Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. 2026/05/22 08:14:59 parsed 1 programs [ 171.980443][ T28] audit: type=1400 audit(1779437699.843:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 172.001195][ T28] audit: type=1400 audit(1779437699.843:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.714515][ T28] audit: type=1400 audit(1779437700.573:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 172.715590][ T302] cgroup: Unknown subsys name 'net' [ 172.737197][ T28] audit: type=1400 audit(1779437700.573:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 172.764494][ T28] audit: type=1400 audit(1779437700.603:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 172.764674][ T302] cgroup: Unknown subsys name 'devices' [ 172.881537][ T302] cgroup: Unknown subsys name 'hugetlb' [ 172.887149][ T302] cgroup: Unknown subsys name 'rlimit' [ 173.024272][ T28] audit: type=1400 audit(1779437700.883:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.047704][ T28] audit: type=1400 audit(1779437700.883:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 173.055836][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 173.068573][ T28] audit: type=1400 audit(1779437700.883:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.097017][ T28] audit: type=1400 audit(1779437700.883:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.108196][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 173.117514][ T28] audit: type=1400 audit(1779437700.883:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 173.861274][ T313] request_module fs-gadgetfs succeeded, but still no fs? [ 174.245803][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.285042][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.293250][ T340] device bridge_slave_0 entered promiscuous mode [ 174.374363][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.381656][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.389147][ T340] device bridge_slave_1 entered promiscuous mode [ 174.508492][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.515615][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.522970][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.530024][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.554834][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.562641][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.570093][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.585047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.593648][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.600728][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.608362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.617495][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.624581][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.640453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.648527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.664027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.673045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.681715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.689270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.697592][ T340] device veth0_vlan entered promiscuous mode 2026/05/22 08:15:02 executed programs: 0 [ 174.709447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.721229][ T340] device veth1_macvtap entered promiscuous mode [ 174.730526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.740590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.799950][ T340] syz-executor (340) used greatest stack depth: 21952 bytes left [ 174.946368][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.953647][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.961093][ T374] device bridge_slave_0 entered promiscuous mode [ 174.969810][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.976846][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.984222][ T377] device bridge_slave_0 entered promiscuous mode [ 175.005450][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.012576][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.020073][ T374] device bridge_slave_1 entered promiscuous mode [ 175.028456][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.035578][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.043201][ T376] device bridge_slave_0 entered promiscuous mode [ 175.050009][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.057039][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.064494][ T377] device bridge_slave_1 entered promiscuous mode [ 175.091134][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.098188][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.105685][ T376] device bridge_slave_1 entered promiscuous mode [ 175.121499][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.128553][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.136044][ T380] device bridge_slave_0 entered promiscuous mode [ 175.146424][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.154160][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.161632][ T379] device bridge_slave_0 entered promiscuous mode [ 175.173685][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.180921][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.188363][ T380] device bridge_slave_1 entered promiscuous mode [ 175.208686][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.215794][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.223222][ T379] device bridge_slave_1 entered promiscuous mode [ 175.503717][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.511541][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.518945][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.526500][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.541549][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.549963][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.558055][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.565091][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.572631][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.581009][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.589113][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.596157][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.603624][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.611074][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.640153][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.647832][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.656031][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.664292][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.672800][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.680268][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.688650][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.696940][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.703982][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.711375][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.719756][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.727876][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.734909][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.742316][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.778651][ T376] device veth0_vlan entered promiscuous mode [ 175.787123][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.795823][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.804237][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.811907][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.819398][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.827871][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.836245][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.843294][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.850709][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.858999][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.867191][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.874228][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.881771][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.890127][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.898277][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.905320][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.912758][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.921237][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.929407][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.936455][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.943917][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.951354][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.958700][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.967245][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.975611][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.982662][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.990041][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.997953][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.006426][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.014683][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.021709][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.029027][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.037054][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.045008][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.053076][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.060762][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.068329][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.100519][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.109027][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.117444][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.126131][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.134679][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.142299][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.149895][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.157810][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.166367][ T380] device veth0_vlan entered promiscuous mode [ 176.177467][ T377] device veth0_vlan entered promiscuous mode [ 176.187362][ T379] device veth0_vlan entered promiscuous mode [ 176.194852][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.202915][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.210524][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.217979][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.226278][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.233917][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.247528][ T380] device veth1_macvtap entered promiscuous mode [ 176.260538][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.268665][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.277000][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.285441][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.293664][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.302063][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.310407][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.327953][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.336396][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.344865][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.354403][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.367379][ T379] device veth1_macvtap entered promiscuous mode [ 176.375577][ T374] device veth0_vlan entered promiscuous mode [ 176.382503][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.390099][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.397492][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.405913][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.414431][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.422736][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.431087][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.439172][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.447526][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.458737][ T377] device veth1_macvtap entered promiscuous mode [ 176.473670][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.482099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.490393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.497928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.506357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.516224][ T376] device veth1_macvtap entered promiscuous mode [ 176.552425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.561268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.569951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.583085][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.592725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.601353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.610097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.618559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.629045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.652569][ T374] device veth1_macvtap entered promiscuous mode [ 176.665577][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.685094][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.899512][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 302.906522][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29/1:b..l [ 302.914266][ C1] (detected by 1, t=10003 jiffies, g=1489, q=179 ncpus=2) [ 350.102350][ T29] INFO: task kworker/1:0:24 blocked for more than 156 seconds. [ 352.187705][ T29] Not tainted syzkaller #0 [ 352.202197][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.212989][ T29] task:kworker/1:0 state:D stack:26272 pid:24 ppid:2 flags:0x00004000 [ 352.285654][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 352.305582][ T29] Call Trace: [ 352.419202][ T29] [ 352.433772][ T29] __schedule+0xba6/0x1500 [ 352.545043][ T29] ? release_firmware_map_entry+0x190/0x190 [ 352.594743][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 352.606693][ T29] ? __kasan_check_write+0x14/0x20 [ 352.627056][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 352.646129][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 352.656985][ T29] schedule+0xbd/0x170 [ 352.702213][ T29] schedule_preempt_disabled+0x13/0x20 [ 352.795310][ T29] __mutex_lock+0x82f/0x1790 [ 352.855834][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 352.866144][ T29] ? timer_update_keys+0xb0/0xb0 [ 352.901752][ T29] ? debug_smp_processor_id+0x17/0x20 [ 352.972025][ T29] ? get_nohz_timer_target+0x7a/0x560 [ 352.982027][ T29] ? __schedule+0xbae/0x1500 [ 353.136948][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 353.325260][ T29] ? __mod_timer+0x858/0xc00 [ 353.401064][ T29] __mutex_lock_slowpath+0xe/0x10 [ 353.486695][ T29] mutex_lock+0x10a/0x1b0 [ 353.511754][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 353.519345][ T29] ? add_timer+0x68/0x80 [ 353.549441][ T29] rtnl_lock+0x15/0x20 [ 353.560022][ T29] addrconf_dad_work+0xca/0x14d0 [ 353.617686][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 353.629344][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 353.637305][ T29] ? __kasan_check_write+0x14/0x20 [ 353.691527][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 353.707579][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 353.844936][ T29] process_one_work+0x71f/0xc40 [ 353.992858][ T29] worker_thread+0xa29/0x11e0 [ 354.107201][ T29] ? __kthread_parkme+0x142/0x180 [ 354.126243][ T29] kthread+0x281/0x320 [ 354.174045][ T29] ? __cfi_worker_thread+0x10/0x10 [ 354.199505][ T29] ? __cfi_kthread+0x10/0x10 [ 354.247209][ T29] ret_from_fork+0x1f/0x30 [ 354.412573][ T29] [ 416.733327][ T29] NMI backtrace for cpu 1 [ 416.737732][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 416.744932][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.754988][ T29] Call Trace: [ 416.758270][ T29] [ 416.761200][ T29] __dump_stack+0x21/0x24 [ 416.765534][ T29] dump_stack_lvl+0x110/0x170 [ 416.770221][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 416.775248][ T29] ? preempt_schedule_irq+0xca/0x120 [ 416.780540][ T29] ? preempt_schedule_irq+0xca/0x120 [ 416.785834][ T29] dump_stack+0x15/0x24 [ 416.789990][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 416.794935][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 416.800400][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 416.806473][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.812461][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 416.818450][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 416.824441][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 416.830337][ T29] watchdog+0xd68/0xeb0 [ 416.834498][ T29] ? __cfi_watchdog+0x10/0x10 [ 416.839183][ T29] ? __kasan_check_read+0x11/0x20 [ 416.844215][ T29] ? __kthread_parkme+0x142/0x180 [ 416.849246][ T29] kthread+0x281/0x320 [ 416.853321][ T29] ? __cfi_watchdog+0x10/0x10 [ 416.857996][ T29] ? __cfi_kthread+0x10/0x10 [ 416.862591][ T29] ret_from_fork+0x1f/0x30 [ 416.867014][ T29] [ 416.870110][ T29] Sending NMI from CPU 1 to CPUs 0: [ 416.875343][ C0] NMI backtrace for cpu 0 [ 416.875356][ C0] CPU: 0 PID: 411 Comm: syz.0.17 Not tainted syzkaller #0 [ 416.875372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.875381][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 416.875409][ C0] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 6a 3b 5c 01 5d c3 0f 1f 84 00 00 00 00 [ 416.875423][ C0] RSP: 0018:ffffc90000ad7940 EFLAGS: 00000046 [ 416.875437][ C0] RAX: 000000000000007f RBX: 000000000000007f RCX: 0000000000000838 [ 416.875447][ C0] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000838 [ 416.875457][ C0] RBP: ffffc90000ad7940 R08: ffff888118bf0000 R09: 0000000000000002 [ 416.875468][ C0] R10: 0000000000000000 R11: ffffffff8134c020 R12: 0000000000000020 [ 416.875478][ C0] R13: dffffc0000000000 R14: ffffffff866d6b60 R15: dffffc0000000000 [ 416.875490][ C0] FS: 00007f8e5437d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 416.875505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.875516][ C0] CR2: 0000200000000058 CR3: 00000001347d8000 CR4: 00000000003506b0 [ 416.875536][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.875545][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.875552][ C0] Call Trace: [ 416.875557][ C0] [ 416.875563][ C0] lapic_next_event+0x70/0x80 [ 416.875584][ C0] clockevents_program_event+0x1d9/0x330 [ 416.875601][ C0] tick_program_event+0xa3/0x120 [ 416.875620][ C0] hrtimer_reprogram+0x388/0x430 [ 416.875643][ C0] hrtimer_start_range_ns+0xa8a/0xc10 [ 416.875674][ C0] common_hrtimer_rearm+0x107/0x110 [ 416.875693][ C0] posixtimer_rearm+0x14e/0x340 [ 416.875708][ C0] dequeue_signal+0x1bb/0x4d0 [ 416.875728][ C0] get_signal+0x522/0x1520 [ 416.875753][ C0] arch_do_signal_or_restart+0xd1/0x1140 [ 416.875773][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 416.875793][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 416.875816][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 416.875833][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 416.875850][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 416.875874][ C0] do_syscall_64+0x58/0xa0 [ 416.875891][ C0] ? clear_bhb_loop+0x30/0x80 [ 416.875913][ C0] ? clear_bhb_loop+0x30/0x80 [ 416.875934][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.875955][ C0] RIP: 0033:0x7f8e5359ce57 [ 416.875976][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 416.875988][ C0] RSP: 002b:00007f8e5437d0e8 EFLAGS: 00000246 [ 416.876000][ C0] RAX: 00000000000000ca RBX: 00007f8e53815fa8 RCX: 00007f8e5359ce59 [ 416.876011][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e53815fa8 [ 416.876021][ C0] RBP: 00007f8e53815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 416.876031][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.876040][ C0] R13: 00007f8e53816038 R14: 00007fffc9aa7bb0 R15: 00007fffc9aa7c98 [ 416.876054][ C0] [ 451.997773][ T29] INFO: task kworker/1:0:24 blocked for more than 258 seconds. [ 453.035612][ T29] Not tainted syzkaller #0 [ 454.211416][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.363791][ T29] task:kworker/1:0 state:D stack:26272 pid:24 ppid:2 flags:0x00004000 [ 456.453508][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 456.487590][ T29] Call Trace: [ 456.501084][ T29] [ 456.579509][ T29] __schedule+0xba6/0x1500 [ 456.633053][ T29] ? release_firmware_map_entry+0x190/0x190 [ 456.688900][ T29] ? __mutex_add_waiter+0xcc/0x280 [ 456.707088][ T29] ? __kasan_check_write+0x14/0x20 [ 456.782589][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 456.802885][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 456.818679][ T29] schedule+0xbd/0x170 [ 456.887132][ T29] schedule_preempt_disabled+0x13/0x20 [ 456.921166][ T29] __mutex_lock+0x82f/0x1790 [ 457.017702][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 457.027111][ T29] ? timer_update_keys+0xb0/0xb0 [ 457.137756][ T29] ? debug_smp_processor_id+0x17/0x20 [ 457.160979][ T29] ? get_nohz_timer_target+0x7a/0x560 [ 457.169474][ T29] ? __schedule+0xbae/0x1500 [ 457.194980][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 457.352831][ T29] ? __mod_timer+0x858/0xc00 [ 457.372534][ T29] __mutex_lock_slowpath+0xe/0x10 [ 457.437511][ T29] mutex_lock+0x10a/0x1b0 [ 457.452195][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 457.493132][ T29] ? add_timer+0x68/0x80 [ 457.605331][ T29] rtnl_lock+0x15/0x20 [ 457.617266][ T29] addrconf_dad_work+0xca/0x14d0 [ 457.625790][ T29] ? __cfi_queue_delayed_work_on+0x10/0x10 [ 457.663475][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 457.746214][ T29] ? __kasan_check_write+0x14/0x20 [ 457.813491][ T29] ? _raw_spin_lock_irq+0x95/0xf0 [ 457.823980][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 457.835590][ T29] process_one_work+0x71f/0xc40 [ 457.898658][ T29] worker_thread+0xa29/0x11e0 [ 457.915109][ T29] ? __kthread_parkme+0x142/0x180 [ 457.949995][ T29] kthread+0x281/0x320 [ 457.956171][ T29] ? __cfi_worker_thread+0x10/0x10 [ 458.026783][ T29] ? __cfi_kthread+0x10/0x10 [ 458.038264][ T29] ret_from_fork+0x1f/0x30 [ 458.103742][ T29]