syzkaller syzkaller login: [ 14.024267][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 14.024279][ T28] audit: type=1400 audit(1765462144.881:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.028190][ T28] audit: type=1400 audit(1765462144.881:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.030958][ T28] audit: type=1400 audit(1765462144.881:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[13147]" dev="pipefs" ino=13147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.033931][ T28] audit: type=1400 audit(1765462144.881:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.036635][ T28] audit: type=1400 audit(1765462144.881:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. 2025/12/11 14:13:35 parsed 1 programs [ 284.600252][ T28] audit: type=1400 audit(1765462415.461:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 284.620971][ T28] audit: type=1400 audit(1765462415.461:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 285.327748][ T28] audit: type=1400 audit(1765462416.191:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 285.329098][ T291] cgroup: Unknown subsys name 'net' [ 285.350605][ T28] audit: type=1400 audit(1765462416.191:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 285.378221][ T28] audit: type=1400 audit(1765462416.221:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 285.378474][ T291] cgroup: Unknown subsys name 'devices' [ 285.518133][ T291] cgroup: Unknown subsys name 'hugetlb' [ 285.523773][ T291] cgroup: Unknown subsys name 'rlimit' [ 285.638758][ T28] audit: type=1400 audit(1765462416.501:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.662397][ T28] audit: type=1400 audit(1765462416.501:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.683154][ T28] audit: type=1400 audit(1765462416.501:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 285.691715][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 285.703642][ T28] audit: type=1400 audit(1765462416.501:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 285.733002][ T28] audit: type=1400 audit(1765462416.501:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 285.763427][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 286.454407][ T298] request_module fs-gadgetfs succeeded, but still no fs? [ 286.523937][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.531695][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.539142][ T303] device bridge_slave_0 entered promiscuous mode [ 286.545890][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.552934][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.560261][ T303] device bridge_slave_1 entered promiscuous mode [ 286.612054][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.619105][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.626413][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.633426][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.653790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.661422][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.668805][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.678682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.686884][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.693902][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.703238][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.711532][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.718589][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.734227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.743544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.757564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.769111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.777358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.784796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.793709][ T303] device veth0_vlan entered promiscuous mode [ 286.810842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.819780][ T303] device veth1_macvtap entered promiscuous mode [ 286.828753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.838731][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.873924][ T303] syz-executor (303) used greatest stack depth: 20992 bytes left 2025/12/11 14:13:38 executed programs: 0 [ 287.577507][ T8] device bridge_slave_1 left promiscuous mode [ 287.593872][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.601563][ T8] device bridge_slave_0 left promiscuous mode [ 287.616047][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.629890][ T8] device veth1_macvtap left promiscuous mode [ 287.636259][ T8] device veth0_vlan left promiscuous mode [ 287.732639][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.739711][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.747351][ T366] device bridge_slave_0 entered promiscuous mode [ 287.754630][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.761891][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.769394][ T366] device bridge_slave_1 entered promiscuous mode [ 287.808226][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.815312][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.822580][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.829605][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.845887][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.853685][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.860917][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.869673][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.878013][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.885061][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.893609][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.901921][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.909063][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.922813][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.936444][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.946944][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.957158][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.965226][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.972970][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.981080][ T366] device veth0_vlan entered promiscuous mode [ 287.990828][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.999730][ T366] device veth1_macvtap entered promiscuous mode [ 288.010253][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.019879][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.042456][ T376] loop2: detected capacity change from 0 to 1024 [ 288.049101][ T376] ======================================================= [ 288.049101][ T376] WARNING: The mand mount option has been deprecated and [ 288.049101][ T376] and is ignored by this kernel. Remove the mand [ 288.049101][ T376] option from the mount to silence this warning. [ 288.049101][ T376] ======================================================= [ 288.084478][ T376] EXT4-fs: Ignoring removed oldalloc option [ 288.090874][ T376] EXT4-fs: Ignoring removed orlov option [ 288.108472][ T376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.145935][ C0] sched: RT throttling activated [ 303.105398][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.113085][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.120797][ T382] device bridge_slave_0 entered promiscuous mode [ 303.127920][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.134943][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.142564][ T382] device bridge_slave_1 entered promiscuous mode [ 303.181069][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.188132][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.195389][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.202433][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.225514][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.233058][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.242101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.250357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.268163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.276647][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.283672][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.291266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.300439][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.307495][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.314931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.323077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.340009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.352764][ T382] device veth0_vlan entered promiscuous mode [ 303.359257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.368439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.375888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.390847][ T382] device veth1_macvtap entered promiscuous mode [ 303.397970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.410541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.432255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/11 14:13:54 executed programs: 3 [ 303.459511][ T393] loop3: detected capacity change from 0 to 1024 [ 303.466317][ T393] EXT4-fs: Ignoring removed oldalloc option [ 303.472223][ T393] EXT4-fs: Ignoring removed orlov option [ 303.503028][ T393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 403.515879][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 403.523031][ C0] (detected by 0, t=10002 jiffies, g=1469, q=1011 ncpus=2) [ 403.530310][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294977541-4294967538), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 403.543677][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g1469 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 403.554859][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 403.564813][ C0] rcu: RCU grace-period kthread stack dump: [ 403.570688][ C0] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 403.581651][ C0] Call Trace: [ 403.585102][ C0] [ 403.588027][ C0] __schedule+0xb87/0x14e0 [ 403.592666][ C0] ? __sched_text_start+0x8/0x8 [ 403.597522][ C0] schedule+0xbd/0x170 [ 403.601657][ C0] schedule_timeout+0x12c/0x2e0 [ 403.606534][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 403.611910][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 403.617374][ C0] ? __cfi_process_timeout+0x10/0x10 [ 403.622782][ C0] ? prepare_to_swait_event+0x308/0x320 [ 403.628367][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 403.633258][ C0] ? rcu_gp_init+0xf10/0xf10 [ 403.637848][ C0] rcu_gp_kthread+0x95/0x370 [ 403.642434][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 403.647702][ C0] ? set_cpus_allowed_ptr+0x82/0xc0 [ 403.652937][ C0] ? __kasan_check_read+0x11/0x20 [ 403.658050][ C0] ? __kthread_parkme+0x142/0x180 [ 403.663166][ C0] kthread+0x281/0x320 [ 403.667273][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 403.672493][ C0] ? __cfi_kthread+0x10/0x10 [ 403.677083][ C0] ret_from_fork+0x1f/0x30 [ 403.681555][ C0] [ 403.684629][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 403.690952][ C0] Sending NMI from CPU 0 to CPUs 1: [ 403.696155][ C1] NMI backtrace for cpu 1 [ 403.696220][ C1] CPU: 1 PID: 393 Comm: syz.3.18 Not tainted syzkaller #0 [ 403.696235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.696246][ C1] RIP: 0010:kasan_check_range+0x11/0x290 [ 403.696300][ C1] Code: ff c3 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 bf f3 05 3b b0 01 48 85 f6 0f 84 a9 01 00 00 55 48 89 e5 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 f8 49 c1 e8 2f [ 403.696311][ C1] RSP: 0018:ffffc90000a87088 EFLAGS: 00000202 [ 403.696357][ C1] RAX: ffffffff81e20401 RBX: ffff8881171f3000 RCX: ffffffff81e204e7 [ 403.696368][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888117004250 [ 403.696377][ C1] RBP: ffffc90000a87090 R08: 0000000000000000 R09: 0000000000000080 [ 403.696386][ C1] R10: 0000000000000000 R11: 1ffff92000150df8 R12: dffffc0000000000 [ 403.696396][ C1] R13: ffff8881171f33c8 R14: 1ffff11022e3e679 R15: ffff888117004250 [ 403.696406][ C1] FS: 000055555aeb2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 403.696419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.696428][ C1] CR2: 00007f6702db41a8 CR3: 000000010bde5000 CR4: 00000000003506a0 [ 403.696441][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 403.696449][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 403.696457][ C1] Call Trace: [ 403.696462][ C1] [ 403.696469][ C1] __kasan_check_read+0x11/0x20 [ 403.696482][ C1] __ext4_journal_start_sb+0x77/0x4a0 [ 403.696533][ C1] ext4_dirty_inode+0x8f/0x100 [ 403.696592][ C1] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 403.696610][ C1] __mark_inode_dirty+0x203/0x9d0 [ 403.696672][ C1] ext4_xattr_block_set+0x167d/0x3270 [ 403.696736][ C1] ? ext4_xattr_block_find+0x310/0x310 [ 403.696755][ C1] ? ext4_xattr_block_find+0xf0/0x310 [ 403.696774][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 403.696794][ C1] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 403.696812][ C1] ? selinux_inode_init_security+0x67d/0x950 [ 403.696858][ C1] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 403.696874][ C1] ext4_initxattrs+0xa6/0x110 [ 403.696889][ C1] security_inode_init_security+0x28c/0x3a0 [ 403.696926][ C1] ? posix_acl_create+0x118/0x440 [ 403.696966][ C1] ? __cfi_ext4_initxattrs+0x10/0x10 [ 403.696980][ C1] ? __cfi_security_inode_init_security+0x10/0x10 [ 403.696996][ C1] ? dquot_alloc_inode+0x1d3/0x810 [ 403.697035][ C1] ? __cfi_inode_set_flags+0x10/0x10 [ 403.697101][ C1] ? __cfi_ext4_init_acl+0x10/0x10 [ 403.697115][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 403.697132][ C1] ext4_init_security+0x34/0x40 [ 403.697146][ C1] __ext4_new_inode+0x2c29/0x3640 [ 403.697169][ C1] ? __cfi___ext4_new_inode+0x10/0x10 [ 403.697189][ C1] ? dquot_initialize+0x20/0x20 [ 403.697206][ C1] ? ext4_lookup+0x2ce/0x6d0 [ 403.697246][ C1] ext4_create+0x22a/0x460 [ 403.697265][ C1] ? __cfi_ext4_create+0x10/0x10 [ 403.697283][ C1] ? selinux_inode_create+0x22/0x30 [ 403.697301][ C1] ? security_inode_create+0xd2/0x120 [ 403.697315][ C1] ? __cfi_ext4_create+0x10/0x10 [ 403.697332][ C1] path_openat+0x11e3/0x2f50 [ 403.697379][ C1] ? do_filp_open+0x3c0/0x3c0 [ 403.697396][ C1] do_filp_open+0x1c1/0x3c0 [ 403.697410][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 403.697428][ C1] ? alloc_fd+0x4e6/0x590 [ 403.697442][ C1] do_sys_openat2+0x185/0x7e0 [ 403.697481][ C1] ? __se_sys_futex+0x273/0x2e0 [ 403.697527][ C1] ? do_sys_open+0xe0/0xe0 [ 403.697544][ C1] ? __x64_sys_futex+0x100/0x100 [ 403.697556][ C1] ? do_user_addr_fault+0xd36/0x1050 [ 403.697607][ C1] __x64_sys_creat+0x8e/0xb0 [ 403.697625][ C1] x64_sys_call+0x116/0x9a0 [ 403.697641][ C1] do_syscall_64+0x4c/0xa0 [ 403.697696][ C1] ? clear_bhb_loop+0x30/0x80 [ 403.697736][ C1] ? clear_bhb_loop+0x30/0x80 [ 403.697754][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.697773][ C1] RIP: 0033:0x7f3fd958f749 [ 403.697790][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.697800][ C1] RSP: 002b:00007ffd594185c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 403.697814][ C1] RAX: ffffffffffffffda RBX: 00007f3fd97e5fa0 RCX: 00007f3fd958f749 [ 403.697824][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 403.697833][ C1] RBP: 00007f3fd9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.697841][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.697849][ C1] R13: 00007f3fd97e5fa0 R14: 00007f3fd97e5fa0 R15: 0000000000000002 [ 403.697861][ C1] [ 452.135883][ T29] INFO: task kworker/u4:1:10 blocked for more than 125 seconds. [ 452.143636][ T29] Not tainted syzkaller #0 [ 452.148616][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.157378][ T29] task:kworker/u4:1 state:D stack:23200 pid:10 ppid:2 flags:0x00004000 [ 452.166795][ T29] Workqueue: events_unbound linkwatch_event [ 452.172805][ T29] Call Trace: [ 452.176120][ T29] [ 452.179055][ T29] __schedule+0xb87/0x14e0 [ 452.183463][ T29] ? __sched_text_start+0x8/0x8 [ 453.146338][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 453.151950][ T29] ? __kasan_check_write+0x14/0x20 [ 453.157281][ T29] ? kthread_data+0x50/0xc0 [ 453.161977][ T29] ? wq_worker_sleeping+0x64/0x280 [ 453.167251][ T29] schedule+0xbd/0x170 [ 453.171325][ T29] schedule_preempt_disabled+0x13/0x20 [ 453.176813][ T29] __mutex_lock+0x74a/0x16d0 [ 453.181403][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 454.136136][ T29] ? __kasan_check_write+0x14/0x20 [ 454.141270][ T29] ? __switch_to+0x51f/0xe30 [ 454.145996][ T29] ? __cfi___switch_to+0x10/0x10 [ 454.150933][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 454.155887][ T29] __mutex_lock_slowpath+0xe/0x10 [ 454.160956][ T29] mutex_lock+0xf8/0x1a0 [ 454.165192][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 454.170072][ T29] ? __schedule+0xb8f/0x14e0 [ 454.174659][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 454.180244][ T29] rtnl_lock+0x15/0x20 [ 454.184304][ T29] linkwatch_event+0xe/0x60 [ 455.146500][ T29] process_one_work+0x71f/0xc40 [ 455.151725][ T29] worker_thread+0xa29/0x11f0 [ 455.156514][ T29] kthread+0x281/0x320 [ 455.160614][ T29] ? __cfi_worker_thread+0x10/0x10 [ 455.165742][ T29] ? __cfi_kthread+0x10/0x10 [ 455.170352][ T29] ret_from_fork+0x1f/0x30 [ 455.174800][ T29] [ 455.177966][ T29] INFO: task syz-executor:399 blocked for more than 128 seconds. [ 455.185671][ T29] Not tainted syzkaller #0 [ 456.136250][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.145164][ T29] task:syz-executor state:D stack:22720 pid:399 ppid:1 flags:0x00004004 [ 456.154548][ T29] Call Trace: [ 456.157923][ T29] [ 456.160837][ T29] __schedule+0xb87/0x14e0 [ 456.165233][ T29] ? __kasan_check_write+0x14/0x20 [ 456.170400][ T29] ? __sched_text_start+0x8/0x8 [ 456.175258][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 456.181126][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 457.136969][ T29] schedule+0xbd/0x170 [ 457.141085][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 457.146957][ T29] ? kasan_quarantine_put+0x34/0x190 [ 457.152240][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 457.158445][ T29] ? ____kasan_slab_free+0x13d/0x180 [ 457.163761][ T29] ? __kasan_slab_free+0x11/0x20 [ 457.168790][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 457.174530][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 457.179826][ T29] ? __kmem_cache_free+0xb7/0x1b0 [ 457.184845][ T29] ? __kasan_check_write+0x14/0x20 [ 458.146109][ T29] ? kobject_put+0x1bb/0x280 [ 458.150822][ T29] ? __cfi_netdev_queue_release+0x10/0x10 [ 458.156627][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 458.162692][ T29] ? netdev_queue_update_kobjects+0x428/0x470 [ 458.168812][ T29] ? __x64_sys_sendto+0xe5/0x100 [ 458.173821][ T29] ? x64_sys_call+0x83/0x9a0 [ 458.178613][ T29] ? __kasan_check_read+0x11/0x20 [ 458.183650][ T29] netif_set_real_num_tx_queues+0x4c9/0x7f0 [ 459.136543][ T29] veth_newlink+0x874/0xbe0 [ 459.141254][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 459.146391][ T29] ? rtnl_create_link+0x88d/0xb10 [ 459.151458][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 459.156555][ T29] rtnl_newlink+0x14b9/0x2030 [ 459.161230][ T29] ? memcpy+0x56/0x70 [ 459.165195][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 459.170279][ T29] ? selinux_capable+0x29c/0x380 [ 459.175291][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 459.180671][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 459.185517][ T29] ? ns_capable+0x8c/0xf0 [ 460.136454][ T29] ? netlink_net_capable+0x125/0x160 [ 460.141883][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 460.146979][ T29] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 460.151954][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 460.157467][ T29] ? kernel_text_address+0xa0/0xd0 [ 460.162623][ T29] ? __kernel_text_address+0xd/0x30 [ 460.167927][ T29] ? unwind_get_return_address+0x4d/0x90 [ 460.173562][ T29] ? memcpy+0x56/0x70 [ 460.177571][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 460.182940][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 461.135987][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 461.141433][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 461.146987][ T29] ? __alloc_skb+0xea/0x4b0 [ 461.151601][ T29] ? avc_has_perm+0x158/0x240 [ 461.156367][ T29] ? __alloc_skb+0x236/0x4b0 [ 461.160950][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 461.165988][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 461.171021][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 461.176552][ T29] netlink_rcv_skb+0x1f2/0x440 [ 461.181317][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 462.136284][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 462.141778][ T29] ? __netlink_lookup+0x387/0x3b0 [ 462.146869][ T29] rtnetlink_rcv+0x1c/0x20 [ 462.151310][ T29] netlink_unicast+0x8ab/0xa30 [ 462.156142][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 462.160941][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 462.166242][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 462.171544][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 462.177165][ T29] __sys_sendto+0x464/0x5e0 [ 462.181664][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 463.137030][ T29] ? errseq_sample+0x44/0x70 [ 463.141765][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 463.147408][ T29] ? xfd_validate_state+0x70/0x150 [ 463.152595][ T29] __x64_sys_sendto+0xe5/0x100 [ 463.157749][ T29] x64_sys_call+0x83/0x9a0 [ 463.162157][ T29] do_syscall_64+0x4c/0xa0 [ 463.166582][ T29] ? clear_bhb_loop+0x30/0x80 [ 463.171258][ T29] ? clear_bhb_loop+0x30/0x80 [ 463.175974][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.181970][ T29] RIP: 0033:0x7ff015f91583 [ 464.135996][ T29] RSP: 002b:00007ffede680bc8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 464.144549][ T29] RAX: ffffffffffffffda RBX: 00007ff016d14620 RCX: 00007ff015f91583 [ 464.152558][ T29] RDX: 000000000000002c RSI: 00007ff016d14670 RDI: 0000000000000003 [ 464.160579][ T29] RBP: 0000000000000001 R08: 00007ffede680be4 R09: 000000000000000c [ 464.168601][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 464.176633][ T29] R13: 0000000000000000 R14: 00007ff016d14670 R15: 0000000000000000 [ 464.184634][ T29] [ 465.136516][ T29] NMI backtrace for cpu 0 [ 465.140866][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 465.148176][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.158218][ T29] Call Trace: [ 465.161487][ T29] [ 465.164399][ T29] __dump_stack+0x21/0x24 [ 465.168719][ T29] dump_stack_lvl+0xee/0x150 [ 465.173292][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 465.178353][ T29] dump_stack+0x15/0x24 [ 465.182515][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 465.187517][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 465.193055][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 465.198499][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 465.203421][ T29] ? memcpy+0x56/0x70 [ 465.207392][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 465.213407][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 465.219370][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 465.225256][ T29] watchdog+0xd44/0xe80 [ 465.229473][ T29] ? __cfi_watchdog+0x10/0x10 [ 465.234133][ T29] ? __kasan_check_read+0x11/0x20 [ 465.239178][ T29] ? __kthread_parkme+0x142/0x180 [ 465.244199][ T29] kthread+0x281/0x320 [ 465.248256][ T29] ? __cfi_watchdog+0x10/0x10 [ 465.252925][ T29] ? __cfi_kthread+0x10/0x10 [ 465.257501][ T29] ret_from_fork+0x1f/0x30 [ 465.261914][ T29] [ 465.265013][ T29] Sending NMI from CPU 0 to CPUs 1: [ 465.270241][ C1] NMI backtrace for cpu 1 [ 465.270252][ C1] CPU: 1 PID: 393 Comm: syz.3.18 Not tainted syzkaller #0 [ 465.270266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.270275][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 465.270303][ C1] Code: 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 48 8b 45 08 65 48 8b 0d f0 43 92 7e 65 8b 15 f1 43 92 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 [ 465.270314][ C1] RSP: 0018:ffffc90000a870f0 EFLAGS: 00000203 [ 465.270327][ C1] RAX: ffffffff81e93b16 RBX: ffff888123606858 RCX: ffff888117265100 [ 465.270338][ C1] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 465.270347][ C1] RBP: ffffc90000a870f0 R08: dffffc0000000000 R09: ffffed1022e0084b [ 465.270358][ C1] R10: ffffed1022e0084b R11: 1ffff11022e0084a R12: dffffc0000000000 [ 465.270368][ C1] R13: ffff888123606858 R14: 0000000000000002 R15: ffff888117004050 [ 465.270378][ C1] FS: 000055555aeb2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 465.270390][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.270400][ C1] CR2: 00007ffd512decf8 CR3: 000000010bde5000 CR4: 00000000003506a0 [ 465.270413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.270421][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.270430][ C1] Call Trace: [ 465.270435][ C1] [ 465.270441][ C1] ext4_dirty_inode+0xa6/0x100 [ 465.270461][ C1] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 465.270479][ C1] __mark_inode_dirty+0x203/0x9d0 [ 465.270495][ C1] ext4_xattr_block_set+0x186e/0x3270 [ 465.270520][ C1] ? ext4_xattr_block_find+0x310/0x310 [ 465.270539][ C1] ? ext4_xattr_block_find+0xf0/0x310 [ 465.270557][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 465.270578][ C1] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 465.270596][ C1] ? selinux_inode_init_security+0x67d/0x950 [ 465.270614][ C1] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 465.270629][ C1] ext4_initxattrs+0xa6/0x110 [ 465.270644][ C1] security_inode_init_security+0x28c/0x3a0 [ 465.270659][ C1] ? posix_acl_create+0x118/0x440 [ 465.270678][ C1] ? __cfi_ext4_initxattrs+0x10/0x10 [ 465.270693][ C1] ? __cfi_security_inode_init_security+0x10/0x10 [ 465.270709][ C1] ? dquot_alloc_inode+0x1d3/0x810 [ 465.270726][ C1] ? __cfi_inode_set_flags+0x10/0x10 [ 465.270745][ C1] ? __cfi_ext4_init_acl+0x10/0x10 [ 465.270759][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 465.270775][ C1] ext4_init_security+0x34/0x40 [ 465.270789][ C1] __ext4_new_inode+0x2c29/0x3640 [ 465.270820][ C1] ? __cfi___ext4_new_inode+0x10/0x10 [ 465.270839][ C1] ? dquot_initialize+0x20/0x20 [ 465.270856][ C1] ? ext4_lookup+0x2ce/0x6d0 [ 465.270874][ C1] ext4_create+0x22a/0x460 [ 465.270894][ C1] ? __cfi_ext4_create+0x10/0x10 [ 465.270911][ C1] ? selinux_inode_create+0x22/0x30 [ 465.270925][ C1] ? security_inode_create+0xd2/0x120 [ 465.270940][ C1] ? __cfi_ext4_create+0x10/0x10 [ 465.270965][ C1] path_openat+0x11e3/0x2f50 [ 465.270986][ C1] ? do_filp_open+0x3c0/0x3c0 [ 465.271002][ C1] do_filp_open+0x1c1/0x3c0 [ 465.271017][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 465.271035][ C1] ? alloc_fd+0x4e6/0x590 [ 465.271049][ C1] do_sys_openat2+0x185/0x7e0 [ 465.271066][ C1] ? __se_sys_futex+0x273/0x2e0 [ 465.271080][ C1] ? do_sys_open+0xe0/0xe0 [ 465.271096][ C1] ? __x64_sys_futex+0x100/0x100 [ 465.271109][ C1] ? do_user_addr_fault+0xd36/0x1050 [ 465.271129][ C1] __x64_sys_creat+0x8e/0xb0 [ 465.271147][ C1] x64_sys_call+0x116/0x9a0 [ 465.271163][ C1] do_syscall_64+0x4c/0xa0 [ 465.271178][ C1] ? clear_bhb_loop+0x30/0x80 [ 465.271197][ C1] ? clear_bhb_loop+0x30/0x80 [ 465.271216][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.271234][ C1] RIP: 0033:0x7f3fd958f749 [ 465.271246][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.271256][ C1] RSP: 002b:00007ffd594185c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 465.271269][ C1] RAX: ffffffffffffffda RBX: 00007f3fd97e5fa0 RCX: 00007f3fd958f749 [ 465.271279][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 465.271287][ C1] RBP: 00007f3fd9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.271296][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.271304][ C1] R13: 00007f3fd97e5fa0 R14: 00007f3fd97e5fa0 R15: 0000000000000002 [ 465.271316][ C1] [ 488.135903][ T29] INFO: task kworker/u4:1:10 blocked for more than 161 seconds. [ 488.143577][ T29] Not tainted syzkaller #0 [ 488.148551][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.157362][ T29] task:kworker/u4:1 state:D stack:23200 pid:10 ppid:2 flags:0x00004000 [ 488.166735][ T29] Workqueue: events_unbound linkwatch_event [ 488.172676][ T29] Call Trace: [ 488.175954][ T29] [ 488.178877][ T29] __schedule+0xb87/0x14e0 [ 488.183277][ T29] ? __sched_text_start+0x8/0x8 [ 489.137308][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 489.142951][ T29] ? __kasan_check_write+0x14/0x20 [ 489.148231][ T29] ? kthread_data+0x50/0xc0 [ 489.152788][ T29] ? wq_worker_sleeping+0x64/0x280 [ 489.157933][ T29] schedule+0xbd/0x170 [ 489.161988][ T29] schedule_preempt_disabled+0x13/0x20 [ 489.167486][ T29] __mutex_lock+0x74a/0x16d0 [ 489.172073][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 489.178847][ T29] ? __kasan_check_write+0x14/0x20 [ 489.183957][ T29] ? __switch_to+0x51f/0xe30 [ 490.136064][ T29] ? __cfi___switch_to+0x10/0x10 [ 490.141047][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 490.145960][ T29] __mutex_lock_slowpath+0xe/0x10 [ 490.150984][ T29] mutex_lock+0xf8/0x1a0 [ 490.155219][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 490.160125][ T29] ? __schedule+0xb8f/0x14e0 [ 490.164708][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 490.170336][ T29] rtnl_lock+0x15/0x20 [ 490.174404][ T29] linkwatch_event+0xe/0x60 [ 490.178940][ T29] process_one_work+0x71f/0xc40 [ 490.183781][ T29] worker_thread+0xa29/0x11f0 [ 491.136555][ T29] kthread+0x281/0x320 [ 491.140693][ T29] ? __cfi_worker_thread+0x10/0x10 [ 491.145873][ T29] ? __cfi_kthread+0x10/0x10 [ 491.150465][ T29] ret_from_fork+0x1f/0x30 [ 491.154861][ T29] [ 491.157990][ T29] INFO: task syz-executor:399 blocked for more than 164 seconds. [ 491.165692][ T29] Not tainted syzkaller #0 [ 491.170657][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.179361][ T29] task:syz-executor state:D stack:22720 pid:399 ppid:1 flags:0x00004004 [ 492.145947][ T29] Call Trace: [ 492.149295][ T29] [ 492.152298][ T29] __schedule+0xb87/0x14e0 [ 492.156765][ T29] ? __kasan_check_write+0x14/0x20 [ 492.161882][ T29] ? __sched_text_start+0x8/0x8 [ 492.166765][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 492.172583][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 492.178120][ T29] schedule+0xbd/0x170 [ 492.182226][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 493.136170][ T29] ? kasan_quarantine_put+0x34/0x190 [ 493.141821][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 493.148122][ T29] ? ____kasan_slab_free+0x13d/0x180 [ 493.153412][ T29] ? __kasan_slab_free+0x11/0x20 [ 493.158606][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 493.164158][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 493.169473][ T29] ? __kmem_cache_free+0xb7/0x1b0 [ 493.174492][ T29] ? __kasan_check_write+0x14/0x20 [ 493.179634][ T29] ? kobject_put+0x1bb/0x280 [ 493.184226][ T29] ? __cfi_netdev_queue_release+0x10/0x10 [ 494.136410][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 494.142533][ T29] ? netdev_queue_update_kobjects+0x428/0x470 [ 494.148656][ T29] ? __x64_sys_sendto+0xe5/0x100 [ 494.153584][ T29] ? x64_sys_call+0x83/0x9a0 [ 494.158186][ T29] ? __kasan_check_read+0x11/0x20 [ 494.163196][ T29] netif_set_real_num_tx_queues+0x4c9/0x7f0 [ 494.169131][ T29] veth_newlink+0x874/0xbe0 [ 494.173639][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 494.178683][ T29] ? rtnl_create_link+0x88d/0xb10 [ 494.183701][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 495.146751][ T29] rtnl_newlink+0x14b9/0x2030 [ 495.151509][ T29] ? memcpy+0x56/0x70 [ 495.155480][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 495.160551][ T29] ? selinux_capable+0x29c/0x380 [ 495.165480][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 495.170813][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 495.175659][ T29] ? ns_capable+0x8c/0xf0 [ 495.180058][ T29] ? netlink_net_capable+0x125/0x160 [ 495.185345][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 496.136425][ T29] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 496.141419][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 496.147078][ T29] ? kernel_text_address+0xa0/0xd0 [ 496.152252][ T29] ? __kernel_text_address+0xd/0x30 [ 496.157507][ T29] ? unwind_get_return_address+0x4d/0x90 [ 496.163174][ T29] ? memcpy+0x56/0x70 [ 496.167191][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 496.172564][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 496.178318][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 496.183620][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 497.136893][ T29] ? __alloc_skb+0xea/0x4b0 [ 497.141454][ T29] ? avc_has_perm+0x158/0x240 [ 497.146334][ T29] ? __alloc_skb+0x236/0x4b0 [ 497.150977][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 497.155942][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 497.161060][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 497.166532][ T29] netlink_rcv_skb+0x1f2/0x440 [ 497.171297][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 497.176783][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 497.182069][ T29] ? __netlink_lookup+0x387/0x3b0 [ 498.136197][ T29] rtnetlink_rcv+0x1c/0x20 [ 498.140654][ T29] netlink_unicast+0x8ab/0xa30 [ 498.145682][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 498.150543][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 498.155925][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 498.161273][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 498.166767][ T29] __sys_sendto+0x464/0x5e0 [ 498.171297][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 498.176377][ T29] ? errseq_sample+0x44/0x70 [ 498.180968][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 499.136198][ T29] ? xfd_validate_state+0x70/0x150 [ 499.141473][ T29] __x64_sys_sendto+0xe5/0x100 [ 499.146339][ T29] x64_sys_call+0x83/0x9a0 [ 499.150772][ T29] do_syscall_64+0x4c/0xa0 [ 499.155177][ T29] ? clear_bhb_loop+0x30/0x80 [ 499.160050][ T29] ? clear_bhb_loop+0x30/0x80 [ 499.164773][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.170745][ T29] RIP: 0033:0x7ff015f91583 [ 499.175150][ T29] RSP: 002b:00007ffede680bc8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 499.183677][ T29] RAX: ffffffffffffffda RBX: 00007ff016d14620 RCX: 00007ff015f91583 [ 500.135964][ T29] RDX: 000000000000002c RSI: 00007ff016d14670 RDI: 0000000000000003 [ 500.144145][ T29] RBP: 0000000000000001 R08: 00007ffede680be4 R09: 000000000000000c [ 500.152445][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 500.160453][ T29] R13: 0000000000000000 R14: 00007ff016d14670 R15: 0000000000000000 [ 500.168481][ T29] [ 500.171503][ T29] NMI backtrace for cpu 0 [ 500.175798][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 500.182963][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.192996][ T29] Call Trace: [ 500.196266][ T29] [ 500.199195][ T29] __dump_stack+0x21/0x24 [ 500.203520][ T29] dump_stack_lvl+0xee/0x150 [ 500.208099][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 500.213113][ T29] dump_stack+0x15/0x24 [ 500.217255][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 500.222182][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 500.227730][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 500.233177][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 500.238110][ T29] ? memcpy+0x56/0x70 [ 500.242076][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 500.248042][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 500.254015][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 500.259901][ T29] watchdog+0xd44/0xe80 [ 500.264056][ T29] ? __cfi_watchdog+0x10/0x10 [ 500.268725][ T29] ? __kasan_check_read+0x11/0x20 [ 500.273737][ T29] ? __kthread_parkme+0x142/0x180 [ 500.278748][ T29] kthread+0x281/0x320 [ 500.282806][ T29] ? __cfi_watchdog+0x10/0x10 [ 500.287512][ T29] ? __cfi_kthread+0x10/0x10 [ 500.292094][ T29] ret_from_fork+0x1f/0x30 [ 500.296509][ T29] [ 500.299611][ T29] Sending NMI from CPU 0 to CPUs 1: [ 500.304805][ C1] NMI backtrace for cpu 1 [ 500.304813][ C1] CPU: 1 PID: 393 Comm: syz.3.18 Not tainted syzkaller #0 [ 500.304827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.304835][ C1] RIP: 0010:kasan_check_range+0x6c/0x290 [ 500.304858][ C1] Code: c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 <4d> 85 f6 0f 84 39 01 00 00 48 f7 d3 4c 01 db 41 80 39 00 0f 85 c2 [ 500.304869][ C1] RSP: 0018:ffffc90000a86fd8 EFLAGS: 00000283 [ 500.304882][ C1] RAX: 1ffff11022e3e601 RBX: 1ffff11022e0084a RCX: ffffffff81e92f32 [ 500.304893][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888117004250 [ 500.304902][ C1] RBP: ffffc90000a86ff0 R08: dffffc0000000000 R09: ffffed1022e0084a [ 500.304912][ C1] R10: ffffed1022e0084b R11: 1ffff11022e0084a R12: ffff888123606858 [ 500.304923][ C1] R13: ffff8881171f33c8 R14: 0000000000000001 R15: dffffc0000000001 [ 500.304933][ C1] FS: 000055555aeb2500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 500.304945][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.304955][ C1] CR2: 00007ffd512decf8 CR3: 000000010bde5000 CR4: 00000000003506a0 [ 500.304967][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.304975][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 500.304984][ C1] Call Trace: [ 500.304988][ C1] [ 500.304993][ C1] __kasan_check_read+0x11/0x20 [ 500.305006][ C1] ext4_reserve_inode_write+0x92/0x2e0 [ 500.305027][ C1] __ext4_mark_inode_dirty+0xb2/0x600 [ 500.305045][ C1] ext4_dirty_inode+0xbd/0x100 [ 500.305062][ C1] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 500.305080][ C1] __mark_inode_dirty+0x203/0x9d0 [ 500.305096][ C1] ext4_xattr_block_set+0x167d/0x3270 [ 500.305120][ C1] ? ext4_xattr_block_find+0x310/0x310 [ 500.305139][ C1] ? ext4_xattr_block_find+0xf0/0x310 [ 500.305157][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 500.305178][ C1] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 500.305196][ C1] ? selinux_inode_init_security+0x67d/0x950 [ 500.305213][ C1] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 500.305228][ C1] ext4_initxattrs+0xa6/0x110 [ 500.305243][ C1] security_inode_init_security+0x28c/0x3a0 [ 500.305258][ C1] ? posix_acl_create+0x118/0x440 [ 500.305276][ C1] ? __cfi_ext4_initxattrs+0x10/0x10 [ 500.305291][ C1] ? __cfi_security_inode_init_security+0x10/0x10 [ 500.305307][ C1] ? dquot_alloc_inode+0x1d3/0x810 [ 500.305323][ C1] ? __cfi_inode_set_flags+0x10/0x10 [ 500.305342][ C1] ? __cfi_ext4_init_acl+0x10/0x10 [ 500.305355][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 500.305372][ C1] ext4_init_security+0x34/0x40 [ 500.305386][ C1] __ext4_new_inode+0x2c29/0x3640 [ 500.305409][ C1] ? __cfi___ext4_new_inode+0x10/0x10 [ 500.305428][ C1] ? dquot_initialize+0x20/0x20 [ 500.305445][ C1] ? ext4_lookup+0x2ce/0x6d0 [ 500.305463][ C1] ext4_create+0x22a/0x460 [ 500.305482][ C1] ? __cfi_ext4_create+0x10/0x10 [ 500.305499][ C1] ? selinux_inode_create+0x22/0x30 [ 500.305513][ C1] ? security_inode_create+0xd2/0x120 [ 500.305528][ C1] ? __cfi_ext4_create+0x10/0x10 [ 500.305545][ C1] path_openat+0x11e3/0x2f50 [ 500.305565][ C1] ? do_filp_open+0x3c0/0x3c0 [ 500.305582][ C1] do_filp_open+0x1c1/0x3c0 [ 500.305597][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 500.305615][ C1] ? alloc_fd+0x4e6/0x590 [ 500.305629][ C1] do_sys_openat2+0x185/0x7e0 [ 500.305646][ C1] ? __se_sys_futex+0x273/0x2e0 [ 500.305659][ C1] ? do_sys_open+0xe0/0xe0 [ 500.305675][ C1] ? __x64_sys_futex+0x100/0x100 [ 500.305688][ C1] ? do_user_addr_fault+0xd36/0x1050 [ 500.305707][ C1] __x64_sys_creat+0x8e/0xb0 [ 500.305731][ C1] x64_sys_call+0x116/0x9a0 [ 500.305747][ C1] do_syscall_64+0x4c/0xa0 [ 500.305762][ C1] ? clear_bhb_loop+0x30/0x80 [ 500.305781][ C1] ? clear_bhb_loop+0x30/0x80 [ 500.305799][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.305818][ C1] RIP: 0033:0x7f3fd958f749 [ 500.305833][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.305843][ C1] RSP: 002b:00007ffd594185c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 500.305856][ C1] RAX: ffffffffffffffda RBX: 00007f3fd97e5fa0 RCX: 00007f3fd958f749 [ 500.305866][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 500.305875][ C1] RBP: 00007f3fd9613f91 R08: 0000000000000000 R09: 0000000000000000 [ 500.305883][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.305891][ C1] R13: 00007f3fd97e5fa0 R14: 00007f3fd97e5fa0 R15: 0000000000000002 [ 500.305903][ C1] [ 523.136278][ T29] INFO: task kworker/u4:1:10 blocked for more than 196 seconds. [ 523.143962][ T29] Not tainted syzkaller #0 [ 523.149092][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.157776][ T29] task:kworker/u4:1 state:D stack:23200 pid:10 ppid:2 flags:0x00004000 [ 523.167031][ T29] Workqueue: events_unbound linkwatch_event [ 523.172943][ T29] Call Trace: [ 523.176234][ T29] [ 523.179155][ T29] __schedule+0xb87/0x14e0 [ 523.183552][ T29] ? __sched_text_start+0x8/0x8 [ 524.136432][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 524.141675][ T29] ? __kasan_check_write+0x14/0x20 [ 524.146843][ T29] ? kthread_data+0x50/0xc0 [ 524.151333][ T29] ? wq_worker_sleeping+0x64/0x280 [ 524.156455][ T29] schedule+0xbd/0x170 [ 524.160516][ T29] schedule_preempt_disabled+0x13/0x20 [ 524.165999][ T29] __mutex_lock+0x74a/0x16d0 [ 524.170584][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 524.177364][ T29] ? __kasan_check_write+0x14/0x20 [ 524.182556][ T29] ? __switch_to+0x51f/0xe30 [ 525.136155][ T29] ? __cfi___switch_to+0x10/0x10 [ 525.141175][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 525.146145][ T29] __mutex_lock_slowpath+0xe/0x10 [ 525.151183][ T29] mutex_lock+0xf8/0x1a0 [ 525.155505][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 525.160406][ T29] ? __schedule+0xb8f/0x14e0 [ 525.164984][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 525.170560][ T29] rtnl_lock+0x15/0x20 [ 525.174620][ T29] linkwatch_event+0xe/0x60 [ 525.179168][ T29] process_one_work+0x71f/0xc40 [ 525.184012][ T29] worker_thread+0xa29/0x11f0 [ 526.146007][ T29] kthread+0x281/0x320 [ 526.150494][ T29] ? __cfi_worker_thread+0x10/0x10 [ 526.155600][ T29] ? __cfi_kthread+0x10/0x10 [ 526.160270][ T29] ret_from_fork+0x1f/0x30 [ 526.164688][ T29] [ 526.167784][ T29] INFO: task kworker/0:2:314 blocked for more than 137 seconds. [ 526.175403][ T29] Not tainted syzkaller #0 [ 526.180410][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.136165][ T29] task:kworker/0:2 state:D stack:25664 pid:314 ppid:2 flags:0x00004000 [ 527.145532][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 527.152051][ T29] Call Trace: [ 527.155333][ T29] [ 527.158305][ T29] __schedule+0xb87/0x14e0 [ 527.162734][ T29] ? __sched_text_start+0x8/0x8 [ 527.167635][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 527.172831][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 527.178074][ T29] schedule+0xbd/0x170 [ 527.182327][ T29] schedule_preempt_disabled+0x13/0x20 [ 528.135889][ T29] __mutex_lock+0x74a/0x16d0 [ 528.140597][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 528.147511][ T29] __mutex_lock_slowpath+0xe/0x10 [ 528.152562][ T29] mutex_lock+0xf8/0x1a0 [ 528.156870][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 528.161795][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 528.166869][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 528.172425][ T29] ? try_to_wake_up+0x613/0x1220 [ 528.177782][ T29] rtnl_lock+0x15/0x20 [ 528.181952][ T29] addrconf_verify_work+0x19/0x30 [ 529.147063][ T29] process_one_work+0x71f/0xc40 [ 529.151965][ T29] worker_thread+0xa29/0x11f0 [ 529.157229][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 529.162710][ T29] ? __kthread_parkme+0x142/0x180 [ 529.168028][ T29] kthread+0x281/0x320 [ 529.172127][ T29] ? __cfi_worker_thread+0x10/0x10 [ 529.177474][ T29] ? __cfi_kthread+0x10/0x10 [ 529.182605][ T29] ret_from_fork+0x1f/0x30 [ 530.136132][ T29] [ 530.139214][ T29] INFO: task syz-executor:399 blocked for more than 203 seconds. [ 530.147063][ T29] Not tainted syzkaller #0 [ 530.152050][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.160769][ T29] task:syz-executor state:D stack:22720 pid:399 ppid:1 flags:0x00004004 [ 530.170030][ T29] Call Trace: [ 530.173304][ T29] [ 530.176283][ T29] __schedule+0xb87/0x14e0 [ 530.180701][ T29] ? __kasan_check_write+0x14/0x20 [ 530.185791][ T29] ? __sched_text_start+0x8/0x8 [ 531.146748][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 531.152601][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 531.158110][ T29] schedule+0xbd/0x170 [ 531.162175][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 531.167848][ T29] ? kasan_quarantine_put+0x34/0x190 [ 531.173129][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 531.179324][ T29] ? ____kasan_slab_free+0x13d/0x180 [ 531.184601][ T29] ? __kasan_slab_free+0x11/0x20 [ 532.136346][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 532.141949][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 532.147289][ T29] ? __kmem_cache_free+0xb7/0x1b0 [ 532.152388][ T29] ? __kasan_check_write+0x14/0x20 [ 532.157523][ T29] ? kobject_put+0x1bb/0x280 [ 532.162113][ T29] ? __cfi_netdev_queue_release+0x10/0x10 [ 532.167900][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 532.174042][ T29] ? netdev_queue_update_kobjects+0x428/0x470 [ 532.180134][ T29] ? __x64_sys_sendto+0xe5/0x100 [ 532.185066][ T29] ? x64_sys_call+0x83/0x9a0 [ 533.136098][ T29] ? __kasan_check_read+0x11/0x20 [ 533.141206][ T29] netif_set_real_num_tx_queues+0x4c9/0x7f0 [ 533.147192][ T29] veth_newlink+0x874/0xbe0 [ 533.151693][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 533.156813][ T29] ? rtnl_create_link+0x88d/0xb10 [ 533.162097][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 533.167163][ T29] rtnl_newlink+0x14b9/0x2030 [ 533.171837][ T29] ? memcpy+0x56/0x70 [ 533.175810][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 533.180959][ T29] ? selinux_capable+0x29c/0x380 [ 534.136038][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 534.141420][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 534.146306][ T29] ? ns_capable+0x8c/0xf0 [ 534.150640][ T29] ? netlink_net_capable+0x125/0x160 [ 534.155969][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 534.160983][ T29] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 534.165934][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 534.171382][ T29] ? kernel_text_address+0xa0/0xd0 [ 534.176505][ T29] ? __kernel_text_address+0xd/0x30 [ 534.181700][ T29] ? unwind_get_return_address+0x4d/0x90 [ 535.137024][ T29] ? memcpy+0x56/0x70 [ 535.141051][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 535.146488][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 535.152255][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 535.157625][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 535.163186][ T29] ? __alloc_skb+0xea/0x4b0 [ 535.167725][ T29] ? avc_has_perm+0x158/0x240 [ 535.172400][ T29] ? __alloc_skb+0x236/0x4b0 [ 535.177046][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 535.181977][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 536.135978][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 536.141403][ T29] netlink_rcv_skb+0x1f2/0x440 [ 536.146330][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 536.151801][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 536.157170][ T29] ? __netlink_lookup+0x387/0x3b0 [ 536.162199][ T29] rtnetlink_rcv+0x1c/0x20 [ 536.166666][ T29] netlink_unicast+0x8ab/0xa30 [ 536.171432][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 536.176329][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 536.181612][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 537.136609][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 537.142136][ T29] __sys_sendto+0x464/0x5e0 [ 537.146701][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 537.151719][ T29] ? errseq_sample+0x44/0x70 [ 537.156448][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 537.162073][ T29] ? xfd_validate_state+0x70/0x150 [ 537.167222][ T29] __x64_sys_sendto+0xe5/0x100 [ 537.171975][ T29] x64_sys_call+0x83/0x9a0 [ 537.176430][ T29] do_syscall_64+0x4c/0xa0 [ 537.180838][ T29] ? clear_bhb_loop+0x30/0x80 [ 537.185507][ T29] ? clear_bhb_loop+0x30/0x80 [ 538.146033][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.151994][ T29] RIP: 0033:0x7ff015f91583 [ 538.156565][ T29] RSP: 002b:00007ffede680bc8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 538.164986][ T29] RAX: ffffffffffffffda RBX: 00007ff016d14620 RCX: 00007ff015f91583 [ 538.173023][ T29] RDX: 000000000000002c RSI: 00007ff016d14670 RDI: 0000000000000003 [ 538.181011][ T29] RBP: 0000000000000001 R08: 00007ffede680be4 R09: 000000000000000c [ 539.136923][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 539.144936][ T29] R13: 0000000000000000 R14: 00007ff016d14670 R15: 0000000000000000 [ 539.152965][ T29] [ 539.156076][ T29] INFO: task syz-executor:402 blocked for more than 150 seconds. [ 539.163836][ T29] Not tainted syzkaller #0 [ 539.168823][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.177533][ T29] task:syz-executor state:D stack:26224 pid:402 ppid:1 flags:0x00004004 [ 540.136151][ T29] Call Trace: [ 540.139462][ T29] [ 540.142377][ T29] __schedule+0xb87/0x14e0 [ 540.146874][ T29] ? __sched_text_start+0x8/0x8 [ 540.151735][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 540.156887][ T29] ? __kasan_check_write+0x14/0x20 [ 540.162012][ T29] ? trace_contention_begin+0xa0/0xa0 [ 540.167433][ T29] schedule+0xbd/0x170 [ 540.171582][ T29] schedule_preempt_disabled+0x13/0x20 [ 540.177089][ T29] __mutex_lock+0x74a/0x16d0 [ 540.181684][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 541.146147][ T29] ? selinux_capable+0x29c/0x380 [ 541.151156][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 541.156511][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 541.161820][ T29] ? __reset_page_owner+0x190/0x190 [ 541.167116][ T29] ? cap_capable+0x1aa/0x230 [ 541.171755][ T29] __mutex_lock_slowpath+0xe/0x10 [ 541.176821][ T29] mutex_lock+0xf8/0x1a0 [ 541.181056][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 542.136236][ T29] ? ns_capable+0x8c/0xf0 [ 542.140815][ T29] ? netlink_net_capable+0x125/0x160 [ 542.146227][ T29] rtnetlink_rcv_msg+0x8c6/0xcf0 [ 542.151178][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 542.156694][ T29] ? kernel_text_address+0xa0/0xd0 [ 542.161813][ T29] ? __kernel_text_address+0xd/0x30 [ 542.167073][ T29] ? unwind_get_return_address+0x4d/0x90 [ 542.172713][ T29] ? memcpy+0x56/0x70 [ 542.176744][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 542.182121][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 543.136338][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 543.141697][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 543.147250][ T29] ? __alloc_skb+0xea/0x4b0 [ 543.151762][ T29] ? avc_has_perm+0x158/0x240 [ 543.156488][ T29] ? __alloc_skb+0x236/0x4b0 [ 543.161077][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 543.166056][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 543.171083][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 543.176498][ T29] netlink_rcv_skb+0x1f2/0x440 [ 543.181292][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 544.146127][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 544.151446][ T29] ? __netlink_lookup+0x387/0x3b0 [ 544.156570][ T29] rtnetlink_rcv+0x1c/0x20 [ 544.160985][ T29] netlink_unicast+0x8ab/0xa30 [ 544.165737][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 544.170580][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 544.175931][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 544.181386][ T29] __sys_sendto+0x464/0x5e0 [ 545.136233][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 545.141329][ T29] ? do_user_addr_fault+0x9ac/0x1050 [ 545.146685][ T29] __x64_sys_sendto+0xe5/0x100 [ 545.151452][ T29] x64_sys_call+0x83/0x9a0 [ 545.155918][ T29] do_syscall_64+0x4c/0xa0 [ 545.160351][ T29] ? clear_bhb_loop+0x30/0x80 [ 545.165013][ T29] ? clear_bhb_loop+0x30/0x80 [ 545.169761][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.175651][ T29] RIP: 0033:0x7f6702b91583 [ 545.180207][ T29] RSP: 002b:00007ffea7c563b8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 546.135950][ T29] RAX: ffffffffffffffda RBX: 00007f6703914620 RCX: 00007f6702b91583 [ 546.143962][ T29] RDX: 0000000000000028 RSI: 00007f6703914670 RDI: 0000000000000003 [ 546.151995][ T29] RBP: 0000000000000001 R08: 00007ffea7c563d4 R09: 000000000000000c [ 546.160081][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 546.168175][ T29] R13: 0000000000000000 R14: 00007f6703914670 R15: 0000000000000000 [ 546.176233][ T29] [ 546.179256][ T29] NMI backtrace for cpu 1 [ 546.183563][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 546.190736][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.200770][ T29] Call Trace: [ 546.204034][ T29] [ 546.206951][ T29] __dump_stack+0x21/0x24 [ 546.211263][ T29] dump_stack_lvl+0xee/0x150 [ 546.215922][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 546.221025][ T29] dump_stack+0x15/0x24 [ 546.225177][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 546.230141][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 546.235683][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 546.241132][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 546.246057][ T29] ? memcpy+0x56/0x70 [ 546.250028][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.256016][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 546.261986][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 546.267864][ T29] watchdog+0xd44/0xe80 [ 546.272123][ T29] ? __cfi_watchdog+0x10/0x10 [ 546.276888][ T29] ? __kasan_check_read+0x11/0x20 [ 546.281903][ T29] ? __kthread_parkme+0x142/0x180 [ 546.286909][ T29] kthread+0x281/0x320 [ 546.291133][ T29] ? __cfi_watchdog+0x10/0x10 [ 546.295803][ T29] ? __cfi_kthread+0x10/0x10 [ 546.300377][ T29] ret_from_fork+0x1f/0x30 [ 546.304809][ T29] [ 546.307926][ T29] Sending NMI from CPU 1 to CPUs 0: [ 546.313128][ C0] NMI backtrace for cpu 0 [ 546.313138][ C0] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 546.313152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.313160][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x60 [ 546.313186][ C0] Code: fb e8 23 00 00 00 48 8b 3d fc 50 02 06 48 89 de e8 f4 c0 43 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d f0 43 92 7e 65 8b 15 f1 43 92 7e [ 546.313198][ C0] RSP: 0018:ffffc90001757170 EFLAGS: 00000293 [ 546.313211][ C0] RAX: ffffffff81f90953 RBX: 0000000000000010 RCX: 0000000000000000 [ 546.313221][ C0] RDX: ffff888114bf1440 RSI: 000000000000000a RDI: 0000000000000040 [ 546.313230][ C0] RBP: ffffc90001757350 R08: 0000000000000000 R09: ffffed10246b7b51 [ 546.313239][ C0] R10: ffffed10246b7b51 R11: 1ffff110246b7b50 R12: ffff888116cf5d76 [ 546.313250][ C0] R13: ffffc900017573b0 R14: 000000000000000a R15: ffff888111a05f20 [ 546.313259][ C0] FS: 0000555575834500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 546.313272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.313282][ C0] CR2: 000000c006de3010 CR3: 000000012cae0000 CR4: 00000000003506b0 [ 546.313295][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.313302][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.313311][ C0] Call Trace: [ 546.313316][ C0] [ 546.313321][ C0] ? ext4_xattr_block_set+0x1642/0x3270 [ 546.313347][ C0] ? ext4_xattr_block_find+0x310/0x310 [ 546.313366][ C0] ? ext4_xattr_block_find+0xf0/0x310 [ 546.313385][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 546.313406][ C0] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 546.313424][ C0] ? selinux_inode_init_security+0x67d/0x950 [ 546.313440][ C0] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 546.313456][ C0] ext4_initxattrs+0xa6/0x110 [ 546.313471][ C0] security_inode_init_security+0x28c/0x3a0 [ 546.313486][ C0] ? posix_acl_create+0x118/0x440 [ 546.313505][ C0] ? __cfi_ext4_initxattrs+0x10/0x10 [ 546.313519][ C0] ? __cfi_security_inode_init_security+0x10/0x10 [ 546.313535][ C0] ? dquot_alloc_inode+0x1d3/0x810 [ 546.313553][ C0] ? __cfi_inode_set_flags+0x10/0x10 [ 546.313571][ C0] ? __cfi_ext4_init_acl+0x10/0x10 [ 546.313585][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 546.313602][ C0] ext4_init_security+0x34/0x40 [ 546.313616][ C0] __ext4_new_inode+0x2c29/0x3640 [ 546.313639][ C0] ? __cfi___ext4_new_inode+0x10/0x10 [ 546.313658][ C0] ? dquot_initialize+0x20/0x20 [ 546.313675][ C0] ? ext4_lookup+0x2ce/0x6d0 [ 546.313693][ C0] ext4_create+0x22a/0x460 [ 546.313712][ C0] ? __cfi_ext4_create+0x10/0x10 [ 546.313730][ C0] ? selinux_inode_create+0x22/0x30 [ 546.313744][ C0] ? security_inode_create+0xd2/0x120 [ 546.313758][ C0] ? __cfi_ext4_create+0x10/0x10 [ 546.313776][ C0] path_openat+0x11e3/0x2f50 [ 546.313795][ C0] ? do_filp_open+0x3c0/0x3c0 [ 546.313812][ C0] do_filp_open+0x1c1/0x3c0 [ 546.313827][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 546.313845][ C0] ? alloc_fd+0x4e6/0x590 [ 546.313858][ C0] do_sys_openat2+0x185/0x7e0 [ 546.313876][ C0] ? __se_sys_futex+0x273/0x2e0 [ 546.313888][ C0] ? do_sys_open+0xe0/0xe0 [ 546.313910][ C0] ? __x64_sys_futex+0x100/0x100 [ 546.313923][ C0] ? do_user_addr_fault+0xd36/0x1050 [ 546.313942][ C0] __x64_sys_creat+0x8e/0xb0 [ 546.313961][ C0] x64_sys_call+0x116/0x9a0 [ 546.313977][ C0] do_syscall_64+0x4c/0xa0 [ 546.313992][ C0] ? clear_bhb_loop+0x30/0x80 [ 546.314011][ C0] ? clear_bhb_loop+0x30/0x80 [ 546.314029][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.314048][ C0] RIP: 0033:0x7f31cb78f749 [ 546.314060][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.314070][ C0] RSP: 002b:00007ffd4bbf4768 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 546.314083][ C0] RAX: ffffffffffffffda RBX: 00007f31cb9e5fa0 RCX: 00007f31cb78f749 [ 546.314093][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 546.314102][ C0] RBP: 00007f31cb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 546.314110][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.314118][ C0] R13: 00007f31cb9e5fa0 R14: 00007f31cb9e5fa0 R15: 0000000000000002 [ 546.314129][ C0] [ 569.135844][ T29] INFO: task kworker/u4:1:10 blocked for more than 242 seconds. [ 569.143713][ T29] Not tainted syzkaller #0 [ 569.148972][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.157756][ T29] task:kworker/u4:1 state:D stack:23200 pid:10 ppid:2 flags:0x00004000 [ 569.167012][ T29] Workqueue: events_unbound linkwatch_event [ 569.172908][ T29] Call Trace: [ 569.176228][ T29] [ 569.179144][ T29] __schedule+0xb87/0x14e0 [ 569.183542][ T29] ? __sched_text_start+0x8/0x8 [ 570.136018][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 570.141282][ T29] ? __kasan_check_write+0x14/0x20 [ 570.146411][ T29] ? kthread_data+0x50/0xc0 [ 570.150935][ T29] ? wq_worker_sleeping+0x64/0x280 [ 570.156117][ T29] schedule+0xbd/0x170 [ 570.160191][ T29] schedule_preempt_disabled+0x13/0x20 [ 570.165626][ T29] __mutex_lock+0x74a/0x16d0 [ 570.170239][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 570.177039][ T29] ? __kasan_check_write+0x14/0x20 [ 570.182132][ T29] ? __switch_to+0x51f/0xe30 [ 571.136912][ T29] ? __cfi___switch_to+0x10/0x10 [ 571.141905][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 571.146902][ T29] __mutex_lock_slowpath+0xe/0x10 [ 571.152461][ T29] mutex_lock+0xf8/0x1a0 [ 571.156841][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 571.161800][ T29] ? __schedule+0xb8f/0x14e0 [ 571.166476][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 571.172068][ T29] rtnl_lock+0x15/0x20 [ 571.176168][ T29] linkwatch_event+0xe/0x60 [ 571.180677][ T29] process_one_work+0x71f/0xc40 [ 571.185508][ T29] worker_thread+0xa29/0x11f0 [ 572.135892][ T29] kthread+0x281/0x320 [ 572.140028][ T29] ? __cfi_worker_thread+0x10/0x10 [ 572.145216][ T29] ? __cfi_kthread+0x10/0x10 [ 572.149847][ T29] ret_from_fork+0x1f/0x30 [ 572.154260][ T29] [ 572.157302][ T29] INFO: task kworker/1:0:24 blocked for more than 141 seconds. [ 572.164903][ T29] Not tainted syzkaller #0 [ 572.169863][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.178561][ T29] task:kworker/1:0 state:D stack:25664 pid:24 ppid:2 flags:0x00004000 [ 573.138055][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 573.144405][ T29] Call Trace: [ 573.147826][ T29] [ 573.150858][ T29] __schedule+0xb87/0x14e0 [ 573.155276][ T29] ? __sched_text_start+0x8/0x8 [ 573.160172][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 573.165441][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 573.170790][ T29] schedule+0xbd/0x170 [ 573.174910][ T29] schedule_preempt_disabled+0x13/0x20 [ 573.180412][ T29] __mutex_lock+0x74a/0x16d0 [ 573.185046][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 574.135983][ T29] ? __mod_timer+0x856/0xbf0 [ 574.140662][ T29] ? add_timer+0x68/0x80 [ 574.144907][ T29] ? queue_delayed_work_on+0x101/0x150 [ 574.150446][ T29] __mutex_lock_slowpath+0xe/0x10 [ 574.155464][ T29] mutex_lock+0xf8/0x1a0 [ 574.159867][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 574.164711][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 574.169774][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 574.175398][ T29] ? wg_ratelimiter_gc_entries+0x404/0x430 [ 574.181321][ T29] rtnl_lock+0x15/0x20 [ 574.185392][ T29] addrconf_verify_work+0x19/0x30 [ 575.137045][ T29] process_one_work+0x71f/0xc40 [ 575.142069][ T29] worker_thread+0xa29/0x11f0 [ 575.146812][ T29] kthread+0x281/0x320 [ 575.150908][ T29] ? __cfi_worker_thread+0x10/0x10 [ 575.156081][ T29] ? __cfi_kthread+0x10/0x10 [ 575.160825][ T29] ret_from_fork+0x1f/0x30 [ 575.165250][ T29] [ 575.168347][ T29] NMI backtrace for cpu 1 [ 575.172662][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 575.179838][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.189872][ T29] Call Trace: [ 575.193139][ T29] [ 575.196050][ T29] __dump_stack+0x21/0x24 [ 575.200442][ T29] dump_stack_lvl+0xee/0x150 [ 575.205051][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 575.210084][ T29] dump_stack+0x15/0x24 [ 575.214218][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 575.219131][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 575.224655][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 575.230088][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 575.235006][ T29] ? memcpy+0x56/0x70 [ 575.238959][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.244911][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 575.250868][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 575.256734][ T29] watchdog+0xd44/0xe80 [ 575.260872][ T29] ? __cfi_watchdog+0x10/0x10 [ 575.265522][ T29] ? __kasan_check_read+0x11/0x20 [ 575.270517][ T29] ? __kthread_parkme+0x142/0x180 [ 575.275510][ T29] kthread+0x281/0x320 [ 575.279554][ T29] ? __cfi_watchdog+0x10/0x10 [ 575.284215][ T29] ? __cfi_kthread+0x10/0x10 [ 575.288775][ T29] ret_from_fork+0x1f/0x30 [ 575.293195][ T29] [ 575.296260][ T29] Sending NMI from CPU 1 to CPUs 0: [ 575.301465][ C0] NMI backtrace for cpu 0 [ 575.301475][ C0] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 575.301489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.301497][ C0] RIP: 0010:kasan_check_range+0x1af/0x290 [ 575.301522][ C0] Code: 4d 89 d6 4d 8d 56 07 4d 85 f6 4d 0f 49 d6 49 83 e2 f8 4d 29 d6 74 12 41 80 39 00 0f 85 a1 00 00 00 49 ff c1 49 ff ce 75 ee 5b <41> 5e 41 5f 5d c3 84 db 75 61 f7 c3 00 ff 00 00 75 5e f7 c3 00 00 [ 575.301533][ C0] RSP: 0018:ffffc90001756e10 EFLAGS: 00000256 [ 575.301546][ C0] RAX: ffff888123539b01 RBX: 1ffff920002eade4 RCX: ffffffff81e882b0 [ 575.301557][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888123539bd0 [ 575.301567][ C0] RBP: ffffc90001756e20 R08: dffffc0000000000 R09: ffffed10246a737b [ 575.301577][ C0] R10: ffffed10246a737b R11: 1ffff110246a737a R12: ffff888123539bd0 [ 575.301587][ C0] R13: 1ffff11022925e03 R14: 0000000000000001 R15: dffffc0000000001 [ 575.301597][ C0] FS: 0000555575834500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 575.301610][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.301619][ C0] CR2: 00007f1690f15000 CR3: 000000012cae0000 CR4: 00000000003506b0 [ 575.301632][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.301640][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.301648][ C0] Call Trace: [ 575.301653][ C0] [ 575.301660][ C0] __kasan_check_read+0x11/0x20 [ 575.301674][ C0] __ext4_get_inode_loc+0x490/0xdf0 [ 575.301691][ C0] ? __cfi___ext4_handle_dirty_metadata+0x1/0x10 [ 575.301709][ C0] ? ext4_get_inode_loc+0xf0/0xf0 [ 575.301725][ C0] ? mark_page_accessed+0x55/0x70 [ 575.301828][ C0] ? __kasan_check_write+0x14/0x20 [ 575.301840][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 575.301856][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 575.301872][ C0] ext4_reserve_inode_write+0x12a/0x2e0 [ 575.301892][ C0] __ext4_mark_inode_dirty+0xb2/0x600 [ 575.301909][ C0] ext4_dirty_inode+0xbd/0x100 [ 575.301926][ C0] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 575.301943][ C0] __mark_inode_dirty+0x203/0x9d0 [ 575.301960][ C0] ext4_xattr_block_set+0x167d/0x3270 [ 575.301985][ C0] ? ext4_xattr_block_find+0x310/0x310 [ 575.302004][ C0] ? ext4_xattr_block_find+0xf0/0x310 [ 575.302023][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 575.302043][ C0] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 575.302061][ C0] ? selinux_inode_init_security+0x67d/0x950 [ 575.302078][ C0] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 575.302100][ C0] ext4_initxattrs+0xa6/0x110 [ 575.302115][ C0] security_inode_init_security+0x28c/0x3a0 [ 575.302130][ C0] ? posix_acl_create+0x118/0x440 [ 575.302148][ C0] ? __cfi_ext4_initxattrs+0x10/0x10 [ 575.302162][ C0] ? __cfi_security_inode_init_security+0x10/0x10 [ 575.302178][ C0] ? dquot_alloc_inode+0x1d3/0x810 [ 575.302196][ C0] ? __cfi_inode_set_flags+0x10/0x10 [ 575.302214][ C0] ? __cfi_ext4_init_acl+0x10/0x10 [ 575.302228][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 575.302243][ C0] ext4_init_security+0x34/0x40 [ 575.302258][ C0] __ext4_new_inode+0x2c29/0x3640 [ 575.302281][ C0] ? __cfi___ext4_new_inode+0x10/0x10 [ 575.302301][ C0] ? dquot_initialize+0x20/0x20 [ 575.302318][ C0] ? ext4_lookup+0x2ce/0x6d0 [ 575.302336][ C0] ext4_create+0x22a/0x460 [ 575.302354][ C0] ? __cfi_ext4_create+0x10/0x10 [ 575.302372][ C0] ? selinux_inode_create+0x22/0x30 [ 575.302385][ C0] ? security_inode_create+0xd2/0x120 [ 575.302400][ C0] ? __cfi_ext4_create+0x10/0x10 [ 575.302417][ C0] path_openat+0x11e3/0x2f50 [ 575.302437][ C0] ? do_filp_open+0x3c0/0x3c0 [ 575.302454][ C0] do_filp_open+0x1c1/0x3c0 [ 575.302468][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 575.302486][ C0] ? alloc_fd+0x4e6/0x590 [ 575.302500][ C0] do_sys_openat2+0x185/0x7e0 [ 575.302517][ C0] ? __se_sys_futex+0x273/0x2e0 [ 575.302530][ C0] ? do_sys_open+0xe0/0xe0 [ 575.302547][ C0] ? __x64_sys_futex+0x100/0x100 [ 575.302560][ C0] ? do_user_addr_fault+0xd36/0x1050 [ 575.302579][ C0] __x64_sys_creat+0x8e/0xb0 [ 575.302597][ C0] x64_sys_call+0x116/0x9a0 [ 575.302613][ C0] do_syscall_64+0x4c/0xa0 [ 575.302628][ C0] ? clear_bhb_loop+0x30/0x80 [ 575.302647][ C0] ? clear_bhb_loop+0x30/0x80 [ 575.302666][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.302684][ C0] RIP: 0033:0x7f31cb78f749 [ 575.302696][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.302706][ C0] RSP: 002b:00007ffd4bbf4768 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 575.302720][ C0] RAX: ffffffffffffffda RBX: 00007f31cb9e5fa0 RCX: 00007f31cb78f749 [ 575.302730][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 575.302739][ C0] RBP: 00007f31cb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.302747][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.302755][ C0] R13: 00007f31cb9e5fa0 R14: 00007f31cb9e5fa0 R15: 0000000000000002 [ 575.302766][ C0]