Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. 2026/01/13 09:14:37 parsed 1 programs [ 263.383802][ T28] audit: type=1400 audit(1768295677.015:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 263.404608][ T28] audit: type=1400 audit(1768295677.025:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 264.566619][ T28] audit: type=1400 audit(1768295678.205:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 264.570722][ T291] cgroup: Unknown subsys name 'net' [ 264.589622][ T28] audit: type=1400 audit(1768295678.205:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 264.616659][ T28] audit: type=1400 audit(1768295678.235:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 264.617168][ T291] cgroup: Unknown subsys name 'devices' [ 264.726131][ T291] cgroup: Unknown subsys name 'hugetlb' [ 264.731779][ T291] cgroup: Unknown subsys name 'rlimit' [ 264.876732][ T28] audit: type=1400 audit(1768295678.515:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.899975][ T28] audit: type=1400 audit(1768295678.515:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.920416][ T28] audit: type=1400 audit(1768295678.515:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.940781][ T28] audit: type=1400 audit(1768295678.515:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.960012][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 264.961682][ T28] audit: type=1400 audit(1768295678.515:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 265.030674][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 265.769265][ T300] request_module fs-gadgetfs succeeded, but still no fs? [ 266.179019][ T313] syz-executor (313) used greatest stack depth: 22144 bytes left [ 266.333262][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.340531][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.348375][ T333] device bridge_slave_0 entered promiscuous mode [ 266.364793][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.371872][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.387006][ T333] device bridge_slave_1 entered promiscuous mode [ 266.603643][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.610737][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.618118][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.625194][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.654025][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.662167][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.669858][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.685775][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.694225][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.701279][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.709015][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.717503][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.724589][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.735230][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.745020][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.759898][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.771743][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.780081][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.787781][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.796580][ T333] device veth0_vlan entered promiscuous mode 2026/01/13 09:14:40 executed programs: 0 [ 266.807544][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.816928][ T333] device veth1_macvtap entered promiscuous mode [ 266.827613][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.838234][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.943379][ T333] syz-executor (333) used greatest stack depth: 21280 bytes left [ 267.085271][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.092342][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.099871][ T366] device bridge_slave_0 entered promiscuous mode [ 267.108110][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.115305][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.122667][ T366] device bridge_slave_1 entered promiscuous mode [ 267.190858][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.198030][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.205660][ T368] device bridge_slave_0 entered promiscuous mode [ 267.223386][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.230518][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.238233][ T368] device bridge_slave_1 entered promiscuous mode [ 267.267978][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.275394][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.282920][ T371] device bridge_slave_0 entered promiscuous mode [ 267.311311][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.318442][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.326218][ T371] device bridge_slave_1 entered promiscuous mode [ 267.332815][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.339921][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.347592][ T374] device bridge_slave_0 entered promiscuous mode [ 267.368360][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.375552][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.382935][ T374] device bridge_slave_1 entered promiscuous mode [ 267.424030][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.431075][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.438652][ T372] device bridge_slave_0 entered promiscuous mode [ 267.456746][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.463898][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.471391][ T372] device bridge_slave_1 entered promiscuous mode [ 267.649151][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.656226][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.663470][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.670525][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.699335][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.707001][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.715381][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.722799][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.757110][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.765725][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.775097][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.782133][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.789689][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.813323][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.821745][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.830114][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.837192][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.858360][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.866084][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.874768][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.881830][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.890886][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.899119][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.906193][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.934550][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.942620][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.958194][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.966394][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.979947][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.987841][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.995452][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.003728][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.010770][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.018356][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.026758][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.033843][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.053097][ T371] device veth0_vlan entered promiscuous mode [ 268.074176][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.082402][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.091537][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.100642][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.108828][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.116332][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.124127][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.132154][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.140446][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.148710][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.155749][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.163105][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.171285][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.189139][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.201308][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.210436][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.218717][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.225767][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.240518][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.248711][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.262166][ T371] device veth1_macvtap entered promiscuous mode [ 268.269158][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.278344][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.286814][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.295406][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.303345][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.322024][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.329621][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.337412][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.345813][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.362247][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.370722][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.384156][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.392472][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.401174][ T366] device veth0_vlan entered promiscuous mode [ 268.414050][ T374] device veth0_vlan entered promiscuous mode [ 268.431925][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.440069][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.449127][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.457519][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.466016][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.473460][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.481172][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.489639][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.498077][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.505152][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.512643][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.521061][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.529418][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.537775][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.546099][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.553646][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.561119][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.578972][ T366] device veth1_macvtap entered promiscuous mode [ 268.589103][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.596898][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.605533][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.614674][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.621754][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.633554][ T368] device veth0_vlan entered promiscuous mode [ 268.644767][ T43] device bridge_slave_1 left promiscuous mode [ 268.650895][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.659093][ T43] device bridge_slave_0 left promiscuous mode [ 268.665453][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.673439][ T43] device veth1_macvtap left promiscuous mode [ 268.679553][ T43] device veth0_vlan left promiscuous mode [ 268.755317][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.763490][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.771757][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.779792][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.788101][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.796786][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.804947][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.813166][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.821758][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.830304][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.838838][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.846493][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.860416][ T374] device veth1_macvtap entered promiscuous mode [ 268.872901][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.881344][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.889796][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.898263][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.906671][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.918696][ T372] device veth0_vlan entered promiscuous mode [ 268.925755][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.933922][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.950179][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.959915][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.967839][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.976680][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.001115][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 269.001155][ T28] audit: type=1400 audit(1768295682.635:105): avc: denied { bpf } for pid=423 comm="syz.6.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 269.113800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.122750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.743697][ T28] audit: type=1400 audit(1768295682.635:106): avc: denied { map_create } for pid=423 comm="syz.6.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 270.213919][ T28] audit: type=1400 audit(1768295682.635:107): avc: denied { map_read map_write } for pid=423 comm="syz.6.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 270.764455][ T28] audit: type=1400 audit(1768295682.635:108): avc: denied { prog_load } for pid=423 comm="syz.6.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 271.263636][ T28] audit: type=1400 audit(1768295682.635:109): avc: denied { perfmon } for pid=423 comm="syz.6.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.774119][ T28] audit: type=1400 audit(1768295682.635:110): avc: denied { prog_run } for pid=423 comm="syz.6.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.723664][ T29] INFO: task kworker/u4:3:320 blocked for more than 122 seconds. [ 407.731457][ T29] Not tainted syzkaller #0 [ 407.963589][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.972309][ T29] task:kworker/u4:3 state:D stack:26048 pid:320 ppid:2 flags:0x00004000 [ 408.243622][ T29] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 408.251186][ T29] Call Trace: [ 408.254534][ T29] [ 408.257491][ T29] __schedule+0xb87/0x14e0 [ 408.261954][ T29] ? __sched_text_start+0x8/0x8 [ 408.266904][ T29] ? kthread_data+0x50/0xc0 [ 408.271441][ T29] ? wq_worker_sleeping+0x64/0x280 [ 408.276603][ T29] schedule+0xbd/0x170 [ 408.280721][ T29] schedule_timeout+0xa6/0x2e0 [ 408.285555][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 408.290953][ T29] wait_for_common+0x354/0x620 [ 408.295772][ T29] ? wait_for_completion+0x20/0x20 [ 408.300926][ T29] ? __switch_to+0x51f/0xe30 [ 408.305553][ T29] wait_for_completion+0x18/0x20 [ 408.310524][ T29] __synchronize_srcu+0x16c/0x1f0 [ 408.315586][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 408.321325][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 408.326825][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 408.332315][ T29] ? __kasan_check_write+0x14/0x20 [ 408.337454][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 408.342173][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 408.347759][ T29] synchronize_srcu+0x1d9/0x1f0 [ 408.352632][ T29] fsnotify_connector_destroy_workfn+0x44/0xa0 [ 408.358871][ T29] process_one_work+0x71f/0xc40 [ 408.364221][ T29] worker_thread+0xa29/0x11f0 [ 408.368946][ T29] kthread+0x281/0x320 [ 408.373039][ T29] ? __cfi_worker_thread+0x10/0x10 [ 408.378184][ T29] ? __cfi_kthread+0x10/0x10 [ 408.382792][ T29] ret_from_fork+0x1f/0x30 [ 408.387244][ T29] [ 408.743544][ T29] INFO: task kworker/u4:4:326 blocked for more than 123 seconds. [ 408.751318][ T29] Not tainted syzkaller #0 [ 409.193562][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.202370][ T29] task:kworker/u4:4 state:D stack:25088 pid:326 ppid:2 flags:0x00004000 [ 409.433586][ T29] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 409.440675][ T29] Call Trace: [ 409.443996][ T29] [ 409.446955][ T29] __schedule+0xb87/0x14e0 [ 409.451401][ T29] ? __cfi_ip_finish_output+0x10/0x10 [ 409.456844][ T29] ? __sched_text_start+0x8/0x8 [ 409.461716][ T29] ? kthread_data+0x50/0xc0 [ 409.466247][ T29] ? wq_worker_sleeping+0x64/0x280 [ 409.471387][ T29] schedule+0xbd/0x170 [ 409.475509][ T29] schedule_timeout+0xa6/0x2e0 [ 409.480300][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 409.485702][ T29] ? _raw_spin_trylock+0xb1/0x140 [ 409.490749][ T29] ? __cfi__raw_spin_trylock+0x10/0x10 [ 409.496235][ T29] wait_for_common+0x354/0x620 [ 409.501030][ T29] ? wait_for_completion+0x20/0x20 [ 409.506185][ T29] wait_for_completion+0x18/0x20 [ 409.511148][ T29] __synchronize_srcu+0x16c/0x1f0 [ 409.516207][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 409.521959][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 409.527465][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 409.532876][ T29] ? __kasan_check_write+0x14/0x20 [ 409.538016][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 409.542716][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 409.547951][ T29] synchronize_srcu+0x1d9/0x1f0 [ 409.552831][ T29] fsnotify_mark_destroy_workfn+0xfe/0x2f0 [ 409.558677][ T29] ? ttwu_do_activate+0x174/0x280 [ 409.563737][ T29] ? __cfi_fsnotify_mark_destroy_workfn+0x10/0x10 [ 409.570176][ T29] process_one_work+0x71f/0xc40 [ 409.575088][ T29] worker_thread+0xa29/0x11f0 [ 409.579788][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 409.585290][ T29] ? __kthread_parkme+0x142/0x180 [ 409.590330][ T29] kthread+0x281/0x320 [ 409.594435][ T29] ? __cfi_worker_thread+0x10/0x10 [ 409.599569][ T29] ? __cfi_kthread+0x10/0x10 [ 409.604198][ T29] ret_from_fork+0x1f/0x30 [ 409.608643][ T29] [ 410.003565][ T29] NMI backtrace for cpu 0 [ 410.007949][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 410.015171][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.025239][ T29] Call Trace: [ 410.028541][ T29] [ 410.031492][ T29] __dump_stack+0x21/0x24 [ 410.035840][ T29] dump_stack_lvl+0xee/0x150 [ 410.040454][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 410.045503][ T29] dump_stack+0x15/0x24 [ 410.049683][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 410.054648][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 410.060396][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 410.065876][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 410.070950][ T29] ? memcpy+0x56/0x70 [ 410.074958][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 410.080963][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 410.086992][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 410.092911][ T29] watchdog+0xd44/0xe80 [ 410.097105][ T29] ? __cfi_watchdog+0x10/0x10 [ 410.101818][ T29] ? __kasan_check_read+0x11/0x20 [ 410.106870][ T29] ? __kthread_parkme+0x142/0x180 [ 410.111918][ T29] kthread+0x281/0x320 [ 410.116013][ T29] ? __cfi_watchdog+0x10/0x10 [ 410.120720][ T29] ? __cfi_kthread+0x10/0x10 [ 410.125342][ T29] ret_from_fork+0x1f/0x30 [ 410.129808][ T29] [ 410.132912][ T29] Sending NMI from CPU 0 to CPUs 1: [ 410.138161][ C1] NMI backtrace for cpu 1 [ 410.138169][ C1] CPU: 1 PID: 423 Comm: syz.6.17 Not tainted syzkaller #0 [ 410.138184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.138198][ C1] RIP: 0010:_raw_spin_unlock_irq+0x3a/0x70 [ 410.138221][ C1] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 12 48 89 fb 48 c7 c7 80 d4 ed 86 e8 81 0f c0 fc 48 89 df 48 83 3d a6 35 f9 01 00 <74> 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 e8 93 1a 57 fc 65 8b 05 [ 410.138234][ C1] RSP: 0018:ffffc900007c7c30 EFLAGS: 00000086 [ 410.138248][ C1] RAX: 1ffffffff0ddba90 RBX: ffff8881191ab0e0 RCX: dffffc0000000000 [ 410.138260][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888115b7cec0 [ 410.138270][ C1] RBP: ffffc900007c7c38 R08: dffffc0000000000 R09: ffffed1023235511 [ 410.138282][ C1] R10: ffffed1023235511 R11: 1ffff11023235510 R12: dffffc0000000000 [ 410.138294][ C1] R13: ffffc900007c7e80 R14: 0000000000000000 R15: ffff8881191ab0d8 [ 410.138305][ C1] FS: 00005555764ef500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 410.138319][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.138330][ C1] CR2: 0000000000000000 CR3: 0000000132147000 CR4: 00000000003506a0 [ 410.138343][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.138352][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.138361][ C1] Call Trace: [ 410.138365][ C1] [ 410.138370][ C1] __set_current_blocked+0x204/0x230 [ 410.138395][ C1] set_current_blocked+0x3a/0x40 [ 410.138417][ C1] __ia32_sys_rt_sigreturn+0x157/0x6c0 [ 410.138437][ C1] ? __set_printk_clr_event+0x80/0x80 [ 410.138460][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 410.138479][ C1] ? bpf_send_signal+0x19/0x20 [ 410.138496][ C1] ? bpf_trace_run2+0x104/0x250 [ 410.138517][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 410.138543][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 410.138559][ C1] ? trace_sys_enter+0x3d/0x50 [ 410.138575][ C1] x64_sys_call+0x832/0x9a0 [ 410.138592][ C1] do_syscall_64+0x4c/0xa0 [ 410.138610][ C1] ? clear_bhb_loop+0x30/0x80 [ 410.138632][ C1] ? clear_bhb_loop+0x30/0x80 [ 410.138653][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.138674][ C1] RIP: 0033:0x7fafd212b829 [ 410.138690][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 410.138702][ C1] RSP: 002b:00007ffc81f2bb80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 410.138716][ C1] RAX: ffffffffffffffda RBX: 00007fafd23e5fa8 RCX: 00007fafd212b829 [ 410.138727][ C1] RDX: 00007ffc81f2bb80 RSI: 00007ffc81f2bcb0 RDI: 0000000000000011 [ 410.138738][ C1] RBP: 0000000000000000 R08: 003a1d55bad3362e R09: 0000000781f2c42f [ 410.138748][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fafd23e5fac [ 410.138758][ C1] R13: 00007fafd23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 410.138771][ C1] [ 435.253615][ T29] INFO: task kworker/u4:2:43 blocked for more than 129 seconds. [ 435.261328][ T29] Not tainted syzkaller #0 [ 435.483535][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.492257][ T29] task:kworker/u4:2 state:D stack:24560 pid:43 ppid:2 flags:0x00004000 [ 436.103535][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 436.109603][ T29] Call Trace: [ 436.112908][ T29] [ 436.115952][ T29] __schedule+0xb87/0x14e0 [ 436.120560][ T29] ? __sched_text_start+0x8/0x8 [ 436.125459][ T29] ? kthread_data+0x50/0xc0 [ 436.129982][ T29] ? wq_worker_sleeping+0x64/0x280 [ 436.135140][ T29] schedule+0xbd/0x170 [ 436.139227][ T29] io_schedule+0x84/0xe0 [ 436.143532][ T29] bit_wait_io+0x13/0xd0 [ 436.147808][ T29] __wait_on_bit_lock+0x257/0x600 [ 436.152868][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 436.157858][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 436.162829][ T29] out_of_line_wait_on_bit_lock+0x11c/0x160 [ 436.168762][ T29] ? __cfi_out_of_line_wait_on_bit_lock+0x10/0x10 [ 436.175344][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 436.180044][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 436.185562][ T29] __lock_buffer+0x59/0x70 [ 436.190028][ T29] do_get_write_access+0x1a3/0xd70 [ 436.195260][ T29] ? __cfi___find_get_block+0x10/0x10 [ 436.200658][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 436.206684][ T29] __ext4_journal_get_write_access+0x216/0x6c0 [ 436.212941][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 436.219669][ T29] ? __kasan_check_read+0x11/0x20 [ 436.224817][ T29] ? ext4_wait_block_bitmap+0x6a/0x1c0 [ 436.230329][ T29] ext4_mb_mark_diskspace_used+0x1cf/0x1450 [ 436.236262][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 436.241409][ T29] ? ext4_discard_allocated_blocks+0x5d0/0x5d0 [ 436.247728][ T29] ext4_mb_new_blocks+0x10ec/0x4210 [ 436.252972][ T29] ? __kasan_kmalloc+0x95/0xb0 [ 436.257798][ T29] ? ext4_find_extent+0x36b/0xe20 [ 436.262865][ T29] ? memset+0x35/0x40 [ 436.266891][ T29] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 436.272463][ T29] ? ext4_inode_to_goal_block+0x352/0x4a0 [ 436.278240][ T29] ? ext4_ext_find_goal+0x11d/0x200 [ 436.283475][ T29] ext4_ext_map_blocks+0x1695/0x6080 [ 436.288813][ T29] ? kasan_set_track+0x60/0x70 [ 436.293616][ T29] ? kasan_set_track+0x4b/0x70 [ 436.298406][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 436.303740][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 436.308804][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 436.314163][ T29] ? kmem_cache_alloc+0x16e/0x330 [ 436.319250][ T29] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 436.324697][ T29] ? ext4_writepages+0xf42/0x3020 [ 436.329768][ T29] ? do_writepages+0x3a9/0x5e0 [ 436.334587][ T29] ? __writeback_single_inode+0xc6/0xad0 [ 436.340279][ T29] ? writeback_sb_inodes+0x9b8/0x1550 [ 436.345698][ T29] ? __writeback_inodes_wb+0x12f/0x400 [ 436.351197][ T29] ? wb_writeback+0x403/0x980 [ 436.355928][ T29] ? wb_workfn+0x986/0xda0 [ 436.360375][ T29] ? process_one_work+0x71f/0xc40 [ 436.365438][ T29] ? worker_thread+0xa29/0x11f0 [ 436.370323][ T29] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 436.376012][ T29] ? ext4_es_lookup_extent+0x54c/0x900 [ 436.381515][ T29] ext4_map_blocks+0x9cb/0x1b60 [ 436.386448][ T29] ? __cfi_ext4_map_blocks+0x10/0x10 [ 436.391777][ T29] ? ext4_inode_journal_mode+0x391/0x480 [ 436.397450][ T29] ext4_writepages+0x1260/0x3020 [ 436.402428][ T29] ? __cfi_eth_type_trans+0x10/0x10 [ 436.407665][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 436.412984][ T29] ? debug_smp_processor_id+0x17/0x20 [ 436.418431][ T29] ? loopback_xmit+0x415/0x600 [ 436.423215][ T29] ? __kasan_check_read+0x11/0x20 [ 436.428263][ T29] ? __kasan_check_write+0x14/0x20 [ 436.433387][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 436.438111][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 436.443338][ T29] ? __wb_update_bandwidth+0x8b4/0x920 [ 436.448865][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 436.454191][ T29] do_writepages+0x3a9/0x5e0 [ 436.458809][ T29] ? __cfi_do_writepages+0x10/0x10 [ 436.463977][ T29] ? __cfi_wake_up_bit+0x10/0x10 [ 436.468960][ T29] ? __inode_add_lru+0xff/0x310 [ 436.473863][ T29] ? __kasan_check_write+0x14/0x20 [ 436.479028][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 436.483753][ T29] ? __kasan_check_write+0x14/0x20 [ 436.488889][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 436.493629][ T29] __writeback_single_inode+0xc6/0xad0 [ 436.499117][ T29] writeback_sb_inodes+0x9b8/0x1550 [ 436.504364][ T29] ? queue_io+0x4c0/0x4c0 [ 436.508727][ T29] ? down_read_trylock+0x273/0x640 [ 436.513893][ T29] ? native_send_call_func_single_ipi+0x6f/0x80 [ 436.520177][ T29] __writeback_inodes_wb+0x12f/0x400 [ 436.525498][ T29] wb_writeback+0x403/0x980 [ 436.530029][ T29] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 436.536038][ T29] ? set_worker_desc+0x155/0x1c0 [ 436.540992][ T29] ? update_load_avg+0x4c2/0x13f0 [ 436.546046][ T29] ? __kasan_check_write+0x14/0x20 [ 436.551210][ T29] wb_workfn+0x986/0xda0 [ 436.555500][ T29] ? __cfi_wb_workfn+0x10/0x10 [ 436.560283][ T29] ? kthread_data+0x50/0xc0 [ 436.564846][ T29] ? __switch_to_asm+0x3a/0x60 [ 436.569662][ T29] ? __schedule+0xb8f/0x14e0 [ 436.574295][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 436.579869][ T29] process_one_work+0x71f/0xc40 [ 436.584769][ T29] worker_thread+0xa29/0x11f0 [ 436.589495][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 436.595000][ T29] kthread+0x281/0x320 [ 436.599085][ T29] ? __cfi_worker_thread+0x10/0x10 [ 436.604224][ T29] ? __cfi_kthread+0x10/0x10 [ 436.608835][ T29] ret_from_fork+0x1f/0x30 [ 436.613275][ T29] [ 437.063546][ T29] INFO: task jbd2/sda1-8:66 blocked for more than 131 seconds. [ 437.071234][ T29] Not tainted syzkaller #0 [ 437.483533][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.492262][ T29] task:jbd2/sda1-8 state:D stack:24928 pid:66 ppid:2 flags:0x00004000 [ 437.603588][ T29] Call Trace: [ 437.606929][ T29] [ 437.609883][ T29] __schedule+0xb87/0x14e0 [ 437.614352][ T29] ? sbitmap_any_bit_set+0x11a/0x160 [ 437.619660][ T29] ? __sched_text_start+0x8/0x8 [ 437.624570][ T29] schedule+0xbd/0x170 [ 437.628661][ T29] io_schedule+0x84/0xe0 [ 437.632922][ T29] bit_wait_io+0x13/0xd0 [ 437.637198][ T29] __wait_on_bit+0xb9/0x2d0 [ 437.641728][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 437.646724][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 437.651694][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 437.657209][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 437.663230][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 437.667948][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 437.673445][ T29] ? __cfi__raw_write_lock+0x10/0x10 [ 437.678789][ T29] ? _raw_read_unlock+0x25/0x40 [ 437.683681][ T29] __wait_on_buffer+0x56/0x70 [ 437.688377][ T29] jbd2_journal_commit_transaction+0x2d77/0x5530 [ 437.694754][ T29] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 437.701455][ T29] ? __cfi___switch_to+0x10/0x10 [ 437.706439][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 437.711318][ T29] ? finish_task_switch+0x16b/0x7b0 [ 437.716566][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 437.722483][ T29] ? __kasan_check_write+0x14/0x20 [ 437.727640][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 437.733129][ T29] ? detach_if_pending+0xf4/0x300 [ 437.738212][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 437.744072][ T29] ? del_timer_sync+0x144/0x1a0 [ 437.748947][ T29] kjournald2+0x3e7/0x760 [ 437.753301][ T29] ? __cfi_kjournald2+0x10/0x10 [ 437.758201][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 437.764309][ T29] ? __kasan_check_read+0x11/0x20 [ 437.769356][ T29] ? __kthread_parkme+0x142/0x180 [ 437.774416][ T29] kthread+0x281/0x320 [ 437.778517][ T29] ? __cfi_kjournald2+0x10/0x10 [ 437.783389][ T29] ? __cfi_kthread+0x10/0x10 [ 437.788028][ T29] ret_from_fork+0x1f/0x30 [ 437.792501][ T29] [ 438.303831][ T29] INFO: task kworker/u4:3:320 blocked for more than 153 seconds. [ 438.311950][ T29] Not tainted syzkaller #0 [ 438.743541][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.752342][ T29] task:kworker/u4:3 state:D stack:26048 pid:320 ppid:2 flags:0x00004000 [ 439.003600][ T29] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 439.011131][ T29] Call Trace: [ 439.014451][ T29] [ 439.017420][ T29] __schedule+0xb87/0x14e0 [ 439.021866][ T29] ? __sched_text_start+0x8/0x8 [ 439.026769][ T29] ? kthread_data+0x50/0xc0 [ 439.031298][ T29] ? wq_worker_sleeping+0x64/0x280 [ 439.036471][ T29] schedule+0xbd/0x170 [ 439.040569][ T29] schedule_timeout+0xa6/0x2e0 [ 439.045374][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 439.050773][ T29] wait_for_common+0x354/0x620 [ 439.055595][ T29] ? wait_for_completion+0x20/0x20 [ 439.060732][ T29] ? __switch_to+0x51f/0xe30 [ 439.065365][ T29] wait_for_completion+0x18/0x20 [ 439.070353][ T29] __synchronize_srcu+0x16c/0x1f0 [ 439.075434][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 439.081176][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 439.086692][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 439.092091][ T29] ? __kasan_check_write+0x14/0x20 [ 439.097226][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 439.101928][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 439.107515][ T29] synchronize_srcu+0x1d9/0x1f0 [ 439.112394][ T29] fsnotify_connector_destroy_workfn+0x44/0xa0 [ 439.118579][ T29] process_one_work+0x71f/0xc40 [ 439.123452][ T29] worker_thread+0xa29/0x11f0 [ 439.128177][ T29] kthread+0x281/0x320 [ 439.132268][ T29] ? __cfi_worker_thread+0x10/0x10 [ 439.137414][ T29] ? __cfi_kthread+0x10/0x10 [ 439.142024][ T29] ret_from_fork+0x1f/0x30 [ 439.146479][ T29] [ 439.523560][ T29] INFO: task kworker/u4:4:326 blocked for more than 154 seconds. [ 439.531328][ T29] Not tainted syzkaller #0 [ 439.973535][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.982265][ T29] task:kworker/u4:4 state:D stack:25088 pid:326 ppid:2 flags:0x00004000 [ 440.363643][ T29] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 440.370749][ T29] Call Trace: [ 440.374070][ T29] [ 440.377013][ T29] __schedule+0xb87/0x14e0 [ 440.381459][ T29] ? __cfi_ip_finish_output+0x10/0x10 [ 440.386900][ T29] ? __sched_text_start+0x8/0x8 [ 440.391776][ T29] ? kthread_data+0x50/0xc0 [ 440.396309][ T29] ? wq_worker_sleeping+0x64/0x280 [ 440.401474][ T29] schedule+0xbd/0x170 [ 440.405611][ T29] schedule_timeout+0xa6/0x2e0 [ 440.410406][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 440.415813][ T29] ? _raw_spin_trylock+0xb1/0x140 [ 440.420872][ T29] ? __cfi__raw_spin_trylock+0x10/0x10 [ 440.426373][ T29] wait_for_common+0x354/0x620 [ 440.431189][ T29] ? wait_for_completion+0x20/0x20 [ 440.436348][ T29] wait_for_completion+0x18/0x20 [ 440.441315][ T29] __synchronize_srcu+0x16c/0x1f0 [ 440.446378][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 440.452121][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 440.457620][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 440.463042][ T29] ? __kasan_check_write+0x14/0x20 [ 440.468219][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 440.472937][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 440.478206][ T29] synchronize_srcu+0x1d9/0x1f0 [ 440.483096][ T29] fsnotify_mark_destroy_workfn+0xfe/0x2f0 [ 440.488978][ T29] ? ttwu_do_activate+0x174/0x280 [ 440.494066][ T29] ? __cfi_fsnotify_mark_destroy_workfn+0x10/0x10 [ 440.500517][ T29] process_one_work+0x71f/0xc40 [ 440.505425][ T29] worker_thread+0xa29/0x11f0 [ 440.510131][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 440.515641][ T29] ? __kthread_parkme+0x142/0x180 [ 440.520698][ T29] kthread+0x281/0x320 [ 440.524806][ T29] ? __cfi_worker_thread+0x10/0x10 [ 440.529935][ T29] ? __cfi_kthread+0x10/0x10 [ 440.534564][ T29] ret_from_fork+0x1f/0x30 [ 440.539010][ T29] [ 440.783570][ T29] NMI backtrace for cpu 0 [ 440.787953][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 440.795193][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.805270][ T29] Call Trace: [ 440.808568][ T29] [ 440.811520][ T29] __dump_stack+0x21/0x24 [ 440.815883][ T29] dump_stack_lvl+0xee/0x150 [ 440.820493][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 440.825546][ T29] dump_stack+0x15/0x24 [ 440.829738][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 440.834725][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 440.840304][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 440.845789][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 440.850764][ T29] ? memcpy+0x56/0x70 [ 440.854765][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 440.860770][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 440.866774][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 440.872686][ T29] watchdog+0xd44/0xe80 [ 440.876881][ T29] ? __cfi_watchdog+0x10/0x10 [ 440.881587][ T29] ? __kasan_check_read+0x11/0x20 [ 440.886628][ T29] ? __kthread_parkme+0x142/0x180 [ 440.891696][ T29] kthread+0x281/0x320 [ 440.895789][ T29] ? __cfi_watchdog+0x10/0x10 [ 440.900507][ T29] ? __cfi_kthread+0x10/0x10 [ 440.905128][ T29] ret_from_fork+0x1f/0x30 [ 440.909572][ T29] [ 440.912676][ T29] Sending NMI from CPU 0 to CPUs 1: [ 440.917915][ C1] NMI backtrace for cpu 1 [ 440.917924][ C1] CPU: 1 PID: 423 Comm: syz.6.17 Not tainted syzkaller #0 [ 440.917941][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.917950][ C1] RIP: 0010:stack_trace_consume_entry+0x1/0x290 [ 440.917976][ C1] Code: 65 f0 5b 41 5e 5d c3 e8 7d fd 8c 03 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 b6 63 6b ad 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 ba 00 00 00 00 [ 440.917990][ C1] RSP: 0018:ffffc900001b07d8 EFLAGS: 00000057 [ 440.918005][ C1] RAX: ffffffff81b481cb RBX: ffffc900001b08a0 RCX: 00000000001b0800 [ 440.918017][ C1] RDX: ffffc900001b0901 RSI: ffffffff81b481cb RDI: ffffc900001b08a0 [ 440.918030][ C1] RBP: ffffc900001b0870 R08: ffffc900001b08b0 R09: ffffc900001b08a8 [ 440.918042][ C1] R10: 0000000000000000 R11: 1ffff920000360fd R12: ffff8881191aa880 [ 440.918053][ C1] R13: 0000000000000001 R14: ffffffff8160f060 R15: ffffc900001b07e8 [ 440.918065][ C1] FS: 00005555764ef500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 440.918080][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.918091][ C1] CR2: 0000000000000000 CR3: 0000000132147000 CR4: 00000000003506a0 [ 440.918106][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.918115][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.918125][ C1] Call Trace: [ 440.918129][ C1] [ 440.918135][ C1] ? arch_stack_walk+0x118/0x150 [ 440.918161][ C1] ? kasan_set_track+0x4b/0x70 [ 440.918180][ C1] stack_trace_save+0x98/0xe0 [ 440.918199][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 440.918220][ C1] ? __stack_depot_save+0x36/0x480 [ 440.918237][ C1] ? __alloc_pages+0x450/0x450 [ 440.918259][ C1] ? memset+0x35/0x40 [ 440.918273][ C1] kasan_set_track+0x4b/0x70 [ 440.918301][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 440.918325][ C1] kasan_save_alloc_info+0x25/0x30 [ 440.918349][ C1] __kasan_slab_alloc+0x72/0x80 [ 440.918369][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 440.918390][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 440.918413][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 440.918435][ C1] kmem_cache_alloc+0x16e/0x330 [ 440.918456][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 440.918484][ C1] __sigqueue_alloc+0x13f/0x210 [ 440.918506][ C1] __send_signal_locked+0x19d/0xb70 [ 440.918526][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 440.918548][ C1] send_signal_locked+0x422/0x580 [ 440.918569][ C1] do_send_sig_info+0xd6/0x210 [ 440.918589][ C1] group_send_sig_info+0x118/0x2b0 [ 440.918610][ C1] ? __cfi_group_send_sig_info+0x10/0x10 [ 440.918633][ C1] do_bpf_send_signal+0x82/0x150 [ 440.918658][ C1] irq_work_run_list+0x18b/0x2b0 [ 440.918678][ C1] ? irq_work_run+0xf0/0xf0 [ 440.918717][ C1] irq_work_run+0x6a/0xf0 [ 440.918737][ C1] __sysvec_irq_work+0x75/0x1c0 [ 440.918761][ C1] sysvec_irq_work+0xa1/0xc0 [ 440.918784][ C1] [ 440.918788][ C1] [ 440.918793][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 440.918817][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 440.918842][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 5a 28 57 01 5d c3 0f 1f 84 00 00 00 00 [ 440.918855][ C1] RSP: 0018:ffffc900007c7c20 EFLAGS: 00000246 [ 440.918868][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 440.918884][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 440.918894][ C1] RBP: ffffc900007c7c20 R08: dffffc0000000000 R09: fffff520000f8f81 [ 440.918907][ C1] R10: 0000000000000000 R11: ffffffff81343740 R12: 0000000000000000 [ 440.918937][ C1] R13: dffffc0000000001 R14: ffffffff86496b60 R15: dffffc0000000000 [ 440.918951][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 440.918977][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 440.919000][ C1] arch_irq_work_raise+0x98/0xf0 [ 440.919024][ C1] __irq_work_queue_local+0x115/0x190 [ 440.919045][ C1] irq_work_queue+0x9e/0x150 [ 440.919065][ C1] bpf_send_signal_common+0x2b2/0x420 [ 440.919097][ C1] ? __set_printk_clr_event+0x80/0x80 [ 440.919132][ C1] bpf_send_signal+0x19/0x20 [ 440.919151][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 440.919171][ C1] bpf_trace_run2+0xff/0x250 [ 440.919199][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 440.919232][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 440.919250][ C1] trace_sys_enter+0x3d/0x50 [ 440.919266][ C1] syscall_trace_enter+0xf3/0x150 [ 440.919291][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 440.919317][ C1] do_syscall_64+0x24/0xa0 [ 440.919336][ C1] ? clear_bhb_loop+0x30/0x80 [ 440.919360][ C1] ? clear_bhb_loop+0x30/0x80 [ 440.919384][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.919408][ C1] RIP: 0033:0x7fafd212b829 [ 440.919419][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 440.919432][ C1] RSP: 002b:00007ffc81f2bb80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 440.919449][ C1] RAX: ffffffffffffffda RBX: 00007fafd23e5fa8 RCX: 00007fafd212b829 [ 440.919461][ C1] RDX: 00007ffc81f2bb80 RSI: 00007ffc81f2bcb0 RDI: 0000000000000011 [ 440.919479][ C1] RBP: 0000000000000000 R08: 003a1d55bad3362e R09: 0000000781f2c42f [ 440.919490][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fafd23e5fac [ 440.919501][ C1] R13: 00007fafd23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 440.919515][ C1] [ 465.963570][ T29] INFO: task kworker/u4:2:43 blocked for more than 160 seconds. [ 465.971271][ T29] Not tainted syzkaller #0 [ 466.213554][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.222273][ T29] task:kworker/u4:2 state:D stack:24560 pid:43 ppid:2 flags:0x00004000 [ 466.533565][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 466.539642][ T29] Call Trace: [ 466.542957][ T29] [ 466.545932][ T29] __schedule+0xb87/0x14e0 [ 466.550379][ T29] ? __sched_text_start+0x8/0x8 [ 466.555307][ T29] ? kthread_data+0x50/0xc0 [ 466.559845][ T29] ? wq_worker_sleeping+0x64/0x280 [ 466.565021][ T29] schedule+0xbd/0x170 [ 466.569127][ T29] io_schedule+0x84/0xe0 [ 466.573416][ T29] bit_wait_io+0x13/0xd0 [ 466.577702][ T29] __wait_on_bit_lock+0x257/0x600 [ 466.582754][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 466.587776][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 466.592756][ T29] out_of_line_wait_on_bit_lock+0x11c/0x160 [ 466.598694][ T29] ? __cfi_out_of_line_wait_on_bit_lock+0x10/0x10 [ 466.605176][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 466.609906][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 466.615406][ T29] __lock_buffer+0x59/0x70 [ 466.619842][ T29] do_get_write_access+0x1a3/0xd70 [ 466.625000][ T29] ? __cfi___find_get_block+0x10/0x10 [ 466.630407][ T29] jbd2_journal_get_write_access+0x19a/0x2e0 [ 466.636431][ T29] __ext4_journal_get_write_access+0x216/0x6c0 [ 466.642613][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 466.649432][ T29] ? __kasan_check_read+0x11/0x20 [ 466.654502][ T29] ? ext4_wait_block_bitmap+0x6a/0x1c0 [ 466.659997][ T29] ext4_mb_mark_diskspace_used+0x1cf/0x1450 [ 466.665944][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 466.671018][ T29] ? ext4_discard_allocated_blocks+0x5d0/0x5d0 [ 466.677230][ T29] ext4_mb_new_blocks+0x10ec/0x4210 [ 466.682470][ T29] ? __kasan_kmalloc+0x95/0xb0 [ 466.687289][ T29] ? ext4_find_extent+0x36b/0xe20 [ 466.692390][ T29] ? memset+0x35/0x40 [ 466.696407][ T29] ? __cfi_ext4_mb_new_blocks+0x10/0x10 [ 466.701975][ T29] ? ext4_inode_to_goal_block+0x352/0x4a0 [ 466.707751][ T29] ? ext4_ext_find_goal+0x11d/0x200 [ 466.712990][ T29] ext4_ext_map_blocks+0x1695/0x6080 [ 466.718351][ T29] ? kasan_set_track+0x60/0x70 [ 466.723143][ T29] ? kasan_set_track+0x4b/0x70 [ 466.727951][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 466.733278][ T29] ? __kasan_slab_alloc+0x72/0x80 [ 466.738356][ T29] ? slab_post_alloc_hook+0x4f/0x2d0 [ 466.743683][ T29] ? kmem_cache_alloc+0x16e/0x330 [ 466.748748][ T29] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 466.754181][ T29] ? ext4_writepages+0xf42/0x3020 [ 466.759244][ T29] ? do_writepages+0x3a9/0x5e0 [ 466.764044][ T29] ? __writeback_single_inode+0xc6/0xad0 [ 466.769704][ T29] ? writeback_sb_inodes+0x9b8/0x1550 [ 466.775120][ T29] ? __writeback_inodes_wb+0x12f/0x400 [ 466.780604][ T29] ? wb_writeback+0x403/0x980 [ 466.785319][ T29] ? wb_workfn+0x986/0xda0 [ 466.789760][ T29] ? process_one_work+0x71f/0xc40 [ 466.794815][ T29] ? worker_thread+0xa29/0x11f0 [ 466.799684][ T29] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 466.805373][ T29] ? ext4_es_lookup_extent+0x54c/0x900 [ 466.810866][ T29] ext4_map_blocks+0x9cb/0x1b60 [ 466.815753][ T29] ? __cfi_ext4_map_blocks+0x10/0x10 [ 466.821060][ T29] ? ext4_inode_journal_mode+0x391/0x480 [ 466.826740][ T29] ext4_writepages+0x1260/0x3020 [ 466.831728][ T29] ? __cfi_eth_type_trans+0x10/0x10 [ 466.836963][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 466.842291][ T29] ? debug_smp_processor_id+0x17/0x20 [ 466.847695][ T29] ? loopback_xmit+0x415/0x600 [ 466.852490][ T29] ? __kasan_check_read+0x11/0x20 [ 466.857566][ T29] ? __kasan_check_write+0x14/0x20 [ 466.862699][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 466.867419][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 466.872646][ T29] ? __wb_update_bandwidth+0x8b4/0x920 [ 466.878140][ T29] ? __cfi_ext4_writepages+0x10/0x10 [ 466.883460][ T29] do_writepages+0x3a9/0x5e0 [ 466.888093][ T29] ? __cfi_do_writepages+0x10/0x10 [ 466.893239][ T29] ? __cfi_wake_up_bit+0x10/0x10 [ 466.898217][ T29] ? __inode_add_lru+0xff/0x310 [ 466.903103][ T29] ? __kasan_check_write+0x14/0x20 [ 466.908248][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 466.912951][ T29] ? __kasan_check_write+0x14/0x20 [ 466.918100][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 466.922806][ T29] __writeback_single_inode+0xc6/0xad0 [ 466.928344][ T29] writeback_sb_inodes+0x9b8/0x1550 [ 466.933592][ T29] ? queue_io+0x4c0/0x4c0 [ 466.937947][ T29] ? down_read_trylock+0x273/0x640 [ 466.943087][ T29] ? native_send_call_func_single_ipi+0x6f/0x80 [ 466.949380][ T29] __writeback_inodes_wb+0x12f/0x400 [ 466.954718][ T29] wb_writeback+0x403/0x980 [ 466.959253][ T29] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 466.965291][ T29] ? set_worker_desc+0x155/0x1c0 [ 466.970271][ T29] ? update_load_avg+0x4c2/0x13f0 [ 466.975344][ T29] ? __kasan_check_write+0x14/0x20 [ 466.980482][ T29] wb_workfn+0x986/0xda0 [ 466.984766][ T29] ? __cfi_wb_workfn+0x10/0x10 [ 466.989553][ T29] ? kthread_data+0x50/0xc0 [ 466.994097][ T29] ? __switch_to_asm+0x3a/0x60 [ 466.998884][ T29] ? __schedule+0xb8f/0x14e0 [ 467.003532][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 467.009117][ T29] process_one_work+0x71f/0xc40 [ 467.014005][ T29] worker_thread+0xa29/0x11f0 [ 467.018707][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 467.024219][ T29] kthread+0x281/0x320 [ 467.028343][ T29] ? __cfi_worker_thread+0x10/0x10 [ 467.033493][ T29] ? __cfi_kthread+0x10/0x10 [ 467.038132][ T29] ret_from_fork+0x1f/0x30 [ 467.042586][ T29] [ 467.383540][ T29] INFO: task jbd2/sda1-8:66 blocked for more than 162 seconds. [ 467.391136][ T29] Not tainted syzkaller #0 [ 467.813558][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.822297][ T29] task:jbd2/sda1-8 state:D stack:24928 pid:66 ppid:2 flags:0x00004000 [ 467.973575][ T29] Call Trace: [ 467.976900][ T29] [ 467.979851][ T29] __schedule+0xb87/0x14e0 [ 467.984317][ T29] ? sbitmap_any_bit_set+0x11a/0x160 [ 467.989634][ T29] ? __sched_text_start+0x8/0x8 [ 467.994553][ T29] schedule+0xbd/0x170 [ 467.998655][ T29] io_schedule+0x84/0xe0 [ 468.002926][ T29] bit_wait_io+0x13/0xd0 [ 468.007216][ T29] __wait_on_bit+0xb9/0x2d0 [ 468.011768][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 468.016780][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 468.021747][ T29] out_of_line_wait_on_bit+0x11c/0x160 [ 468.027253][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 468.033294][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 468.038006][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 468.043514][ T29] ? __cfi__raw_write_lock+0x10/0x10 [ 468.048832][ T29] ? _raw_read_unlock+0x25/0x40 [ 468.053720][ T29] __wait_on_buffer+0x56/0x70 [ 468.058429][ T29] jbd2_journal_commit_transaction+0x2d77/0x5530 [ 468.064821][ T29] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 468.071528][ T29] ? __cfi___switch_to+0x10/0x10 [ 468.076510][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 468.081387][ T29] ? finish_task_switch+0x16b/0x7b0 [ 468.086651][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 468.092575][ T29] ? __kasan_check_write+0x14/0x20 [ 468.097731][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 468.103221][ T29] ? detach_if_pending+0xf4/0x300 [ 468.108289][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 468.114137][ T29] ? del_timer_sync+0x144/0x1a0 [ 468.119017][ T29] kjournald2+0x3e7/0x760 [ 468.123370][ T29] ? __cfi_kjournald2+0x10/0x10 [ 468.128269][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 468.134383][ T29] ? __kasan_check_read+0x11/0x20 [ 468.139439][ T29] ? __kthread_parkme+0x142/0x180 [ 468.144516][ T29] kthread+0x281/0x320 [ 468.148607][ T29] ? __cfi_kjournald2+0x10/0x10 [ 468.153485][ T29] ? __cfi_kthread+0x10/0x10 [ 468.158114][ T29] ret_from_fork+0x1f/0x30 [ 468.162563][ T29] [ 468.633564][ T29] INFO: task kworker/u4:3:320 blocked for more than 183 seconds. [ 468.641339][ T29] Not tainted syzkaller #0 [ 469.083565][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.092300][ T29] task:kworker/u4:3 state:D stack:26048 pid:320 ppid:2 flags:0x00004000 [ 469.403586][ T29] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 469.411136][ T29] Call Trace: [ 469.414468][ T29] [ 469.417427][ T29] __schedule+0xb87/0x14e0 [ 469.421883][ T29] ? __sched_text_start+0x8/0x8 [ 469.426794][ T29] ? kthread_data+0x50/0xc0 [ 469.431323][ T29] ? wq_worker_sleeping+0x64/0x280 [ 469.436499][ T29] schedule+0xbd/0x170 [ 469.440611][ T29] schedule_timeout+0xa6/0x2e0 [ 469.445409][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 469.450802][ T29] wait_for_common+0x354/0x620 [ 469.455609][ T29] ? wait_for_completion+0x20/0x20 [ 469.460751][ T29] ? __switch_to+0x51f/0xe30 [ 469.465388][ T29] wait_for_completion+0x18/0x20 [ 469.470368][ T29] __synchronize_srcu+0x16c/0x1f0 [ 469.475439][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 469.481247][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 469.486765][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 469.492174][ T29] ? __kasan_check_write+0x14/0x20 [ 469.497344][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 469.502050][ T29] ? ktime_get_mono_fast_ns+0x1b3/0x1d0 [ 469.507649][ T29] synchronize_srcu+0x1d9/0x1f0 [ 469.512533][ T29] fsnotify_connector_destroy_workfn+0x44/0xa0 [ 469.518726][ T29] process_one_work+0x71f/0xc40 [ 469.523614][ T29] worker_thread+0xa29/0x11f0 [ 469.528352][ T29] kthread+0x281/0x320 [ 469.532444][ T29] ? __cfi_worker_thread+0x10/0x10 [ 469.537595][ T29] ? __cfi_kthread+0x10/0x10 [ 469.542211][ T29] ret_from_fork+0x1f/0x30 [ 469.546672][ T29] [ 469.863528][ T29] INFO: task kworker/u4:4:326 blocked for more than 185 seconds. [ 469.871322][ T29] Not tainted syzkaller #0 [ 470.323548][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.332287][ T29] task:kworker/u4:4 state:D stack:25088 pid:326 ppid:2 flags:0x00004000 [ 470.483569][ T29] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 470.490670][ T29] Call Trace: [ 470.494007][ T29] [ 470.496964][ T29] __schedule+0xb87/0x14e0 [ 470.501414][ T29] ? __cfi_ip_finish_output+0x10/0x10 [ 470.506862][ T29] ? __sched_text_start+0x8/0x8 [ 470.511743][ T29] ? kthread_data+0x50/0xc0 [ 470.516294][ T29] ? wq_worker_sleeping+0x64/0x280 [ 470.521441][ T29] schedule+0xbd/0x170 [ 470.525545][ T29] schedule_timeout+0xa6/0x2e0 [ 470.530336][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 470.535773][ T29] ? _raw_spin_trylock+0xb1/0x140 [ 470.540827][ T29] ? __cfi__raw_spin_trylock+0x10/0x10 [ 470.546329][ T29] wait_for_common+0x354/0x620 [ 470.551128][ T29] ? wait_for_completion+0x20/0x20 [ 470.556283][ T29] wait_for_completion+0x18/0x20 [ 470.561259][ T29] __synchronize_srcu+0x16c/0x1f0 [ 470.566332][ T29] ? synchronize_srcu_expedited+0x20/0x20 [ 470.572075][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 470.577573][ T29] ? __cfi_wakeme_after_rcu+0x10/0x10 [ 470.582981][ T29] ? __kasan_check_write+0x14/0x20 [ 470.588132][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 470.592831][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 470.598064][ T29] synchronize_srcu+0x1d9/0x1f0 [ 470.602941][ T29] fsnotify_mark_destroy_workfn+0xfe/0x2f0 [ 470.608806][ T29] ? ttwu_do_activate+0x174/0x280 [ 470.613879][ T29] ? __cfi_fsnotify_mark_destroy_workfn+0x10/0x10 [ 470.620323][ T29] process_one_work+0x71f/0xc40 [ 470.625218][ T29] worker_thread+0xa29/0x11f0 [ 470.629922][ T29] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 470.635430][ T29] ? __kthread_parkme+0x142/0x180 [ 470.640481][ T29] kthread+0x281/0x320 [ 470.644593][ T29] ? __cfi_worker_thread+0x10/0x10 [ 470.649729][ T29] ? __cfi_kthread+0x10/0x10 [ 470.654358][ T29] ret_from_fork+0x1f/0x30 [ 470.658802][ T29] [ 471.133546][ T29] NMI backtrace for cpu 0 [ 471.137927][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 471.145148][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.155220][ T29] Call Trace: [ 471.158520][ T29] [ 471.161465][ T29] __dump_stack+0x21/0x24 [ 471.165827][ T29] dump_stack_lvl+0xee/0x150 [ 471.170441][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 471.175510][ T29] dump_stack+0x15/0x24 [ 471.179717][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 471.184686][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 471.190270][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 471.195758][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 471.200734][ T29] ? memcpy+0x56/0x70 [ 471.204743][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.210749][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 471.216766][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 471.222861][ T29] watchdog+0xd44/0xe80 [ 471.227051][ T29] ? __cfi_watchdog+0x10/0x10 [ 471.231775][ T29] ? __kasan_check_read+0x11/0x20 [ 471.236826][ T29] ? __kthread_parkme+0x142/0x180 [ 471.241888][ T29] kthread+0x281/0x320 [ 471.245991][ T29] ? __cfi_watchdog+0x10/0x10 [ 471.250728][ T29] ? __cfi_kthread+0x10/0x10 [ 471.255336][ T29] ret_from_fork+0x1f/0x30 [ 471.259805][ T29] [ 471.262947][ T29] Sending NMI from CPU 0 to CPUs 1: [ 471.268303][ C1] NMI backtrace for cpu 1 [ 471.268313][ C1] CPU: 1 PID: 423 Comm: syz.6.17 Not tainted syzkaller #0 [ 471.268330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.268340][ C1] RIP: 0010:unwind_get_return_address+0x3b/0x90 [ 471.268366][ C1] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 48 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 db 92 7f 00 48 8b 3b e8 43 cd 13 00 85 c0 74 14 [ 471.268380][ C1] RSP: 0018:ffffc900001b07c0 EFLAGS: 00000046 [ 471.268395][ C1] RAX: 0000000000000000 RBX: ffffc900001b0830 RCX: 00000000001b0801 [ 471.268407][ C1] RDX: ffffc900001b0b60 RSI: 1ffff920000360fe RDI: ffffc900001b07e8 [ 471.268420][ C1] RBP: ffffc900001b07d8 R08: ffffc900001b08b0 R09: ffffc900001b08a8 [ 471.268433][ C1] R10: 0000000000000000 R11: 1ffff920000360fd R12: ffff8881191aa880 [ 471.268445][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff92000036106 [ 471.268457][ C1] FS: 00005555764ef500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 471.268473][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.268485][ C1] CR2: 0000000000000000 CR3: 0000000132147000 CR4: 00000000003506a0 [ 471.268499][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.268509][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.268520][ C1] Call Trace: [ 471.268524][ C1] [ 471.268529][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 471.268553][ C1] arch_stack_walk+0xfc/0x150 [ 471.268579][ C1] ? kasan_save_alloc_info+0x25/0x30 [ 471.268606][ C1] stack_trace_save+0x98/0xe0 [ 471.268626][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 471.268652][ C1] ? __stack_depot_save+0x36/0x480 [ 471.268669][ C1] ? __alloc_pages+0x450/0x450 [ 471.268692][ C1] ? memset+0x35/0x40 [ 471.268706][ C1] kasan_set_track+0x4b/0x70 [ 471.268725][ C1] ? kasan_set_track+0x4b/0x70 [ 471.268753][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 471.268777][ C1] kasan_save_alloc_info+0x25/0x30 [ 471.268802][ C1] __kasan_slab_alloc+0x72/0x80 [ 471.268822][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 471.268845][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 471.268868][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 471.268891][ C1] kmem_cache_alloc+0x16e/0x330 [ 471.268912][ C1] ? __sigqueue_alloc+0x13f/0x210 [ 471.268936][ C1] __sigqueue_alloc+0x13f/0x210 [ 471.268959][ C1] __send_signal_locked+0x19d/0xb70 [ 471.268980][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 471.269003][ C1] send_signal_locked+0x422/0x580 [ 471.269034][ C1] do_send_sig_info+0xd6/0x210 [ 471.269056][ C1] group_send_sig_info+0x118/0x2b0 [ 471.269077][ C1] ? __cfi_group_send_sig_info+0x10/0x10 [ 471.269101][ C1] do_bpf_send_signal+0x82/0x150 [ 471.269127][ C1] irq_work_run_list+0x18b/0x2b0 [ 471.269148][ C1] ? irq_work_run+0xf0/0xf0 [ 471.269169][ C1] irq_work_run+0x6a/0xf0 [ 471.269189][ C1] __sysvec_irq_work+0x75/0x1c0 [ 471.269213][ C1] sysvec_irq_work+0xa1/0xc0 [ 471.269236][ C1] [ 471.269241][ C1] [ 471.269246][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 471.269278][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 471.269303][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 5a 28 57 01 5d c3 0f 1f 84 00 00 00 00 [ 471.269316][ C1] RSP: 0018:ffffc900007c7c20 EFLAGS: 00000246 [ 471.269330][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 471.269340][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 471.269350][ C1] RBP: ffffc900007c7c20 R08: dffffc0000000000 R09: fffff520000f8f81 [ 471.269363][ C1] R10: 0000000000000000 R11: ffffffff81343740 R12: 0000000000000000 [ 471.269374][ C1] R13: dffffc0000000001 R14: ffffffff86496b60 R15: dffffc0000000000 [ 471.269388][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 471.269414][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 471.269437][ C1] arch_irq_work_raise+0x98/0xf0 [ 471.269460][ C1] __irq_work_queue_local+0x115/0x190 [ 471.269481][ C1] irq_work_queue+0x9e/0x150 [ 471.269500][ C1] bpf_send_signal_common+0x2b2/0x420 [ 471.269525][ C1] ? __set_printk_clr_event+0x80/0x80 [ 471.269552][ C1] bpf_send_signal+0x19/0x20 [ 471.269570][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 471.269587][ C1] bpf_trace_run2+0xff/0x250 [ 471.269609][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 471.269634][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 471.269651][ C1] trace_sys_enter+0x3d/0x50 [ 471.269667][ C1] syscall_trace_enter+0xf3/0x150 [ 471.269684][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 471.269710][ C1] do_syscall_64+0x24/0xa0 [ 471.269728][ C1] ? clear_bhb_loop+0x30/0x80 [ 471.269752][ C1] ? clear_bhb_loop+0x30/0x80 [ 471.269776][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.269799][ C1] RIP: 0033:0x7fafd212b829 [ 471.269811][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 471.269824][ C1] RSP: 002b:00007ffc81f2bb80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 471.269839][ C1] RAX: ffffffffffffffda RBX: 00007fafd23e5fa8 RCX: 00007fafd212b829 [ 471.269851][ C1] RDX: 00007ffc81f2bb80 RSI: 00007ffc81f2bcb0 RDI: 0000000000000011 [ 471.269863][ C1] RBP: 0000000000000000 R08: 003a1d55bad3362e R09: 0000000781f2c42f [ 471.269874][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fafd23e5fac [ 471.269885][ C1] R13: 00007fafd23e5fa0 R14: 0000000000000095 R15: 0000000000000003 [ 471.269899][ C1]