syzkaller syzkaller login: [ 14.175861][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 14.175876][ T28] audit: type=1400 audit(1766716142.578:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.180296][ T28] audit: type=1400 audit(1766716142.578:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.184373][ T28] audit: type=1400 audit(1766716142.578:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[10838]" dev="pipefs" ino=10838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.187783][ T28] audit: type=1400 audit(1766716142.578:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.190661][ T28] audit: type=1400 audit(1766716142.578:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 290.828335][ T272] sftp-server (272) used greatest stack depth: 22272 bytes left [ 290.840724][ T271] sshd-session (271) used greatest stack depth: 21408 bytes left Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. 2025/12/26 02:33:47 parsed 1 programs [ 298.671413][ T28] audit: type=1400 audit(1766716427.068:64): avc: denied { node_bind } for pid=284 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 298.693025][ T28] audit: type=1400 audit(1766716427.068:65): avc: denied { module_request } for pid=284 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 299.843550][ T28] audit: type=1400 audit(1766716428.238:66): avc: denied { mounton } for pid=292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 299.847433][ T292] cgroup: Unknown subsys name 'net' [ 299.866443][ T28] audit: type=1400 audit(1766716428.238:67): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.893731][ T28] audit: type=1400 audit(1766716428.268:68): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 299.894272][ T292] cgroup: Unknown subsys name 'devices' [ 300.037719][ T292] cgroup: Unknown subsys name 'hugetlb' [ 300.043405][ T292] cgroup: Unknown subsys name 'rlimit' [ 300.193497][ T28] audit: type=1400 audit(1766716428.588:69): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 300.216759][ T28] audit: type=1400 audit(1766716428.588:70): avc: denied { create } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.237203][ T28] audit: type=1400 audit(1766716428.598:71): avc: denied { write } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.257568][ T28] audit: type=1400 audit(1766716428.598:72): avc: denied { read } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 300.278320][ T28] audit: type=1400 audit(1766716428.598:73): avc: denied { mounton } for pid=292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 300.285977][ T295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 300.356568][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 301.195405][ T301] request_module fs-gadgetfs succeeded, but still no fs? [ 301.928145][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.935300][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.942904][ T335] device bridge_slave_0 entered promiscuous mode [ 301.950485][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.957752][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.966545][ T335] device bridge_slave_1 entered promiscuous mode [ 302.041018][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.048134][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.055680][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.062754][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.090084][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.098937][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.106672][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.126923][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.136125][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.143188][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.150854][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.160603][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.167690][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.175479][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.183535][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.201266][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.214403][ T335] device veth0_vlan entered promiscuous mode [ 302.220894][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.229787][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.238850][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.253159][ T335] device veth1_macvtap entered promiscuous mode [ 302.260680][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.272979][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.288984][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/26 02:33:50 executed programs: 0 [ 302.525709][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.532874][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.540521][ T367] device bridge_slave_0 entered promiscuous mode [ 302.549014][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.556182][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.563537][ T367] device bridge_slave_1 entered promiscuous mode [ 302.599758][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.606856][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.614326][ T371] device bridge_slave_0 entered promiscuous mode [ 302.626803][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.633872][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.641549][ T371] device bridge_slave_1 entered promiscuous mode [ 302.696528][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.703601][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.711105][ T372] device bridge_slave_0 entered promiscuous mode [ 302.725429][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.732490][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.740093][ T370] device bridge_slave_0 entered promiscuous mode [ 302.757658][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.764709][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.772409][ T372] device bridge_slave_1 entered promiscuous mode [ 302.783005][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.790141][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.797807][ T370] device bridge_slave_1 entered promiscuous mode [ 302.844937][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.852078][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.859863][ T373] device bridge_slave_0 entered promiscuous mode [ 302.867023][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.874080][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.881807][ T373] device bridge_slave_1 entered promiscuous mode [ 303.099721][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.106825][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.123106][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.130193][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.137520][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.144568][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.174397][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.181494][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.188854][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.195910][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.208500][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.215598][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.222879][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.229973][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.267002][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.274330][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.282220][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.289905][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.297750][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.305024][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.312561][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.321356][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.328925][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.337432][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.346136][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.354319][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.361399][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.375673][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.383371][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.390984][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.398839][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.407672][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.415907][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.422930][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.430564][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.438953][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.446033][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.469147][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.477489][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.485762][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.492830][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.529747][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.538490][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.546825][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.553870][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.561494][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.569784][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.578104][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.585148][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.592493][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.600551][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.608017][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.615808][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.623958][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.631037][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.638577][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.646837][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.653870][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.661383][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.669450][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.697221][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.704836][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.712453][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.720968][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.729500][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.736594][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.744074][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.752918][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.761231][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.768311][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.776062][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.784122][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.792174][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.800399][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.808643][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.816861][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.835319][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.843588][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.851704][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.859812][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.867950][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.876454][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.908980][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.917794][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.926936][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.935545][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.943836][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.952349][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.960831][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.968782][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.977021][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.984462][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.000275][ T372] device veth0_vlan entered promiscuous mode [ 304.008299][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.017071][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.025446][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.033751][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.042301][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.050270][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.058610][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.066154][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.077508][ T371] device veth0_vlan entered promiscuous mode [ 304.085609][ T373] device veth0_vlan entered promiscuous mode [ 304.096482][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.104351][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.112628][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.120378][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.129926][ T370] device veth0_vlan entered promiscuous mode [ 304.144673][ T367] device veth0_vlan entered promiscuous mode [ 304.150988][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.159063][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.167467][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.176250][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.198344][ T373] device veth1_macvtap entered promiscuous mode [ 304.205248][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.213520][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.221987][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.229953][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.237544][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.244932][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.252680][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.264574][ T371] device veth1_macvtap entered promiscuous mode [ 304.274415][ T370] device veth1_macvtap entered promiscuous mode [ 304.285607][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.293817][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.302353][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.310840][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.319074][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.329320][ T372] device veth1_macvtap entered promiscuous mode [ 304.349565][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.357984][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.366537][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.374734][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.383901][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.392236][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.400626][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.409012][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.418041][ T367] device veth1_macvtap entered promiscuous mode [ 304.429929][ T8] device bridge_slave_1 left promiscuous mode [ 304.436183][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.443855][ T8] device bridge_slave_0 left promiscuous mode [ 304.450114][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.458679][ T8] device veth1_macvtap left promiscuous mode [ 304.464696][ T8] device veth0_vlan left promiscuous mode [ 304.586542][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.594236][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.602644][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.611097][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.619529][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.628774][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.637081][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.645481][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.653663][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.662147][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.670509][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.678929][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.687298][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.711630][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.719899][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.825103][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 304.825122][ T28] audit: type=1400 audit(1766716433.158:105): avc: denied { bpf } for pid=421 comm="syz.1.18" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.115121][ T28] audit: type=1400 audit(1766716433.158:106): avc: denied { map_create } for pid=421 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.385123][ T28] audit: type=1400 audit(1766716433.158:107): avc: denied { map_read map_write } for pid=421 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.615093][ T28] audit: type=1400 audit(1766716433.158:108): avc: denied { prog_load } for pid=421 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 306.085121][ T28] audit: type=1400 audit(1766716433.158:109): avc: denied { perfmon } for pid=421 comm="syz.1.18" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.645081][ T28] audit: type=1400 audit(1766716433.158:110): avc: denied { prog_run } for pid=421 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 442.935551][ T29] INFO: task kworker/0:0:6 blocked for more than 122 seconds. [ 442.943078][ T29] Not tainted syzkaller #0 [ 443.165022][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.173775][ T29] task:kworker/0:0 state:D stack:24448 pid:6 ppid:2 flags:0x00004000 [ 443.455064][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 443.461211][ T29] Call Trace: [ 443.464509][ T29] [ 443.467495][ T29] __schedule+0xb87/0x14e0 [ 443.472056][ T29] ? __sched_text_start+0x8/0x8 [ 443.477002][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 443.482156][ T29] ? __kasan_check_write+0x14/0x20 [ 443.487357][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 443.492634][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 443.497885][ T29] schedule+0xbd/0x170 [ 443.501988][ T29] schedule_preempt_disabled+0x13/0x20 [ 443.507509][ T29] __mutex_lock+0x74a/0x16d0 [ 443.512144][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 443.518964][ T29] ? update_load_avg+0x4c2/0x13f0 [ 443.524032][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 443.529287][ T29] ? xfd_validate_state+0x70/0x150 [ 443.534439][ T29] ? save_fpregs_to_fpstate+0x192/0x220 [ 443.540039][ T29] __mutex_lock_slowpath+0xe/0x10 [ 443.545144][ T29] mutex_lock+0xf8/0x1a0 [ 443.549600][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 443.554574][ T29] rtnl_lock+0x15/0x20 [ 443.558739][ T29] addrconf_dad_work+0xc4/0x14b0 [ 443.563710][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 443.568608][ T29] ? finish_task_switch+0x16b/0x7b0 [ 443.573841][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 443.579417][ T29] ? __schedule+0xb8f/0x14e0 [ 443.584041][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 443.589636][ T29] process_one_work+0x71f/0xc40 [ 443.594525][ T29] worker_thread+0xa29/0x11f0 [ 443.599271][ T29] kthread+0x281/0x320 [ 443.603385][ T29] ? __cfi_worker_thread+0x10/0x10 [ 443.608541][ T29] ? __cfi_kthread+0x10/0x10 [ 443.613168][ T29] ret_from_fork+0x1f/0x30 [ 443.617666][ T29] [ 443.965017][ T29] INFO: task kworker/u4:0:8 blocked for more than 123 seconds. [ 443.972620][ T29] Not tainted syzkaller #0 [ 444.385038][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.393764][ T29] task:kworker/u4:0 state:D stack:24416 pid:8 ppid:2 flags:0x00004000 [ 444.525042][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 444.531195][ T29] Call Trace: [ 444.534497][ T29] [ 444.537478][ T29] __schedule+0xb87/0x14e0 [ 444.541945][ T29] ? __sched_text_start+0x8/0x8 [ 444.546872][ T29] ? jbd2_journal_add_journal_head+0x92/0x4b0 [ 444.553056][ T29] ? kthread_data+0x50/0xc0 [ 444.557616][ T29] ? wq_worker_sleeping+0x64/0x280 [ 444.562760][ T29] schedule+0xbd/0x170 [ 444.566877][ T29] io_schedule+0x84/0xe0 [ 444.571160][ T29] bit_wait_io+0x13/0xd0 [ 444.575461][ T29] __wait_on_bit+0xb9/0x2d0 [ 444.580001][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 444.584998][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 444.589966][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 444.595472][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 444.600699][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 444.606760][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 444.612249][ T29] ? jbd2_journal_cancel_revoke+0x42a/0x480 [ 444.618287][ T29] do_get_write_access+0x536/0xd70 [ 444.623439][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 444.629469][ T29] __ext4_journal_get_write_access+0x216/0x6c0 [ 444.635736][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 444.642447][ T29] ext4_mb_mark_diskspace_used+0x275/0x1450 [ 444.648486][ T29] ? kmem_cache_free+0x12d/0x300 [ 444.653523][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 444.659134][ T29] ? ext4_discard_allocated_blocks+0x5d0/0x5d0 [ 444.665338][ T29] ? kmem_cache_free+0x12d/0x300 [ 444.670309][ T29] ext4_mb_new_blocks+0x10ec/0x4210 [ 444.675584][ T29] ? __kasan_kmalloc+0x95/0xb0 [ 444.680386][ T29] ? ext4_find_extent+0x36b/0xe20 [ 444.685454][ T29] ? memset+0x35/0x40 [ 444.689458][ T29] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 444.695086][ T29] ? ext4_inode_to_goal_block+0x352/0x4a0 [ 444.700918][ T29] ? ext4_ext_find_goal+0x11d/0x200 [ 444.706172][ T29] ext4_ext_map_blocks+0x1695/0x6080 [ 444.711507][ T29] ? kasan_set_track+0x60/0x70 [ 444.716334][ T29] ? kasan_set_track+0x4b/0x70 [ 444.721136][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 444.726491][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 444.731556][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 444.736940][ T29] ? kmem_cache_alloc+0x16e/0x330 [ 444.741996][ T29] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 444.747446][ T29] ? ext4_writepages+0xf42/0x3020 [ 444.752607][ T29] ? do_writepages+0x3a9/0x5e0 [ 444.757457][ T29] ? __writeback_single_inode+0xc6/0xad0 [ 444.763135][ T29] ? writeback_sb_inodes+0x9b8/0x1550 [ 444.768596][ T29] ? __writeback_inodes_wb+0x12f/0x400 [ 444.774092][ T29] ? wb_writeback+0x403/0x980 [ 444.778834][ T29] ? wb_workfn+0x986/0xda0 [ 444.783271][ T29] ? process_one_work+0x71f/0xc40 [ 444.788333][ T29] ? worker_thread+0xa29/0x11f0 [ 444.793210][ T29] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 444.798903][ T29] ? ext4_es_lookup_extent+0x54c/0x900 [ 444.804403][ T29] ext4_map_blocks+0x9cb/0x1b60 [ 444.809309][ T29] ? __slab_alloc+0x6b/0xa0 [ 444.813847][ T29] ? __cfi_ext4_map_blocks+0x10/0x10 [ 444.819178][ T29] ? ext4_inode_journal_mode+0x391/0x480 [ 444.824842][ T29] ext4_writepages+0x1260/0x3020 [ 444.829836][ T29] ? dev_hard_start_xmit+0x6df/0x750 [ 444.835253][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 444.840576][ T29] ? __local_bh_enable_ip+0x58/0x80 [ 444.845842][ T29] ? __dev_queue_xmit+0x13fb/0x3420 [ 444.851081][ T29] ? __kasan_check_write+0x14/0x20 [ 444.856239][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 444.861558][ T29] do_writepages+0x3a9/0x5e0 [ 444.866208][ T29] ? memcpy+0x56/0x70 [ 444.870243][ T29] ? ip6_finish_output2+0x160e/0x1870 [ 444.875725][ T29] ? __cfi_do_writepages+0x10/0x10 [ 444.880879][ T29] ? __cfi_wake_up_bit+0x10/0x10 [ 444.885893][ T29] ? __inode_add_lru+0xff/0x310 [ 444.890836][ T29] ? __kasan_check_write+0x14/0x20 [ 444.896011][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 444.900733][ T29] ? __kasan_check_write+0x14/0x20 [ 444.905897][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 444.910611][ T29] __writeback_single_inode+0xc6/0xad0 [ 444.916127][ T29] writeback_sb_inodes+0x9b8/0x1550 [ 444.921368][ T29] ? queue_io+0x4c0/0x4c0 [ 444.925754][ T29] ? down_read_trylock+0x273/0x640 [ 444.930905][ T29] ? native_send_call_func_single_ipi+0x6f/0x80 [ 444.937255][ T29] __writeback_inodes_wb+0x12f/0x400 [ 444.942586][ T29] wb_writeback+0x403/0x980 [ 444.947263][ T29] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 444.953802][ T29] ? set_worker_desc+0x155/0x1c0 [ 444.958816][ T29] ? update_load_avg+0x4c2/0x13f0 [ 444.963895][ T29] ? __kasan_check_write+0x14/0x20 [ 444.969065][ T29] wb_workfn+0x986/0xda0 [ 444.973348][ T29] ? __cfi_wb_workfn+0x10/0x10 [ 444.978186][ T29] ? kthread_data+0x50/0xc0 [ 444.982728][ T29] ? __switch_to_asm+0x3a/0x60 [ 444.987555][ T29] ? __schedule+0xb8f/0x14e0 [ 444.992174][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 444.997764][ T29] process_one_work+0x71f/0xc40 [ 445.002668][ T29] worker_thread+0xa29/0x11f0 [ 445.007392][ T29] kthread+0x281/0x320 [ 445.011490][ T29] ? __cfi_worker_thread+0x10/0x10 [ 445.016644][ T29] ? __cfi_kthread+0x10/0x10 [ 445.021267][ T29] ret_from_fork+0x1f/0x30 [ 445.025748][ T29] [ 445.645063][ T29] NMI backtrace for cpu 0 [ 445.649448][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 445.656673][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.666835][ T29] Call Trace: [ 445.670132][ T29] [ 445.673089][ T29] __dump_stack+0x21/0x24 [ 445.677520][ T29] dump_stack_lvl+0xee/0x150 [ 445.682224][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 445.687274][ T29] dump_stack+0x15/0x24 [ 445.691452][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 445.696495][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 445.702141][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 445.707626][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 445.712595][ T29] ? memcpy+0x56/0x70 [ 445.716594][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.722601][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 445.728609][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 445.734523][ T29] watchdog+0xd44/0xe80 [ 445.738785][ T29] ? __cfi_watchdog+0x10/0x10 [ 445.743498][ T29] ? __kasan_check_read+0x11/0x20 [ 445.748547][ T29] ? __kthread_parkme+0x142/0x180 [ 445.753596][ T29] kthread+0x281/0x320 [ 445.757692][ T29] ? __cfi_watchdog+0x10/0x10 [ 445.762398][ T29] ? __cfi_kthread+0x10/0x10 [ 445.767007][ T29] ret_from_fork+0x1f/0x30 [ 445.771446][ T29] [ 445.774548][ T29] Sending NMI from CPU 0 to CPUs 1: [ 445.779800][ C1] NMI backtrace for cpu 1 [ 445.779810][ C1] CPU: 1 PID: 421 Comm: syz.1.18 Not tainted syzkaller #0 [ 445.779826][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.779840][ C1] RIP: 0010:copy_fpstate_to_sigframe+0x170/0xaa0 [ 445.779866][ C1] Code: 40 00 00 00 31 c0 e8 8f 8b b9 03 49 89 ce 0f 01 ca 31 ff 48 89 ce e8 9f 53 41 00 4d 85 f6 74 0a e8 d5 4e 41 00 e9 ee 07 00 00 cb 4e 41 00 48 8d 05 00 00 00 00 48 89 44 24 60 48 8d 93 80 0f [ 445.779880][ C1] RSP: 0018:ffffc90000db7ac0 EFLAGS: 00000246 [ 445.779951][ C1] RAX: ffffffff812edb21 RBX: ffff8881140de540 RCX: ffff8881140de540 [ 445.779981][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.779990][ C1] RBP: ffffc90000db7c90 R08: dffffc0000000000 R09: ffffed102281bca9 [ 445.780003][ C1] R10: ffffed102281bca9 R11: 1ffff1102281bca8 R12: 00007ffc3db7b0c0 [ 445.780015][ C1] R13: ffff8881140df4d0 R14: 0000000000000000 R15: dffffc0000000000 [ 445.780026][ C1] FS: 0000555568e36500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 445.780041][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.780052][ C1] CR2: 0000000000000000 CR3: 0000000133d10000 CR4: 00000000003506a0 [ 445.780066][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.780075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.780085][ C1] Call Trace: [ 445.780090][ C1] [ 445.780096][ C1] ? __kasan_check_write+0x14/0x20 [ 445.780114][ C1] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 445.780135][ C1] ? memcpy+0x56/0x70 [ 445.780149][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 445.780169][ C1] ? get_signal+0x124b/0x1520 [ 445.780195][ C1] ? fpu__alloc_mathframe+0xb3/0x130 [ 445.780216][ C1] arch_do_signal_or_restart+0x5bd/0x1030 [ 445.780239][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 445.780259][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 445.780284][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 445.780398][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 445.780415][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 445.780455][ C1] do_syscall_64+0x58/0xa0 [ 445.780473][ C1] ? clear_bhb_loop+0x30/0x80 [ 445.780496][ C1] ? clear_bhb_loop+0x30/0x80 [ 445.780520][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.780543][ C1] RIP: 0033:0x7f1cb218f749 [ 445.780560][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.780573][ C1] RSP: 002b:00007ffc3db7b498 EFLAGS: 00000246 [ 445.780586][ C1] RAX: 0000000000000000 RBX: 00007f1cb23e5fa8 RCX: 00007f1cb218f749 [ 445.780597][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cb23e5fac [ 445.780607][ C1] RBP: 0000000000000000 R08: 002b01a574ccebfe R09: 000000083db7b78f [ 445.780618][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1cb23e5fac [ 445.780628][ C1] R13: 00007f1cb23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 445.780648][ C1] [ 470.455409][ T29] INFO: task kworker/0:0:6 blocked for more than 150 seconds. [ 470.462925][ T29] Not tainted syzkaller #0 [ 470.695040][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.703780][ T29] task:kworker/0:0 state:D stack:24448 pid:6 ppid:2 flags:0x00004000 [ 470.975054][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 470.981110][ T29] Call Trace: [ 470.984411][ T29] [ 470.987427][ T29] __schedule+0xb87/0x14e0 [ 470.992407][ T29] ? __sched_text_start+0x8/0x8 [ 470.997511][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 471.002662][ T29] ? __kasan_check_write+0x14/0x20 [ 471.007813][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 471.013043][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 471.018294][ T29] schedule+0xbd/0x170 [ 471.022397][ T29] schedule_preempt_disabled+0x13/0x20 [ 471.027914][ T29] __mutex_lock+0x74a/0x16d0 [ 471.032543][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 471.039363][ T29] ? update_load_avg+0x4c2/0x13f0 [ 471.044511][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 471.049768][ T29] ? xfd_validate_state+0x70/0x150 [ 471.054912][ T29] ? save_fpregs_to_fpstate+0x192/0x220 [ 471.060544][ T29] __mutex_lock_slowpath+0xe/0x10 [ 471.065692][ T29] mutex_lock+0xf8/0x1a0 [ 471.069974][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 471.075312][ T29] rtnl_lock+0x15/0x20 [ 471.079439][ T29] addrconf_dad_work+0xc4/0x14b0 [ 471.084406][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 471.089304][ T29] ? finish_task_switch+0x16b/0x7b0 [ 471.094535][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 471.100277][ T29] ? __schedule+0xb8f/0x14e0 [ 471.104901][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 471.110584][ T29] process_one_work+0x71f/0xc40 [ 471.115483][ T29] worker_thread+0xa29/0x11f0 [ 471.120198][ T29] kthread+0x281/0x320 [ 471.124395][ T29] ? __cfi_worker_thread+0x10/0x10 [ 471.129569][ T29] ? __cfi_kthread+0x10/0x10 [ 471.134191][ T29] ret_from_fork+0x1f/0x30 [ 471.138669][ T29] [ 471.495040][ T29] INFO: task kworker/u4:0:8 blocked for more than 151 seconds. [ 471.502642][ T29] Not tainted syzkaller #0 [ 471.925023][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.933746][ T29] task:kworker/u4:0 state:D stack:24416 pid:8 ppid:2 flags:0x00004000 [ 472.285045][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 472.291108][ T29] Call Trace: [ 472.294415][ T29] [ 472.297448][ T29] __schedule+0xb87/0x14e0 [ 472.301911][ T29] ? __sched_text_start+0x8/0x8 [ 472.306839][ T29] ? jbd2_journal_add_journal_head+0x92/0x4b0 [ 472.312944][ T29] ? kthread_data+0x50/0xc0 [ 472.317486][ T29] ? wq_worker_sleeping+0x64/0x280 [ 472.322636][ T29] schedule+0xbd/0x170 [ 472.326753][ T29] io_schedule+0x84/0xe0 [ 472.331029][ T29] bit_wait_io+0x13/0xd0 [ 472.335335][ T29] __wait_on_bit+0xb9/0x2d0 [ 472.339873][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 472.344850][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 472.350033][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 472.355535][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 472.360761][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 472.366820][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 472.372325][ T29] ? jbd2_journal_cancel_revoke+0x42a/0x480 [ 472.378320][ T29] do_get_write_access+0x536/0xd70 [ 472.383471][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 472.389498][ T29] __ext4_journal_get_write_access+0x216/0x6c0 [ 472.395694][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 472.402406][ T29] ext4_mb_mark_diskspace_used+0x275/0x1450 [ 472.408363][ T29] ? kmem_cache_free+0x12d/0x300 [ 472.413344][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 472.418960][ T29] ? ext4_discard_allocated_blocks+0x5d0/0x5d0 [ 472.425206][ T29] ? kmem_cache_free+0x12d/0x300 [ 472.430183][ T29] ext4_mb_new_blocks+0x10ec/0x4210 [ 472.435439][ T29] ? __kasan_kmalloc+0x95/0xb0 [ 472.440236][ T29] ? ext4_find_extent+0x36b/0xe20 [ 472.445440][ T29] ? memset+0x35/0x40 [ 472.449445][ T29] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 472.455060][ T29] ? ext4_inode_to_goal_block+0x352/0x4a0 [ 472.460817][ T29] ? ext4_ext_find_goal+0x11d/0x200 [ 472.466093][ T29] ext4_ext_map_blocks+0x1695/0x6080 [ 472.471411][ T29] ? kasan_set_track+0x60/0x70 [ 472.476226][ T29] ? kasan_set_track+0x4b/0x70 [ 472.481022][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 472.486362][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 472.491427][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 472.496789][ T29] ? kmem_cache_alloc+0x16e/0x330 [ 472.501848][ T29] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 472.507276][ T29] ? ext4_writepages+0xf42/0x3020 [ 472.512340][ T29] ? do_writepages+0x3a9/0x5e0 [ 472.517153][ T29] ? __writeback_single_inode+0xc6/0xad0 [ 472.522819][ T29] ? writeback_sb_inodes+0x9b8/0x1550 [ 472.528232][ T29] ? __writeback_inodes_wb+0x12f/0x400 [ 472.533729][ T29] ? wb_writeback+0x403/0x980 [ 472.538449][ T29] ? wb_workfn+0x986/0xda0 [ 472.542915][ T29] ? process_one_work+0x71f/0xc40 [ 472.547980][ T29] ? worker_thread+0xa29/0x11f0 [ 472.552857][ T29] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 472.558542][ T29] ? ext4_es_lookup_extent+0x54c/0x900 [ 472.564042][ T29] ext4_map_blocks+0x9cb/0x1b60 [ 472.568986][ T29] ? __slab_alloc+0x6b/0xa0 [ 472.573544][ T29] ? __cfi_ext4_map_blocks+0x10/0x10 [ 472.578895][ T29] ? ext4_inode_journal_mode+0x391/0x480 [ 472.584591][ T29] ext4_writepages+0x1260/0x3020 [ 472.589593][ T29] ? dev_hard_start_xmit+0x6df/0x750 [ 472.594921][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 472.600279][ T29] ? __local_bh_enable_ip+0x58/0x80 [ 472.605527][ T29] ? __dev_queue_xmit+0x13fb/0x3420 [ 472.610757][ T29] ? __kasan_check_write+0x14/0x20 [ 472.615916][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 472.621243][ T29] do_writepages+0x3a9/0x5e0 [ 472.625891][ T29] ? memcpy+0x56/0x70 [ 472.629898][ T29] ? ip6_finish_output2+0x160e/0x1870 [ 472.635331][ T29] ? __cfi_do_writepages+0x10/0x10 [ 472.640504][ T29] ? __cfi_wake_up_bit+0x10/0x10 [ 472.645611][ T29] ? __inode_add_lru+0xff/0x310 [ 472.650502][ T29] ? __kasan_check_write+0x14/0x20 [ 472.655660][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 472.660372][ T29] ? __kasan_check_write+0x14/0x20 [ 472.665570][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 472.670299][ T29] __writeback_single_inode+0xc6/0xad0 [ 472.675841][ T29] writeback_sb_inodes+0x9b8/0x1550 [ 472.681085][ T29] ? queue_io+0x4c0/0x4c0 [ 472.685461][ T29] ? down_read_trylock+0x273/0x640 [ 472.690619][ T29] ? native_send_call_func_single_ipi+0x6f/0x80 [ 472.696948][ T29] __writeback_inodes_wb+0x12f/0x400 [ 472.702304][ T29] wb_writeback+0x403/0x980 [ 472.706894][ T29] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 472.712920][ T29] ? set_worker_desc+0x155/0x1c0 [ 472.717936][ T29] ? update_load_avg+0x4c2/0x13f0 [ 472.723010][ T29] ? __kasan_check_write+0x14/0x20 [ 472.728175][ T29] wb_workfn+0x986/0xda0 [ 472.732460][ T29] ? __cfi_wb_workfn+0x10/0x10 [ 472.737285][ T29] ? kthread_data+0x50/0xc0 [ 472.741845][ T29] ? __switch_to_asm+0x3a/0x60 [ 472.746659][ T29] ? __schedule+0xb8f/0x14e0 [ 472.751297][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 472.756911][ T29] process_one_work+0x71f/0xc40 [ 472.761794][ T29] worker_thread+0xa29/0x11f0 [ 472.766534][ T29] kthread+0x281/0x320 [ 472.770632][ T29] ? __cfi_worker_thread+0x10/0x10 [ 472.775794][ T29] ? __cfi_kthread+0x10/0x10 [ 472.780419][ T29] ret_from_fork+0x1f/0x30 [ 472.784892][ T29] [ 473.025018][ T29] INFO: task jbd2/sda1-8:66 blocked for more than 132 seconds. [ 473.032623][ T29] Not tainted syzkaller #0 [ 473.445014][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.453746][ T29] task:jbd2/sda1-8 state:D stack:24928 pid:66 ppid:2 flags:0x00004000 [ 473.725037][ T29] Call Trace: [ 473.728379][ T29] [ 473.731335][ T29] __schedule+0xb87/0x14e0 [ 473.735824][ T29] ? sbitmap_any_bit_set+0x11a/0x160 [ 473.741235][ T29] ? __sched_text_start+0x8/0x8 [ 473.746153][ T29] schedule+0xbd/0x170 [ 473.750252][ T29] io_schedule+0x84/0xe0 [ 473.754530][ T29] bit_wait_io+0x13/0xd0 [ 473.758843][ T29] __wait_on_bit+0xb9/0x2d0 [ 473.763377][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 473.768361][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 473.773329][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 473.778840][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 473.784853][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 473.789587][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 473.795089][ T29] ? __cfi__raw_write_lock+0x10/0x10 [ 473.800413][ T29] ? _raw_read_unlock+0x25/0x40 [ 473.805308][ T29] __wait_on_buffer+0x56/0x70 [ 473.810079][ T29] jbd2_journal_commit_transaction+0x2d77/0x5530 [ 473.816485][ T29] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 473.823208][ T29] ? __cfi___switch_to+0x10/0x10 [ 473.828195][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 473.833077][ T29] ? finish_task_switch+0x16b/0x7b0 [ 473.838327][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 473.844247][ T29] ? __kasan_check_write+0x14/0x20 [ 473.849402][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 473.854893][ T29] ? detach_if_pending+0xf4/0x300 [ 473.860060][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 473.865915][ T29] ? del_timer_sync+0x144/0x1a0 [ 473.870971][ T29] kjournald2+0x3e7/0x760 [ 473.875392][ T29] ? __cfi_kjournald2+0x10/0x10 [ 473.880268][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 473.886544][ T29] ? __kasan_check_read+0x11/0x20 [ 473.891592][ T29] ? __kthread_parkme+0x142/0x180 [ 473.896668][ T29] kthread+0x281/0x320 [ 473.900762][ T29] ? __cfi_kjournald2+0x10/0x10 [ 473.905646][ T29] ? __cfi_kthread+0x10/0x10 [ 473.910288][ T29] ret_from_fork+0x1f/0x30 [ 473.914738][ T29] [ 474.275045][ T29] NMI backtrace for cpu 0 [ 474.279438][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 474.286661][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.296742][ T29] Call Trace: [ 474.300051][ T29] [ 474.303003][ T29] __dump_stack+0x21/0x24 [ 474.307363][ T29] dump_stack_lvl+0xee/0x150 [ 474.311988][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 474.317045][ T29] dump_stack+0x15/0x24 [ 474.321231][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 474.326211][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 474.331789][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 474.337277][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 474.342251][ T29] ? memcpy+0x56/0x70 [ 474.346259][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.352355][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 474.358368][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 474.364380][ T29] watchdog+0xd44/0xe80 [ 474.368571][ T29] ? __cfi_watchdog+0x10/0x10 [ 474.373281][ T29] ? __kasan_check_read+0x11/0x20 [ 474.378332][ T29] ? __kthread_parkme+0x142/0x180 [ 474.383386][ T29] kthread+0x281/0x320 [ 474.387487][ T29] ? __cfi_watchdog+0x10/0x10 [ 474.392205][ T29] ? __cfi_kthread+0x10/0x10 [ 474.396820][ T29] ret_from_fork+0x1f/0x30 [ 474.401270][ T29] [ 474.404463][ T29] Sending NMI from CPU 0 to CPUs 1: [ 474.409703][ C1] NMI backtrace for cpu 1 [ 474.409713][ C1] CPU: 1 PID: 421 Comm: syz.1.18 Not tainted syzkaller #0 [ 474.409729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.409738][ C1] RIP: 0010:sched_clock_cpu+0x1/0x250 [ 474.409761][ C1] Code: c7 c7 a0 06 f1 86 48 89 de e8 ab e2 38 01 e9 43 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 9e ed e0 ac 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 [ 474.409775][ C1] RSP: 0018:ffffc900001b0ef0 EFLAGS: 00000086 [ 474.409789][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 31184f0969ee3500 [ 474.409800][ C1] RDX: 0000000000000000 RSI: ffffffff85aa1a40 RDI: 0000000000000001 [ 474.409811][ C1] RBP: ffffc900001b0f38 R08: dffffc0000000000 R09: ffffed102281bca9 [ 474.409824][ C1] R10: ffffed102281bca9 R11: ffffc900001b0ff8 R12: ffff8881f71273c8 [ 474.409836][ C1] R13: 0000000000000100 R14: ffffffff864969a8 R15: ffff8881140de540 [ 474.409848][ C1] FS: 0000555568e36500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 474.409862][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.409873][ C1] CR2: 0000000000000000 CR3: 0000000133d10000 CR4: 00000000003506a0 [ 474.409888][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.409897][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.409906][ C1] Call Trace: [ 474.409911][ C1] [ 474.409916][ C1] ? irqtime_account_irq+0x75/0x240 [ 474.409941][ C1] handle_softirqs+0xe9/0x600 [ 474.409961][ C1] __do_softirq+0xb/0xd [ 474.409975][ C1] do_softirq+0xc6/0x120 [ 474.409990][ C1] [ 474.409995][ C1] [ 474.409999][ C1] ? __cfi_do_softirq+0x10/0x10 [ 474.410016][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 474.410034][ C1] __local_bh_enable_ip+0x75/0x80 [ 474.410050][ C1] copy_fpstate_to_sigframe+0x403/0xaa0 [ 474.410073][ C1] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 474.410093][ C1] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 474.410114][ C1] ? memcpy+0x56/0x70 [ 474.410128][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 474.410147][ C1] ? get_signal+0x124b/0x1520 [ 474.410173][ C1] ? fpu__alloc_mathframe+0xb3/0x130 [ 474.410194][ C1] arch_do_signal_or_restart+0x5bd/0x1030 [ 474.410218][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 474.410239][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 474.410264][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 474.410282][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 474.410305][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 474.410320][ C1] do_syscall_64+0x58/0xa0 [ 474.410338][ C1] ? clear_bhb_loop+0x30/0x80 [ 474.410362][ C1] ? clear_bhb_loop+0x30/0x80 [ 474.410385][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.410408][ C1] RIP: 0033:0x7f1cb218f749 [ 474.410420][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.410439][ C1] RSP: 002b:00007ffc3db7b498 EFLAGS: 00000246 [ 474.410452][ C1] RAX: 0000000000000000 RBX: 00007f1cb23e5fa8 RCX: 00007f1cb218f749 [ 474.410462][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1cb23e5fac [ 474.410473][ C1] RBP: 0000000000000000 R08: 002b01a574ccebfe R09: 000000083db7b78f [ 474.410489][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1cb23e5fac [ 474.410499][ C1] R13: 00007f1cb23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 474.410513][ C1] [ 499.895426][ T29] INFO: task kworker/0:0:6 blocked for more than 179 seconds. [ 499.902948][ T29] Not tainted syzkaller #0 [ 500.164988][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.173885][ T29] task:kworker/0:0 state:D stack:24448 pid:6 ppid:2 flags:0x00004000 [ 500.575034][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 500.581274][ T29] Call Trace: [ 500.584576][ T29] [ 500.587646][ T29] __schedule+0xb87/0x14e0 [ 500.592107][ T29] ? __sched_text_start+0x8/0x8 [ 500.597038][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 500.602186][ T29] ? __kasan_check_write+0x14/0x20 [ 500.607342][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 500.612571][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 500.617816][ T29] schedule+0xbd/0x170 [ 500.621917][ T29] schedule_preempt_disabled+0x13/0x20 [ 500.627435][ T29] __mutex_lock+0x74a/0x16d0 [ 500.632061][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 500.638875][ T29] ? update_load_avg+0x4c2/0x13f0 [ 500.643944][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 500.649200][ T29] ? xfd_validate_state+0x70/0x150 [ 500.654346][ T29] ? save_fpregs_to_fpstate+0x192/0x220 [ 500.659937][ T29] __mutex_lock_slowpath+0xe/0x10 [ 500.665038][ T29] mutex_lock+0xf8/0x1a0 [ 500.669323][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 500.674211][ T29] rtnl_lock+0x15/0x20 [ 500.678336][ T29] addrconf_dad_work+0xc4/0x14b0 [ 500.683300][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 500.688204][ T29] ? finish_task_switch+0x16b/0x7b0 [ 500.693443][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 500.698984][ T29] ? __schedule+0xb8f/0x14e0 [ 500.703641][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 500.709262][ T29] process_one_work+0x71f/0xc40 [ 500.714148][ T29] worker_thread+0xa29/0x11f0 [ 500.718887][ T29] kthread+0x281/0x320 [ 500.722994][ T29] ? __cfi_worker_thread+0x10/0x10 [ 500.728204][ T29] ? __cfi_kthread+0x10/0x10 [ 500.732824][ T29] ret_from_fork+0x1f/0x30 [ 500.737305][ T29] [ 500.975009][ T29] INFO: task kworker/u4:0:8 blocked for more than 180 seconds. [ 500.982619][ T29] Not tainted syzkaller #0 [ 501.395029][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.403784][ T29] task:kworker/u4:0 state:D stack:24416 pid:8 ppid:2 flags:0x00004000 [ 501.635029][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 501.641112][ T29] Call Trace: [ 501.644412][ T29] [ 501.647391][ T29] __schedule+0xb87/0x14e0 [ 501.651845][ T29] ? __sched_text_start+0x8/0x8 [ 501.656750][ T29] ? jbd2_journal_add_journal_head+0x92/0x4b0 [ 501.662861][ T29] ? kthread_data+0x50/0xc0 [ 501.667402][ T29] ? wq_worker_sleeping+0x64/0x280 [ 501.672549][ T29] schedule+0xbd/0x170 [ 501.676666][ T29] io_schedule+0x84/0xe0 [ 501.680936][ T29] bit_wait_io+0x13/0xd0 [ 501.685261][ T29] __wait_on_bit+0xb9/0x2d0 [ 501.689797][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 501.694761][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 501.699854][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 501.705377][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 501.710614][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 501.716635][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 501.722126][ T29] ? jbd2_journal_cancel_revoke+0x42a/0x480 [ 501.728069][ T29] do_get_write_access+0x536/0xd70 [ 501.733210][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 501.739231][ T29] __ext4_journal_get_write_access+0x216/0x6c0 [ 501.745419][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 501.752121][ T29] ext4_mb_mark_diskspace_used+0x275/0x1450 [ 501.758147][ T29] ? kmem_cache_free+0x12d/0x300 [ 501.763114][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 501.768706][ T29] ? ext4_discard_allocated_blocks+0x5d0/0x5d0 [ 501.774883][ T29] ? kmem_cache_free+0x12d/0x300 [ 501.779886][ T29] ext4_mb_new_blocks+0x10ec/0x4210 [ 501.785137][ T29] ? __kasan_kmalloc+0x95/0xb0 [ 501.789928][ T29] ? ext4_find_extent+0x36b/0xe20 [ 501.795011][ T29] ? memset+0x35/0x40 [ 501.799016][ T29] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 501.804591][ T29] ? ext4_inode_to_goal_block+0x352/0x4a0 [ 501.810373][ T29] ? ext4_ext_find_goal+0x11d/0x200 [ 501.815649][ T29] ext4_ext_map_blocks+0x1695/0x6080 [ 501.820973][ T29] ? kasan_set_track+0x60/0x70 [ 501.825792][ T29] ? kasan_set_track+0x4b/0x70 [ 501.830589][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 501.835929][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 501.840990][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 501.846338][ T29] ? kmem_cache_alloc+0x16e/0x330 [ 501.851399][ T29] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 501.856919][ T29] ? ext4_writepages+0xf42/0x3020 [ 501.861996][ T29] ? do_writepages+0x3a9/0x5e0 [ 501.866834][ T29] ? __writeback_single_inode+0xc6/0xad0 [ 501.872499][ T29] ? writeback_sb_inodes+0x9b8/0x1550 [ 501.877918][ T29] ? __writeback_inodes_wb+0x12f/0x400 [ 501.883440][ T29] ? wb_writeback+0x403/0x980 [ 501.888327][ T29] ? wb_workfn+0x986/0xda0 [ 501.892814][ T29] ? process_one_work+0x71f/0xc40 [ 501.897951][ T29] ? worker_thread+0xa29/0x11f0 [ 501.902839][ T29] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 501.908555][ T29] ? ext4_es_lookup_extent+0x54c/0x900 [ 501.914068][ T29] ext4_map_blocks+0x9cb/0x1b60 [ 501.918979][ T29] ? __slab_alloc+0x6b/0xa0 [ 501.923519][ T29] ? __cfi_ext4_map_blocks+0x10/0x10 [ 501.928855][ T29] ? ext4_inode_journal_mode+0x391/0x480 [ 501.934520][ T29] ext4_writepages+0x1260/0x3020 [ 501.939516][ T29] ? dev_hard_start_xmit+0x6df/0x750 [ 501.944843][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 501.950268][ T29] ? __local_bh_enable_ip+0x58/0x80 [ 501.955528][ T29] ? __dev_queue_xmit+0x13fb/0x3420 [ 501.960753][ T29] ? __kasan_check_write+0x14/0x20 [ 501.965914][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 501.971259][ T29] do_writepages+0x3a9/0x5e0 [ 501.975932][ T29] ? memcpy+0x56/0x70 [ 501.979939][ T29] ? ip6_finish_output2+0x160e/0x1870 [ 501.985358][ T29] ? __cfi_do_writepages+0x10/0x10 [ 501.990491][ T29] ? __cfi_wake_up_bit+0x10/0x10 [ 501.995525][ T29] ? __inode_add_lru+0xff/0x310 [ 502.000410][ T29] ? __kasan_check_write+0x14/0x20 [ 502.005577][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 502.010291][ T29] ? __kasan_check_write+0x14/0x20 [ 502.015450][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 502.020171][ T29] __writeback_single_inode+0xc6/0xad0 [ 502.025701][ T29] writeback_sb_inodes+0x9b8/0x1550 [ 502.030977][ T29] ? queue_io+0x4c0/0x4c0 [ 502.035372][ T29] ? down_read_trylock+0x273/0x640 [ 502.040518][ T29] ? native_send_call_func_single_ipi+0x6f/0x80 [ 502.046830][ T29] __writeback_inodes_wb+0x12f/0x400 [ 502.052175][ T29] wb_writeback+0x403/0x980 [ 502.056736][ T29] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 502.062752][ T29] ? set_worker_desc+0x155/0x1c0 [ 502.067741][ T29] ? update_load_avg+0x4c2/0x13f0 [ 502.072804][ T29] ? __kasan_check_write+0x14/0x20 [ 502.077963][ T29] wb_workfn+0x986/0xda0 [ 502.082238][ T29] ? __cfi_wb_workfn+0x10/0x10 [ 502.087056][ T29] ? kthread_data+0x50/0xc0 [ 502.091586][ T29] ? __switch_to_asm+0x3a/0x60 [ 502.096457][ T29] ? __schedule+0xb8f/0x14e0 [ 502.101082][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 502.106682][ T29] process_one_work+0x71f/0xc40 [ 502.111568][ T29] worker_thread+0xa29/0x11f0 [ 502.116352][ T29] kthread+0x281/0x320 [ 502.120452][ T29] ? __cfi_worker_thread+0x10/0x10 [ 502.125632][ T29] ? __cfi_kthread+0x10/0x10 [ 502.130277][ T29] ret_from_fork+0x1f/0x30 [ 502.134757][ T29] [ 502.515014][ T29] INFO: task jbd2/sda1-8:66 blocked for more than 161 seconds. [ 502.522617][ T29] Not tainted syzkaller #0 [ 502.975007][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.983735][ T29] task:jbd2/sda1-8 state:D stack:24928 pid:66 ppid:2 flags:0x00004000 [ 503.055040][ T29] Call Trace: [ 503.058412][ T29] [ 503.061377][ T29] __schedule+0xb87/0x14e0 [ 503.065885][ T29] ? sbitmap_any_bit_set+0x11a/0x160 [ 503.071216][ T29] ? __sched_text_start+0x8/0x8 [ 503.076138][ T29] schedule+0xbd/0x170 [ 503.080254][ T29] io_schedule+0x84/0xe0 [ 503.084559][ T29] bit_wait_io+0x13/0xd0 [ 503.088859][ T29] __wait_on_bit+0xb9/0x2d0 [ 503.093407][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 503.098435][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 503.103418][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 503.108932][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 503.114950][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 503.119697][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 503.125218][ T29] ? __cfi__raw_write_lock+0x10/0x10 [ 503.130549][ T29] ? _raw_read_unlock+0x25/0x40 [ 503.135455][ T29] __wait_on_buffer+0x56/0x70 [ 503.140165][ T29] jbd2_journal_commit_transaction+0x2d77/0x5530 [ 503.146553][ T29] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 503.153264][ T29] ? __cfi___switch_to+0x10/0x10 [ 503.158251][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 503.163143][ T29] ? finish_task_switch+0x16b/0x7b0 [ 503.168394][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 503.174313][ T29] ? __kasan_check_write+0x14/0x20 [ 503.179495][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 503.185002][ T29] ? detach_if_pending+0xf4/0x300 [ 503.190086][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 503.195952][ T29] ? del_timer_sync+0x144/0x1a0 [ 503.200836][ T29] kjournald2+0x3e7/0x760 [ 503.205208][ T29] ? __cfi_kjournald2+0x10/0x10 [ 503.210082][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 503.216273][ T29] ? __kasan_check_read+0x11/0x20 [ 503.221323][ T29] ? __kthread_parkme+0x142/0x180 [ 503.226485][ T29] kthread+0x281/0x320 [ 503.230613][ T29] ? __cfi_kjournald2+0x10/0x10 [ 503.235509][ T29] ? __cfi_kthread+0x10/0x10 [ 503.240130][ T29] ret_from_fork+0x1f/0x30 [ 503.244666][ T29] [ 503.805034][ T29] NMI backtrace for cpu 0 [ 503.809420][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 503.816649][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.826759][ T29] Call Trace: [ 503.830066][ T29] [ 503.833024][ T29] __dump_stack+0x21/0x24 [ 503.837390][ T29] dump_stack_lvl+0xee/0x150 [ 503.842004][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 503.847065][ T29] dump_stack+0x15/0x24 [ 503.851274][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 503.856245][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 503.861828][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 503.867320][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 503.872293][ T29] ? memcpy+0x56/0x70 [ 503.876296][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.882310][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 503.888324][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 503.894265][ T29] watchdog+0xd44/0xe80 [ 503.898468][ T29] ? __cfi_watchdog+0x10/0x10 [ 503.903185][ T29] ? __kasan_check_read+0x11/0x20 [ 503.908241][ T29] ? __kthread_parkme+0x142/0x180 [ 503.913299][ T29] kthread+0x281/0x320 [ 503.917400][ T29] ? __cfi_watchdog+0x10/0x10 [ 503.922128][ T29] ? __cfi_kthread+0x10/0x10 [ 503.926755][ T29] ret_from_fork+0x1f/0x30 [ 503.931206][ T29] [ 503.934331][ T29] Sending NMI from CPU 0 to CPUs 1: [ 503.939580][ C1] NMI backtrace for cpu 1 [ 503.939590][ C1] CPU: 1 PID: 421 Comm: syz.1.18 Not tainted syzkaller #0 [ 503.939618][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.939627][ C1] RIP: 0010:pvclock_clocksource_read+0x68/0x710 [ 503.939648][ C1] Code: 89 85 38 ff ff ff 48 89 8d 78 ff ff ff 48 c1 e9 03 48 89 8d 40 ff ff ff 49 8d 49 03 4c 89 c8 48 c1 e8 03 48 89 85 48 ff ff ff <48> 89 4d 80 48 c1 e9 03 48 89 8d 50 ff ff ff 48 89 f0 48 c1 e8 03 [ 503.939662][ C1] RSP: 0018:ffffc900001b0440 EFLAGS: 00000802 [ 503.939676][ C1] RAX: 1ffffffff0f2d40b RBX: ffffc900001b0580 RCX: ffffffff8796a05b [ 503.939688][ C1] RDX: 1ffffffff0f2d408 RSI: ffffffff8796a05c RDI: ffffffff8796a040 [ 503.939700][ C1] RBP: ffffc900001b0510 R08: ffffffff8796a048 R09: ffffffff8796a058 [ 503.939712][ C1] R10: ffffffff8796a043 R11: 1ffffffff0f2d408 R12: ffff8881044a2d80 [ 503.939724][ C1] R13: dffffc0000000000 R14: 1ffff920000360ac R15: ffff8881044a2d88 [ 503.939736][ C1] FS: 0000555568e36500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 503.939751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.939762][ C1] CR2: 0000000000000000 CR3: 0000000133d10000 CR4: 00000000003506a0 [ 503.939776][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.939785][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.939794][ C1] Call Trace: [ 503.939799][ C1] [ 503.939805][ C1] ? __stack_depot_save+0x36/0x480 [ 503.939825][ C1] kvm_sched_clock_read+0x18/0x40 [ 503.939848][ C1] sched_clock+0x9/0x10 [ 503.939867][ C1] sched_clock_cpu+0x6e/0x250 [ 503.939885][ C1] ? __reset_page_owner+0x190/0x190 [ 503.939963][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 503.939981][ C1] ? __alloc_pages+0x1c3/0x450 [ 503.940043][ C1] ? alloc_slab_page+0x6e/0xf0 [ 503.940083][ C1] ? new_slab+0x98/0x3d0 [ 503.940107][ C1] ? ___slab_alloc+0x6bd/0xb20 [ 503.940128][ C1] ? __slab_alloc+0x5e/0xa0 [ 503.940150][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 503.940172][ C1] ? __send_signal_locked+0x19d/0xb70 [ 503.940192][ C1] ? send_signal_locked+0x422/0x580 [ 503.940213][ C1] __set_page_owner_handle+0x1a6/0x410 [ 503.940230][ C1] __set_page_owner+0x48/0x60 [ 503.940245][ C1] post_alloc_hook+0x1f5/0x210 [ 503.940266][ C1] prep_new_page+0x1c/0x110 [ 503.940288][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 503.940321][ C1] ? 0xffffffffa000064c [ 503.940335][ C1] ? unwind_get_return_address+0x4d/0x90 [ 503.940354][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 503.940381][ C1] ? __alloc_pages+0x450/0x450 [ 503.940402][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 503.940442][ C1] __alloc_pages+0x1c3/0x450 [ 503.940464][ C1] ? do_bpf_send_signal+0x82/0x150 [ 503.940507][ C1] ? irq_work_run+0x6a/0xf0 [ 503.940566][ C1] ? __cfi___alloc_pages+0x10/0x10 [ 503.940587][ C1] ? x2apic_send_IPI_self+0x6f/0x80 [ 503.940610][ C1] ? __irq_work_queue_local+0x115/0x190 [ 503.940630][ C1] ? irq_work_queue+0x9e/0x150 [ 503.940649][ C1] ? bpf_send_signal_common+0x2b2/0x420 [ 503.940673][ C1] ? syscall_trace_enter+0xf3/0x150 [ 503.940690][ C1] ? syscall_enter_from_user_mode+0x1f/0x30 [ 503.940716][ C1] ? do_syscall_64+0x24/0xa0 [ 503.940734][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.940761][ C1] alloc_slab_page+0x6e/0xf0 [ 503.940785][ C1] new_slab+0x98/0x3d0 [ 503.940810][ C1] ___slab_alloc+0x6bd/0xb20 [ 503.940831][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 503.940854][ C1] ? kasan_save_alloc_info+0x25/0x30 [ 503.940880][ C1] __slab_alloc+0x5e/0xa0 [ 503.940902][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 503.940925][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 503.940947][ C1] kmem_cache_alloc+0x1b0/0x330 [ 503.940967][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 503.940990][ C1] __sigqueue_alloc+0x13f/0x210 [ 503.941020][ C1] __send_signal_locked+0x19d/0xb70 [ 503.941039][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 503.941060][ C1] send_signal_locked+0x422/0x580 [ 503.941081][ C1] do_send_sig_info+0xd6/0x210 [ 503.941102][ C1] group_send_sig_info+0x118/0x2b0 [ 503.941123][ C1] ? __cfi_group_send_sig_info+0x10/0x10 [ 503.941146][ C1] do_bpf_send_signal+0x82/0x150 [ 503.941171][ C1] irq_work_run_list+0x18b/0x2b0 [ 503.941191][ C1] ? irq_work_run+0xf0/0xf0 [ 503.941212][ C1] irq_work_run+0x6a/0xf0 [ 503.941231][ C1] __sysvec_irq_work+0x75/0x1c0 [ 503.941267][ C1] sysvec_irq_work+0xa1/0xc0 [ 503.941289][ C1] [ 503.941293][ C1] [ 503.941298][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 503.941320][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 503.941344][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 3a 1c 57 01 5d c3 0f 1f 84 00 00 00 00 [ 503.941356][ C1] RSP: 0018:ffffc90000db7c20 EFLAGS: 00000246 [ 503.941369][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 503.941379][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 503.941388][ C1] RBP: ffffc90000db7c20 R08: dffffc0000000000 R09: fffff520001b6f81 [ 503.941400][ C1] R10: 0000000000000000 R11: ffffffff81343740 R12: 0000000000000000 [ 503.941409][ C1] R13: dffffc0000000001 R14: ffffffff86496b60 R15: dffffc0000000000 [ 503.941422][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 503.941447][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 503.941469][ C1] arch_irq_work_raise+0x98/0xf0 [ 503.941491][ C1] __irq_work_queue_local+0x115/0x190 [ 503.941511][ C1] irq_work_queue+0x9e/0x150 [ 503.941530][ C1] bpf_send_signal_common+0x2b2/0x420 [ 503.941554][ C1] ? __set_printk_clr_event+0x80/0x80 [ 503.941579][ C1] bpf_send_signal+0x19/0x20 [ 503.941614][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 503.941630][ C1] bpf_trace_run2+0xff/0x250 [ 503.941652][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 503.941676][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 503.941692][ C1] trace_sys_enter+0x3d/0x50 [ 503.941708][ C1] syscall_trace_enter+0xf3/0x150 [ 503.941725][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 503.941751][ C1] do_syscall_64+0x24/0xa0 [ 503.941770][ C1] ? clear_bhb_loop+0x30/0x80 [ 503.941793][ C1] ? clear_bhb_loop+0x30/0x80 [ 503.941817][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.941839][ C1] RIP: 0033:0x7f1cb212b829 [ 503.941850][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 503.941863][ C1] RSP: 002b:00007ffc3db7af00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 503.941878][ C1] RAX: ffffffffffffffda RBX: 00007f1cb23e5fa8 RCX: 00007f1cb212b829 [ 503.941890][ C1] RDX: 00007ffc3db7af00 RSI: 00007ffc3db7b030 RDI: 0000000000000011 [ 503.941901][ C1] RBP: 0000000000000000 R08: 002b01a574ccebfe R09: 000000083db7b78f [ 503.941918][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1cb23e5fac [ 503.941928][ C1] R13: 00007f1cb23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 503.941942][ C1] [ 529.335003][ T29] INFO: task kworker/0:0:6 blocked for more than 209 seconds. [ 529.342524][ T29] Not tainted syzkaller #0 [ 529.576180][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.584921][ T29] task:kworker/0:0 state:D stack:24448 pid:6 ppid:2 flags:0x00004000 [ 529.894274][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 530.005016][ T29] Call Trace: [ 530.008353][ T29] [ 530.011310][ T29] __schedule+0xb87/0x14e0 [ 530.015794][ T29] ? __sched_text_start+0x8/0x8 [ 530.020674][ T29] ? __mutex_add_waiter+0xc7/0x270 [ 530.025866][ T29] ? __kasan_check_write+0x14/0x20 [ 530.031002][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 530.036252][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 530.041482][ T29] schedule+0xbd/0x170 [ 530.045602][ T29] schedule_preempt_disabled+0x13/0x20 [ 530.051099][ T29] __mutex_lock+0x74a/0x16d0 [ 530.055789][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 530.062616][ T29] ? update_load_avg+0x4c2/0x13f0 [ 530.067723][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 530.072965][ T29] ? xfd_validate_state+0x70/0x150 [ 530.078131][ T29] ? save_fpregs_to_fpstate+0x192/0x220 [ 530.083729][ T29] __mutex_lock_slowpath+0xe/0x10 [ 530.088805][ T29] mutex_lock+0xf8/0x1a0 [ 530.093085][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 530.097992][ T29] rtnl_lock+0x15/0x20 [ 530.102089][ T29] addrconf_dad_work+0xc4/0x14b0 [ 530.107077][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 530.111958][ T29] ? finish_task_switch+0x16b/0x7b0 [ 530.117207][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 530.122702][ T29] ? __schedule+0xb8f/0x14e0 [ 530.127387][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 530.132969][ T29] process_one_work+0x71f/0xc40 [ 530.137869][ T29] worker_thread+0xa29/0x11f0 [ 530.142591][ T29] kthread+0x281/0x320 [ 530.146699][ T29] ? __cfi_worker_thread+0x10/0x10 [ 530.151837][ T29] ? __cfi_kthread+0x10/0x10 [ 530.156479][ T29] ret_from_fork+0x1f/0x30 [ 530.160933][ T29] [ 530.574976][ T29] INFO: task kworker/u4:0:8 blocked for more than 210 seconds. [ 530.582594][ T29] Not tainted syzkaller #0 [ 530.994989][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.003707][ T29] task:kworker/u4:0 state:D stack:24416 pid:8 ppid:2 flags:0x00004000 [ 531.375048][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 531.381454][ T29] Call Trace: [ 531.384763][ T29] [ 531.387762][ T29] __schedule+0xb87/0x14e0 [ 531.392223][ T29] ? __sched_text_start+0x8/0x8 [ 531.397130][ T29] ? jbd2_journal_add_journal_head+0x92/0x4b0 [ 531.403241][ T29] ? kthread_data+0x50/0xc0 [ 531.407813][ T29] ? wq_worker_sleeping+0x64/0x280 [ 531.412960][ T29] schedule+0xbd/0x170 [ 531.417080][ T29] io_schedule+0x84/0xe0 [ 531.421355][ T29] bit_wait_io+0x13/0xd0 [ 531.425756][ T29] __wait_on_bit+0xb9/0x2d0 [ 531.430289][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 531.435310][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 531.440290][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 531.445809][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 531.451038][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 531.457078][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 531.462580][ T29] ? jbd2_journal_cancel_revoke+0x42a/0x480 [ 531.468568][ T29] do_get_write_access+0x536/0xd70 [ 531.473719][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 531.479757][ T29] __ext4_journal_get_write_access+0x216/0x6c0 [ 531.485954][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 531.492690][ T29] ext4_mb_mark_diskspace_used+0x275/0x1450 [ 531.498633][ T29] ? kmem_cache_free+0x12d/0x300 [ 531.503603][ T29] ? slab_free_freelist_hook+0xc2/0x190 [ 531.509202][ T29] ? ext4_discard_allocated_blocks+0x5d0/0x5d0 [ 531.515391][ T29] ? kmem_cache_free+0x12d/0x300 [ 531.520363][ T29] ext4_mb_new_blocks+0x10ec/0x4210 [ 531.525629][ T29] ? __kasan_kmalloc+0x95/0xb0 [ 531.530431][ T29] ? ext4_find_extent+0x36b/0xe20 [ 531.535515][ T29] ? memset+0x35/0x40 [ 531.539527][ T29] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 531.545303][ T29] ? ext4_inode_to_goal_block+0x352/0x4a0 [ 531.551064][ T29] ? ext4_ext_find_goal+0x11d/0x200 [ 531.556308][ T29] ext4_ext_map_blocks+0x1695/0x6080 [ 531.561627][ T29] ? kasan_set_track+0x60/0x70 [ 531.566439][ T29] ? kasan_set_track+0x4b/0x70 [ 531.571250][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 531.576680][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 531.581772][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 531.587111][ T29] ? kmem_cache_alloc+0x16e/0x330 [ 531.592171][ T29] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 531.597608][ T29] ? ext4_writepages+0xf42/0x3020 [ 531.602683][ T29] ? do_writepages+0x3a9/0x5e0 [ 531.607523][ T29] ? __writeback_single_inode+0xc6/0xad0 [ 531.613205][ T29] ? writeback_sb_inodes+0x9b8/0x1550 [ 531.618639][ T29] ? __writeback_inodes_wb+0x12f/0x400 [ 531.624161][ T29] ? wb_writeback+0x403/0x980 [ 531.628906][ T29] ? wb_workfn+0x986/0xda0 [ 531.633351][ T29] ? process_one_work+0x71f/0xc40 [ 531.638416][ T29] ? worker_thread+0xa29/0x11f0 [ 531.643290][ T29] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 531.648972][ T29] ? ext4_es_lookup_extent+0x54c/0x900 [ 531.654530][ T29] ext4_map_blocks+0x9cb/0x1b60 [ 531.659494][ T29] ? __slab_alloc+0x6b/0xa0 [ 531.664048][ T29] ? __cfi_ext4_map_blocks+0x10/0x10 [ 531.669401][ T29] ? ext4_inode_journal_mode+0x391/0x480 [ 531.675091][ T29] ext4_writepages+0x1260/0x3020 [ 531.680088][ T29] ? dev_hard_start_xmit+0x6df/0x750 [ 531.685434][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 531.690767][ T29] ? __local_bh_enable_ip+0x58/0x80 [ 531.696036][ T29] ? __dev_queue_xmit+0x13fb/0x3420 [ 531.701307][ T29] ? __kasan_check_write+0x14/0x20 [ 531.706465][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 531.711788][ T29] do_writepages+0x3a9/0x5e0 [ 531.716424][ T29] ? memcpy+0x56/0x70 [ 531.720427][ T29] ? ip6_finish_output2+0x160e/0x1870 [ 531.725860][ T29] ? __cfi_do_writepages+0x10/0x10 [ 531.731002][ T29] ? __cfi_wake_up_bit+0x10/0x10 [ 531.735990][ T29] ? __inode_add_lru+0xff/0x310 [ 531.740916][ T29] ? __kasan_check_write+0x14/0x20 [ 531.746069][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 531.750779][ T29] ? __kasan_check_write+0x14/0x20 [ 531.755929][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 531.760634][ T29] __writeback_single_inode+0xc6/0xad0 [ 531.766152][ T29] writeback_sb_inodes+0x9b8/0x1550 [ 531.771441][ T29] ? queue_io+0x4c0/0x4c0 [ 531.775822][ T29] ? down_read_trylock+0x273/0x640 [ 531.780968][ T29] ? native_send_call_func_single_ipi+0x6f/0x80 [ 531.787267][ T29] __writeback_inodes_wb+0x12f/0x400 [ 531.792586][ T29] wb_writeback+0x403/0x980 [ 531.797136][ T29] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 531.803145][ T29] ? set_worker_desc+0x155/0x1c0 [ 531.808131][ T29] ? update_load_avg+0x4c2/0x13f0 [ 531.813191][ T29] ? __kasan_check_write+0x14/0x20 [ 531.818347][ T29] wb_workfn+0x986/0xda0 [ 531.822622][ T29] ? __cfi_wb_workfn+0x10/0x10 [ 531.827437][ T29] ? kthread_data+0x50/0xc0 [ 531.831977][ T29] ? __switch_to_asm+0x3a/0x60 [ 531.836808][ T29] ? __schedule+0xb8f/0x14e0 [ 531.841433][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 531.847028][ T29] process_one_work+0x71f/0xc40 [ 531.851957][ T29] worker_thread+0xa29/0x11f0 [ 531.856687][ T29] kthread+0x281/0x320 [ 531.860808][ T29] ? __cfi_worker_thread+0x10/0x10 [ 531.865967][ T29] ? __cfi_kthread+0x10/0x10 [ 531.870586][ T29] ret_from_fork+0x1f/0x30 [ 531.875051][ T29] [ 532.105043][ T29] NMI backtrace for cpu 0 [ 532.109433][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 532.116658][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.126745][ T29] Call Trace: [ 532.130049][ T29] [ 532.133003][ T29] __dump_stack+0x21/0x24 [ 532.137362][ T29] dump_stack_lvl+0xee/0x150 [ 532.142151][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 532.147207][ T29] dump_stack+0x15/0x24 [ 532.151400][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 532.156366][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 532.161950][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 532.167446][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 532.172456][ T29] ? memcpy+0x56/0x70 [ 532.176482][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.182531][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 532.188630][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 532.194553][ T29] watchdog+0xd44/0xe80 [ 532.198747][ T29] ? __cfi_watchdog+0x10/0x10 [ 532.203463][ T29] ? __kasan_check_read+0x11/0x20 [ 532.208518][ T29] ? __kthread_parkme+0x142/0x180 [ 532.213573][ T29] kthread+0x281/0x320 [ 532.217671][ T29] ? __cfi_watchdog+0x10/0x10 [ 532.222386][ T29] ? __cfi_kthread+0x10/0x10 [ 532.227010][ T29] ret_from_fork+0x1f/0x30 [ 532.231456][ T29] [ 532.234570][ T29] Sending NMI from CPU 0 to CPUs 1: [ 532.239816][ C1] NMI backtrace for cpu 1 [ 532.239826][ C1] CPU: 1 PID: 421 Comm: syz.1.18 Not tainted syzkaller #0 [ 532.239842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.239851][ C1] RIP: 0010:update_stack_state+0x1d1/0x480 [ 532.239875][ C1] Code: 8b 73 10 48 8b 45 b8 42 0f b6 04 28 84 c0 0f 85 8c 00 00 00 49 89 dc 44 8b 2b 45 85 ed 0f 95 c0 48 8b 55 b0 4c 39 fa 0f 93 c1 <20> c1 4c 39 f2 0f 92 c0 20 c8 3c 01 75 17 48 8b 8d 78 ff ff ff 4c [ 532.239888][ C1] RSP: 0018:ffffc900001b0698 EFLAGS: 00000006 [ 532.239903][ C1] RAX: 0000000000000001 RBX: ffffc900001b07e8 RCX: 1ffff92000036001 [ 532.239916][ C1] RDX: ffffc900001b0ba0 RSI: 1ffff920000360fe RDI: ffffc900001b0840 [ 532.239929][ C1] RBP: ffffc900001b0758 R08: ffffc900001b08b0 R09: ffffc900001b08a8 [ 532.239941][ C1] R10: 0000000000000002 R11: 1ffff920000360fd R12: ffffc900001b07e8 [ 532.239953][ C1] R13: 0000000000000002 R14: ffffc900001b1000 R15: ffffc900001a9000 [ 532.239966][ C1] FS: 0000555568e36500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 532.239981][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.239992][ C1] CR2: 0000000000000000 CR3: 0000000133d10000 CR4: 00000000003506a0 [ 532.240007][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.240017][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 532.240027][ C1] Call Trace: [ 532.240031][ C1] [ 532.240041][ C1] unwind_next_frame+0x3d5/0x700 [ 532.240060][ C1] ? __kernel_text_address+0xd/0x30 [ 532.240083][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 532.240105][ C1] arch_stack_walk+0x124/0x150 [ 532.240131][ C1] ? __kasan_slab_alloc+0x72/0x80 [ 532.240153][ C1] stack_trace_save+0x98/0xe0 [ 532.240174][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 532.240194][ C1] ? __stack_depot_save+0x36/0x480 [ 532.240212][ C1] ? __alloc_pages+0x450/0x450 [ 532.240235][ C1] ? memset+0x35/0x40 [ 532.240249][ C1] kasan_set_track+0x4b/0x70 [ 532.240266][ C1] ? kasan_set_track+0x4b/0x70 [ 532.240283][ C1] ? kasan_save_alloc_info+0x25/0x30 [ 532.240307][ C1] ? __kasan_slab_alloc+0x72/0x80 [ 532.240336][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 532.240359][ C1] kasan_save_alloc_info+0x25/0x30 [ 532.240383][ C1] __kasan_slab_alloc+0x72/0x80 [ 532.240404][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 532.240426][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 532.240450][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 532.240473][ C1] kmem_cache_alloc+0x16e/0x330 [ 532.240493][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 532.240517][ C1] __sigqueue_alloc+0x13f/0x210 [ 532.240540][ C1] __send_signal_locked+0x19d/0xb70 [ 532.240561][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 532.240583][ C1] send_signal_locked+0x422/0x580 [ 532.240605][ C1] do_send_sig_info+0xd6/0x210 [ 532.240626][ C1] group_send_sig_info+0x118/0x2b0 [ 532.240648][ C1] ? __cfi_group_send_sig_info+0x10/0x10 [ 532.240677][ C1] do_bpf_send_signal+0x82/0x150 [ 532.240703][ C1] irq_work_run_list+0x18b/0x2b0 [ 532.240725][ C1] ? irq_work_run+0xf0/0xf0 [ 532.240758][ C1] irq_work_run+0x6a/0xf0 [ 532.240777][ C1] __sysvec_irq_work+0x75/0x1c0 [ 532.240800][ C1] sysvec_irq_work+0xa1/0xc0 [ 532.240822][ C1] [ 532.240826][ C1] [ 532.240831][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 532.240854][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 532.240878][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 3a 1c 57 01 5d c3 0f 1f 84 00 00 00 00 [ 532.240891][ C1] RSP: 0018:ffffc90000db7c20 EFLAGS: 00000246 [ 532.240904][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 532.240914][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 532.240923][ C1] RBP: ffffc90000db7c20 R08: dffffc0000000000 R09: fffff520001b6f81 [ 532.240935][ C1] R10: 0000000000000000 R11: ffffffff81343740 R12: 0000000000000000 [ 532.240946][ C1] R13: dffffc0000000001 R14: ffffffff86496b60 R15: dffffc0000000000 [ 532.240959][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 532.240984][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 532.241006][ C1] arch_irq_work_raise+0x98/0xf0 [ 532.241028][ C1] __irq_work_queue_local+0x115/0x190 [ 532.241048][ C1] irq_work_queue+0x9e/0x150 [ 532.241067][ C1] bpf_send_signal_common+0x2b2/0x420 [ 532.241091][ C1] ? __set_printk_clr_event+0x80/0x80 [ 532.241116][ C1] bpf_send_signal+0x19/0x20 [ 532.241134][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 532.241150][ C1] bpf_trace_run2+0xff/0x250 [ 532.241171][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 532.241195][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 532.241211][ C1] trace_sys_enter+0x3d/0x50 [ 532.241227][ C1] syscall_trace_enter+0xf3/0x150 [ 532.241243][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 532.241268][ C1] do_syscall_64+0x24/0xa0 [ 532.241285][ C1] ? clear_bhb_loop+0x30/0x80 [ 532.241308][ C1] ? clear_bhb_loop+0x30/0x80 [ 532.241331][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.241353][ C1] RIP: 0033:0x7f1cb212b829 [ 532.241364][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 532.241377][ C1] RSP: 002b:00007ffc3db7af00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 532.241392][ C1] RAX: ffffffffffffffda RBX: 00007f1cb23e5fa8 RCX: 00007f1cb212b829 [ 532.241404][ C1] RDX: 00007ffc3db7af00 RSI: 00007ffc3db7b030 RDI: 0000000000000011 [ 532.241416][ C1] RBP: 0000000000000000 R08: 002b01a574ccebfe R09: 000000083db7b78f [ 532.241427][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f1cb23e5fac [ 532.241437][ C1] R13: 00007f1cb23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 532.241450][ C1]