Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. 2026/06/21 03:15:58 parsed 1 programs 2026/06/21 03:15:58 serving rpc on tcp://41899 [ 258.329527][ T28] audit: type=1400 audit(1782011758.653:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 258.351513][ T28] audit: type=1400 audit(1782011758.653:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 259.094792][ T28] audit: type=1400 audit(1782011759.413:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 259.097214][ T301] cgroup: Unknown subsys name 'net' [ 259.117491][ T28] audit: type=1400 audit(1782011759.413:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.144896][ T28] audit: type=1400 audit(1782011759.443:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.145351][ T301] cgroup: Unknown subsys name 'devices' [ 259.260152][ T301] cgroup: Unknown subsys name 'hugetlb' [ 259.265768][ T301] cgroup: Unknown subsys name 'rlimit' [ 259.403997][ T28] audit: type=1400 audit(1782011759.723:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.427329][ T28] audit: type=1400 audit(1782011759.723:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 259.427684][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 259.447939][ T28] audit: type=1400 audit(1782011759.723:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.464150][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 259.476812][ T28] audit: type=1400 audit(1782011759.723:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.505596][ T28] audit: type=1400 audit(1782011759.723:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 260.155773][ T308] request_module fs-gadgetfs succeeded, but still no fs? [ 260.436451][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.443634][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.451714][ T334] device bridge_slave_0 entered promiscuous mode [ 260.459609][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.466665][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.474109][ T334] device bridge_slave_1 entered promiscuous mode [ 260.512600][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.519654][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.526969][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.533995][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.551046][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.558900][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.566217][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.575748][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.584627][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.591701][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.600585][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.608992][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.616011][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.627151][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.637033][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.650001][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.662599][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.670664][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.678018][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.686399][ T334] device veth0_vlan entered promiscuous mode [ 260.699919][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.709201][ T334] device veth1_macvtap entered promiscuous mode [ 260.717924][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.727663][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/06/21 03:16:01 executed programs: 0 [ 261.300701][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.307742][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.316076][ T371] device bridge_slave_0 entered promiscuous mode [ 261.326439][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.333992][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.341463][ T371] device bridge_slave_1 entered promiscuous mode [ 261.386087][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.393143][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.400418][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.407457][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.425154][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.433030][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.440574][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.453375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.462043][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.471386][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.478646][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.486039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.494635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.503027][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.510068][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.521350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.529485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.539009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.547101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.560297][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.568744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.579379][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.587321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.595468][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.603323][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.611871][ T371] device veth0_vlan entered promiscuous mode [ 261.623365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.631715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.641003][ T371] device veth1_macvtap entered promiscuous mode [ 261.650239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.657928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.666375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.675650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.684023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.708176][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 361.714857][ C1] rcu: 1-...!: (10000 ticks this GP) idle=26dc/1/0x4000000000000000 softirq=2941/2941 fqs=0 [ 361.724992][ C1] (t=10000 jiffies g=1109 q=366 ncpus=2) [ 361.730691][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g1109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 361.742876][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=932 [ 361.750566][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g1109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 361.761831][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 361.771791][ C1] rcu: RCU grace-period kthread stack dump: [ 361.777659][ C1] task:rcu_preempt state:I stack:28352 pid:14 ppid:2 flags:0x00004000 [ 361.786908][ C1] Call Trace: [ 361.790242][ C1] [ 361.793209][ C1] __schedule+0xbe2/0x14b0 [ 361.797746][ C1] ? release_firmware_map_entry+0x190/0x190 [ 361.803658][ C1] schedule+0xbd/0x170 [ 361.807716][ C1] schedule_timeout+0x159/0x340 [ 361.812544][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 361.817900][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 361.822930][ C1] ? __cfi_process_timeout+0x10/0x10 [ 361.828221][ C1] ? prepare_to_swait_event+0x30f/0x330 [ 361.833770][ C1] rcu_gp_fqs_loop+0x2ed/0x1100 [ 361.838611][ C1] ? rcu_gp_init+0xf30/0xf30 [ 361.843360][ C1] rcu_gp_kthread+0x99/0x390 [ 361.847989][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 361.853180][ C1] ? try_to_wake_up+0x622/0x1250 [ 361.858131][ C1] ? __kasan_check_read+0x11/0x20 [ 361.863189][ C1] ? __kthread_parkme+0x13a/0x180 [ 361.868195][ C1] kthread+0x281/0x320 [ 361.872250][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 361.877431][ C1] ? __cfi_kthread+0x10/0x10 [ 361.882006][ C1] ret_from_fork+0x1f/0x30 [ 361.886421][ C1] [ 361.889762][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 361.896078][ C1] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 361.903175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.913680][ C1] RIP: 0010:qdisc_tree_reduce_backlog+0x117/0x3a0 [ 361.920101][ C1] Code: 08 4c 89 f7 e8 fa 34 ad fd 49 8b 3e 4c 89 65 b8 44 89 e6 81 e6 00 00 ff ff e8 05 dd ff ff 48 85 c0 0f 84 4c 02 00 00 49 89 c4 <31> ff 89 de e8 10 ae 67 fd 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 42 [ 361.940116][ C1] RSP: 0018:ffffc900007c6e88 EFLAGS: 00000286 [ 361.946225][ C1] RAX: ffff888121ad0800 RBX: 0000000000000000 RCX: ffff88812cf33cc0 [ 361.954177][ C1] RDX: 0000000000000000 RSI: 00000000ffff0000 RDI: 00000000ffff0000 [ 361.962151][ C1] RBP: ffffc900007c6ed0 R08: 0000000000000003 R09: 0000000000000004 [ 361.970107][ C1] R10: dffffc0000000000 R11: fffff520000f8dcc R12: ffff888121ad0800 [ 361.978078][ C1] R13: dffffc0000000000 R14: ffff888121ad1000 R15: ffff888121ad0840 [ 361.986114][ C1] FS: 00007f9985b966c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 361.995051][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.001614][ C1] CR2: 00007f9984c72780 CR3: 00000001149a2000 CR4: 00000000003506a0 [ 362.009565][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.017531][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.025491][ C1] Call Trace: [ 362.028768][ C1] [ 362.031854][ C1] fq_change+0xd3e/0x1340 [ 362.036180][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 362.041621][ C1] ? qdisc_alloc+0x561/0x750 [ 362.046194][ C1] ? qdisc_create+0x183/0x1180 [ 362.050961][ C1] ? tc_modify_qdisc+0x924/0x19c0 [ 362.055990][ C1] ? __cfi_fq_change+0x10/0x10 [ 362.060906][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 362.065829][ C1] fq_init+0x3e3/0x5d0 [ 362.069993][ C1] ? __cfi_fq_init+0x10/0x10 [ 362.074564][ C1] qdisc_create+0x89b/0x1180 [ 362.079134][ C1] ? qdisc_notify+0x360/0x360 [ 362.083790][ C1] ? qdisc_lookup+0x400/0x4d0 [ 362.088451][ C1] tc_modify_qdisc+0x924/0x19c0 [ 362.093288][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 362.098553][ C1] ? __kasan_check_write+0x14/0x20 [ 362.103642][ C1] ? mutex_lock+0x93/0x1b0 [ 362.108056][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 362.112889][ C1] ? ns_capable+0x8c/0xf0 [ 362.117202][ C1] ? netlink_net_capable+0x125/0x160 [ 362.122495][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 362.127764][ C1] rtnetlink_rcv_msg+0xb28/0xde0 [ 362.132686][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 362.138134][ C1] ? __kernel_text_address+0xd/0x30 [ 362.143318][ C1] ? avc_has_perm_noaudit+0x390/0x490 [ 362.148666][ C1] ? memcpy+0x56/0x70 [ 362.152630][ C1] ? avc_has_perm_noaudit+0x30a/0x490 [ 362.157984][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 362.163686][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 362.168953][ C1] ? avc_has_perm+0x163/0x250 [ 362.173607][ C1] ? __alloc_skb+0x226/0x4a0 [ 362.178352][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 362.183272][ C1] ? ____sys_sendmsg+0x5fb/0x9c0 [ 362.188198][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 362.193215][ C1] ? selinux_nlmsg_lookup+0x38f/0x440 [ 362.198621][ C1] netlink_rcv_skb+0x200/0x450 [ 362.203369][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 362.208807][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 362.214073][ C1] ? __netlink_lookup+0x387/0x3b0 [ 362.219080][ C1] rtnetlink_rcv+0x1c/0x20 [ 362.223923][ C1] netlink_unicast+0x8c1/0xa60 [ 362.228683][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 362.233431][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 362.238728][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 362.244193][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 362.249458][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 362.254467][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 362.259515][ C1] ? import_iovec+0x7c/0xb0 [ 362.264016][ C1] ___sys_sendmsg+0x2a2/0x360 [ 362.268677][ C1] ? __sys_sendmsg+0x290/0x290 [ 362.273475][ C1] ? __fdget+0x19c/0x220 [ 362.277726][ C1] __x64_sys_sendmsg+0x20d/0x2e0 [ 362.282653][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 362.288099][ C1] ? __kasan_check_write+0x14/0x20 [ 362.293215][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 362.298847][ C1] ? switch_fpu_return+0xe/0x10 [ 362.303690][ C1] x64_sys_call+0x171/0x9a0 [ 362.308268][ C1] do_syscall_64+0x4c/0xa0 [ 362.312779][ C1] ? clear_bhb_loop+0x30/0x80 [ 362.317441][ C1] ? clear_bhb_loop+0x30/0x80 [ 362.322552][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.328473][ C1] RIP: 0033:0x7f9984d9ce59 [ 362.332958][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.352560][ C1] RSP: 002b:00007f9985b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.360963][ C1] RAX: ffffffffffffffda RBX: 00007f9985015fa0 RCX: 00007f9984d9ce59 [ 362.368924][ C1] RDX: 0000000020040080 RSI: 0000200000001200 RDI: 0000000000000005 [ 362.377705][ C1] RBP: 00007f9984e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 362.388274][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.396231][ C1] R13: 00007f9985016038 R14: 00007f9985015fa0 R15: 00007ffddd2d6a88 [ 362.404189][ C1] [ 362.407207][ C1] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 362.414309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.424446][ C1] RIP: 0010:qdisc_tree_reduce_backlog+0x117/0x3a0 [ 362.430862][ C1] Code: 08 4c 89 f7 e8 fa 34 ad fd 49 8b 3e 4c 89 65 b8 44 89 e6 81 e6 00 00 ff ff e8 05 dd ff ff 48 85 c0 0f 84 4c 02 00 00 49 89 c4 <31> ff 89 de e8 10 ae 67 fd 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 42 [ 362.450460][ C1] RSP: 0018:ffffc900007c6e88 EFLAGS: 00000286 [ 362.456513][ C1] RAX: ffff888121ad0800 RBX: 0000000000000000 RCX: ffff88812cf33cc0 [ 362.464464][ C1] RDX: 0000000000000000 RSI: 00000000ffff0000 RDI: 00000000ffff0000 [ 362.472508][ C1] RBP: ffffc900007c6ed0 R08: 0000000000000003 R09: 0000000000000004 [ 362.480461][ C1] R10: dffffc0000000000 R11: fffff520000f8dcc R12: ffff888121ad0800 [ 362.488451][ C1] R13: dffffc0000000000 R14: ffff888121ad1000 R15: ffff888121ad0840 [ 362.496403][ C1] FS: 00007f9985b966c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 362.505330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.511957][ C1] CR2: 00007f9984c72780 CR3: 00000001149a2000 CR4: 00000000003506a0 [ 362.519920][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.527908][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.535860][ C1] Call Trace: [ 362.539130][ C1] [ 362.542042][ C1] fq_change+0xd3e/0x1340 [ 362.546377][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 362.551840][ C1] ? qdisc_alloc+0x561/0x750 [ 362.556410][ C1] ? qdisc_create+0x183/0x1180 [ 362.561183][ C1] ? tc_modify_qdisc+0x924/0x19c0 [ 362.566186][ C1] ? __cfi_fq_change+0x10/0x10 [ 362.570948][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 362.575916][ C1] fq_init+0x3e3/0x5d0 [ 362.579992][ C1] ? __cfi_fq_init+0x10/0x10 [ 362.584610][ C1] qdisc_create+0x89b/0x1180 [ 362.589213][ C1] ? qdisc_notify+0x360/0x360 [ 362.593888][ C1] ? qdisc_lookup+0x400/0x4d0 [ 362.598571][ C1] tc_modify_qdisc+0x924/0x19c0 [ 362.603416][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 362.608685][ C1] ? __kasan_check_write+0x14/0x20 [ 362.613775][ C1] ? mutex_lock+0x93/0x1b0 [ 362.618184][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 362.623298][ C1] ? ns_capable+0x8c/0xf0 [ 362.627642][ C1] ? netlink_net_capable+0x125/0x160 [ 362.632913][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 362.638180][ C1] rtnetlink_rcv_msg+0xb28/0xde0 [ 362.643100][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 362.648537][ C1] ? __kernel_text_address+0xd/0x30 [ 362.653726][ C1] ? avc_has_perm_noaudit+0x390/0x490 [ 362.659081][ C1] ? memcpy+0x56/0x70 [ 362.663042][ C1] ? avc_has_perm_noaudit+0x30a/0x490 [ 362.668419][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 362.674124][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 362.679392][ C1] ? avc_has_perm+0x163/0x250 [ 362.684057][ C1] ? __alloc_skb+0x226/0x4a0 [ 362.688626][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 362.693540][ C1] ? ____sys_sendmsg+0x5fb/0x9c0 [ 362.698455][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 362.703457][ C1] ? selinux_nlmsg_lookup+0x38f/0x440 [ 362.708811][ C1] netlink_rcv_skb+0x200/0x450 [ 362.713562][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 362.719027][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 362.724384][ C1] ? __netlink_lookup+0x387/0x3b0 [ 362.729405][ C1] rtnetlink_rcv+0x1c/0x20 [ 362.733802][ C1] netlink_unicast+0x8c1/0xa60 [ 362.738546][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 362.743410][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 362.749067][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 362.756384][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 362.763111][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 362.767924][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 362.772965][ C1] ? import_iovec+0x7c/0xb0 [ 362.777464][ C1] ___sys_sendmsg+0x2a2/0x360 [ 362.782132][ C1] ? __sys_sendmsg+0x290/0x290 [ 362.786898][ C1] ? __fdget+0x19c/0x220 [ 362.791134][ C1] __x64_sys_sendmsg+0x20d/0x2e0 [ 362.796062][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 362.801501][ C1] ? __kasan_check_write+0x14/0x20 [ 362.806591][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 362.812288][ C1] ? switch_fpu_return+0xe/0x10 [ 362.817117][ C1] x64_sys_call+0x171/0x9a0 [ 362.821606][ C1] do_syscall_64+0x4c/0xa0 [ 362.826023][ C1] ? clear_bhb_loop+0x30/0x80 [ 362.830682][ C1] ? clear_bhb_loop+0x30/0x80 [ 362.835331][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.841217][ C1] RIP: 0033:0x7f9984d9ce59 [ 362.845612][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.865284][ C1] RSP: 002b:00007f9985b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.873773][ C1] RAX: ffffffffffffffda RBX: 00007f9985015fa0 RCX: 00007f9984d9ce59 [ 362.881741][ C1] RDX: 0000000020040080 RSI: 0000200000001200 RDI: 0000000000000005 [ 362.889691][ C1] RBP: 00007f9984e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 362.897639][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.905599][ C1] R13: 00007f9985016038 R14: 00007f9985015fa0 R15: 00007ffddd2d6a88 [ 362.913549][ C1] [ 387.848707][ T29] INFO: task kworker/u4:0:8 blocked for more than 122 seconds. [ 387.856288][ T29] Not tainted syzkaller #0 [ 387.861809][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.870607][ T29] task:kworker/u4:0 state:D stack:21512 pid:8 ppid:2 flags:0x00004000 [ 387.879977][ T29] Workqueue: netns cleanup_net [ 387.884760][ T29] Call Trace: [ 387.888041][ T29] [ 387.891249][ T29] __schedule+0xbe2/0x14b0 [ 387.895686][ T29] ? release_firmware_map_entry+0x190/0x190 [ 387.901774][ T29] ? kthread_data+0x50/0xc0 [ 387.906275][ T29] ? wq_worker_sleeping+0x64/0x280 [ 387.911579][ T29] schedule+0xbd/0x170 [ 387.915671][ T29] schedule_timeout+0xba/0x340 [ 387.920636][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 387.926012][ T29] ? rcu_barrier_handler+0x95/0xe0 [ 387.931331][ T29] ? generic_exec_single+0x24e/0x3b0 [ 387.936624][ T29] wait_for_common+0x364/0x640 [ 387.941588][ T29] ? wait_for_completion+0x20/0x20 [ 387.946700][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 387.953007][ T29] ? idr_get_next_ul+0x25a/0x2d0 [ 387.957950][ T29] ? _find_next_bit+0x129/0x130 [ 387.962970][ T29] wait_for_completion+0x18/0x20 [ 387.967913][ T29] rcu_barrier+0x473/0x5f0 [ 387.972513][ T29] l2tp_exit_net+0x14f/0x1f0 [ 387.977108][ T29] ? pde_put+0x14e/0x1a0 [ 387.981539][ T29] ? __cfi_l2tp_exit_net+0x10/0x10 [ 387.986654][ T29] cleanup_net+0x5b0/0xb10 [ 387.991235][ T29] ? __kasan_check_write+0x14/0x20 [ 387.996347][ T29] ? pwq_activate_inactive_work+0x2ea/0x3f0 [ 388.002425][ T29] ? __cfi_cleanup_net+0x10/0x10 [ 388.007367][ T29] process_one_work+0x717/0xc30 [ 388.012374][ T29] worker_thread+0xa4d/0x11d0 [ 388.017057][ T29] kthread+0x281/0x320 [ 388.021298][ T29] ? __cfi_worker_thread+0x10/0x10 [ 388.026679][ T29] ? __cfi_kthread+0x10/0x10 [ 388.031516][ T29] ret_from_fork+0x1f/0x30 [ 388.035947][ T29] [ 388.039149][ T29] INFO: task kworker/0:2:338 blocked for more than 123 seconds. [ 388.046774][ T29] Not tainted syzkaller #0 [ 388.051856][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.060687][ T29] task:kworker/0:2 state:D stack:25800 pid:338 ppid:2 flags:0x00004000 [ 388.070025][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 388.076016][ T29] Call Trace: [ 388.079470][ T29] [ 388.082397][ T29] __schedule+0xbe2/0x14b0 [ 388.086823][ T29] ? release_firmware_map_entry+0x190/0x190 [ 388.092931][ T29] ? __mutex_add_waiter+0x184/0x280 [ 388.098134][ T29] ? __kasan_check_write+0x14/0x20 [ 388.103413][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 388.108712][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 388.113984][ T29] schedule+0xbd/0x170 [ 388.118620][ T29] schedule_preempt_disabled+0x13/0x20 [ 388.124184][ T29] __mutex_lock+0x833/0x1790 [ 388.128946][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 388.135722][ T29] ? sched_balance_newidle+0x348/0xcd0 [ 388.141468][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 388.146681][ T29] ? dequeue_task_fair+0x4f2/0x1d40 [ 388.152053][ T29] ? __cfi_sched_clock_cpu+0x10/0x10 [ 388.157344][ T29] __mutex_lock_slowpath+0xe/0x10 [ 388.162892][ T29] mutex_lock+0x10a/0x1b0 [ 388.167231][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 388.172250][ T29] ? __switch_to+0x56f/0x1070 [ 388.176935][ T29] rtnl_lock+0x15/0x20 [ 388.181216][ T29] addrconf_dad_work+0xc4/0x14a0 [ 388.186156][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 388.191795][ T29] ? __schedule+0xbea/0x14b0 [ 388.196462][ T29] process_one_work+0x717/0xc30 [ 388.201494][ T29] worker_thread+0xa4d/0x11d0 [ 388.206176][ T29] kthread+0x281/0x320 [ 388.210403][ T29] ? __cfi_worker_thread+0x10/0x10 [ 388.215515][ T29] ? __cfi_kthread+0x10/0x10 [ 388.220292][ T29] ret_from_fork+0x1f/0x30 [ 388.224714][ T29] [ 388.227732][ T29] NMI backtrace for cpu 0 [ 388.232050][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 388.239247][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.249663][ T29] Call Trace: [ 388.253992][ T29] [ 388.256926][ T29] __dump_stack+0x21/0x24 [ 388.261790][ T29] dump_stack_lvl+0x110/0x170 [ 388.266468][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 388.271578][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x674/0x960 [ 388.278192][ T29] dump_stack+0x15/0x24 [ 388.282371][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 388.287406][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 388.292961][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 388.298429][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 388.304500][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.310477][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.316453][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 388.322523][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 388.328415][ T29] watchdog+0xde1/0xf30 [ 388.332631][ T29] ? __cfi_watchdog+0x10/0x10 [ 388.337308][ T29] ? __kasan_check_read+0x11/0x20 [ 388.342340][ T29] ? __kthread_parkme+0x13a/0x180 [ 388.347357][ T29] kthread+0x281/0x320 [ 388.351421][ T29] ? __cfi_watchdog+0x10/0x10 [ 388.356119][ T29] ? __cfi_kthread+0x10/0x10 [ 388.360710][ T29] ret_from_fork+0x1f/0x30 [ 388.365130][ T29] [ 388.368220][ T29] Sending NMI from CPU 0 to CPUs 1: [ 388.373498][ C1] NMI backtrace for cpu 1 [ 388.373508][ C1] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 388.373522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.373529][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x90 [ 388.373557][ C1] Code: 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 48 89 e5 <48> 8b 45 08 65 48 8b 15 60 05 91 7e 65 8b 0d 61 05 91 7e 81 e1 00 [ 388.373568][ C1] RSP: 0018:ffffc900007c6e38 EFLAGS: 00000246 [ 388.373581][ C1] RAX: 0000000000000000 RBX: 00000000ffff0000 RCX: ffff88812cf33cc0 [ 388.373591][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.373600][ C1] RBP: ffffc900007c6e38 R08: 0000000000000003 R09: 0000000000000004 [ 388.373609][ C1] R10: dffffc0000000000 R11: fffff520000f8dcc R12: ffff888113cb2000 [ 388.373619][ C1] R13: dffffc0000000000 R14: ffff888121ad0800 R15: 0000000000000022 [ 388.373675][ C1] FS: 00007f9985b966c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 388.373687][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.373697][ C1] CR2: 00007f9984c72780 CR3: 00000001149a2000 CR4: 00000000003506a0 [ 388.373710][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.373719][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.373727][ C1] Call Trace: [ 388.373732][ C1] [ 388.373738][ C1] qdisc_lookup_rcu+0x2d1/0x4d0 [ 388.373759][ C1] qdisc_tree_reduce_backlog+0x10b/0x3a0 [ 388.373779][ C1] fq_change+0xd3e/0x1340 [ 388.373796][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 388.373813][ C1] ? qdisc_alloc+0x561/0x750 [ 388.373827][ C1] ? qdisc_create+0x183/0x1180 [ 388.373845][ C1] ? tc_modify_qdisc+0x924/0x19c0 [ 388.373863][ C1] ? __cfi_fq_change+0x10/0x10 [ 388.373878][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 388.373894][ C1] fq_init+0x3e3/0x5d0 [ 388.373910][ C1] ? __cfi_fq_init+0x10/0x10 [ 388.373924][ C1] qdisc_create+0x89b/0x1180 [ 388.373944][ C1] ? qdisc_notify+0x360/0x360 [ 388.373962][ C1] ? qdisc_lookup+0x400/0x4d0 [ 388.373980][ C1] tc_modify_qdisc+0x924/0x19c0 [ 388.374000][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 388.374020][ C1] ? __kasan_check_write+0x14/0x20 [ 388.374034][ C1] ? mutex_lock+0x93/0x1b0 [ 388.374052][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 388.374069][ C1] ? ns_capable+0x8c/0xf0 [ 388.374082][ C1] ? netlink_net_capable+0x125/0x160 [ 388.374101][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 388.374119][ C1] rtnetlink_rcv_msg+0xb28/0xde0 [ 388.374139][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 388.374163][ C1] ? __kernel_text_address+0xd/0x30 [ 388.374180][ C1] ? avc_has_perm_noaudit+0x390/0x490 [ 388.374195][ C1] ? memcpy+0x56/0x70 [ 388.374208][ C1] ? avc_has_perm_noaudit+0x30a/0x490 [ 388.374222][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 388.374236][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 388.374250][ C1] ? avc_has_perm+0x163/0x250 [ 388.374262][ C1] ? __alloc_skb+0x226/0x4a0 [ 388.374275][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 388.374288][ C1] ? ____sys_sendmsg+0x5fb/0x9c0 [ 388.374305][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 388.374319][ C1] ? selinux_nlmsg_lookup+0x38f/0x440 [ 388.374335][ C1] netlink_rcv_skb+0x200/0x450 [ 388.374348][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 388.374366][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 388.374380][ C1] ? __netlink_lookup+0x387/0x3b0 [ 388.374414][ C1] rtnetlink_rcv+0x1c/0x20 [ 388.374431][ C1] netlink_unicast+0x8c1/0xa60 [ 388.374451][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 388.374465][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 388.374480][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 388.374497][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 388.374510][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 388.374527][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 388.374544][ C1] ? import_iovec+0x7c/0xb0 [ 388.374558][ C1] ___sys_sendmsg+0x2a2/0x360 [ 388.374574][ C1] ? __sys_sendmsg+0x290/0x290 [ 388.374595][ C1] ? __fdget+0x19c/0x220 [ 388.374610][ C1] __x64_sys_sendmsg+0x20d/0x2e0 [ 388.374626][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 388.374644][ C1] ? __kasan_check_write+0x14/0x20 [ 388.374657][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 388.374673][ C1] ? switch_fpu_return+0xe/0x10 [ 388.374688][ C1] x64_sys_call+0x171/0x9a0 [ 388.374704][ C1] do_syscall_64+0x4c/0xa0 [ 388.374719][ C1] ? clear_bhb_loop+0x30/0x80 [ 388.374732][ C1] ? clear_bhb_loop+0x30/0x80 [ 388.374744][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.374762][ C1] RIP: 0033:0x7f9984d9ce59 [ 388.374774][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.374784][ C1] RSP: 002b:00007f9985b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.374798][ C1] RAX: ffffffffffffffda RBX: 00007f9985015fa0 RCX: 00007f9984d9ce59 [ 388.374808][ C1] RDX: 0000000020040080 RSI: 0000200000001200 RDI: 0000000000000005 [ 388.374817][ C1] RBP: 00007f9984e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 388.374826][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.374834][ C1] R13: 00007f9985016038 R14: 00007f9985015fa0 R15: 00007ffddd2d6a88 [ 388.374846][ C1] [ 408.968535][ T29] INFO: task kworker/u4:0:8 blocked for more than 144 seconds. [ 408.976115][ T29] Not tainted syzkaller #0 [ 408.981905][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.990745][ T29] task:kworker/u4:0 state:D stack:21512 pid:8 ppid:2 flags:0x00004000 [ 409.000068][ T29] Workqueue: netns cleanup_net [ 409.004844][ T29] Call Trace: [ 409.008114][ T29] [ 409.011338][ T29] __schedule+0xbe2/0x14b0 [ 409.015762][ T29] ? release_firmware_map_entry+0x190/0x190 [ 409.021791][ T29] ? kthread_data+0x50/0xc0 [ 409.026300][ T29] ? wq_worker_sleeping+0x64/0x280 [ 409.031593][ T29] schedule+0xbd/0x170 [ 409.035667][ T29] schedule_timeout+0xba/0x340 [ 409.040601][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 409.045976][ T29] ? rcu_barrier_handler+0x95/0xe0 [ 409.051355][ T29] ? generic_exec_single+0x24e/0x3b0 [ 409.056648][ T29] wait_for_common+0x364/0x640 [ 409.061551][ T29] ? wait_for_completion+0x20/0x20 [ 409.066664][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 409.072282][ T29] ? idr_get_next_ul+0x25a/0x2d0 [ 409.077224][ T29] ? _find_next_bit+0x129/0x130 [ 409.082263][ T29] wait_for_completion+0x18/0x20 [ 409.087203][ T29] rcu_barrier+0x473/0x5f0 [ 409.091790][ T29] l2tp_exit_net+0x14f/0x1f0 [ 409.096382][ T29] ? pde_put+0x14e/0x1a0 [ 409.100770][ T29] ? __cfi_l2tp_exit_net+0x10/0x10 [ 409.105881][ T29] cleanup_net+0x5b0/0xb10 [ 409.110476][ T29] ? __kasan_check_write+0x14/0x20 [ 409.115679][ T29] ? pwq_activate_inactive_work+0x2ea/0x3f0 [ 409.121721][ T29] ? __cfi_cleanup_net+0x10/0x10 [ 409.126669][ T29] process_one_work+0x717/0xc30 [ 409.131709][ T29] worker_thread+0xa4d/0x11d0 [ 409.136401][ T29] kthread+0x281/0x320 [ 409.140681][ T29] ? __cfi_worker_thread+0x10/0x10 [ 409.145785][ T29] ? __cfi_kthread+0x10/0x10 [ 409.150530][ T29] ret_from_fork+0x1f/0x30 [ 409.154951][ T29] [ 409.157992][ T29] INFO: task jbd2/sda1-8:66 blocked for more than 123 seconds. [ 409.165828][ T29] Not tainted syzkaller #0 [ 409.170898][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.179694][ T29] task:jbd2/sda1-8 state:D stack:24968 pid:66 ppid:2 flags:0x00004000 [ 409.189057][ T29] Call Trace: [ 409.192330][ T29] [ 409.195254][ T29] __schedule+0xbe2/0x14b0 [ 409.199836][ T29] ? release_firmware_map_entry+0x190/0x190 [ 409.205729][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 409.212317][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 409.218315][ T29] schedule+0xbd/0x170 [ 409.222387][ T29] io_schedule+0x84/0xe0 [ 409.226626][ T29] bit_wait_io+0x13/0xd0 [ 409.231106][ T29] __wait_on_bit+0xae/0x2d0 [ 409.235705][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 409.240782][ T29] out_of_line_wait_on_bit+0x135/0x190 [ 409.246242][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 409.251354][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 409.257344][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 409.262951][ T29] ? __cfi__raw_write_lock+0x10/0x10 [ 409.268441][ T29] ? _raw_read_unlock+0x25/0x40 [ 409.273295][ T29] __wait_on_buffer+0x56/0x70 [ 409.277967][ T29] jbd2_journal_commit_transaction+0x2ec1/0x5640 [ 409.284585][ T29] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 409.291391][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 409.297360][ T29] ? __kasan_check_write+0x14/0x20 [ 409.302648][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 409.308108][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 409.314154][ T29] ? detach_if_pending+0xf5/0x300 [ 409.319298][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 409.325104][ T29] ? del_timer_sync+0x144/0x1a0 [ 409.330141][ T29] kjournald2+0x3d4/0x750 [ 409.334583][ T29] ? __cfi_kjournald2+0x10/0x10 [ 409.339693][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 409.345770][ T29] ? __kasan_check_read+0x11/0x20 [ 409.351002][ T29] ? __kthread_parkme+0x13a/0x180 [ 409.356092][ T29] kthread+0x281/0x320 [ 409.360322][ T29] ? __cfi_kjournald2+0x10/0x10 [ 409.365170][ T29] ? __cfi_kthread+0x10/0x10 [ 409.369932][ T29] ret_from_fork+0x1f/0x30 [ 409.374357][ T29] [ 409.377383][ T29] INFO: task kworker/0:2:338 blocked for more than 144 seconds. [ 409.385199][ T29] Not tainted syzkaller #0 [ 409.390370][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.399425][ T29] task:kworker/0:2 state:D stack:25800 pid:338 ppid:2 flags:0x00004000 [ 409.408959][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 409.414948][ T29] Call Trace: [ 409.418494][ T29] [ 409.421427][ T29] __schedule+0xbe2/0x14b0 [ 409.425846][ T29] ? release_firmware_map_entry+0x190/0x190 [ 409.431998][ T29] ? __mutex_add_waiter+0x184/0x280 [ 409.437200][ T29] ? __kasan_check_write+0x14/0x20 [ 409.442441][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 409.447636][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 409.452997][ T29] schedule+0xbd/0x170 [ 409.457170][ T29] schedule_preempt_disabled+0x13/0x20 [ 409.462877][ T29] __mutex_lock+0x833/0x1790 [ 409.467489][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 409.474505][ T29] ? sched_balance_newidle+0x348/0xcd0 [ 409.480111][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 409.485321][ T29] ? dequeue_task_fair+0x4f2/0x1d40 [ 409.490718][ T29] ? __cfi_sched_clock_cpu+0x10/0x10 [ 409.496028][ T29] __mutex_lock_slowpath+0xe/0x10 [ 409.501257][ T29] mutex_lock+0x10a/0x1b0 [ 409.505593][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 409.510638][ T29] ? __switch_to+0x56f/0x1070 [ 409.515321][ T29] rtnl_lock+0x15/0x20 [ 409.519523][ T29] addrconf_dad_work+0xc4/0x14a0 [ 409.524461][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 409.530084][ T29] ? __schedule+0xbea/0x14b0 [ 409.534684][ T29] process_one_work+0x717/0xc30 [ 409.539892][ T29] worker_thread+0xa4d/0x11d0 [ 409.544587][ T29] kthread+0x281/0x320 [ 409.548798][ T29] ? __cfi_worker_thread+0x10/0x10 [ 409.553917][ T29] ? __cfi_kthread+0x10/0x10 [ 409.558654][ T29] ret_from_fork+0x1f/0x30 [ 409.563074][ T29] [ 409.566104][ T29] INFO: task syz-executor:378 blocked for more than 124 seconds. [ 409.574114][ T29] Not tainted syzkaller #0 [ 409.579140][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.588740][ T29] task:syz-executor state:D stack:25320 pid:378 ppid:301 flags:0x00004004 [ 409.597971][ T29] Call Trace: [ 409.601459][ T29] [ 409.604392][ T29] __schedule+0xbe2/0x14b0 [ 409.608997][ T29] ? release_firmware_map_entry+0x190/0x190 [ 409.614893][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 409.620530][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 409.626423][ T29] ? __kasan_check_write+0x14/0x20 [ 409.631726][ T29] schedule+0xbd/0x170 [ 409.635797][ T29] io_schedule+0x84/0xe0 [ 409.640165][ T29] bit_wait_io+0x13/0xd0 [ 409.644418][ T29] __wait_on_bit+0xae/0x2d0 [ 409.649084][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 409.654029][ T29] out_of_line_wait_on_bit+0x135/0x190 [ 409.659652][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 409.664596][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 409.670770][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 409.676238][ T29] do_get_write_access+0x558/0xdd0 [ 409.681509][ T29] jbd2_journal_get_write_access+0x199/0x2f0 [ 409.687491][ T29] __ext4_journal_get_write_access+0x235/0x6c0 [ 409.693841][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 409.700627][ T29] __ext4_new_inode+0x139f/0x3710 [ 409.705741][ T29] ? __cfi___ext4_new_inode+0x10/0x10 [ 409.711355][ T29] ? dquot_initialize+0x20/0x20 [ 409.716221][ T29] ? may_create+0x61e/0x820 [ 409.720927][ T29] ext4_mkdir+0x407/0xc90 [ 409.725276][ T29] ? __cfi_ext4_mkdir+0x10/0x10 [ 409.730398][ T29] ? selinux_inode_mkdir+0x22/0x30 [ 409.735523][ T29] ? security_inode_mkdir+0xd2/0x120 [ 409.742976][ T29] vfs_mkdir+0x39c/0x580 [ 409.747254][ T29] do_mkdirat+0x174/0x4d0 [ 409.751810][ T29] __x64_sys_mkdir+0x6e/0x80 [ 409.756461][ T29] x64_sys_call+0x966/0x9a0 [ 409.761122][ T29] do_syscall_64+0x4c/0xa0 [ 409.765545][ T29] ? clear_bhb_loop+0x30/0x80 [ 409.770433][ T29] ? clear_bhb_loop+0x30/0x80 [ 409.775108][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.781232][ T29] RIP: 0033:0x7f6d64dca227 [ 409.785710][ T29] RSP: 002b:00007ffd37e25b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 409.794328][ T29] RAX: ffffffffffffffda RBX: 00007ffd37e25c82 RCX: 00007f6d64dca227 [ 409.802419][ T29] RDX: 0000000010d15f74 RSI: 00000000000001c0 RDI: 00007ffd37e25c70 [ 409.810539][ T29] RBP: 8421084210842109 R08: 0000000000000000 R09: 0000000000000000 [ 409.818609][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000010d15f74 [ 409.826590][ T29] R13: 00007ffd37e25c82 R14: 0000000000000004 R15: 00007f6d64e58d20 [ 409.834835][ T29] [ 409.837858][ T29] NMI backtrace for cpu 0 [ 409.842173][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 409.849363][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.859416][ T29] Call Trace: [ 409.862700][ T29] [ 409.865632][ T29] __dump_stack+0x21/0x24 [ 409.869973][ T29] dump_stack_lvl+0x110/0x170 [ 409.874648][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 409.879669][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x674/0x960 [ 409.886265][ T29] dump_stack+0x15/0x24 [ 409.890418][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 409.895356][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 409.900902][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 409.906364][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 409.912427][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.918406][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.924385][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 409.930367][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 409.936257][ T29] watchdog+0xde1/0xf30 [ 409.940411][ T29] ? __cfi_watchdog+0x10/0x10 [ 409.945083][ T29] ? __kasan_check_read+0x11/0x20 [ 409.950100][ T29] ? __kthread_parkme+0x13a/0x180 [ 409.955120][ T29] kthread+0x281/0x320 [ 409.959185][ T29] ? __cfi_watchdog+0x10/0x10 [ 409.963857][ T29] ? __cfi_kthread+0x10/0x10 [ 409.968444][ T29] ret_from_fork+0x1f/0x30 [ 409.972860][ T29] [ 409.975952][ T29] Sending NMI from CPU 0 to CPUs 1: [ 409.981163][ C1] NMI backtrace for cpu 1 [ 409.981172][ C1] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 409.981187][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.981194][ C1] RIP: 0010:qdisc_lookup_rcu+0x27e/0x4d0 [ 409.981219][ C1] Code: 18 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 75 55 ad fd 4d 8b 36 4d 8d 7e 40 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 58 55 ad fd 4d 8b 3f 4c 89 f8 48 c1 e8 03 42 80 [ 409.981230][ C1] RSP: 0018:ffffc900007c6e48 EFLAGS: 00000246 [ 409.981243][ C1] RAX: 1ffff1102435a108 RBX: 00000000ffff0000 RCX: ffff88812cf33cc0 [ 409.981254][ C1] RDX: 0000000000000000 RSI: 00000000ffff0000 RDI: 0000000000000000 [ 409.981263][ C1] RBP: ffffc900007c6e78 R08: 0000000000000003 R09: 0000000000000004 [ 409.981330][ C1] R10: dffffc0000000000 R11: fffff520000f8dcc R12: 0000000000000000 [ 409.981340][ C1] R13: dffffc0000000000 R14: ffff888121ad0800 R15: ffff888121ad0840 [ 409.981413][ C1] FS: 00007f9985b966c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 409.981426][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.981436][ C1] CR2: 00007f9984c72780 CR3: 00000001149a2000 CR4: 00000000003506a0 [ 409.981449][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.981457][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 409.981466][ C1] Call Trace: [ 409.981471][ C1] [ 409.981477][ C1] qdisc_tree_reduce_backlog+0x10b/0x3a0 [ 409.981498][ C1] fq_change+0xd3e/0x1340 [ 409.981516][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 409.981534][ C1] ? qdisc_alloc+0x561/0x750 [ 409.981548][ C1] ? qdisc_create+0x183/0x1180 [ 409.981566][ C1] ? tc_modify_qdisc+0x924/0x19c0 [ 409.981584][ C1] ? __cfi_fq_change+0x10/0x10 [ 409.981599][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 409.981617][ C1] fq_init+0x3e3/0x5d0 [ 409.981632][ C1] ? __cfi_fq_init+0x10/0x10 [ 409.981647][ C1] qdisc_create+0x89b/0x1180 [ 409.981666][ C1] ? qdisc_notify+0x360/0x360 [ 409.981685][ C1] ? qdisc_lookup+0x400/0x4d0 [ 409.981702][ C1] tc_modify_qdisc+0x924/0x19c0 [ 409.981723][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 409.981743][ C1] ? __kasan_check_write+0x14/0x20 [ 409.981758][ C1] ? mutex_lock+0x93/0x1b0 [ 409.981776][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 409.981789][ C1] ? ns_capable+0x8c/0xf0 [ 409.981803][ C1] ? netlink_net_capable+0x125/0x160 [ 409.981828][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 409.981846][ C1] rtnetlink_rcv_msg+0xb28/0xde0 [ 409.981865][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 409.981881][ C1] ? __kernel_text_address+0xd/0x30 [ 409.981899][ C1] ? avc_has_perm_noaudit+0x390/0x490 [ 409.981913][ C1] ? memcpy+0x56/0x70 [ 409.981927][ C1] ? avc_has_perm_noaudit+0x30a/0x490 [ 409.981941][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 409.981955][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 409.981969][ C1] ? avc_has_perm+0x163/0x250 [ 409.981982][ C1] ? __alloc_skb+0x226/0x4a0 [ 409.981995][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 409.982008][ C1] ? ____sys_sendmsg+0x5fb/0x9c0 [ 409.982025][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 409.982038][ C1] ? selinux_nlmsg_lookup+0x38f/0x440 [ 409.982054][ C1] netlink_rcv_skb+0x200/0x450 [ 409.982093][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 409.982111][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 409.982125][ C1] ? __netlink_lookup+0x387/0x3b0 [ 409.982140][ C1] rtnetlink_rcv+0x1c/0x20 [ 409.982173][ C1] netlink_unicast+0x8c1/0xa60 [ 409.982193][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 409.982208][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 409.982223][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 409.982238][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 409.982252][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 409.982269][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 409.982292][ C1] ? import_iovec+0x7c/0xb0 [ 409.982305][ C1] ___sys_sendmsg+0x2a2/0x360 [ 409.982322][ C1] ? __sys_sendmsg+0x290/0x290 [ 409.982344][ C1] ? __fdget+0x19c/0x220 [ 409.982358][ C1] __x64_sys_sendmsg+0x20d/0x2e0 [ 409.982374][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 409.982392][ C1] ? __kasan_check_write+0x14/0x20 [ 409.982405][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 409.982421][ C1] ? switch_fpu_return+0xe/0x10 [ 409.982437][ C1] x64_sys_call+0x171/0x9a0 [ 409.982452][ C1] do_syscall_64+0x4c/0xa0 [ 409.982468][ C1] ? clear_bhb_loop+0x30/0x80 [ 409.982481][ C1] ? clear_bhb_loop+0x30/0x80 [ 409.982493][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.982511][ C1] RIP: 0033:0x7f9984d9ce59 [ 409.982523][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.982533][ C1] RSP: 002b:00007f9985b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.982551][ C1] RAX: ffffffffffffffda RBX: 00007f9985015fa0 RCX: 00007f9984d9ce59 [ 409.982561][ C1] RDX: 0000000020040080 RSI: 0000200000001200 RDI: 0000000000000005 [ 409.982569][ C1] RBP: 00007f9984e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 409.982578][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.982586][ C1] R13: 00007f9985016038 R14: 00007f9985015fa0 R15: 00007ffddd2d6a88 [ 409.982599][ C1] [ 430.088244][ T29] INFO: task kworker/u4:0:8 blocked for more than 165 seconds. [ 430.096121][ T29] Not tainted syzkaller #0 [ 430.101432][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.110254][ T29] task:kworker/u4:0 state:D stack:21512 pid:8 ppid:2 flags:0x00004000 [ 430.119669][ T29] Workqueue: netns cleanup_net [ 430.124446][ T29] Call Trace: [ 430.127721][ T29] [ 430.130864][ T29] __schedule+0xbe2/0x14b0 [ 430.135369][ T29] ? release_firmware_map_entry+0x190/0x190 [ 430.141547][ T29] ? kthread_data+0x50/0xc0 [ 430.146124][ T29] ? wq_worker_sleeping+0x64/0x280 [ 430.151443][ T29] schedule+0xbd/0x170 [ 430.155518][ T29] schedule_timeout+0xba/0x340 [ 430.160454][ T29] ? __cfi_schedule_timeout+0x10/0x10 [ 430.165830][ T29] ? rcu_barrier_handler+0x95/0xe0 [ 430.171111][ T29] ? generic_exec_single+0x24e/0x3b0 [ 430.176468][ T29] wait_for_common+0x364/0x640 [ 430.181484][ T29] ? wait_for_completion+0x20/0x20 [ 430.186601][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 430.192215][ T29] ? idr_get_next_ul+0x25a/0x2d0 [ 430.197169][ T29] ? _find_next_bit+0x129/0x130 [ 430.202341][ T29] wait_for_completion+0x18/0x20 [ 430.207283][ T29] rcu_barrier+0x473/0x5f0 [ 430.212024][ T29] l2tp_exit_net+0x14f/0x1f0 [ 430.216647][ T29] ? pde_put+0x14e/0x1a0 [ 430.221077][ T29] ? __cfi_l2tp_exit_net+0x10/0x10 [ 430.226200][ T29] cleanup_net+0x5b0/0xb10 [ 430.230881][ T29] ? __kasan_check_write+0x14/0x20 [ 430.236020][ T29] ? pwq_activate_inactive_work+0x2ea/0x3f0 [ 430.242176][ T29] ? __cfi_cleanup_net+0x10/0x10 [ 430.247130][ T29] process_one_work+0x717/0xc30 [ 430.253110][ T29] worker_thread+0xa4d/0x11d0 [ 430.257807][ T29] kthread+0x281/0x320 [ 430.262137][ T29] ? __cfi_worker_thread+0x10/0x10 [ 430.267259][ T29] ? __cfi_kthread+0x10/0x10 [ 430.272044][ T29] ret_from_fork+0x1f/0x30 [ 430.276471][ T29] [ 430.279740][ T29] INFO: task jbd2/sda1-8:66 blocked for more than 144 seconds. [ 430.287288][ T29] Not tainted syzkaller #0 [ 430.292405][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.301229][ T29] task:jbd2/sda1-8 state:D stack:24968 pid:66 ppid:2 flags:0x00004000 [ 430.310745][ T29] Call Trace: [ 430.314020][ T29] [ 430.316971][ T29] __schedule+0xbe2/0x14b0 [ 430.321624][ T29] ? release_firmware_map_entry+0x190/0x190 [ 430.327524][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 430.333200][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 430.339231][ T29] schedule+0xbd/0x170 [ 430.343305][ T29] io_schedule+0x84/0xe0 [ 430.347550][ T29] bit_wait_io+0x13/0xd0 [ 430.351992][ T29] __wait_on_bit+0xae/0x2d0 [ 430.356502][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 430.361640][ T29] out_of_line_wait_on_bit+0x135/0x190 [ 430.367208][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 430.372302][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 430.378449][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 430.383931][ T29] ? __cfi__raw_write_lock+0x10/0x10 [ 430.389472][ T29] ? _raw_read_unlock+0x25/0x40 [ 430.394335][ T29] __wait_on_buffer+0x56/0x70 [ 430.399221][ T29] jbd2_journal_commit_transaction+0x2ec1/0x5640 [ 430.405568][ T29] ? __cfi_jbd2_journal_commit_transaction+0x10/0x10 [ 430.412419][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 430.418603][ T29] ? __kasan_check_write+0x14/0x20 [ 430.423788][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 430.429480][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 430.435381][ T29] ? detach_if_pending+0xf5/0x300 [ 430.440587][ T29] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 430.446404][ T29] ? del_timer_sync+0x144/0x1a0 [ 430.451509][ T29] kjournald2+0x3d4/0x750 [ 430.455849][ T29] ? __cfi_kjournald2+0x10/0x10 [ 430.460910][ T29] ? __cfi_autoremove_wake_function+0x10/0x10 [ 430.466988][ T29] ? __kasan_check_read+0x11/0x20 [ 430.472225][ T29] ? __kthread_parkme+0x13a/0x180 [ 430.477268][ T29] kthread+0x281/0x320 [ 430.481622][ T29] ? __cfi_kjournald2+0x10/0x10 [ 430.486492][ T29] ? __cfi_kthread+0x10/0x10 [ 430.491273][ T29] ret_from_fork+0x1f/0x30 [ 430.495701][ T29] [ 430.498911][ T29] INFO: task kworker/0:2:338 blocked for more than 165 seconds. [ 430.506545][ T29] Not tainted syzkaller #0 [ 430.511721][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.520538][ T29] task:kworker/0:2 state:D stack:25800 pid:338 ppid:2 flags:0x00004000 [ 430.529872][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 430.535860][ T29] Call Trace: [ 430.539328][ T29] [ 430.542259][ T29] __schedule+0xbe2/0x14b0 [ 430.546693][ T29] ? release_firmware_map_entry+0x190/0x190 [ 430.552802][ T29] ? __mutex_add_waiter+0x184/0x280 [ 430.558007][ T29] ? __kasan_check_write+0x14/0x20 [ 430.563322][ T29] ? _raw_spin_unlock_irq+0x4d/0x70 [ 430.568740][ T29] ? wq_worker_sleeping+0x1d9/0x280 [ 430.573956][ T29] schedule+0xbd/0x170 [ 430.578031][ T29] schedule_preempt_disabled+0x13/0x20 [ 430.583743][ T29] __mutex_lock+0x833/0x1790 [ 430.588456][ T29] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 430.595229][ T29] ? sched_balance_newidle+0x348/0xcd0 [ 430.600915][ T29] ? kvm_sched_clock_read+0x18/0x40 [ 430.606124][ T29] ? dequeue_task_fair+0x4f2/0x1d40 [ 430.611487][ T29] ? __cfi_sched_clock_cpu+0x10/0x10 [ 430.616781][ T29] __mutex_lock_slowpath+0xe/0x10 [ 430.622019][ T29] mutex_lock+0x10a/0x1b0 [ 430.626356][ T29] ? __cfi_mutex_lock+0x10/0x10 [ 430.631412][ T29] ? __switch_to+0x56f/0x1070 [ 430.636099][ T29] rtnl_lock+0x15/0x20 [ 430.640394][ T29] addrconf_dad_work+0xc4/0x14a0 [ 430.645341][ T29] ? __cfi_addrconf_dad_work+0x10/0x10 [ 430.651002][ T29] ? __schedule+0xbea/0x14b0 [ 430.655604][ T29] process_one_work+0x717/0xc30 [ 430.660674][ T29] worker_thread+0xa4d/0x11d0 [ 430.665361][ T29] kthread+0x281/0x320 [ 430.669679][ T29] ? __cfi_worker_thread+0x10/0x10 [ 430.674800][ T29] ? __cfi_kthread+0x10/0x10 [ 430.679599][ T29] ret_from_fork+0x1f/0x30 [ 430.684034][ T29] [ 430.687066][ T29] INFO: task syz-executor:378 blocked for more than 145 seconds. [ 430.695266][ T29] Not tainted syzkaller #0 [ 430.700326][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.709109][ T29] task:syz-executor state:D stack:25320 pid:378 ppid:301 flags:0x00004004 [ 430.718504][ T29] Call Trace: [ 430.721807][ T29] [ 430.724747][ T29] __schedule+0xbe2/0x14b0 [ 430.730411][ T29] ? release_firmware_map_entry+0x190/0x190 [ 430.736333][ T29] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 430.742006][ T29] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 430.747909][ T29] ? __kasan_check_write+0x14/0x20 [ 430.753247][ T29] schedule+0xbd/0x170 [ 430.757327][ T29] io_schedule+0x84/0xe0 [ 430.761744][ T29] bit_wait_io+0x13/0xd0 [ 430.765991][ T29] __wait_on_bit+0xae/0x2d0 [ 430.770669][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 430.775613][ T29] out_of_line_wait_on_bit+0x135/0x190 [ 430.781274][ T29] ? __cfi_bit_wait_io+0x10/0x10 [ 430.786235][ T29] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 430.792477][ T29] ? __cfi_wake_bit_function+0x10/0x10 [ 430.797951][ T29] do_get_write_access+0x558/0xdd0 [ 430.803267][ T29] jbd2_journal_get_write_access+0x199/0x2f0 [ 430.809474][ T29] __ext4_journal_get_write_access+0x235/0x6c0 [ 430.815636][ T29] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 430.822537][ T29] __ext4_new_inode+0x139f/0x3710 [ 430.827581][ T29] ? __cfi___ext4_new_inode+0x10/0x10 [ 430.833142][ T29] ? dquot_initialize+0x20/0x20 [ 430.837997][ T29] ? may_create+0x61e/0x820 [ 430.842690][ T29] ext4_mkdir+0x407/0xc90 [ 430.847031][ T29] ? __cfi_ext4_mkdir+0x10/0x10 [ 430.852164][ T29] ? selinux_inode_mkdir+0x22/0x30 [ 430.857293][ T29] ? security_inode_mkdir+0xd2/0x120 [ 430.862752][ T29] vfs_mkdir+0x39c/0x580 [ 430.867011][ T29] do_mkdirat+0x174/0x4d0 [ 430.871530][ T29] __x64_sys_mkdir+0x6e/0x80 [ 430.876150][ T29] x64_sys_call+0x966/0x9a0 [ 430.880874][ T29] do_syscall_64+0x4c/0xa0 [ 430.885298][ T29] ? clear_bhb_loop+0x30/0x80 [ 430.890189][ T29] ? clear_bhb_loop+0x30/0x80 [ 430.894866][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.900969][ T29] RIP: 0033:0x7f6d64dca227 [ 430.905379][ T29] RSP: 002b:00007ffd37e25b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 430.914073][ T29] RAX: ffffffffffffffda RBX: 00007ffd37e25c82 RCX: 00007f6d64dca227 [ 430.922299][ T29] RDX: 0000000010d15f74 RSI: 00000000000001c0 RDI: 00007ffd37e25c70 [ 430.930427][ T29] RBP: 8421084210842109 R08: 0000000000000000 R09: 0000000000000000 [ 430.938612][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000010d15f74 [ 430.946590][ T29] R13: 00007ffd37e25c82 R14: 0000000000000004 R15: 00007f6d64e58d20 [ 430.954772][ T29] [ 430.957798][ T29] NMI backtrace for cpu 0 [ 430.962120][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 430.969314][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.979367][ T29] Call Trace: [ 430.982650][ T29] [ 430.985578][ T29] __dump_stack+0x21/0x24 [ 430.989917][ T29] dump_stack_lvl+0x110/0x170 [ 430.994594][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 430.999623][ T29] ? rcu_preempt_deferred_qs_irqrestore+0x674/0x960 [ 431.006223][ T29] dump_stack+0x15/0x24 [ 431.010380][ T29] nmi_cpu_backtrace+0x2af/0x2c0 [ 431.015322][ T29] ? rcu_read_unlock_special+0xb2/0x450 [ 431.020873][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 431.026340][ T29] ? nmi_trigger_cpumask_backtrace+0xf6/0x3a0 [ 431.032412][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.038396][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.044381][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 431.050376][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 431.056278][ T29] watchdog+0xde1/0xf30 [ 431.060436][ T29] ? __cfi_watchdog+0x10/0x10 [ 431.065204][ T29] ? __kasan_check_read+0x11/0x20 [ 431.070297][ T29] ? __kthread_parkme+0x13a/0x180 [ 431.075328][ T29] kthread+0x281/0x320 [ 431.079406][ T29] ? __cfi_watchdog+0x10/0x10 [ 431.084083][ T29] ? __cfi_kthread+0x10/0x10 [ 431.088676][ T29] ret_from_fork+0x1f/0x30 [ 431.093103][ T29] [ 431.096183][ T29] Sending NMI from CPU 0 to CPUs 1: [ 431.101401][ C1] NMI backtrace for cpu 1 [ 431.101413][ C1] CPU: 1 PID: 377 Comm: syz.2.17 Not tainted syzkaller #0 [ 431.101431][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.101439][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x1/0x90 [ 431.101469][ C1] Code: 10 48 89 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 7d 47 2f 67 55 <48> 89 e5 48 8b 45 08 65 48 8b 15 60 05 91 7e 65 8b 0d 61 05 91 7e [ 431.101481][ C1] RSP: 0018:ffffc900007c6e38 EFLAGS: 00000246 [ 431.101494][ C1] RAX: 0000000000000000 RBX: 00000000ffff0000 RCX: 0000000000000000 [ 431.101503][ C1] RDX: ffff88812cf33cc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.101512][ C1] RBP: ffffc900007c6e78 R08: 0000000000000003 R09: 0000000000000004 [ 431.101521][ C1] R10: dffffc0000000000 R11: fffff520000f8dcc R12: 0000000000000050 [ 431.101530][ C1] R13: dffffc0000000000 R14: ffff88812db68000 R15: ffff888113cb2000 [ 431.101541][ C1] FS: 00007f9985b966c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 431.101553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.101629][ C1] CR2: 00007f9984c72780 CR3: 00000001149a2000 CR4: 00000000003506a0 [ 431.101642][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 431.101650][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 431.101659][ C1] Call Trace: [ 431.101664][ C1] [ 431.101670][ C1] ? qdisc_lookup_rcu+0xbd/0x4d0 [ 431.101690][ C1] qdisc_tree_reduce_backlog+0x10b/0x3a0 [ 431.101710][ C1] fq_change+0xd3e/0x1340 [ 431.101727][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 431.101744][ C1] ? qdisc_alloc+0x561/0x750 [ 431.101759][ C1] ? qdisc_create+0x183/0x1180 [ 431.101776][ C1] ? tc_modify_qdisc+0x924/0x19c0 [ 431.101794][ C1] ? __cfi_fq_change+0x10/0x10 [ 431.101809][ C1] ? netlink_sendmsg+0x8b9/0xbd0 [ 431.101827][ C1] fq_init+0x3e3/0x5d0 [ 431.101841][ C1] ? __cfi_fq_init+0x10/0x10 [ 431.101856][ C1] qdisc_create+0x89b/0x1180 [ 431.101875][ C1] ? qdisc_notify+0x360/0x360 [ 431.101894][ C1] ? qdisc_lookup+0x400/0x4d0 [ 431.101911][ C1] tc_modify_qdisc+0x924/0x19c0 [ 431.101931][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 431.101952][ C1] ? __kasan_check_write+0x14/0x20 [ 431.101966][ C1] ? mutex_lock+0x93/0x1b0 [ 431.101983][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 431.102000][ C1] ? ns_capable+0x8c/0xf0 [ 431.102014][ C1] ? netlink_net_capable+0x125/0x160 [ 431.102032][ C1] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 431.102050][ C1] rtnetlink_rcv_msg+0xb28/0xde0 [ 431.102070][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 431.102087][ C1] ? __kernel_text_address+0xd/0x30 [ 431.102104][ C1] ? avc_has_perm_noaudit+0x390/0x490 [ 431.102119][ C1] ? memcpy+0x56/0x70 [ 431.102139][ C1] ? avc_has_perm_noaudit+0x30a/0x490 [ 431.102153][ C1] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 431.102167][ C1] ? kasan_save_alloc_info+0x1f/0x30 [ 431.102182][ C1] ? avc_has_perm+0x163/0x250 [ 431.102194][ C1] ? __alloc_skb+0x226/0x4a0 [ 431.102207][ C1] ? netlink_sendmsg+0x635/0xbd0 [ 431.102220][ C1] ? ____sys_sendmsg+0x5fb/0x9c0 [ 431.102238][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 431.102251][ C1] ? selinux_nlmsg_lookup+0x38f/0x440 [ 431.102268][ C1] netlink_rcv_skb+0x200/0x450 [ 431.102281][ C1] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 431.102300][ C1] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 431.102314][ C1] ? __netlink_lookup+0x387/0x3b0 [ 431.102329][ C1] rtnetlink_rcv+0x1c/0x20 [ 431.102366][ C1] netlink_unicast+0x8c1/0xa60 [ 431.102387][ C1] netlink_sendmsg+0x8b9/0xbd0 [ 431.102403][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 431.102418][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 431.102434][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 431.102449][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 431.102466][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 431.102483][ C1] ? import_iovec+0x7c/0xb0 [ 431.102497][ C1] ___sys_sendmsg+0x2a2/0x360 [ 431.102514][ C1] ? __sys_sendmsg+0x290/0x290 [ 431.102537][ C1] ? __fdget+0x19c/0x220 [ 431.102551][ C1] __x64_sys_sendmsg+0x20d/0x2e0 [ 431.102568][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 431.102585][ C1] ? __kasan_check_write+0x14/0x20 [ 431.102599][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 431.102615][ C1] ? switch_fpu_return+0xe/0x10 [ 431.102630][ C1] x64_sys_call+0x171/0x9a0 [ 431.102647][ C1] do_syscall_64+0x4c/0xa0 [ 431.102663][ C1] ? clear_bhb_loop+0x30/0x80 [ 431.102675][ C1] ? clear_bhb_loop+0x30/0x80 [ 431.102687][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.102706][ C1] RIP: 0033:0x7f9984d9ce59 [ 431.102718][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.102729][ C1] RSP: 002b:00007f9985b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.102743][ C1] RAX: ffffffffffffffda RBX: 00007f9985015fa0 RCX: 00007f9984d9ce59 [ 431.102753][ C1] RDX: 0000000020040080 RSI: 0000200000001200 RDI: 0000000000000005 [ 431.102762][ C1] RBP: 00007f9984e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 431.102771][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.102779][ C1] R13: 00007f9985016038 R14: 00007f9985015fa0 R15: 00007ffddd2d6a88 [ 431.102790][ C1]