Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. 2025/12/17 02:55:20 parsed 1 programs [ 260.877225][ T30] audit: type=1400 audit(1765940120.020:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 260.898044][ T30] audit: type=1400 audit(1765940120.020:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 261.814742][ T30] audit: type=1400 audit(1765940120.960:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 261.816605][ T290] cgroup: Unknown subsys name 'net' [ 261.837589][ T30] audit: type=1400 audit(1765940120.960:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.864883][ T30] audit: type=1400 audit(1765940121.000:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 261.865185][ T290] cgroup: Unknown subsys name 'devices' [ 262.033881][ T290] cgroup: Unknown subsys name 'hugetlb' [ 262.039596][ T290] cgroup: Unknown subsys name 'rlimit' [ 262.217955][ T30] audit: type=1400 audit(1765940121.360:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.241132][ T30] audit: type=1400 audit(1765940121.360:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.261569][ T30] audit: type=1400 audit(1765940121.360:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.269274][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 262.281926][ T30] audit: type=1400 audit(1765940121.360:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 262.310681][ T30] audit: type=1400 audit(1765940121.360:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 262.339232][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 262.845532][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 263.336242][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.343351][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.350709][ T330] device bridge_slave_0 entered promiscuous mode [ 263.357867][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.364914][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.372346][ T330] device bridge_slave_1 entered promiscuous mode [ 263.437854][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.444913][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.452233][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.459263][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.480972][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.488845][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.496034][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.506815][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.515037][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.522117][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.529471][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.537986][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.545059][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.556934][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.570688][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.582723][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.593865][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.602292][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.612892][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.621099][ T330] device veth0_vlan entered promiscuous mode [ 263.631063][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.640237][ T330] device veth1_macvtap entered promiscuous mode [ 263.653255][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.663676][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/17 02:55:23 executed programs: 0 [ 264.165137][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.172261][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.179685][ T363] device bridge_slave_0 entered promiscuous mode [ 264.186791][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.194058][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.201817][ T363] device bridge_slave_1 entered promiscuous mode [ 264.251252][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.258418][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.265728][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.272771][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.293659][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.301301][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.308579][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.317481][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.325968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.334551][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.341599][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.350011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.358608][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.366785][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.373841][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.385278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.393337][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.402445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.410496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.423246][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.431834][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.442983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.450906][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.459313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.466942][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.475135][ T363] device veth0_vlan entered promiscuous mode [ 264.484953][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.493172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.507365][ T363] device veth1_macvtap entered promiscuous mode [ 264.516362][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.524134][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.532580][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.547245][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.555565][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.122140][ T10] device bridge_slave_1 left promiscuous mode [ 265.128333][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.341719][ T10] device bridge_slave_0 left promiscuous mode [ 265.347901][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.562937][ T10] device veth1_macvtap left promiscuous mode [ 265.568994][ T10] device veth0_vlan left promiscuous mode [ 407.711508][ T31] INFO: task kworker/u4:1:10 blocked for more than 122 seconds. [ 407.719213][ T31] Not tainted syzkaller #0 [ 407.911430][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.920159][ T31] task:kworker/u4:1 state:D stack:21248 pid: 10 ppid: 2 flags:0x00004000 [ 408.291485][ T31] Workqueue: netns cleanup_net [ 408.296480][ T31] Call Trace: [ 408.299805][ T31] [ 408.302818][ T31] __schedule+0xb6e/0x14c0 [ 408.307387][ T31] ? release_firmware_map_entry+0x190/0x190 [ 408.313345][ T31] ? __switch_to_asm+0x3a/0x60 [ 408.318182][ T31] ? kthread_data+0x50/0xc0 [ 408.322789][ T31] ? wq_worker_sleeping+0x60/0x200 [ 408.327923][ T31] schedule+0x11e/0x1e0 [ 408.332194][ T31] schedule_timeout+0xa6/0x2e0 [ 408.336974][ T31] ? console_conditional_schedule+0x30/0x30 [ 408.342905][ T31] ? __prepare_to_swait+0xa8/0x130 [ 408.348108][ T31] wait_for_common+0x26b/0x420 [ 408.353017][ T31] ? __kasan_check_write+0x14/0x20 [ 408.358218][ T31] ? wait_for_completion+0x20/0x20 [ 408.363452][ T31] ? mutex_unlock+0x89/0x220 [ 408.368060][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 408.373371][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 408.379191][ T31] ? check_flush_dependency+0xc4/0x370 [ 408.384675][ T31] wait_for_completion+0x18/0x20 [ 408.389626][ T31] flush_workqueue+0x5a6/0x12d0 [ 408.394509][ T31] ? flush_work+0x20/0x20 [ 408.398864][ T31] ? rcu_work_rcufn+0x50/0x50 [ 408.403584][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 408.409409][ T31] peer_remove_after_dead+0x98/0x1a0 [ 408.414838][ T31] wg_peer_remove_all+0x3e2/0x450 [ 408.419882][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 408.425461][ T31] wg_destruct+0x18e/0x300 [ 408.429897][ T31] ? wg_xmit+0xb20/0xb20 [ 408.434160][ T31] netdev_run_todo+0x773/0x990 [ 408.438993][ T31] ? netdev_refcnt_read+0x60/0x60 [ 408.444080][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 408.450009][ T31] ? list_netdevice+0x4c0/0x4c0 [ 408.454901][ T31] rtnl_unlock+0xe/0x10 [ 408.459150][ T31] default_device_exit_batch+0x335/0x390 [ 408.464822][ T31] ? default_device_exit+0x360/0x360 [ 408.470125][ T31] ? wait_woken+0x170/0x170 [ 408.474652][ T31] ? rtnl_unlock+0xe/0x10 [ 408.478992][ T31] ? default_device_exit+0x360/0x360 [ 408.484312][ T31] cleanup_net+0x602/0xad0 [ 408.488740][ T31] ? ops_init+0x4a0/0x4a0 [ 408.493090][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 408.498477][ T31] process_one_work+0x6be/0xba0 [ 408.503356][ T31] worker_thread+0xa59/0x1200 [ 408.508052][ T31] ? __kthread_parkme+0xac/0x200 [ 408.513016][ T31] kthread+0x411/0x500 [ 408.517096][ T31] ? worker_clr_flags+0x190/0x190 [ 408.522145][ T31] ? kthread_blkcg+0xd0/0xd0 [ 408.526749][ T31] ret_from_fork+0x1f/0x30 [ 408.531185][ T31] [ 408.681483][ T31] NMI backtrace for cpu 0 [ 408.685875][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 408.693083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.703177][ T31] Call Trace: [ 408.706474][ T31] [ 408.709417][ T31] __dump_stack+0x21/0x30 [ 408.713810][ T31] dump_stack_lvl+0xee/0x150 [ 408.718417][ T31] ? show_regs_print_info+0x20/0x20 [ 408.723630][ T31] dump_stack+0x15/0x20 [ 408.727803][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 408.732788][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 408.738407][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 408.744586][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 408.749552][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 408.755701][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 408.761785][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 408.767777][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 408.773692][ T31] watchdog+0xd64/0xea0 [ 408.777884][ T31] ? hungtask_pm_notify+0x50/0x50 [ 408.782921][ T31] ? __kasan_check_read+0x11/0x20 [ 408.787959][ T31] ? __kthread_parkme+0xac/0x200 [ 408.792910][ T31] ? preempt_count_add+0x90/0x1b0 [ 408.798022][ T31] kthread+0x411/0x500 [ 408.802125][ T31] ? hungtask_pm_notify+0x50/0x50 [ 408.807169][ T31] ? kthread_blkcg+0xd0/0xd0 [ 408.811776][ T31] ret_from_fork+0x1f/0x30 [ 408.816219][ T31] [ 408.819316][ T31] Sending NMI from CPU 0 to CPUs 1: [ 408.824558][ C1] NMI backtrace for cpu 1 [ 408.824567][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 408.824583][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.824614][ C1] RIP: 0010:arch_stack_walk+0xf3/0x140 [ 408.824696][ C1] Code: ff ff 4c 89 e6 4c 89 fa e8 ba 52 05 00 83 bd 78 ff ff ff 00 74 32 4c 8d bd 78 ff ff ff 4c 89 ff e8 32 43 05 00 48 85 c0 74 1e <48> 89 df 48 89 c6 41 ff d6 84 c0 74 11 4c 89 ff e8 48 44 05 00 83 [ 408.824710][ C1] RSP: 0018:ffffc90002c67648 EFLAGS: 00000082 [ 408.824754][ C1] RAX: ffffffff81405b3d RBX: ffffc90002c67700 RCX: 0000000002c67601 [ 408.824767][ C1] RDX: ffffc90002c67ad8 RSI: 1ffff9200058ceca RDI: ffffffff81405b3d [ 408.824779][ C1] RBP: ffffc90002c676d0 R08: ffffc90002c67710 R09: ffffc90002c67708 [ 408.824791][ C1] R10: 0000000000000005 R11: 1ffff9200058cec9 R12: ffff888110613b40 [ 408.824802][ C1] R13: 0000000000000000 R14: ffffffff8158e500 R15: ffffc90002c67648 [ 408.824814][ C1] FS: 00005555916ca500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 408.824828][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.824839][ C1] CR2: 0000000000000000 CR3: 00000001224d0000 CR4: 00000000003506a0 [ 408.824853][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.824862][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.824872][ C1] Call Trace: [ 408.824877][ C1] [ 408.824883][ C1] ? __dequeue_signal+0x4ad/0x5c0 [ 408.824927][ C1] stack_trace_save+0x98/0xe0 [ 408.824963][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 408.824978][ C1] ? 0xffffffffa00185ec [ 408.824989][ C1] ? is_bpf_text_address+0x177/0x190 [ 408.825035][ C1] ? memset+0x35/0x40 [ 408.825051][ C1] kasan_set_track+0x4a/0x70 [ 408.825065][ C1] ? kasan_set_track+0x4a/0x70 [ 408.825078][ C1] ? kasan_set_free_info+0x23/0x40 [ 408.825094][ C1] ? ____kasan_slab_free+0x125/0x160 [ 408.825108][ C1] ? __kasan_slab_free+0x11/0x20 [ 408.825123][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 408.825142][ C1] ? kmem_cache_free+0x100/0x320 [ 408.825166][ C1] ? debug_smp_processor_id+0x17/0x20 [ 408.825209][ C1] ? kasan_quarantine_put+0x34/0x190 [ 408.825226][ C1] ? kmem_cache_free+0x100/0x320 [ 408.825242][ C1] kasan_set_free_info+0x23/0x40 [ 408.825258][ C1] ____kasan_slab_free+0x125/0x160 [ 408.825273][ C1] __kasan_slab_free+0x11/0x20 [ 408.825288][ C1] slab_free_freelist_hook+0xc2/0x190 [ 408.825306][ C1] ? __dequeue_signal+0x4ad/0x5c0 [ 408.825322][ C1] kmem_cache_free+0x100/0x320 [ 408.825339][ C1] __dequeue_signal+0x4ad/0x5c0 [ 408.825356][ C1] dequeue_signal+0xa0/0x440 [ 408.825372][ C1] get_signal+0x696/0x1480 [ 408.825392][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 408.825420][ C1] ? load_gs_index+0xb0/0xb0 [ 408.825435][ C1] ? get_sigframe_size+0x10/0x10 [ 408.825459][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 408.825474][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 408.825490][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 408.825505][ C1] do_syscall_64+0x58/0xa0 [ 408.825522][ C1] ? clear_bhb_loop+0x50/0xa0 [ 408.825536][ C1] ? clear_bhb_loop+0x50/0xa0 [ 408.825549][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.825568][ C1] RIP: 0033:0x7fc993cf5749 [ 408.825581][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.825594][ C1] RSP: 002b:00007ffd56ca1498 EFLAGS: 00000246 [ 408.825606][ C1] RAX: 0000000000000000 RBX: 00007fc993f4bfa8 RCX: 00007fc993cf5749 [ 408.825617][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc993f4bfac [ 408.825628][ C1] RBP: 0000000000000000 R08: 002c2913c7be074c R09: 0000000756ca178f [ 408.825638][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fc993f4bfac [ 408.825649][ C1] R13: 00007fc993f4bfa0 R14: 0000000000000095 R15: 0000000000000003 [ 408.825662][ C1] [ 433.321443][ T31] INFO: task kworker/u4:1:10 blocked for more than 148 seconds. [ 433.329148][ T31] Not tainted syzkaller #0 [ 433.501421][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.510133][ T31] task:kworker/u4:1 state:D stack:21248 pid: 10 ppid: 2 flags:0x00004000 [ 433.941474][ T31] Workqueue: netns cleanup_net [ 433.946299][ T31] Call Trace: [ 433.949583][ T31] [ 433.952584][ T31] __schedule+0xb6e/0x14c0 [ 433.957014][ T31] ? release_firmware_map_entry+0x190/0x190 [ 433.962941][ T31] ? __switch_to_asm+0x3a/0x60 [ 433.967718][ T31] ? kthread_data+0x50/0xc0 [ 433.972247][ T31] ? wq_worker_sleeping+0x60/0x200 [ 433.977373][ T31] schedule+0x11e/0x1e0 [ 433.981555][ T31] schedule_timeout+0xa6/0x2e0 [ 433.986330][ T31] ? console_conditional_schedule+0x30/0x30 [ 433.992252][ T31] ? __prepare_to_swait+0xa8/0x130 [ 433.997374][ T31] wait_for_common+0x26b/0x420 [ 434.002186][ T31] ? __kasan_check_write+0x14/0x20 [ 434.007333][ T31] ? wait_for_completion+0x20/0x20 [ 434.012463][ T31] ? mutex_unlock+0x89/0x220 [ 434.017067][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 434.022373][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 434.028193][ T31] ? check_flush_dependency+0xc4/0x370 [ 434.033693][ T31] wait_for_completion+0x18/0x20 [ 434.038652][ T31] flush_workqueue+0x5a6/0x12d0 [ 434.043540][ T31] ? flush_work+0x20/0x20 [ 434.047893][ T31] ? rcu_work_rcufn+0x50/0x50 [ 434.052596][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 434.058423][ T31] peer_remove_after_dead+0x98/0x1a0 [ 434.063748][ T31] wg_peer_remove_all+0x3e2/0x450 [ 434.068782][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 434.074372][ T31] wg_destruct+0x18e/0x300 [ 434.078798][ T31] ? wg_xmit+0xb20/0xb20 [ 434.083066][ T31] netdev_run_todo+0x773/0x990 [ 434.087849][ T31] ? netdev_refcnt_read+0x60/0x60 [ 434.092898][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 434.098806][ T31] ? list_netdevice+0x4c0/0x4c0 [ 434.103686][ T31] rtnl_unlock+0xe/0x10 [ 434.107871][ T31] default_device_exit_batch+0x335/0x390 [ 434.113523][ T31] ? default_device_exit+0x360/0x360 [ 434.118850][ T31] ? wait_woken+0x170/0x170 [ 434.123379][ T31] ? rtnl_unlock+0xe/0x10 [ 434.127718][ T31] ? default_device_exit+0x360/0x360 [ 434.133036][ T31] cleanup_net+0x602/0xad0 [ 434.137470][ T31] ? ops_init+0x4a0/0x4a0 [ 434.141828][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 434.147215][ T31] process_one_work+0x6be/0xba0 [ 434.152103][ T31] worker_thread+0xa59/0x1200 [ 434.156799][ T31] ? __kthread_parkme+0xac/0x200 [ 434.161765][ T31] kthread+0x411/0x500 [ 434.165861][ T31] ? worker_clr_flags+0x190/0x190 [ 434.170896][ T31] ? kthread_blkcg+0xd0/0xd0 [ 434.175509][ T31] ret_from_fork+0x1f/0x30 [ 434.179938][ T31] [ 434.271962][ T31] INFO: task jbd2/sda1-8:64 blocked for more than 128 seconds. [ 434.279552][ T31] Not tainted syzkaller #0 [ 434.591438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.600154][ T31] task:jbd2/sda1-8 state:D stack:24992 pid: 64 ppid: 2 flags:0x00004000 [ 434.911470][ T31] Call Trace: [ 434.914794][ T31] [ 434.917742][ T31] __schedule+0xb6e/0x14c0 [ 434.922220][ T31] ? release_firmware_map_entry+0x190/0x190 [ 434.928124][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 434.933615][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 434.938305][ T31] ? submit_bh_wbc+0x599/0x670 [ 434.943211][ T31] schedule+0x11e/0x1e0 [ 434.947385][ T31] io_schedule+0x84/0xe0 [ 434.951646][ T31] bit_wait_io+0x13/0xd0 [ 434.955921][ T31] out_of_line_wait_on_bit+0x15a/0x200 [ 434.961390][ T31] ? bit_wait+0xd0/0xd0 [ 434.965571][ T31] ? __wait_on_bit+0x180/0x180 [ 434.970343][ T31] ? bit_waitqueue+0x30/0x30 [ 434.974951][ T31] ? _raw_write_trylock+0x140/0x140 [ 434.980181][ T31] __wait_on_buffer+0x7c/0x90 [ 434.984911][ T31] jbd2_journal_commit_transaction+0x34ec/0x55f0 [ 434.991350][ T31] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 434.998153][ T31] ? __switch_to+0x51d/0xe20 [ 435.002807][ T31] ? compat_start_thread+0x20/0x20 [ 435.007927][ T31] ? kvm_sched_clock_read+0x18/0x40 [ 435.013169][ T31] ? _raw_spin_unlock+0x4d/0x70 [ 435.018039][ T31] ? finish_task_switch+0x16b/0x780 [ 435.023262][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 435.027949][ T31] ? __kasan_check_write+0x14/0x20 [ 435.033089][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 435.038571][ T31] ? detach_if_pending+0xf4/0x300 [ 435.043629][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 435.049454][ T31] ? del_timer_sync+0x144/0x1a0 [ 435.054331][ T31] kjournald2+0x44c/0x860 [ 435.058741][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 435.063979][ T31] ? io_schedule+0xe0/0xe0 [ 435.068432][ T31] ? __kasan_check_read+0x11/0x20 [ 435.073508][ T31] ? __kthread_parkme+0xac/0x200 [ 435.078468][ T31] ? preempt_count_add+0x90/0x1b0 [ 435.083556][ T31] kthread+0x411/0x500 [ 435.087646][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 435.092878][ T31] ? kthread_blkcg+0xd0/0xd0 [ 435.097485][ T31] ret_from_fork+0x1f/0x30 [ 435.102020][ T31] [ 435.301445][ T31] NMI backtrace for cpu 0 [ 435.305899][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 435.313104][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.323172][ T31] Call Trace: [ 435.326456][ T31] [ 435.329391][ T31] __dump_stack+0x21/0x30 [ 435.333731][ T31] dump_stack_lvl+0xee/0x150 [ 435.338349][ T31] ? show_regs_print_info+0x20/0x20 [ 435.343565][ T31] dump_stack+0x15/0x20 [ 435.347728][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 435.352676][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 435.358239][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 435.364406][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 435.369356][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 435.375435][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 435.381514][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 435.387516][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 435.393433][ T31] watchdog+0xd64/0xea0 [ 435.397615][ T31] ? hungtask_pm_notify+0x50/0x50 [ 435.402649][ T31] ? __kasan_check_read+0x11/0x20 [ 435.407684][ T31] ? __kthread_parkme+0xac/0x200 [ 435.412625][ T31] ? preempt_count_add+0x90/0x1b0 [ 435.417659][ T31] kthread+0x411/0x500 [ 435.421744][ T31] ? hungtask_pm_notify+0x50/0x50 [ 435.426784][ T31] ? kthread_blkcg+0xd0/0xd0 [ 435.431386][ T31] ret_from_fork+0x1f/0x30 [ 435.435815][ T31] [ 435.438893][ T31] Sending NMI from CPU 0 to CPUs 1: [ 435.444122][ C1] NMI backtrace for cpu 1 [ 435.444131][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 435.444148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.444157][ C1] RIP: 0010:arch_stack_walk+0x100/0x140 [ 435.444181][ C1] Code: 83 bd 78 ff ff ff 00 74 32 4c 8d bd 78 ff ff ff 4c 89 ff e8 32 43 05 00 48 85 c0 74 1e 48 89 df 48 89 c6 41 ff d6 84 c0 74 11 <4c> 89 ff e8 48 44 05 00 83 bd 78 ff ff ff 00 75 d5 65 48 8b 04 25 [ 435.444194][ C1] RSP: 0018:ffffc900001d0828 EFLAGS: 00000002 [ 435.444209][ C1] RAX: 0000000000000001 RBX: ffffc900001d08e0 RCX: 00000000001d0801 [ 435.444220][ C1] RDX: dffffc0000000000 RSI: ffffffff81406d3a RDI: ffffc900001d08e0 [ 435.444233][ C1] RBP: ffffc900001d08b0 R08: ffffc900001d08f0 R09: ffffc900001d08e8 [ 435.444245][ C1] R10: 0000000000000007 R11: 1ffff9200003a105 R12: ffff888110613b40 [ 435.444257][ C1] R13: 0000000000000001 R14: ffffffff8158e500 R15: ffffc900001d0828 [ 435.444268][ C1] FS: 00005555916ca500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 435.444283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.444294][ C1] CR2: 0000000000000000 CR3: 00000001224d0000 CR4: 00000000003506a0 [ 435.444308][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.444317][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.444327][ C1] Call Trace: [ 435.444331][ C1] [ 435.444337][ C1] ? group_send_sig_info+0x11a/0x3c0 [ 435.444356][ C1] stack_trace_save+0x98/0xe0 [ 435.444372][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 435.444393][ C1] ? __stack_depot_save+0x34/0x480 [ 435.444490][ C1] ? memset+0x35/0x40 [ 435.444507][ C1] __kasan_slab_alloc+0xbd/0xf0 [ 435.444521][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 435.444535][ C1] ? slab_post_alloc_hook+0x4f/0x2b0 [ 435.444552][ C1] ? kmem_cache_alloc+0xf7/0x260 [ 435.444568][ C1] ? __sigqueue_alloc+0x137/0x210 [ 435.444583][ C1] ? __send_signal+0x212/0xc30 [ 435.444598][ C1] ? send_signal+0x422/0x580 [ 435.444613][ C1] ? do_send_sig_info+0xd6/0x210 [ 435.444627][ C1] ? group_send_sig_info+0x11a/0x3c0 [ 435.444652][ C1] slab_post_alloc_hook+0x4f/0x2b0 [ 435.444669][ C1] ? should_failslab+0x9/0x20 [ 435.444718][ C1] ? __sigqueue_alloc+0x137/0x210 [ 435.444734][ C1] kmem_cache_alloc+0xf7/0x260 [ 435.444751][ C1] __sigqueue_alloc+0x137/0x210 [ 435.444768][ C1] __send_signal+0x212/0xc30 [ 435.444783][ C1] ? __kasan_check_write+0x14/0x20 [ 435.444800][ C1] send_signal+0x422/0x580 [ 435.444815][ C1] ? __hrtimer_run_queues+0x97a/0x9e0 [ 435.444835][ C1] do_send_sig_info+0xd6/0x210 [ 435.444851][ C1] group_send_sig_info+0x11a/0x3c0 [ 435.444866][ C1] ? ktime_get+0x12f/0x160 [ 435.444892][ C1] ? __lock_task_sighand+0x100/0x100 [ 435.444909][ C1] do_bpf_send_signal+0x82/0x150 [ 435.444947][ C1] irq_work_run_list+0x169/0x240 [ 435.444963][ C1] ? irq_work_run+0xf0/0xf0 [ 435.444979][ C1] irq_work_run+0x6a/0xf0 [ 435.444994][ C1] __sysvec_irq_work+0x63/0x1a0 [ 435.445012][ C1] sysvec_irq_work+0xa1/0xc0 [ 435.445030][ C1] [ 435.445034][ C1] [ 435.445039][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 435.445057][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 435.445077][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 fa 76 3a 01 5d c3 0f 1f 84 00 00 00 00 [ 435.445089][ C1] RSP: 0018:ffffc90002c67c20 EFLAGS: 00000246 [ 435.445102][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 435.445111][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 435.445120][ C1] RBP: ffffc90002c67c20 R08: dffffc0000000000 R09: ffffed103ee265e7 [ 435.445132][ C1] R10: ffffed103ee265e7 R11: 1ffff1103ee265e6 R12: 0000000000000000 [ 435.445144][ C1] R13: dffffc0000000001 R14: ffffffff85e659f8 R15: dffffc0000000000 [ 435.445159][ C1] x2apic_send_IPI_self+0x5e/0x70 [ 435.445176][ C1] arch_irq_work_raise+0x86/0xd0 [ 435.445193][ C1] __irq_work_queue_local+0x115/0x190 [ 435.445209][ C1] irq_work_queue+0x9e/0x150 [ 435.445224][ C1] bpf_send_signal_common+0x2b2/0x420 [ 435.445241][ C1] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 435.445260][ C1] bpf_send_signal+0x19/0x20 [ 435.445275][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xa14 [ 435.445288][ C1] bpf_trace_run2+0xb0/0x1b0 [ 435.445303][ C1] ? bpf_trace_run1+0x1b0/0x1b0 [ 435.445319][ C1] ? sched_clock+0x9/0x10 [ 435.445332][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 435.445359][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 435.445373][ C1] trace_sys_enter+0x3d/0x50 [ 435.445390][ C1] syscall_trace_enter+0x118/0x180 [ 435.445403][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 435.445417][ C1] do_syscall_64+0x24/0xa0 [ 435.445431][ C1] ? clear_bhb_loop+0x50/0xa0 [ 435.445443][ C1] ? clear_bhb_loop+0x50/0xa0 [ 435.445456][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.445490][ C1] RIP: 0033:0x7fc993c91829 [ 435.445502][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 435.445514][ C1] RSP: 002b:00007ffd56ca0f00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 435.445528][ C1] RAX: ffffffffffffffda RBX: 00007fc993f4bfa8 RCX: 00007fc993c91829 [ 435.445539][ C1] RDX: 00007ffd56ca0f00 RSI: 00007ffd56ca1030 RDI: 0000000000000011 [ 435.445550][ C1] RBP: 0000000000000000 R08: 002c2913c7be074c R09: 0000000756ca178f [ 435.445560][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fc993f4bfac [ 435.445570][ C1] R13: 00007fc993f4bfa0 R14: 0000000000000095 R15: 0000000000000003 [ 435.445583][ C1] [ 436.001437][ C1] sched: RT throttling activated [ 460.201453][ T31] INFO: task kworker/u4:1:10 blocked for more than 175 seconds. [ 460.209224][ T31] Not tainted syzkaller #0 [ 460.421653][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.430374][ T31] task:kworker/u4:1 state:D stack:21248 pid: 10 ppid: 2 flags:0x00004000 [ 460.851485][ T31] Workqueue: netns cleanup_net [ 460.856323][ T31] Call Trace: [ 460.859616][ T31] [ 460.862592][ T31] __schedule+0xb6e/0x14c0 [ 460.867026][ T31] ? release_firmware_map_entry+0x190/0x190 [ 460.872958][ T31] ? __switch_to_asm+0x3a/0x60 [ 460.877738][ T31] ? kthread_data+0x50/0xc0 [ 460.882273][ T31] ? wq_worker_sleeping+0x60/0x200 [ 460.887400][ T31] schedule+0x11e/0x1e0 [ 460.891585][ T31] schedule_timeout+0xa6/0x2e0 [ 460.896365][ T31] ? console_conditional_schedule+0x30/0x30 [ 460.902297][ T31] ? __prepare_to_swait+0xa8/0x130 [ 460.907428][ T31] wait_for_common+0x26b/0x420 [ 460.912260][ T31] ? __kasan_check_write+0x14/0x20 [ 460.917396][ T31] ? wait_for_completion+0x20/0x20 [ 460.922564][ T31] ? mutex_unlock+0x89/0x220 [ 460.927171][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 460.932496][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 460.938342][ T31] ? check_flush_dependency+0xc4/0x370 [ 460.943829][ T31] wait_for_completion+0x18/0x20 [ 460.948784][ T31] flush_workqueue+0x5a6/0x12d0 [ 460.953682][ T31] ? flush_work+0x20/0x20 [ 460.958051][ T31] ? rcu_work_rcufn+0x50/0x50 [ 460.962765][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 460.968616][ T31] peer_remove_after_dead+0x98/0x1a0 [ 460.973943][ T31] wg_peer_remove_all+0x3e2/0x450 [ 460.978989][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 460.984565][ T31] wg_destruct+0x18e/0x300 [ 460.989001][ T31] ? wg_xmit+0xb20/0xb20 [ 460.993268][ T31] netdev_run_todo+0x773/0x990 [ 460.998055][ T31] ? netdev_refcnt_read+0x60/0x60 [ 461.003104][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 461.009018][ T31] ? list_netdevice+0x4c0/0x4c0 [ 461.013899][ T31] rtnl_unlock+0xe/0x10 [ 461.018087][ T31] default_device_exit_batch+0x335/0x390 [ 461.023781][ T31] ? default_device_exit+0x360/0x360 [ 461.029083][ T31] ? wait_woken+0x170/0x170 [ 461.033608][ T31] ? rtnl_unlock+0xe/0x10 [ 461.037955][ T31] ? default_device_exit+0x360/0x360 [ 461.043370][ T31] cleanup_net+0x602/0xad0 [ 461.047839][ T31] ? ops_init+0x4a0/0x4a0 [ 461.052205][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 461.057607][ T31] process_one_work+0x6be/0xba0 [ 461.062497][ T31] worker_thread+0xa59/0x1200 [ 461.067209][ T31] ? __kthread_parkme+0xac/0x200 [ 461.072190][ T31] kthread+0x411/0x500 [ 461.076291][ T31] ? worker_clr_flags+0x190/0x190 [ 461.081330][ T31] ? kthread_blkcg+0xd0/0xd0 [ 461.085947][ T31] ret_from_fork+0x1f/0x30 [ 461.090384][ T31] [ 461.151423][ T31] INFO: task jbd2/sda1-8:64 blocked for more than 155 seconds. [ 461.159018][ T31] Not tainted syzkaller #0 [ 461.501406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.510127][ T31] task:jbd2/sda1-8 state:D stack:24992 pid: 64 ppid: 2 flags:0x00004000 [ 461.821457][ T31] Call Trace: [ 461.824784][ T31] [ 461.827725][ T31] __schedule+0xb6e/0x14c0 [ 461.832201][ T31] ? release_firmware_map_entry+0x190/0x190 [ 461.838109][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 461.843603][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 461.848295][ T31] ? submit_bh_wbc+0x599/0x670 [ 461.853082][ T31] schedule+0x11e/0x1e0 [ 461.857246][ T31] io_schedule+0x84/0xe0 [ 461.861511][ T31] bit_wait_io+0x13/0xd0 [ 461.865766][ T31] out_of_line_wait_on_bit+0x15a/0x200 [ 461.871237][ T31] ? bit_wait+0xd0/0xd0 [ 461.875429][ T31] ? __wait_on_bit+0x180/0x180 [ 461.880214][ T31] ? bit_waitqueue+0x30/0x30 [ 461.884826][ T31] ? _raw_write_trylock+0x140/0x140 [ 461.890049][ T31] __wait_on_buffer+0x7c/0x90 [ 461.894755][ T31] jbd2_journal_commit_transaction+0x34ec/0x55f0 [ 461.901112][ T31] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 461.907904][ T31] ? __switch_to+0x51d/0xe20 [ 461.912522][ T31] ? compat_start_thread+0x20/0x20 [ 461.917641][ T31] ? kvm_sched_clock_read+0x18/0x40 [ 461.922866][ T31] ? _raw_spin_unlock+0x4d/0x70 [ 461.927747][ T31] ? finish_task_switch+0x16b/0x780 [ 461.932980][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 461.937668][ T31] ? __kasan_check_write+0x14/0x20 [ 461.942804][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 461.948370][ T31] ? detach_if_pending+0xf4/0x300 [ 461.953470][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 461.959292][ T31] ? del_timer_sync+0x144/0x1a0 [ 461.964163][ T31] kjournald2+0x44c/0x860 [ 461.968530][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 461.973767][ T31] ? io_schedule+0xe0/0xe0 [ 461.978209][ T31] ? __kasan_check_read+0x11/0x20 [ 461.983253][ T31] ? __kthread_parkme+0xac/0x200 [ 461.988201][ T31] ? preempt_count_add+0x90/0x1b0 [ 461.993338][ T31] kthread+0x411/0x500 [ 461.997419][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 462.002637][ T31] ? kthread_blkcg+0xd0/0xd0 [ 462.007242][ T31] ret_from_fork+0x1f/0x30 [ 462.011687][ T31] [ 462.191446][ T31] NMI backtrace for cpu 0 [ 462.195819][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 462.203034][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.213106][ T31] Call Trace: [ 462.216417][ T31] [ 462.219358][ T31] __dump_stack+0x21/0x30 [ 462.223705][ T31] dump_stack_lvl+0xee/0x150 [ 462.228336][ T31] ? show_regs_print_info+0x20/0x20 [ 462.233549][ T31] dump_stack+0x15/0x20 [ 462.237715][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 462.242668][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 462.248224][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 462.254394][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 462.259350][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 462.265512][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 462.271609][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 462.277600][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 462.283518][ T31] watchdog+0xd64/0xea0 [ 462.287692][ T31] ? hungtask_pm_notify+0x50/0x50 [ 462.292816][ T31] ? __kasan_check_read+0x11/0x20 [ 462.297867][ T31] ? __kthread_parkme+0xac/0x200 [ 462.302904][ T31] ? preempt_count_add+0x90/0x1b0 [ 462.307946][ T31] kthread+0x411/0x500 [ 462.312022][ T31] ? hungtask_pm_notify+0x50/0x50 [ 462.317057][ T31] ? kthread_blkcg+0xd0/0xd0 [ 462.321663][ T31] ret_from_fork+0x1f/0x30 [ 462.326093][ T31] [ 462.329187][ T31] Sending NMI from CPU 0 to CPUs 1: [ 462.334413][ C1] NMI backtrace for cpu 1 [ 462.334422][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 462.334438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.334447][ C1] RIP: 0010:unwind_next_frame+0x0/0x700 [ 462.334470][ C1] Code: c0 08 5b 41 5e 41 5f 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 7c 9b 48 89 df e8 fd 0b 76 00 eb 91 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 48 48 89 fb 48 ba [ 462.334484][ C1] RSP: 0018:ffffc900001d0820 EFLAGS: 00000002 [ 462.334498][ C1] RAX: 0000000000000001 RBX: ffffc900001d08e0 RCX: 00000000001d0801 [ 462.334510][ C1] RDX: dffffc0000000000 RSI: ffffffff8129ffb6 RDI: ffffc900001d0828 [ 462.334522][ C1] RBP: ffffc900001d08b0 R08: ffffc900001d08f0 R09: ffffc900001d08e8 [ 462.334534][ C1] R10: 0000000000000010 R11: 1ffff9200003a105 R12: ffff888110613b40 [ 462.334545][ C1] R13: 0000000000000001 R14: ffffffff8158e500 R15: ffffc900001d0828 [ 462.334556][ C1] FS: 00005555916ca500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 462.334571][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.334582][ C1] CR2: 0000000000000000 CR3: 00000001224d0000 CR4: 00000000003506a0 [ 462.334596][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 462.334605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 462.334615][ C1] Call Trace: [ 462.334619][ C1] [ 462.334624][ C1] ? arch_stack_walk+0x108/0x140 [ 462.334644][ C1] ? arch_irq_work_raise+0x86/0xd0 [ 462.334663][ C1] stack_trace_save+0x98/0xe0 [ 462.334679][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 462.334694][ C1] ? __stack_depot_save+0x34/0x480 [ 462.334713][ C1] ? memset+0x35/0x40 [ 462.334730][ C1] __kasan_slab_alloc+0xbd/0xf0 [ 462.334744][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 462.334758][ C1] ? slab_post_alloc_hook+0x4f/0x2b0 [ 462.334775][ C1] ? kmem_cache_alloc+0xf7/0x260 [ 462.334791][ C1] ? __sigqueue_alloc+0x137/0x210 [ 462.334807][ C1] ? __send_signal+0x212/0xc30 [ 462.334822][ C1] ? send_signal+0x422/0x580 [ 462.334836][ C1] ? do_send_sig_info+0xd6/0x210 [ 462.334851][ C1] ? group_send_sig_info+0x11a/0x3c0 [ 462.334866][ C1] ? do_bpf_send_signal+0x82/0x150 [ 462.334883][ C1] ? irq_work_run_list+0x169/0x240 [ 462.334899][ C1] ? irq_work_run+0x6a/0xf0 [ 462.334913][ C1] ? __sysvec_irq_work+0x63/0x1a0 [ 462.334930][ C1] ? sysvec_irq_work+0xa1/0xc0 [ 462.334948][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 462.334979][ C1] ? native_apic_msr_write+0x39/0x50 [ 462.334996][ C1] ? x2apic_send_IPI_self+0x5e/0x70 [ 462.335013][ C1] ? arch_irq_work_raise+0x86/0xd0 [ 462.335036][ C1] slab_post_alloc_hook+0x4f/0x2b0 [ 462.335052][ C1] ? should_failslab+0x9/0x20 [ 462.335068][ C1] ? __sigqueue_alloc+0x137/0x210 [ 462.335083][ C1] kmem_cache_alloc+0xf7/0x260 [ 462.335100][ C1] __sigqueue_alloc+0x137/0x210 [ 462.335115][ C1] __send_signal+0x212/0xc30 [ 462.335130][ C1] ? __kasan_check_write+0x14/0x20 [ 462.335147][ C1] send_signal+0x422/0x580 [ 462.335162][ C1] ? __hrtimer_run_queues+0x97a/0x9e0 [ 462.335180][ C1] ? call_timer_fn+0x65/0x290 [ 462.335197][ C1] do_send_sig_info+0xd6/0x210 [ 462.335212][ C1] group_send_sig_info+0x11a/0x3c0 [ 462.335227][ C1] ? ktime_get+0x12f/0x160 [ 462.335241][ C1] ? __lock_task_sighand+0x100/0x100 [ 462.335258][ C1] do_bpf_send_signal+0x82/0x150 [ 462.335274][ C1] irq_work_run_list+0x169/0x240 [ 462.335290][ C1] ? irq_work_run+0xf0/0xf0 [ 462.335306][ C1] irq_work_run+0x6a/0xf0 [ 462.335320][ C1] __sysvec_irq_work+0x63/0x1a0 [ 462.335337][ C1] sysvec_irq_work+0xa1/0xc0 [ 462.335353][ C1] [ 462.335358][ C1] [ 462.335362][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 462.335379][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 462.335398][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 fa 76 3a 01 5d c3 0f 1f 84 00 00 00 00 [ 462.335416][ C1] RSP: 0018:ffffc90002c67c20 EFLAGS: 00000246 [ 462.335428][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 462.335438][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 462.335447][ C1] RBP: ffffc90002c67c20 R08: dffffc0000000000 R09: ffffed103ee265e7 [ 462.335459][ C1] R10: ffffed103ee265e7 R11: 1ffff1103ee265e6 R12: 0000000000000000 [ 462.335470][ C1] R13: dffffc0000000001 R14: ffffffff85e659f8 R15: dffffc0000000000 [ 462.335485][ C1] x2apic_send_IPI_self+0x5e/0x70 [ 462.335502][ C1] arch_irq_work_raise+0x86/0xd0 [ 462.335519][ C1] __irq_work_queue_local+0x115/0x190 [ 462.335535][ C1] irq_work_queue+0x9e/0x150 [ 462.335550][ C1] bpf_send_signal_common+0x2b2/0x420 [ 462.335566][ C1] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 462.335585][ C1] bpf_send_signal+0x19/0x20 [ 462.335600][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xa14 [ 462.335613][ C1] bpf_trace_run2+0xb0/0x1b0 [ 462.335628][ C1] ? bpf_trace_run1+0x1b0/0x1b0 [ 462.335645][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 462.335659][ C1] trace_sys_enter+0x3d/0x50 [ 462.335672][ C1] syscall_trace_enter+0x118/0x180 [ 462.335687][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 462.335701][ C1] do_syscall_64+0x24/0xa0 [ 462.335717][ C1] ? clear_bhb_loop+0x50/0xa0 [ 462.335729][ C1] ? clear_bhb_loop+0x50/0xa0 [ 462.335742][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 462.335760][ C1] RIP: 0033:0x7fc993c91829 [ 462.335772][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 462.335784][ C1] RSP: 002b:00007ffd56ca0f00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 462.335798][ C1] RAX: ffffffffffffffda RBX: 00007fc993f4bfa8 RCX: 00007fc993c91829 [ 462.335810][ C1] RDX: 00007ffd56ca0f00 RSI: 00007ffd56ca1030 RDI: 0000000000000011 [ 462.335820][ C1] RBP: 0000000000000000 R08: 002c2913c7be074c R09: 0000000756ca178f [ 462.335831][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fc993f4bfac [ 462.335840][ C1] R13: 00007fc993f4bfa0 R14: 0000000000000095 R15: 0000000000000003 [ 462.335853][ C1] [ 487.071421][ T31] INFO: task kworker/u4:1:10 blocked for more than 202 seconds. [ 487.079123][ T31] Not tainted syzkaller #0 [ 487.301441][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.310279][ T31] task:kworker/u4:1 state:D stack:21248 pid: 10 ppid: 2 flags:0x00004000 [ 487.681445][ T31] Workqueue: netns cleanup_net [ 487.686388][ T31] Call Trace: [ 487.689688][ T31] [ 487.692655][ T31] __schedule+0xb6e/0x14c0 [ 487.697090][ T31] ? release_firmware_map_entry+0x190/0x190 [ 487.703034][ T31] ? __switch_to_asm+0x3a/0x60 [ 487.707818][ T31] ? kthread_data+0x50/0xc0 [ 487.712348][ T31] ? wq_worker_sleeping+0x60/0x200 [ 487.717475][ T31] schedule+0x11e/0x1e0 [ 487.721663][ T31] schedule_timeout+0xa6/0x2e0 [ 487.726443][ T31] ? console_conditional_schedule+0x30/0x30 [ 487.732370][ T31] ? __prepare_to_swait+0xa8/0x130 [ 487.737503][ T31] wait_for_common+0x26b/0x420 [ 487.742291][ T31] ? __kasan_check_write+0x14/0x20 [ 487.747422][ T31] ? wait_for_completion+0x20/0x20 [ 487.752573][ T31] ? mutex_unlock+0x89/0x220 [ 487.757177][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 487.762494][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 487.768321][ T31] ? check_flush_dependency+0xc4/0x370 [ 487.773811][ T31] wait_for_completion+0x18/0x20 [ 487.778769][ T31] flush_workqueue+0x5a6/0x12d0 [ 487.783656][ T31] ? flush_work+0x20/0x20 [ 487.788007][ T31] ? rcu_work_rcufn+0x50/0x50 [ 487.792716][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 487.798538][ T31] peer_remove_after_dead+0x98/0x1a0 [ 487.803874][ T31] wg_peer_remove_all+0x3e2/0x450 [ 487.808911][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 487.814486][ T31] wg_destruct+0x18e/0x300 [ 487.818919][ T31] ? wg_xmit+0xb20/0xb20 [ 487.823182][ T31] netdev_run_todo+0x773/0x990 [ 487.827975][ T31] ? netdev_refcnt_read+0x60/0x60 [ 487.833020][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 487.838924][ T31] ? list_netdevice+0x4c0/0x4c0 [ 487.843824][ T31] rtnl_unlock+0xe/0x10 [ 487.847997][ T31] default_device_exit_batch+0x335/0x390 [ 487.853663][ T31] ? default_device_exit+0x360/0x360 [ 487.858977][ T31] ? wait_woken+0x170/0x170 [ 487.863508][ T31] ? rtnl_unlock+0xe/0x10 [ 487.867854][ T31] ? default_device_exit+0x360/0x360 [ 487.873179][ T31] cleanup_net+0x602/0xad0 [ 487.877610][ T31] ? ops_init+0x4a0/0x4a0 [ 487.881962][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 487.887349][ T31] process_one_work+0x6be/0xba0 [ 487.892290][ T31] worker_thread+0xa59/0x1200 [ 487.896985][ T31] ? __kthread_parkme+0xac/0x200 [ 487.901963][ T31] kthread+0x411/0x500 [ 487.906042][ T31] ? worker_clr_flags+0x190/0x190 [ 487.911078][ T31] ? kthread_blkcg+0xd0/0xd0 [ 487.915692][ T31] ret_from_fork+0x1f/0x30 [ 487.920123][ T31] [ 488.031415][ T31] INFO: task jbd2/sda1-8:64 blocked for more than 182 seconds. [ 488.039007][ T31] Not tainted syzkaller #0 [ 488.381424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.390137][ T31] task:jbd2/sda1-8 state:D stack:24992 pid: 64 ppid: 2 flags:0x00004000 [ 488.681428][ T31] Call Trace: [ 488.684768][ T31] [ 488.687709][ T31] __schedule+0xb6e/0x14c0 [ 488.692169][ T31] ? release_firmware_map_entry+0x190/0x190 [ 488.698079][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 488.703575][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 488.708266][ T31] ? submit_bh_wbc+0x599/0x670 [ 488.713053][ T31] schedule+0x11e/0x1e0 [ 488.717218][ T31] io_schedule+0x84/0xe0 [ 488.721518][ T31] bit_wait_io+0x13/0xd0 [ 488.725777][ T31] out_of_line_wait_on_bit+0x15a/0x200 [ 488.731247][ T31] ? bit_wait+0xd0/0xd0 [ 488.735423][ T31] ? __wait_on_bit+0x180/0x180 [ 488.740427][ T31] ? bit_waitqueue+0x30/0x30 [ 488.745036][ T31] ? _raw_write_trylock+0x140/0x140 [ 488.750247][ T31] __wait_on_buffer+0x7c/0x90 [ 488.754956][ T31] jbd2_journal_commit_transaction+0x34ec/0x55f0 [ 488.761313][ T31] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 488.768120][ T31] ? __switch_to+0x51d/0xe20 [ 488.772755][ T31] ? compat_start_thread+0x20/0x20 [ 488.777876][ T31] ? kvm_sched_clock_read+0x18/0x40 [ 488.783105][ T31] ? _raw_spin_unlock+0x4d/0x70 [ 488.787980][ T31] ? finish_task_switch+0x16b/0x780 [ 488.793209][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 488.797908][ T31] ? __kasan_check_write+0x14/0x20 [ 488.803054][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 488.808529][ T31] ? detach_if_pending+0xf4/0x300 [ 488.813585][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 488.819409][ T31] ? del_timer_sync+0x144/0x1a0 [ 488.824306][ T31] kjournald2+0x44c/0x860 [ 488.828654][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 488.833880][ T31] ? io_schedule+0xe0/0xe0 [ 488.838312][ T31] ? __kasan_check_read+0x11/0x20 [ 488.843368][ T31] ? __kthread_parkme+0xac/0x200 [ 488.848327][ T31] ? preempt_count_add+0x90/0x1b0 [ 488.853383][ T31] kthread+0x411/0x500 [ 488.857468][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 488.862691][ T31] ? kthread_blkcg+0xd0/0xd0 [ 488.867301][ T31] ret_from_fork+0x1f/0x30 [ 488.871743][ T31] [ 489.081452][ T31] NMI backtrace for cpu 0 [ 489.085822][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 489.093029][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.103093][ T31] Call Trace: [ 489.106384][ T31] [ 489.109334][ T31] __dump_stack+0x21/0x30 [ 489.113855][ T31] dump_stack_lvl+0xee/0x150 [ 489.118593][ T31] ? show_regs_print_info+0x20/0x20 [ 489.123926][ T31] dump_stack+0x15/0x20 [ 489.128103][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 489.133052][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 489.138619][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 489.144810][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 489.149769][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 489.155860][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 489.161939][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 489.167939][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 489.173850][ T31] watchdog+0xd64/0xea0 [ 489.178026][ T31] ? hungtask_pm_notify+0x50/0x50 [ 489.183074][ T31] ? __kasan_check_read+0x11/0x20 [ 489.188113][ T31] ? __kthread_parkme+0xac/0x200 [ 489.193073][ T31] ? preempt_count_add+0x90/0x1b0 [ 489.198106][ T31] kthread+0x411/0x500 [ 489.202194][ T31] ? hungtask_pm_notify+0x50/0x50 [ 489.207239][ T31] ? kthread_blkcg+0xd0/0xd0 [ 489.211839][ T31] ret_from_fork+0x1f/0x30 [ 489.216272][ T31] [ 489.219401][ T31] Sending NMI from CPU 0 to CPUs 1: [ 489.224675][ C1] NMI backtrace for cpu 1 [ 489.224685][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 489.224701][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.224710][ C1] RIP: 0010:rcu_is_watching+0x4e/0xa0 [ 489.224730][ C1] Code: ff df 4c 8d 34 dd 40 58 e6 85 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ac 55 51 00 48 c7 c3 70 8c 03 00 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 2c 8b 03 65 ff 0d 11 [ 489.224743][ C1] RSP: 0018:ffffc900001d07a8 EFLAGS: 00000082 [ 489.224758][ C1] RAX: 1ffffffff0bccb09 RBX: ffff8881f7138c70 RCX: 970c062e5c210e00 [ 489.224770][ C1] RDX: ffffc90002c67db0 RSI: ffffffff85634920 RDI: ffffffff856348e0 [ 489.224782][ C1] RBP: ffffc900001d07c0 R08: ffffc900001d08f0 R09: ffffc900001d08e8 [ 489.224795][ C1] R10: 0000000000000014 R11: 1ffff9200003a105 R12: ffff888110613b40 [ 489.224806][ C1] R13: 0000000000000001 R14: ffffffff85e65848 R15: dffffc0000000000 [ 489.224818][ C1] FS: 00005555916ca500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 489.224832][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.224844][ C1] CR2: 0000000000000000 CR3: 00000001224d0000 CR4: 00000000003506a0 [ 489.224858][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 489.224867][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 489.224877][ C1] Call Trace: [ 489.224881][ C1] [ 489.224886][ C1] ? bpf_prog_7ba5217f62dcd359+0x38/0xa14 [ 489.224900][ C1] __kernel_text_address+0x76/0x100 [ 489.224928][ C1] unwind_get_return_address+0x4d/0x90 [ 489.224946][ C1] ? stack_trace_save+0xe0/0xe0 [ 489.224962][ C1] arch_stack_walk+0xee/0x140 [ 489.224980][ C1] ? bpf_prog_7ba5217f62dcd359+0x38/0xa14 [ 489.224992][ C1] stack_trace_save+0x98/0xe0 [ 489.225006][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 489.225021][ C1] ? __stack_depot_save+0x34/0x480 [ 489.225040][ C1] ? memset+0x35/0x40 [ 489.225056][ C1] __kasan_slab_alloc+0xbd/0xf0 [ 489.225070][ C1] ? __kasan_slab_alloc+0xbd/0xf0 [ 489.225083][ C1] ? slab_post_alloc_hook+0x4f/0x2b0 [ 489.225099][ C1] ? kmem_cache_alloc+0xf7/0x260 [ 489.225115][ C1] ? __sigqueue_alloc+0x137/0x210 [ 489.225130][ C1] ? __send_signal+0x212/0xc30 [ 489.225145][ C1] ? send_signal+0x422/0x580 [ 489.225160][ C1] ? do_send_sig_info+0xd6/0x210 [ 489.225175][ C1] ? group_send_sig_info+0x11a/0x3c0 [ 489.225190][ C1] ? do_bpf_send_signal+0x82/0x150 [ 489.225207][ C1] ? irq_work_run_list+0x169/0x240 [ 489.225222][ C1] ? irq_work_run+0x6a/0xf0 [ 489.225236][ C1] ? __sysvec_irq_work+0x63/0x1a0 [ 489.225254][ C1] ? sysvec_irq_work+0xa1/0xc0 [ 489.225271][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 489.225290][ C1] ? native_apic_msr_write+0x39/0x50 [ 489.225308][ C1] ? x2apic_send_IPI_self+0x5e/0x70 [ 489.225325][ C1] ? arch_irq_work_raise+0x86/0xd0 [ 489.225342][ C1] ? __irq_work_queue_local+0x115/0x190 [ 489.225357][ C1] ? irq_work_queue+0x9e/0x150 [ 489.225371][ C1] ? bpf_send_signal_common+0x2b2/0x420 [ 489.225387][ C1] ? bpf_send_signal+0x19/0x20 [ 489.225413][ C1] slab_post_alloc_hook+0x4f/0x2b0 [ 489.225430][ C1] ? should_failslab+0x9/0x20 [ 489.225445][ C1] ? __sigqueue_alloc+0x137/0x210 [ 489.225460][ C1] kmem_cache_alloc+0xf7/0x260 [ 489.225477][ C1] __sigqueue_alloc+0x137/0x210 [ 489.225493][ C1] __send_signal+0x212/0xc30 [ 489.225507][ C1] ? __kasan_check_write+0x14/0x20 [ 489.225524][ C1] send_signal+0x422/0x580 [ 489.225538][ C1] ? tcp_orphan_update+0x18d/0x1c0 [ 489.225593][ C1] do_send_sig_info+0xd6/0x210 [ 489.225609][ C1] group_send_sig_info+0x11a/0x3c0 [ 489.225624][ C1] ? __lock_task_sighand+0x100/0x100 [ 489.225641][ C1] do_bpf_send_signal+0x82/0x150 [ 489.225658][ C1] irq_work_run_list+0x169/0x240 [ 489.225673][ C1] ? irq_work_run+0xf0/0xf0 [ 489.225689][ C1] irq_work_run+0x6a/0xf0 [ 489.225703][ C1] __sysvec_irq_work+0x63/0x1a0 [ 489.225720][ C1] sysvec_irq_work+0xa1/0xc0 [ 489.225736][ C1] [ 489.225740][ C1] [ 489.225745][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 489.225761][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 489.225780][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 fa 76 3a 01 5d c3 0f 1f 84 00 00 00 00 [ 489.225792][ C1] RSP: 0018:ffffc90002c67c20 EFLAGS: 00000246 [ 489.225804][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 489.225814][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 489.225823][ C1] RBP: ffffc90002c67c20 R08: dffffc0000000000 R09: ffffed103ee265e7 [ 489.225835][ C1] R10: ffffed103ee265e7 R11: 1ffff1103ee265e6 R12: 0000000000000000 [ 489.225845][ C1] R13: dffffc0000000001 R14: ffffffff85e659f8 R15: dffffc0000000000 [ 489.225860][ C1] x2apic_send_IPI_self+0x5e/0x70 [ 489.225877][ C1] arch_irq_work_raise+0x86/0xd0 [ 489.225893][ C1] __irq_work_queue_local+0x115/0x190 [ 489.225909][ C1] irq_work_queue+0x9e/0x150 [ 489.225924][ C1] bpf_send_signal_common+0x2b2/0x420 [ 489.225940][ C1] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 489.225959][ C1] bpf_send_signal+0x19/0x20 [ 489.225974][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xa14 [ 489.225985][ C1] bpf_trace_run2+0xb0/0x1b0 [ 489.226001][ C1] ? bpf_trace_run1+0x1b0/0x1b0 [ 489.226017][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 489.226031][ C1] trace_sys_enter+0x3d/0x50 [ 489.226044][ C1] syscall_trace_enter+0x118/0x180 [ 489.226059][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 489.226073][ C1] do_syscall_64+0x24/0xa0 [ 489.226088][ C1] ? clear_bhb_loop+0x50/0xa0 [ 489.226101][ C1] ? clear_bhb_loop+0x50/0xa0 [ 489.226114][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 489.226131][ C1] RIP: 0033:0x7fc993c91829 [ 489.226143][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 489.226155][ C1] RSP: 002b:00007ffd56ca0f00 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 489.226170][ C1] RAX: ffffffffffffffda RBX: 00007fc993f4bfa8 RCX: 00007fc993c91829 [ 489.226181][ C1] RDX: 00007ffd56ca0f00 RSI: 00007ffd56ca1030 RDI: 0000000000000011 [ 489.226192][ C1] RBP: 0000000000000000 R08: 002c2913c7be074c R09: 0000000756ca178f [ 489.226202][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fc993f4bfac [ 489.226212][ C1] R13: 00007fc993f4bfa0 R14: 0000000000000095 R15: 0000000000000003 [ 489.226225][ C1] [ 513.961431][ T31] INFO: task kworker/u4:1:10 blocked for more than 229 seconds. [ 513.969111][ T31] Not tainted syzkaller #0 [ 514.161415][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.170126][ T31] task:kworker/u4:1 state:D stack:21248 pid: 10 ppid: 2 flags:0x00004000 [ 514.631424][ T31] Workqueue: netns cleanup_net [ 514.636257][ T31] Call Trace: [ 514.639547][ T31] [ 514.642520][ T31] __schedule+0xb6e/0x14c0 [ 514.646973][ T31] ? release_firmware_map_entry+0x190/0x190 [ 514.652897][ T31] ? __switch_to_asm+0x3a/0x60 [ 514.657684][ T31] ? kthread_data+0x50/0xc0 [ 514.662209][ T31] ? wq_worker_sleeping+0x60/0x200 [ 514.667345][ T31] schedule+0x11e/0x1e0 [ 514.671521][ T31] schedule_timeout+0xa6/0x2e0 [ 514.676296][ T31] ? console_conditional_schedule+0x30/0x30 [ 514.682214][ T31] ? __prepare_to_swait+0xa8/0x130 [ 514.687360][ T31] wait_for_common+0x26b/0x420 [ 514.692152][ T31] ? __kasan_check_write+0x14/0x20 [ 514.697301][ T31] ? wait_for_completion+0x20/0x20 [ 514.702434][ T31] ? mutex_unlock+0x89/0x220 [ 514.707058][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 514.712370][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 514.718195][ T31] ? check_flush_dependency+0xc4/0x370 [ 514.723689][ T31] wait_for_completion+0x18/0x20 [ 514.728641][ T31] flush_workqueue+0x5a6/0x12d0 [ 514.733520][ T31] ? flush_work+0x20/0x20 [ 514.737873][ T31] ? rcu_work_rcufn+0x50/0x50 [ 514.742582][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 514.748404][ T31] peer_remove_after_dead+0x98/0x1a0 [ 514.753717][ T31] wg_peer_remove_all+0x3e2/0x450 [ 514.758760][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 514.764370][ T31] wg_destruct+0x18e/0x300 [ 514.768808][ T31] ? wg_xmit+0xb20/0xb20 [ 514.773071][ T31] netdev_run_todo+0x773/0x990 [ 514.777853][ T31] ? netdev_refcnt_read+0x60/0x60 [ 514.782918][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 514.788912][ T31] ? list_netdevice+0x4c0/0x4c0 [ 514.793790][ T31] rtnl_unlock+0xe/0x10 [ 514.797979][ T31] default_device_exit_batch+0x335/0x390 [ 514.803645][ T31] ? default_device_exit+0x360/0x360 [ 514.808950][ T31] ? wait_woken+0x170/0x170 [ 514.813478][ T31] ? rtnl_unlock+0xe/0x10 [ 514.817838][ T31] ? default_device_exit+0x360/0x360 [ 514.823153][ T31] cleanup_net+0x602/0xad0 [ 514.827590][ T31] ? ops_init+0x4a0/0x4a0 [ 514.831958][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 514.837346][ T31] process_one_work+0x6be/0xba0 [ 514.842248][ T31] worker_thread+0xa59/0x1200 [ 514.846952][ T31] ? __kthread_parkme+0xac/0x200 [ 514.851914][ T31] kthread+0x411/0x500 [ 514.856000][ T31] ? worker_clr_flags+0x190/0x190 [ 514.861040][ T31] ? kthread_blkcg+0xd0/0xd0 [ 514.865656][ T31] ret_from_fork+0x1f/0x30 [ 514.870094][ T31] [ 514.911458][ T31] INFO: task jbd2/sda1-8:64 blocked for more than 209 seconds. [ 514.919040][ T31] Not tainted syzkaller #0 [ 515.241447][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.250173][ T31] task:jbd2/sda1-8 state:D stack:24992 pid: 64 ppid: 2 flags:0x00004000 [ 515.601426][ T31] Call Trace: [ 515.604756][ T31] [ 515.607698][ T31] __schedule+0xb6e/0x14c0 [ 515.612196][ T31] ? release_firmware_map_entry+0x190/0x190 [ 515.618103][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 515.623603][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 515.628296][ T31] ? submit_bh_wbc+0x599/0x670 [ 515.633090][ T31] schedule+0x11e/0x1e0 [ 515.637262][ T31] io_schedule+0x84/0xe0 [ 515.641525][ T31] bit_wait_io+0x13/0xd0 [ 515.645778][ T31] out_of_line_wait_on_bit+0x15a/0x200 [ 515.651247][ T31] ? bit_wait+0xd0/0xd0 [ 515.655428][ T31] ? __wait_on_bit+0x180/0x180 [ 515.660208][ T31] ? bit_waitqueue+0x30/0x30 [ 515.664850][ T31] ? _raw_write_trylock+0x140/0x140 [ 515.670081][ T31] __wait_on_buffer+0x7c/0x90 [ 515.674792][ T31] jbd2_journal_commit_transaction+0x34ec/0x55f0 [ 515.681150][ T31] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 515.687937][ T31] ? __switch_to+0x51d/0xe20 [ 515.692556][ T31] ? compat_start_thread+0x20/0x20 [ 515.697680][ T31] ? kvm_sched_clock_read+0x18/0x40 [ 515.702910][ T31] ? _raw_spin_unlock+0x4d/0x70 [ 515.707786][ T31] ? finish_task_switch+0x16b/0x780 [ 515.713016][ T31] ? _raw_spin_lock+0xe0/0xe0 [ 515.717713][ T31] ? __kasan_check_write+0x14/0x20 [ 515.722851][ T31] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 515.728374][ T31] ? detach_if_pending+0xf4/0x300 [ 515.733421][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 515.739244][ T31] ? del_timer_sync+0x144/0x1a0 [ 515.744119][ T31] kjournald2+0x44c/0x860 [ 515.748470][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 515.753688][ T31] ? io_schedule+0xe0/0xe0 [ 515.758121][ T31] ? __kasan_check_read+0x11/0x20 [ 515.763215][ T31] ? __kthread_parkme+0xac/0x200 [ 515.768173][ T31] ? preempt_count_add+0x90/0x1b0 [ 515.773222][ T31] kthread+0x411/0x500 [ 515.777309][ T31] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 515.782533][ T31] ? kthread_blkcg+0xd0/0xd0 [ 515.787143][ T31] ret_from_fork+0x1f/0x30 [ 515.791590][ T31] [ 515.931404][ T31] NMI backtrace for cpu 0 [ 515.935780][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 515.942997][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 515.953061][ T31] Call Trace: [ 515.956345][ T31] [ 515.959287][ T31] __dump_stack+0x21/0x30 [ 515.963633][ T31] dump_stack_lvl+0xee/0x150 [ 515.968235][ T31] ? show_regs_print_info+0x20/0x20 [ 515.973451][ T31] dump_stack+0x15/0x20 [ 515.977624][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 515.982946][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 515.988508][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 515.994677][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 515.999625][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 516.005714][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 516.011792][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 516.017784][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 516.023688][ T31] watchdog+0xd64/0xea0 [ 516.027861][ T31] ? hungtask_pm_notify+0x50/0x50 [ 516.032897][ T31] ? __kasan_check_read+0x11/0x20 [ 516.037937][ T31] ? __kthread_parkme+0xac/0x200 [ 516.042888][ T31] ? preempt_count_add+0x90/0x1b0 [ 516.047922][ T31] kthread+0x411/0x500 [ 516.052012][ T31] ? hungtask_pm_notify+0x50/0x50 [ 516.057050][ T31] ? kthread_blkcg+0xd0/0xd0 [ 516.061662][ T31] ret_from_fork+0x1f/0x30 [ 516.066092][ T31] [ 516.069207][ T31] Sending NMI from CPU 0 to CPUs 1: [ 516.074433][ C1] NMI backtrace for cpu 1 [ 516.074442][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 516.074458][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.074467][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x80 [ 516.074491][ C1] Code: e0 a9 99 7e 65 8b 15 e1 a9 99 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 5c 0b 00 00 00 74 4e 8b 91 38 0b 00 00 <83> fa 03 75 43 48 8b 91 40 0b 00 00 44 8b 89 3c 0b 00 00 49 c1 e1 [ 516.074505][ C1] RSP: 0018:ffffc90002c67b08 EFLAGS: 00000046 [ 516.074520][ C1] RAX: ffffffff81403a41 RBX: ffff888110613b40 RCX: ffff888110613b40 [ 516.074533][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.074542][ C1] RBP: ffffc90002c67b08 R08: 0000000000000001 R09: 0000000000000118 [ 516.074553][ C1] R10: 0000000003bd1629 R11: 1ffff9200058cec9 R12: dffffc0000000000 [ 516.074565][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffffffffffff [ 516.074575][ C1] FS: 00005555916ca500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 516.074590][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.074601][ C1] CR2: 0000000000000000 CR3: 00000001224d0000 CR4: 00000000003506a0 [ 516.074615][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.074624][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 516.074634][ C1] Call Trace: [ 516.074638][ C1] [ 516.074643][ C1] recalc_sigpending+0x111/0x230 [ 516.074660][ C1] dequeue_signal+0xc1/0x440 [ 516.074677][ C1] get_signal+0x696/0x1480 [ 516.074696][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 516.074715][ C1] ? load_gs_index+0xb0/0xb0 [ 516.074730][ C1] ? get_sigframe_size+0x10/0x10 [ 516.074749][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 516.074765][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 516.074780][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 516.074796][ C1] do_syscall_64+0x58/0xa0 [ 516.074813][ C1] ? clear_bhb_loop+0x50/0xa0 [ 516.074827][ C1] ? clear_bhb_loop+0x50/0xa0 [ 516.074840][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 516.074859][ C1] RIP: 0033:0x7fc993cf5749 [ 516.074873][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.074885][ C1] RSP: 002b:00007ffd56ca1498 EFLAGS: 00000246 [ 516.074897][ C1] RAX: 0000000000000000 RBX: 00007fc993f4bfa8 RCX: 00007fc993cf5749 [ 516.074908][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc993f4bfac [ 516.074918][ C1] RBP: 0000000000000000 R08: 002c2913c7be074c R09: 0000000756ca178f [ 516.074929][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fc993f4bfac [ 516.074939][ C1] R13: 00007fc993f4bfa0 R14: 0000000000000095 R15: 0000000000000003 [ 516.074952][ C1] [ 540.191389][ T31] INFO: task kworker/u4:1:10 blocked for more than 255 seconds. [ 540.199072][ T31] Not tainted syzkaller #0 [ 540.411379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.420100][ T31] task:kworker/u4:1 state:D stack:21248 pid: 10 ppid: 2 flags:0x00004000 [ 540.861420][ T31] Workqueue: netns cleanup_net [ 540.866277][ T31] Call Trace: [ 540.869568][ T31] [ 540.872536][ T31] __schedule+0xb6e/0x14c0 [ 540.876979][ T31] ? release_firmware_map_entry+0x190/0x190 [ 540.882933][ T31] ? __switch_to_asm+0x3a/0x60 [ 540.887713][ T31] ? kthread_data+0x50/0xc0 [ 540.892245][ T31] ? wq_worker_sleeping+0x60/0x200 [ 540.897386][ T31] schedule+0x11e/0x1e0 [ 540.901578][ T31] schedule_timeout+0xa6/0x2e0 [ 540.906362][ T31] ? console_conditional_schedule+0x30/0x30 [ 540.912322][ T31] ? __prepare_to_swait+0xa8/0x130 [ 540.917451][ T31] wait_for_common+0x26b/0x420 [ 540.922244][ T31] ? __kasan_check_write+0x14/0x20 [ 540.927382][ T31] ? wait_for_completion+0x20/0x20 [ 540.932528][ T31] ? mutex_unlock+0x89/0x220 [ 540.937131][ T31] ? __mutex_lock_slowpath+0x10/0x10 [ 540.942450][ T31] ? flush_workqueue_prep_pwqs+0x424/0x480 [ 540.948403][ T31] ? check_flush_dependency+0xc4/0x370 [ 540.953894][ T31] wait_for_completion+0x18/0x20 [ 540.958852][ T31] flush_workqueue+0x5a6/0x12d0 [ 540.963727][ T31] ? flush_work+0x20/0x20 [ 540.968084][ T31] ? rcu_work_rcufn+0x50/0x50 [ 540.972787][ T31] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 540.978614][ T31] peer_remove_after_dead+0x98/0x1a0 [ 540.983942][ T31] wg_peer_remove_all+0x3e2/0x450 [ 540.988985][ T31] ? peer_remove_after_dead+0x1a0/0x1a0 [ 540.994562][ T31] wg_destruct+0x18e/0x300 [ 540.998992][ T31] ? wg_xmit+0xb20/0xb20 [ 541.003266][ T31] netdev_run_todo+0x773/0x990 [ 541.008059][ T31] ? netdev_refcnt_read+0x60/0x60 [ 541.013121][ T31] ? unregister_netdevice_queue+0x1aa/0x360 [ 541.019035][ T31] ? list_netdevice+0x4c0/0x4c0 [ 541.023910][ T31] rtnl_unlock+0xe/0x10 [ 541.028078][ T31] default_device_exit_batch+0x335/0x390 [ 541.033750][ T31] ? default_device_exit+0x360/0x360 [ 541.039064][ T31] ? wait_woken+0x170/0x170 [ 541.043612][ T31] ? rtnl_unlock+0xe/0x10 [ 541.047964][ T31] ? default_device_exit+0x360/0x360 [ 541.053308][ T31] cleanup_net+0x602/0xad0 [ 541.057745][ T31] ? ops_init+0x4a0/0x4a0 [ 541.062128][ T31] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 541.067521][ T31] process_one_work+0x6be/0xba0 [ 541.072405][ T31] worker_thread+0xa59/0x1200 [ 541.077111][ T31] ? __kthread_parkme+0xac/0x200 [ 541.082097][ T31] kthread+0x411/0x500 [ 541.086182][ T31] ? worker_clr_flags+0x190/0x190 [ 541.091369][ T31] ? kthread_blkcg+0xd0/0xd0 [ 541.095978][ T31] ret_from_fork+0x1f/0x30 [ 541.100410][ T31] [ 541.171453][ T31] NMI backtrace for cpu 0 [ 541.175934][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 [ 541.183241][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.193308][ T31] Call Trace: [ 541.196593][ T31] [ 541.199525][ T31] __dump_stack+0x21/0x30 [ 541.203865][ T31] dump_stack_lvl+0xee/0x150 [ 541.208469][ T31] ? show_regs_print_info+0x20/0x20 [ 541.213691][ T31] dump_stack+0x15/0x20 [ 541.217855][ T31] nmi_cpu_backtrace+0x2b4/0x2c0 [ 541.222801][ T31] ? rcu_read_unlock_special+0xab/0x460 [ 541.228363][ T31] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 541.234553][ T31] ? __rcu_read_unlock+0xa0/0xa0 [ 541.239518][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 541.245595][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 541.251678][ T31] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 541.257686][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 541.263593][ T31] watchdog+0xd64/0xea0 [ 541.267760][ T31] ? hungtask_pm_notify+0x50/0x50 [ 541.272786][ T31] ? __kasan_check_read+0x11/0x20 [ 541.277820][ T31] ? __kthread_parkme+0xac/0x200 [ 541.282761][ T31] ? preempt_count_add+0x90/0x1b0 [ 541.287787][ T31] kthread+0x411/0x500 [ 541.291860][ T31] ? hungtask_pm_notify+0x50/0x50 [ 541.296897][ T31] ? kthread_blkcg+0xd0/0xd0 [ 541.301512][ T31] ret_from_fork+0x1f/0x30 [ 541.305943][ T31] [ 541.309063][ T31] Sending NMI from CPU 0 to CPUs 1: [ 541.314299][ C1] NMI backtrace for cpu 1 [ 541.314308][ C1] CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0 [ 541.314325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.314334][ C1] RIP: 0010:__dequeue_signal+0x7a/0x5c0 [ 541.314355][ C1] Code: 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 02 eb 66 00 4c 8b 33 49 f7 d6 4c 89 e6 4c 21 f6 <31> db 31 ff e8 7d 6c 28 00 4d 21 e6 74 3d 44 89 f3 81 e3 d8 04 00 [ 541.314368][ C1] RSP: 0018:ffffc90002c67ae8 EFLAGS: 00000006 [ 541.314383][ C1] RAX: 1ffff110220c2871 RBX: ffff888110614388 RCX: dffffc0000000000 [ 541.314396][ C1] RDX: 0000000000000000 RSI: 0000000000010000 RDI: ffff88810ec01440 [ 541.314406][ C1] RBP: ffffc90002c67b40 R08: 0000000000000004 R09: 0000000000000003 [ 541.314417][ C1] R10: fffff5200058cf68 R11: 1ffff9200058cf68 R12: 0000000000010000 [ 541.314428][ C1] R13: ffff88810ec01440 R14: ffffffffffffffff R15: ffff88810ec01450 [ 541.314441][ C1] FS: 00005555916ca500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 541.314455][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.314466][ C1] CR2: 0000000000000000 CR3: 00000001224d0000 CR4: 00000000003506a0 [ 541.314480][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.314489][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.314499][ C1] Call Trace: [ 541.314503][ C1] [ 541.314510][ C1] dequeue_signal+0xa0/0x440 [ 541.314533][ C1] get_signal+0x696/0x1480 [ 541.314552][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 541.314571][ C1] ? load_gs_index+0xb0/0xb0 [ 541.314586][ C1] ? get_sigframe_size+0x10/0x10 [ 541.314605][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 541.314621][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 541.314636][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 541.314652][ C1] do_syscall_64+0x58/0xa0 [ 541.314669][ C1] ? clear_bhb_loop+0x50/0xa0 [ 541.314683][ C1] ? clear_bhb_loop+0x50/0xa0 [ 541.314697][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 541.314716][ C1] RIP: 0033:0x7fc993cf5749 [ 541.314730][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.314742][ C1] RSP: 002b:00007ffd56ca1498 EFLAGS: 00000246 [ 541.314754][ C1] RAX: 0000000000000000 RBX: 00007fc993f4bfa8 RCX: 00007fc993cf5749 [ 541.314765][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc993f4bfac [ 541.314775][ C1] RBP: 0000000000000000 R08: 002c2913c7be074c R09: 0000000756ca178f [ 541.314786][ C1] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fc993f4bfac [ 541.314796][ C1] R13: 00007fc993f4bfa0 R14: 0000000000000095 R15: 0000000000000003 [ 541.314822][ C1]