Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. 2025/11/27 10:12:53 parsed 1 programs [ 262.688034][ T30] audit: type=1400 audit(1764238373.242:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 262.708743][ T30] audit: type=1400 audit(1764238373.242:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 263.523466][ T30] audit: type=1400 audit(1764238374.082:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 263.524965][ T290] cgroup: Unknown subsys name 'net' [ 263.546121][ T30] audit: type=1400 audit(1764238374.082:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 263.573350][ T30] audit: type=1400 audit(1764238374.112:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 263.573789][ T290] cgroup: Unknown subsys name 'devices' [ 263.774474][ T290] cgroup: Unknown subsys name 'hugetlb' [ 263.780193][ T290] cgroup: Unknown subsys name 'rlimit' [ 264.044456][ T30] audit: type=1400 audit(1764238374.602:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.067716][ T30] audit: type=1400 audit(1764238374.602:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.088184][ T30] audit: type=1400 audit(1764238374.602:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.095936][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 264.108539][ T30] audit: type=1400 audit(1764238374.602:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 264.137296][ T30] audit: type=1400 audit(1764238374.602:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 264.166194][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 264.608743][ T298] request_module fs-gadgetfs succeeded, but still no fs? [ 264.870229][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.877293][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.884789][ T315] device bridge_slave_0 entered promiscuous mode [ 264.892164][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.899222][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.906493][ T315] device bridge_slave_1 entered promiscuous mode [ 264.958427][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.965466][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.972760][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.979783][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.998593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.006257][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.013707][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.022944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.031121][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.038153][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.056235][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.064415][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.071423][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.078892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.086903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.098628][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.109493][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.117468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.125175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.133403][ T315] device veth0_vlan entered promiscuous mode [ 265.143883][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.153085][ T315] device veth1_macvtap entered promiscuous mode [ 265.162034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.171795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/27 10:12:56 executed programs: 0 [ 265.808877][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.815998][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.823343][ T363] device bridge_slave_0 entered promiscuous mode [ 265.830015][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.837062][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.844352][ T363] device bridge_slave_1 entered promiscuous mode [ 265.895921][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.903352][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.911690][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.920154][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.928273][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.935309][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.942979][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.951535][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.959886][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.968016][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.975144][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.986097][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.994984][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.007612][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.018428][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.026442][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.033930][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.041838][ T363] device veth0_vlan entered promiscuous mode [ 266.051259][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.060214][ T363] device veth1_macvtap entered promiscuous mode [ 266.069016][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.078536][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.102364][ T373] loop2: detected capacity change from 0 to 1024 [ 266.109029][ T373] ======================================================= [ 266.109029][ T373] WARNING: The mand mount option has been deprecated and [ 266.109029][ T373] and is ignored by this kernel. Remove the mand [ 266.109029][ T373] option from the mount to silence this warning. [ 266.109029][ T373] ======================================================= [ 266.174237][ T373] EXT4-fs (loop2): Ignoring removed oldalloc option [ 266.180853][ T373] EXT4-fs (loop2): Ignoring removed orlov option [ 266.194683][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 266.593666][ T8] device bridge_slave_1 left promiscuous mode [ 266.599811][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.607563][ T8] device bridge_slave_0 left promiscuous mode [ 266.613829][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.621839][ T8] device veth1_macvtap left promiscuous mode [ 266.628060][ T8] device veth0_vlan left promiscuous mode [ 267.382562][ C0] sched: RT throttling activated [ 281.160704][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.168130][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.175723][ T379] device bridge_slave_0 entered promiscuous mode [ 281.182886][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.189908][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.197425][ T379] device bridge_slave_1 entered promiscuous mode [ 281.253844][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.260895][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.268189][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.275223][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.296758][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.304452][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.311779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.319844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.335100][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.343496][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.350516][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.358011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.366980][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.374020][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.381935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.391027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.403968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.414709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.422939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.430426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.374347][ T379] device veth0_vlan entered promiscuous mode [ 282.383960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.392082][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.401077][ T379] device veth1_macvtap entered promiscuous mode [ 282.409523][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.417265][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.425850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.445440][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.456375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/27 10:13:13 executed programs: 3 [ 282.477315][ T390] loop3: detected capacity change from 0 to 1024 [ 282.545458][ T390] EXT4-fs (loop3): Ignoring removed oldalloc option [ 282.552107][ T390] EXT4-fs (loop3): Ignoring removed orlov option [ 282.584659][ T390] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 382.622519][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 382.629586][ C0] (detected by 0, t=10002 jiffies, g=1761, q=703) [ 382.636091][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294975470-4294965467), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 382.649462][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1761 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 382.660620][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 382.670587][ C0] rcu: RCU grace-period kthread stack dump: [ 382.676483][ C0] task:rcu_preempt state:R running task stack:28752 pid: 14 ppid: 2 flags:0x00004000 [ 382.687268][ C0] Call Trace: [ 382.690554][ C0] [ 382.693489][ C0] __schedule+0xb6e/0x14c0 [ 382.697931][ C0] ? release_firmware_map_entry+0x190/0x190 [ 382.703929][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 382.709748][ C0] ? __mod_timer+0x7ae/0xb30 [ 382.714345][ C0] schedule+0x11e/0x1e0 [ 382.718502][ C0] schedule_timeout+0x12c/0x2e0 [ 382.723352][ C0] ? console_conditional_schedule+0x30/0x30 [ 382.729243][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 382.734702][ C0] ? update_process_times+0x200/0x200 [ 382.740118][ C0] ? prepare_to_swait_event+0x308/0x320 [ 382.745665][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 382.750432][ C0] ? debug_smp_processor_id+0x17/0x20 [ 382.755800][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 382.760937][ C0] ? rcu_gp_init+0xc00/0xc00 [ 382.765544][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 382.770750][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 382.775338][ C0] rcu_gp_kthread+0x98/0x330 [ 382.779933][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 382.784612][ C0] ? __kasan_check_read+0x11/0x20 [ 382.789635][ C0] ? __kthread_parkme+0xac/0x200 [ 382.794571][ C0] ? preempt_count_add+0x90/0x1b0 [ 382.799592][ C0] kthread+0x411/0x500 [ 382.803657][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 382.808339][ C0] ? kthread_blkcg+0xd0/0xd0 [ 382.812941][ C0] ret_from_fork+0x1f/0x30 [ 382.817377][ C0] [ 382.820392][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 382.826715][ C0] Sending NMI from CPU 0 to CPUs 1: [ 382.831925][ C1] NMI backtrace for cpu 1 [ 382.831938][ C1] CPU: 1 PID: 390 Comm: syz.3.18 Not tainted syzkaller #0 [ 382.831952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.831963][ C1] RIP: 0010:from_kgid+0x1a/0x680 [ 382.831982][ C1] Code: 89 f7 e8 c9 62 42 00 e9 0e fe ff ff 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 00 89 f3 <49> 89 fe 65 48 8b 04 25 28 00 00 00 48 89 44 24 60 49 bd 00 00 00 [ 382.831994][ C1] RSP: 0018:ffffc90002486ee0 EFLAGS: 00000282 [ 382.832006][ C1] RAX: ffff88812e016a90 RBX: 0000000000000000 RCX: 0000000000000000 [ 382.832016][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff866f1680 [ 382.832025][ C1] RBP: ffffc90002486fa0 R08: dffffc0000000000 R09: ffffed1025c02d31 [ 382.832035][ C1] R10: ffffed1025c02d31 R11: 1ffff11025c02d30 R12: ffff88812e016a88 [ 382.832046][ C1] R13: dffffc0000000000 R14: ffff8881127f84e0 R15: ffff88812e016ab0 [ 382.832056][ C1] FS: 0000555561875500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 382.832068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.832078][ C1] CR2: 00007ffe9b586078 CR3: 000000012c116000 CR4: 00000000003506a0 [ 382.832091][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.832099][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.832107][ C1] Call Trace: [ 382.832111][ C1] [ 382.832116][ C1] ? make_kuid+0x640/0x640 [ 382.832130][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 382.832145][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 382.832160][ C1] ext4_mark_iloc_dirty+0x6d4/0x3f50 [ 382.832176][ C1] ? __kasan_check_write+0x14/0x20 [ 382.832191][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 382.832205][ C1] ? ext4_reserve_inode_write+0x281/0x320 [ 382.832220][ C1] __ext4_mark_inode_dirty+0x428/0x610 [ 382.832233][ C1] ? ext4_journal_check_start+0x172/0x240 [ 382.832250][ C1] ext4_dirty_inode+0xbd/0x100 [ 382.832263][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 382.832278][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 382.832294][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 382.832313][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 382.832328][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 382.832344][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 382.832360][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 382.832377][ C1] ? selinux_inode_free_security+0x210/0x210 [ 382.832393][ C1] ext4_initxattrs+0xa6/0x110 [ 382.832406][ C1] security_inode_init_security+0x254/0x370 [ 382.832421][ C1] ? posix_acl_create+0x118/0x440 [ 382.832434][ C1] ? ext4_init_security+0x40/0x40 [ 382.832447][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 382.832462][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 382.832477][ C1] ? __ext4_set_acl+0x600/0x600 [ 382.832489][ C1] ? prandom_u32+0x24d/0x290 [ 382.832502][ C1] ext4_init_security+0x34/0x40 [ 382.832517][ C1] __ext4_new_inode+0x2c41/0x3690 [ 382.832532][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 382.832545][ C1] ? dquot_initialize+0x20/0x20 [ 382.832559][ C1] ? ext4_lookup+0x427/0x840 [ 382.832572][ C1] ? ext4_add_entry+0xf40/0xf40 [ 382.832583][ C1] ? may_create+0x377/0x460 [ 382.832596][ C1] ext4_create+0x22a/0x460 [ 382.832609][ C1] ? ext4_lookup+0x840/0x840 [ 382.832621][ C1] ? selinux_inode_create+0x22/0x30 [ 382.832635][ C1] ? security_inode_create+0xbd/0x110 [ 382.832649][ C1] ? ext4_lookup+0x840/0x840 [ 382.832661][ C1] path_openat+0x11ae/0x2f10 [ 382.832679][ C1] ? do_filp_open+0x3e0/0x3e0 [ 382.832692][ C1] ? expand_files+0xde/0x8e0 [ 382.832704][ C1] do_filp_open+0x1b3/0x3e0 [ 382.832717][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 382.832734][ C1] do_sys_openat2+0x14c/0x7b0 [ 382.832749][ C1] ? __se_sys_futex+0x139/0x310 [ 382.832763][ C1] ? do_sys_open+0xe0/0xe0 [ 382.832778][ C1] ? __x64_sys_futex+0x100/0x100 [ 382.832793][ C1] __x64_sys_creat+0x8e/0xb0 [ 382.832808][ C1] x64_sys_call+0x94a/0x9a0 [ 382.832828][ C1] do_syscall_64+0x4c/0xa0 [ 382.832842][ C1] ? clear_bhb_loop+0x50/0xa0 [ 382.832853][ C1] ? clear_bhb_loop+0x50/0xa0 [ 382.832865][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.832880][ C1] RIP: 0033:0x7fd47a85d749 [ 382.832892][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.832903][ C1] RSP: 002b:00007ffd262c38e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 382.832916][ C1] RAX: ffffffffffffffda RBX: 00007fd47aab3fa0 RCX: 00007fd47a85d749 [ 382.832926][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 382.832934][ C1] RBP: 00007fd47a8e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 382.832943][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.832951][ C1] R13: 00007fd47aab3fa0 R14: 00007fd47aab3fa0 R15: 0000000000000002 [ 382.832962][ C1] [ 432.373907][ T31] INFO: task kworker/u4:1:10 blocked for more than 126 seconds. [ 432.381604][ T31] Not tainted syzkaller #0 [ 432.386680][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.395387][ T31] task:kworker/u4:1 state:D stack:23232 pid: 10 ppid: 2 flags:0x00004000 [ 432.404608][ T31] Workqueue: events_unbound linkwatch_event [ 432.410510][ T31] Call Trace: [ 432.413790][ T31] [ 432.416721][ T31] __schedule+0xb6e/0x14c0 [ 432.421125][ T31] ? release_firmware_map_entry+0x190/0x190 [ 433.372538][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 433.377777][ T31] ? __kasan_check_write+0x14/0x20 [ 433.382947][ T31] ? kthread_data+0x50/0xc0 [ 433.387465][ T31] ? wq_worker_sleeping+0x60/0x200 [ 433.392621][ T31] schedule+0x11e/0x1e0 [ 433.396782][ T31] schedule_preempt_disabled+0x13/0x20 [ 433.402222][ T31] __mutex_lock+0x7b6/0x11b0 [ 433.406821][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 433.413603][ T31] ? __kasan_check_write+0x14/0x20 [ 433.418718][ T31] ? __switch_to+0x51d/0xe20 [ 434.374006][ T31] __mutex_lock_slowpath+0xe/0x10 [ 434.379079][ T31] mutex_lock+0x100/0x1a0 [ 434.383551][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 434.390207][ T31] ? __schedule+0xb76/0x14c0 [ 434.394837][ T31] rtnl_lock+0x15/0x20 [ 434.398915][ T31] linkwatch_event+0xe/0x60 [ 434.403422][ T31] process_one_work+0x6be/0xba0 [ 434.408273][ T31] worker_thread+0xa59/0x1200 [ 434.412992][ T31] ? __kthread_parkme+0xac/0x200 [ 434.417932][ T31] kthread+0x411/0x500 [ 434.421999][ T31] ? worker_clr_flags+0x190/0x190 [ 435.382592][ T31] ? kthread_blkcg+0xd0/0xd0 [ 435.387266][ T31] ret_from_fork+0x1f/0x30 [ 435.391761][ T31] [ 435.394851][ T31] INFO: task syz-executor:395 blocked for more than 129 seconds. [ 435.402583][ T31] Not tainted syzkaller #0 [ 435.407505][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.416170][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 436.372892][ T31] Call Trace: [ 436.376301][ T31] [ 436.379242][ T31] __schedule+0xb6e/0x14c0 [ 436.383673][ T31] ? release_firmware_map_entry+0x190/0x190 [ 436.389567][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 436.395378][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 436.400848][ T31] schedule+0x11e/0x1e0 [ 436.405006][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 436.410640][ T31] ? synchronize_rcu+0x110/0x110 [ 436.415581][ T31] ? __kasan_slab_free+0x11/0x20 [ 436.420518][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 437.382558][ T31] ? rcu_exp_handler+0x370/0x370 [ 437.387543][ T31] ? kfree+0xc4/0x270 [ 437.391561][ T31] ? kfree_const+0x39/0x40 [ 437.396017][ T31] ? __kasan_check_write+0x14/0x20 [ 437.401130][ T31] ? kobject_put+0x1a8/0x270 [ 437.405743][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 437.411814][ T31] ? kobject_put+0x214/0x270 [ 437.416411][ T31] ? io_schedule+0xe0/0xe0 [ 437.420826][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 438.372912][ T31] ? __kasan_check_read+0x11/0x20 [ 438.378091][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 438.384033][ T31] ? linkwatch_fire_event+0x307/0x380 [ 438.389483][ T31] veth_newlink+0x9bc/0xda0 [ 438.394022][ T31] ? veth_validate+0x200/0x200 [ 438.398789][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 438.403816][ T31] ? veth_validate+0x200/0x200 [ 438.408578][ T31] rtnl_newlink+0x112d/0x17b0 [ 438.413266][ T31] ? rtnl_setlink+0x400/0x400 [ 438.417947][ T31] ? memcpy+0x56/0x70 [ 438.421919][ T31] ? __kasan_check_write+0x14/0x20 [ 439.382600][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 439.389258][ T31] ? ns_capable+0x8c/0xf0 [ 439.393665][ T31] ? netlink_net_capable+0x125/0x160 [ 439.398964][ T31] ? rtnl_setlink+0x400/0x400 [ 439.403663][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 439.408600][ T31] ? rtnetlink_bind+0x80/0x80 [ 439.413306][ T31] ? memcpy+0x56/0x70 [ 439.417296][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 440.373178][ T31] ? arch_stack_walk+0xee/0x140 [ 440.378150][ T31] ? avc_denied+0x1b0/0x1b0 [ 440.382677][ T31] ? stack_trace_save+0x98/0xe0 [ 440.387528][ T31] ? avc_has_perm+0x158/0x240 [ 440.392189][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 440.397611][ T31] ? do_syscall_64+0x4c/0xa0 [ 440.402207][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 440.407596][ T31] netlink_rcv_skb+0x1e0/0x430 [ 440.412365][ T31] ? rtnetlink_bind+0x80/0x80 [ 440.417043][ T31] ? netlink_ack+0xb60/0xb60 [ 440.421629][ T31] ? __netlink_lookup+0x387/0x3b0 [ 441.373007][ T31] rtnetlink_rcv+0x1c/0x20 [ 441.377569][ T31] netlink_unicast+0x876/0xa40 [ 441.382332][ T31] netlink_sendmsg+0x86a/0xb70 [ 441.387156][ T31] ? netlink_getsockopt+0x530/0x530 [ 441.392389][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 441.397863][ T31] __sys_sendto+0x423/0x580 [ 441.402367][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 441.407742][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 441.413479][ T31] __x64_sys_sendto+0xe5/0x100 [ 441.418254][ T31] x64_sys_call+0x178/0x9a0 [ 442.372887][ T31] do_syscall_64+0x4c/0xa0 [ 442.377512][ T31] ? clear_bhb_loop+0x50/0xa0 [ 442.382196][ T31] ? clear_bhb_loop+0x50/0xa0 [ 442.386905][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.392814][ T31] RIP: 0033:0x7f77f27de583 [ 442.397222][ T31] RSP: 002b:00007ffd4674ab98 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 442.405679][ T31] RAX: ffffffffffffffda RBX: 00007f77f3561620 RCX: 00007f77f27de583 [ 442.413673][ T31] RDX: 000000000000002c RSI: 00007f77f3561670 RDI: 0000000000000003 [ 442.421638][ T31] RBP: 0000000000000001 R08: 00007ffd4674abb4 R09: 000000000000000c [ 443.373083][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 443.381103][ T31] R13: 0000000000000000 R14: 00007f77f3561670 R15: 0000000000000000 [ 443.389119][ T31] [ 443.392140][ T31] NMI backtrace for cpu 1 [ 443.396458][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 443.403648][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.413794][ T31] Call Trace: [ 443.417057][ T31] [ 443.419976][ T31] __dump_stack+0x21/0x30 [ 443.424292][ T31] dump_stack_lvl+0xee/0x150 [ 443.428896][ T31] ? show_regs_print_info+0x20/0x20 [ 443.434080][ T31] dump_stack+0x15/0x20 [ 443.438235][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 443.443169][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 443.448728][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 443.454867][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 443.459798][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 443.465934][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 443.471983][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 443.477949][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 443.483822][ T31] watchdog+0xd64/0xea0 [ 443.487959][ T31] ? hungtask_pm_notify+0x50/0x50 [ 443.492965][ T31] ? __kasan_check_read+0x11/0x20 [ 443.497987][ T31] ? __kthread_parkme+0xac/0x200 [ 443.502904][ T31] ? preempt_count_add+0x90/0x1b0 [ 443.507924][ T31] kthread+0x411/0x500 [ 443.511974][ T31] ? hungtask_pm_notify+0x50/0x50 [ 443.516981][ T31] ? kthread_blkcg+0xd0/0xd0 [ 443.521553][ T31] ret_from_fork+0x1f/0x30 [ 443.525954][ T31] [ 443.529075][ T31] Sending NMI from CPU 1 to CPUs 0: [ 443.534289][ C0] NMI backtrace for cpu 0 [ 443.534297][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 443.534311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.534319][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 443.534340][ C0] Code: 50 aa 99 7e 65 8b 15 51 aa 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 5c 0b 00 00 00 74 4e 8b 91 38 0b 00 00 <83> fa 03 75 43 48 8b 91 40 0b 00 00 44 8b 89 3c 0b 00 00 49 c1 e1 [ 443.534351][ C0] RSP: 0018:ffffc900023a6f00 EFLAGS: 00000246 [ 443.534364][ C0] RAX: ffffffff81bd4fea RBX: ffff88812117fb28 RCX: ffff88810f9f13c0 [ 443.534375][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 443.534383][ C0] RBP: ffffc900023a6f00 R08: dffffc0000000000 R09: ffffed102422ff66 [ 443.534393][ C0] R10: ffffed102422ff66 R11: 1ffff1102422ff65 R12: dffffc0000000000 [ 443.534404][ C0] R13: dffffc0000000000 R14: 000000000000601b R15: 1ffff1102422ff65 [ 443.534414][ C0] FS: 000055558e19e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 443.534427][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.534436][ C0] CR2: 00007f86bbc64000 CR3: 000000012c756000 CR4: 00000000003506b0 [ 443.534449][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 443.534457][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 443.534465][ C0] Call Trace: [ 443.534469][ C0] [ 443.534473][ C0] mark_buffer_dirty+0xca/0x330 [ 443.534490][ C0] __ext4_handle_dirty_metadata+0x2f8/0x800 [ 443.534507][ C0] ext4_mark_iloc_dirty+0x2b6a/0x3f50 [ 443.534522][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 443.534539][ C0] __ext4_mark_inode_dirty+0x428/0x610 [ 443.534553][ C0] ? ext4_journal_check_start+0x172/0x240 [ 443.534569][ C0] ext4_dirty_inode+0xbd/0x100 [ 443.534582][ C0] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 443.534596][ C0] __mark_inode_dirty+0x1f5/0x9c0 [ 443.534612][ C0] ext4_xattr_block_set+0x1591/0x2cb0 [ 443.534631][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 443.534646][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 443.534662][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 443.534679][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 443.534695][ C0] ? selinux_inode_free_security+0x210/0x210 [ 443.534725][ C0] ext4_initxattrs+0xa6/0x110 [ 443.534739][ C0] security_inode_init_security+0x254/0x370 [ 443.534755][ C0] ? posix_acl_create+0x118/0x440 [ 443.534768][ C0] ? ext4_init_security+0x40/0x40 [ 443.534781][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 443.534797][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 443.534812][ C0] ? __ext4_set_acl+0x600/0x600 [ 443.534824][ C0] ? prandom_u32+0x24d/0x290 [ 443.534837][ C0] ext4_init_security+0x34/0x40 [ 443.534849][ C0] __ext4_new_inode+0x2c41/0x3690 [ 443.534864][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 443.534877][ C0] ? dquot_initialize+0x20/0x20 [ 443.534891][ C0] ? ext4_lookup+0x427/0x840 [ 443.534904][ C0] ? ext4_add_entry+0xf40/0xf40 [ 443.534916][ C0] ? may_create+0x377/0x460 [ 443.534929][ C0] ext4_create+0x22a/0x460 [ 443.534943][ C0] ? ext4_lookup+0x840/0x840 [ 443.534955][ C0] ? selinux_inode_create+0x22/0x30 [ 443.534968][ C0] ? security_inode_create+0xbd/0x110 [ 443.534988][ C0] ? ext4_lookup+0x840/0x840 [ 443.535000][ C0] path_openat+0x11ae/0x2f10 [ 443.535017][ C0] ? do_filp_open+0x3e0/0x3e0 [ 443.535030][ C0] ? expand_files+0xde/0x8e0 [ 443.535043][ C0] do_filp_open+0x1b3/0x3e0 [ 443.535056][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 443.535073][ C0] do_sys_openat2+0x14c/0x7b0 [ 443.535088][ C0] ? __se_sys_futex+0x139/0x310 [ 443.535103][ C0] ? do_sys_open+0xe0/0xe0 [ 443.535117][ C0] ? __x64_sys_futex+0x100/0x100 [ 443.535132][ C0] __x64_sys_creat+0x8e/0xb0 [ 443.535148][ C0] x64_sys_call+0x94a/0x9a0 [ 443.535160][ C0] do_syscall_64+0x4c/0xa0 [ 443.535175][ C0] ? clear_bhb_loop+0x50/0xa0 [ 443.535187][ C0] ? clear_bhb_loop+0x50/0xa0 [ 443.535198][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.535214][ C0] RIP: 0033:0x7fe630f5b749 [ 443.535225][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.535236][ C0] RSP: 002b:00007ffee9eed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 443.535249][ C0] RAX: ffffffffffffffda RBX: 00007fe6311b1fa0 RCX: 00007fe630f5b749 [ 443.535259][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 443.535268][ C0] RBP: 00007fe630fdff91 R08: 0000000000000000 R09: 0000000000000000 [ 443.535277][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.535285][ C0] R13: 00007fe6311b1fa0 R14: 00007fe6311b1fa0 R15: 0000000000000002 [ 443.535296][ C0] [ 466.372591][ T31] INFO: task kworker/u4:1:10 blocked for more than 160 seconds. [ 466.380263][ T31] Not tainted syzkaller #0 [ 466.385257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.393985][ T31] task:kworker/u4:1 state:D stack:23232 pid: 10 ppid: 2 flags:0x00004000 [ 466.403214][ T31] Workqueue: events_unbound linkwatch_event [ 466.409114][ T31] Call Trace: [ 466.412379][ T31] [ 466.415327][ T31] __schedule+0xb6e/0x14c0 [ 466.419747][ T31] ? release_firmware_map_entry+0x190/0x190 [ 467.372569][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 467.377823][ T31] ? __kasan_check_write+0x14/0x20 [ 467.382956][ T31] ? kthread_data+0x50/0xc0 [ 467.387462][ T31] ? wq_worker_sleeping+0x60/0x200 [ 467.392585][ T31] schedule+0x11e/0x1e0 [ 467.396775][ T31] schedule_preempt_disabled+0x13/0x20 [ 467.402217][ T31] __mutex_lock+0x7b6/0x11b0 [ 467.406807][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 467.413595][ T31] ? __kasan_check_write+0x14/0x20 [ 467.418712][ T31] ? __switch_to+0x51d/0xe20 [ 468.372894][ T31] __mutex_lock_slowpath+0xe/0x10 [ 468.378090][ T31] mutex_lock+0x100/0x1a0 [ 468.382428][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 468.389057][ T31] ? __schedule+0xb76/0x14c0 [ 468.393666][ T31] rtnl_lock+0x15/0x20 [ 468.397732][ T31] linkwatch_event+0xe/0x60 [ 468.402220][ T31] process_one_work+0x6be/0xba0 [ 468.407093][ T31] worker_thread+0xa59/0x1200 [ 468.411771][ T31] ? __kthread_parkme+0xac/0x200 [ 468.416715][ T31] kthread+0x411/0x500 [ 468.420781][ T31] ? worker_clr_flags+0x190/0x190 [ 469.382647][ T31] ? kthread_blkcg+0xd0/0xd0 [ 469.387365][ T31] ret_from_fork+0x1f/0x30 [ 469.391782][ T31] [ 469.394922][ T31] INFO: task syz-executor:395 blocked for more than 163 seconds. [ 469.402648][ T31] Not tainted syzkaller #0 [ 469.407569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.416274][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 470.372731][ T31] Call Trace: [ 470.376152][ T31] [ 470.379087][ T31] __schedule+0xb6e/0x14c0 [ 470.383510][ T31] ? release_firmware_map_entry+0x190/0x190 [ 470.389405][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 470.395231][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 470.400691][ T31] schedule+0x11e/0x1e0 [ 470.404848][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 470.410482][ T31] ? synchronize_rcu+0x110/0x110 [ 470.415433][ T31] ? __kasan_slab_free+0x11/0x20 [ 470.420382][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 471.372664][ T31] ? rcu_exp_handler+0x370/0x370 [ 471.377725][ T31] ? kfree+0xc4/0x270 [ 471.381704][ T31] ? kfree_const+0x39/0x40 [ 471.386204][ T31] ? __kasan_check_write+0x14/0x20 [ 471.391327][ T31] ? kobject_put+0x1a8/0x270 [ 471.395967][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 471.402035][ T31] ? kobject_put+0x214/0x270 [ 471.406639][ T31] ? io_schedule+0xe0/0xe0 [ 471.411055][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 471.417124][ T31] ? __kasan_check_read+0x11/0x20 [ 471.422156][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 472.373187][ T31] ? linkwatch_fire_event+0x307/0x380 [ 472.378706][ T31] veth_newlink+0x9bc/0xda0 [ 472.383271][ T31] ? veth_validate+0x200/0x200 [ 472.388050][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 472.393081][ T31] ? veth_validate+0x200/0x200 [ 472.397855][ T31] rtnl_newlink+0x112d/0x17b0 [ 472.402541][ T31] ? rtnl_setlink+0x400/0x400 [ 472.407221][ T31] ? memcpy+0x56/0x70 [ 472.411191][ T31] ? __kasan_check_write+0x14/0x20 [ 472.416307][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 473.372525][ T31] ? ns_capable+0x8c/0xf0 [ 473.376993][ T31] ? netlink_net_capable+0x125/0x160 [ 473.382278][ T31] ? rtnl_setlink+0x400/0x400 [ 473.386966][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 473.391912][ T31] ? rtnetlink_bind+0x80/0x80 [ 473.396615][ T31] ? memcpy+0x56/0x70 [ 473.400599][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 473.405988][ T31] ? arch_stack_walk+0xee/0x140 [ 473.410839][ T31] ? avc_denied+0x1b0/0x1b0 [ 473.415350][ T31] ? stack_trace_save+0x98/0xe0 [ 473.420212][ T31] ? avc_has_perm+0x158/0x240 [ 474.373915][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 474.379334][ T31] ? do_syscall_64+0x4c/0xa0 [ 474.383965][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 474.389349][ T31] netlink_rcv_skb+0x1e0/0x430 [ 474.394146][ T31] ? rtnetlink_bind+0x80/0x80 [ 474.398832][ T31] ? netlink_ack+0xb60/0xb60 [ 474.403446][ T31] ? __netlink_lookup+0x387/0x3b0 [ 474.408470][ T31] rtnetlink_rcv+0x1c/0x20 [ 474.412909][ T31] netlink_unicast+0x876/0xa40 [ 474.417671][ T31] netlink_sendmsg+0x86a/0xb70 [ 474.422420][ T31] ? netlink_getsockopt+0x530/0x530 [ 475.372594][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 475.378200][ T31] __sys_sendto+0x423/0x580 [ 475.382739][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 475.388147][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 475.393887][ T31] __x64_sys_sendto+0xe5/0x100 [ 475.398654][ T31] x64_sys_call+0x178/0x9a0 [ 475.403158][ T31] do_syscall_64+0x4c/0xa0 [ 475.407577][ T31] ? clear_bhb_loop+0x50/0xa0 [ 475.412271][ T31] ? clear_bhb_loop+0x50/0xa0 [ 475.417129][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 476.373781][ T31] RIP: 0033:0x7f77f27de583 [ 476.378237][ T31] RSP: 002b:00007ffd4674ab98 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 476.386693][ T31] RAX: ffffffffffffffda RBX: 00007f77f3561620 RCX: 00007f77f27de583 [ 476.394718][ T31] RDX: 000000000000002c RSI: 00007f77f3561670 RDI: 0000000000000003 [ 476.402713][ T31] RBP: 0000000000000001 R08: 00007ffd4674abb4 R09: 000000000000000c [ 476.410682][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 476.418654][ T31] R13: 0000000000000000 R14: 00007f77f3561670 R15: 0000000000000000 [ 477.372667][ T31] [ 477.375722][ T31] NMI backtrace for cpu 0 [ 477.380043][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 477.387239][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.397275][ T31] Call Trace: [ 477.400539][ T31] [ 477.403463][ T31] __dump_stack+0x21/0x30 [ 477.407775][ T31] dump_stack_lvl+0xee/0x150 [ 477.412347][ T31] ? show_regs_print_info+0x20/0x20 [ 477.417526][ T31] dump_stack+0x15/0x20 [ 477.421664][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 477.426597][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 477.432143][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 477.438293][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 477.443227][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 477.449295][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 477.455363][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 477.461349][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 477.467242][ T31] watchdog+0xd64/0xea0 [ 477.471403][ T31] ? hungtask_pm_notify+0x50/0x50 [ 477.476426][ T31] ? __kasan_check_read+0x11/0x20 [ 477.481447][ T31] ? __kthread_parkme+0xac/0x200 [ 477.486380][ T31] ? preempt_count_add+0x90/0x1b0 [ 477.491408][ T31] kthread+0x411/0x500 [ 477.495472][ T31] ? hungtask_pm_notify+0x50/0x50 [ 477.500492][ T31] ? kthread_blkcg+0xd0/0xd0 [ 477.505077][ T31] ret_from_fork+0x1f/0x30 [ 477.509492][ T31] [ 477.512603][ T31] Sending NMI from CPU 0 to CPUs 1: [ 477.517805][ C1] NMI backtrace for cpu 1 [ 477.517813][ C1] CPU: 1 PID: 390 Comm: syz.3.18 Not tainted syzkaller #0 [ 477.517827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.517835][ C1] RIP: 0010:__ext4_get_inode_loc+0x122/0xcd0 [ 477.517853][ C1] Code: 3d cf ff 48 8b 44 24 10 4c 8d b0 c8 03 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 70 42 80 3c 28 00 74 08 4c 89 f7 e8 4e 3b cf ff <4c> 89 74 24 18 4d 8b 36 4d 8d 7e 68 4c 89 f8 48 c1 e8 03 42 80 3c [ 477.517864][ C1] RSP: 0018:ffffc90002486ee0 EFLAGS: 00000246 [ 477.517877][ C1] RAX: 1ffff110224ff079 RBX: 1ffff92000490df0 RCX: 0000000000000000 [ 477.517887][ C1] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90002486fc8 [ 477.517896][ C1] RBP: ffffc90002487058 R08: dffffc0000000000 R09: ffffc90002486fa0 [ 477.517906][ C1] R10: fffff52000490df9 R11: 1ffff92000490df4 R12: 0000000000000013 [ 477.517916][ C1] R13: dffffc0000000000 R14: ffff8881127f83c8 R15: 1ffff92000490e20 [ 477.517927][ C1] FS: 0000555561875500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 477.517939][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.517949][ C1] CR2: 00007fff85746eb8 CR3: 000000012c116000 CR4: 00000000003506a0 [ 477.517961][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.517969][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.517977][ C1] Call Trace: [ 477.517981][ C1] [ 477.517985][ C1] ? __kasan_check_read+0x11/0x20 [ 477.518000][ C1] ? mark_page_accessed+0x3b6/0x8d0 [ 477.518013][ C1] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 477.518030][ C1] ? ext4_get_inode_loc+0x130/0x130 [ 477.518044][ C1] ? __kasan_check_write+0x14/0x20 [ 477.518057][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 477.518072][ C1] ? _raw_spin_trylock_bh+0x130/0x130 [ 477.518087][ C1] ext4_reserve_inode_write+0x16c/0x320 [ 477.518102][ C1] __ext4_mark_inode_dirty+0xb7/0x610 [ 477.518115][ C1] ? ext4_journal_check_start+0x172/0x240 [ 477.518131][ C1] ext4_dirty_inode+0xbd/0x100 [ 477.518144][ C1] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 477.518159][ C1] __mark_inode_dirty+0x1f5/0x9c0 [ 477.518175][ C1] ext4_xattr_block_set+0x13db/0x2cb0 [ 477.518196][ C1] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 477.518210][ C1] ? ext4_xattr_block_find+0xf1/0x4f0 [ 477.518226][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 477.518243][ C1] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 477.518259][ C1] ? selinux_inode_free_security+0x210/0x210 [ 477.518275][ C1] ext4_initxattrs+0xa6/0x110 [ 477.518287][ C1] security_inode_init_security+0x254/0x370 [ 477.518302][ C1] ? posix_acl_create+0x118/0x440 [ 477.518315][ C1] ? ext4_init_security+0x40/0x40 [ 477.518328][ C1] ? security_dentry_create_files_as+0xc0/0xc0 [ 477.518348][ C1] ? dquot_alloc_inode+0x1c2/0x7d0 [ 477.518362][ C1] ? __ext4_set_acl+0x600/0x600 [ 477.518375][ C1] ? prandom_u32+0x24d/0x290 [ 477.518388][ C1] ext4_init_security+0x34/0x40 [ 477.518400][ C1] __ext4_new_inode+0x2c41/0x3690 [ 477.518415][ C1] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 477.518428][ C1] ? dquot_initialize+0x20/0x20 [ 477.518442][ C1] ? ext4_lookup+0x427/0x840 [ 477.518454][ C1] ? ext4_add_entry+0xf40/0xf40 [ 477.518466][ C1] ? may_create+0x377/0x460 [ 477.518478][ C1] ext4_create+0x22a/0x460 [ 477.518491][ C1] ? ext4_lookup+0x840/0x840 [ 477.518503][ C1] ? selinux_inode_create+0x22/0x30 [ 477.518517][ C1] ? security_inode_create+0xbd/0x110 [ 477.518531][ C1] ? ext4_lookup+0x840/0x840 [ 477.518543][ C1] path_openat+0x11ae/0x2f10 [ 477.518561][ C1] ? do_filp_open+0x3e0/0x3e0 [ 477.518574][ C1] ? expand_files+0xde/0x8e0 [ 477.518586][ C1] do_filp_open+0x1b3/0x3e0 [ 477.518600][ C1] ? vfs_tmpfile+0x2d0/0x2d0 [ 477.518617][ C1] do_sys_openat2+0x14c/0x7b0 [ 477.518633][ C1] ? __se_sys_futex+0x139/0x310 [ 477.518648][ C1] ? do_sys_open+0xe0/0xe0 [ 477.518662][ C1] ? __x64_sys_futex+0x100/0x100 [ 477.518678][ C1] __x64_sys_creat+0x8e/0xb0 [ 477.518693][ C1] x64_sys_call+0x94a/0x9a0 [ 477.518706][ C1] do_syscall_64+0x4c/0xa0 [ 477.518721][ C1] ? clear_bhb_loop+0x50/0xa0 [ 477.518732][ C1] ? clear_bhb_loop+0x50/0xa0 [ 477.518744][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.518759][ C1] RIP: 0033:0x7fd47a85d749 [ 477.518770][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.518781][ C1] RSP: 002b:00007ffd262c38e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 477.518794][ C1] RAX: ffffffffffffffda RBX: 00007fd47aab3fa0 RCX: 00007fd47a85d749 [ 477.518805][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 477.518813][ C1] RBP: 00007fd47a8e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 477.518822][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.518829][ C1] R13: 00007fd47aab3fa0 R14: 00007fd47aab3fa0 R15: 0000000000000002 [ 477.518841][ C1] [ 499.372490][ T31] INFO: task kworker/u4:1:10 blocked for more than 193 seconds. [ 499.380239][ T31] Not tainted syzkaller #0 [ 499.385193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.393869][ T31] task:kworker/u4:1 state:D stack:23232 pid: 10 ppid: 2 flags:0x00004000 [ 499.403118][ T31] Workqueue: events_unbound linkwatch_event [ 499.409026][ T31] Call Trace: [ 499.412288][ T31] [ 499.415223][ T31] __schedule+0xb6e/0x14c0 [ 499.419643][ T31] ? release_firmware_map_entry+0x190/0x190 [ 500.382864][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 500.388299][ T31] ? __kasan_check_write+0x14/0x20 [ 500.393469][ T31] ? kthread_data+0x50/0xc0 [ 500.397986][ T31] ? wq_worker_sleeping+0x60/0x200 [ 500.403122][ T31] schedule+0x11e/0x1e0 [ 500.407277][ T31] schedule_preempt_disabled+0x13/0x20 [ 500.412750][ T31] __mutex_lock+0x7b6/0x11b0 [ 500.417339][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 501.372634][ T31] ? __kasan_check_write+0x14/0x20 [ 501.377909][ T31] ? __switch_to+0x51d/0xe20 [ 501.382539][ T31] __mutex_lock_slowpath+0xe/0x10 [ 501.387596][ T31] mutex_lock+0x100/0x1a0 [ 501.391929][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 501.398530][ T31] ? __schedule+0xb76/0x14c0 [ 501.403135][ T31] rtnl_lock+0x15/0x20 [ 501.407202][ T31] linkwatch_event+0xe/0x60 [ 501.411727][ T31] process_one_work+0x6be/0xba0 [ 501.416596][ T31] worker_thread+0xa59/0x1200 [ 501.421273][ T31] ? __kthread_parkme+0xac/0x200 [ 502.374154][ T31] kthread+0x411/0x500 [ 502.378367][ T31] ? worker_clr_flags+0x190/0x190 [ 502.383533][ T31] ? kthread_blkcg+0xd0/0xd0 [ 502.388142][ T31] ret_from_fork+0x1f/0x30 [ 502.392610][ T31] [ 502.395662][ T31] INFO: task syz-executor:395 blocked for more than 196 seconds. [ 502.403385][ T31] Not tainted syzkaller #0 [ 502.408309][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.417018][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 503.372565][ T31] Call Trace: [ 503.375977][ T31] [ 503.378901][ T31] __schedule+0xb6e/0x14c0 [ 503.383334][ T31] ? release_firmware_map_entry+0x190/0x190 [ 503.389237][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 503.395069][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 503.400533][ T31] schedule+0x11e/0x1e0 [ 503.404695][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 503.410360][ T31] ? synchronize_rcu+0x110/0x110 [ 503.415310][ T31] ? __kasan_slab_free+0x11/0x20 [ 503.420261][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 504.382908][ T31] ? rcu_exp_handler+0x370/0x370 [ 504.388014][ T31] ? kfree+0xc4/0x270 [ 504.392009][ T31] ? kfree_const+0x39/0x40 [ 504.396466][ T31] ? __kasan_check_write+0x14/0x20 [ 504.401579][ T31] ? kobject_put+0x1a8/0x270 [ 504.406180][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 504.412251][ T31] ? kobject_put+0x214/0x270 [ 504.416856][ T31] ? io_schedule+0xe0/0xe0 [ 504.421270][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 505.372730][ T31] ? __kasan_check_read+0x11/0x20 [ 505.377896][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 505.383864][ T31] ? linkwatch_fire_event+0x307/0x380 [ 505.389258][ T31] veth_newlink+0x9bc/0xda0 [ 505.393840][ T31] ? veth_validate+0x200/0x200 [ 505.398617][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 505.403655][ T31] ? veth_validate+0x200/0x200 [ 505.408420][ T31] rtnl_newlink+0x112d/0x17b0 [ 505.413144][ T31] ? rtnl_setlink+0x400/0x400 [ 505.417832][ T31] ? memcpy+0x56/0x70 [ 505.421806][ T31] ? __kasan_check_write+0x14/0x20 [ 506.373705][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 506.380433][ T31] ? ns_capable+0x8c/0xf0 [ 506.384821][ T31] ? netlink_net_capable+0x125/0x160 [ 506.390114][ T31] ? rtnl_setlink+0x400/0x400 [ 506.394803][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 506.399799][ T31] ? rtnetlink_bind+0x80/0x80 [ 506.404519][ T31] ? memcpy+0x56/0x70 [ 506.408508][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 506.413890][ T31] ? arch_stack_walk+0xee/0x140 [ 506.418746][ T31] ? avc_denied+0x1b0/0x1b0 [ 507.372656][ T31] ? stack_trace_save+0x98/0xe0 [ 507.377649][ T31] ? avc_has_perm+0x158/0x240 [ 507.382337][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 507.387886][ T31] ? do_syscall_64+0x4c/0xa0 [ 507.392518][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 507.408096][ T31] netlink_rcv_skb+0x1e0/0x430 [ 507.412906][ T31] ? rtnetlink_bind+0x80/0x80 [ 507.417596][ T31] ? netlink_ack+0xb60/0xb60 [ 507.422192][ T31] ? __netlink_lookup+0x387/0x3b0 [ 508.383650][ T31] rtnetlink_rcv+0x1c/0x20 [ 508.388232][ T31] netlink_unicast+0x876/0xa40 [ 508.393065][ T31] netlink_sendmsg+0x86a/0xb70 [ 508.397909][ T31] ? netlink_getsockopt+0x530/0x530 [ 508.403168][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 508.408633][ T31] __sys_sendto+0x423/0x580 [ 508.413185][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 508.418566][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 509.372669][ T31] __x64_sys_sendto+0xe5/0x100 [ 509.377570][ T31] x64_sys_call+0x178/0x9a0 [ 509.382062][ T31] do_syscall_64+0x4c/0xa0 [ 509.386499][ T31] ? clear_bhb_loop+0x50/0xa0 [ 509.391221][ T31] ? clear_bhb_loop+0x50/0xa0 [ 509.395947][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.401896][ T31] RIP: 0033:0x7f77f27de583 [ 509.406322][ T31] RSP: 002b:00007ffd4674ab98 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 509.414758][ T31] RAX: ffffffffffffffda RBX: 00007f77f3561620 RCX: 00007f77f27de583 [ 510.372752][ T31] RDX: 000000000000002c RSI: 00007f77f3561670 RDI: 0000000000000003 [ 510.380870][ T31] RBP: 0000000000000001 R08: 00007ffd4674abb4 R09: 000000000000000c [ 510.389025][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 510.397038][ T31] R13: 0000000000000000 R14: 00007f77f3561670 R15: 0000000000000000 [ 510.405037][ T31] [ 510.408064][ T31] INFO: task syz-executor:398 blocked for more than 141 seconds. [ 510.415802][ T31] Not tainted syzkaller #0 [ 510.420732][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.382628][ T31] task:syz-executor state:D stack:28000 pid: 398 ppid: 1 flags:0x00004004 [ 511.392008][ T31] Call Trace: [ 511.395353][ T31] [ 511.398291][ T31] __schedule+0xb6e/0x14c0 [ 511.402731][ T31] ? release_firmware_map_entry+0x190/0x190 [ 511.408628][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 511.413752][ T31] ? __kasan_check_write+0x14/0x20 [ 511.418866][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 512.373092][ T31] schedule+0x11e/0x1e0 [ 512.377415][ T31] schedule_preempt_disabled+0x13/0x20 [ 512.382959][ T31] __mutex_lock+0x7b6/0x11b0 [ 512.387558][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 512.394391][ T31] ? selinux_capable+0x29c/0x380 [ 512.399336][ T31] ? selinux_capset+0xf0/0xf0 [ 512.404032][ T31] ? cap_capable+0x1aa/0x230 [ 512.408624][ T31] __mutex_lock_slowpath+0xe/0x10 [ 512.413669][ T31] mutex_lock+0x100/0x1a0 [ 512.418001][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 513.373001][ T31] ? ns_capable+0x8c/0xf0 [ 513.377458][ T31] ? netlink_net_capable+0x125/0x160 [ 513.382790][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 513.387736][ T31] ? rtnetlink_bind+0x80/0x80 [ 513.392420][ T31] ? memcpy+0x56/0x70 [ 513.396411][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 513.401823][ T31] ? arch_stack_walk+0xee/0x140 [ 513.406682][ T31] ? avc_denied+0x1b0/0x1b0 [ 513.411185][ T31] ? stack_trace_save+0x98/0xe0 [ 513.416058][ T31] ? avc_has_perm+0x158/0x240 [ 513.420737][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 514.372784][ T31] ? do_syscall_64+0x4c/0xa0 [ 514.377508][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 514.383027][ T31] netlink_rcv_skb+0x1e0/0x430 [ 514.387919][ T31] ? rtnetlink_bind+0x80/0x80 [ 514.392680][ T31] ? netlink_ack+0xb60/0xb60 [ 514.397412][ T31] ? __netlink_lookup+0x387/0x3b0 [ 514.402610][ T31] rtnetlink_rcv+0x1c/0x20 [ 514.407038][ T31] netlink_unicast+0x876/0xa40 [ 514.411913][ T31] netlink_sendmsg+0x86a/0xb70 [ 514.416697][ T31] ? netlink_getsockopt+0x530/0x530 [ 514.421933][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 515.373316][ T31] __sys_sendto+0x423/0x580 [ 515.377876][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 515.383312][ T31] __x64_sys_sendto+0xe5/0x100 [ 515.388087][ T31] x64_sys_call+0x178/0x9a0 [ 515.392608][ T31] do_syscall_64+0x4c/0xa0 [ 515.397030][ T31] ? clear_bhb_loop+0x50/0xa0 [ 515.401695][ T31] ? clear_bhb_loop+0x50/0xa0 [ 515.406395][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.412330][ T31] RIP: 0033:0x7f9a9bb8d583 [ 515.416773][ T31] RSP: 002b:00007ffe9b585f48 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 516.372819][ T31] RAX: ffffffffffffffda RBX: 00007f9a9c910620 RCX: 00007f9a9bb8d583 [ 516.380833][ T31] RDX: 0000000000000028 RSI: 00007f9a9c910670 RDI: 0000000000000003 [ 516.388863][ T31] RBP: 0000000000000001 R08: 00007ffe9b585f64 R09: 000000000000000c [ 516.396867][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 516.404896][ T31] R13: 0000000000000000 R14: 00007f9a9c910670 R15: 0000000000000000 [ 516.412911][ T31] [ 516.415944][ T31] NMI backtrace for cpu 1 [ 516.420249][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 516.427442][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.437480][ T31] Call Trace: [ 516.440759][ T31] [ 516.443677][ T31] __dump_stack+0x21/0x30 [ 516.447994][ T31] dump_stack_lvl+0xee/0x150 [ 516.452570][ T31] ? show_regs_print_info+0x20/0x20 [ 516.457752][ T31] dump_stack+0x15/0x20 [ 516.461892][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 516.466815][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 516.472345][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 516.478483][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 516.483404][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 516.489540][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 516.495593][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 516.501630][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 516.507513][ T31] watchdog+0xd64/0xea0 [ 516.511690][ T31] ? hungtask_pm_notify+0x50/0x50 [ 516.516854][ T31] ? __kasan_check_read+0x11/0x20 [ 516.521869][ T31] ? __kthread_parkme+0xac/0x200 [ 516.526789][ T31] ? preempt_count_add+0x90/0x1b0 [ 516.531814][ T31] kthread+0x411/0x500 [ 516.535866][ T31] ? hungtask_pm_notify+0x50/0x50 [ 516.540879][ T31] ? kthread_blkcg+0xd0/0xd0 [ 516.545469][ T31] ret_from_fork+0x1f/0x30 [ 516.549873][ T31] [ 516.552956][ T31] Sending NMI from CPU 1 to CPUs 0: [ 516.558154][ C0] NMI backtrace for cpu 0 [ 516.558162][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 516.558176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.558184][ C0] RIP: 0010:mark_page_accessed+0xcf/0x8d0 [ 516.558200][ C0] Code: ff 4c 8d 74 24 40 4c 89 7c 24 08 0f 1f 44 00 00 0f 1f 44 00 00 e8 21 06 d7 ff 4d 8d 77 08 4c 89 f0 48 c1 e8 03 48 89 44 24 10 <42> 80 3c 28 00 74 08 4c 89 f7 e8 d2 87 15 00 4d 8b 3e 44 89 fe 83 [ 516.558212][ C0] RSP: 0018:ffffc900023a6f00 EFLAGS: 00000a06 [ 516.558225][ C0] RAX: 1ffffd400096ef99 RBX: ffffea00047eb248 RCX: ffff88810f9f13c0 [ 516.558235][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.558243][ C0] RBP: ffffc900023a6fb0 R08: dffffc0000000000 R09: ffffed10225b8f5d [ 516.558254][ C0] R10: ffffed10225b8f5d R11: 1ffff110225b8f5c R12: ffff888112dc7a90 [ 516.558264][ C0] R13: dffffc0000000000 R14: ffffea0004b77cc8 R15: ffffea0004b77cc0 [ 516.558275][ C0] FS: 000055558e19e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 516.558288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.558298][ C0] CR2: 00007f86bbc64000 CR3: 000000012c756000 CR4: 00000000003506b0 [ 516.558310][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.558318][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 516.558327][ C0] Call Trace: [ 516.558330][ C0] [ 516.558335][ C0] ? __activate_page+0xd40/0xd40 [ 516.558348][ C0] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 516.558366][ C0] __find_get_block+0xafd/0xee0 [ 516.558382][ C0] ? write_boundary_block+0x140/0x140 [ 516.558399][ C0] __getblk_gfp+0x30/0x7d0 [ 516.558413][ C0] ? ext4_journal_check_start+0x172/0x240 [ 516.558429][ C0] ? __ext4_journal_stop+0x36/0x1a0 [ 516.558442][ C0] ? var_wake_function+0xf0/0xf0 [ 516.558457][ C0] __ext4_sb_bread_gfp+0x76/0x210 [ 516.558474][ C0] ext4_sb_bread+0x28/0x30 [ 516.558488][ C0] ext4_xattr_block_set+0xc4a/0x2cb0 [ 516.558507][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 516.558522][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 516.558538][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 516.558555][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 516.558571][ C0] ? selinux_inode_free_security+0x210/0x210 [ 516.558587][ C0] ext4_initxattrs+0xa6/0x110 [ 516.558600][ C0] security_inode_init_security+0x254/0x370 [ 516.558615][ C0] ? posix_acl_create+0x118/0x440 [ 516.558628][ C0] ? ext4_init_security+0x40/0x40 [ 516.558641][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 516.558661][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 516.558675][ C0] ? __ext4_set_acl+0x600/0x600 [ 516.558688][ C0] ? prandom_u32+0x24d/0x290 [ 516.558701][ C0] ext4_init_security+0x34/0x40 [ 516.558713][ C0] __ext4_new_inode+0x2c41/0x3690 [ 516.558729][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 516.558742][ C0] ? dquot_initialize+0x20/0x20 [ 516.558756][ C0] ? ext4_lookup+0x427/0x840 [ 516.558769][ C0] ? ext4_add_entry+0xf40/0xf40 [ 516.558781][ C0] ? may_create+0x377/0x460 [ 516.558793][ C0] ext4_create+0x22a/0x460 [ 516.558807][ C0] ? ext4_lookup+0x840/0x840 [ 516.558819][ C0] ? selinux_inode_create+0x22/0x30 [ 516.558846][ C0] ? security_inode_create+0xbd/0x110 [ 516.558860][ C0] ? ext4_lookup+0x840/0x840 [ 516.558872][ C0] path_openat+0x11ae/0x2f10 [ 516.558891][ C0] ? do_filp_open+0x3e0/0x3e0 [ 516.558905][ C0] ? expand_files+0xde/0x8e0 [ 516.558917][ C0] do_filp_open+0x1b3/0x3e0 [ 516.558930][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 516.558947][ C0] do_sys_openat2+0x14c/0x7b0 [ 516.558964][ C0] ? __se_sys_futex+0x139/0x310 [ 516.558979][ C0] ? do_sys_open+0xe0/0xe0 [ 516.558993][ C0] ? __x64_sys_futex+0x100/0x100 [ 516.559009][ C0] __x64_sys_creat+0x8e/0xb0 [ 516.559024][ C0] x64_sys_call+0x94a/0x9a0 [ 516.559037][ C0] do_syscall_64+0x4c/0xa0 [ 516.559051][ C0] ? clear_bhb_loop+0x50/0xa0 [ 516.559063][ C0] ? clear_bhb_loop+0x50/0xa0 [ 516.559075][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 516.559091][ C0] RIP: 0033:0x7fe630f5b749 [ 516.559103][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.559114][ C0] RSP: 002b:00007ffee9eed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 516.559127][ C0] RAX: ffffffffffffffda RBX: 00007fe6311b1fa0 RCX: 00007fe630f5b749 [ 516.559137][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 516.559145][ C0] RBP: 00007fe630fdff91 R08: 0000000000000000 R09: 0000000000000000 [ 516.559154][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.559162][ C0] R13: 00007fe6311b1fa0 R14: 00007fe6311b1fa0 R15: 0000000000000002 [ 516.559173][ C0] [ 539.372534][ T31] INFO: task kworker/u4:1:10 blocked for more than 233 seconds. [ 539.380203][ T31] Not tainted syzkaller #0 [ 539.385208][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.393883][ T31] task:kworker/u4:1 state:D stack:23232 pid: 10 ppid: 2 flags:0x00004000 [ 539.403117][ T31] Workqueue: events_unbound linkwatch_event [ 539.409016][ T31] Call Trace: [ 539.412281][ T31] [ 539.415232][ T31] __schedule+0xb6e/0x14c0 [ 539.419657][ T31] ? release_firmware_map_entry+0x190/0x190 [ 540.373057][ T31] ? __mutex_add_waiter+0x17b/0x270 [ 540.378485][ T31] ? __kasan_check_write+0x14/0x20 [ 540.383701][ T31] ? kthread_data+0x50/0xc0 [ 540.388226][ T31] ? wq_worker_sleeping+0x60/0x200 [ 540.393344][ T31] schedule+0x11e/0x1e0 [ 540.397497][ T31] schedule_preempt_disabled+0x13/0x20 [ 540.402959][ T31] __mutex_lock+0x7b6/0x11b0 [ 540.407549][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 540.414316][ T31] ? __kasan_check_write+0x14/0x20 [ 540.419424][ T31] ? __switch_to+0x51d/0xe20 [ 541.372667][ T31] __mutex_lock_slowpath+0xe/0x10 [ 541.377803][ T31] mutex_lock+0x100/0x1a0 [ 541.382119][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 541.388712][ T31] ? __schedule+0xb76/0x14c0 [ 541.393322][ T31] rtnl_lock+0x15/0x20 [ 541.397386][ T31] linkwatch_event+0xe/0x60 [ 541.401872][ T31] process_one_work+0x6be/0xba0 [ 541.406867][ T31] worker_thread+0xa59/0x1200 [ 541.411560][ T31] ? __kthread_parkme+0xac/0x200 [ 541.416505][ T31] kthread+0x411/0x500 [ 541.420574][ T31] ? worker_clr_flags+0x190/0x190 [ 542.383422][ T31] ? kthread_blkcg+0xd0/0xd0 [ 542.388232][ T31] ret_from_fork+0x1f/0x30 [ 542.392738][ T31] [ 542.395846][ T31] INFO: task syz-executor:395 blocked for more than 236 seconds. [ 542.403565][ T31] Not tainted syzkaller #0 [ 542.408493][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.417160][ T31] task:syz-executor state:D stack:22976 pid: 395 ppid: 1 flags:0x00004004 [ 543.372526][ T31] Call Trace: [ 543.375952][ T31] [ 543.378870][ T31] __schedule+0xb6e/0x14c0 [ 543.383318][ T31] ? release_firmware_map_entry+0x190/0x190 [ 543.389212][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 543.395040][ T31] ? prepare_to_wait_event+0x40b/0x440 [ 543.400509][ T31] schedule+0x11e/0x1e0 [ 543.404689][ T31] synchronize_rcu_expedited+0x45c/0x5b0 [ 543.410319][ T31] ? synchronize_rcu+0x110/0x110 [ 543.415268][ T31] ? __kasan_slab_free+0x11/0x20 [ 543.420203][ T31] ? slab_free_freelist_hook+0xc2/0x190 [ 544.374284][ T31] ? rcu_exp_handler+0x370/0x370 [ 544.379354][ T31] ? kfree+0xc4/0x270 [ 544.383473][ T31] ? kfree_const+0x39/0x40 [ 544.387897][ T31] ? __kasan_check_write+0x14/0x20 [ 544.393107][ T31] ? kobject_put+0x1a8/0x270 [ 544.397702][ T31] ? store_rps_dev_flow_table_cnt+0x2e0/0x2e0 [ 544.403773][ T31] ? kobject_put+0x214/0x270 [ 544.408371][ T31] ? io_schedule+0xe0/0xe0 [ 544.412792][ T31] ? netdev_queue_update_kobjects+0x3c8/0x3e0 [ 544.418862][ T31] ? __kasan_check_read+0x11/0x20 [ 545.372673][ T31] netif_set_real_num_tx_queues+0x48a/0x780 [ 545.378740][ T31] ? linkwatch_fire_event+0x307/0x380 [ 545.384133][ T31] veth_newlink+0x9bc/0xda0 [ 545.388643][ T31] ? veth_validate+0x200/0x200 [ 545.393587][ T31] ? rtnl_create_link+0x7a4/0x9d0 [ 545.398786][ T31] ? veth_validate+0x200/0x200 [ 545.403572][ T31] rtnl_newlink+0x112d/0x17b0 [ 545.408253][ T31] ? rtnl_setlink+0x400/0x400 [ 545.412955][ T31] ? memcpy+0x56/0x70 [ 545.416942][ T31] ? __kasan_check_write+0x14/0x20 [ 545.422034][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 546.382882][ T31] ? ns_capable+0x8c/0xf0 [ 546.387472][ T31] ? netlink_net_capable+0x125/0x160 [ 546.392824][ T31] ? rtnl_setlink+0x400/0x400 [ 546.397532][ T31] rtnetlink_rcv_msg+0x9e4/0xb90 [ 546.402500][ T31] ? rtnetlink_bind+0x80/0x80 [ 546.407194][ T31] ? memcpy+0x56/0x70 [ 546.411161][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 546.416539][ T31] ? arch_stack_walk+0xee/0x140 [ 546.421408][ T31] ? avc_denied+0x1b0/0x1b0 [ 547.372541][ T31] ? stack_trace_save+0x98/0xe0 [ 547.377571][ T31] ? avc_has_perm+0x158/0x240 [ 547.382274][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 547.387698][ T31] ? do_syscall_64+0x4c/0xa0 [ 547.392301][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 547.397731][ T31] netlink_rcv_skb+0x1e0/0x430 [ 547.402525][ T31] ? rtnetlink_bind+0x80/0x80 [ 547.407203][ T31] ? netlink_ack+0xb60/0xb60 [ 547.411778][ T31] ? __netlink_lookup+0x387/0x3b0 [ 547.416812][ T31] rtnetlink_rcv+0x1c/0x20 [ 547.421245][ T31] netlink_unicast+0x876/0xa40 [ 548.374059][ T31] netlink_sendmsg+0x86a/0xb70 [ 548.378965][ T31] ? netlink_getsockopt+0x530/0x530 [ 548.384243][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 548.389707][ T31] __sys_sendto+0x423/0x580 [ 548.394234][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 548.399613][ T31] ? alloc_empty_file_noaccount+0x80/0x80 [ 548.405371][ T31] __x64_sys_sendto+0xe5/0x100 [ 548.410138][ T31] x64_sys_call+0x178/0x9a0 [ 548.414653][ T31] do_syscall_64+0x4c/0xa0 [ 548.419070][ T31] ? clear_bhb_loop+0x50/0xa0 [ 549.372565][ T31] ? clear_bhb_loop+0x50/0xa0 [ 549.377284][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.383199][ T31] RIP: 0033:0x7f77f27de583 [ 549.387610][ T31] RSP: 002b:00007ffd4674ab98 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 549.396053][ T31] RAX: ffffffffffffffda RBX: 00007f77f3561620 RCX: 00007f77f27de583 [ 549.404062][ T31] RDX: 000000000000002c RSI: 00007f77f3561670 RDI: 0000000000000003 [ 549.412023][ T31] RBP: 0000000000000001 R08: 00007ffd4674abb4 R09: 000000000000000c [ 549.420003][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 550.382786][ T31] R13: 0000000000000000 R14: 00007f77f3561670 R15: 0000000000000000 [ 550.390838][ T31] [ 550.393907][ T31] INFO: task syz-executor:398 blocked for more than 181 seconds. [ 550.401640][ T31] Not tainted syzkaller #0 [ 550.406580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.415284][ T31] task:syz-executor state:D stack:28000 pid: 398 ppid: 1 flags:0x00004004 [ 551.372596][ T31] Call Trace: [ 551.375999][ T31] [ 551.378927][ T31] __schedule+0xb6e/0x14c0 [ 551.383408][ T31] ? release_firmware_map_entry+0x190/0x190 [ 551.389331][ T31] ? __mutex_add_waiter+0xc7/0x270 [ 551.394475][ T31] ? __kasan_check_write+0x14/0x20 [ 551.399589][ T31] ? __ww_mutex_check_waiters+0x350/0x350 [ 551.405309][ T31] schedule+0x11e/0x1e0 [ 551.409462][ T31] schedule_preempt_disabled+0x13/0x20 [ 551.414926][ T31] __mutex_lock+0x7b6/0x11b0 [ 551.419516][ T31] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 552.374114][ T31] ? selinux_capable+0x29c/0x380 [ 552.379216][ T31] ? selinux_capset+0xf0/0xf0 [ 552.383939][ T31] ? cap_capable+0x1aa/0x230 [ 552.388535][ T31] __mutex_lock_slowpath+0xe/0x10 [ 552.393565][ T31] mutex_lock+0x100/0x1a0 [ 552.397890][ T31] ? wait_for_completion_killable_timeout+0x10/0x10 [ 552.404491][ T31] ? ns_capable+0x8c/0xf0 [ 552.408843][ T31] ? netlink_net_capable+0x125/0x160 [ 552.414161][ T31] rtnetlink_rcv_msg+0x4af/0xb90 [ 552.419105][ T31] ? rtnetlink_bind+0x80/0x80 [ 553.372858][ T31] ? memcpy+0x56/0x70 [ 553.377152][ T31] ? avc_has_perm_noaudit+0x2f4/0x460 [ 553.382632][ T31] ? arch_stack_walk+0xee/0x140 [ 553.387561][ T31] ? avc_denied+0x1b0/0x1b0 [ 553.392069][ T31] ? stack_trace_save+0x98/0xe0 [ 553.396933][ T31] ? avc_has_perm+0x158/0x240 [ 553.401606][ T31] ? avc_has_perm_noaudit+0x460/0x460 [ 553.407000][ T31] ? do_syscall_64+0x4c/0xa0 [ 553.411591][ T31] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 553.416972][ T31] netlink_rcv_skb+0x1e0/0x430 [ 553.421745][ T31] ? rtnetlink_bind+0x80/0x80 [ 554.372789][ T31] ? netlink_ack+0xb60/0xb60 [ 554.377523][ T31] ? __netlink_lookup+0x387/0x3b0 [ 554.382705][ T31] rtnetlink_rcv+0x1c/0x20 [ 554.387194][ T31] netlink_unicast+0x876/0xa40 [ 554.392000][ T31] netlink_sendmsg+0x86a/0xb70 [ 554.396810][ T31] ? netlink_getsockopt+0x530/0x530 [ 554.402011][ T31] ? security_socket_sendmsg+0x82/0xa0 [ 554.407508][ T31] __sys_sendto+0x423/0x580 [ 554.412023][ T31] ? __ia32_sys_getpeername+0x90/0x90 [ 554.417438][ T31] __x64_sys_sendto+0xe5/0x100 [ 554.422209][ T31] x64_sys_call+0x178/0x9a0 [ 555.372645][ T31] do_syscall_64+0x4c/0xa0 [ 555.377107][ T31] ? clear_bhb_loop+0x50/0xa0 [ 555.381794][ T31] ? clear_bhb_loop+0x50/0xa0 [ 555.386522][ T31] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.392484][ T31] RIP: 0033:0x7f9a9bb8d583 [ 555.396901][ T31] RSP: 002b:00007ffe9b585f48 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 555.405335][ T31] RAX: ffffffffffffffda RBX: 00007f9a9c910620 RCX: 00007f9a9bb8d583 [ 555.413330][ T31] RDX: 0000000000000028 RSI: 00007f9a9c910670 RDI: 0000000000000003 [ 555.421299][ T31] RBP: 0000000000000001 R08: 00007ffe9b585f64 R09: 000000000000000c [ 556.382751][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 556.390896][ T31] R13: 0000000000000000 R14: 00007f9a9c910670 R15: 0000000000000000 [ 556.398920][ T31] [ 556.401949][ T31] NMI backtrace for cpu 1 [ 556.406278][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 556.413454][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.423491][ T31] Call Trace: [ 556.426749][ T31] [ 556.429663][ T31] __dump_stack+0x21/0x30 [ 556.433976][ T31] dump_stack_lvl+0xee/0x150 [ 556.438548][ T31] ? show_regs_print_info+0x20/0x20 [ 556.443730][ T31] dump_stack+0x15/0x20 [ 556.447868][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 556.452786][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 556.458315][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 556.464450][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 556.469388][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 556.475436][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 556.481485][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 556.487470][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 556.493348][ T31] watchdog+0xd64/0xea0 [ 556.497583][ T31] ? hungtask_pm_notify+0x50/0x50 [ 556.502591][ T31] ? __kasan_check_read+0x11/0x20 [ 556.507597][ T31] ? __kthread_parkme+0xac/0x200 [ 556.512518][ T31] ? preempt_count_add+0x90/0x1b0 [ 556.517526][ T31] kthread+0x411/0x500 [ 556.521587][ T31] ? hungtask_pm_notify+0x50/0x50 [ 556.526595][ T31] ? kthread_blkcg+0xd0/0xd0 [ 556.531170][ T31] ret_from_fork+0x1f/0x30 [ 556.535573][ T31] [ 556.538624][ T31] Sending NMI from CPU 1 to CPUs 0: [ 556.543835][ C0] NMI backtrace for cpu 0 [ 556.543844][ C0] CPU: 0 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 556.543857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.543870][ C0] RIP: 0010:ext4_xattr_block_set+0xe14/0x2cb0 [ 556.543891][ C0] Code: f6 e8 c0 97 80 ff 45 38 f7 4c 8b 64 24 30 0f 85 33 04 00 00 4c 89 e0 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 <84> c0 0f 85 64 02 00 00 45 0f b6 3c 24 43 0f b6 44 35 00 84 c0 4d [ 556.543902][ C0] RSP: 0018:ffffc900023a71e0 EFLAGS: 00000a02 [ 556.543915][ C0] RAX: 0000000000000000 RBX: ffff88812ddf3420 RCX: ffff88810f9f13c0 [ 556.543925][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 556.543934][ C0] RBP: ffffc900023a7370 R08: dffffc0000000000 R09: ffffed10225b8f51 [ 556.543944][ C0] R10: ffffed10225b8f51 R11: 1ffff110225b8f50 R12: ffff888110cff820 [ 556.543954][ C0] R13: 1ffff11025bbe684 R14: dffffc0000000000 R15: 0000000000000006 [ 556.543964][ C0] FS: 000055558e19e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 556.543976][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.543986][ C0] CR2: 00007f86bbc64000 CR3: 000000012c756000 CR4: 00000000003506b0 [ 556.543998][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.544006][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.544032][ C0] Call Trace: [ 556.544036][ C0] [ 556.544044][ C0] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 556.544073][ C0] ? ext4_xattr_block_find+0xf1/0x4f0 [ 556.544089][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 556.544106][ C0] ? ext4_xattr_set_entry+0x37d0/0x37d0 [ 556.544122][ C0] ? selinux_inode_free_security+0x210/0x210 [ 556.544140][ C0] ext4_initxattrs+0xa6/0x110 [ 556.544153][ C0] security_inode_init_security+0x254/0x370 [ 556.544168][ C0] ? posix_acl_create+0x118/0x440 [ 556.544182][ C0] ? ext4_init_security+0x40/0x40 [ 556.544194][ C0] ? security_dentry_create_files_as+0xc0/0xc0 [ 556.544210][ C0] ? dquot_alloc_inode+0x1c2/0x7d0 [ 556.544242][ C0] ? __ext4_set_acl+0x600/0x600 [ 556.544255][ C0] ? prandom_u32+0x24d/0x290 [ 556.544268][ C0] ext4_init_security+0x34/0x40 [ 556.544282][ C0] __ext4_new_inode+0x2c41/0x3690 [ 556.544299][ C0] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 556.544313][ C0] ? dquot_initialize+0x20/0x20 [ 556.544328][ C0] ? ext4_lookup+0x427/0x840 [ 556.544342][ C0] ? ext4_add_entry+0xf40/0xf40 [ 556.544355][ C0] ? may_create+0x377/0x460 [ 556.544368][ C0] ext4_create+0x22a/0x460 [ 556.544382][ C0] ? ext4_lookup+0x840/0x840 [ 556.544395][ C0] ? selinux_inode_create+0x22/0x30 [ 556.544410][ C0] ? security_inode_create+0xbd/0x110 [ 556.544425][ C0] ? ext4_lookup+0x840/0x840 [ 556.544438][ C0] path_openat+0x11ae/0x2f10 [ 556.544457][ C0] ? do_filp_open+0x3e0/0x3e0 [ 556.544471][ C0] ? expand_files+0xde/0x8e0 [ 556.544484][ C0] do_filp_open+0x1b3/0x3e0 [ 556.544498][ C0] ? vfs_tmpfile+0x2d0/0x2d0 [ 556.544517][ C0] do_sys_openat2+0x14c/0x7b0 [ 556.544533][ C0] ? __se_sys_futex+0x139/0x310 [ 556.544548][ C0] ? do_sys_open+0xe0/0xe0 [ 556.544563][ C0] ? __x64_sys_futex+0x100/0x100 [ 556.544604][ C0] __x64_sys_creat+0x8e/0xb0 [ 556.544621][ C0] x64_sys_call+0x94a/0x9a0 [ 556.544635][ C0] do_syscall_64+0x4c/0xa0 [ 556.544652][ C0] ? clear_bhb_loop+0x50/0xa0 [ 556.544665][ C0] ? clear_bhb_loop+0x50/0xa0 [ 556.544678][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.544696][ C0] RIP: 0033:0x7fe630f5b749 [ 556.544709][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.544721][ C0] RSP: 002b:00007ffee9eed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 556.544736][ C0] RAX: ffffffffffffffda RBX: 00007fe6311b1fa0 RCX: 00007fe630f5b749 [ 556.544747][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 556.544757][ C0] RBP: 00007fe630fdff91 R08: 0000000000000000 R09: 0000000000000000 [ 556.544766][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.544775][ C0] R13: 00007fe6311b1fa0 R14: 00007fe6311b1fa0 R15: 0000000000000002 [ 556.544788][ C0]