Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. 2025/12/12 05:37:04 parsed 1 programs [ 253.852401][ T28] audit: type=1400 audit(1765517824.687:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 253.873203][ T28] audit: type=1400 audit(1765517824.687:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 254.605128][ T28] audit: type=1400 audit(1765517825.437:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 254.606528][ T291] cgroup: Unknown subsys name 'net' [ 254.627810][ T28] audit: type=1400 audit(1765517825.437:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 254.655071][ T28] audit: type=1400 audit(1765517825.467:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 254.655339][ T291] cgroup: Unknown subsys name 'devices' [ 254.772051][ T291] cgroup: Unknown subsys name 'hugetlb' [ 254.777707][ T291] cgroup: Unknown subsys name 'rlimit' [ 254.915030][ T28] audit: type=1400 audit(1765517825.747:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.938209][ T28] audit: type=1400 audit(1765517825.747:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.950056][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 254.958777][ T28] audit: type=1400 audit(1765517825.747:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.987372][ T28] audit: type=1400 audit(1765517825.747:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 255.007671][ T28] audit: type=1400 audit(1765517825.747:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 255.035925][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 255.680955][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 256.247371][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.254458][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.262235][ T336] device bridge_slave_0 entered promiscuous mode [ 256.269072][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.276353][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.284029][ T336] device bridge_slave_1 entered promiscuous mode [ 256.326208][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.333252][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.340523][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.347533][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.364808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.372806][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.380080][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.388844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.397314][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.404362][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.413187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.421396][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.428407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.440178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.449282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.464378][ T336] device veth0_vlan entered promiscuous mode [ 256.470722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.479092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.487250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.494866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.506231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.515261][ T336] device veth1_macvtap entered promiscuous mode [ 256.524397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.534504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.566360][ T336] syz-executor (336) used greatest stack depth: 21568 bytes left 2025/12/12 05:37:07 executed programs: 0 [ 256.846127][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.853323][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.860762][ T365] device bridge_slave_0 entered promiscuous mode [ 256.867482][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.874676][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.882300][ T365] device bridge_slave_1 entered promiscuous mode [ 256.925584][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.932626][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.939869][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.946896][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.971306][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.978596][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.986026][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.993502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.002362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.010560][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.017566][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.032202][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.040366][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.047364][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.058515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.067708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.080924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.095027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.103229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.110779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.118989][ T365] device veth0_vlan entered promiscuous mode [ 257.134271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.143287][ T365] device veth1_macvtap entered promiscuous mode [ 257.152423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.162069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.193980][ T376] loop2: detected capacity change from 0 to 1024 [ 257.201470][ T376] ======================================================= [ 257.201470][ T376] WARNING: The mand mount option has been deprecated and [ 257.201470][ T376] and is ignored by this kernel. Remove the mand [ 257.201470][ T376] option from the mount to silence this warning. [ 257.201470][ T376] ======================================================= [ 257.236746][ T376] EXT4-fs: Ignoring removed oldalloc option [ 257.242690][ T376] EXT4-fs: Ignoring removed orlov option [ 257.251859][ T376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 257.930948][ T43] device bridge_slave_1 left promiscuous mode [ 257.937094][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.945134][ T43] device bridge_slave_0 left promiscuous mode [ 257.951449][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.959518][ T43] device veth1_macvtap left promiscuous mode [ 257.965788][ T43] device veth0_vlan left promiscuous mode [ 258.439939][ C0] sched: RT throttling activated [ 272.253088][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.260478][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.267907][ T382] device bridge_slave_0 entered promiscuous mode [ 272.275096][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.282295][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.289729][ T382] device bridge_slave_1 entered promiscuous mode [ 272.353369][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.360434][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.367713][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.374768][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.398905][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.406462][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.414779][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.422439][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.432210][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.440450][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.447457][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.456000][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.464202][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.471235][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.491769][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.500301][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.513468][ T382] device veth0_vlan entered promiscuous mode [ 272.520888][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.529026][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.536698][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.544521][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.559082][ T382] device veth1_macvtap entered promiscuous mode [ 272.566238][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.579076][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.600265][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/12 05:37:23 executed programs: 3 [ 272.627402][ T393] loop3: detected capacity change from 0 to 1024 [ 272.634119][ T393] EXT4-fs: Ignoring removed oldalloc option [ 272.640074][ T393] EXT4-fs: Ignoring removed orlov option [ 272.660359][ T393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 372.659889][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 372.667075][ C0] (detected by 0, t=10002 jiffies, g=1461, q=1121 ncpus=2) [ 372.674364][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10001 (4294974485-4294964484), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 372.687722][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g1461 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 372.698821][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 372.708777][ C0] rcu: RCU grace-period kthread stack dump: [ 372.714650][ C0] task:rcu_preempt state:R running task stack:28528 pid:14 ppid:2 flags:0x00004000 [ 372.725429][ C0] Call Trace: [ 372.728700][ C0] [ 372.731629][ C0] __schedule+0xb87/0x14e0 [ 372.736163][ C0] ? __sched_text_start+0x8/0x8 [ 372.741010][ C0] schedule+0xbd/0x170 [ 372.745070][ C0] schedule_timeout+0x12c/0x2e0 [ 372.749920][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 372.755282][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 372.760737][ C0] ? __cfi_process_timeout+0x10/0x10 [ 372.766057][ C0] ? prepare_to_swait_event+0x308/0x320 [ 372.771652][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 372.776493][ C0] ? __cfi_dyntick_save_progress_counter+0x10/0x10 [ 372.782986][ C0] ? rcu_gp_init+0xf10/0xf10 [ 372.787567][ C0] rcu_gp_kthread+0x95/0x370 [ 372.792144][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 372.797341][ C0] ? __kasan_check_read+0x11/0x20 [ 372.802383][ C0] ? __kthread_parkme+0x142/0x180 [ 372.807450][ C0] kthread+0x281/0x320 [ 372.811541][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 372.816741][ C0] ? __cfi_kthread+0x10/0x10 [ 372.821320][ C0] ret_from_fork+0x1f/0x30 [ 372.825757][ C0] [ 372.828765][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 372.835074][ C0] Sending NMI from CPU 0 to CPUs 1: [ 372.840278][ C1] NMI backtrace for cpu 1 [ 372.840342][ C1] CPU: 1 PID: 393 Comm: syz.3.18 Not tainted syzkaller #0 [ 372.840358][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.840370][ C1] RIP: 0010:__ext4_handle_dirty_metadata+0x4a/0x800 [ 372.840399][ C1] Code: 7d b8 49 bd 00 00 00 00 00 fc ff df e8 7f fd 8d ff 4c 89 ff be 08 00 00 00 e8 72 79 d2 ff 4c 89 fb 48 c1 eb 03 42 80 3c 2b 00 <74> 08 4c 89 ff e8 ec 76 d2 ff 4d 8b 27 4c 89 e6 48 81 e6 00 20 00 [ 372.840411][ C1] RSP: 0018:ffffc90000b96ee0 EFLAGS: 00000246 [ 372.840424][ C1] RAX: ffffffff81e22c01 RBX: 1ffff110223e6fa4 RCX: ffffffff81e22c4e [ 372.840435][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888111f37d20 [ 372.840445][ C1] RBP: ffffc90000b96f40 R08: dffffc0000000000 R09: ffffed10223e6fa5 [ 372.840455][ C1] R10: ffffed10223e6fa5 R11: 1ffff110223e6fa4 R12: ffff888124338cd8 [ 372.840466][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888111f37d20 [ 372.840476][ C1] FS: 00005555601e4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 372.840489][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.840499][ C1] CR2: 00007f1a8ffc4090 CR3: 000000010a4b9000 CR4: 00000000003506a0 [ 372.840512][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.840520][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.840529][ C1] Call Trace: [ 372.840534][ C1] [ 372.840540][ C1] ext4_mark_iloc_dirty+0x1253/0x1930 [ 372.840580][ C1] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 372.840598][ C1] __ext4_mark_inode_dirty+0x423/0x600 [ 372.840616][ C1] ext4_dirty_inode+0xbd/0x100 [ 372.840633][ C1] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 372.840651][ C1] __mark_inode_dirty+0x203/0x9d0 [ 372.840673][ C1] ext4_xattr_block_set+0x167d/0x3270 [ 372.840698][ C1] ? ext4_xattr_block_find+0x310/0x310 [ 372.840718][ C1] ? ext4_xattr_block_find+0xf0/0x310 [ 372.840737][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 372.840758][ C1] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 372.840776][ C1] ? selinux_inode_init_security+0x67d/0x950 [ 372.840801][ C1] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 372.840817][ C1] ext4_initxattrs+0xa6/0x110 [ 372.840833][ C1] security_inode_init_security+0x28c/0x3a0 [ 372.840848][ C1] ? posix_acl_create+0x118/0x440 [ 372.840867][ C1] ? __cfi_ext4_initxattrs+0x10/0x10 [ 372.840882][ C1] ? __cfi_security_inode_init_security+0x10/0x10 [ 372.840898][ C1] ? dquot_alloc_inode+0x1d3/0x810 [ 372.840916][ C1] ? __cfi_inode_set_flags+0x10/0x10 [ 372.840939][ C1] ? __cfi_ext4_init_acl+0x10/0x10 [ 372.840954][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 372.840971][ C1] ext4_init_security+0x34/0x40 [ 372.840985][ C1] __ext4_new_inode+0x2c29/0x3640 [ 372.841009][ C1] ? __cfi___ext4_new_inode+0x10/0x10 [ 372.841028][ C1] ? dquot_initialize+0x20/0x20 [ 372.841046][ C1] ? ext4_lookup+0x2ce/0x6d0 [ 372.841065][ C1] ext4_create+0x22a/0x460 [ 372.841085][ C1] ? __cfi_ext4_create+0x10/0x10 [ 372.841103][ C1] ? selinux_inode_create+0x22/0x30 [ 372.841117][ C1] ? security_inode_create+0xd2/0x120 [ 372.841132][ C1] ? __cfi_ext4_create+0x10/0x10 [ 372.841150][ C1] path_openat+0x11e3/0x2f50 [ 372.841175][ C1] ? do_filp_open+0x3c0/0x3c0 [ 372.841192][ C1] do_filp_open+0x1c1/0x3c0 [ 372.841208][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 372.841226][ C1] ? alloc_fd+0x4e6/0x590 [ 372.841240][ C1] do_sys_openat2+0x185/0x7e0 [ 372.841258][ C1] ? __se_sys_futex+0x273/0x2e0 [ 372.841285][ C1] ? do_sys_open+0xe0/0xe0 [ 372.841302][ C1] ? __x64_sys_futex+0x100/0x100 [ 372.841315][ C1] ? do_user_addr_fault+0xd36/0x1050 [ 372.841369][ C1] __x64_sys_creat+0x8e/0xb0 [ 372.841388][ C1] x64_sys_call+0x116/0x9a0 [ 372.841404][ C1] do_syscall_64+0x4c/0xa0 [ 372.841433][ C1] ? clear_bhb_loop+0x30/0x80 [ 372.841453][ C1] ? clear_bhb_loop+0x30/0x80 [ 372.841472][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.841491][ C1] RIP: 0033:0x7f17b1f8f749 [ 372.841504][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.841515][ C1] RSP: 002b:00007fffbe7bbe88 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 372.841529][ C1] RAX: ffffffffffffffda RBX: 00007f17b21e5fa0 RCX: 00007f17b1f8f749 [ 372.841539][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 372.841548][ C1] RBP: 00007f17b2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.841557][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.841565][ C1] R13: 00007f17b21e5fa0 R14: 00007f17b21e5fa0 R15: 0000000000000002 [ 372.841577][ C1] [ 432.429931][ T29] INFO: task kworker/u4:4:348 blocked for more than 126 seconds. [ 432.437709][ T29] Not tainted syzkaller #0 [ 432.442857][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.451577][ T29] task:kworker/u4:4 state:D stack:21472 pid:348 ppid:2 flags:0x00004000 [ 432.460830][ T29] Workqueue: events_unbound linkwatch_event [ 432.466756][ T29] Call Trace: [ 432.470173][ T29] [ 432.473104][ T29] __schedule+0xb87/0x14e0 [ 432.477502][ T29] ? __sched_text_start+0x8/0x8 [ 433.430272][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 433.435609][ T29] ? __kasan_check_write+0x14/0x20 [ 433.440808][ T29] ? kthread_data+0x50/0xc0 [ 433.445366][ T29] ? wq_worker_sleeping+0x64/0x280 [ 433.450582][ T29] schedule+0xbd/0x170 [ 433.454740][ T29] schedule_preempt_disabled+0x13/0x20 [ 433.460256][ T29] __mutex_lock+0x74a/0x16d0 [ 433.464840][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 433.471659][ T29] ? __kasan_check_write+0x14/0x20 [ 433.476767][ T29] ? __switch_to+0x51f/0xe30 [ 434.430407][ T29] ? __cfi___switch_to+0x10/0x10 [ 434.435441][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 434.440557][ T29] __mutex_lock_slowpath+0xe/0x10 [ 434.445682][ T29] mutex_lock+0xf8/0x1a0 [ 434.449944][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 434.454841][ T29] ? __schedule+0xb8f/0x14e0 [ 434.459423][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 434.464997][ T29] rtnl_lock+0x15/0x20 [ 434.469057][ T29] linkwatch_event+0xe/0x60 [ 434.473572][ T29] process_one_work+0x71f/0xc40 [ 434.478417][ T29] worker_thread+0xa29/0x11f0 [ 435.430386][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 435.435886][ T29] ? __kthread_parkme+0x142/0x180 [ 435.440978][ T29] kthread+0x281/0x320 [ 435.445083][ T29] ? __cfi_worker_thread+0x10/0x10 [ 435.450244][ T29] ? __cfi_kthread+0x10/0x10 [ 435.454872][ T29] ret_from_fork+0x1f/0x30 [ 435.459283][ T29] [ 435.462323][ T29] INFO: task syz-executor:398 blocked for more than 129 seconds. [ 435.470074][ T29] Not tainted syzkaller #0 [ 435.474997][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.431147][ T29] task:syz-executor state:D stack:23264 pid:398 ppid:1 flags:0x00004004 [ 436.440533][ T29] Call Trace: [ 436.443852][ T29] [ 436.446769][ T29] __schedule+0xb87/0x14e0 [ 436.451193][ T29] ? __kasan_check_write+0x14/0x20 [ 436.456382][ T29] ? __sched_text_start+0x8/0x8 [ 436.461289][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 436.467116][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 436.472656][ T29] schedule+0xbd/0x170 [ 436.476738][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 437.430067][ T29] ? kasan_quarantine_put+0x34/0x190 [ 437.435383][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 437.441591][ T29] ? ____kasan_slab_free+0x13d/0x180 [ 437.446909][ T29] ? __kasan_slab_free+0x11/0x20 [ 437.451906][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 437.457456][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 437.462774][ T29] ? __kmem_cache_free+0xb7/0x1b0 [ 437.467794][ T29] ? __kasan_check_write+0x14/0x20 [ 437.472978][ T29] ? kobject_put+0x1bb/0x280 [ 437.477582][ T29] ? __cfi_netdev_queue_release+0x10/0x10 [ 438.440831][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 438.446943][ T29] ? netdev_queue_update_kobjects+0x428/0x470 [ 438.453070][ T29] ? __x64_sys_sendto+0xe5/0x100 [ 438.458016][ T29] ? x64_sys_call+0x83/0x9a0 [ 438.462634][ T29] ? __kasan_check_read+0x11/0x20 [ 438.467650][ T29] netif_set_real_num_tx_queues+0x4c9/0x7f0 [ 438.473629][ T29] veth_newlink+0x874/0xbe0 [ 438.478156][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 439.430145][ T29] ? rtnl_create_link+0x88d/0xb10 [ 439.435187][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 439.440250][ T29] rtnl_newlink+0x14b9/0x2030 [ 439.444954][ T29] ? memcpy+0x56/0x70 [ 439.448933][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 439.453964][ T29] ? selinux_capable+0x29c/0x380 [ 439.458932][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 439.464268][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 439.469117][ T29] ? ns_capable+0x8c/0xf0 [ 439.473543][ T29] ? netlink_net_capable+0x125/0x160 [ 439.478855][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 440.440620][ T29] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 440.445650][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 440.451161][ T29] ? kernel_text_address+0xa0/0xd0 [ 440.456264][ T29] ? __kernel_text_address+0xd/0x30 [ 440.461492][ T29] ? unwind_get_return_address+0x4d/0x90 [ 440.467119][ T29] ? memcpy+0x56/0x70 [ 440.471137][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 440.476505][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 441.430156][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 441.435496][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 441.441029][ T29] ? __alloc_skb+0xea/0x4b0 [ 441.445537][ T29] ? avc_has_perm+0x158/0x240 [ 441.450251][ T29] ? __alloc_skb+0x236/0x4b0 [ 441.454837][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 441.459750][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 441.464803][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 441.470207][ T29] netlink_rcv_skb+0x1f2/0x440 [ 441.474952][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 442.431353][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 442.436685][ T29] ? __netlink_lookup+0x387/0x3b0 [ 442.441771][ T29] rtnetlink_rcv+0x1c/0x20 [ 442.446221][ T29] netlink_unicast+0x8ab/0xa30 [ 442.451047][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 442.455835][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 442.461134][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 442.466426][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 442.471922][ T29] __sys_sendto+0x464/0x5e0 [ 442.476421][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 443.430102][ T29] ? errseq_sample+0x44/0x70 [ 443.434773][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 443.440397][ T29] ? xfd_validate_state+0x70/0x150 [ 443.445580][ T29] __x64_sys_sendto+0xe5/0x100 [ 443.450348][ T29] x64_sys_call+0x83/0x9a0 [ 443.454760][ T29] do_syscall_64+0x4c/0xa0 [ 443.459155][ T29] ? clear_bhb_loop+0x30/0x80 [ 443.463862][ T29] ? clear_bhb_loop+0x30/0x80 [ 443.468534][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.474433][ T29] RIP: 0033:0x7f9e1af91583 [ 443.478838][ T29] RSP: 002b:00007ffdf3659ec8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 444.431376][ T29] RAX: ffffffffffffffda RBX: 00007f9e1bd14620 RCX: 00007f9e1af91583 [ 444.439377][ T29] RDX: 000000000000002c RSI: 00007f9e1bd14670 RDI: 0000000000000003 [ 444.447410][ T29] RBP: 0000000000000001 R08: 00007ffdf3659ee4 R09: 000000000000000c [ 444.455480][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 444.463477][ T29] R13: 0000000000000000 R14: 00007f9e1bd14670 R15: 0000000000000000 [ 444.471498][ T29] [ 444.474511][ T29] NMI backtrace for cpu 1 [ 444.478808][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 444.485988][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.496035][ T29] Call Trace: [ 444.499302][ T29] [ 444.502229][ T29] __dump_stack+0x21/0x24 [ 444.506565][ T29] dump_stack_lvl+0xee/0x150 [ 444.511199][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 444.516235][ T29] dump_stack+0x15/0x24 [ 444.520416][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 444.525362][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 444.530918][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 444.536377][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 444.541322][ T29] ? memcpy+0x56/0x70 [ 444.545307][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.551353][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 444.557332][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 444.563222][ T29] watchdog+0xd44/0xe80 [ 444.567379][ T29] ? __cfi_watchdog+0x10/0x10 [ 444.572053][ T29] ? __kasan_check_read+0x11/0x20 [ 444.577068][ T29] ? __kthread_parkme+0x142/0x180 [ 444.582088][ T29] kthread+0x281/0x320 [ 444.586162][ T29] ? __cfi_watchdog+0x10/0x10 [ 444.590837][ T29] ? __cfi_kthread+0x10/0x10 [ 444.595422][ T29] ret_from_fork+0x1f/0x30 [ 444.599833][ T29] [ 444.602899][ T29] Sending NMI from CPU 1 to CPUs 0: [ 444.608108][ C0] NMI backtrace for cpu 0 [ 444.608118][ C0] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 444.608132][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.608140][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 444.608166][ C0] Code: 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 48 8b 45 08 65 48 8b 0d f0 43 92 7e 65 8b 15 f1 43 92 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 [ 444.608178][ C0] RSP: 0018:ffffc90000a76f40 EFLAGS: 00000286 [ 444.608191][ C0] RAX: ffffffff81e9158d RBX: ffff8881242662a0 RCX: ffff888110302880 [ 444.608202][ C0] RDX: 0000000080000000 RSI: ffff8881242662a0 RDI: 0000000000000002 [ 444.608212][ C0] RBP: ffffc90000a76f40 R08: ffff888111cc3738 R09: 0000000000000001 [ 444.608228][ C0] R10: ffffed10223986e8 R11: 1ffff110223986e7 R12: ffffc90000a770a0 [ 444.608239][ C0] R13: 0000000000000080 R14: 1ffff1102484cc59 R15: dffffc0000000000 [ 444.608249][ C0] FS: 000055555f958500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 444.608261][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.608275][ C0] CR2: 00007fff7eab7358 CR3: 000000010a410000 CR4: 00000000003506b0 [ 444.608288][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 444.608296][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 444.608305][ C0] Call Trace: [ 444.608309][ C0] [ 444.608314][ C0] ext4_mark_iloc_dirty+0x2d/0x1930 [ 444.608335][ C0] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 444.608353][ C0] ? ext4_reserve_inode_write+0x240/0x2e0 [ 444.608373][ C0] __ext4_mark_inode_dirty+0x423/0x600 [ 444.608390][ C0] ext4_dirty_inode+0xbd/0x100 [ 444.608408][ C0] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 444.608426][ C0] __mark_inode_dirty+0x203/0x9d0 [ 444.608443][ C0] ext4_xattr_block_set+0x186e/0x3270 [ 444.608468][ C0] ? ext4_xattr_block_find+0x310/0x310 [ 444.608487][ C0] ? ext4_xattr_block_find+0xf0/0x310 [ 444.608507][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 444.608529][ C0] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 444.608547][ C0] ? selinux_inode_init_security+0x67d/0x950 [ 444.608564][ C0] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 444.608584][ C0] ext4_initxattrs+0xa6/0x110 [ 444.608599][ C0] security_inode_init_security+0x28c/0x3a0 [ 444.608615][ C0] ? posix_acl_create+0x118/0x440 [ 444.608633][ C0] ? __cfi_ext4_initxattrs+0x10/0x10 [ 444.608648][ C0] ? __cfi_security_inode_init_security+0x10/0x10 [ 444.608664][ C0] ? dquot_alloc_inode+0x1d3/0x810 [ 444.608682][ C0] ? __cfi_inode_set_flags+0x10/0x10 [ 444.608701][ C0] ? __cfi_ext4_init_acl+0x10/0x10 [ 444.608716][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 444.608732][ C0] ext4_init_security+0x34/0x40 [ 444.608747][ C0] __ext4_new_inode+0x2c29/0x3640 [ 444.608771][ C0] ? __cfi___ext4_new_inode+0x10/0x10 [ 444.608791][ C0] ? dquot_initialize+0x20/0x20 [ 444.608809][ C0] ? ext4_lookup+0x2ce/0x6d0 [ 444.608828][ C0] ext4_create+0x22a/0x460 [ 444.608847][ C0] ? __cfi_ext4_create+0x10/0x10 [ 444.608865][ C0] ? selinux_inode_create+0x22/0x30 [ 444.608879][ C0] ? security_inode_create+0xd2/0x120 [ 444.608894][ C0] ? __cfi_ext4_create+0x10/0x10 [ 444.608912][ C0] path_openat+0x11e3/0x2f50 [ 444.608933][ C0] ? do_filp_open+0x3c0/0x3c0 [ 444.608950][ C0] do_filp_open+0x1c1/0x3c0 [ 444.608965][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 444.608983][ C0] ? alloc_fd+0x4e6/0x590 [ 444.608997][ C0] do_sys_openat2+0x185/0x7e0 [ 444.609015][ C0] ? __se_sys_futex+0x273/0x2e0 [ 444.609029][ C0] ? do_sys_open+0xe0/0xe0 [ 444.609046][ C0] ? __x64_sys_futex+0x100/0x100 [ 444.609059][ C0] ? do_user_addr_fault+0xd36/0x1050 [ 444.609079][ C0] __x64_sys_creat+0x8e/0xb0 [ 444.609097][ C0] x64_sys_call+0x116/0x9a0 [ 444.609114][ C0] do_syscall_64+0x4c/0xa0 [ 444.609129][ C0] ? clear_bhb_loop+0x30/0x80 [ 444.609148][ C0] ? clear_bhb_loop+0x30/0x80 [ 444.609168][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.609187][ C0] RIP: 0033:0x7fa67db8f749 [ 444.609199][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.609210][ C0] RSP: 002b:00007ffe3be7cbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 444.609229][ C0] RAX: ffffffffffffffda RBX: 00007fa67dde5fa0 RCX: 00007fa67db8f749 [ 444.609240][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 444.609249][ C0] RBP: 00007fa67dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 444.609258][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.609266][ C0] R13: 00007fa67dde5fa0 R14: 00007fa67dde5fa0 R15: 0000000000000002 [ 444.609278][ C0] [ 467.430115][ T29] INFO: task kworker/u4:4:348 blocked for more than 161 seconds. [ 467.437875][ T29] Not tainted syzkaller #0 [ 467.442869][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.451672][ T29] task:kworker/u4:4 state:D stack:21472 pid:348 ppid:2 flags:0x00004000 [ 467.460923][ T29] Workqueue: events_unbound linkwatch_event [ 467.466826][ T29] Call Trace: [ 467.470107][ T29] [ 467.473032][ T29] __schedule+0xb87/0x14e0 [ 467.477430][ T29] ? __sched_text_start+0x8/0x8 [ 468.430397][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 468.435651][ T29] ? __kasan_check_write+0x14/0x20 [ 468.440838][ T29] ? kthread_data+0x50/0xc0 [ 468.445363][ T29] ? wq_worker_sleeping+0x64/0x280 [ 468.450513][ T29] schedule+0xbd/0x170 [ 468.454574][ T29] schedule_preempt_disabled+0x13/0x20 [ 468.460100][ T29] __mutex_lock+0x74a/0x16d0 [ 468.464702][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 468.471507][ T29] ? __kasan_check_write+0x14/0x20 [ 468.476608][ T29] ? __switch_to+0x51f/0xe30 [ 469.430185][ T29] ? __cfi___switch_to+0x10/0x10 [ 469.435164][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 469.440173][ T29] __mutex_lock_slowpath+0xe/0x10 [ 469.445310][ T29] mutex_lock+0xf8/0x1a0 [ 469.449555][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 469.454435][ T29] ? __schedule+0xb8f/0x14e0 [ 469.459031][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 469.464601][ T29] rtnl_lock+0x15/0x20 [ 469.468672][ T29] linkwatch_event+0xe/0x60 [ 469.473371][ T29] process_one_work+0x71f/0xc40 [ 469.478293][ T29] worker_thread+0xa29/0x11f0 [ 470.430899][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 470.436402][ T29] ? __kthread_parkme+0x142/0x180 [ 470.441491][ T29] kthread+0x281/0x320 [ 470.445720][ T29] ? __cfi_worker_thread+0x10/0x10 [ 470.450870][ T29] ? __cfi_kthread+0x10/0x10 [ 470.455474][ T29] ret_from_fork+0x1f/0x30 [ 470.460034][ T29] [ 470.463054][ T29] INFO: task syz-executor:398 blocked for more than 164 seconds. [ 470.470774][ T29] Not tainted syzkaller #0 [ 470.475789][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.439922][ T29] task:syz-executor state:D stack:23264 pid:398 ppid:1 flags:0x00004004 [ 471.449158][ T29] Call Trace: [ 471.452471][ T29] [ 471.455398][ T29] __schedule+0xb87/0x14e0 [ 471.459795][ T29] ? __kasan_check_write+0x14/0x20 [ 471.464949][ T29] ? __sched_text_start+0x8/0x8 [ 471.469808][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 471.475707][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 472.430111][ T29] schedule+0xbd/0x170 [ 472.434297][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 472.440006][ T29] ? kasan_quarantine_put+0x34/0x190 [ 472.445355][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 472.451562][ T29] ? ____kasan_slab_free+0x13d/0x180 [ 472.456896][ T29] ? __kasan_slab_free+0x11/0x20 [ 472.461894][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 472.467530][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 472.472871][ T29] ? __kmem_cache_free+0xb7/0x1b0 [ 472.477894][ T29] ? __kasan_check_write+0x14/0x20 [ 473.430013][ T29] ? kobject_put+0x1bb/0x280 [ 473.434634][ T29] ? __cfi_netdev_queue_release+0x10/0x10 [ 473.440421][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 473.446494][ T29] ? netdev_queue_update_kobjects+0x428/0x470 [ 473.452608][ T29] ? __x64_sys_sendto+0xe5/0x100 [ 473.457571][ T29] ? x64_sys_call+0x83/0x9a0 [ 473.462197][ T29] ? __kasan_check_read+0x11/0x20 [ 473.467219][ T29] netif_set_real_num_tx_queues+0x4c9/0x7f0 [ 473.473150][ T29] veth_newlink+0x874/0xbe0 [ 473.477656][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 474.440317][ T29] ? rtnl_create_link+0x88d/0xb10 [ 474.445393][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 474.450448][ T29] rtnl_newlink+0x14b9/0x2030 [ 474.455161][ T29] ? memcpy+0x56/0x70 [ 474.459140][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 474.464231][ T29] ? selinux_capable+0x29c/0x380 [ 474.469166][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 474.474491][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 474.479342][ T29] ? ns_capable+0x8c/0xf0 [ 475.430276][ T29] ? netlink_net_capable+0x125/0x160 [ 475.435641][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 475.440735][ T29] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 475.445699][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 475.451210][ T29] ? kernel_text_address+0xa0/0xd0 [ 475.456464][ T29] ? __kernel_text_address+0xd/0x30 [ 475.461739][ T29] ? unwind_get_return_address+0x4d/0x90 [ 475.467392][ T29] ? memcpy+0x56/0x70 [ 475.471427][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 475.476905][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 476.440224][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 476.445641][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 476.451197][ T29] ? __alloc_skb+0xea/0x4b0 [ 476.455727][ T29] ? avc_has_perm+0x158/0x240 [ 476.460473][ T29] ? __alloc_skb+0x236/0x4b0 [ 476.465057][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 476.470033][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 476.475055][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 477.430108][ T29] netlink_rcv_skb+0x1f2/0x440 [ 477.435030][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 477.440601][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 477.445916][ T29] ? __netlink_lookup+0x387/0x3b0 [ 477.451009][ T29] rtnetlink_rcv+0x1c/0x20 [ 477.455448][ T29] netlink_unicast+0x8ab/0xa30 [ 477.460275][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 477.465040][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 477.470378][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 477.475664][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 478.430151][ T29] __sys_sendto+0x464/0x5e0 [ 478.434759][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 478.439878][ T29] ? errseq_sample+0x44/0x70 [ 478.444538][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 478.450142][ T29] ? xfd_validate_state+0x70/0x150 [ 478.455253][ T29] __x64_sys_sendto+0xe5/0x100 [ 478.460057][ T29] x64_sys_call+0x83/0x9a0 [ 478.464483][ T29] do_syscall_64+0x4c/0xa0 [ 478.468877][ T29] ? clear_bhb_loop+0x30/0x80 [ 478.473600][ T29] ? clear_bhb_loop+0x30/0x80 [ 478.478284][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.439934][ T29] RIP: 0033:0x7f9e1af91583 [ 479.444380][ T29] RSP: 002b:00007ffdf3659ec8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 479.452882][ T29] RAX: ffffffffffffffda RBX: 00007f9e1bd14620 RCX: 00007f9e1af91583 [ 479.460907][ T29] RDX: 000000000000002c RSI: 00007f9e1bd14670 RDI: 0000000000000003 [ 479.468874][ T29] RBP: 0000000000000001 R08: 00007ffdf3659ee4 R09: 000000000000000c [ 479.476865][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 480.431049][ T29] R13: 0000000000000000 R14: 00007f9e1bd14670 R15: 0000000000000000 [ 480.439046][ T29] [ 480.442353][ T29] NMI backtrace for cpu 1 [ 480.446681][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 480.453860][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.463890][ T29] Call Trace: [ 480.467190][ T29] [ 480.470109][ T29] __dump_stack+0x21/0x24 [ 480.474441][ T29] dump_stack_lvl+0xee/0x150 [ 480.479009][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 480.484017][ T29] dump_stack+0x15/0x24 [ 480.488174][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 480.493107][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 480.498657][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 480.504123][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 480.509142][ T29] ? memcpy+0x56/0x70 [ 480.513115][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.519100][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 480.525076][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 480.530963][ T29] watchdog+0xd44/0xe80 [ 480.535119][ T29] ? __cfi_watchdog+0x10/0x10 [ 480.539791][ T29] ? __kasan_check_read+0x11/0x20 [ 480.544804][ T29] ? __kthread_parkme+0x142/0x180 [ 480.549818][ T29] kthread+0x281/0x320 [ 480.553877][ T29] ? __cfi_watchdog+0x10/0x10 [ 480.558547][ T29] ? __cfi_kthread+0x10/0x10 [ 480.563127][ T29] ret_from_fork+0x1f/0x30 [ 480.567543][ T29] [ 480.570639][ T29] Sending NMI from CPU 1 to CPUs 0: [ 480.575843][ C0] NMI backtrace for cpu 0 [ 480.575852][ C0] CPU: 0 PID: 376 Comm: syz.2.17 Not tainted syzkaller #0 [ 480.575866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.575874][ C0] RIP: 0010:kasan_check_range+0x2/0x290 [ 480.575897][ C0] Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 bf f3 05 3b b0 01 <48> 85 f6 0f 84 a9 01 00 00 55 48 89 e5 41 57 41 56 53 49 89 f8 49 [ 480.575908][ C0] RSP: 0018:ffffc90000a76ec8 EFLAGS: 00000246 [ 480.575921][ C0] RAX: ffffffff81e22c01 RBX: 1ffff110223986e7 RCX: ffffffff81e22d05 [ 480.575932][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888111cc3738 [ 480.575942][ C0] RBP: ffffc90000a76ed0 R08: dffffc0000000000 R09: ffffed10223986e8 [ 480.575952][ C0] R10: ffffed10223986e8 R11: 1ffff110223986e7 R12: 0000000000004000 [ 480.575963][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888111cc3738 [ 480.575973][ C0] FS: 000055555f958500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 480.575986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.575996][ C0] CR2: 00007effef915000 CR3: 000000010a410000 CR4: 00000000003506b0 [ 480.576009][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.576017][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.576026][ C0] Call Trace: [ 480.576030][ C0] [ 480.576035][ C0] ? __kasan_check_read+0x11/0x20 [ 480.576048][ C0] __ext4_handle_dirty_metadata+0xf5/0x800 [ 480.576066][ C0] ext4_mark_iloc_dirty+0x1253/0x1930 [ 480.576085][ C0] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 480.576104][ C0] __ext4_mark_inode_dirty+0x423/0x600 [ 480.576121][ C0] ext4_dirty_inode+0xbd/0x100 [ 480.576139][ C0] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 480.576157][ C0] __mark_inode_dirty+0x203/0x9d0 [ 480.576174][ C0] ext4_xattr_block_set+0x167d/0x3270 [ 480.576199][ C0] ? ext4_xattr_block_find+0x310/0x310 [ 480.576219][ C0] ? ext4_xattr_block_find+0xf0/0x310 [ 480.576238][ C0] ext4_xattr_set_handle+0xbd5/0x12b0 [ 480.576260][ C0] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 480.576278][ C0] ? selinux_inode_init_security+0x67d/0x950 [ 480.576296][ C0] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 480.576318][ C0] ext4_initxattrs+0xa6/0x110 [ 480.576333][ C0] security_inode_init_security+0x28c/0x3a0 [ 480.576349][ C0] ? posix_acl_create+0x118/0x440 [ 480.576367][ C0] ? __cfi_ext4_initxattrs+0x10/0x10 [ 480.576382][ C0] ? __cfi_security_inode_init_security+0x10/0x10 [ 480.576399][ C0] ? dquot_alloc_inode+0x1d3/0x810 [ 480.576416][ C0] ? __cfi_inode_set_flags+0x10/0x10 [ 480.576434][ C0] ? __cfi_ext4_init_acl+0x10/0x10 [ 480.576449][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 480.576467][ C0] ext4_init_security+0x34/0x40 [ 480.576481][ C0] __ext4_new_inode+0x2c29/0x3640 [ 480.576505][ C0] ? __cfi___ext4_new_inode+0x10/0x10 [ 480.576529][ C0] ? dquot_initialize+0x20/0x20 [ 480.576547][ C0] ? ext4_lookup+0x2ce/0x6d0 [ 480.576566][ C0] ext4_create+0x22a/0x460 [ 480.576586][ C0] ? __cfi_ext4_create+0x10/0x10 [ 480.576604][ C0] ? selinux_inode_create+0x22/0x30 [ 480.576618][ C0] ? security_inode_create+0xd2/0x120 [ 480.576633][ C0] ? __cfi_ext4_create+0x10/0x10 [ 480.576651][ C0] path_openat+0x11e3/0x2f50 [ 480.576672][ C0] ? do_filp_open+0x3c0/0x3c0 [ 480.576689][ C0] do_filp_open+0x1c1/0x3c0 [ 480.576704][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 480.576723][ C0] ? alloc_fd+0x4e6/0x590 [ 480.576737][ C0] do_sys_openat2+0x185/0x7e0 [ 480.576755][ C0] ? __se_sys_futex+0x273/0x2e0 [ 480.576768][ C0] ? do_sys_open+0xe0/0xe0 [ 480.576785][ C0] ? __x64_sys_futex+0x100/0x100 [ 480.576798][ C0] ? do_user_addr_fault+0xd36/0x1050 [ 480.576818][ C0] __x64_sys_creat+0x8e/0xb0 [ 480.576837][ C0] x64_sys_call+0x116/0x9a0 [ 480.576853][ C0] do_syscall_64+0x4c/0xa0 [ 480.576869][ C0] ? clear_bhb_loop+0x30/0x80 [ 480.576888][ C0] ? clear_bhb_loop+0x30/0x80 [ 480.576907][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.576926][ C0] RIP: 0033:0x7fa67db8f749 [ 480.576938][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.576949][ C0] RSP: 002b:00007ffe3be7cbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 480.576963][ C0] RAX: ffffffffffffffda RBX: 00007fa67dde5fa0 RCX: 00007fa67db8f749 [ 480.576973][ C0] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 480.576982][ C0] RBP: 00007fa67dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 480.576991][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.576999][ C0] R13: 00007fa67dde5fa0 R14: 00007fa67dde5fa0 R15: 0000000000000002 [ 480.577012][ C0] [ 503.429915][ T29] INFO: task kworker/u4:4:348 blocked for more than 197 seconds. [ 503.437661][ T29] Not tainted syzkaller #0 [ 503.442621][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.451296][ T29] task:kworker/u4:4 state:D stack:21472 pid:348 ppid:2 flags:0x00004000 [ 503.460562][ T29] Workqueue: events_unbound linkwatch_event [ 503.466477][ T29] Call Trace: [ 503.469742][ T29] [ 503.472675][ T29] __schedule+0xb87/0x14e0 [ 503.477089][ T29] ? __sched_text_start+0x8/0x8 [ 504.430141][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 504.435546][ T29] ? __kasan_check_write+0x14/0x20 [ 504.440809][ T29] ? kthread_data+0x50/0xc0 [ 504.445348][ T29] ? wq_worker_sleeping+0x64/0x280 [ 504.450532][ T29] schedule+0xbd/0x170 [ 504.454597][ T29] schedule_preempt_disabled+0x13/0x20 [ 504.460091][ T29] __mutex_lock+0x74a/0x16d0 [ 504.464679][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 504.471479][ T29] ? __kasan_check_write+0x14/0x20 [ 504.476588][ T29] ? __switch_to+0x51f/0xe30 [ 505.429994][ T29] ? __cfi___switch_to+0x10/0x10 [ 505.434976][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 505.439955][ T29] __mutex_lock_slowpath+0xe/0x10 [ 505.444994][ T29] mutex_lock+0xf8/0x1a0 [ 505.449291][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 505.454194][ T29] ? __schedule+0xb8f/0x14e0 [ 505.458823][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 505.464386][ T29] rtnl_lock+0x15/0x20 [ 505.468446][ T29] linkwatch_event+0xe/0x60 [ 505.472996][ T29] process_one_work+0x71f/0xc40 [ 505.477895][ T29] worker_thread+0xa29/0x11f0 [ 506.432991][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 506.438491][ T29] ? __kthread_parkme+0x142/0x180 [ 506.443632][ T29] kthread+0x281/0x320 [ 506.447700][ T29] ? __cfi_worker_thread+0x10/0x10 [ 506.452841][ T29] ? __cfi_kthread+0x10/0x10 [ 506.457425][ T29] ret_from_fork+0x1f/0x30 [ 506.461855][ T29] [ 506.464873][ T29] INFO: task syz-executor:398 blocked for more than 200 seconds. [ 506.472582][ T29] Not tainted syzkaller #0 [ 506.477524][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.430162][ T29] task:syz-executor state:D stack:23264 pid:398 ppid:1 flags:0x00004004 [ 507.439742][ T29] Call Trace: [ 507.443074][ T29] [ 507.446064][ T29] __schedule+0xb87/0x14e0 [ 507.450505][ T29] ? __kasan_check_write+0x14/0x20 [ 507.455609][ T29] ? __sched_text_start+0x8/0x8 [ 507.460505][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 507.466314][ T29] ? prepare_to_wait_event+0x40b/0x440 [ 507.471794][ T29] schedule+0xbd/0x170 [ 507.475867][ T29] synchronize_rcu_expedited+0x70e/0x810 [ 508.431245][ T29] ? kasan_quarantine_put+0x34/0x190 [ 508.436564][ T29] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 508.442807][ T29] ? ____kasan_slab_free+0x13d/0x180 [ 508.448283][ T29] ? __kasan_slab_free+0x11/0x20 [ 508.453298][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 508.458901][ T29] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 508.464217][ T29] ? __kmem_cache_free+0xb7/0x1b0 [ 508.469247][ T29] ? __kasan_check_write+0x14/0x20 [ 508.474398][ T29] ? kobject_put+0x1bb/0x280 [ 508.478994][ T29] ? __cfi_netdev_queue_release+0x10/0x10 [ 509.440017][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 509.446168][ T29] ? netdev_queue_update_kobjects+0x428/0x470 [ 509.452341][ T29] ? __x64_sys_sendto+0xe5/0x100 [ 509.457280][ T29] ? x64_sys_call+0x83/0x9a0 [ 509.462003][ T29] ? __kasan_check_read+0x11/0x20 [ 509.467027][ T29] netif_set_real_num_tx_queues+0x4c9/0x7f0 [ 509.472977][ T29] veth_newlink+0x874/0xbe0 [ 509.477475][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 510.430295][ T29] ? rtnl_create_link+0x88d/0xb10 [ 510.435397][ T29] ? __cfi_veth_newlink+0x10/0x10 [ 510.440523][ T29] rtnl_newlink+0x14b9/0x2030 [ 510.445212][ T29] ? memcpy+0x56/0x70 [ 510.449171][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 510.454244][ T29] ? selinux_capable+0x29c/0x380 [ 510.459185][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 510.464559][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 510.469415][ T29] ? ns_capable+0x8c/0xf0 [ 510.473743][ T29] ? netlink_net_capable+0x125/0x160 [ 510.479166][ T29] ? __cfi_rtnl_newlink+0x10/0x10 [ 511.440051][ T29] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 511.445085][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 511.450637][ T29] ? kernel_text_address+0xa0/0xd0 [ 511.455749][ T29] ? __kernel_text_address+0xd/0x30 [ 511.460982][ T29] ? unwind_get_return_address+0x4d/0x90 [ 511.466608][ T29] ? memcpy+0x56/0x70 [ 511.470625][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 511.476000][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 512.430391][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 512.435758][ T29] ? kmem_cache_alloc_node+0x181/0x340 [ 512.441271][ T29] ? __alloc_skb+0xea/0x4b0 [ 512.445778][ T29] ? avc_has_perm+0x158/0x240 [ 512.450511][ T29] ? __alloc_skb+0x236/0x4b0 [ 512.455096][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 512.460066][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 512.465086][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 512.470534][ T29] netlink_rcv_skb+0x1f2/0x440 [ 512.475291][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 513.430117][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 513.435593][ T29] ? __netlink_lookup+0x387/0x3b0 [ 513.440697][ T29] rtnetlink_rcv+0x1c/0x20 [ 513.445113][ T29] netlink_unicast+0x8ab/0xa30 [ 513.449926][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 513.454701][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 513.460015][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 513.465329][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 513.470855][ T29] __sys_sendto+0x464/0x5e0 [ 513.475404][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 514.440490][ T29] ? errseq_sample+0x44/0x70 [ 514.445315][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 514.450963][ T29] ? xfd_validate_state+0x70/0x150 [ 514.456072][ T29] __x64_sys_sendto+0xe5/0x100 [ 514.460865][ T29] x64_sys_call+0x83/0x9a0 [ 514.465276][ T29] do_syscall_64+0x4c/0xa0 [ 514.469674][ T29] ? clear_bhb_loop+0x30/0x80 [ 514.474399][ T29] ? clear_bhb_loop+0x30/0x80 [ 514.479092][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.430067][ T29] RIP: 0033:0x7f9e1af91583 [ 515.434503][ T29] RSP: 002b:00007ffdf3659ec8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 515.442961][ T29] RAX: ffffffffffffffda RBX: 00007f9e1bd14620 RCX: 00007f9e1af91583 [ 515.450990][ T29] RDX: 000000000000002c RSI: 00007f9e1bd14670 RDI: 0000000000000003 [ 515.458956][ T29] RBP: 0000000000000001 R08: 00007ffdf3659ee4 R09: 000000000000000c [ 515.466961][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 515.474941][ T29] R13: 0000000000000000 R14: 00007f9e1bd14670 R15: 0000000000000000 [ 516.432124][ T29] [ 516.435186][ T29] INFO: task syz-executor:400 blocked for more than 147 seconds. [ 516.443097][ T29] Not tainted syzkaller #0 [ 516.448067][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.456749][ T29] task:syz-executor state:D stack:27936 pid:400 ppid:1 flags:0x00004004 [ 516.466020][ T29] Call Trace: [ 516.469332][ T29] [ 516.472275][ T29] __schedule+0xb87/0x14e0 [ 516.476772][ T29] ? arch_stack_walk+0x118/0x150 [ 517.430224][ T29] ? __sched_text_start+0x8/0x8 [ 517.435107][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 517.440256][ T29] ? __kasan_check_write+0x14/0x20 [ 517.445361][ T29] ? trace_contention_begin+0xa0/0xa0 [ 517.450767][ T29] schedule+0xbd/0x170 [ 517.454829][ T29] schedule_preempt_disabled+0x13/0x20 [ 517.460336][ T29] __mutex_lock+0x74a/0x16d0 [ 517.464919][ T29] ? __slab_alloc+0x5e/0xa0 [ 517.469416][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 517.476227][ T29] ? selinux_capable+0x29c/0x380 [ 518.431006][ T29] ? __cfi_selinux_capable+0x10/0x10 [ 518.436337][ T29] ? prep_compound_page+0x1cb/0x4a0 [ 518.441657][ T29] ? prep_new_page+0x3b/0x110 [ 518.446397][ T29] ? cap_capable+0x1aa/0x230 [ 518.451006][ T29] __mutex_lock_slowpath+0xe/0x10 [ 518.456289][ T29] mutex_lock+0xf8/0x1a0 [ 518.460536][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 518.465383][ T29] ? ns_capable+0x8c/0xf0 [ 518.469690][ T29] ? netlink_net_capable+0x125/0x160 [ 518.475063][ T29] rtnetlink_rcv_msg+0x8c6/0xcf0 [ 519.429896][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 519.435400][ T29] ? kernel_text_address+0xa0/0xd0 [ 519.440785][ T29] ? __kernel_text_address+0xd/0x30 [ 519.445995][ T29] ? unwind_get_return_address+0x4d/0x90 [ 519.451644][ T29] ? memcpy+0x56/0x70 [ 519.455659][ T29] ? avc_has_perm_noaudit+0x2f4/0x460 [ 519.461089][ T29] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 519.466949][ T29] ? avc_has_perm+0x158/0x240 [ 519.471649][ T29] ? __alloc_skb+0x236/0x4b0 [ 519.476228][ T29] ? netlink_sendmsg+0x626/0xbc0 [ 520.430247][ T29] ? __cfi_avc_has_perm+0x10/0x10 [ 520.435359][ T29] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 520.440867][ T29] netlink_rcv_skb+0x1f2/0x440 [ 520.445627][ T29] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 520.451124][ T29] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 520.456403][ T29] ? __netlink_lookup+0x387/0x3b0 [ 520.461462][ T29] rtnetlink_rcv+0x1c/0x20 [ 520.465877][ T29] netlink_unicast+0x8ab/0xa30 [ 520.470675][ T29] netlink_sendmsg+0x8aa/0xbc0 [ 520.475432][ T29] ? __cfi_netlink_sendmsg+0x10/0x10 [ 521.430115][ T29] ? security_socket_sendmsg+0x93/0xb0 [ 521.435642][ T29] __sys_sendto+0x464/0x5e0 [ 521.440222][ T29] ? __cfi___sys_sendto+0x10/0x10 [ 521.445269][ T29] ? do_user_addr_fault+0x9ac/0x1050 [ 521.450591][ T29] __x64_sys_sendto+0xe5/0x100 [ 521.455347][ T29] x64_sys_call+0x83/0x9a0 [ 521.459739][ T29] do_syscall_64+0x4c/0xa0 [ 521.464190][ T29] ? clear_bhb_loop+0x30/0x80 [ 521.468863][ T29] ? clear_bhb_loop+0x30/0x80 [ 521.473584][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.479477][ T29] RIP: 0033:0x7f1a8ff91583 [ 522.440700][ T29] RSP: 002b:00007ffd52a73d68 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 522.449127][ T29] RAX: ffffffffffffffda RBX: 00007f1a90d14620 RCX: 00007f1a8ff91583 [ 522.457181][ T29] RDX: 0000000000000028 RSI: 00007f1a90d14670 RDI: 0000000000000003 [ 522.465203][ T29] RBP: 0000000000000001 R08: 00007ffd52a73d84 R09: 000000000000000c [ 522.473202][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 523.429896][ T29] R13: 0000000000000000 R14: 00007f1a90d14670 R15: 0000000000000000 [ 523.437935][ T29] [ 523.440973][ T29] NMI backtrace for cpu 0 [ 523.445294][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 523.452467][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.462505][ T29] Call Trace: [ 523.465763][ T29] [ 523.468672][ T29] __dump_stack+0x21/0x24 [ 523.472985][ T29] dump_stack_lvl+0xee/0x150 [ 523.477587][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 523.482599][ T29] dump_stack+0x15/0x24 [ 523.486737][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 523.491660][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 523.497191][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 523.502630][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 523.507558][ T29] ? memcpy+0x56/0x70 [ 523.511520][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 523.517486][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 523.523446][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 523.529327][ T29] watchdog+0xd44/0xe80 [ 523.533559][ T29] ? __cfi_watchdog+0x10/0x10 [ 523.538217][ T29] ? __kasan_check_read+0x11/0x20 [ 523.543219][ T29] ? __kthread_parkme+0x142/0x180 [ 523.548225][ T29] kthread+0x281/0x320 [ 523.552275][ T29] ? __cfi_watchdog+0x10/0x10 [ 523.556939][ T29] ? __cfi_kthread+0x10/0x10 [ 523.561520][ T29] ret_from_fork+0x1f/0x30 [ 523.565924][ T29] [ 523.569014][ T29] Sending NMI from CPU 0 to CPUs 1: [ 523.574223][ C1] NMI backtrace for cpu 1 [ 523.574232][ C1] CPU: 1 PID: 393 Comm: syz.3.18 Not tainted syzkaller #0 [ 523.574246][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.574254][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 523.574280][ C1] Code: f0 43 92 7e 65 8b 15 f1 43 92 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c [ 523.574291][ C1] RSP: 0018:ffffc90000b96f30 EFLAGS: 00000246 [ 523.574305][ C1] RAX: ffffffff819d702f RBX: ffffea0004a888c0 RCX: ffff888116ff2880 [ 523.574316][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0004a888c0 [ 523.574326][ C1] RBP: ffffc90000b96f30 R08: dffffc0000000000 R09: ffffed102486e076 [ 523.574337][ C1] R10: ffffed102486e076 R11: 1ffff1102486e075 R12: ffff888124370358 [ 523.574348][ C1] R13: ffff888124370348 R14: 0000000000035708 R15: 0000000000000400 [ 523.574358][ C1] FS: 00005555601e4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 523.574371][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.574381][ C1] CR2: 00007f2c12315000 CR3: 000000010a4b9000 CR4: 00000000003506a0 [ 523.574394][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.574402][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.574411][ C1] Call Trace: [ 523.574415][ C1] [ 523.574420][ C1] mark_page_accessed+0xf/0x70 [ 523.574470][ C1] __find_get_block+0xafd/0xee0 [ 523.574506][ C1] ? __cfi___find_get_block+0x10/0x10 [ 523.574523][ C1] __getblk_gfp+0x2e/0x7d0 [ 523.574537][ C1] ? __cfi_wake_up_var+0x10/0x10 [ 523.574559][ C1] ? __kasan_check_write+0x14/0x20 [ 523.574573][ C1] __ext4_sb_bread_gfp+0x76/0x210 [ 523.574589][ C1] ext4_sb_bread+0x28/0x30 [ 523.574601][ C1] ext4_xattr_block_set+0xcd5/0x3270 [ 523.574625][ C1] ? ext4_xattr_block_find+0x310/0x310 [ 523.574645][ C1] ? ext4_xattr_block_find+0xf0/0x310 [ 523.574668][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 523.574690][ C1] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 523.574708][ C1] ? selinux_inode_init_security+0x67d/0x950 [ 523.574725][ C1] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 523.574741][ C1] ext4_initxattrs+0xa6/0x110 [ 523.574756][ C1] security_inode_init_security+0x28c/0x3a0 [ 523.574772][ C1] ? posix_acl_create+0x118/0x440 [ 523.574795][ C1] ? __cfi_ext4_initxattrs+0x10/0x10 [ 523.574810][ C1] ? __cfi_security_inode_init_security+0x10/0x10 [ 523.574827][ C1] ? dquot_alloc_inode+0x1d3/0x810 [ 523.574844][ C1] ? __cfi_inode_set_flags+0x10/0x10 [ 523.574863][ C1] ? __cfi_ext4_init_acl+0x10/0x10 [ 523.574878][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 523.574895][ C1] ext4_init_security+0x34/0x40 [ 523.574909][ C1] __ext4_new_inode+0x2c29/0x3640 [ 523.574933][ C1] ? __cfi___ext4_new_inode+0x10/0x10 [ 523.574954][ C1] ? dquot_initialize+0x20/0x20 [ 523.574971][ C1] ? ext4_lookup+0x2ce/0x6d0 [ 523.574990][ C1] ext4_create+0x22a/0x460 [ 523.575010][ C1] ? __cfi_ext4_create+0x10/0x10 [ 523.575028][ C1] ? selinux_inode_create+0x22/0x30 [ 523.575042][ C1] ? security_inode_create+0xd2/0x120 [ 523.575057][ C1] ? __cfi_ext4_create+0x10/0x10 [ 523.575075][ C1] path_openat+0x11e3/0x2f50 [ 523.575096][ C1] ? do_filp_open+0x3c0/0x3c0 [ 523.575113][ C1] do_filp_open+0x1c1/0x3c0 [ 523.575128][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 523.575147][ C1] ? alloc_fd+0x4e6/0x590 [ 523.575160][ C1] do_sys_openat2+0x185/0x7e0 [ 523.575178][ C1] ? __se_sys_futex+0x273/0x2e0 [ 523.575192][ C1] ? do_sys_open+0xe0/0xe0 [ 523.575209][ C1] ? __x64_sys_futex+0x100/0x100 [ 523.575222][ C1] ? do_user_addr_fault+0xd36/0x1050 [ 523.575242][ C1] __x64_sys_creat+0x8e/0xb0 [ 523.575260][ C1] x64_sys_call+0x116/0x9a0 [ 523.575277][ C1] do_syscall_64+0x4c/0xa0 [ 523.575292][ C1] ? clear_bhb_loop+0x30/0x80 [ 523.575311][ C1] ? clear_bhb_loop+0x30/0x80 [ 523.575331][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.575350][ C1] RIP: 0033:0x7f17b1f8f749 [ 523.575363][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.575374][ C1] RSP: 002b:00007fffbe7bbe88 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 523.575388][ C1] RAX: ffffffffffffffda RBX: 00007f17b21e5fa0 RCX: 00007f17b1f8f749 [ 523.575399][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 523.575408][ C1] RBP: 00007f17b2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 523.575416][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.575425][ C1] R13: 00007f17b21e5fa0 R14: 00007f17b21e5fa0 R15: 0000000000000002 [ 523.575437][ C1] [ 546.429859][ T29] INFO: task kworker/0:0:6 blocked for more than 156 seconds. [ 546.437353][ T29] Not tainted syzkaller #0 [ 546.442463][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.451180][ T29] task:kworker/0:0 state:D stack:28608 pid:6 ppid:2 flags:0x00004000 [ 546.460455][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 546.466718][ T29] Call Trace: [ 546.470024][ T29] [ 546.472943][ T29] __schedule+0xb87/0x14e0 [ 546.477340][ T29] ? __sched_text_start+0x8/0x8 [ 547.430158][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 547.435399][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 547.440728][ T29] schedule+0xbd/0x170 [ 547.444850][ T29] schedule_preempt_disabled+0x13/0x20 [ 547.450389][ T29] __mutex_lock+0x74a/0x16d0 [ 547.455027][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 547.461807][ T29] ? __mod_timer+0x856/0xbf0 [ 547.466403][ T29] ? add_timer+0x68/0x80 [ 547.470643][ T29] ? __kasan_check_write+0x14/0x20 [ 547.475751][ T29] __mutex_lock_slowpath+0xe/0x10 [ 548.430210][ T29] mutex_lock+0xf8/0x1a0 [ 548.434555][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 548.439554][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 548.444641][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 548.450232][ T29] rtnl_lock+0x15/0x20 [ 548.454295][ T29] addrconf_verify_work+0x19/0x30 [ 548.459294][ T29] process_one_work+0x71f/0xc40 [ 548.464164][ T29] worker_thread+0xa29/0x11f0 [ 548.468869][ T29] kthread+0x281/0x320 [ 548.472984][ T29] ? __cfi_worker_thread+0x10/0x10 [ 548.478085][ T29] ? __cfi_kthread+0x10/0x10 [ 549.440183][ T29] ret_from_fork+0x1f/0x30 [ 549.444699][ T29] [ 549.447734][ T29] INFO: task kworker/1:2:346 blocked for more than 159 seconds. [ 549.455411][ T29] Not tainted syzkaller #0 [ 549.460382][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.469131][ T29] task:kworker/1:2 state:D stack:24544 pid:346 ppid:2 flags:0x00004000 [ 549.478418][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 550.430283][ T29] Call Trace: [ 550.433595][ T29] [ 550.436519][ T29] __schedule+0xb87/0x14e0 [ 550.441047][ T29] ? __sched_text_start+0x8/0x8 [ 550.445905][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 550.451042][ T29] ? __kasan_check_write+0x14/0x20 [ 550.456167][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 550.461394][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 550.466588][ T29] schedule+0xbd/0x170 [ 550.470668][ T29] schedule_preempt_disabled+0x13/0x20 [ 550.476122][ T29] __mutex_lock+0x74a/0x16d0 [ 551.430241][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 551.437047][ T29] ? __kasan_check_write+0x14/0x20 [ 551.442219][ T29] ? __switch_to+0x51f/0xe30 [ 551.446855][ T29] ? __cfi___switch_to+0x10/0x10 [ 551.451873][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 551.456759][ T29] __mutex_lock_slowpath+0xe/0x10 [ 551.461826][ T29] mutex_lock+0xf8/0x1a0 [ 551.466090][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 551.470990][ T29] ? __schedule+0xb8f/0x14e0 [ 551.475580][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 552.430359][ T29] rtnl_lock+0x15/0x20 [ 552.434487][ T29] addrconf_verify_work+0x19/0x30 [ 552.439644][ T29] process_one_work+0x71f/0xc40 [ 552.444534][ T29] worker_thread+0xa29/0x11f0 [ 552.449214][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 552.454856][ T29] ? __kthread_parkme+0x142/0x180 [ 552.459934][ T29] kthread+0x281/0x320 [ 552.463995][ T29] ? __cfi_worker_thread+0x10/0x10 [ 552.469080][ T29] ? __cfi_kthread+0x10/0x10 [ 552.473713][ T29] ret_from_fork+0x1f/0x30 [ 552.478127][ T29] [ 553.429944][ T29] INFO: task kworker/u4:4:348 blocked for more than 247 seconds. [ 553.437679][ T29] Not tainted syzkaller #0 [ 553.442717][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.451445][ T29] task:kworker/u4:4 state:D stack:21472 pid:348 ppid:2 flags:0x00004000 [ 553.460729][ T29] Workqueue: events_unbound linkwatch_event [ 553.466627][ T29] Call Trace: [ 553.469943][ T29] [ 553.472864][ T29] __schedule+0xb87/0x14e0 [ 553.477263][ T29] ? __sched_text_start+0x8/0x8 [ 554.431036][ T29] ? __mutex_add_waiter+0x17b/0x270 [ 554.436281][ T29] ? __kasan_check_write+0x14/0x20 [ 554.441496][ T29] ? kthread_data+0x50/0xc0 [ 554.446060][ T29] ? wq_worker_sleeping+0x64/0x280 [ 554.451216][ T29] schedule+0xbd/0x170 [ 554.455392][ T29] schedule_preempt_disabled+0x13/0x20 [ 554.460926][ T29] __mutex_lock+0x74a/0x16d0 [ 554.465553][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 554.472334][ T29] ? __kasan_check_write+0x14/0x20 [ 554.477440][ T29] ? __switch_to+0x51f/0xe30 [ 555.430378][ T29] ? __cfi___switch_to+0x10/0x10 [ 555.435359][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 555.440327][ T29] __mutex_lock_slowpath+0xe/0x10 [ 555.445357][ T29] mutex_lock+0xf8/0x1a0 [ 555.449668][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 555.454606][ T29] ? __schedule+0xb8f/0x14e0 [ 555.459204][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 555.464832][ T29] rtnl_lock+0x15/0x20 [ 555.468904][ T29] linkwatch_event+0xe/0x60 [ 555.473422][ T29] process_one_work+0x71f/0xc40 [ 555.478270][ T29] worker_thread+0xa29/0x11f0 [ 556.431027][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 556.436537][ T29] ? __kthread_parkme+0x142/0x180 [ 556.441685][ T29] kthread+0x281/0x320 [ 556.445759][ T29] ? __cfi_worker_thread+0x10/0x10 [ 556.450899][ T29] ? __cfi_kthread+0x10/0x10 [ 556.455488][ T29] ret_from_fork+0x1f/0x30 [ 556.459967][ T29] [ 556.462992][ T29] NMI backtrace for cpu 0 [ 556.467303][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 556.474478][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.484509][ T29] Call Trace: [ 556.487768][ T29] [ 556.490677][ T29] __dump_stack+0x21/0x24 [ 556.494985][ T29] dump_stack_lvl+0xee/0x150 [ 556.499548][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 556.504546][ T29] dump_stack+0x15/0x24 [ 556.508674][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 556.513589][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 556.519124][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 556.524569][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 556.529496][ T29] ? memcpy+0x56/0x70 [ 556.533448][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 556.539402][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 556.545365][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 556.551244][ T29] watchdog+0xd44/0xe80 [ 556.555378][ T29] ? __cfi_watchdog+0x10/0x10 [ 556.560035][ T29] ? __kasan_check_read+0x11/0x20 [ 556.565030][ T29] ? __kthread_parkme+0x142/0x180 [ 556.570029][ T29] kthread+0x281/0x320 [ 556.574084][ T29] ? __cfi_watchdog+0x10/0x10 [ 556.578740][ T29] ? __cfi_kthread+0x10/0x10 [ 556.583303][ T29] ret_from_fork+0x1f/0x30 [ 556.587698][ T29] [ 556.590740][ T29] Sending NMI from CPU 0 to CPUs 1: [ 556.595934][ C1] NMI backtrace for cpu 1 [ 556.595944][ C1] CPU: 1 PID: 393 Comm: syz.3.18 Not tainted syzkaller #0 [ 556.595959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.595967][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 556.595995][ C1] Code: f0 43 92 7e 65 8b 15 f1 43 92 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 0b 00 00 00 74 2c 8b 91 48 0b 00 00 <83> fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c [ 556.596007][ C1] RSP: 0018:ffffc90000b97148 EFLAGS: 00000246 [ 556.596020][ C1] RAX: ffffffff81f4d416 RBX: 0000000000002000 RCX: ffff888116ff2880 [ 556.596031][ C1] RDX: 0000000000000000 RSI: 0000000000000071 RDI: ffff888117840000 [ 556.596040][ C1] RBP: ffffc90000b97148 R08: dffffc0000000000 R09: ffffed1022eb83ed [ 556.596051][ C1] R10: ffffed1022eb83ed R11: 1ffff11022eb83ec R12: ffff888124370348 [ 556.596062][ C1] R13: ffffc90000b973b0 R14: 0000000000000071 R15: ffff888117840000 [ 556.596072][ C1] FS: 00005555601e4500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 556.596085][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.596095][ C1] CR2: 00007f5730f15000 CR3: 000000010a4b9000 CR4: 00000000003506a0 [ 556.596108][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.596116][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.596125][ C1] Call Trace: [ 556.596130][ C1] [ 556.596135][ C1] ext4_sb_bread+0x16/0x30 [ 556.596150][ C1] ext4_xattr_block_set+0xcd5/0x3270 [ 556.596174][ C1] ? ext4_xattr_block_find+0x310/0x310 [ 556.596193][ C1] ? ext4_xattr_block_find+0xf0/0x310 [ 556.596213][ C1] ext4_xattr_set_handle+0xbd5/0x12b0 [ 556.596239][ C1] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 556.596258][ C1] ? selinux_inode_init_security+0x67d/0x950 [ 556.596275][ C1] ? __cfi_selinux_inode_init_security+0x10/0x10 [ 556.596291][ C1] ext4_initxattrs+0xa6/0x110 [ 556.596306][ C1] security_inode_init_security+0x28c/0x3a0 [ 556.596323][ C1] ? posix_acl_create+0x118/0x440 [ 556.596341][ C1] ? __cfi_ext4_initxattrs+0x10/0x10 [ 556.596356][ C1] ? __cfi_security_inode_init_security+0x10/0x10 [ 556.596373][ C1] ? dquot_alloc_inode+0x1d3/0x810 [ 556.596390][ C1] ? __cfi_inode_set_flags+0x10/0x10 [ 556.596409][ C1] ? __cfi_ext4_init_acl+0x10/0x10 [ 556.596423][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 556.596441][ C1] ext4_init_security+0x34/0x40 [ 556.596455][ C1] __ext4_new_inode+0x2c29/0x3640 [ 556.596480][ C1] ? __cfi___ext4_new_inode+0x10/0x10 [ 556.596500][ C1] ? dquot_initialize+0x20/0x20 [ 556.596518][ C1] ? ext4_lookup+0x2ce/0x6d0 [ 556.596537][ C1] ext4_create+0x22a/0x460 [ 556.596556][ C1] ? __cfi_ext4_create+0x10/0x10 [ 556.596575][ C1] ? selinux_inode_create+0x22/0x30 [ 556.596589][ C1] ? security_inode_create+0xd2/0x120 [ 556.596604][ C1] ? __cfi_ext4_create+0x10/0x10 [ 556.596622][ C1] path_openat+0x11e3/0x2f50 [ 556.596642][ C1] ? do_filp_open+0x3c0/0x3c0 [ 556.596659][ C1] do_filp_open+0x1c1/0x3c0 [ 556.596675][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 556.596693][ C1] ? alloc_fd+0x4e6/0x590 [ 556.596707][ C1] do_sys_openat2+0x185/0x7e0 [ 556.596724][ C1] ? __se_sys_futex+0x273/0x2e0 [ 556.596738][ C1] ? do_sys_open+0xe0/0xe0 [ 556.596754][ C1] ? __x64_sys_futex+0x100/0x100 [ 556.596768][ C1] ? do_user_addr_fault+0xd36/0x1050 [ 556.596788][ C1] __x64_sys_creat+0x8e/0xb0 [ 556.596807][ C1] x64_sys_call+0x116/0x9a0 [ 556.596823][ C1] do_syscall_64+0x4c/0xa0 [ 556.596839][ C1] ? clear_bhb_loop+0x30/0x80 [ 556.596858][ C1] ? clear_bhb_loop+0x30/0x80 [ 556.596877][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.596902][ C1] RIP: 0033:0x7f17b1f8f749 [ 556.596914][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.596924][ C1] RSP: 002b:00007fffbe7bbe88 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 556.596938][ C1] RAX: ffffffffffffffda RBX: 00007f17b21e5fa0 RCX: 00007f17b1f8f749 [ 556.596948][ C1] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 0000200000000000 [ 556.596957][ C1] RBP: 00007f17b2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.596966][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.596974][ C1] R13: 00007f17b21e5fa0 R14: 00007f17b21e5fa0 R15: 0000000000000002 [ 556.596986][ C1]