Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. 2025/12/18 12:39:22 parsed 1 programs [ 282.942669][ T30] audit: type=1400 audit(1766061562.956:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 282.963421][ T30] audit: type=1400 audit(1766061562.956:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.594507][ T30] audit: type=1400 audit(1766061563.606:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 283.596007][ T289] cgroup: Unknown subsys name 'net' [ 283.617185][ T30] audit: type=1400 audit(1766061563.606:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 283.644628][ T30] audit: type=1400 audit(1766061563.636:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 283.644831][ T289] cgroup: Unknown subsys name 'devices' [ 283.812906][ T289] cgroup: Unknown subsys name 'hugetlb' [ 283.818536][ T289] cgroup: Unknown subsys name 'rlimit' [ 283.960436][ T30] audit: type=1400 audit(1766061563.966:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.983623][ T30] audit: type=1400 audit(1766061563.976:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.004337][ T30] audit: type=1400 audit(1766061563.976:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.010129][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 284.024988][ T30] audit: type=1400 audit(1766061563.976:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 284.053936][ T30] audit: type=1400 audit(1766061563.976:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 284.082444][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 284.502549][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 284.909678][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.916790][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.924304][ T324] device bridge_slave_0 entered promiscuous mode [ 284.931750][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.938786][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.946282][ T324] device bridge_slave_1 entered promiscuous mode [ 285.001957][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.008982][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.016278][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.023317][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.044680][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.052128][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.059555][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.067212][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.077274][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.085607][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.092647][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.101532][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.109744][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.116795][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.128542][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.137802][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.150291][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.161704][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.169754][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.177389][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.185770][ T324] device veth0_vlan entered promiscuous mode [ 285.195384][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.204582][ T324] device veth1_macvtap entered promiscuous mode [ 285.213998][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.223999][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.255066][ T324] syz-executor (324) used greatest stack depth: 20736 bytes left 2025/12/18 12:39:25 executed programs: 0 [ 285.754446][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.761509][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.768780][ T361] device bridge_slave_0 entered promiscuous mode [ 285.779209][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.786422][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.793825][ T361] device bridge_slave_1 entered promiscuous mode [ 285.850339][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.857481][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.864769][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.871807][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.889139][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.899790][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.907452][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.916984][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.925505][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.933752][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.940754][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.949390][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.957764][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.966097][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.973130][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.988511][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.996744][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.009575][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.017867][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.037322][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.045707][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.056396][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.064386][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.073468][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.081193][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.088916][ T361] device veth0_vlan entered promiscuous mode [ 286.109037][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.117277][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.126644][ T361] device veth1_macvtap entered promiscuous mode [ 286.139383][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.147141][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.155676][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.165112][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.173478][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.205566][ T371] loop2: detected capacity change from 0 to 1024 [ 286.212937][ T371] ======================================================= [ 286.212937][ T371] WARNING: The mand mount option has been deprecated and [ 286.212937][ T371] and is ignored by this kernel. Remove the mand [ 286.212937][ T371] option from the mount to silence this warning. [ 286.212937][ T371] ======================================================= [ 286.250334][ T371] EXT4-fs (loop2): Ignoring removed oldalloc option [ 286.257149][ T371] EXT4-fs (loop2): Ignoring removed orlov option [ 286.273403][ T371] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 286.632348][ T45] device bridge_slave_1 left promiscuous mode [ 286.638610][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.646595][ T45] device bridge_slave_0 left promiscuous mode [ 286.652905][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.661414][ T45] device veth1_macvtap left promiscuous mode [ 286.667439][ T45] device veth0_vlan left promiscuous mode [ 287.500947][ C0] sched: RT throttling activated [ 301.429493][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.437075][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.444983][ T378] device bridge_slave_0 entered promiscuous mode [ 301.452126][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.459153][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.466816][ T378] device bridge_slave_1 entered promiscuous mode [ 301.526858][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.533924][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.541216][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.548406][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.572674][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.580317][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.588803][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.597186][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.611613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.619986][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.627040][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.635507][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.644033][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.651084][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.666316][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.674735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.694855][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.708186][ T378] device veth0_vlan entered promiscuous mode [ 301.714782][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.723505][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.731827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.745957][ T378] device veth1_macvtap entered promiscuous mode [ 301.753355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.769484][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2025/12/18 12:39:41 executed programs: 4 [ 301.786307][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.823632][ T389] loop3: detected capacity change from 0 to 1024 [ 301.906672][ T389] EXT4-fs (loop3): Ignoring removed oldalloc option [ 301.919191][ T389] EXT4-fs (loop3): Ignoring removed orlov option [ 301.942645][ T389] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 401.980963][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 401.988170][ C0] (detected by 0, t=10002 jiffies, g=1597, q=756) [ 401.994674][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10001 (4294977416-4294967415), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 402.008031][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g1597 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 402.019227][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 402.029186][ C0] rcu: RCU grace-period kthread stack dump: [ 402.035059][ C0] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 402.045893][ C0] Call Trace: [ 402.049166][ C0] [ 402.052090][ C0] __schedule+0xb6e/0x14c0 [ 402.056564][ C0] ? release_firmware_map_entry+0x190/0x190 [ 402.062466][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 402.068277][ C0] ? __mod_timer+0x7ae/0xb30 [ 402.072865][ C0] schedule+0x11e/0x1e0 [ 402.077010][ C0] schedule_timeout+0x12c/0x2e0 [ 402.081854][ C0] ? console_conditional_schedule+0x30/0x30 [ 402.087739][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 402.093202][ C0] ? update_process_times+0x200/0x200 [ 402.098566][ C0] ? prepare_to_swait_event+0x308/0x320 [ 402.104104][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 402.108865][ C0] ? rcu_cleanup_dead_rnp+0x180/0x180 [ 402.114232][ C0] ? debug_smp_processor_id+0x17/0x20 [ 402.119596][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 402.124697][ C0] ? rcu_gp_init+0xc00/0xc00 [ 402.129278][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 402.134469][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 402.139056][ C0] rcu_gp_kthread+0x98/0x330 [ 402.143641][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 402.148312][ C0] ? __kasan_check_read+0x11/0x20 [ 402.153329][ C0] ? __kthread_parkme+0xac/0x200 [ 402.158256][ C0] ? preempt_count_add+0x90/0x1b0 [ 402.163268][ C0] kthread+0x411/0x500 [ 402.167336][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 402.172089][ C0] ? kthread_blkcg+0xd0/0xd0 [ 402.176667][ C0] ret_from_fork+0x1f/0x30 [ 402.181095][ C0] [ 402.184102][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 402.190413][ C0] Sending NMI from CPU 0 to CPUs 1: [ 402.195614][ C1] NMI backtrace for cpu 1 [ 402.195683][ C1] CPU: 1 PID: 393 Comm: syz.3.19 Not tainted syzkaller #0 [ 402.195697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.195712][ C1] RIP: 0010:ext4_reserve_inode_write+0x8/0x320 [ 402.195731][ C1] Code: 80 e1 07 80 c1 03 38 c1 0f 8c 46 f0 ff ff 4c 89 f7 e8 5c 72 ce ff e9 39 f0 ff ff 0f 1f 80 00 00 00 00 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 ec 28 48 89 55 c0 49 89 f4 48 89 7d b0 65 48 [ 402.195742][ C1] RSP: 0018:ffffc90002da6b48 EFLAGS: 00000202 [ 402.195755][ C1] RAX: ffffc90002da6ba0 RBX: ffff888112cd4000 RCX: 0000000000000000 [ 402.195765][ C1] RDX: ffffc90002da6ba0 RSI: ffff888111df8730 RDI: 0000000000000002 [ 402.195775][ C1] RBP: ffffc90002da6b58 R08: dffffc0000000000 R09: ffffc90002da6ba0 [ 402.195785][ C1] R10: fffff520005b4d77 R11: 1ffff920005b4d74 R12: ffff888111df8758 [ 402.195795][ C1] R13: ffffc90002da6ba0 R14: 1ffff110223bf0eb R15: ffff888111df8730 [ 402.195806][ C1] FS: 000055557c23f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 402.195818][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.195827][ C1] CR2: 00007ffcc3f52068 CR3: 000000012e7d4000 CR4: 00000000003506a0 [ 402.195840][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 402.195848][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 402.195857][ C1] Call Trace: [ 402.195861][ C1] [ 402.195867][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 402.195881][ C1] ? ext4_journal_check_start+0x172/0x240 [ 402.195898][ C1] ext4_dirty_inode+0xbd/0x100 [ 402.195910][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 402.195925][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 402.195941][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 402.195960][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 402.195975][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 402.195990][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 402.196007][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 402.196023][ C1] ? selinux_inode_free_security+0x210/0x210 [ 402.196039][ C1] ext4_initxattrs+0xa6/0x110 [ 402.196051][ C1] security_inode_init_security+0x254/0x370 [ 402.196066][ C1] ? posix_acl_create+0x118/0x440 [ 402.196079][ C1] ? ext4_init_security+0x40/0x40 [ 402.196091][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 402.196106][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 402.196120][ C1] ? __ext4_set_acl+0x600/0x600 [ 402.196133][ C1] ? prandom_u32+0x24d/0x290 [ 402.196145][ C1] ext4_init_security+0x34/0x40 [ 402.196157][ C1] __ext4_new_inode+0x2c41/0x3690 [ 402.196172][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 402.196184][ C1] ? dquot_initialize+0x20/0x20 [ 402.196198][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 402.196217][ C1] ? may_create+0x377/0x460 [ 402.196229][ C1] ext4_create+0x22a/0x460 [ 402.196243][ C1] ? ext4_lookup+0x840/0x840 [ 402.196255][ C1] ? selinux_inode_create+0x22/0x30 [ 402.196268][ C1] ? security_inode_create+0xbd/0x110 [ 402.196282][ C1] ? ext4_lookup+0x840/0x840 [ 402.196294][ C1] path_openat+0x11ae/0x2f10 [ 402.196311][ C1] ? do_filp_open+0x3e0/0x3e0 [ 402.196325][ C1] do_filp_open+0x1b3/0x3e0 [ 402.196338][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 402.196352][ C1] ? getname_kernel+0x59/0x2e0 [ 402.196364][ C1] ? memcpy+0x56/0x70 [ 402.196379][ C1] filp_open+0x173/0x1d0 [ 402.196394][ C1] ? file_open_name+0x1a0/0x1a0 [ 402.196409][ C1] ? getname_kernel+0x201/0x2e0 [ 402.196421][ C1] do_coredump+0x1d9d/0x2860 [ 402.196436][ C1] ? simple_acl_create+0x1c0/0x1c0 [ 402.196450][ C1] ? kmem_cache_free+0x100/0x320 [ 402.196464][ C1] ? ____kasan_slab_free+0x130/0x160 [ 402.196478][ C1] ? get_signal+0xb5e/0x1480 [ 402.196491][ C1] ? kmem_cache_free+0x100/0x320 [ 402.196506][ C1] get_signal+0x38d/0x1480 [ 402.196521][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 402.196535][ C1] ? bad_area+0x74/0x90 [ 402.196548][ C1] ? do_kern_addr_fault+0x80/0x80 [ 402.196563][ C1] ? get_sigframe_size+0x10/0x10 [ 402.196578][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 402.196592][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 402.196604][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 402.196617][ C1] irqentry_exit+0x12/0x40 [ 402.196628][ C1] exc_page_fault+0x5e/0xb0 [ 402.196640][ C1] asm_exc_page_fault+0x27/0x30 [ 402.196654][ C1] RIP: 0033:0x7f5986a0c751 [ 402.196668][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 402.196678][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 402.196689][ C1] RAX: 0000000000000000 RBX: 00007f5986c62fa0 RCX: 00007f5986a0c749 [ 402.196698][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 402.196706][ C1] RBP: 00007f5986a90f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.196714][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.196722][ C1] R13: 00007f5986c62fa0 R14: 00007f5986c62fa0 R15: 0000000000000006 [ 402.196732][ C1] [ 451.492953][ T31] INFO: task kworker/u4:3:322 blocked for more than 126 seconds. [ 451.500726][ T31] Not tainted syzkaller #0 [ 451.505882][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.514657][ T31] task:kworker/u4:3 state:D stack:24864 pid: 322 ppid: 2 flags:0x00004000 [ 451.523933][ T31] Workqueue: events_unbound linkwatch_event [ 451.529842][ T31] Call Trace: [ 451.533134][ T31] [ 451.536059][ T31] __schedule+0xb6e/0x14c0 [ 451.540457][ T31] ? release_firmware_map_entry+0x190/0x190 [ 452.491552][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 452.496784][ T31] ? __kasan_check_write+0x14/0x20 [ 452.501960][ T31] ? kthread_data+0x50/0xc0 [ 452.506476][ T31] ? wq_worker_sleeping+0x60/0x200 [ 452.511615][ T31] schedule+0x11e/0x1e0 [ 452.515764][ T31] schedule_preempt_disabled+0x13/0x20 [ 452.521245][ T31] __mutex_lock+0x7b6/0x11b0 [ 452.525825][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 452.531466][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 452.538217][ T31] ? __kasan_check_write+0x14/0x20 [ 453.491804][ T31] ? __switch_to+0x51d/0xe20 [ 453.496531][ T31] __mutex_lock_slowpath+0xe/0x10 [ 453.501584][ T31] mutex_lock+0x100/0x1a0 [ 453.505907][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 453.512512][ T31] ? __schedule+0xb76/0x14c0 [ 453.517099][ T31] rtnl_lock+0x15/0x20 [ 453.521260][ T31] linkwatch_event+0xe/0x60 [ 453.525773][ T31] process_one_work+0x6be/0xba0 [ 453.530609][ T31] worker_thread+0xa59/0x1200 [ 453.535310][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 453.540763][ T31] ? __kthread_parkme+0xac/0x200 [ 454.501146][ T31] kthread+0x411/0x500 [ 454.505252][ T31] ? worker_clr_flags+0x190/0x190 [ 454.510274][ T31] ? kthread_blkcg+0xd0/0xd0 [ 454.514922][ T31] ret_from_fork+0x1f/0x30 [ 454.519337][ T31] [ 454.522379][ T31] INFO: task syz-executor:395 blocked for more than 129 seconds. [ 454.530087][ T31] Not tainted syzkaller #0 [ 454.535031][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.491437][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 455.500748][ T31] Call Trace: [ 455.504098][ T31] [ 455.507165][ T31] __schedule+0xb6e/0x14c0 [ 455.511613][ T31] ? release_firmware_map_entry+0x190/0x190 [ 455.517543][ T31] ? wake_up_process+0x10/0x20 [ 455.522330][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 455.528142][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 455.533620][ T31] schedule+0x11e/0x1e0 [ 455.537769][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 456.491363][ T31] ? synchronize_rcu+0x110/0x110 [ 456.496391][ T31] ? __kasan_slab_free+0x11/0x20 [ 456.501397][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 456.506969][ T31] ? rcu_exp_handler+0x370/0x370 [ 456.511980][ T31] ? kfree+0xc4/0x270 [ 456.515958][ T31] ? kfree_const+0x39/0x40 [ 456.520378][ T31] ? __kasan_check_write+0x14/0x20 [ 456.525536][ T31] ? kobject_put+0x1a8/0x270 [ 456.530138][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 456.536290][ T31] ? kobject_put+0x214/0x270 [ 456.540899][ T31] ? io_schedule+0xe0/0xe0 [ 457.501527][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 457.507760][ T31] ? __kasan_check_read+0x11/0x20 [ 457.512899][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 457.518809][ T31] ? linkwatch_fire_event+0x307/0x380 [ 457.524246][ T31] veth_newlink+0x9bc/0xda0 [ 457.528838][ T31] ? veth_validate+0x200/0x200 [ 457.533650][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 457.538682][ T31] ? veth_validate+0x200/0x200 [ 458.491024][ T31] rtnl_newlink+0x112d/0x17b0 [ 458.495764][ T31] ? rtnl_setlink+0x400/0x400 [ 458.500452][ T31] ? memcpy+0x56/0x70 [ 458.504504][ T31] ? __kasan_check_write+0x14/0x20 [ 458.509612][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 458.516274][ T31] ? ns_capable+0x8c/0xf0 [ 458.520594][ T31] ? netlink_net_capable+0x125/0x160 [ 458.525934][ T31] ? rtnl_setlink+0x400/0x400 [ 458.530621][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 458.535596][ T31] ? rtnetlink_bind+0x80/0x80 [ 458.540301][ T31] ? memcpy+0x56/0x70 [ 459.491141][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 459.496555][ T31] ? arch_stack_walk+0xee/0x140 [ 459.501479][ T31] ? avc_denied+0x1b0/0x1b0 [ 459.506020][ T31] ? stack_trace_save+0x98/0xe0 [ 459.510913][ T31] ? avc_has_perm+0x158/0x240 [ 459.515620][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 459.521013][ T31] ? do_syscall_64+0x4c/0xa0 [ 459.525781][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 459.531178][ T31] netlink_rcv_skb+0x1e0/0x430 [ 459.535962][ T31] ? rtnetlink_bind+0x80/0x80 [ 459.540627][ T31] ? netlink_ack+0xb60/0xb60 [ 460.491043][ T31] ? __netlink_lookup+0x387/0x3b0 [ 460.496114][ T31] rtnetlink_rcv+0x1c/0x20 [ 460.500617][ T31] netlink_unicast+0x876/0xa40 [ 460.505443][ T31] netlink_sendmsg+0x86a/0xb70 [ 460.510228][ T31] ? netlink_getsockopt+0x530/0x530 [ 460.515466][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 460.520988][ T31] __sys_sendto+0x423/0x580 [ 460.525489][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 460.530845][ T31] __x64_sys_sendto+0xe5/0x100 [ 460.535633][ T31] x64_sys_call+0x178/0x9a0 [ 460.540137][ T31] do_syscall_64+0x4c/0xa0 [ 461.492714][ T31] ? clear_bhb_loop+0x50/0xa0 [ 461.497424][ T31] ? clear_bhb_loop+0x50/0xa0 [ 461.502200][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 461.508180][ T31] RIP: 0033:0x7f4a8369a583 [ 461.512599][ T31] RSP: 002b:00007ffc6aadaea8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 461.521056][ T31] RAX: ffffffffffffffda RBX: 00007f4a8441d620 RCX: 00007f4a8369a583 [ 461.529025][ T31] RDX: 000000000000002c RSI: 00007f4a8441d670 RDI: 0000000000000003 [ 461.537128][ T31] RBP: 0000000000000001 R08: 00007ffc6aadaec4 R09: 000000000000000c [ 462.491212][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 462.499224][ T31] R13: 0000000000000000 R14: 00007f4a8441d670 R15: 0000000000000000 [ 462.507298][ T31] [ 462.510336][ T31] NMI backtrace for cpu 1 [ 462.514669][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 462.521843][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.531876][ T31] Call Trace: [ 462.535140][ T31] [ 462.538052][ T31] __dump_stack+0x21/0x30 [ 462.542374][ T31] dump_stack_lvl+0xee/0x150 [ 462.546968][ T31] ? show_regs_print_info+0x20/0x20 [ 462.552167][ T31] dump_stack+0x15/0x20 [ 462.556316][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 462.561247][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 462.566794][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 462.572946][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 462.577878][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 462.583937][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 462.589998][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 462.595993][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 462.601892][ T31] watchdog+0xd64/0xea0 [ 462.606041][ T31] ? hungtask_pm_notify+0x50/0x50 [ 462.611057][ T31] ? __kasan_check_read+0x11/0x20 [ 462.616073][ T31] ? __kthread_parkme+0xac/0x200 [ 462.621019][ T31] ? preempt_count_add+0x90/0x1b0 [ 462.626064][ T31] kthread+0x411/0x500 [ 462.630132][ T31] ? hungtask_pm_notify+0x50/0x50 [ 462.635156][ T31] ? kthread_blkcg+0xd0/0xd0 [ 462.639741][ T31] ret_from_fork+0x1f/0x30 [ 462.644149][ T31] [ 462.647310][ T31] Sending NMI from CPU 1 to CPUs 0: [ 462.652529][ C0] NMI backtrace for cpu 0 [ 462.652539][ C0] CPU: 0 PID: 375 Comm: syz.2.17 Not tainted syzkaller #0 [ 462.652553][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.652560][ C0] RIP: 0010:ext4_mark_iloc_dirty+0x3028/0x3f50 [ 462.652580][ C0] Code: 81 ce ff 49 8b 1c 24 48 8d 7b 60 be 04 00 00 00 e8 0d 83 ce ff f0 ff 4b 60 8b 45 c4 48 81 c4 e0 00 00 00 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 e8 3f fe 8f ff c7 45 c4 00 00 00 00 eb 91 e8 31 fe 8f [ 462.652591][ C0] RSP: 0018:ffffc90002cb6b50 EFLAGS: 00000286 [ 462.652604][ C0] RAX: 0000000000000000 RBX: 0000000000000080 RCX: ffffffff81d8c0f3 [ 462.652614][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888109b6e108 [ 462.652622][ C0] RBP: ffffc90002cb6b58 R08: dffffc0000000000 R09: ffffed102136dc22 [ 462.652633][ C0] R10: ffffed102136dc22 R11: 1ffff1102136dc21 R12: ffff88812120b618 [ 462.652643][ C0] R13: 0000000000000080 R14: 1ffff110242416c3 R15: ffff88812120b618 [ 462.652652][ C0] FS: 0000555592c4e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 462.652665][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.652674][ C0] CR2: 00007fc5e612b000 CR3: 000000012b978000 CR4: 00000000003506b0 [ 462.652687][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 462.652695][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 462.652703][ C0] Call Trace: [ 462.652707][ C0] [ 462.652712][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 462.652726][ C0] ? ext4_journal_check_start+0x172/0x240 [ 462.652743][ C0] ext4_dirty_inode+0xbd/0x100 [ 462.652756][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 462.652770][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 462.652786][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 462.652805][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 462.652820][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 462.652835][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 462.652851][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 462.652867][ C0] ? selinux_inode_free_security+0x210/0x210 [ 462.652884][ C0] ext4_initxattrs+0xa6/0x110 [ 462.652896][ C0] security_inode_init_security+0x254/0x370 [ 462.652912][ C0] ? posix_acl_create+0x118/0x440 [ 462.652925][ C0] ? ext4_init_security+0x40/0x40 [ 462.652938][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 462.652953][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 462.652967][ C0] ? __ext4_set_acl+0x600/0x600 [ 462.652979][ C0] ? prandom_u32+0x24d/0x290 [ 462.652992][ C0] ext4_init_security+0x34/0x40 [ 462.653004][ C0] __ext4_new_inode+0x2c41/0x3690 [ 462.653019][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 462.653031][ C0] ? dquot_initialize+0x20/0x20 [ 462.653045][ C0] ? selinux_determine_inode_label+0x290/0x3e0 [ 462.653059][ C0] ? may_create+0x377/0x460 [ 462.653071][ C0] ext4_create+0x22a/0x460 [ 462.653085][ C0] ? ext4_lookup+0x840/0x840 [ 462.653097][ C0] ? selinux_inode_create+0x22/0x30 [ 462.653110][ C0] ? security_inode_create+0xbd/0x110 [ 462.653124][ C0] ? ext4_lookup+0x840/0x840 [ 462.653136][ C0] path_openat+0x11ae/0x2f10 [ 462.653153][ C0] ? do_filp_open+0x3e0/0x3e0 [ 462.653167][ C0] do_filp_open+0x1b3/0x3e0 [ 462.653180][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 462.653195][ C0] ? getname_kernel+0x59/0x2e0 [ 462.653207][ C0] ? memcpy+0x56/0x70 [ 462.653220][ C0] filp_open+0x173/0x1d0 [ 462.653236][ C0] ? file_open_name+0x1a0/0x1a0 [ 462.653251][ C0] ? getname_kernel+0x201/0x2e0 [ 462.653263][ C0] do_coredump+0x1d9d/0x2860 [ 462.653278][ C0] ? simple_acl_create+0x1c0/0x1c0 [ 462.653292][ C0] ? kmem_cache_free+0x100/0x320 [ 462.653306][ C0] ? ____kasan_slab_free+0x130/0x160 [ 462.653320][ C0] ? get_signal+0xb5e/0x1480 [ 462.653334][ C0] ? kmem_cache_free+0x100/0x320 [ 462.653349][ C0] get_signal+0x38d/0x1480 [ 462.653364][ C0] arch_do_signal_or_restart+0xc1/0x10f0 [ 462.653378][ C0] ? bad_area+0x74/0x90 [ 462.653392][ C0] ? do_kern_addr_fault+0x80/0x80 [ 462.653408][ C0] ? get_sigframe_size+0x10/0x10 [ 462.653435][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 462.653448][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 462.653461][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 462.653474][ C0] irqentry_exit+0x12/0x40 [ 462.653485][ C0] exc_page_fault+0x5e/0xb0 [ 462.653497][ C0] asm_exc_page_fault+0x27/0x30 [ 462.653512][ C0] RIP: 0033:0x7f321297d751 [ 462.653524][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 462.653534][ C0] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 462.653544][ C0] RAX: 0000000000000000 RBX: 00007f3212bd3fa0 RCX: 00007f321297d749 [ 462.653553][ C0] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 462.653561][ C0] RBP: 00007f3212a01f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.653570][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.653577][ C0] R13: 00007f3212bd3fa0 R14: 00007f3212bd3fa0 R15: 0000000000000006 [ 462.653588][ C0] [ 485.491349][ T31] INFO: task kworker/u4:3:322 blocked for more than 160 seconds. [ 485.499121][ T31] Not tainted syzkaller #0 [ 485.504116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.512817][ T31] task:kworker/u4:3 state:D stack:24864 pid: 322 ppid: 2 flags:0x00004000 [ 485.522052][ T31] Workqueue: events_unbound linkwatch_event [ 485.527943][ T31] Call Trace: [ 485.531229][ T31] [ 485.534148][ T31] __schedule+0xb6e/0x14c0 [ 485.538543][ T31] ? release_firmware_map_entry+0x190/0x190 [ 486.491039][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 486.496281][ T31] ? __kasan_check_write+0x14/0x20 [ 486.501568][ T31] ? kthread_data+0x50/0xc0 [ 486.506201][ T31] ? wq_worker_sleeping+0x60/0x200 [ 486.511356][ T31] schedule+0x11e/0x1e0 [ 486.515504][ T31] schedule_preempt_disabled+0x13/0x20 [ 486.520942][ T31] __mutex_lock+0x7b6/0x11b0 [ 486.525559][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 486.531209][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 486.537996][ T31] ? __kasan_check_write+0x14/0x20 [ 487.491446][ T31] ? __switch_to+0x51d/0xe20 [ 487.496079][ T31] __mutex_lock_slowpath+0xe/0x10 [ 487.501123][ T31] mutex_lock+0x100/0x1a0 [ 487.505484][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 487.512109][ T31] ? __schedule+0xb76/0x14c0 [ 487.516697][ T31] rtnl_lock+0x15/0x20 [ 487.520749][ T31] linkwatch_event+0xe/0x60 [ 487.525258][ T31] process_one_work+0x6be/0xba0 [ 487.530100][ T31] worker_thread+0xa59/0x1200 [ 487.534791][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 487.540328][ T31] ? __kthread_parkme+0xac/0x200 [ 488.491109][ T31] kthread+0x411/0x500 [ 488.495223][ T31] ? worker_clr_flags+0x190/0x190 [ 488.500256][ T31] ? kthread_blkcg+0xd0/0xd0 [ 488.504894][ T31] ret_from_fork+0x1f/0x30 [ 488.509326][ T31] [ 488.512460][ T31] INFO: task syz-executor:395 blocked for more than 163 seconds. [ 488.520273][ T31] Not tainted syzkaller #0 [ 488.525256][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.533928][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 489.501362][ T31] Call Trace: [ 489.504872][ T31] [ 489.507841][ T31] __schedule+0xb6e/0x14c0 [ 489.512294][ T31] ? release_firmware_map_entry+0x190/0x190 [ 489.518193][ T31] ? wake_up_process+0x10/0x20 [ 489.522978][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 489.528784][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 489.534269][ T31] schedule+0x11e/0x1e0 [ 489.538414][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 490.491158][ T31] ? synchronize_rcu+0x110/0x110 [ 490.496125][ T31] ? __kasan_slab_free+0x11/0x20 [ 490.501081][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 490.506682][ T31] ? rcu_exp_handler+0x370/0x370 [ 490.511685][ T31] ? kfree+0xc4/0x270 [ 490.515664][ T31] ? kfree_const+0x39/0x40 [ 490.520057][ T31] ? __kasan_check_write+0x14/0x20 [ 490.525182][ T31] ? kobject_put+0x1a8/0x270 [ 490.529774][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 490.535928][ T31] ? kobject_put+0x214/0x270 [ 490.540514][ T31] ? io_schedule+0xe0/0xe0 [ 491.491176][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 491.497288][ T31] ? __kasan_check_read+0x11/0x20 [ 491.502393][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 491.508293][ T31] ? linkwatch_fire_event+0x307/0x380 [ 491.513713][ T31] veth_newlink+0x9bc/0xda0 [ 491.518306][ T31] ? veth_validate+0x200/0x200 [ 491.523086][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 491.528107][ T31] ? veth_validate+0x200/0x200 [ 491.532899][ T31] rtnl_newlink+0x112d/0x17b0 [ 491.537590][ T31] ? rtnl_setlink+0x400/0x400 [ 492.491173][ T31] ? memcpy+0x56/0x70 [ 492.495194][ T31] ? __kasan_check_write+0x14/0x20 [ 492.500294][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 492.506895][ T31] ? ns_capable+0x8c/0xf0 [ 492.511269][ T31] ? netlink_net_capable+0x125/0x160 [ 492.516562][ T31] ? rtnl_setlink+0x400/0x400 [ 492.521267][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 492.526199][ T31] ? rtnetlink_bind+0x80/0x80 [ 492.530857][ T31] ? memcpy+0x56/0x70 [ 492.535459][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 492.540823][ T31] ? arch_stack_walk+0xee/0x140 [ 493.501444][ T31] ? avc_denied+0x1b0/0x1b0 [ 493.506037][ T31] ? stack_trace_save+0x98/0xe0 [ 493.510891][ T31] ? avc_has_perm+0x158/0x240 [ 493.515615][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 493.521031][ T31] ? do_syscall_64+0x4c/0xa0 [ 493.525628][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 493.531004][ T31] netlink_rcv_skb+0x1e0/0x430 [ 493.535769][ T31] ? rtnetlink_bind+0x80/0x80 [ 493.540425][ T31] ? netlink_ack+0xb60/0xb60 [ 494.491336][ T31] ? __netlink_lookup+0x387/0x3b0 [ 494.496394][ T31] rtnetlink_rcv+0x1c/0x20 [ 494.500809][ T31] netlink_unicast+0x876/0xa40 [ 494.505674][ T31] netlink_sendmsg+0x86a/0xb70 [ 494.510467][ T31] ? netlink_getsockopt+0x530/0x530 [ 494.515706][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 494.521179][ T31] __sys_sendto+0x423/0x580 [ 494.525677][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 494.531086][ T31] __x64_sys_sendto+0xe5/0x100 [ 494.535848][ T31] x64_sys_call+0x178/0x9a0 [ 494.540333][ T31] do_syscall_64+0x4c/0xa0 [ 495.492415][ T31] ? clear_bhb_loop+0x50/0xa0 [ 495.497136][ T31] ? clear_bhb_loop+0x50/0xa0 [ 495.501846][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.507753][ T31] RIP: 0033:0x7f4a8369a583 [ 495.512313][ T31] RSP: 002b:00007ffc6aadaea8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 495.520742][ T31] RAX: ffffffffffffffda RBX: 00007f4a8441d620 RCX: 00007f4a8369a583 [ 495.528748][ T31] RDX: 000000000000002c RSI: 00007f4a8441d670 RDI: 0000000000000003 [ 495.536752][ T31] RBP: 0000000000000001 R08: 00007ffc6aadaec4 R09: 000000000000000c [ 496.491163][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 496.499180][ T31] R13: 0000000000000000 R14: 00007f4a8441d670 R15: 0000000000000000 [ 496.507186][ T31] [ 496.510204][ T31] NMI backtrace for cpu 0 [ 496.514506][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 496.521675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.531713][ T31] Call Trace: [ 496.534972][ T31] [ 496.537879][ T31] __dump_stack+0x21/0x30 [ 496.542190][ T31] dump_stack_lvl+0xee/0x150 [ 496.546757][ T31] ? show_regs_print_info+0x20/0x20 [ 496.551945][ T31] dump_stack+0x15/0x20 [ 496.556096][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 496.561016][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 496.566535][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 496.572664][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 496.577575][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 496.583705][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 496.589751][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 496.595709][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 496.601594][ T31] watchdog+0xd64/0xea0 [ 496.605746][ T31] ? hungtask_pm_notify+0x50/0x50 [ 496.610751][ T31] ? __kasan_check_read+0x11/0x20 [ 496.615751][ T31] ? __kthread_parkme+0xac/0x200 [ 496.620663][ T31] ? preempt_count_add+0x90/0x1b0 [ 496.625660][ T31] kthread+0x411/0x500 [ 496.629701][ T31] ? hungtask_pm_notify+0x50/0x50 [ 496.634716][ T31] ? kthread_blkcg+0xd0/0xd0 [ 496.639286][ T31] ret_from_fork+0x1f/0x30 [ 496.643686][ T31] [ 496.646802][ T31] Sending NMI from CPU 0 to CPUs 1: [ 496.652012][ C1] NMI backtrace for cpu 1 [ 496.652021][ C1] CPU: 1 PID: 393 Comm: syz.3.19 Not tainted syzkaller #0 [ 496.652035][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.652043][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 496.652065][ C1] Code: 70 aa 99 7e 65 8b 15 71 aa 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 5b 83 b9 5c 0b 00 00 00 74 52 8b 91 38 0b 00 00 <83> fa 03 75 47 48 8b 91 40 0b 00 00 44 8b 89 3c 0b 00 00 49 c1 e1 [ 496.652076][ C1] RSP: 0018:ffffc90002da6af8 EFLAGS: 00000246 [ 496.652088][ C1] RAX: ffffffff81d8d1b1 RBX: 1ffff110223bf0eb RCX: ffff888112f28000 [ 496.652099][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffb [ 496.652108][ C1] RBP: ffffc90002da6af8 R08: dffffc0000000000 R09: ffffed1021a2e151 [ 496.652118][ C1] R10: ffffed1021a2e151 R11: 1ffff11021a2e150 R12: ffff888111df8730 [ 496.652129][ C1] R13: 00000000fffffffb R14: ffff888111df8628 R15: 0000000000000000 [ 496.652138][ C1] FS: 000055557c23f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 496.652150][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.652159][ C1] CR2: 00007fc5e54de018 CR3: 000000012e7d4000 CR4: 00000000003506a0 [ 496.652172][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 496.652180][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 496.652188][ C1] Call Trace: [ 496.652192][ C1] [ 496.652197][ C1] ext4_reserve_inode_write+0x181/0x320 [ 496.652215][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 496.652228][ C1] ? ext4_journal_check_start+0x172/0x240 [ 496.652244][ C1] ext4_dirty_inode+0xbd/0x100 [ 496.652257][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 496.652277][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 496.652294][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 496.652314][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 496.652328][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 496.652344][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 496.652360][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 496.652376][ C1] ? selinux_inode_free_security+0x210/0x210 [ 496.652393][ C1] ext4_initxattrs+0xa6/0x110 [ 496.652406][ C1] security_inode_init_security+0x254/0x370 [ 496.652421][ C1] ? posix_acl_create+0x118/0x440 [ 496.652434][ C1] ? ext4_init_security+0x40/0x40 [ 496.652447][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 496.652462][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 496.652476][ C1] ? __ext4_set_acl+0x600/0x600 [ 496.652488][ C1] ? prandom_u32+0x24d/0x290 [ 496.652501][ C1] ext4_init_security+0x34/0x40 [ 496.652513][ C1] __ext4_new_inode+0x2c41/0x3690 [ 496.652528][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 496.652541][ C1] ? dquot_initialize+0x20/0x20 [ 496.652554][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 496.652569][ C1] ? may_create+0x377/0x460 [ 496.652581][ C1] ext4_create+0x22a/0x460 [ 496.652595][ C1] ? ext4_lookup+0x840/0x840 [ 496.652606][ C1] ? selinux_inode_create+0x22/0x30 [ 496.652620][ C1] ? security_inode_create+0xbd/0x110 [ 496.652634][ C1] ? ext4_lookup+0x840/0x840 [ 496.652645][ C1] path_openat+0x11ae/0x2f10 [ 496.652662][ C1] ? do_filp_open+0x3e0/0x3e0 [ 496.652676][ C1] do_filp_open+0x1b3/0x3e0 [ 496.652689][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 496.652703][ C1] ? getname_kernel+0x59/0x2e0 [ 496.652716][ C1] ? memcpy+0x56/0x70 [ 496.652729][ C1] filp_open+0x173/0x1d0 [ 496.652744][ C1] ? file_open_name+0x1a0/0x1a0 [ 496.652759][ C1] ? getname_kernel+0x201/0x2e0 [ 496.652771][ C1] do_coredump+0x1d9d/0x2860 [ 496.652786][ C1] ? simple_acl_create+0x1c0/0x1c0 [ 496.652800][ C1] ? kmem_cache_free+0x100/0x320 [ 496.652813][ C1] ? ____kasan_slab_free+0x130/0x160 [ 496.652827][ C1] ? get_signal+0xb5e/0x1480 [ 496.652840][ C1] ? kmem_cache_free+0x100/0x320 [ 496.652855][ C1] get_signal+0x38d/0x1480 [ 496.652870][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 496.652884][ C1] ? bad_area+0x74/0x90 [ 496.652897][ C1] ? do_kern_addr_fault+0x80/0x80 [ 496.652912][ C1] ? get_sigframe_size+0x10/0x10 [ 496.652927][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 496.652940][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 496.652953][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 496.652966][ C1] irqentry_exit+0x12/0x40 [ 496.652977][ C1] exc_page_fault+0x5e/0xb0 [ 496.652988][ C1] asm_exc_page_fault+0x27/0x30 [ 496.653004][ C1] RIP: 0033:0x7f5986a0c751 [ 496.653017][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 496.653027][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 496.653037][ C1] RAX: 0000000000000000 RBX: 00007f5986c62fa0 RCX: 00007f5986a0c749 [ 496.653046][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 496.653054][ C1] RBP: 00007f5986a90f91 R08: 0000000000000000 R09: 0000000000000000 [ 496.653062][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 496.653070][ C1] R13: 00007f5986c62fa0 R14: 00007f5986c62fa0 R15: 0000000000000006 [ 496.653081][ C1] [ 519.491018][ T31] INFO: task kworker/u4:3:322 blocked for more than 194 seconds. [ 519.498861][ T31] Not tainted syzkaller #0 [ 519.504221][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.513013][ T31] task:kworker/u4:3 state:D stack:24864 pid: 322 ppid: 2 flags:0x00004000 [ 519.522264][ T31] Workqueue: events_unbound linkwatch_event [ 519.528151][ T31] Call Trace: [ 519.531444][ T31] [ 519.534364][ T31] __schedule+0xb6e/0x14c0 [ 519.538777][ T31] ? release_firmware_map_entry+0x190/0x190 [ 520.491048][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 520.496293][ T31] ? __kasan_check_write+0x14/0x20 [ 520.501450][ T31] ? kthread_data+0x50/0xc0 [ 520.506024][ T31] ? wq_worker_sleeping+0x60/0x200 [ 520.511180][ T31] schedule+0x11e/0x1e0 [ 520.515334][ T31] schedule_preempt_disabled+0x13/0x20 [ 520.520945][ T31] __mutex_lock+0x7b6/0x11b0 [ 520.525751][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 520.531404][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 520.538253][ T31] ? __kasan_check_write+0x14/0x20 [ 521.491156][ T31] ? __switch_to+0x51d/0xe20 [ 521.495850][ T31] __mutex_lock_slowpath+0xe/0x10 [ 521.500988][ T31] mutex_lock+0x100/0x1a0 [ 521.505336][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 521.511984][ T31] ? __schedule+0xb76/0x14c0 [ 521.516574][ T31] rtnl_lock+0x15/0x20 [ 521.520628][ T31] linkwatch_event+0xe/0x60 [ 521.525140][ T31] process_one_work+0x6be/0xba0 [ 521.530000][ T31] worker_thread+0xa59/0x1200 [ 521.534703][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 521.540166][ T31] ? __kthread_parkme+0xac/0x200 [ 522.501323][ T31] kthread+0x411/0x500 [ 522.505427][ T31] ? worker_clr_flags+0x190/0x190 [ 522.510457][ T31] ? kthread_blkcg+0xd0/0xd0 [ 522.515111][ T31] ret_from_fork+0x1f/0x30 [ 522.519524][ T31] [ 522.522585][ T31] INFO: task syz-executor:395 blocked for more than 197 seconds. [ 522.530570][ T31] Not tainted syzkaller #0 [ 522.535548][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.491078][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 523.500364][ T31] Call Trace: [ 523.503670][ T31] [ 523.506598][ T31] __schedule+0xb6e/0x14c0 [ 523.511219][ T31] ? release_firmware_map_entry+0x190/0x190 [ 523.517108][ T31] ? wake_up_process+0x10/0x20 [ 523.521884][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 523.527694][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 523.533165][ T31] schedule+0x11e/0x1e0 [ 523.537320][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 524.491187][ T31] ? synchronize_rcu+0x110/0x110 [ 524.496162][ T31] ? __kasan_slab_free+0x11/0x20 [ 524.501262][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 524.506811][ T31] ? rcu_exp_handler+0x370/0x370 [ 524.511808][ T31] ? kfree+0xc4/0x270 [ 524.515782][ T31] ? kfree_const+0x39/0x40 [ 524.520174][ T31] ? __kasan_check_write+0x14/0x20 [ 524.525293][ T31] ? kobject_put+0x1a8/0x270 [ 524.529870][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 524.535939][ T31] ? kobject_put+0x214/0x270 [ 524.540519][ T31] ? io_schedule+0xe0/0xe0 [ 525.491361][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 525.497472][ T31] ? __kasan_check_read+0x11/0x20 [ 525.502595][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 525.508545][ T31] ? linkwatch_fire_event+0x307/0x380 [ 525.513978][ T31] veth_newlink+0x9bc/0xda0 [ 525.518502][ T31] ? veth_validate+0x200/0x200 [ 525.523301][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 525.528319][ T31] ? veth_validate+0x200/0x200 [ 525.533096][ T31] rtnl_newlink+0x112d/0x17b0 [ 525.537779][ T31] ? rtnl_setlink+0x400/0x400 [ 526.501154][ T31] ? memcpy+0x56/0x70 [ 526.505191][ T31] ? __kasan_check_write+0x14/0x20 [ 526.510293][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 526.516905][ T31] ? ns_capable+0x8c/0xf0 [ 526.521264][ T31] ? netlink_net_capable+0x125/0x160 [ 526.526609][ T31] ? rtnl_setlink+0x400/0x400 [ 526.531334][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 526.536280][ T31] ? rtnetlink_bind+0x80/0x80 [ 527.491467][ T31] ? memcpy+0x56/0x70 [ 527.495569][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 527.501377][ T31] ? arch_stack_walk+0xee/0x140 [ 527.506322][ T31] ? avc_denied+0x1b0/0x1b0 [ 527.510840][ T31] ? stack_trace_save+0x98/0xe0 [ 527.515966][ T31] ? avc_has_perm+0x158/0x240 [ 527.520833][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 527.526442][ T31] ? do_syscall_64+0x4c/0xa0 [ 527.531233][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 527.536619][ T31] netlink_rcv_skb+0x1e0/0x430 [ 528.491073][ T31] ? rtnetlink_bind+0x80/0x80 [ 528.495787][ T31] ? netlink_ack+0xb60/0xb60 [ 528.500386][ T31] ? __netlink_lookup+0x387/0x3b0 [ 528.505499][ T31] rtnetlink_rcv+0x1c/0x20 [ 528.509916][ T31] netlink_unicast+0x876/0xa40 [ 528.514710][ T31] netlink_sendmsg+0x86a/0xb70 [ 528.519503][ T31] ? netlink_getsockopt+0x530/0x530 [ 528.524744][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 528.530218][ T31] __sys_sendto+0x423/0x580 [ 528.534777][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 528.540148][ T31] __x64_sys_sendto+0xe5/0x100 [ 529.501670][ T31] x64_sys_call+0x178/0x9a0 [ 529.506376][ T31] do_syscall_64+0x4c/0xa0 [ 529.510802][ T31] ? clear_bhb_loop+0x50/0xa0 [ 529.515514][ T31] ? clear_bhb_loop+0x50/0xa0 [ 529.520186][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.526090][ T31] RIP: 0033:0x7f4a8369a583 [ 529.530493][ T31] RSP: 002b:00007ffc6aadaea8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 529.538906][ T31] RAX: ffffffffffffffda RBX: 00007f4a8441d620 RCX: 00007f4a8369a583 [ 530.491204][ T31] RDX: 000000000000002c RSI: 00007f4a8441d670 RDI: 0000000000000003 [ 530.499212][ T31] RBP: 0000000000000001 R08: 00007ffc6aadaec4 R09: 000000000000000c [ 530.507275][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 530.515266][ T31] R13: 0000000000000000 R14: 00007f4a8441d670 R15: 0000000000000000 [ 530.523254][ T31] [ 530.526265][ T31] INFO: task syz-executor:399 blocked for more than 142 seconds. [ 530.533981][ T31] Not tainted syzkaller #0 [ 530.538899][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.491306][ T31] task:syz-executor state:D stack:28000 pid: 399 ppid: 1 flags:0x00004004 [ 531.500546][ T31] Call Trace: [ 531.504240][ T31] [ 531.507245][ T31] __schedule+0xb6e/0x14c0 [ 531.511776][ T31] ? release_firmware_map_entry+0x190/0x190 [ 531.517677][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 531.522842][ T31] ? __kasan_check_write+0x14/0x20 [ 531.527959][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 531.533712][ T31] schedule+0x11e/0x1e0 [ 531.537862][ T31] schedule_preempt_disabled+0x13/0x20 [ 532.491180][ T31] __mutex_lock+0x7b6/0x11b0 [ 532.495807][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 532.502788][ T31] ? selinux_capable+0x29c/0x380 [ 532.507732][ T31] ? selinux_capset+0xf0/0xf0 [ 532.512422][ T31] ? cap_capable+0x1aa/0x230 [ 532.517191][ T31] __mutex_lock_slowpath+0xe/0x10 [ 532.522244][ T31] mutex_lock+0x100/0x1a0 [ 532.526567][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 532.533158][ T31] ? ns_capable+0x8c/0xf0 [ 532.537478][ T31] ? netlink_net_capable+0x125/0x160 [ 533.491201][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 533.496237][ T31] ? rtnetlink_bind+0x80/0x80 [ 533.501006][ T31] ? memcpy+0x56/0x70 [ 533.505008][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 533.510397][ T31] ? arch_stack_walk+0xee/0x140 [ 533.515316][ T31] ? avc_denied+0x1b0/0x1b0 [ 533.519815][ T31] ? stack_trace_save+0x98/0xe0 [ 533.524702][ T31] ? avc_has_perm+0x158/0x240 [ 533.529390][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 533.534781][ T31] ? do_syscall_64+0x4c/0xa0 [ 533.539366][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 534.501136][ T31] netlink_rcv_skb+0x1e0/0x430 [ 534.505931][ T31] ? rtnetlink_bind+0x80/0x80 [ 534.510613][ T31] ? netlink_ack+0xb60/0xb60 [ 534.515207][ T31] ? __netlink_lookup+0x387/0x3b0 [ 534.520223][ T31] rtnetlink_rcv+0x1c/0x20 [ 534.524686][ T31] netlink_unicast+0x876/0xa40 [ 534.529458][ T31] netlink_sendmsg+0x86a/0xb70 [ 534.534370][ T31] ? netlink_getsockopt+0x530/0x530 [ 534.539577][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 535.491210][ T31] __sys_sendto+0x423/0x580 [ 535.495782][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 535.501269][ T31] __x64_sys_sendto+0xe5/0x100 [ 535.506045][ T31] x64_sys_call+0x178/0x9a0 [ 535.510536][ T31] do_syscall_64+0x4c/0xa0 [ 535.514975][ T31] ? clear_bhb_loop+0x50/0xa0 [ 535.519644][ T31] ? clear_bhb_loop+0x50/0xa0 [ 535.524366][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.530687][ T31] RIP: 0033:0x7f210b42c583 [ 535.535106][ T31] RSP: 002b:00007ffcc3f51e38 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 536.491010][ T31] RAX: ffffffffffffffda RBX: 00007f210c1af620 RCX: 00007f210b42c583 [ 536.499103][ T31] RDX: 0000000000000028 RSI: 00007f210c1af670 RDI: 0000000000000003 [ 536.507260][ T31] RBP: 0000000000000001 R08: 00007ffcc3f51e54 R09: 000000000000000c [ 536.515301][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 536.523308][ T31] R13: 0000000000000000 R14: 00007f210c1af670 R15: 0000000000000000 [ 536.531300][ T31] [ 536.534312][ T31] NMI backtrace for cpu 1 [ 536.538619][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 536.546225][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.556280][ T31] Call Trace: [ 536.559548][ T31] [ 536.562468][ T31] __dump_stack+0x21/0x30 [ 536.566796][ T31] dump_stack_lvl+0xee/0x150 [ 536.571377][ T31] ? show_regs_print_info+0x20/0x20 [ 536.576574][ T31] dump_stack+0x15/0x20 [ 536.580726][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 536.585659][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 536.591198][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 536.597469][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 536.602502][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 536.608591][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 536.614654][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 536.620630][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 536.626623][ T31] watchdog+0xd64/0xea0 [ 536.630776][ T31] ? hungtask_pm_notify+0x50/0x50 [ 536.635791][ T31] ? __kasan_check_read+0x11/0x20 [ 536.640807][ T31] ? __kthread_parkme+0xac/0x200 [ 536.645743][ T31] ? preempt_count_add+0x90/0x1b0 [ 536.650765][ T31] kthread+0x411/0x500 [ 536.654834][ T31] ? hungtask_pm_notify+0x50/0x50 [ 536.659862][ T31] ? kthread_blkcg+0xd0/0xd0 [ 536.664458][ T31] ret_from_fork+0x1f/0x30 [ 536.668894][ T31] [ 536.672032][ T31] Sending NMI from CPU 1 to CPUs 0: [ 536.677228][ C0] NMI backtrace for cpu 0 [ 536.677237][ C0] CPU: 0 PID: 375 Comm: syz.2.17 Not tainted syzkaller #0 [ 536.677251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.677259][ C0] RIP: 0010:__ext4_get_inode_loc+0x153/0xcd0 [ 536.677278][ C0] Code: 36 4d 8d 7e 68 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9c 3a cf ff 4d 8b 3f 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 42 0a 00 00 45 8b 3f 4c 89 e7 4c 89 fe e8 d7 b9 90 ff [ 536.677289][ C0] RSP: 0018:ffffc90002cb6980 EFLAGS: 00000a02 [ 536.677302][ C0] RAX: 0000000000000000 RBX: 1ffff92000596d44 RCX: 0000000000000000 [ 536.677311][ C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90002cb6a68 [ 536.677320][ C0] RBP: ffffc90002cb6af8 R08: dffffc0000000000 R09: ffffc90002cb6a40 [ 536.677330][ C0] R10: fffff52000596d4d R11: 1ffff92000596d48 R12: 0000000000000013 [ 536.677340][ C0] R13: dffffc0000000000 R14: ffff888110b74000 R15: ffff88811f292400 [ 536.677350][ C0] FS: 0000555592c4e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 536.677362][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.677372][ C0] CR2: 00007f5db1269000 CR3: 000000012b978000 CR4: 00000000003506b0 [ 536.677384][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.677392][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.677401][ C0] Call Trace: [ 536.677404][ C0] [ 536.677409][ C0] ? __kasan_check_read+0x11/0x20 [ 536.677426][ C0] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 536.677443][ C0] ? ext4_get_inode_loc+0x130/0x130 [ 536.677456][ C0] ? __kasan_check_write+0x14/0x20 [ 536.677469][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 536.677484][ C0] ? _raw_spin_trylock_bh+0x130/0x130 [ 536.677499][ C0] ? __sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 536.677515][ C0] ext4_reserve_inode_write+0x16c/0x320 [ 536.677530][ C0] __ext4_mark_inode_dirty+0xb7/0x610 [ 536.677543][ C0] ? ext4_journal_check_start+0x172/0x240 [ 536.677559][ C0] ext4_dirty_inode+0xbd/0x100 [ 536.677572][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 536.677586][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 536.677602][ C0] ext4_xattr_block_set+0x13db/0x2cb0 [ 536.677621][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 536.677636][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 536.677651][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 536.677667][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 536.677683][ C0] ? selinux_inode_free_security+0x210/0x210 [ 536.677699][ C0] ext4_initxattrs+0xa6/0x110 [ 536.677711][ C0] security_inode_init_security+0x254/0x370 [ 536.677726][ C0] ? posix_acl_create+0x118/0x440 [ 536.677738][ C0] ? ext4_init_security+0x40/0x40 [ 536.677751][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 536.677766][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 536.677780][ C0] ? __ext4_set_acl+0x600/0x600 [ 536.677792][ C0] ? prandom_u32+0x24d/0x290 [ 536.677805][ C0] ext4_init_security+0x34/0x40 [ 536.677817][ C0] __ext4_new_inode+0x2c41/0x3690 [ 536.677831][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 536.677844][ C0] ? dquot_initialize+0x20/0x20 [ 536.677857][ C0] ? selinux_determine_inode_label+0x290/0x3e0 [ 536.677871][ C0] ? may_create+0x377/0x460 [ 536.677883][ C0] ext4_create+0x22a/0x460 [ 536.677897][ C0] ? ext4_lookup+0x840/0x840 [ 536.677909][ C0] ? selinux_inode_create+0x22/0x30 [ 536.677923][ C0] ? security_inode_create+0xbd/0x110 [ 536.677937][ C0] ? ext4_lookup+0x840/0x840 [ 536.677948][ C0] path_openat+0x11ae/0x2f10 [ 536.677966][ C0] ? do_filp_open+0x3e0/0x3e0 [ 536.677979][ C0] do_filp_open+0x1b3/0x3e0 [ 536.677992][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 536.678007][ C0] ? getname_kernel+0x59/0x2e0 [ 536.678019][ C0] ? memcpy+0x56/0x70 [ 536.678032][ C0] filp_open+0x173/0x1d0 [ 536.678047][ C0] ? file_open_name+0x1a0/0x1a0 [ 536.678062][ C0] ? getname_kernel+0x201/0x2e0 [ 536.678074][ C0] do_coredump+0x1d9d/0x2860 [ 536.678089][ C0] ? simple_acl_create+0x1c0/0x1c0 [ 536.678103][ C0] ? kmem_cache_free+0x100/0x320 [ 536.678116][ C0] ? ____kasan_slab_free+0x130/0x160 [ 536.678130][ C0] ? get_signal+0xb5e/0x1480 [ 536.678144][ C0] ? kmem_cache_free+0x100/0x320 [ 536.678163][ C0] get_signal+0x38d/0x1480 [ 536.678184][ C0] arch_do_signal_or_restart+0xc1/0x10f0 [ 536.678197][ C0] ? bad_area+0x74/0x90 [ 536.678210][ C0] ? do_kern_addr_fault+0x80/0x80 [ 536.678225][ C0] ? get_sigframe_size+0x10/0x10 [ 536.678240][ C0] exit_to_user_mode_loop+0xa7/0xe0 [ 536.678253][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 536.678266][ C0] irqentry_exit_to_user_mode+0x9/0x10 [ 536.678279][ C0] irqentry_exit+0x12/0x40 [ 536.678290][ C0] exc_page_fault+0x5e/0xb0 [ 536.678305][ C0] asm_exc_page_fault+0x27/0x30 [ 536.678319][ C0] RIP: 0033:0x7f321297d751 [ 536.678331][ C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 536.678341][ C0] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 536.678351][ C0] RAX: 0000000000000000 RBX: 00007f3212bd3fa0 RCX: 00007f321297d749 [ 536.678360][ C0] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 536.678368][ C0] RBP: 00007f3212a01f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.678376][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.678385][ C0] R13: 00007f3212bd3fa0 R14: 00007f3212bd3fa0 R15: 0000000000000006 [ 536.678395][ C0] [ 559.491476][ T31] INFO: task kworker/u4:3:322 blocked for more than 234 seconds. [ 559.499222][ T31] Not tainted syzkaller #0 [ 559.504172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.512874][ T31] task:kworker/u4:3 state:D stack:24864 pid: 322 ppid: 2 flags:0x00004000 [ 559.522095][ T31] Workqueue: events_unbound linkwatch_event [ 559.527991][ T31] Call Trace: [ 559.531292][ T31] [ 559.534215][ T31] __schedule+0xb6e/0x14c0 [ 559.538613][ T31] ? release_firmware_map_entry+0x190/0x190 [ 560.500105][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 560.505412][ T31] ? __kasan_check_write+0x14/0x20 [ 560.510535][ T31] ? kthread_data+0x50/0xc0 [ 560.515063][ T31] ? wq_worker_sleeping+0x60/0x200 [ 560.520168][ T31] schedule+0x11e/0x1e0 [ 560.524329][ T31] schedule_preempt_disabled+0x13/0x20 [ 560.529776][ T31] __mutex_lock+0x7b6/0x11b0 [ 560.534373][ T31] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 560.540002][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 561.501681][ T31] ? __kasan_check_write+0x14/0x20 [ 561.506876][ T31] ? __switch_to+0x51d/0xe20 [ 561.511550][ T31] __mutex_lock_slowpath+0xe/0x10 [ 561.516715][ T31] mutex_lock+0x100/0x1a0 [ 561.521093][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 561.527682][ T31] ? __schedule+0xb76/0x14c0 [ 561.532283][ T31] rtnl_lock+0x15/0x20 [ 561.536349][ T31] linkwatch_event+0xe/0x60 [ 561.540848][ T31] process_one_work+0x6be/0xba0 [ 562.491261][ T31] worker_thread+0xa59/0x1200 [ 562.496004][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 562.501500][ T31] ? __kthread_parkme+0xac/0x200 [ 562.506443][ T31] kthread+0x411/0x500 [ 562.510513][ T31] ? worker_clr_flags+0x190/0x190 [ 562.515549][ T31] ? kthread_blkcg+0xd0/0xd0 [ 562.520129][ T31] ret_from_fork+0x1f/0x30 [ 562.524553][ T31] [ 562.527574][ T31] INFO: task syz-executor:395 blocked for more than 237 seconds. [ 562.535293][ T31] Not tainted syzkaller #0 [ 562.540217][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.491321][ T31] task:syz-executor state:D stack:22432 pid: 395 ppid: 1 flags:0x00004004 [ 563.500560][ T31] Call Trace: [ 563.503888][ T31] [ 563.506817][ T31] __schedule+0xb6e/0x14c0 [ 563.511243][ T31] ? release_firmware_map_entry+0x190/0x190 [ 563.517128][ T31] ? wake_up_process+0x10/0x20 [ 563.521919][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 563.527717][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 563.533195][ T31] schedule+0x11e/0x1e0 [ 563.537339][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 564.501099][ T31] ? synchronize_rcu+0x110/0x110 [ 564.506069][ T31] ? __kasan_slab_free+0x11/0x20 [ 564.511252][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 564.516793][ T31] ? rcu_exp_handler+0x370/0x370 [ 564.521732][ T31] ? kfree+0xc4/0x270 [ 564.525704][ T31] ? kfree_const+0x39/0x40 [ 564.530101][ T31] ? __kasan_check_write+0x14/0x20 [ 564.535220][ T31] ? kobject_put+0x1a8/0x270 [ 564.539799][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 565.491551][ T31] ? kobject_put+0x214/0x270 [ 565.496363][ T31] ? io_schedule+0xe0/0xe0 [ 565.500785][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 565.506881][ T31] ? __kasan_check_read+0x11/0x20 [ 565.511957][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 565.517846][ T31] ? linkwatch_fire_event+0x307/0x380 [ 565.523229][ T31] veth_newlink+0x9bc/0xda0 [ 565.527736][ T31] ? veth_validate+0x200/0x200 [ 565.532536][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 565.537559][ T31] ? veth_validate+0x200/0x200 [ 566.501008][ T31] rtnl_newlink+0x112d/0x17b0 [ 566.505734][ T31] ? rtnl_setlink+0x400/0x400 [ 566.510431][ T31] ? memcpy+0x56/0x70 [ 566.514452][ T31] ? __kasan_check_write+0x14/0x20 [ 566.519560][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 566.526180][ T31] ? ns_capable+0x8c/0xf0 [ 566.530504][ T31] ? netlink_net_capable+0x125/0x160 [ 566.535795][ T31] ? rtnl_setlink+0x400/0x400 [ 566.540465][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 567.491580][ T31] ? rtnetlink_bind+0x80/0x80 [ 567.496393][ T31] ? memcpy+0x56/0x70 [ 567.500384][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 567.505775][ T31] ? arch_stack_walk+0xee/0x140 [ 567.510637][ T31] ? avc_denied+0x1b0/0x1b0 [ 567.515157][ T31] ? stack_trace_save+0x98/0xe0 [ 567.519997][ T31] ? avc_has_perm+0x158/0x240 [ 567.524676][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 567.530037][ T31] ? do_syscall_64+0x4c/0xa0 [ 567.534632][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 567.539991][ T31] netlink_rcv_skb+0x1e0/0x430 [ 568.501141][ T31] ? rtnetlink_bind+0x80/0x80 [ 568.505865][ T31] ? netlink_ack+0xb60/0xb60 [ 568.510453][ T31] ? __netlink_lookup+0x387/0x3b0 [ 568.515495][ T31] rtnetlink_rcv+0x1c/0x20 [ 568.519915][ T31] netlink_unicast+0x876/0xa40 [ 568.524703][ T31] netlink_sendmsg+0x86a/0xb70 [ 568.529460][ T31] ? netlink_getsockopt+0x530/0x530 [ 568.534660][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 568.540108][ T31] __sys_sendto+0x423/0x580 [ 569.491279][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 569.496759][ T31] __x64_sys_sendto+0xe5/0x100 [ 569.501569][ T31] x64_sys_call+0x178/0x9a0 [ 569.506088][ T31] do_syscall_64+0x4c/0xa0 [ 569.510528][ T31] ? clear_bhb_loop+0x50/0xa0 [ 569.515212][ T31] ? clear_bhb_loop+0x50/0xa0 [ 569.519910][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.525909][ T31] RIP: 0033:0x7f4a8369a583 [ 569.530361][ T31] RSP: 002b:00007ffc6aadaea8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 569.538786][ T31] RAX: ffffffffffffffda RBX: 00007f4a8441d620 RCX: 00007f4a8369a583 [ 570.491166][ T31] RDX: 000000000000002c RSI: 00007f4a8441d670 RDI: 0000000000000003 [ 570.499180][ T31] RBP: 0000000000000001 R08: 00007ffc6aadaec4 R09: 000000000000000c [ 570.507189][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 570.515271][ T31] R13: 0000000000000000 R14: 00007f4a8441d670 R15: 0000000000000000 [ 570.523313][ T31] [ 570.526331][ T31] INFO: task syz-executor:399 blocked for more than 182 seconds. [ 570.534308][ T31] Not tainted syzkaller #0 [ 570.539227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.501299][ T31] task:syz-executor state:D stack:28000 pid: 399 ppid: 1 flags:0x00004004 [ 571.510588][ T31] Call Trace: [ 571.514128][ T31] [ 571.517066][ T31] __schedule+0xb6e/0x14c0 [ 571.521515][ T31] ? release_firmware_map_entry+0x190/0x190 [ 571.527419][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 571.532559][ T31] ? __kasan_check_write+0x14/0x20 [ 571.537675][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 572.491263][ T31] schedule+0x11e/0x1e0 [ 572.495461][ T31] schedule_preempt_disabled+0x13/0x20 [ 572.501214][ T31] __mutex_lock+0x7b6/0x11b0 [ 572.506019][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 572.512938][ T31] ? selinux_capable+0x29c/0x380 [ 572.517888][ T31] ? selinux_capset+0xf0/0xf0 [ 572.522586][ T31] ? cap_capable+0x1aa/0x230 [ 572.527194][ T31] __mutex_lock_slowpath+0xe/0x10 [ 572.532251][ T31] mutex_lock+0x100/0x1a0 [ 572.536580][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 573.491773][ T31] ? ns_capable+0x8c/0xf0 [ 573.496137][ T31] ? netlink_net_capable+0x125/0x160 [ 573.501613][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 573.506582][ T31] ? rtnetlink_bind+0x80/0x80 [ 573.511296][ T31] ? memcpy+0x56/0x70 [ 573.515278][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 573.520632][ T31] ? arch_stack_walk+0xee/0x140 [ 573.525494][ T31] ? avc_denied+0x1b0/0x1b0 [ 573.529987][ T31] ? stack_trace_save+0x98/0xe0 [ 573.534916][ T31] ? avc_has_perm+0x158/0x240 [ 573.539600][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 574.491099][ T31] ? do_syscall_64+0x4c/0xa0 [ 574.495729][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 574.501154][ T31] netlink_rcv_skb+0x1e0/0x430 [ 574.505915][ T31] ? rtnetlink_bind+0x80/0x80 [ 574.510575][ T31] ? netlink_ack+0xb60/0xb60 [ 574.515176][ T31] ? __netlink_lookup+0x387/0x3b0 [ 574.520191][ T31] rtnetlink_rcv+0x1c/0x20 [ 574.524699][ T31] netlink_unicast+0x876/0xa40 [ 574.529478][ T31] netlink_sendmsg+0x86a/0xb70 [ 574.534481][ T31] ? netlink_getsockopt+0x530/0x530 [ 574.539710][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 575.501245][ T31] __sys_sendto+0x423/0x580 [ 575.505845][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 575.511349][ T31] __x64_sys_sendto+0xe5/0x100 [ 575.516152][ T31] x64_sys_call+0x178/0x9a0 [ 575.520658][ T31] do_syscall_64+0x4c/0xa0 [ 575.525095][ T31] ? clear_bhb_loop+0x50/0xa0 [ 575.529761][ T31] ? clear_bhb_loop+0x50/0xa0 [ 575.534452][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 575.540345][ T31] RIP: 0033:0x7f210b42c583 [ 576.491038][ T31] RSP: 002b:00007ffcc3f51e38 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 576.499499][ T31] RAX: ffffffffffffffda RBX: 00007f210c1af620 RCX: 00007f210b42c583 [ 576.507946][ T31] RDX: 0000000000000028 RSI: 00007f210c1af670 RDI: 0000000000000003 [ 576.516172][ T31] RBP: 0000000000000001 R08: 00007ffcc3f51e54 R09: 000000000000000c [ 576.524170][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 576.532173][ T31] R13: 0000000000000000 R14: 00007f210c1af670 R15: 0000000000000000 [ 576.540138][ T31] [ 577.491922][ T31] NMI backtrace for cpu 0 [ 577.496282][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 577.503472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.513504][ T31] Call Trace: [ 577.516756][ T31] [ 577.519666][ T31] __dump_stack+0x21/0x30 [ 577.523983][ T31] dump_stack_lvl+0xee/0x150 [ 577.528554][ T31] ? show_regs_print_info+0x20/0x20 [ 577.533724][ T31] dump_stack+0x15/0x20 [ 577.537854][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 577.542767][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 577.548303][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 577.554454][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 577.559393][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 577.565465][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 577.571855][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 577.577985][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 577.583868][ T31] watchdog+0xd64/0xea0 [ 577.588012][ T31] ? hungtask_pm_notify+0x50/0x50 [ 577.593028][ T31] ? __kasan_check_read+0x11/0x20 [ 577.598033][ T31] ? __kthread_parkme+0xac/0x200 [ 577.603034][ T31] ? preempt_count_add+0x90/0x1b0 [ 577.608058][ T31] kthread+0x411/0x500 [ 577.612188][ T31] ? hungtask_pm_notify+0x50/0x50 [ 577.617185][ T31] ? kthread_blkcg+0xd0/0xd0 [ 577.621750][ T31] ret_from_fork+0x1f/0x30 [ 577.626139][ T31] [ 577.629230][ T31] Sending NMI from CPU 0 to CPUs 1: [ 577.634440][ C1] NMI backtrace for cpu 1 [ 577.634449][ C1] CPU: 1 PID: 393 Comm: syz.3.19 Not tainted syzkaller #0 [ 577.634463][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.634470][ C1] RIP: 0010:ext4_mark_iloc_dirty+0xc9f/0x3f50 [ 577.634492][ C1] Code: 0f 0f 86 8b 00 00 00 e8 ef 21 90 ff 48 8b 55 d0 4c 8d 72 08 4c 89 f0 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 <84> c0 0f 85 e7 29 00 00 45 89 26 43 80 7c 3d 00 00 4d 89 fd 74 0c [ 577.634503][ C1] RSP: 0018:ffffc90002da6a50 EFLAGS: 00000a02 [ 577.634515][ C1] RAX: 0000000000000000 RBX: ffff888111df8788 RCX: ffff888112f28000 [ 577.634525][ C1] RDX: ffff888128bec600 RSI: 0000000000000080 RDI: 000000000000000f [ 577.634534][ C1] RBP: ffffc90002da6b58 R08: dffffc0000000000 R09: ffffed10223bf0c6 [ 577.634545][ C1] R10: ffffed10223bf0c6 R11: 1ffff110223bf0c5 R12: 000000006943f60d [ 577.634555][ C1] R13: 1ffff110223bf0f1 R14: ffff888128bec608 R15: dffffc0000000000 [ 577.634565][ C1] FS: 000055557c23f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 577.634577][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.634586][ C1] CR2: 000000c006ce7010 CR3: 000000012e7d4000 CR4: 00000000003506a0 [ 577.634599][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.634612][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.634621][ C1] Call Trace: [ 577.634625][ C1] [ 577.634631][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 577.634648][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 577.634662][ C1] ? ext4_journal_check_start+0x172/0x240 [ 577.634678][ C1] ext4_dirty_inode+0xbd/0x100 [ 577.634691][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 577.634705][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 577.634722][ C1] ext4_xattr_block_set+0x1591/0x2cb0 [ 577.634741][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 577.634755][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 577.634771][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 577.634787][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 577.634803][ C1] ? selinux_inode_free_security+0x210/0x210 [ 577.634820][ C1] ext4_initxattrs+0xa6/0x110 [ 577.634832][ C1] security_inode_init_security+0x254/0x370 [ 577.634847][ C1] ? posix_acl_create+0x118/0x440 [ 577.634861][ C1] ? ext4_init_security+0x40/0x40 [ 577.634873][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 577.634888][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 577.634903][ C1] ? __ext4_set_acl+0x600/0x600 [ 577.634915][ C1] ? prandom_u32+0x24d/0x290 [ 577.634927][ C1] ext4_init_security+0x34/0x40 [ 577.634940][ C1] __ext4_new_inode+0x2c41/0x3690 [ 577.634954][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 577.634967][ C1] ? dquot_initialize+0x20/0x20 [ 577.634980][ C1] ? selinux_determine_inode_label+0x290/0x3e0 [ 577.634995][ C1] ? may_create+0x377/0x460 [ 577.635007][ C1] ext4_create+0x22a/0x460 [ 577.635020][ C1] ? ext4_lookup+0x840/0x840 [ 577.635032][ C1] ? selinux_inode_create+0x22/0x30 [ 577.635045][ C1] ? security_inode_create+0xbd/0x110 [ 577.635059][ C1] ? ext4_lookup+0x840/0x840 [ 577.635071][ C1] path_openat+0x11ae/0x2f10 [ 577.635088][ C1] ? do_filp_open+0x3e0/0x3e0 [ 577.635101][ C1] do_filp_open+0x1b3/0x3e0 [ 577.635114][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 577.635128][ C1] ? getname_kernel+0x59/0x2e0 [ 577.635141][ C1] ? memcpy+0x56/0x70 [ 577.635154][ C1] filp_open+0x173/0x1d0 [ 577.635168][ C1] ? file_open_name+0x1a0/0x1a0 [ 577.635183][ C1] ? getname_kernel+0x201/0x2e0 [ 577.635196][ C1] do_coredump+0x1d9d/0x2860 [ 577.635211][ C1] ? simple_acl_create+0x1c0/0x1c0 [ 577.635225][ C1] ? kmem_cache_free+0x100/0x320 [ 577.635239][ C1] ? ____kasan_slab_free+0x130/0x160 [ 577.635252][ C1] ? get_signal+0xb5e/0x1480 [ 577.635266][ C1] ? kmem_cache_free+0x100/0x320 [ 577.635280][ C1] get_signal+0x38d/0x1480 [ 577.635295][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 577.635309][ C1] ? bad_area+0x74/0x90 [ 577.635323][ C1] ? do_kern_addr_fault+0x80/0x80 [ 577.635338][ C1] ? get_sigframe_size+0x10/0x10 [ 577.635353][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 577.635366][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 577.635378][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 577.635391][ C1] irqentry_exit+0x12/0x40 [ 577.635402][ C1] exc_page_fault+0x5e/0xb0 [ 577.635413][ C1] asm_exc_page_fault+0x27/0x30 [ 577.635427][ C1] RIP: 0033:0x7f5986a0c751 [ 577.635439][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 577.635449][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 577.635459][ C1] RAX: 0000000000000000 RBX: 00007f5986c62fa0 RCX: 00007f5986a0c749 [ 577.635468][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 577.635476][ C1] RBP: 00007f5986a90f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.635484][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 577.635492][ C1] R13: 00007f5986c62fa0 R14: 00007f5986c62fa0 R15: 0000000000000006 [ 577.635503][ C1]