/0xf0 [ 565.692401][ T31] ? netlink_net_capable+0x125/0x160 [ 565.697726][ T31] ? rtnl_setlink+0x400/0x400 [ 566.651213][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 566.656203][ T31] ? rtnetlink_bind+0x80/0x80 [ 566.661090][ T31] ? memcpy+0x56/0x70 [ 566.665096][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 566.670472][ T31] ? arch_stack_walk+0xee/0x140 [ 566.675403][ T31] ? avc_denied+0x1b0/0x1b0 [ 566.679919][ T31] ? stack_trace_save+0x98/0xe0 [ 566.684802][ T31] ? avc_has_perm+0x158/0x240 [ 566.689484][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 566.694867][ T31] ? do_syscall_64+0x4c/0xa0 [ 566.699468][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 567.652749][ T31] netlink_rcv_skb+0x1e0/0x430 [ 567.657579][ T31] ? rtnetlink_bind+0x80/0x80 [ 567.662359][ T31] ? netlink_ack+0xb60/0xb60 [ 567.666968][ T31] ? __netlink_lookup+0x387/0x3b0 [ 567.672016][ T31] rtnetlink_rcv+0x1c/0x20 [ 567.676446][ T31] netlink_unicast+0x876/0xa40 [ 567.681240][ T31] netlink_sendmsg+0x86a/0xb70 [ 567.686021][ T31] ? netlink_getsockopt+0x530/0x530 [ 567.691262][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 567.696843][ T31] __sys_sendto+0x423/0x580 [ 568.651041][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 568.656470][ T31] ? sched_clock_cpu+0x18/0x3c0 [ 568.661354][ T31] __x64_sys_sendto+0xe5/0x100 [ 568.666126][ T31] x64_sys_call+0x178/0x9a0 [ 568.670628][ T31] do_syscall_64+0x4c/0xa0 [ 568.675062][ T31] ? clear_bhb_loop+0x50/0xa0 [ 568.679760][ T31] ? clear_bhb_loop+0x50/0xa0 [ 568.684593][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 568.690519][ T31] RIP: 0033:0x7f0a88b3b583 [ 568.694963][ T31] RSP: 002b:00007fffd56447b8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 569.651279][ T31] RAX: ffffffffffffffda RBX: 00007f0a898be620 RCX: 00007f0a88b3b583 [ 569.659392][ T31] RDX: 000000000000002c RSI: 00007f0a898be670 RDI: 0000000000000003 [ 569.667861][ T31] RBP: 0000000000000001 R08: 00007fffd56447d4 R09: 000000000000000c [ 569.675944][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 569.683992][ T31] R13: 0000000000000000 R14: 00007f0a898be670 R15: 0000000000000000 [ 569.692061][ T31] [ 569.695085][ T31] INFO: task syz-executor:397 blocked for more than 184 seconds. [ 570.651493][ T31] Not tainted syzkaller #0 [ 570.656477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.665276][ T31] task:syz-executor state:D stack:26528 pid: 397 ppid: 1 flags:0x00004004 [ 570.674570][ T31] Call Trace: [ 570.677872][ T31] [ 570.680790][ T31] __schedule+0xb6e/0x14c0 [ 570.685221][ T31] ? release_firmware_map_entry+0x190/0x190 [ 570.691150][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 570.696261][ T31] ? __kasan_check_write+0x14/0x20 [ 571.651209][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 571.657166][ T31] schedule+0x11e/0x1e0 [ 571.661435][ T31] schedule_preempt_disabled+0x13/0x20 [ 571.666991][ T31] __mutex_lock+0x7b6/0x11b0 [ 571.671598][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 571.678472][ T31] ? selinux_capable+0x29c/0x380 [ 571.683473][ T31] ? selinux_capset+0xf0/0xf0 [ 571.688158][ T31] ? cap_capable+0x1aa/0x230 [ 571.692934][ T31] __mutex_lock_slowpath+0xe/0x10 [ 571.697978][ T31] mutex_lock+0x100/0x1a0 [ 572.651050][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 572.657688][ T31] ? ns_capable+0x8c/0xf0 [ 572.662097][ T31] ? netlink_net_capable+0x125/0x160 [ 572.667395][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 572.672375][ T31] ? rtnetlink_bind+0x80/0x80 [ 572.677172][ T31] ? memcpy+0x56/0x70 [ 572.681166][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 572.686560][ T31] ? arch_stack_walk+0xee/0x140 [ 572.691448][ T31] ? avc_denied+0x1b0/0x1b0 [ 572.695955][ T31] ? stack_trace_save+0x98/0xe0 [ 572.700797][ T31] ? avc_has_perm+0x158/0x240 [ 573.652618][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 573.658044][ T31] ? do_syscall_64+0x4c/0xa0 [ 573.662886][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 573.668287][ T31] netlink_rcv_skb+0x1e0/0x430 [ 573.673173][ T31] ? rtnetlink_bind+0x80/0x80 [ 573.677859][ T31] ? netlink_ack+0xb60/0xb60 [ 573.682471][ T31] ? __netlink_lookup+0x387/0x3b0 [ 573.687500][ T31] rtnetlink_rcv+0x1c/0x20 [ 573.691941][ T31] netlink_unicast+0x876/0xa40 [ 573.696824][ T31] netlink_sendmsg+0x86a/0xb70 [ 574.651082][ T31] ? netlink_getsockopt+0x530/0x530 [ 574.656463][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 574.662038][ T31] __sys_sendto+0x423/0x580 [ 574.666561][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 574.671985][ T31] __x64_sys_sendto+0xe5/0x100 [ 574.676868][ T31] x64_sys_call+0x178/0x9a0 [ 574.681420][ T31] do_syscall_64+0x4c/0xa0 [ 574.685915][ T31] ? clear_bhb_loop+0x50/0xa0 [ 574.690599][ T31] ? clear_bhb_loop+0x50/0xa0 [ 574.695301][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 575.651189][ T31] RIP: 0033:0x7fe3e49ac583 [ 575.655665][ T31] RSP: 002b:00007ffcb6bf20e8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 575.664474][ T31] RAX: ffffffffffffffda RBX: 00007fe3e572f620 RCX: 00007fe3e49ac583 [ 575.672499][ T31] RDX: 0000000000000028 RSI: 00007fe3e572f670 RDI: 0000000000000003 [ 575.680478][ T31] RBP: 0000000000000001 R08: 00007ffcb6bf2104 R09: 000000000000000c [ 575.688471][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 575.696474][ T31] R13: 0000000000000000 R14: 00007fe3e572f670 R15: 0000000000000000 [ 576.650964][ T31] [ 576.654037][ T31] NMI backtrace for cpu 0 [ 576.658376][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 576.665578][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.675629][ T31] Call Trace: [ 576.678904][ T31] [ 576.681854][ T31] __dump_stack+0x21/0x30 [ 576.686466][ T31] dump_stack_lvl+0xee/0x150 [ 576.691506][ T31] ? show_regs_print_info+0x20/0x20 [ 576.696720][ T31] dump_stack+0x15/0x20 [ 576.700888][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 576.705832][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 576.711378][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 576.717532][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 576.722467][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 576.728535][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 576.734598][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 576.740577][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 576.746568][ T31] watchdog+0xd64/0xea0 [ 576.750724][ T31] ? hungtask_pm_notify+0x50/0x50 [ 576.755743][ T31] ? __kasan_check_read+0x11/0x20 [ 576.760776][ T31] ? __kthread_parkme+0xac/0x200 [ 576.765711][ T31] ? preempt_count_add+0x90/0x1b0 [ 576.770732][ T31] kthread+0x411/0x500 [ 576.774796][ T31] ? hungtask_pm_notify+0x50/0x50 [ 576.779815][ T31] ? kthread_blkcg+0xd0/0xd0 [ 576.784402][ T31] ret_from_fork+0x1f/0x30 [ 576.788818][ T31] [ 576.791941][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.797160][ C1] NMI backtrace for cpu 1 [ 576.797171][ C1] CPU: 1 PID: 389 Comm: syz.3.18 Not tainted syzkaller #0 [ 576.797188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.797196][ C1] RIP: 0010:ext4_mark_iloc_dirty+0x191e/0x3f50 [ 576.797218][ C1] Code: 42 80 3c 28 00 74 08 48 89 df e8 ad 98 ce ff 4c 8b 33 41 f7 c7 00 00 20 00 0f 94 c1 49 d3 ee 48 8b 45 d0 48 8d 58 24 48 89 d8 <48> c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e6 1a 00 00 44 89 33 48 8b [ 576.797230][ C1] RSP: 0018:ffffc90000cc6fb0 EFLAGS: 00000202 [ 576.797245][ C1] RAX: ffff88812ef42624 RBX: ffff88812ef42624 RCX: ffffffff81d8a701 [ 576.797256][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881221ec300 [ 576.797266][ C1] RBP: ffffc90000cc70b8 R08: dffffc0000000000 R09: ffffed102443d861 [ 576.797277][ C1] R10: ffffed102443d861 R11: 1ffff1102443d860 R12: 1ffff1102443d839 [ 576.797287][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000008800000000 [ 576.797297][ C1] FS: 0000555556f2f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 576.797310][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.797321][ C1] CR2: 000000c006a43010 CR3: 000000011e127000 CR4: 00000000003506a0 [ 576.797336][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 576.797345][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 576.797354][ C1] Call Trace: [ 576.797358][ C1] [ 576.797364][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 576.797383][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 576.797398][ C1] ? ext4_journal_check_start+0x172/0x240 [ 576.797415][ C1] ext4_dirty_inode+0xbd/0x100 [ 576.797429][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 576.797444][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 576.797461][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 576.797481][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 576.797496][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 576.797512][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 576.797529][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 576.797546][ C1] ? selinux_inode_free_security+0x210/0x210 [ 576.797563][ C1] ext4_initxattrs+0xa6/0x110 [ 576.797577][ C1] security_inode_init_security+0x254/0x370 [ 576.797592][ C1] ? posix_acl_create+0x118/0x440 [ 576.797606][ C1] ? ext4_init_security+0x40/0x40 [ 576.797620][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 576.797636][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 576.797651][ C1] ? __ext4_set_acl+0x600/0x600 [ 576.797672][ C1] ? prandom_u32+0x24d/0x290 [ 576.797686][ C1] ext4_init_security+0x34/0x40 [ 576.797699][ C1] __ext4_new_inode+0x2c41/0x3690 [ 576.797714][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 576.797728][ C1] ? dquot_initialize+0x20/0x20 [ 576.797742][ C1] ? ext4_lookup+0x427/0x840 [ 576.797756][ C1] ? ext4_add_entry+0xf40/0xf40 [ 576.797775][ C1] ? may_create+0x377/0x460 [ 576.797788][ C1] ext4_create+0x22a/0x460 [ 576.797803][ C1] ? ext4_lookup+0x840/0x840 [ 576.797815][ C1] ? selinux_inode_create+0x22/0x30 [ 576.797830][ C1] ? security_inode_create+0xbd/0x110 [ 576.797844][ C1] ? ext4_lookup+0x840/0x840 [ 576.797857][ C1] path_openat+0x11ae/0x2f10 [ 576.797886][ C1] ? do_filp_open+0x3e0/0x3e0 [ 576.797900][ C1] ? expand_files+0xde/0x8e0 [ 576.797913][ C1] do_filp_open+0x1b3/0x3e0 [ 576.797927][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 576.797944][ C1] do_sys_openat2+0x14c/0x7b0 [ 576.797967][ C1] ? __se_sys_futex+0x139/0x310 [ 576.797982][ C1] ? do_sys_open+0xe0/0xe0 [ 576.797997][ C1] ? __x64_sys_futex+0x100/0x100 [ 576.798013][ C1] __x64_sys_creat+0x8e/0xb0 [ 576.798029][ C1] x64_sys_call+0x94a/0x9a0 [ 576.798043][ C1] do_syscall_64+0x4c/0xa0 [ 576.798059][ C1] ? clear_bhb_loop+0x50/0xa0 [ 576.798071][ C1] ? clear_bhb_loop+0x50/0xa0 [ 576.798084][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.798100][ C1] RIP: 0033:0x7f366c7b0749 [ 576.798113][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.798124][ C1] RSP: 002b:00007ffee5af7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 576.798139][ C1] RAX: ffffffffffffffda RBX: 00007f366ca06fa0 RCX: 00007f366c7b0749 [ 576.798149][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 576.798159][ C1] RBP: 00007f366c834f91 R08: 0000000000000000 R09: 0000000000000000 [ 576.798168][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.798177][ C1] R13: 00007f366ca06fa0 R14: 00007f366ca06fa0 R15: 0000000000000002 [ 576.798188][ C1]