Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. 2025/11/28 14:47:33 parsed 1 programs [ 281.105529][ T30] audit: type=1400 audit(1764341253.660:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 281.126216][ T30] audit: type=1400 audit(1764341253.660:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 281.729095][ T30] audit: type=1400 audit(1764341254.280:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 281.730477][ T289] cgroup: Unknown subsys name 'net' [ 281.751723][ T30] audit: type=1400 audit(1764341254.280:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 281.778957][ T30] audit: type=1400 audit(1764341254.310:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 281.779266][ T289] cgroup: Unknown subsys name 'devices' [ 281.921684][ T289] cgroup: Unknown subsys name 'hugetlb' [ 281.927267][ T289] cgroup: Unknown subsys name 'rlimit' [ 282.069601][ T30] audit: type=1400 audit(1764341254.620:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.092737][ T30] audit: type=1400 audit(1764341254.630:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.113205][ T30] audit: type=1400 audit(1764341254.630:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.114544][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 282.133585][ T30] audit: type=1400 audit(1764341254.630:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 282.162130][ T30] audit: type=1400 audit(1764341254.630:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 282.219484][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 282.619459][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 282.810432][ T305] syz-executor (305) used greatest stack depth: 22048 bytes left [ 283.134000][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.141058][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.148292][ T332] device bridge_slave_0 entered promiscuous mode [ 283.155158][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.162181][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.169384][ T332] device bridge_slave_1 entered promiscuous mode [ 283.210288][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.217332][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.224605][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.231623][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.250750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.258398][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.266150][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.274689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.282837][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.289865][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.305334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.313440][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.320459][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.333067][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.342210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.359643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.373267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.381169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.388506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.396414][ T332] device veth0_vlan entered promiscuous mode [ 283.412578][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.421396][ T332] device veth1_macvtap entered promiscuous mode [ 283.429768][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.448445][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/28 14:47:36 executed programs: 0 [ 283.834801][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.841900][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.849193][ T362] device bridge_slave_0 entered promiscuous mode [ 283.856341][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.863407][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.870836][ T362] device bridge_slave_1 entered promiscuous mode [ 283.926089][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.933146][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.940394][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.947401][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.964537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.972174][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.979368][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.988004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.996205][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.003242][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.011887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.020122][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.027136][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.041557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.050839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.063532][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.074040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.082172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.089500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.101619][ T362] device veth0_vlan entered promiscuous mode [ 284.111327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.120352][ T362] device veth1_macvtap entered promiscuous mode [ 284.128635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.138171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.165838][ T372] loop2: detected capacity change from 0 to 1024 [ 284.200207][ T372] ======================================================= [ 284.200207][ T372] WARNING: The mand mount option has been deprecated and [ 284.200207][ T372] and is ignored by this kernel. Remove the mand [ 284.200207][ T372] option from the mount to silence this warning. [ 284.200207][ T372] ======================================================= [ 284.253901][ T372] EXT4-fs (loop2): Ignoring removed oldalloc option [ 284.260559][ T372] EXT4-fs (loop2): Ignoring removed orlov option [ 284.271907][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 284.560844][ T45] device bridge_slave_1 left promiscuous mode [ 284.567044][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.574872][ T45] device bridge_slave_0 left promiscuous mode [ 284.582205][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.591181][ T45] device veth1_macvtap left promiscuous mode [ 284.597183][ T45] device veth0_vlan left promiscuous mode [ 285.789837][ C0] sched: RT throttling activated [ 299.223740][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.231014][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.238408][ T377] device bridge_slave_0 entered promiscuous mode [ 299.245520][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.252953][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.260426][ T377] device bridge_slave_1 entered promiscuous mode [ 299.318454][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.325518][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.332794][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.339810][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.361192][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.368548][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.376674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.384528][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.400804][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.409075][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.416109][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.424009][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.432894][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.439932][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.447830][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.455798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.470773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.482894][ T377] device veth0_vlan entered promiscuous mode [ 299.489375][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.497999][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.505650][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.518076][ T377] device veth1_macvtap entered promiscuous mode [ 299.525499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.537088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.557568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/28 14:47:52 executed programs: 3 [ 299.582205][ T388] loop3: detected capacity change from 0 to 1024 [ 299.633331][ T388] EXT4-fs (loop3): Ignoring removed oldalloc option [ 299.639975][ T388] EXT4-fs (loop3): Ignoring removed orlov option [ 299.663764][ T388] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 399.699842][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 399.706842][ C1] (detected by 1, t=10002 jiffies, g=1585, q=940) [ 399.713330][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294977190-4294967187), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 399.726682][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g1585 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 399.737775][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 399.747727][ C1] rcu: RCU grace-period kthread stack dump: [ 399.753595][ C1] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 399.764376][ C1] Call Trace: [ 399.767645][ C1] [ 399.770566][ C1] __schedule+0xb6e/0x14c0 [ 399.774987][ C1] ? release_firmware_map_entry+0x190/0x190 [ 399.780868][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 399.786656][ C1] ? __mod_timer+0x7ae/0xb30 [ 399.791226][ C1] schedule+0x11e/0x1e0 [ 399.795356][ C1] schedule_timeout+0x12c/0x2e0 [ 399.800187][ C1] ? console_conditional_schedule+0x30/0x30 [ 399.806056][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 399.811499][ C1] ? update_process_times+0x200/0x200 [ 399.816959][ C1] ? prepare_to_swait_event+0x308/0x320 [ 399.822503][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 399.827249][ C1] ? debug_smp_processor_id+0x17/0x20 [ 399.832596][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 399.837683][ C1] ? rcu_gp_init+0xc00/0xc00 [ 399.842249][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 399.847423][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 399.851989][ C1] rcu_gp_kthread+0x98/0x330 [ 399.856553][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 399.861208][ C1] ? __kasan_check_read+0x11/0x20 [ 399.866207][ C1] ? __kthread_parkme+0xac/0x200 [ 399.871121][ C1] ? preempt_count_add+0x90/0x1b0 [ 399.876122][ C1] kthread+0x411/0x500 [ 399.880165][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 399.884817][ C1] ? kthread_blkcg+0xd0/0xd0 [ 399.889381][ C1] ret_from_fork+0x1f/0x30 [ 399.893775][ C1] [ 399.896773][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 399.903079][ C1] NMI backtrace for cpu 1 [ 399.907386][ C1] CPU: 1 PID: 388 Comm: syz.3.18 Not tainted syzkaller #0 [ 399.914468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.924496][ C1] Call Trace: [ 399.927751][ C1] [ 399.930573][ C1] __dump_stack+0x21/0x30 [ 399.934882][ C1] dump_stack_lvl+0xee/0x150 [ 399.939446][ C1] ? show_regs_print_info+0x20/0x20 [ 399.944622][ C1] dump_stack+0x15/0x20 [ 399.948753][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 399.953667][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 399.959797][ C1] ? load_image+0x3a0/0x3a0 [ 399.964278][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 399.970320][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 399.976366][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 399.982322][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 399.988192][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 399.994321][ C1] print_other_cpu_stall+0xded/0xfd0 [ 399.999590][ C1] ? print_cpu_stall+0x600/0x600 [ 400.004506][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 400.009161][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 400.014419][ C1] ? debug_smp_processor_id+0x17/0x20 [ 400.019766][ C1] rcu_sched_clock_irq+0x8a3/0x12b0 [ 400.024937][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 400.031065][ C1] ? hrtimer_run_queues+0x166/0x430 [ 400.036238][ C1] update_process_times+0x198/0x200 [ 400.041414][ C1] tick_sched_timer+0x17c/0x240 [ 400.046241][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 400.051763][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 400.056940][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 400.062029][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 400.068073][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 400.072991][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 400.078863][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 400.084475][ C1] [ 400.087382][ C1] [ 400.090294][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 400.096266][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 400.102311][ C1] Code: 00 00 00 0f 0b 0f 1f 44 00 00 55 48 89 e5 53 48 89 fb e8 13 00 00 00 48 8b 3d ec 6e 80 05 48 89 de e8 94 c8 3d 00 5b 5d c3 00 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d 90 ae 99 7e 65 8b 15 91 ae 99 [ 400.121896][ C1] RSP: 0018:ffffc90000cd6f78 EFLAGS: 00000297 [ 400.127939][ C1] RAX: ffffffff81d19f26 RBX: ffff888109288e68 RCX: ffff8881127a0000 [ 400.135888][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.143833][ C1] RBP: ffffc90000cd7058 R08: ffff88810ccd6b28 R09: 0000000000000001 [ 400.151780][ C1] R10: ffffed102199ad66 R11: 1ffff1102199ad65 R12: ffff888112c17000 [ 400.159727][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88810ccd6b28 [ 400.167677][ C1] ? __ext4_journal_get_write_access+0x296/0x6c0 [ 400.173988][ C1] ? __ext4_journal_get_write_access+0x2ca/0x6c0 [ 400.180290][ C1] ? __ext4_journal_ensure_credits+0x430/0x430 [ 400.186465][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 400.191122][ C1] ext4_reserve_inode_write+0x233/0x320 [ 400.196648][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 400.201997][ C1] ? ext4_journal_check_start+0x172/0x240 [ 400.207696][ C1] ext4_dirty_inode+0xbd/0x100 [ 400.212435][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 400.218225][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 400.223234][ C1] ext4_xattr_block_set+0x1591/0x2cb0 [ 400.228587][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 400.234019][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 400.239367][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 400.244718][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 400.250240][ C1] ? selinux_inode_free_security+0x210/0x210 [ 400.256195][ C1] ext4_initxattrs+0xa6/0x110 [ 400.260848][ C1] security_inode_init_security+0x254/0x370 [ 400.266717][ C1] ? posix_acl_create+0x118/0x440 [ 400.271715][ C1] ? ext4_init_security+0x40/0x40 [ 400.276714][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 400.282844][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 400.287933][ C1] ? __ext4_set_acl+0x600/0x600 [ 400.292758][ C1] ? prandom_u32+0x24d/0x290 [ 400.297322][ C1] ext4_init_security+0x34/0x40 [ 400.302177][ C1] __ext4_new_inode+0x2c41/0x3690 [ 400.307177][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 400.312869][ C1] ? dquot_initialize+0x20/0x20 [ 400.317705][ C1] ? ext4_lookup+0x427/0x840 [ 400.322269][ C1] ? ext4_add_entry+0xf40/0xf40 [ 400.327095][ C1] ? may_create+0x377/0x460 [ 400.331572][ C1] ext4_create+0x22a/0x460 [ 400.335963][ C1] ? ext4_lookup+0x840/0x840 [ 400.340528][ C1] ? selinux_inode_create+0x22/0x30 [ 400.345702][ C1] ? security_inode_create+0xbd/0x110 [ 400.351050][ C1] ? ext4_lookup+0x840/0x840 [ 400.355615][ C1] path_openat+0x11ae/0x2f10 [ 400.360189][ C1] ? do_filp_open+0x3e0/0x3e0 [ 400.364842][ C1] ? expand_files+0xde/0x8e0 [ 400.369406][ C1] do_filp_open+0x1b3/0x3e0 [ 400.373882][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 400.378450][ C1] do_sys_openat2+0x14c/0x7b0 [ 400.383105][ C1] ? __se_sys_futex+0x139/0x310 [ 400.387931][ C1] ? do_sys_open+0xe0/0xe0 [ 400.392326][ C1] ? __x64_sys_futex+0x100/0x100 [ 400.397244][ C1] __x64_sys_creat+0x8e/0xb0 [ 400.401809][ C1] x64_sys_call+0x94a/0x9a0 [ 400.406288][ C1] do_syscall_64+0x4c/0xa0 [ 400.410686][ C1] ? clear_bhb_loop+0x50/0xa0 [ 400.415338][ C1] ? clear_bhb_loop+0x50/0xa0 [ 400.419989][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 400.425858][ C1] RIP: 0033:0x7f92c9e49749 [ 400.430251][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.449831][ C1] RSP: 002b:00007ffdaea02158 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 400.458222][ C1] RAX: ffffffffffffffda RBX: 00007f92ca09ffa0 RCX: 00007f92c9e49749 [ 400.466168][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 400.474113][ C1] RBP: 00007f92c9ecdf91 R08: 0000000000000000 R09: 0000000000000000 [ 400.482061][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.490007][ C1] R13: 00007f92ca09ffa0 R14: 00007f92ca09ffa0 R15: 0000000000000002 [ 400.497956][ C1] [ 449.779886][ T31] INFO: task kworker/u4:3:333 blocked for more than 126 seconds. [ 449.787630][ T31] Not tainted syzkaller #0 [ 449.792643][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.801360][ T31] task:kworker/u4:3 state:D stack:24544 pid: 333 ppid: 2 flags:0x00004000 [ 449.810605][ T31] Workqueue: events_unbound linkwatch_event [ 449.816495][ T31] Call Trace: [ 449.819747][ T31] [ 449.822680][ T31] __schedule+0xb6e/0x14c0 [ 449.827085][ T31] ? release_firmware_map_entry+0x190/0x190 [ 450.780027][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 450.785273][ T31] ? __kasan_check_write+0x14/0x20 [ 450.790437][ T31] ? kthread_data+0x50/0xc0 [ 450.794973][ T31] ? wq_worker_sleeping+0x60/0x200 [ 450.800114][ T31] schedule+0x11e/0x1e0 [ 450.804272][ T31] schedule_preempt_disabled+0x13/0x20 [ 450.809717][ T31] __mutex_lock+0x7b6/0x11b0 [ 450.814305][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 450.819959][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 450.826701][ T31] ? __kasan_check_write+0x14/0x20 [ 451.781276][ T31] ? __switch_to+0x51d/0xe20 [ 451.785908][ T31] __mutex_lock_slowpath+0xe/0x10 [ 451.790999][ T31] mutex_lock+0x100/0x1a0 [ 451.795395][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 451.802014][ T31] ? __schedule+0xb76/0x14c0 [ 451.806593][ T31] rtnl_lock+0x15/0x20 [ 451.810685][ T31] linkwatch_event+0xe/0x60 [ 451.815181][ T31] process_one_work+0x6be/0xba0 [ 451.820034][ T31] worker_thread+0xa59/0x1200 [ 451.824702][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 452.780202][ T31] ? __kthread_parkme+0xac/0x200 [ 452.785181][ T31] kthread+0x411/0x500 [ 452.789233][ T31] ? worker_clr_flags+0x190/0x190 [ 452.794261][ T31] ? kthread_blkcg+0xd0/0xd0 [ 452.798845][ T31] ret_from_fork+0x1f/0x30 [ 452.803270][ T31] [ 452.806313][ T31] INFO: task syz-executor:393 blocked for more than 129 seconds. [ 452.814205][ T31] Not tainted syzkaller #0 [ 452.819119][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.827784][ T31] task:syz-executor state:D stack:22976 pid: 393 ppid: 1 flags:0x00004004 [ 453.790234][ T31] Call Trace: [ 453.793591][ T31] [ 453.796522][ T31] __schedule+0xb6e/0x14c0 [ 453.800945][ T31] ? release_firmware_map_entry+0x190/0x190 [ 453.806819][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 453.812617][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 453.818063][ T31] schedule+0x11e/0x1e0 [ 453.822218][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 453.827839][ T31] ? synchronize_rcu+0x110/0x110 [ 454.780061][ T31] ? __kasan_slab_free+0x11/0x20 [ 454.785147][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 454.790709][ T31] ? rcu_exp_handler+0x370/0x370 [ 454.795645][ T31] ? kfree+0xc4/0x270 [ 454.799605][ T31] ? kfree_const+0x39/0x40 [ 454.804029][ T31] ? __kasan_check_write+0x14/0x20 [ 454.809131][ T31] ? kobject_put+0x1a8/0x270 [ 454.813727][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 454.819784][ T31] ? kobject_put+0x214/0x270 [ 454.824368][ T31] ? io_schedule+0xe0/0xe0 [ 454.828773][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 455.790052][ T31] ? __kasan_check_read+0x11/0x20 [ 455.795283][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 455.801267][ T31] ? linkwatch_fire_event+0x307/0x380 [ 455.806635][ T31] veth_newlink+0x9bc/0xda0 [ 455.811214][ T31] ? veth_validate+0x200/0x200 [ 455.815980][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 455.821002][ T31] ? veth_validate+0x200/0x200 [ 455.825753][ T31] rtnl_newlink+0x112d/0x17b0 [ 456.780006][ T31] ? rtnl_setlink+0x400/0x400 [ 456.784723][ T31] ? stack_trace_save+0xe0/0xe0 [ 456.789563][ T31] ? arch_stack_walk+0xee/0x140 [ 456.794452][ T31] ? memcpy+0x56/0x70 [ 456.798427][ T31] ? page_ext_put+0x1c/0x30 [ 456.802932][ T31] ? __kasan_check_write+0x14/0x20 [ 456.808030][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 456.814658][ T31] ? ns_capable+0x8c/0xf0 [ 456.818980][ T31] ? netlink_net_capable+0x125/0x160 [ 456.824258][ T31] ? rtnl_setlink+0x400/0x400 [ 456.828925][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 457.780150][ T31] ? rtnetlink_bind+0x80/0x80 [ 457.784911][ T31] ? memcpy+0x56/0x70 [ 457.788892][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 457.794327][ T31] ? arch_stack_walk+0xee/0x140 [ 457.799216][ T31] ? avc_denied+0x1b0/0x1b0 [ 457.803745][ T31] ? stack_trace_save+0x98/0xe0 [ 457.808590][ T31] ? avc_has_perm+0x158/0x240 [ 457.813277][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 457.818635][ T31] ? do_syscall_64+0x4c/0xa0 [ 457.823225][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 457.828588][ T31] netlink_rcv_skb+0x1e0/0x430 [ 458.780266][ T31] ? rtnetlink_bind+0x80/0x80 [ 458.784982][ T31] ? netlink_ack+0xb60/0xb60 [ 458.789564][ T31] ? __netlink_lookup+0x387/0x3b0 [ 458.794700][ T31] rtnetlink_rcv+0x1c/0x20 [ 458.799184][ T31] netlink_unicast+0x876/0xa40 [ 458.803946][ T31] netlink_sendmsg+0x86a/0xb70 [ 458.808697][ T31] ? netlink_getsockopt+0x530/0x530 [ 458.813888][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 458.819346][ T31] __sys_sendto+0x423/0x580 [ 458.823860][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 458.829224][ T31] __x64_sys_sendto+0xe5/0x100 [ 459.790367][ T31] x64_sys_call+0x178/0x9a0 [ 459.794967][ T31] do_syscall_64+0x4c/0xa0 [ 459.799379][ T31] ? clear_bhb_loop+0x50/0xa0 [ 459.804082][ T31] ? clear_bhb_loop+0x50/0xa0 [ 459.808746][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.814673][ T31] RIP: 0033:0x7fd3a2fb5583 [ 459.819082][ T31] RSP: 002b:00007fff9f236218 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 459.827539][ T31] RAX: ffffffffffffffda RBX: 00007fd3a3d38620 RCX: 00007fd3a2fb5583 [ 460.779883][ T31] RDX: 000000000000002c RSI: 00007fd3a3d38670 RDI: 0000000000000003 [ 460.787889][ T31] RBP: 0000000000000001 R08: 00007fff9f236234 R09: 000000000000000c [ 460.795874][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 460.803857][ T31] R13: 0000000000000000 R14: 00007fd3a3d38670 R15: 0000000000000000 [ 460.811835][ T31] [ 460.814843][ T31] NMI backtrace for cpu 1 [ 460.819138][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 460.826300][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.836328][ T31] Call Trace: [ 460.839592][ T31] [ 460.842508][ T31] __dump_stack+0x21/0x30 [ 460.846830][ T31] dump_stack_lvl+0xee/0x150 [ 460.851412][ T31] ? show_regs_print_info+0x20/0x20 [ 460.856600][ T31] dump_stack+0x15/0x20 [ 460.860744][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 460.865670][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 460.871202][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 460.877348][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 460.882272][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 460.888327][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 460.894391][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 460.900371][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 460.906259][ T31] watchdog+0xd64/0xea0 [ 460.910411][ T31] ? hungtask_pm_notify+0x50/0x50 [ 460.915423][ T31] ? __kasan_check_read+0x11/0x20 [ 460.920435][ T31] ? __kthread_parkme+0xac/0x200 [ 460.925359][ T31] ? preempt_count_add+0x90/0x1b0 [ 460.930373][ T31] kthread+0x411/0x500 [ 460.934433][ T31] ? hungtask_pm_notify+0x50/0x50 [ 460.939449][ T31] ? kthread_blkcg+0xd0/0xd0 [ 460.944027][ T31] ret_from_fork+0x1f/0x30 [ 460.948437][ T31] [ 460.951541][ T31] Sending NMI from CPU 1 to CPUs 0: [ 460.956734][ C0] NMI backtrace for cpu 0 [ 460.956743][ C0] CPU: 0 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 [ 460.956757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.956765][ C0] RIP: 0010:__find_get_block+0x76/0xee0 [ 460.956786][ C0] Code: bd 81 48 8d 4c 24 40 48 c1 e9 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 48 ba 00 00 00 00 00 fc ff df 48 89 04 11 66 c7 44 11 09 f3 f3 <48> 89 4c 24 30 c6 44 11 0b f3 e8 7b 83 ab ff 48 c7 84 24 80 00 00 [ 460.956798][ C0] RSP: 0018:ffffc90000bf6d20 EFLAGS: 00000a06 [ 460.956811][ C0] RAX: f2f2f200f1f1f1f1 RBX: 0000000000000400 RCX: 1ffff9200017edac [ 460.956822][ C0] RDX: dffffc0000000000 RSI: 0000000000000009 RDI: ffff88810928ec80 [ 460.956832][ C0] RBP: ffffc90000bf6e20 R08: dffffc0000000000 R09: ffffc90000bf6fa0 [ 460.956842][ C0] R10: fffff5200017edf9 R11: 1ffff9200017edf4 R12: 0000000000000009 [ 460.956852][ C0] R13: ffff88810928ec80 R14: 0000000000000400 R15: 0000000000000009 [ 460.956862][ C0] FS: 0000555590c8d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 460.956874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.956884][ C0] CR2: 00007ffcd00f90a8 CR3: 00000001245d1000 CR4: 00000000003506b0 [ 460.956897][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 460.956906][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 460.956915][ C0] Call Trace: [ 460.956918][ C0] [ 460.956923][ C0] ? __kasan_check_write+0x14/0x20 [ 460.956939][ C0] ? write_boundary_block+0x140/0x140 [ 460.956954][ C0] ? __kasan_check_read+0x11/0x20 [ 460.956967][ C0] ? preempt_schedule_irq+0xbb/0x110 [ 460.956983][ C0] __getblk_gfp+0x30/0x7d0 [ 460.956997][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 460.957014][ C0] ? ext4_get_group_desc+0x2ad/0x320 [ 460.957029][ C0] __ext4_get_inode_loc+0x461/0xcd0 [ 460.957045][ C0] ? ext4_get_inode_loc+0x130/0x130 [ 460.957059][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 460.957074][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 460.957089][ C0] ext4_reserve_inode_write+0x16c/0x320 [ 460.957104][ C0] __ext4_mark_inode_dirty+0xb7/0x610 [ 460.957118][ C0] ? ext4_journal_check_start+0x172/0x240 [ 460.957134][ C0] ext4_dirty_inode+0xbd/0x100 [ 460.957147][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 460.957162][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 460.957178][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 460.957198][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 460.957213][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 460.957229][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 460.957246][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 460.957262][ C0] ? selinux_inode_free_security+0x210/0x210 [ 460.957279][ C0] ext4_initxattrs+0xa6/0x110 [ 460.957292][ C0] security_inode_init_security+0x254/0x370 [ 460.957308][ C0] ? posix_acl_create+0x118/0x440 [ 460.957321][ C0] ? ext4_init_security+0x40/0x40 [ 460.957334][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 460.957350][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 460.957365][ C0] ? __ext4_set_acl+0x600/0x600 [ 460.957378][ C0] ? prandom_u32+0x24d/0x290 [ 460.957391][ C0] ext4_init_security+0x34/0x40 [ 460.957403][ C0] __ext4_new_inode+0x2c41/0x3690 [ 460.957419][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 460.957432][ C0] ? dquot_initialize+0x20/0x20 [ 460.957446][ C0] ? ext4_lookup+0x427/0x840 [ 460.957459][ C0] ? ext4_add_entry+0xf40/0xf40 [ 460.957471][ C0] ? may_create+0x377/0x460 [ 460.957484][ C0] ext4_create+0x22a/0x460 [ 460.957498][ C0] ? ext4_lookup+0x840/0x840 [ 460.957510][ C0] ? selinux_inode_create+0x22/0x30 [ 460.957524][ C0] ? security_inode_create+0xbd/0x110 [ 460.957538][ C0] ? ext4_lookup+0x840/0x840 [ 460.957550][ C0] path_openat+0x11ae/0x2f10 [ 460.957567][ C0] ? do_filp_open+0x3e0/0x3e0 [ 460.957580][ C0] ? expand_files+0xde/0x8e0 [ 460.957593][ C0] do_filp_open+0x1b3/0x3e0 [ 460.957606][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 460.957623][ C0] do_sys_openat2+0x14c/0x7b0 [ 460.957639][ C0] ? __se_sys_futex+0x139/0x310 [ 460.957658][ C0] ? do_sys_open+0xe0/0xe0 [ 460.957673][ C0] ? __x64_sys_futex+0x100/0x100 [ 460.957688][ C0] __x64_sys_creat+0x8e/0xb0 [ 460.957704][ C0] x64_sys_call+0x94a/0x9a0 [ 460.957716][ C0] do_syscall_64+0x4c/0xa0 [ 460.957731][ C0] ? clear_bhb_loop+0x50/0xa0 [ 460.957742][ C0] ? clear_bhb_loop+0x50/0xa0 [ 460.957754][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.957770][ C0] RIP: 0033:0x7f392116d749 [ 460.957781][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.957792][ C0] RSP: 002b:00007ffc2c976de8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 460.957806][ C0] RAX: ffffffffffffffda RBX: 00007f39213c3fa0 RCX: 00007f392116d749 [ 460.957817][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 460.957825][ C0] RBP: 00007f39211f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.957834][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.957843][ C0] R13: 00007f39213c3fa0 R14: 00007f39213c3fa0 R15: 0000000000000002 [ 460.957854][ C0] [ 483.780226][ T31] INFO: task kworker/u4:3:333 blocked for more than 160 seconds. [ 483.787997][ T31] Not tainted syzkaller #0 [ 483.793007][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.801687][ T31] task:kworker/u4:3 state:D stack:24544 pid: 333 ppid: 2 flags:0x00004000 [ 483.810905][ T31] Workqueue: events_unbound linkwatch_event [ 483.816810][ T31] Call Trace: [ 483.820094][ T31] [ 483.823012][ T31] __schedule+0xb6e/0x14c0 [ 483.827403][ T31] ? release_firmware_map_entry+0x190/0x190 [ 484.780293][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 484.785530][ T31] ? __kasan_check_write+0x14/0x20 [ 484.790661][ T31] ? kthread_data+0x50/0xc0 [ 484.795172][ T31] ? wq_worker_sleeping+0x60/0x200 [ 484.800279][ T31] schedule+0x11e/0x1e0 [ 484.804426][ T31] schedule_preempt_disabled+0x13/0x20 [ 484.809883][ T31] __mutex_lock+0x7b6/0x11b0 [ 484.814459][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 484.820093][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 484.826841][ T31] ? __kasan_check_write+0x14/0x20 [ 485.780418][ T31] ? __switch_to+0x51d/0xe20 [ 485.785049][ T31] __mutex_lock_slowpath+0xe/0x10 [ 485.790084][ T31] mutex_lock+0x100/0x1a0 [ 485.794511][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 485.801132][ T31] ? __schedule+0xb76/0x14c0 [ 485.805710][ T31] rtnl_lock+0x15/0x20 [ 485.809760][ T31] linkwatch_event+0xe/0x60 [ 485.814268][ T31] process_one_work+0x6be/0xba0 [ 485.819110][ T31] worker_thread+0xa59/0x1200 [ 485.823853][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 485.829306][ T31] ? __kthread_parkme+0xac/0x200 [ 486.780237][ T31] kthread+0x411/0x500 [ 486.784460][ T31] ? worker_clr_flags+0x190/0x190 [ 486.789486][ T31] ? kthread_blkcg+0xd0/0xd0 [ 486.794136][ T31] ret_from_fork+0x1f/0x30 [ 486.798605][ T31] [ 486.801658][ T31] INFO: task syz-executor:393 blocked for more than 163 seconds. [ 486.809352][ T31] Not tainted syzkaller #0 [ 486.814276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.822950][ T31] task:syz-executor state:D stack:22976 pid: 393 ppid: 1 flags:0x00004004 [ 487.780294][ T31] Call Trace: [ 487.783629][ T31] [ 487.786562][ T31] __schedule+0xb6e/0x14c0 [ 487.791030][ T31] ? release_firmware_map_entry+0x190/0x190 [ 487.796924][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 487.802727][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 487.808173][ T31] schedule+0x11e/0x1e0 [ 487.812337][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 487.817966][ T31] ? synchronize_rcu+0x110/0x110 [ 487.822899][ T31] ? __kasan_slab_free+0x11/0x20 [ 487.827823][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 488.780582][ T31] ? rcu_exp_handler+0x370/0x370 [ 488.785550][ T31] ? kfree+0xc4/0x270 [ 488.789523][ T31] ? kfree_const+0x39/0x40 [ 488.793986][ T31] ? __kasan_check_write+0x14/0x20 [ 488.799092][ T31] ? kobject_put+0x1a8/0x270 [ 488.803702][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 488.809760][ T31] ? kobject_put+0x214/0x270 [ 488.814379][ T31] ? io_schedule+0xe0/0xe0 [ 488.818787][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 488.824855][ T31] ? __kasan_check_read+0x11/0x20 [ 489.780128][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 489.786084][ T31] ? linkwatch_fire_event+0x307/0x380 [ 489.791517][ T31] veth_newlink+0x9bc/0xda0 [ 489.796016][ T31] ? veth_validate+0x200/0x200 [ 489.800802][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 489.805825][ T31] ? veth_validate+0x200/0x200 [ 489.810612][ T31] rtnl_newlink+0x112d/0x17b0 [ 489.815283][ T31] ? rtnl_setlink+0x400/0x400 [ 489.819957][ T31] ? stack_trace_save+0xe0/0xe0 [ 489.824798][ T31] ? arch_stack_walk+0xee/0x140 [ 489.829626][ T31] ? memcpy+0x56/0x70 [ 490.779976][ T31] ? page_ext_put+0x1c/0x30 [ 490.784518][ T31] ? __kasan_check_write+0x14/0x20 [ 490.789620][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 490.796276][ T31] ? ns_capable+0x8c/0xf0 [ 490.800615][ T31] ? netlink_net_capable+0x125/0x160 [ 490.805885][ T31] ? rtnl_setlink+0x400/0x400 [ 490.810552][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 490.815494][ T31] ? rtnetlink_bind+0x80/0x80 [ 490.820176][ T31] ? memcpy+0x56/0x70 [ 490.824145][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 490.829490][ T31] ? arch_stack_walk+0xee/0x140 [ 491.781213][ T31] ? avc_denied+0x1b0/0x1b0 [ 491.785752][ T31] ? stack_trace_save+0x98/0xe0 [ 491.790902][ T31] ? avc_has_perm+0x158/0x240 [ 491.795583][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 491.800971][ T31] ? do_syscall_64+0x4c/0xa0 [ 491.805639][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 491.811028][ T31] netlink_rcv_skb+0x1e0/0x430 [ 491.815783][ T31] ? rtnetlink_bind+0x80/0x80 [ 491.820463][ T31] ? netlink_ack+0xb60/0xb60 [ 491.825041][ T31] ? __netlink_lookup+0x387/0x3b0 [ 492.780099][ T31] rtnetlink_rcv+0x1c/0x20 [ 492.784534][ T31] netlink_unicast+0x876/0xa40 [ 492.789272][ T31] netlink_sendmsg+0x86a/0xb70 [ 492.794071][ T31] ? netlink_getsockopt+0x530/0x530 [ 492.799258][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 492.804719][ T31] __sys_sendto+0x423/0x580 [ 492.809211][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 492.814584][ T31] __x64_sys_sendto+0xe5/0x100 [ 492.819335][ T31] x64_sys_call+0x178/0x9a0 [ 492.823829][ T31] do_syscall_64+0x4c/0xa0 [ 492.828234][ T31] ? clear_bhb_loop+0x50/0xa0 [ 493.780449][ T31] ? clear_bhb_loop+0x50/0xa0 [ 493.785163][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.791203][ T31] RIP: 0033:0x7fd3a2fb5583 [ 493.795611][ T31] RSP: 002b:00007fff9f236218 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 493.804019][ T31] RAX: ffffffffffffffda RBX: 00007fd3a3d38620 RCX: 00007fd3a2fb5583 [ 493.812011][ T31] RDX: 000000000000002c RSI: 00007fd3a3d38670 RDI: 0000000000000003 [ 493.819986][ T31] RBP: 0000000000000001 R08: 00007fff9f236234 R09: 000000000000000c [ 493.827951][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 494.780060][ T31] R13: 0000000000000000 R14: 00007fd3a3d38670 R15: 0000000000000000 [ 494.788072][ T31] [ 494.791145][ T31] NMI backtrace for cpu 1 [ 494.795469][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 494.802634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.812658][ T31] Call Trace: [ 494.815909][ T31] [ 494.818813][ T31] __dump_stack+0x21/0x30 [ 494.823116][ T31] dump_stack_lvl+0xee/0x150 [ 494.827673][ T31] ? show_regs_print_info+0x20/0x20 [ 494.832845][ T31] dump_stack+0x15/0x20 [ 494.836991][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 494.841918][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 494.847452][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 494.853599][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 494.858523][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 494.864580][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 494.870635][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 494.876603][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 494.882485][ T31] watchdog+0xd64/0xea0 [ 494.886630][ T31] ? hungtask_pm_notify+0x50/0x50 [ 494.891643][ T31] ? __kasan_check_read+0x11/0x20 [ 494.896659][ T31] ? __kthread_parkme+0xac/0x200 [ 494.901582][ T31] ? preempt_count_add+0x90/0x1b0 [ 494.906598][ T31] kthread+0x411/0x500 [ 494.910655][ T31] ? hungtask_pm_notify+0x50/0x50 [ 494.915667][ T31] ? kthread_blkcg+0xd0/0xd0 [ 494.920245][ T31] ret_from_fork+0x1f/0x30 [ 494.924653][ T31] [ 494.927751][ T31] Sending NMI from CPU 1 to CPUs 0: [ 494.932952][ C0] NMI backtrace for cpu 0 [ 494.932961][ C0] CPU: 0 PID: 372 Comm: syz.2.17 Not tainted syzkaller #0 [ 494.932975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 494.932983][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 494.933004][ C0] Code: e0 aa 99 7e 65 8b 15 e1 aa 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 5b 83 b9 5c 0b 00 00 00 74 52 8b 91 38 0b 00 00 <83> fa 03 75 47 48 8b 91 40 0b 00 00 44 8b 89 3c 0b 00 00 49 c1 e1 [ 494.933015][ C0] RSP: 0018:ffffc90000bf6f80 EFLAGS: 00000246 [ 494.933028][ C0] RAX: ffffffff81bd5fe6 RBX: ffff88810ccc1648 RCX: ffff88810c770000 [ 494.933039][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 494.933047][ C0] RBP: ffffc90000bf6f80 R08: dffffc0000000000 R09: ffffed10219982ca [ 494.933058][ C0] R10: ffffed10219982ca R11: 1ffff110219982c9 R12: ffffc90000bf7100 [ 494.933069][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff888121f641c8 [ 494.933079][ C0] FS: 0000555590c8d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 494.933091][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.933102][ C0] CR2: 00007ffcd00f90a8 CR3: 00000001245d1000 CR4: 00000000003506b0 [ 494.933114][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.933123][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 494.933131][ C0] Call Trace: [ 494.933135][ C0] [ 494.933140][ C0] __brelse+0x46/0x90 [ 494.933156][ C0] ext4_mark_iloc_dirty+0x2fe4/0x3f50 [ 494.933173][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 494.933188][ C0] ? inode_add_bytes+0x103/0x150 [ 494.933211][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 494.933224][ C0] ? ext4_journal_check_start+0x172/0x240 [ 494.933241][ C0] ext4_dirty_inode+0xbd/0x100 [ 494.933254][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 494.933269][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 494.933285][ C0] ext4_xattr_block_set+0x13db/0x2cb0 [ 494.933305][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 494.933320][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 494.933336][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 494.933353][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 494.933370][ C0] ? selinux_inode_free_security+0x210/0x210 [ 494.933388][ C0] ext4_initxattrs+0xa6/0x110 [ 494.933401][ C0] security_inode_init_security+0x254/0x370 [ 494.933416][ C0] ? posix_acl_create+0x118/0x440 [ 494.933429][ C0] ? ext4_init_security+0x40/0x40 [ 494.933442][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 494.933458][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 494.933473][ C0] ? __ext4_set_acl+0x600/0x600 [ 494.933486][ C0] ? prandom_u32+0x24d/0x290 [ 494.933499][ C0] ext4_init_security+0x34/0x40 [ 494.933512][ C0] __ext4_new_inode+0x2c41/0x3690 [ 494.933527][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 494.933540][ C0] ? dquot_initialize+0x20/0x20 [ 494.933555][ C0] ? ext4_lookup+0x427/0x840 [ 494.933568][ C0] ? ext4_add_entry+0xf40/0xf40 [ 494.933580][ C0] ? may_create+0x377/0x460 [ 494.933592][ C0] ext4_create+0x22a/0x460 [ 494.933606][ C0] ? ext4_lookup+0x840/0x840 [ 494.933618][ C0] ? selinux_inode_create+0x22/0x30 [ 494.933633][ C0] ? security_inode_create+0xbd/0x110 [ 494.933647][ C0] ? ext4_lookup+0x840/0x840 [ 494.933659][ C0] path_openat+0x11ae/0x2f10 [ 494.933677][ C0] ? do_filp_open+0x3e0/0x3e0 [ 494.933690][ C0] ? expand_files+0xde/0x8e0 [ 494.933702][ C0] do_filp_open+0x1b3/0x3e0 [ 494.933716][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 494.933733][ C0] do_sys_openat2+0x14c/0x7b0 [ 494.933749][ C0] ? __se_sys_futex+0x139/0x310 [ 494.933763][ C0] ? do_sys_open+0xe0/0xe0 [ 494.933778][ C0] ? __x64_sys_futex+0x100/0x100 [ 494.933794][ C0] __x64_sys_creat+0x8e/0xb0 [ 494.933809][ C0] x64_sys_call+0x94a/0x9a0 [ 494.933822][ C0] do_syscall_64+0x4c/0xa0 [ 494.933837][ C0] ? clear_bhb_loop+0x50/0xa0 [ 494.933849][ C0] ? clear_bhb_loop+0x50/0xa0 [ 494.933860][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 494.933876][ C0] RIP: 0033:0x7f392116d749 [ 494.933888][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.933899][ C0] RSP: 002b:00007ffc2c976de8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 494.933912][ C0] RAX: ffffffffffffffda RBX: 00007f39213c3fa0 RCX: 00007f392116d749 [ 494.933923][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 494.933931][ C0] RBP: 00007f39211f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.933940][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.933948][ C0] R13: 00007f39213c3fa0 R14: 00007f39213c3fa0 R15: 0000000000000002 [ 494.933960][ C0] [ 517.781105][ T31] INFO: task kworker/u4:3:333 blocked for more than 194 seconds. [ 517.788855][ T31] Not tainted syzkaller #0 [ 517.793867][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.802542][ T31] task:kworker/u4:3 state:D stack:24544 pid: 333 ppid: 2 flags:0x00004000 [ 517.811747][ T31] Workqueue: events_unbound linkwatch_event [ 517.817633][ T31] Call Trace: [ 517.820909][ T31] [ 517.823826][ T31] __schedule+0xb6e/0x14c0 [ 517.828218][ T31] ? release_firmware_map_entry+0x190/0x190 [ 518.780027][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 518.785252][ T31] ? __kasan_check_write+0x14/0x20 [ 518.790435][ T31] ? kthread_data+0x50/0xc0 [ 518.794934][ T31] ? wq_worker_sleeping+0x60/0x200 [ 518.800061][ T31] schedule+0x11e/0x1e0 [ 518.804203][ T31] schedule_preempt_disabled+0x13/0x20 [ 518.809637][ T31] __mutex_lock+0x7b6/0x11b0 [ 518.814226][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 518.819865][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 518.826610][ T31] ? __kasan_check_write+0x14/0x20 [ 519.780235][ T31] ? __switch_to+0x51d/0xe20 [ 519.784863][ T31] __mutex_lock_slowpath+0xe/0x10 [ 519.790132][ T31] mutex_lock+0x100/0x1a0 [ 519.794504][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 519.801099][ T31] ? __schedule+0xb76/0x14c0 [ 519.805683][ T31] rtnl_lock+0x15/0x20 [ 519.809740][ T31] linkwatch_event+0xe/0x60 [ 519.814260][ T31] process_one_work+0x6be/0xba0 [ 519.819102][ T31] worker_thread+0xa59/0x1200 [ 519.823780][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 519.829227][ T31] ? __kthread_parkme+0xac/0x200 [ 520.779895][ T31] kthread+0x411/0x500 [ 520.783992][ T31] ? worker_clr_flags+0x190/0x190 [ 520.789007][ T31] ? kthread_blkcg+0xd0/0xd0 [ 520.793627][ T31] ret_from_fork+0x1f/0x30 [ 520.798059][ T31] [ 520.801120][ T31] INFO: task syz-executor:393 blocked for more than 197 seconds. [ 520.808820][ T31] Not tainted syzkaller #0 [ 520.813761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.822420][ T31] task:syz-executor state:D stack:22976 pid: 393 ppid: 1 flags:0x00004004 [ 521.780236][ T31] Call Trace: [ 521.783567][ T31] [ 521.786492][ T31] __schedule+0xb6e/0x14c0 [ 521.790939][ T31] ? release_firmware_map_entry+0x190/0x190 [ 521.796820][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 521.802626][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 521.808086][ T31] schedule+0x11e/0x1e0 [ 521.812239][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 521.817860][ T31] ? synchronize_rcu+0x110/0x110 [ 521.822794][ T31] ? __kasan_slab_free+0x11/0x20 [ 521.827719][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 522.780045][ T31] ? rcu_exp_handler+0x370/0x370 [ 522.785019][ T31] ? kfree+0xc4/0x270 [ 522.788990][ T31] ? kfree_const+0x39/0x40 [ 522.793585][ T31] ? __kasan_check_write+0x14/0x20 [ 522.798707][ T31] ? kobject_put+0x1a8/0x270 [ 522.803302][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 522.809408][ T31] ? kobject_put+0x214/0x270 [ 522.814001][ T31] ? io_schedule+0xe0/0xe0 [ 522.818403][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 522.824460][ T31] ? __kasan_check_read+0x11/0x20 [ 522.829471][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 523.780847][ T31] ? linkwatch_fire_event+0x307/0x380 [ 523.786266][ T31] veth_newlink+0x9bc/0xda0 [ 523.790789][ T31] ? veth_validate+0x200/0x200 [ 523.795589][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 523.800653][ T31] ? veth_validate+0x200/0x200 [ 523.814748][ T31] rtnl_newlink+0x112d/0x17b0 [ 523.819448][ T31] ? rtnl_setlink+0x400/0x400 [ 523.824300][ T31] ? stack_trace_save+0xe0/0xe0 [ 523.829156][ T31] ? arch_stack_walk+0xee/0x140 [ 524.781166][ T31] ? memcpy+0x56/0x70 [ 524.785196][ T31] ? page_ext_put+0x1c/0x30 [ 524.789692][ T31] ? __kasan_check_write+0x14/0x20 [ 524.794839][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 524.801448][ T31] ? ns_capable+0x8c/0xf0 [ 524.805764][ T31] ? netlink_net_capable+0x125/0x160 [ 524.811087][ T31] ? rtnl_setlink+0x400/0x400 [ 524.815753][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 524.820685][ T31] ? rtnetlink_bind+0x80/0x80 [ 524.825348][ T31] ? memcpy+0x56/0x70 [ 524.829304][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 525.790526][ T31] ? arch_stack_walk+0xee/0x140 [ 525.795569][ T31] ? avc_denied+0x1b0/0x1b0 [ 525.800124][ T31] ? stack_trace_save+0x98/0xe0 [ 525.804969][ T31] ? avc_has_perm+0x158/0x240 [ 525.809619][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 525.815053][ T31] ? do_syscall_64+0x4c/0xa0 [ 525.819636][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 525.825008][ T31] netlink_rcv_skb+0x1e0/0x430 [ 525.829759][ T31] ? rtnetlink_bind+0x80/0x80 [ 526.780092][ T31] ? netlink_ack+0xb60/0xb60 [ 526.784704][ T31] ? __netlink_lookup+0x387/0x3b0 [ 526.789705][ T31] rtnetlink_rcv+0x1c/0x20 [ 526.794116][ T31] netlink_unicast+0x876/0xa40 [ 526.798868][ T31] netlink_sendmsg+0x86a/0xb70 [ 526.803825][ T31] ? netlink_getsockopt+0x530/0x530 [ 526.809027][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 526.814650][ T31] __sys_sendto+0x423/0x580 [ 526.819200][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 526.824740][ T31] __x64_sys_sendto+0xe5/0x100 [ 526.829499][ T31] x64_sys_call+0x178/0x9a0 [ 527.781146][ T31] do_syscall_64+0x4c/0xa0 [ 527.785598][ T31] ? clear_bhb_loop+0x50/0xa0 [ 527.790833][ T31] ? clear_bhb_loop+0x50/0xa0 [ 527.795518][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.801571][ T31] RIP: 0033:0x7fd3a2fb5583 [ 527.806084][ T31] RSP: 002b:00007fff9f236218 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 527.814687][ T31] RAX: ffffffffffffffda RBX: 00007fd3a3d38620 RCX: 00007fd3a2fb5583 [ 527.822679][ T31] RDX: 000000000000002c RSI: 00007fd3a3d38670 RDI: 0000000000000003 [ 528.780007][ T31] RBP: 0000000000000001 R08: 00007fff9f236234 R09: 000000000000000c [ 528.788010][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 528.796013][ T31] R13: 0000000000000000 R14: 00007fd3a3d38670 R15: 0000000000000000 [ 528.803998][ T31] [ 528.807007][ T31] INFO: task syz-executor:397 blocked for more than 142 seconds. [ 528.814718][ T31] Not tainted syzkaller #0 [ 528.819632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 528.828290][ T31] task:syz-executor state:D stack:28192 pid: 397 ppid: 1 flags:0x00004004 [ 529.790197][ T31] Call Trace: [ 529.793503][ T31] [ 529.796410][ T31] __schedule+0xb6e/0x14c0 [ 529.800858][ T31] ? release_firmware_map_entry+0x190/0x190 [ 529.806746][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 529.811875][ T31] ? __kasan_check_write+0x14/0x20 [ 529.816982][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 529.822742][ T31] schedule+0x11e/0x1e0 [ 529.826885][ T31] schedule_preempt_disabled+0x13/0x20 [ 530.780114][ T31] __mutex_lock+0x7b6/0x11b0 [ 530.784723][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 530.791481][ T31] ? selinux_capable+0x29c/0x380 [ 530.796408][ T31] ? selinux_capset+0xf0/0xf0 [ 530.801088][ T31] ? cap_capable+0x1aa/0x230 [ 530.805665][ T31] __mutex_lock_slowpath+0xe/0x10 [ 530.810682][ T31] mutex_lock+0x100/0x1a0 [ 530.814995][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 530.821609][ T31] ? ns_capable+0x8c/0xf0 [ 530.825938][ T31] ? netlink_net_capable+0x125/0x160 [ 531.781462][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 531.786436][ T31] ? rtnetlink_bind+0x80/0x80 [ 531.791176][ T31] ? memcpy+0x56/0x70 [ 531.795233][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 531.800603][ T31] ? arch_stack_walk+0xee/0x140 [ 531.805443][ T31] ? avc_denied+0x1b0/0x1b0 [ 531.809959][ T31] ? stack_trace_save+0x98/0xe0 [ 531.814810][ T31] ? avc_has_perm+0x158/0x240 [ 531.819470][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 531.824925][ T31] ? do_syscall_64+0x4c/0xa0 [ 531.829516][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 532.779961][ T31] netlink_rcv_skb+0x1e0/0x430 [ 532.784757][ T31] ? rtnetlink_bind+0x80/0x80 [ 532.789424][ T31] ? netlink_ack+0xb60/0xb60 [ 532.794050][ T31] ? __netlink_lookup+0x387/0x3b0 [ 532.799102][ T31] rtnetlink_rcv+0x1c/0x20 [ 532.803552][ T31] netlink_unicast+0x876/0xa40 [ 532.808304][ T31] netlink_sendmsg+0x86a/0xb70 [ 532.813068][ T31] ? netlink_getsockopt+0x530/0x530 [ 532.818253][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 532.823708][ T31] __sys_sendto+0x423/0x580 [ 532.828198][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 533.780912][ T31] __x64_sys_sendto+0xe5/0x100 [ 533.785705][ T31] x64_sys_call+0x178/0x9a0 [ 533.790343][ T31] do_syscall_64+0x4c/0xa0 [ 533.794856][ T31] ? clear_bhb_loop+0x50/0xa0 [ 533.799523][ T31] ? clear_bhb_loop+0x50/0xa0 [ 533.804202][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.810109][ T31] RIP: 0033:0x7f9aaede8583 [ 533.814507][ T31] RSP: 002b:00007fffb12c1f98 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 533.822910][ T31] RAX: ffffffffffffffda RBX: 00007f9aafb6b620 RCX: 00007f9aaede8583 [ 534.779885][ T31] RDX: 0000000000000028 RSI: 00007f9aafb6b670 RDI: 0000000000000003 [ 534.787884][ T31] RBP: 0000000000000001 R08: 00007fffb12c1fb4 R09: 000000000000000c [ 534.795900][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 534.803887][ T31] R13: 0000000000000000 R14: 00007f9aafb6b670 R15: 0000000000000000 [ 534.811861][ T31] [ 534.814874][ T31] NMI backtrace for cpu 0 [ 534.819169][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 534.826335][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.836359][ T31] Call Trace: [ 534.839609][ T31] [ 534.842513][ T31] __dump_stack+0x21/0x30 [ 534.846814][ T31] dump_stack_lvl+0xee/0x150 [ 534.851375][ T31] ? show_regs_print_info+0x20/0x20 [ 534.856550][ T31] dump_stack+0x15/0x20 [ 534.860673][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 534.865583][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 534.871099][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 534.877221][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 534.882126][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 534.888159][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 534.894195][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 534.900145][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 534.906006][ T31] watchdog+0xd64/0xea0 [ 534.910134][ T31] ? hungtask_pm_notify+0x50/0x50 [ 534.915129][ T31] ? __kasan_check_read+0x11/0x20 [ 534.920124][ T31] ? __kthread_parkme+0xac/0x200 [ 534.925031][ T31] ? preempt_count_add+0x90/0x1b0 [ 534.930026][ T31] kthread+0x411/0x500 [ 534.934064][ T31] ? hungtask_pm_notify+0x50/0x50 [ 534.939058][ T31] ? kthread_blkcg+0xd0/0xd0 [ 534.943617][ T31] ret_from_fork+0x1f/0x30 [ 534.948003][ T31] [ 534.951084][ T31] Sending NMI from CPU 0 to CPUs 1: [ 534.956281][ C1] NMI backtrace for cpu 1 [ 534.956290][ C1] CPU: 1 PID: 388 Comm: syz.3.18 Not tainted syzkaller #0 [ 534.956304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.956312][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 534.956331][ C1] Code: c2 fc 02 31 c0 5d c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc b0 01 48 85 f6 0f 84 a9 01 00 00 55 <48> 89 e5 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 [ 534.956343][ C1] RSP: 0018:ffffc90000cd6f90 EFLAGS: 00000202 [ 534.956356][ C1] RAX: 0000000000000001 RBX: ffff88812b9ea674 RCX: ffffffff81d892f7 [ 534.956367][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888121fad220 [ 534.956376][ C1] RBP: ffffc90000cd6fa0 R08: dffffc0000000000 R09: ffffed10243f5a45 [ 534.956387][ C1] R10: ffffed10243f5a45 R11: 1ffff110243f5a44 R12: 1ffff110243f5a6a [ 534.956397][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888121fad350 [ 534.956407][ C1] FS: 0000555561e13500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 534.956420][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.956430][ C1] CR2: 00007f91a35a1000 CR3: 000000011e616000 CR4: 00000000003506a0 [ 534.956443][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.956451][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 534.956460][ C1] Call Trace: [ 534.956464][ C1] [ 534.956469][ C1] ? __kasan_check_write+0x14/0x20 [ 534.956484][ C1] ext4_mark_iloc_dirty+0x3f7/0x3f50 [ 534.956501][ C1] ? __kasan_check_write+0x14/0x20 [ 534.956515][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 534.956532][ C1] ? ext4_reserve_inode_write+0x281/0x320 [ 534.956547][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 534.956561][ C1] ? ext4_journal_check_start+0x172/0x240 [ 534.956577][ C1] ext4_dirty_inode+0xbd/0x100 [ 534.956591][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 534.956606][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 534.956622][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 534.956642][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 534.956657][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 534.956673][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 534.956690][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 534.956707][ C1] ? selinux_inode_free_security+0x210/0x210 [ 534.956723][ C1] ext4_initxattrs+0xa6/0x110 [ 534.956741][ C1] security_inode_init_security+0x254/0x370 [ 534.956757][ C1] ? posix_acl_create+0x118/0x440 [ 534.956771][ C1] ? ext4_init_security+0x40/0x40 [ 534.956784][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 534.956800][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 534.956815][ C1] ? __ext4_set_acl+0x600/0x600 [ 534.956827][ C1] ? prandom_u32+0x24d/0x290 [ 534.956840][ C1] ext4_init_security+0x34/0x40 [ 534.956853][ C1] __ext4_new_inode+0x2c41/0x3690 [ 534.956868][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 534.956881][ C1] ? dquot_initialize+0x20/0x20 [ 534.956895][ C1] ? ext4_lookup+0x427/0x840 [ 534.956908][ C1] ? ext4_add_entry+0xf40/0xf40 [ 534.956920][ C1] ? may_create+0x377/0x460 [ 534.956933][ C1] ext4_create+0x22a/0x460 [ 534.956947][ C1] ? ext4_lookup+0x840/0x840 [ 534.956959][ C1] ? selinux_inode_create+0x22/0x30 [ 534.956973][ C1] ? security_inode_create+0xbd/0x110 [ 534.956988][ C1] ? ext4_lookup+0x840/0x840 [ 534.957000][ C1] path_openat+0x11ae/0x2f10 [ 534.957018][ C1] ? do_filp_open+0x3e0/0x3e0 [ 534.957031][ C1] ? expand_files+0xde/0x8e0 [ 534.957044][ C1] do_filp_open+0x1b3/0x3e0 [ 534.957057][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 534.957074][ C1] do_sys_openat2+0x14c/0x7b0 [ 534.957090][ C1] ? __se_sys_futex+0x139/0x310 [ 534.957105][ C1] ? do_sys_open+0xe0/0xe0 [ 534.957119][ C1] ? __x64_sys_futex+0x100/0x100 [ 534.957135][ C1] __x64_sys_creat+0x8e/0xb0 [ 534.957151][ C1] x64_sys_call+0x94a/0x9a0 [ 534.957164][ C1] do_syscall_64+0x4c/0xa0 [ 534.957179][ C1] ? clear_bhb_loop+0x50/0xa0 [ 534.957190][ C1] ? clear_bhb_loop+0x50/0xa0 [ 534.957202][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.957218][ C1] RIP: 0033:0x7f92c9e49749 [ 534.957230][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.957241][ C1] RSP: 002b:00007ffdaea02158 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 534.957254][ C1] RAX: ffffffffffffffda RBX: 00007f92ca09ffa0 RCX: 00007f92c9e49749 [ 534.957265][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 534.957273][ C1] RBP: 00007f92c9ecdf91 R08: 0000000000000000 R09: 0000000000000000 [ 534.957282][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.957290][ C1] R13: 00007f92ca09ffa0 R14: 00007f92ca09ffa0 R15: 0000000000000002 [ 534.957302][ C1] [ 557.780910][ T31] INFO: task kworker/u4:3:333 blocked for more than 234 seconds. [ 557.788955][ T31] Not tainted syzkaller #0 [ 557.793915][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.803153][ T31] task:kworker/u4:3 state:D stack:24544 pid: 333 ppid: 2 flags:0x00004000 [ 557.812401][ T31] Workqueue: events_unbound linkwatch_event [ 557.818276][ T31] Call Trace: [ 557.821597][ T31] [ 557.824546][ T31] __schedule+0xb6e/0x14c0 [ 557.828947][ T31] ? release_firmware_map_entry+0x190/0x190 [ 558.780362][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 558.785588][ T31] ? __kasan_check_write+0x14/0x20 [ 558.790746][ T31] ? kthread_data+0x50/0xc0 [ 558.795244][ T31] ? wq_worker_sleeping+0x60/0x200 [ 558.800350][ T31] schedule+0x11e/0x1e0 [ 558.804495][ T31] schedule_preempt_disabled+0x13/0x20 [ 558.809948][ T31] __mutex_lock+0x7b6/0x11b0 [ 558.814525][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 558.820167][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 558.826917][ T31] ? __kasan_check_write+0x14/0x20 [ 559.781211][ T31] ? __switch_to+0x51d/0xe20 [ 559.785851][ T31] __mutex_lock_slowpath+0xe/0x10 [ 559.791081][ T31] mutex_lock+0x100/0x1a0 [ 559.795415][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 559.802014][ T31] ? __schedule+0xb76/0x14c0 [ 559.806588][ T31] rtnl_lock+0x15/0x20 [ 559.810674][ T31] linkwatch_event+0xe/0x60 [ 559.815168][ T31] process_one_work+0x6be/0xba0 [ 559.820061][ T31] worker_thread+0xa59/0x1200 [ 559.824732][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 560.779963][ T31] ? __kthread_parkme+0xac/0x200 [ 560.784977][ T31] kthread+0x411/0x500 [ 560.789046][ T31] ? worker_clr_flags+0x190/0x190 [ 560.794107][ T31] ? kthread_blkcg+0xd0/0xd0 [ 560.798721][ T31] ret_from_fork+0x1f/0x30 [ 560.803149][ T31] [ 560.806167][ T31] INFO: task syz-executor:393 blocked for more than 237 seconds. [ 560.813879][ T31] Not tainted syzkaller #0 [ 560.818796][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.827458][ T31] task:syz-executor state:D stack:22976 pid: 393 ppid: 1 flags:0x00004004 [ 561.781044][ T31] Call Trace: [ 561.784359][ T31] [ 561.787281][ T31] __schedule+0xb6e/0x14c0 [ 561.791851][ T31] ? release_firmware_map_entry+0x190/0x190 [ 561.797814][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 561.803629][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 561.809077][ T31] schedule+0x11e/0x1e0 [ 561.813248][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 561.818869][ T31] ? synchronize_rcu+0x110/0x110 [ 561.823823][ T31] ? __kasan_slab_free+0x11/0x20 [ 561.828746][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 562.780162][ T31] ? rcu_exp_handler+0x370/0x370 [ 562.785132][ T31] ? kfree+0xc4/0x270 [ 562.789110][ T31] ? kfree_const+0x39/0x40 [ 562.793873][ T31] ? __kasan_check_write+0x14/0x20 [ 562.798984][ T31] ? kobject_put+0x1a8/0x270 [ 562.803575][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 562.809634][ T31] ? kobject_put+0x214/0x270 [ 562.814218][ T31] ? io_schedule+0xe0/0xe0 [ 562.818620][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 562.824681][ T31] ? __kasan_check_read+0x11/0x20 [ 562.829692][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 563.790757][ T31] ? linkwatch_fire_event+0x307/0x380 [ 563.796164][ T31] veth_newlink+0x9bc/0xda0 [ 563.800710][ T31] ? veth_validate+0x200/0x200 [ 563.805504][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 563.810558][ T31] ? veth_validate+0x200/0x200 [ 563.815312][ T31] rtnl_newlink+0x112d/0x17b0 [ 563.820020][ T31] ? rtnl_setlink+0x400/0x400 [ 563.824695][ T31] ? stack_trace_save+0xe0/0xe0 [ 563.829522][ T31] ? arch_stack_walk+0xee/0x140 [ 564.780094][ T31] ? memcpy+0x56/0x70 [ 564.784117][ T31] ? page_ext_put+0x1c/0x30 [ 564.788614][ T31] ? __kasan_check_write+0x14/0x20 [ 564.793758][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 564.800372][ T31] ? ns_capable+0x8c/0xf0 [ 564.804693][ T31] ? netlink_net_capable+0x125/0x160 [ 564.809979][ T31] ? rtnl_setlink+0x400/0x400 [ 564.814647][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 564.819566][ T31] ? rtnetlink_bind+0x80/0x80 [ 564.824243][ T31] ? memcpy+0x56/0x70 [ 564.828211][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 565.780134][ T31] ? arch_stack_walk+0xee/0x140 [ 565.785029][ T31] ? avc_denied+0x1b0/0x1b0 [ 565.789525][ T31] ? stack_trace_save+0x98/0xe0 [ 565.794417][ T31] ? avc_has_perm+0x158/0x240 [ 565.799096][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 565.804464][ T31] ? do_syscall_64+0x4c/0xa0 [ 565.809052][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 565.814422][ T31] netlink_rcv_skb+0x1e0/0x430 [ 565.819177][ T31] ? rtnetlink_bind+0x80/0x80 [ 565.823860][ T31] ? netlink_ack+0xb60/0xb60 [ 565.828440][ T31] ? __netlink_lookup+0x387/0x3b0 [ 566.779992][ T31] rtnetlink_rcv+0x1c/0x20 [ 566.784448][ T31] netlink_unicast+0x876/0xa40 [ 566.789205][ T31] netlink_sendmsg+0x86a/0xb70 [ 566.793985][ T31] ? netlink_getsockopt+0x530/0x530 [ 566.799215][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 566.804824][ T31] __sys_sendto+0x423/0x580 [ 566.809332][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 566.814719][ T31] __x64_sys_sendto+0xe5/0x100 [ 566.819479][ T31] x64_sys_call+0x178/0x9a0 [ 566.823985][ T31] do_syscall_64+0x4c/0xa0 [ 566.828391][ T31] ? clear_bhb_loop+0x50/0xa0 [ 567.780617][ T31] ? clear_bhb_loop+0x50/0xa0 [ 567.785331][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 567.791537][ T31] RIP: 0033:0x7fd3a2fb5583 [ 567.795960][ T31] RSP: 002b:00007fff9f236218 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 567.804388][ T31] RAX: ffffffffffffffda RBX: 00007fd3a3d38620 RCX: 00007fd3a2fb5583 [ 567.812375][ T31] RDX: 000000000000002c RSI: 00007fd3a3d38670 RDI: 0000000000000003 [ 567.820356][ T31] RBP: 0000000000000001 R08: 00007fff9f236234 R09: 000000000000000c [ 567.828433][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 568.790007][ T31] R13: 0000000000000000 R14: 00007fd3a3d38670 R15: 0000000000000000 [ 568.798021][ T31] [ 568.801097][ T31] INFO: task syz-executor:397 blocked for more than 182 seconds. [ 568.808798][ T31] Not tainted syzkaller #0 [ 568.813733][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 568.822409][ T31] task:syz-executor state:D stack:28192 pid: 397 ppid: 1 flags:0x00004004 [ 569.780029][ T31] Call Trace: [ 569.783485][ T31] [ 569.786420][ T31] __schedule+0xb6e/0x14c0 [ 569.790847][ T31] ? release_firmware_map_entry+0x190/0x190 [ 569.796800][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 569.801975][ T31] ? __kasan_check_write+0x14/0x20 [ 569.807133][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 569.812913][ T31] schedule+0x11e/0x1e0 [ 569.817062][ T31] schedule_preempt_disabled+0x13/0x20 [ 569.822522][ T31] __mutex_lock+0x7b6/0x11b0 [ 569.827100][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 570.780386][ T31] ? selinux_capable+0x29c/0x380 [ 570.785354][ T31] ? selinux_capset+0xf0/0xf0 [ 570.790073][ T31] ? cap_capable+0x1aa/0x230 [ 570.794658][ T31] __mutex_lock_slowpath+0xe/0x10 [ 570.799660][ T31] mutex_lock+0x100/0x1a0 [ 570.803988][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 570.810585][ T31] ? ns_capable+0x8c/0xf0 [ 570.814913][ T31] ? netlink_net_capable+0x125/0x160 [ 570.820212][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 570.825145][ T31] ? rtnetlink_bind+0x80/0x80 [ 570.829798][ T31] ? memcpy+0x56/0x70 [ 571.780267][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 571.785684][ T31] ? arch_stack_walk+0xee/0x140 [ 571.790570][ T31] ? avc_denied+0x1b0/0x1b0 [ 571.795100][ T31] ? stack_trace_save+0x98/0xe0 [ 571.799999][ T31] ? avc_has_perm+0x158/0x240 [ 571.804673][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 571.810088][ T31] ? do_syscall_64+0x4c/0xa0 [ 571.814671][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 571.820167][ T31] netlink_rcv_skb+0x1e0/0x430 [ 571.824933][ T31] ? rtnetlink_bind+0x80/0x80 [ 571.829596][ T31] ? netlink_ack+0xb60/0xb60 [ 572.779963][ T31] ? __netlink_lookup+0x387/0x3b0 [ 572.785033][ T31] rtnetlink_rcv+0x1c/0x20 [ 572.789444][ T31] netlink_unicast+0x876/0xa40 [ 572.794251][ T31] netlink_sendmsg+0x86a/0xb70 [ 572.799052][ T31] ? netlink_getsockopt+0x530/0x530 [ 572.804304][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 572.809752][ T31] __sys_sendto+0x423/0x580 [ 572.814260][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 572.819640][ T31] __x64_sys_sendto+0xe5/0x100 [ 572.824415][ T31] x64_sys_call+0x178/0x9a0 [ 572.828947][ T31] do_syscall_64+0x4c/0xa0 [ 573.780152][ T31] ? clear_bhb_loop+0x50/0xa0 [ 573.784974][ T31] ? clear_bhb_loop+0x50/0xa0 [ 573.789649][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 573.795583][ T31] RIP: 0033:0x7f9aaede8583 [ 573.800004][ T31] RSP: 002b:00007fffb12c1f98 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 573.808400][ T31] RAX: ffffffffffffffda RBX: 00007f9aafb6b620 RCX: 00007f9aaede8583 [ 573.816405][ T31] RDX: 0000000000000028 RSI: 00007f9aafb6b670 RDI: 0000000000000003 [ 573.824388][ T31] RBP: 0000000000000001 R08: 00007fffb12c1fb4 R09: 000000000000000c [ 574.780414][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 574.788416][ T31] R13: 0000000000000000 R14: 00007f9aafb6b670 R15: 0000000000000000 [ 574.796438][ T31] [ 574.799454][ T31] NMI backtrace for cpu 0 [ 574.803751][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 574.810914][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.820940][ T31] Call Trace: [ 574.824191][ T31] [ 574.827099][ T31] __dump_stack+0x21/0x30 [ 574.831404][ T31] dump_stack_lvl+0xee/0x150 [ 574.836090][ T31] ? show_regs_print_info+0x20/0x20 [ 574.841273][ T31] dump_stack+0x15/0x20 [ 574.845411][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 574.850328][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 574.855852][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 574.861978][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 574.866889][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 574.872927][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 574.878967][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 574.884921][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 574.890785][ T31] watchdog+0xd64/0xea0 [ 574.894915][ T31] ? hungtask_pm_notify+0x50/0x50 [ 574.899908][ T31] ? __kasan_check_read+0x11/0x20 [ 574.904904][ T31] ? __kthread_parkme+0xac/0x200 [ 574.909814][ T31] ? preempt_count_add+0x90/0x1b0 [ 574.914809][ T31] kthread+0x411/0x500 [ 574.918850][ T31] ? hungtask_pm_notify+0x50/0x50 [ 574.923845][ T31] ? kthread_blkcg+0xd0/0xd0 [ 574.928403][ T31] ret_from_fork+0x1f/0x30 [ 574.932792][ T31] [ 574.935902][ T31] Sending NMI from CPU 0 to CPUs 1: [ 574.941117][ C1] NMI backtrace for cpu 1 [ 574.941126][ C1] CPU: 1 PID: 388 Comm: syz.3.18 Not tainted syzkaller #0 [ 574.941140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.941149][ C1] RIP: 0010:__kasan_check_read+0x1/0x20 [ 574.941168][ C1] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 79 af e4 85 eb 0a 48 c7 c7 89 4b db 85 48 89 de e8 17 ce f8 02 45 31 ff eb d1 00 00 55 <48> 89 e5 89 f6 48 8b 4d 08 31 d2 e8 bf ed ff ff 5d c3 66 2e 0f 1f [ 574.941180][ C1] RSP: 0018:ffffc90000cd6ef0 EFLAGS: 00000293 [ 574.941193][ C1] RAX: ffffffff8191b8fd RBX: ffffea00047c2ec8 RCX: ffff8881127a0000 [ 574.941205][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0004a26dc0 [ 574.941214][ C1] RBP: ffffc90000cd6fb0 R08: dffffc0000000000 R09: ffffed102199b661 [ 574.941225][ C1] R10: ffffed102199b661 R11: 1ffff1102199b660 R12: ffff88810ccdb2b0 [ 574.941235][ C1] R13: dffffc0000000000 R14: ffffea0004a26dc8 R15: ffffea0004a26dc0 [ 574.941246][ C1] FS: 0000555561e13500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 574.941259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.941269][ C1] CR2: 00007f91a35a1000 CR3: 000000011e616000 CR4: 00000000003506a0 [ 574.941282][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.941290][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.941299][ C1] Call Trace: [ 574.941303][ C1] [ 574.941308][ C1] ? mark_page_accessed+0x10f/0x8d0 [ 574.941323][ C1] ? __activate_page+0xd40/0xd40 [ 574.941336][ C1] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 574.941353][ C1] __find_get_block+0xafd/0xee0 [ 574.941370][ C1] ? write_boundary_block+0x140/0x140 [ 574.941387][ C1] __getblk_gfp+0x30/0x7d0 [ 574.941401][ C1] ? ext4_journal_check_start+0x172/0x240 [ 574.941416][ C1] ? __ext4_journal_stop+0x36/0x1a0 [ 574.941430][ C1] ? var_wake_function+0xf0/0xf0 [ 574.941445][ C1] __ext4_sb_bread_gfp+0x76/0x210 [ 574.941463][ C1] ext4_sb_bread+0x28/0x30 [ 574.941478][ C1] ext4_xattr_block_set+0xc4a/0x2cb0 [ 574.941497][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 574.941512][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 574.941528][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 574.941545][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 574.941562][ C1] ? selinux_inode_free_security+0x210/0x210 [ 574.941580][ C1] ext4_initxattrs+0xa6/0x110 [ 574.941592][ C1] security_inode_init_security+0x254/0x370 [ 574.941608][ C1] ? posix_acl_create+0x118/0x440 [ 574.941622][ C1] ? ext4_init_security+0x40/0x40 [ 574.941635][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 574.941650][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 574.941666][ C1] ? __ext4_set_acl+0x600/0x600 [ 574.941678][ C1] ? prandom_u32+0x24d/0x290 [ 574.941691][ C1] ext4_init_security+0x34/0x40 [ 574.941704][ C1] __ext4_new_inode+0x2c41/0x3690 [ 574.941719][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 574.941733][ C1] ? dquot_initialize+0x20/0x20 [ 574.941747][ C1] ? ext4_lookup+0x427/0x840 [ 574.941760][ C1] ? ext4_add_entry+0xf40/0xf40 [ 574.941772][ C1] ? may_create+0x377/0x460 [ 574.941784][ C1] ext4_create+0x22a/0x460 [ 574.941798][ C1] ? ext4_lookup+0x840/0x840 [ 574.941810][ C1] ? selinux_inode_create+0x22/0x30 [ 574.941824][ C1] ? security_inode_create+0xbd/0x110 [ 574.941838][ C1] ? ext4_lookup+0x840/0x840 [ 574.941850][ C1] path_openat+0x11ae/0x2f10 [ 574.941868][ C1] ? do_filp_open+0x3e0/0x3e0 [ 574.941882][ C1] ? expand_files+0xde/0x8e0 [ 574.941894][ C1] do_filp_open+0x1b3/0x3e0 [ 574.941907][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 574.941924][ C1] do_sys_openat2+0x14c/0x7b0 [ 574.941941][ C1] ? __se_sys_futex+0x139/0x310 [ 574.941957][ C1] ? do_sys_open+0xe0/0xe0 [ 574.941971][ C1] ? __x64_sys_futex+0x100/0x100 [ 574.941986][ C1] __x64_sys_creat+0x8e/0xb0 [ 574.942002][ C1] x64_sys_call+0x94a/0x9a0 [ 574.942021][ C1] do_syscall_64+0x4c/0xa0 [ 574.942035][ C1] ? clear_bhb_loop+0x50/0xa0 [ 574.942047][ C1] ? clear_bhb_loop+0x50/0xa0 [ 574.942059][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 574.942075][ C1] RIP: 0033:0x7f92c9e49749 [ 574.942087][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.942098][ C1] RSP: 002b:00007ffdaea02158 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 574.942111][ C1] RAX: ffffffffffffffda RBX: 00007f92ca09ffa0 RCX: 00007f92c9e49749 [ 574.942122][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 574.942131][ C1] RBP: 00007f92c9ecdf91 R08: 0000000000000000 R09: 0000000000000000 [ 574.942139][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.942148][ C1] R13: 00007f92ca09ffa0 R14: 00007f92ca09ffa0 R15: 0000000000000002 [ 574.942159][ C1]